<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-forward-container"><br>
<br>
-------- Original Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject:
</th>
<td>Access to Hall D networks</td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th>
<td>Mon, 19 Nov 2012 15:25:15 -0500 (EST)</td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th>
<td>Kelvin Edwards <a class="moz-txt-link-rfc2396E" href="mailto:kelvin@jlab.org"><kelvin@jlab.org></a></td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th>
<td>Hovanes Egiyan <a class="moz-txt-link-rfc2396E" href="mailto:hovanes@jlab.org"><hovanes@jlab.org></a>, Elliott Wolin
<a class="moz-txt-link-rfc2396E" href="mailto:wolin@jlab.org"><wolin@jlab.org></a></td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">CC: </th>
<td>Andy Kowalski <a class="moz-txt-link-rfc2396E" href="mailto:kowalski@jlab.org"><kowalski@jlab.org></a>, Paul Letta
<a class="moz-txt-link-rfc2396E" href="mailto:letta@jlab.org"><letta@jlab.org></a>, Sherman White
<a class="moz-txt-link-rfc2396E" href="mailto:srwhite@jlab.org"><srwhite@jlab.org></a>, Bryan Hess
<a class="moz-txt-link-rfc2396E" href="mailto:bhess@jlab.org"><bhess@jlab.org></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>All,
As we are building out the new Hall D networks, we would like to implement the Lab's remote
access policy. Doing this requires that we limit the ability to login to systems on the
internal Hall D networks directly and, instead, route all ssh access through a 2-factored
login system.
I've currently configured the 2-factor login system, hallgw.jlab.org, and would like anyone
that needs to login remotely to any system on the Hall D networks (currently only gluon02-5)
to let me know. I'll get with the IT Helpdesk to get a 2-factor Cryptocard token created
for you. Once you have the token, please start using the hallgw system for logins instead
of logging in directly. For example, instead of logging in to gluon02 directly, first login
to hallgw using your 2-factor token, and then ssh to gluon02.
I would like to shut off direct access to the Hall D networks (Hall D Controls and Hall D DAQ/General)
during tomorrow evening's CNI Maintenance period. Please let me know if this schedule will
work. Thanks.
-- kelvin
</pre>
<br>
<br>
</div>
<br>
</body>
</html>