July 2013 - Core-sysadmins - mailman3.cels.anl.gov

Fwd: [mcs-systems #171032] something hanging on login3.mcs.anl.gov
by Dan Olson 07 Jul '13

07 Jul '13

I would poke this vm, but I don't have my cryptocard conveniently around. If someone has a chance, I think this is on vserver7 or in the vmlist in /tmp on enterprise. A virsh destroy / start should fix. ----- Forwarded Message ----- From: "Gene Rackow" <rackow(a)anl.gov> To: system(a)mcs.anl.gov Sent: Sunday, July 7, 2013 6:11:50 PM Subject: [mcs-systems #171032] something hanging on login3.mcs.anl.gov It appears login3 is hung. It pings and does an SSH connect, but nothing beyond that. --Gene

2 1

Fwd: YubiApp future?
by Dan Olson 05 Jul '13

05 Jul '13

Please see instructions below for the iPhone Yubi, up to version 4. I'm going to see if this works on the iPad. ----- Forwarded Message ----- From: "David Maples" <david(a)yubico.com> To: dolson(a)mcs.anl.gov Cc: "Terry Shofner" <terry.shofner(a)yubico.com>, "Kurt Lennartsson" <kurt(a)yubico.com> Sent: Friday, July 5, 2013 3:59:25 PM Subject: Re: FW: YubiApp future? Hello Dan! You can download the current version of the YubiApp (which works up to the iPhone4) from the Apple Web store at: https://itunes.apple.com/us/app/yubiapp/id586890745?mt=8 . We are working on a version compatible with the iPhone5, which should be released later this year. You will need to enable the YubiApp functionality on your instance of YubiRADIUS for it to work - There are step-by-step instructions in the YubiRADIUS Manual, Appendix 6: YubiApp Registration - http://www.yubico.com/wp-content/uploads/2012/12/YubiRADIUS_Virtual_Applian… I am making the assumption you are already using YubiRADIUS. If that is not the case, please let us know. In the meantime, you can download YubiRADIUS from our website at: http://www.yubico.com/products/services-software/yubiradius/download/ Please let us know if you have any questions! -David Maples Yubico Technical Support www.Yubico.com From: Terry Shofner [mailto: terry.shofner(a)yubico.com Look up in SalesforceLook up in Salesforce] Sent: Wednesday, July 03, 2013 2:45 PM To: Dan Olson Cc: Kurt Lennartsson; David Maples Subject: Re: YubiApp future? Dan, Good to hear, I'll ask Kurt and David to step in with you for the iOS fix. -Terry On Wed, Jul 3, 2013 at 3:40 PM, Dan Olson < dolson(a)mcs.anl.gov Look up in SalesforceLook up in Salesforce> wrote: Terry, thanks for the quick reply. We would like to demo / deploy the iPhone YubiApp, can you provide us with a copy? We have a significant about of users on our legacy 2FA solution, and enabling ios devices is one of the key issues in expanding our YubiKey environment. ----- Original Message ----- > From: "Terry Shofner" < terry.shofner(a)yubico.com Look up in SalesforceLook up in Salesforce> > To: "Dan Olson" < dolson(a)mcs.anl.gov Look up in SalesforceLook up in Salesforce>, "Kurt Lennartsson" < kurt(a)yubico.com Look up in SalesforceLook up in Salesforce>, "David Maples" < dmaples(a)yubico.com Look up in SalesforceLook up in Salesforce> > Sent: Wednesday, July 3, 2013 4:15:18 PM > Subject: Re: YubiApp future? > > > Hello Dan, > > > For starters, the YubiApp for the iPhone, is software solution we > make available at no charge for customers than use a lot of > YubiKeys. Of course Argonne Labs qualifies. We don't market the > product because we aren't selling it, at least not now. We don't > address the end of life point you made, but my guess is it will be > around for some time, as we have a lot of banks using the solution > to round out the 2FA compliance requirements. > > > It is what we suggest for the iPhone users, at least until Apple > catches up with the other smart phone companies that have and have > had NFC, provisioned in their devices. That of course is all the > other mfgrs, other than Apple! :-) > > > I've copied my technical associates, Kurt Lennartsson and David > Maples for comment re what iPhones to match to YubiApp. I'll ask > Kurt to embellish on my comments. > > > One last thing, when and if Apple adds NFC to their devices, then we > should be out of box ready with the new YubiKey NEO, as we are with > the rest of the smart phone world. Kurt - can you please comment? > > > -Terry > > > > > > On Wed, Jul 3, 2013 at 2:55 PM, Dan Olson < dolson(a)mcs.anl.gov Look up in SalesforceLook up in Salesforce> > wrote: > > > Hi Terry, > > We're currently deploying yubikey tokens to our users. We have > several users who would like to use their > IPhone's to authenticate. It seems like the YubiApp isn't really > being marketed on the website. > > Is the YubiApp going to be around long term? Is this what we should > recommend our users use for IOS access to > our systems? > > ---- > Daniel Murphy-Olson > Systems Administrator > Mathematics & Computer Science Division > Argonne National Laboratory > 630-252-0055 > > > > > > -- > > > Terry Shofner I Yubico | VP Sales, Americas & Asia Pacific > > Direct: (303) 679-0045 > Mobile: (303) 717-3532 > Skype: terry.shofner > Email: terry.shofner(a)yubico.com Look up in SalesforceLook up in Salesforce > > > www: http://yubico.com > store: http://store.yubico.com > twitter: http://twitter.com/yubico -- Terry Shofner I Yubico | VP Sales, Americas & Asia Pacific Direct: (303) 679-0045 Mobile: (303) 717-3532 Skype: terry.shofner Email: terry.shofner(a)yubico.com Look up in SalesforceLook up in Salesforce www: http://yubico.com store: http://store.yubico.com twitter: http://twitter.com/yubico

