March 2014 - Core-other - mailman3.cels.anl.gov

userbase2 cross domain account name uniqueness
by John Valdes 04 Jun '14

04 Jun '14

Hi Ti, I'm trying to create an account in the LCRC domain in userbase2 for Xiaoliang Zhong, an ANL Postdoc in MSD. His ANL username is "zhongx" which isn't used in LCRC (or MCS), so I'd like to use that as his LCRC account name (that's the name he chose in his account request). However, that account name is in use in the CI domain by ID Xiang Zhong (aka Sally Zhong) who appears to be a different person, and so userbase2 (via sovereign) isn't allowing me to use zhongx as Xiaoliang Zhong's account name in the LCRC domain. Is it possible to remove the requirement that account names be unique across domains in userbase2? Or at least between CI and ANL domains (the latter being MCS, LCRC and Kbase), as having unique account names within ANL would be desirable I think (when approving accounts for LCRC, I try to use the person's ANL username or MCS account name if they have one of the latter). Or will allowing non-unique account names between CI and ANL cause problems? Alternately, in this specific case, it looks like Xiang Zhong in CI is an old account (from 2012) and was denied every resource she requested (except Zimbra Mail), so if that account isn't active in CI, maybe we could rename it and/or purge it from userbase2 and free up zhongx as an account name? Otherwise, I'll assign a different account name to Xiaoliang Zhong for his LCRC account. John

2 3

Where's JohnV 3/31?
by John Valdes 28 Mar '14

28 Mar '14

I'll be taking a vacation day this coming Monday, 3/31. I'll check on things remotely in the morning, but otherwise I'll be (mostly) offline. John

1 0

Where's Martino
by Henderson, Martino S. 28 Mar '14

28 Mar '14

I will be leaving a 3:30PM I need to pick my son up from school. I will be back on Monday. Have a good weekend everyone. Martino Henderson CLS System/Desktop Support Argonne National Laboratory Computing, Environment, & Life Sciences Office: +1(630) 252-1692 [cid:B744A55A-4535-4E70-B425-9C7DE4B55ADA]

1 0

web browsers indicating old OS
by rackow＠anl.gov 28 Mar '14

28 Mar '14

After the IT-admins meeting, people were asking what they may still have on net that is out of date. In attempting to pull that data together, it becomes very difficult to get a full snapshot of what MAY be there, since this is gathered from user activity. Not all machines are used every day. So taking all data from March, dropping visitor networks (they may not be ANL machines) dropping auth-wireless and VPN (tracking down the individual users is difficult and those machines tend to be self mananged) dropping anything that gets allowed through, The results are below. Note this may include systems that have since been updated. It may include systems that the user has set the user-agent string to something old. It may include "applications" that report out of date versions. Hopefully you can quickly remove from the list things you know you have updated and then see what's left. 140.221.3.28 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" 140.221.3.28 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:5.0) Gecko/20100101 Firefox/5.0" 140.221.3.81 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:8.0.1) Gecko/20100101 Firefox/8.0.1" 140.221.10.22 "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)" 140.221.10.22 "Mozilla/5.0 (Windows NT 5.2; rv:27.0) Gecko/20100101 Firefox/27.0" 140.221.10.71 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" 140.221.10.137 "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET Client 3.5.30729.01)" 140.221.10.138 "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en) AppleWebKit/533.19.4 (KHTML, like Gecko) AdobeAIR/4.0" 140.221.10.150 "Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0" 140.221.10.166 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" 140.221.10.170 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko)" 140.221.10.170 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.149 Safari/537.36" 140.221.10.170 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.152 Safari/537.36" 140.221.10.170 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:24.0) Gecko/20100101 Thunderbird/24.4.0" 140.221.10.192 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" 140.221.10.223 "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" 140.221.10.223 "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)" 140.221.11.234 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36" 140.221.11.234 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36" 140.221.11.234 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.73.11 (KHTML, like Gecko)" 140.221.11.234 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.73.11 (KHTML, like Gecko) Shrook/2.88l" 140.221.11.234 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.73.11 (KHTML, like Gecko) Version/7.0.1 Safari/537.73.11" 140.221.13.72 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Safari/537.36" 140.221.13.72 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36" 140.221.13.73 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.80 Safari/537.36" 140.221.13.73 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Safari/537.36" 140.221.13.73 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.152 Safari/537.36" 140.221.71.82 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" 140.221.71.83 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10" --Gene

