[Halld-online] Fwd: Access to Hall D networks

[Elliott Wolin]

-------- Original Message --------
Subject: 	Access to Hall D networks
Date: 	Mon, 19 Nov 2012 15:25:15 -0500 (EST)
From: 	Kelvin Edwards <kelvin at jlab.org>
To: 	Hovanes Egiyan <hovanes at jlab.org>, Elliott Wolin <wolin at jlab.org>
CC: 	Andy Kowalski <kowalski at jlab.org>, Paul Letta <letta at jlab.org>, 
Sherman White <srwhite at jlab.org>, Bryan Hess <bhess at jlab.org>



All,

As we are building out the new Hall D networks, we would like to implement the Lab's remote
access policy.  Doing this requires that we limit the ability to login to systems on the
internal Hall D networks directly and, instead, route all ssh access through a 2-factored
login system.

I've currently configured the 2-factor login system, hallgw.jlab.org, and would like anyone
that needs to login remotely to any system on the Hall D networks (currently only gluon02-5)
to let me know.  I'll get with the IT Helpdesk to get a 2-factor Cryptocard token created
for you.  Once you have the token, please start using the hallgw system for logins instead
of logging in directly.  For example, instead of logging in to gluon02 directly, first login
to hallgw using your 2-factor token, and then ssh to gluon02.

I would like to shut off direct access to the Hall D networks (Hall D Controls and Hall D DAQ/General)
during tomorrow evening's CNI Maintenance period.  Please let me know if this schedule will
work.  Thanks.

-- kelvin




-- 

				Sincerely,
					Elliott


================================================================================


  Those raised in a morally relative or neutral environment will hold
		    no truths to be self-evident.
				

Elliott Wolin
Staff Physicist, Jefferson Lab
12000 Jefferson Ave
Suite 8 MS 12A1
Newport News, VA 23606
757-269-7365

================================================================================

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.jlab.org/pipermail/halld-online/attachments/20121119/c889e97c/attachment.html