1 0

Fwd: YubiApp future?
by Dan Olson 03 Jul '13

03 Jul '13

FYI ----- Forwarded Message ----- From: "Terry Shofner" <terry.shofner(a)yubico.com> To: "Dan Olson" <dolson(a)mcs.anl.gov>, "Kurt Lennartsson" <kurt(a)yubico.com>, "David Maples" <dmaples(a)yubico.com> Sent: Wednesday, July 3, 2013 4:15:18 PM Subject: Re: YubiApp future? Hello Dan, For starters, the YubiApp for the iPhone, is software solution we make available at no charge for customers than use a lot of YubiKeys. Of course Argonne Labs qualifies. We don't market the product because we aren't selling it, at least not now. We don't address the end of life point you made, but my guess is it will be around for some time, as we have a lot of banks using the solution to round out the 2FA compliance requirements. It is what we suggest for the iPhone users, at least until Apple catches up with the other smart phone companies that have and have had NFC, provisioned in their devices. That of course is all the other mfgrs, other than Apple! :-) I've copied my technical associates, Kurt Lennartsson and David Maples for comment re what iPhones to match to YubiApp. I'll ask Kurt to embellish on my comments. One last thing, when and if Apple adds NFC to their devices, then we should be out of box ready with the new YubiKey NEO, as we are with the rest of the smart phone world. Kurt - can you please comment? -Terry On Wed, Jul 3, 2013 at 2:55 PM, Dan Olson <dolson(a)mcs.anl.gov> wrote: > Hi Terry, > > We're currently deploying yubikey tokens to our users. We have several > users who would like to use their > IPhone's to authenticate. It seems like the YubiApp isn't really being > marketed on the website. > > Is the YubiApp going to be around long term? Is this what we should > recommend our users use for IOS access to > our systems? > > ---- > Daniel Murphy-Olson > Systems Administrator > Mathematics & Computer Science Division > Argonne National Laboratory > 630-252-0055 > > -- Terry Shofner I Yubico | VP Sales, Americas & Asia Pacific Direct: (303) 679-0045 Mobile: (303) 717-3532 Skype: terry.shofner Email: terry.shofner(a)yubico.com www: http://yubico.com store: http://store.yubico.com twitter: http://twitter.com/yubico

3 2

usagedb refresh
by Ken Raffenetti 03 Jul '13

03 Jul '13

Stu, The server that houses the usagedb database is at 85% full. /dev/sdb1 4.9T 3.9T 746G 85% /var/lib The hardware is from 2009 and is out of support. If this is still to be housed at MCS, we need to start the process of procuring a new machine. Can you help us with that? -- Ken Raffenetti Systems Administration Associate MCS Division - Argonne National Laboratory

