Re: Who is on V7R6?

Rob Berendt <[email protected]> Fri, 10 Jul 2026 09:00:28 -0400
Newsgroups gmane.comp.hardware.ibm.midrange
Message-ID <CAPJ+qQP7GBKkyLpmsTqTDMNC=O7fMTseK3m=1rDcVtZ=nVfo5A@mail.gmail.com>
Just to toss in a squirrel for distraction...
CHGUSRPRF
Authentication methods . . . . .   *NONE         *SAME, *NONE, *TOTP,
*REGFAC
*TOTP is the built in method.
*REGFAC is basically a method for tool vendors to provide an alternative
for those who insist upon text messages, email, push notifications, etc.
You (or the vendor) writes a program that is used within WRKREGINF to
handle the MFA.

Some advantages of *TOTP.
- No vendor or additional programming required
- Will work when system is in a fully restricted state and communications
are cut off.
- Doesn't send codes through the internet which can be intercepted.

On Fri, Jul 10, 2026 at 8:41 AM Rob Berendt <[email protected]>
wrote:

> James,
> I know you're not into smart phones but how are you using Duo?
> What they do recommend is that the basic user who needs this entered into
> Duo use Navigator.  Even for those who are highly restricted in Navigator
> they should be allowed to scan the barcode.
> I tried the manual method in Duo.
> + Add
> Add other account
> Two choices "Use QR code" or "Use activation code".
> Picked the latter.  I could type it there.
>
> And, yes you are talking to someone who originally got mobile phones
> without cameras because they were not allowed when visiting IBM.  Until it
> became too prevalent and IBM relented.
>
>
> On Thu, Jul 9, 2026 at 8:37 PM James H. H. Lampert via MIDRANGE-L <
> [email protected]> wrote:
>
>> On 7/9/26 11:05 AM, Rob Berendt wrote:
>> > IBM labs guy video (forgot the link)
>> > https://video.ibm.com/recorded/134394732
>>
>> Absolutely fascinating. I need to get my Chromebook out of my car
>> sometime soon, and take a closer look at Duo, because I don't recall
>> ever seeing anything in there for manually entering a seed key. I also
>> need to see if there's a way for a Macintosh-native "show a 6-digit code
>> that needs to be entered" application to be given the appropriate seed
>> key to get me into our AWS account consoles (I quite frankly don't
>> remember anything about how I hooked Duo up for that purpose; I only
>> remember that I chose that option because it was already installed, and
>> because unlike some other MFA apps, it runs reasonably well on a
>> Chromebook).
>>
>> For those who have seen the presentation, I'm looking at the slide at
>> time index 24:42, and wondering, where does QSYGETPH fall on that
>> diagram? Does it use a second field? A colon? Is it "MFA Hostile"? "MFA
>> invisible"?
>>
>> --
>> JHHL
>> (Have I mentioned that discrimination against non-smartphone-users is a
>> bit of a "berserk button" with me?)
>> --
>> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
>> list
>> To post a message email: [email protected]
>> To subscribe, unsubscribe, or change list options,
>> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
>> or email: [email protected]
>> Before posting, please take a moment to review the archives
>> at https://archive.midrange.com/midrange-l.
>>
>> Please contact [email protected] for any subscription related
>> questions.
>>
>>
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact [email protected] for any subscription related questions.