November 2008 - Core-students - mailman3.cels.anl.gov

Interesting way to deal with ubuntu/centos packaging
by Hunter Matthews 20 Nov '08

20 Nov '08

Using the conary package manager (from rpath linux) for ubuntu or centos distro's. I know the lead developer on this project. Not sure if this would/ could be useful in MCS. http://lwn.net/Articles/307998/ -- Hunter Matthews Unix Administrator Office: Bldg 221 Room B240 Argonne National Labs, MCS Key: F0F88438 / FFB5 34C0 B350 99A4 BB02 9779 A5DB 8B09 F0F8 8438 Never take candy from strangers. Especially on the internet.

1 0

Changes in Mail configs
by Craig Stacey 20 Nov '08

20 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In preparation for the new mail relays replacing mailgw and mailbouncer, I've shifted a few things in the configs on mailgw and cliff. Just sending it out here so folks who care about that know what to expect. 1) On mailgw, entries in /etc/aliases aren't being honored. I'm guessing this is because mailgw.mcs.anl.gov is not configured to think of itself as "mcs.anl.gov". I could probably fix this, but it's a low priority given what's in there, and there's a workaround. The cyrusu, beisenbe, and nowak entries are all being handled by Zimbra at the moment. The hagedorn one was being ignored. To get around this, I made a new virtual user map called "mcs-aliases" for cases that are outside our general framework. Into that file I put the hagedorn alias entry, and the new rusty(a)mcs.anl.gov forward to lusk@mcs rule. 2) Instead of putting Zimbra users into /etc/postfix/virtual, I felt it made more sense to separate that out, so there's now an /etc/ postfix/zimbra-users file that is used for those mappings. This made the next step easier. 3) I changed the update-virt-user.sh script on mailgw to take two arguments (username and either ADD or REMOVE), and to use the zimbra- users file instead of the virtual file. It will now remove a user from the table when the "REMOVE" argument is given, and add the user when "ADD" is given (well, really, it *always* removes the user, and will only add the user back if "ADD" is given). It also only keeps one backup (named zimbra-users-bak) instead of an ever-growing list of snapshots. The new file is sorted (with -u to remove any possible dupes). 4) I changed the zim_alias_create.sh on cliff to act just like update- virt-user.sh above. 5) I updated the scripts on owney to reflect the changes above. When a user's mail resource is marked "deleted" (typically when the account is deleted), the entries will be removed in mailgw and cliff and will start to produce bounces at the relay (instead of from cliff when it tries for forward to zimbra.anl.gov) When we get the new mail relays going, we can set those up such that /etc/postfix/relocated can be used when a user gets deleted (if they specified an address that isn't .mcs.anl.gov). 6) I changed the "getrelayagents" script on cliff (which populates relay_recipients on mailgw), commenting out the 'ypcat passwd' line, since just being in YP doesn't mean you have an e-mail address anymore. Everyone who has a zimbra address is already in the relay_recipients file by their inclusion in the zimbra-aliases file. I went through what would be deleted and found one entry that needed to be in there for now (neos(a)mcs.anl.gov) so I added that to the static portion of the getrelayagents script. This will help prevent us from being used for backscatter. If it turns out others need to go in, they can also be added to the /my/adm/bin/getrelayagents on cliff - -- it's fairly self-explanatory where. 7) I traversed the cyrus logs and found users who are *still* logging into cliff (mostly IMAP, some POP). Given that *most* of these are people who've left clients configured mistakenly, I'm locking most of them out in /etc/passwd. I'm giving greguric an exception, since she's no doubt still moving her mail. If she's not done by the Thanksgiving break, I'm taking over that situation and moving it all. My main concern are the people who are using IMAP to login, since they could conceivably be storing stuff in there. I noted in my scans, however, that anyone who's using mh from a green workstation is *not* showing up in the cyrus logs. For example, the neos user is pulling its mail every 15 mins, and there's no record of that in any logs, but I looked at the procmail logs, and the only account that's receiving mail locally at this point is neos, so we should be okay there. == Craig -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkkl76oACgkQbVNGA3HOzQvEZwCfZSQkD++/HrIvKVfNLwbWff2G u1IAn1+UFRhrDN5GLEkuKTHj4ZVHE7zj =k5t3 -----END PGP SIGNATURE-----

