Hi Greg,
The way that I log into Phab is by using https://phabricator.wikimedia.org/auth/start/?next=%2F, and then logging into MediaWiki and authorizing Phab to access my credentials. The MediaWiki login including the 2FA is the same that I use for many other Wikimedia sites.
So, although this 2FA allows logins to Phabricator, it sounds like there is a separate 2FA for some people for Phabricator access, perhaps for people with LDAP logins, and that is the 2FA that is affected. Is this correct?
Pine ( https://meta.wikimedia.org/wiki/User:Pine )
On Thu, Jan 16, 2020, 15:18 Greg Grossmeier greg@wikimedia.org wrote:
On Thu, Jan 16, 2020 at 2:50 PM Pine W wiki.pine@gmail.com wrote:
Some of us use the same 2FA for Phabricator as for on wiki accounts.
Should
the 2FA reset apply to all Wikimedia 2FAs that could be used for Phabricator, or only those that actually have been used for Phabricator?
Hi Pine,
Phabricator has its own 2fa system that is separate from that of your wiki account 2fa.
You may be using the same authenticator application on your phone, but there are separate accounts/codes for your wiki account and for your Phabricator account.
tl;dr: this only affects your Phabricator 2fa token, no other tokens.
Best,
Greg
-- | Greg Grossmeier GPG: B2FA 27B1 F7EB D327 6B8E | | Dir. Engineering Productivity A18D 1138 8E47 FAC8 1C7D | _______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l