April 2012 - Core-other - mailman3.cels.anl.gov

[CELS Sysadmins] Beer?
by Paul M. Rich 06 Apr '12

06 Apr '12

I haven't seen anything cross this list yet, but beer? I'll open with suggesting Brixie's. -- Paul Rich Software Development Specialist ALCF Operations -- AIG richp(a)alcf.anl.gov _______________________________________________ This is the CELS Sysadmins mailing list. It is sent to memebers of: core-admins(a)mcs.anl.gov, hpc-admins(a)mcs.anl.gov, systems(a)alcf.anl.gov, aig(a)alcf.anl.gov. Do not subscribe directly to this list. Thanks.

2 1

Re: locked account put zimbra box in maintenance mode
by Chris Walker 06 Apr '12

06 Apr '12

There is a script hanging off the resource's account disable action which calls /root/bin/zimbra-deact.sh mcs.anl.gov on newman.. That's been configured that way since the get go.. I'd assume that's what did this. Isn't the desired behavior of account suspend to prevent access to everything, and make re-instatable? If there's another behavior userbase should follow, gather up the details and let us know On Apr 6, 2012, at 1:22 PM, Dan Olson wrote: > So we locked the sulakhe account because of the mac malware. The users zimbra account went into maintenance mode. > Can either of you help me find what in our account system is doing that, we can't have that happen. > > ---- > Daniel Murphy-Olson > Systems Administrator > Mathematics & Computer Science Division > Argonne National Laboratory > 630-252-0055 >

5 29

Flashback Trojan
by Max trefonides 06 Apr '12

06 Apr '12

Howdy, I'm working on a little script that will look for infection, I've run it on all the machines that are reachable by remote desktop and so far we have no infections. I do not have an infected machine to test it on, so I don't have a positive test yet, I'll talk to gene to see if he can test it for us. Right now I'm just running the two commands recommended by the f-secure site through remote desktop, the first one checks to see if the system level DYLD_INSERT_LIBRARIES variable is set, if not then the machine is NOT infected at the system level, it's simply: defaults read /Applications/Safari.app/Contents/Info LSEnvironment The second one runs through the user accounts on the machine, (excepting the non-loginable ones with a simple grep-v) and checks to see if the DYLD_INSERT_LIBRARIES variable is set, if not then we are not infected. It's a very simple bash one liner: for i in `dscl . list /users | grep -v ^_` ; do defaults read /Users/$i/.MacOSX/environment DYLD_INSERT_LIBRARIES ; done Quick and dirty, I'll see if I can package them up in a thing that our users can just run and feel like they are safe. -- Max Trefonides MCS Systems maxadam(a)mcs.anl.gov

1 0

New Argonne Wireless Authentication Certificate
by Stoops, Nicholas J. 06 Apr '12

06 Apr '12

All, Yesterday morning (4/5/12) we generated (and installed) a new certificate for the Argonne wireless SSID's "ArgonneG-auth" and "ArgonneA-auth". The old certificate was set to expire 4/8/12. Depending on the client wireless device configuration; the device may or may not be prompted to accept a new certificate (which may look something like the Attached picture). If prompted, you will need to accept the new certificate in order to continue using the "Auth" wireless. The new certificate will have the following information: Issued to: rabbit Issued by: ANLIssuingCAv010 Valid from: April 05 2012 at 09:39:21 Valid to: April 05 2014 at 09:39:21 Please feel free to email me if you should have any questions. Thank you, Nick *********************************************************** Nicholas Stoops (mailto:[email protected]) Computer Network Engineering ---------------------------------------------------------------------------------------- Computing & Information Systems (CIS) Division Argonne National Lab. 9700 S. Cass Ave., Bldg. 240 Lemont, IL 60439 ---------------------------------------------------------------------------------------- Argonne Telephone #: 1-630-252-7579

1 0

Today's user termination list
by stace＠mcs.anl.gov 06 Apr '12

06 Apr '12

Full list of people who no longer appear on the active employee list =========================================================================== 31056 CEP Robson, Judith J. 67966 PSC Regier, Thomas Z. 84254 PSC Pigott, Jeffrey S. 208964 PSC Lan, Tian 216923 PSC Seo, Jiwon 218776 PSC Mende, Kolja G. 218860 PSC McEwen, Jean-Sabin 218862 PSC Pellmann, Elise A. 218863 PSC Scott, Aubrey D. 218865 ES Mariuzza, Alexandre 220889 PSC Selvarajan Sigamani, Sundaresan

1 0

Meeting with Cambridge Computer
by Dan Olson 05 Apr '12

05 Apr '12

Hi All, I'm planning on meeting with Cambridge Computer tomorrow afternoon from 2-3:30pm in 2178. They are basically a storage centric VAR. I plan on discussing: 1. Alternatives in the enterprise/midrange storage space to our current homegrown ZFS systems 2. Cloud data management - archiving / backup-restore solutions that might be available 3. Tape / HSM solutions that might be available for data at rest Its open to anyone interested. Sorry for the late notice. ---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055

1 0

Where's Max?
by Max trefonides 05 Apr '12

05 Apr '12

I need to work from home tomorrow, my plans for the kids fell through. -- Max Trefonides MCS Systems maxadam(a)mcs.anl.gov

1 0

Where's JohnR?
by John Roberts 05 Apr '12

05 Apr '12

I have a Dr. appointment this Monday, 3/26 at 9:15am. I will be in after and make up the time. -- John Roberts Systems Administrator Jr. Argonne National Laboratory MCS Division roberts(a)mcs.anl.gov

2 2

Half-day
by Ti Leggett 05 Apr '12

05 Apr '12

Turns out there's something at Aidan's school I need to attend (that they just told us about this morning), so I'm heading home now. Since I probably won't get much actual work done this afternoon, please put me down for a half day vacation.

1 0

[CELS Sysadmins] Lunch
by Ti Leggett 05 Apr '12

05 Apr '12

If you're looking for a lunch destination today, might I suggest Go Roma in the Promenade. From 11 - 7 today, 20% of all sales go to Woodview Elementary, Aidan's school. _______________________________________________ This is the CELS Sysadmins mailing list. It is sent to memebers of: core-admins(a)mcs.anl.gov, hpc-admins(a)mcs.anl.gov, systems(a)alcf.anl.gov, aig(a)alcf.anl.gov. Do not subscribe directly to this list. Thanks.

1 0