1 0

FW: Insurance concerns Data Center Trash and Storage.
by Stacey, Craig J. 25 Mar '14

25 Mar '14

If you’ve got packaging in the data center, now’s the time to throw it out or find somewhere to store it. -- Craig From: 240-datacenter-wg-bounces(a)lists.anl.gov [mailto:[email protected]] On Behalf Of Wenzel, Gary Sent: Tuesday, March 25, 2014 9:36 AM To: 240-datacenter-wg(a)anl.gov Cc: Weiner, Michael S. Subject: Insurance concerns Data Center Trash and Storage. We recently had an insurance inspection and had only one serious negative comment. The concern is an accumulation of packing material. FMGlobal is forwarding a report to the University of Chicago Risk Management that will be forwarded to me. The core of the report is the recommendation that: No combustibles are to be stored in the Data Center. Packing material, cardboard boxes and pallets need to be removed, disposed of or stored in metal containers. If you're able to attend to this please do. The trash needs to be addressed immediately. If you prefer I am available to help with trash. I will need for you to identify those items that are trash and can be disposed of. We can make that happen. Thank you, Gary Gary Wenzel, RPA CCIM Property Manager Kennedy Wilson Properties Group 9400 S. Cass Ave Lemont, IL 60439 P: 630-252-0295 C: 904-923-0820 gwenzel(a)kennedywilson.com<mailto:[email protected]>

1 0

where's Linda 3/25
by Linda Winkler 24 Mar '14

24 Mar '14

Have a car appt Tues 930. Working from the dealer until work is done. Hope to be at the Lab in the afternoon. lw

1 0

Fwd: repo.anl-external.org registration (fwd)
by Gene Rackow 24 Mar '14

24 Mar '14

I had thought the repo server was going to be shut down a long time ago. I thought that was tied to Teragrid stuff and since TG was switched to XSEDE they were moving services elsewhere. Is it still in operation? What projects? Is it really something MCS? ------- Forwarded Message > - ---------- Forwarded message ---------- > From: Brian Tierney <bltierney(a)es.net> > Date: Mon, Mar 24, 2014 at 7:52 AM > Subject: Fwd: repo.anl-external.org registration > To: "security-team(a)es.net" <security-team(a)es.net>, Jay Krous <jekrous(a)lbl.gov> > > > targeted spam is getting more sophisticated! > > Jay: You might want to let the ANL security folks know. Possibly an > ANL system was hacked to get my user account. > > - ---------- Forwarded message ---------- > From: <systems(a)mcs.anl.gov> > Date: Mon, Mar 24, 2014 at 7:47 AM > Subject: repo.anl-external.org registration > To: bltierney(a)es.net > > > > > Mail-from : . > > Dear Brian Tierney, > > You have a guest-account on 'repo.anl-external.org' : > > username : g_bltierney > password : *****REMOVED**** GENE > > Please login at > > https://repo.anl-external.org/ > > ... and change your password. > > Regards, > > repomaster of repo.anl-external.org <systems(a)mcs.anl.gov> > > > - -- > Brian Tierney, http://www.es.net/tierney > > Energy Sciences Network (ESnet), Berkeley National Lab > > http://fasterdata.es.net > > > - -- > Jack (Jay) E. Krous III > Cyber Security, Information Technology Division > Lawrence Berkeley National Laboratory > (510) 495-2522 > > ------- End of Forwarded Message

2 2

Undelivered Mail Returned to Sender
by MAILER-DAEMON＠mcs.anl.gov 21 Mar '14

21 Mar '14

This is the mail system at host mailrelay.mcs.anl.gov. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <btdkhycs(a)hvtvpern.com>: Host or domain name not found. Name service error for name=hvtvpern.com type=A: Host not found

1 0

Where's Tina
by Stanton-Piersanti, Tina Joy 21 Mar '14

21 Mar '14

Still sick! T. Sent from my iPhone

1 0

interesting reading...
by rackow＠anl.gov 20 Mar '14

20 Mar '14

It gives some interesting things to look for tied to an infection. Mainly this is just an FYI, but there may be some things in this you want to add to detection scripts when searching for infections. https://github.com/eset/malware-ioc/blob/master/windigo/README.adoc --Gene

1 0