Computer Documentation Wiki - lion:2fa

computer

Anonymous (anonymous@undisclosed.example.com) — 2021-03-22T16:16:31+00:00

First Time Access With a Personal Computer If you don not have a Smart Phone, or if you do not want to use a Smart Phone, you can use alternative programs to provide the passcode needed for 2FA. A few of these programs are: * KeepassXC ( GUI) or,

console

Anonymous (anonymous@undisclosed.example.com) — 2021-09-17T16:02:23+00:00

Console and RDP login with 2FA When you have enrolled into DUO, your desktop computer will ask you for the 2FA info with an extra 'login' window, much like you are used to with Webmail: You either choose the push or passcode method. After successful authetication, you are continued with the login process to your desktop Windows environment.

continued

Anonymous (anonymous@undisclosed.example.com) — 2021-03-22T19:52:40+00:00

First Time Access Remaining Setup The Identity Provider will then present you a window explaining that an email has been sent to your 'private email box'. This email contains a link (yes, indeed it is a clickable link, which is necessary as the security key provided is too complicated to type it in. But you should make sure that the link is pointing to our

enroll

Anonymous (anonymous@undisclosed.example.com) — 2025-09-02T10:34:03+00:00

Enroll in DUO You have to enroll the two factor authentication (2FA) DUO. Note that in order to use the DUO app you need to have a modern OS version on your Smart Phone: * Android 8.0 or greater * IOS 12.0 or greater If your Smart Phone is running an older

introduction

Anonymous (anonymous@undisclosed.example.com) — 2021-09-22T11:25:53+00:00

Introduction Why After the recent increase in hacker activity and floods of phishing emails, it is clear that the Observatory Compute environment is under constant attack. One of the major deficiencies in our current setup is that it is enough to know a username and password to get access to a wide variety of resources and data. With the improper handling of phishing emails, but also when using public wifi services, it seems easy for people with not so good intentions to get account credential…

oldvpn

Anonymous (anonymous@undisclosed.example.com) — 2021-09-20T06:24:25+00:00

OLD VPN Connection To NEW with DUO Open Control Panel by typing control panel in the search bar Open the Network and Sharing Center Click on Right click the name of your: VPN Connection LION, LION-VPN, Universiteit Leiden and select Properties

rdp_via_vpn

Anonymous (anonymous@undisclosed.example.com) — 2021-09-17T14:32:33+00:00

Remote Desktop using VPN With VPN your home desktop or laptop becomes part of the physics network, so security wise your machine is inside the building. This allows you to do things like accessing your desktop directly (without the use of Tunnelier). Here we describe how to Remote Desktop for:

smartphone

Anonymous (anonymous@undisclosed.example.com) — 2021-03-22T20:43:11+00:00

First Time Access With a Smart Phone First of all, you need to install an APP on your Smart Phone which will record a secret key that we provide to you, and which will also produce the passcodes for 2FA. You can download the FreeOTP, Google Authenticator

ssh

Anonymous (anonymous@undisclosed.example.com) — 2021-09-17T16:03:51+00:00

ssh & 2FA Information will follow.

vpn

Anonymous (anonymous@undisclosed.example.com) — 2021-09-17T14:10:46+00:00

VPN & 2FA VPN (Virtual Private Network) allows you to hook up your personal desktop or laptop into the PHYSICS network as if it was part of the local network. So when you need access to systems or devices that are not visible to the outside world you use VPN. See

webaccess

Anonymous (anonymous@undisclosed.example.com) — 2021-09-15T07:58:35+00:00

Normal 2FA WEB based access Standard DUO App setup After successful enrollment into DUO each time you access a 2FA protected WEB system, you are presented the below authentication options for normal DUO App users: The easiest mechanism is the push mechanism were you only have to hit the approve button in the DUO app on your smart phone to login. The passcode can be obtained by clicking the created LION entry in the DUO app. It will show a six digit code that you can enter in above window, se…

yubekey

Anonymous (anonymous@undisclosed.example.com) — 2021-09-13T07:38:53+00:00

YubiKey and 2FA