Re: Who is on V7R6?

Just to toss in a squirrel for distraction...
CHGUSRPRF
Authentication methods . . . . . *NONE *SAME, *NONE, *TOTP,
*REGFAC
*TOTP is the built in method.
*REGFAC is basically a method for tool vendors to provide an alternative
for those who insist upon text messages, email, push notifications, etc.
You (or the vendor) writes a program that is used within WRKREGINF to
handle the MFA.

Some advantages of *TOTP.
- No vendor or additional programming required
- Will work when system is in a fully restricted state and communications
are cut off.
- Doesn't send codes through the internet which can be intercepted.

On Fri, Jul 10, 2026 at 8:41 AM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

James,
I know you're not into smart phones but how are you using Duo?
What they do recommend is that the basic user who needs this entered into
Duo use Navigator. Even for those who are highly restricted in Navigator
they should be allowed to scan the barcode.
I tried the manual method in Duo.
+ Add
Add other account
Two choices "Use QR code" or "Use activation code".
Picked the latter. I could type it there.

And, yes you are talking to someone who originally got mobile phones
without cameras because they were not allowed when visiting IBM. Until it
became too prevalent and IBM relented.


On Thu, Jul 9, 2026 at 8:37 PM James H. H. Lampert via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

On 7/9/26 11:05 AM, Rob Berendt wrote:

IBM labs guy video (forgot the link)
https://video.ibm.com/recorded/134394732

Absolutely fascinating. I need to get my Chromebook out of my car
sometime soon, and take a closer look at Duo, because I don't recall
ever seeing anything in there for manually entering a seed key. I also
need to see if there's a way for a Macintosh-native "show a 6-digit code
that needs to be entered" application to be given the appropriate seed
key to get me into our AWS account consoles (I quite frankly don't
remember anything about how I hooked Duo up for that purpose; I only
remember that I chose that option because it was already installed, and
because unlike some other MFA apps, it runs reasonably well on a
Chromebook).

For those who have seen the presentation, I'm looking at the slide at
time index 24:42, and wondering, where does QSYGETPH fall on that
diagram? Does it use a second field? A colon? Is it "MFA Hostile"? "MFA
invisible"?

--
JHHL
(Have I mentioned that discrimination against non-smartphone-users is a
bit of a "berserk button" with me?)
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.