November 2008 - Core-students - mailman3.cels.anl.gov

Where's Corby
by Schmitz Corby 05 Nov '08

05 Nov '08

I am having problems focusing. I had hoped to finish up my interface polling/health script, but I cannot seem to get the logic quite right. I need to unwind a bit and try and get my head in order. I am going to head home and try and pick up later with the development. I expect to be in as usual tomorrow. If anything comes up that requires my attention, please feel free to contact me on my cell. Not sure if I will be checking e-mail regularly. -corby

1 0

migration to Mac: current state
by Max trefonides 05 Nov '08

05 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ira, Right now I think we are pretty much done for the stopgap. I think you should not need to use your Windows machine at this point. What's done: - - Entourage is set up, (now with the corrected return address, really sorry about that) NOTE: You and Faith have not been seeing updates to event revisions in the calendar. We need to investigate this - - RDC to connect to canary, Paris, Kronos, HR, FUNDS and abacus I created a RDC Connections document called Canary to help avoid confusion in the future, (however, all that this does is connect to tsc.anl.gov with default settings) - - SVN You can do updates, commits, etc through the finder using the method I showed you the other day, however I have only able to do the initial checkouts from the svn repos via the commandline. I will look through my notes as soon as I get a chance and do checkouts for the repos that you have set up on the Macbook Air. If you want to have a go at it it's not too terribly hard to do, you just need to know the name of the repo to add: Open the "Terminal" program (/Applications/utilities/Terminal type: cd /Users/igoldber/Documents/svn type: svn co https://svn.alcf.anl.gov/repos/<NAME_OF_THE_REPO_TO_ADD> rinse/repeat for each of the repos in turn that you need, (which you should be able to find by going to the web-interface) and it should "just work" after that. - - Data transfer from CIS servers to MCS server: this is in process, although I have moved all the folders and documents that you have accessed since September to your home directory on the MCS server, and the rest are moving over now. I moved those directories and files on the assumption that those are the things that you are likely going to need access to immediately. You can get access to your MCS home directory by clicking on the blue harddrive icon on the right hand side of the dock. it has paper dolls on it. You should use the copy of the files on the MCS server from now on, please do not make changes to the documents on the CIS server. You can access the MCS version of the documents from your windows machine if that proves necessary, using the mountpoint: "V:" this mountpoint is not accessible to anyone else. The proj-ira share is accessible by you and Wanda. There are copies of the files in the proj-ira share from the last time we tried to move you over. These should be deleted, excepting of course the documents that you need to share with Wanda. I'll check in this evening to make sure that you don't have any questions, and I'll check with you first thing tomorrow morning. thanks for being so patient with all this, and yes, "This too shall pass" (which is what I told my sister with the gall stone. She didn't think it was funny either) - -- max -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkkR7EoACgkQaPBbFuCp8UJjoQCfQ+ZeOz7y2ue20GrP5n2yacLS GpQAnR8MXV/+11Oop7+jduqapP9p7AO2 =fGk4 -----END PGP SIGNATURE-----

1 0

Undelivered Mail Returned to Sender
by MAILER-DAEMON＠mcs.anl.gov 05 Nov '08

05 Nov '08

This is the Postfix program at host bg.anl-external.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to <postmaster> If you do so, please include this problem report. You can delete your own text from the attached returned message. The Postfix program <jdaven(a)bnl.gov,>: bad address syntax: "jdaven(a)bnl.gov,"

1 0

Adding packages to the bcfg repo
by Craig Stacey 05 Nov '08

05 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 That doc in the wiki is blank. I'd do this myself, but I'm not sure how at this point. So, here's what I did on wind, and someone can get this into the repo: wind# apt-get install htmldoc Reading package lists... Done Building dependency tree Reading state information... Done The following extra packages will be installed: htmldoc-common libdrm2 libfltk1.1 libgl1-mesa-glx libxxf86vm1 The following NEW packages will be installed: htmldoc htmldoc-common libdrm2 libfltk1.1 libgl1-mesa-glx libxxf86vm1 0 upgraded, 6 newly installed, 0 to remove and 34 not upgraded. Need to get 6023kB of archives. After this operation, 10.8MB of additional disk space will be used. Do you want to continue [Y/n]? Get:1 http://spock.mcs.anl.gov hardy/main htmldoc-common 1.8.27-3 [5192kB] Get:2 http://spock.mcs.anl.gov hardy/main libdrm2 2.3.0-4ubuntu1 [24.3kB] Get:3 http://spock.mcs.anl.gov hardy/main libxxf86vm1 1:1.0.1-2 [10.6kB] Get:4 http://spock.mcs.anl.gov hardy/main libgl1-mesa-glx 7.0.3~rc2-1ubuntu3 [177kB] Get:5 http://spock.mcs.anl.gov hardy/main libfltk1.1 1.1.7-6 [398kB] Get:6 http://spock.mcs.anl.gov hardy/main htmldoc 1.8.27-3 [220kB] Fetched 6023kB in 0s (10.7MB/s) Selecting previously deselected package htmldoc-common. (Reading database ... 59025 files and directories currently installed.) Unpacking htmldoc-common (from .../htmldoc-common_1.8.27-3_all.deb) ... Selecting previously deselected package libdrm2. Unpacking libdrm2 (from .../libdrm2_2.3.0-4ubuntu1_amd64.deb) ... Selecting previously deselected package libxxf86vm1. Unpacking libxxf86vm1 (from .../libxxf86vm1_1%3a1.0.1-2_amd64.deb) ... Selecting previously deselected package libgl1-mesa-glx. Unpacking libgl1-mesa-glx (from .../libgl1-mesa- glx_7.0.3~rc2-1ubuntu3_amd64.deb) ... Selecting previously deselected package libfltk1.1. Unpacking libfltk1.1 (from .../libfltk1.1_1.1.7-6_amd64.deb) ... Selecting previously deselected package htmldoc. Unpacking htmldoc (from .../htmldoc_1.8.27-3_amd64.deb) ... Setting up htmldoc-common (1.8.27-3) ... Setting up libdrm2 (2.3.0-4ubuntu1) ... Setting up libxxf86vm1 (1:1.0.1-2) ... Setting up libgl1-mesa-glx (7.0.3~rc2-1ubuntu3) ... Setting up libfltk1.1 (1.1.7-6) ... Setting up htmldoc (1.8.27-3) ... Processing triggers for libc6 ... ldconfig deferred processing now taking place Thanks. == Craig -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkkQvAUACgkQbVNGA3HOzQv1/ACgkIwQwyI3zxBxx8ha995UjIx+ tqkAoIH9gTLNFf+VVI1JlmYyJX7Ps82S =59L6 -----END PGP SIGNATURE-----