1 0

Cosmea migration to centos-5.2 is complete
by Hunter Matthews 20 Nov '08

20 Nov '08

All, The migration of cosmea is complete. All the systems are now running centos at version 5.2. We should be completely current with security patches. -- Hunter Matthews Unix Administrator Office: Bldg 221 Room B240 Argonne National Labs, MCS Key: F0F88438 / FFB5 34C0 B350 99A4 BB02 9779 A5DB 8B09 F0F8 8438 Never take candy from strangers. Especially on the internet.

1 0

[Fwd: Get 25% off VMware Fusion]
by Kenneth Raffenetti 20 Nov '08

20 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FYI, Fusion is on sale again through the end of the month. We might want to buy another round of licenses for Mac users. Ken -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJJZ6CvRJB9CBtvwgRAr0MAKC7MNJnxH3nJgR3i3qOjODdJcYg7gCgnWP/ 9pnu3bPXTLverDgx/AjKJuI= =de3Q -----END PGP SIGNATURE-----

1 0

Re: [press.mcs.anl.gov] Activate http://press.mcs.anl.gov/curfman/
by Lois Curfman McInnes 20 Nov '08

20 Nov '08

Auto-reply: I will be traveling through November 23 and checking email only intermittently. I will read your email by November 24 if not sooner. Best, Lois

1 0

Vacation
by liz＠fnal.gov 20 Nov '08

20 Nov '08

I am in Europe. I will be back at work on Nov. 26th.

1 0

Where's Tina
by Tina Stanton-Piersanti 20 Nov '08

20 Nov '08

Vinnie got sick at school. I need to go pick him up! I will be on-line as much as I can from home. T.

1 0

Where's Max?
by Max trefonides 20 Nov '08

20 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 My car decided not to start after I got home. My water was shut off. My new dental crown is killing me and needs to be re-adjusted. Needless to say I won't be at the lab in the morning. I'll be online as much as I can. I'll send updates as they happen. Tina, please put me down for a comp day. - -- max -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkkkyTkACgkQaPBbFuCp8UL8WgCaAkbUYCfDmzJoEsjZYPaLuBrq OkcAoKrLzERutjtEbYfYNPdv5PO7U1ts =r/7d -----END PGP SIGNATURE-----

2 3

ANL Domain account changes were detected in the MCS organization!
by ANLDomainAdministrator＠anl.gov 20 Nov '08

20 Nov '08

This is an automated email message from CIS account administration. Please do not reply to it. The following changes to the ANL Domain accounts of the MCS organization were detected today. These changes are since 19-November-2008 7-55-00 AM. The following accounts were modified: insepov 00055004 Insepov, Zinetulla insepov 00055004 Insepov, Zinetula Z. Note that if an account was renamed, then the old name will appear as a deletion and the new name will appear as an addition. A full list of active MCS accounts is attached.

1 0

removed unused conduits
by Rick Bradshaw 19 Nov '08

19 Nov '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I removed ssh conduits for fl-login.mcs.anl.gov wiggum.mcs.anl.gov 140.221.8.30 # was ogcecvs now newman.mcs.anl.gov login*.bgl.mcs.anl.gov sn1.bgl.mcs.anl.gov I just want to note that the entire bgl acl could probably go bye-bye, but that is something Corby would have to figure out. Rick -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJJJ+1davihOKkCCERAmb8AJ4pn9dOIM1NS86AtXOD74DO9ry15wCdGiN6 FSywLVDEoyopBpQoSMFISMo= =ur7L -----END PGP SIGNATURE-----

1 0