Passwords
From MCS IT Wiki
Contents |
Password types
There's a number of different passwords and passphrases a user of the infrastructure here is likely to encounter. We'll enumerate a number of the different kinds below, but it's worth noting that we're looking to simplify this in the near future. This page outlines the way things exist currently, as well as a plan for moving forward. If you're confused about which password you should use for a given resource, you should search this page for the resource you're interested in. Please report any inaccuracies to systems@mcs.anl.gov.
- Password Guidelines
- Department of Energy Password Guidance
- Argonne Password Guidelines (Internal website only)
Proposed Changes in Password Usage
The MCS Windows Domain is scheduled to be retired by spring of 2008. As a result, anything currently using the MCS Windows Domain will either switch to using the Argonne Domain Password or use a local password depending on the situation.
We are in the process of writing a new Account management system that will be leveraged off the Argonne Domain. Changes are being implemented making it easier for external collaborators to get a domain account. A timeline for this is not finalized as of this writing (16:28, 26 October 2007 (CDT)).
Once the MCS Windows Domain and the account system are using the Argonne Domain Password, only e-mail, MCS Workstations, and some web pages would be using the MCS Workstation password. Unless there are circumstances that would prevent it, we would like to move all remaining centralized authentication (except OTP) to the Argonne Domain Password. If you have objections to this, please let us know at systems@mcs.anl.gov. More details will be presented here as they develop.
Argonne Domain Password
What is it? : Authenticates against the central Argonne Active Directory. It is used for:
- Inside Argonne and other Argonne internal websites
- most administrative applications
- Argonne VPN
- Windows computers in Building 308
- Argonne Exchange e-mail server
- Zimbra (MCS E-Mail)
Where can I change it?: Argonne Credentials Site
Who can reset it for me?: It varies, depending on your home division. A list below is included, but all requests should go through the MCS Help Desk.
- Tina Stanton-Piersanti
- Craig Stacey
- Rick Bradshaw (MCS Employees only)
- Max Trefonides (MCS Employees only)
- Ken Raffenetti (MCS Employees only)
- John Roberts (MCS Employees only)
- Tisha Stacey (LCF Employees only)
IMPORTANT: When your Argonne Domain Password is changed
When your Argonne Domain Password is changed (by you or by an administrator), there are numerous places where you'll need to change your password. Below is a list of all the places you'll need to change it.
- Anything that logs into Zimbra, such as your mail client, or the iCal/iSync conduit, or your Mobile Device.
- Any LDAP clients using Argonne's LDAP server, such as Mac Mail/Address Book
- Any Jabber clients such as Pidgin, iChat, Trillian or Adium.
- Anything using the lab's Exchange server, such as Outlook, mobile clients.
If you neglect to change these passwords, you may find your account gets locked out due to too many bad password tries.
MCS Workstation Password
What is it? : Primary MCS password. It is used for:
- MCS Accounts Page
- Some MCS websites
Where can I change it?: MCS Account Management
Who can reset it for me?: Anyone in MCS Systems.
MCS Windows Password
What is it? : Password for MCS Windows Domain. Scheduled to be retired by spring 2008. Used for:
- Most MCS Windows desktop machines
- Most MCS Mac desktop machines
- Some (to be retired) MCS Web pages.
Where can I change it?: MCS Windows Password changer
Who can reset it for me?: Anyone in MCS Systems.
OTP
What is it? : One Time Password generator. Some users will be required to use this for access to certain applications. If you have one and don't know how to use it, contact MCS Systems.
Others
SSH Key: SSH keys require the use of a passphrase. This passphrase is unique to your key and is not in any way tied to any particular machines. For details on how these work in MCS, see SSH keys.