2 1

where's Linda 11/5
by Linda Winkler 05 Nov '08

05 Nov '08

working at home this morning. taking some comp time this afternoon while there is a break from SC conf call :) lw

1 0

Blocking SSH badguy 61.206.123.147 on delta.mcs.anl.gov
by root＠mcs.anl.gov 05 Nov '08

05 Nov '08

There appears to be a badguy at 61.206.123.147 that is doing SSH cracking attempts. They hit the limit and got blocked from further attempts on delta.mcs.anl.gov by getting added to the hosts.deny file. Investigate as needed. The results of host on 61.206.123.147 is: 147.123.206.61.in-addr.arpa domain name pointer 61.206.123.147.static.zoot.jp.

1 0

where's ken
by Kenneth Raffenetti 04 Nov '08

04 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This cold is getting to me. I'm going to head home and take it easy for the rest of the day and hopefully finish up a few things. I'll be on Jabber, MUD, etc. Ken -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJEMjuvRJB9CBtvwgRAvyYAJwIJ8wE12aWQt7bxx4HcYUwJio5egCfSJFl LtL983N5sCVRpKn2VDkTzAw= =WmZh -----END PGP SIGNATURE-----

1 0

Fwd: Request for Site Review from urlfilter
by Schmitz Corby 04 Nov '08

04 Nov '08

Please note, Cyber has re-enabled the reputation filter on the filtering software they use for URLs. You may be blocked from getting places based on the destination IP rather than the URL (see note below). Please report any problems back to compsec so that we can fight to get this turned back off. -corby Begin forwarded message: > From: compsec(a)anl.gov > Date: November 4, 2008 11:45:29 AM CST > To: compsec(a)anl.gov > Subject: Request for Site Review from urlfilter > > > anonymous at 140.221.13.5 requests access to the following Web site: > > http://157.166.224.25/ > > Reason the site is blocked: > Malicious Web Reputation > > This request was submitted on November 04, 2008 11:45 AM. > _______________________________________________________________________ > > User's e-mail address: schmitz(a)anl.gov > > User's comments: Umm ... www.cnn.com (which resolves sometimes as > 157.166.224.25) is not malicious despite the occasional scathing > commentary. It appears to be blocking, not on the name, but rather > the IP. I can get to other addresses in the round-robin DNS (ex. > 157.166.255.18). Probably should be fixed, or at least looked at. I > have never had this problem before, so something must have changed. > corby > >

1 0

Fwd: Scavenger - Inside FW - Every 15 Minutes for MCS
by Craig Stacey 04 Nov '08

04 Nov '08

Who has this loaner? It's CSI 328817. == Craig Begin forwarded message: > From: scavenger(a)anl.gov (Scavenger User) > Date: November 4, 2008 9:50:07 AM CST > To: rackow(a)mcs.anl.gov, stace(a)mcs.anl.gov, jbbernar(a)anl.gov, bradshaw(a)mcs.anl.gov > , maxadam(a)mcs.anl.gov, raffenet(a)mcs.anl.gov > Cc: mattk(a)anl.gov, mskwarek(a)anl.gov > Subject: Scavenger - Inside FW - Every 15 Minutes for MCS > > Cyber Security Program Office > Continuous Scanning Project - Scavenger > Type of Scan: Inside FW - Every 15 Minutes > The following list of vulnerabilities were identified by the Cyber > Security continuous scanning project for hosts that your are > responsible for. These vulnerabilities identified are of a high risk > to your systems and the Laboratory. Please address these > vulnerabilities as soon as possible and record your actions in the > online tracking system located at this site. > > Host > DNS > Last Seen Vulnerable > Vulnerability > 140.221.10.69 mcs00096b82b9be.mcs.anl.gov 2008-11-04 09:45:01 > Vulnerability in Server Service Could Allow Remote Code Execution > (958644) - Network check > > > > The following email was generated by the CSPO system Scavenger. If > you have any questions regarding this email or the system, please > contact scavenger(a)anl.gov or via phone at 2-3456.

2 1

Where's Rick
by Richard Bradshaw 04 Nov '08

04 Nov '08

I am going to just take the whole day off. Long story short they cancelled my voter registration so I can't vote and now I am so mad I could kill someone. It is in everyones best interest to not be around me today. I will most likely be online later and available by phone if needed. Please change my half day vacation to a full day. Rick

2 1