3 7

YubiApp
by Craig Stacey 03 Jul '13

03 Jul '13

I was looking to put the docs on setting up Yubi on an android device on the Sharepoint wiki and decided to do some poking to see if Yubi had changed anything. These days, it's nigh impossible to find a link to the YubiApp on their webpages. They make mention of it on some of their pages, but it looks to me like they've thrown all their effort into using the YubiNeo instead. This is all well and good if you have an NFC-enabled device (and I do), but it makes me wonder if they're going to continue development on the soft key. This is relevant for iPhones especially, which don't have NFC at the moment. iPhone users can plug in via the USB dongle, that means they'd need to carry around the YubiKey and the USB dongle (which for the lightning devices is pretty big). It also means that anyone who would want to use an NFC-enabled yubikey would have a higher per-token cost. I sure hope the next iPhone has NFC. I don't consider these showstoppers, but they are things to be aware of. Any time I mention Yubi as a replacement I always get people pointing to their iPhones as something they'd want to use as either a method of gaining access or, more frequently, a method of producing the OTP itself. -- Craig

1 1

User docs (and systems docs)
by Craig Stacey 03 Jul '13

03 Jul '13

Meant to send this earlier. John and I were at one point discussing moving the MCS user docs to a wordpress site instead of the existing Mediawiki. We'd talked about setting up a new site, but after a similar discussion with Max, it seems like the more obvious solution is to turn virtualhelpdesk.mcs.anl.gov (aka press3.mcs.anl.gov/virtualhelpdesk) into that site. So the site's already in place, and what remains now is to turn it into a source for docs. At this point, if you're updating user-facing docs, I'd recommend making a new page in the wordpress site, getting it up to date, then changing the wiki link to point at that. This is similar to what we're doing for internal facing docs -- changing the links in the Systems Wiki (mediawiki) to point to the Sharepoint wiki. -- Craig

1 0

Website content management ...
by Max Trefonides 03 Jul '13

03 Jul '13

Hi Beth, I'm trying to reduce the number of lies, (there will always be a few) that we propagate in our documentation. Can you take a look at this page: http://wiki.mcs.anl.gov/IT/index.php/CELS_Website_Content_Management_Tools And point out the lies, damn lies and statistics that need changing? Thanks -- Max Trefonides MCS Systems maxadam(a)mcs.anl.gov

3 2

late
by Dan Olson 02 Jul '13

02 Jul '13

running a little late. I should make the sync. ---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055

1 0

Argonne Username Change Draft
by Craig Stacey 01 Jul '13

01 Jul '13

Hi. As announced on May 21, we've got a change coming in MCS accounts. You can see the details here if you've forgotten: http://mcssys.wordpress.com/2013/05/21/some-upcoming-changes-you-may-have-h… The short version is that we're getting rid of the concept of "MCS accounts" and you will use your Argonne account to login to MCS resources beginning later this year. Our first pass at making this change go smoothly is identifying users whose MCS username and Argonne username currently differ and fixing those differences. You're getting this note because we've identified you as one of those users. The good news (at least, as far as we're concerned) is that your MCS username is available as an Argonne username. Ideally, the way we'd like to handle as many of these as we can is to have the Argonne username change to match the MCS username, since you probably have a lot of history in your MCS username (your home directory, the login you use most frequently, etc.). Once those are done, we'll deal with users who have differing usernames, but the MCS name is not available. Now, since we've identified you as someone whose username is currently available, we'd like to get that taken care of as quickly as possible, lest it cease to be available. The best and quickest way to handle this is for us to change these in bulk. We'll be doing the batch that includes your account on July 22. We'll send you a note to remind you before, and a note once it's done. Once this is changed, you'll need to use that username for any Argonne logins (inside.anl.gov, kronos, etc.) The passwords will still be technically separate for now, but that will be solved when we make the final switch to Argonne accounts for everything. After July 22, we recommend you change both your MCS and Argonne passwords at the same time, and have them match up. This way, when we do make the switch, you won't even notice the switch since you'll already be using the same username and password you'll be using going forward. We'll send instructions on how and when to change your passwords with the "all clear" note. If, for some reason, you really don't want to use your current MCS username as your Argonne username, let us know before July 22 and we'll see what options are available to you. Likewise, if you have any questions, please feel free to contact me or send a note to systems(a)mcs.anl.gov. -- Craig

4 7