May 2011 - Core-students - mailman3.cels.anl.gov

OTP and conserver
by Ti Leggett 15 May '11

15 May '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Has anyone gotten OTP to work with conserver? I've never been able to get it to work even as far back as the TG days. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iEYEARECAAYFAk3P3JEACgkQ4RgdOxQVi0A9uwCfYn0PVJ6mExi6900mUO/xYgyr qL8An2UdAQahZ6Ryc9MkwD8ZVuPAJ7s1 =AU/y -----END PGP SIGNATURE-----

1 0

Cron <stace@namby> /sandbox/stace/check-for-terminations.sh
by root＠mcs.anl.gov 15 May '11

15 May '11

Employees no longer listed as active ===================================== 206480 PSC Raitses, Yevgeny 209175 CIS Schulz, Kevin 218062 PSC Kannan, Harsha 59855 NE Malone, Christopher P. 67026 PSC Hilairet, Nadege 69124 PSC Sun, Qingan 81653 PSC Wang, Jinbu 82764 PSC Schlepuetz, Christian M. 83822 PSC Wang, Xinpeng Entries: 10625 New employees on the list ========================== Entries: 10616

1 0

con.ci
by Ti Leggett 14 May '11

14 May '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In case anyone is trying to get to con, I've locked it down using shorewall to only accept SSH from namby/pamby. I'm doing this as a test over the weekend just to see how things behave. If you need to shut it down, email me or login via namby/pamby and do: /etc/init.d/shorewall stop -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iEYEARECAAYFAk3PVYYACgkQ4RgdOxQVi0BtDACggY6CAsb4XukIu88atbNhgrFS NGwAoIMUx1ydJVq5j64SmxmOUdU4jk6P =POl3 -----END PGP SIGNATURE-----

2 1

Cron <stace@namby> /sandbox/stace/check-for-terminations.sh
by root＠mcs.anl.gov 14 May '11

14 May '11

Employees no longer listed as active ===================================== 206954 PSC van den Brink, Jeroen 207726 PSC Romero, Aldo Humberto 208100 PSC Yuan, Hongji 208304 PSC Chen, Bin 213810 ES Dawar, Vikas 216525 PSC Xu, Meng 219394 PHY Kempley, Ryan Steve 39566 AES Gierich, Diana L. 51059 PSC Moldovan, Nicolaie A. 58499 CNM Krylova, Galyna 59799 CIS Wallace, Mathew W. 69792 PSC Chang, Yu-Hao P. 84415 PSC Srivastava, Dhiraj K. 93231 DEP Hernandez Campos, Melvyn J. Entries: 10588 New employees on the list ========================== 218553 EVS Espinoza, Vicky 218581 PHY Howard, Angela 218637 MCS Stevens, Kerry D. 218815 CNM Garcia, Jamie 218816 EVS Jones, Jamie L. 218890 MCS Fayman, Jillian R. 219005 ES Dragowski, Jeff 219009 ES Khalil, Ahmad 219012 MSD Stevenson, Kelsey 219019 FMS Goodrich, Heather 219020 EVS Kim, Carolyn 219062 MCS Kim, Seong Jo 219098 FMS Hayden, Jared P. 219119 MCS Barua, Amlan K. 219186 MCS Aji, Ashwin Mandayam 219187 NE Arafat, Yasir 219235 DEP Connelly, Maureen 219298 CSE Banks, Brian P. 219301 MCS Duston, Adam R. 219344 FMS Benes, Matthew T. 219345 EVS Concha, David 219346 EVS Galarza, Sofia 219347 MCS Ji, Feng 219349 DEP Pyle, Benjamin R. 219350 AES Simpson, Bryan D. 219372 CNM White, Nicholas M. 219394 PHY Kempley, Ryan S. 219399 CSE Brzowski, Justin W. 219401 DEP Nguyen, Nathan D. 219402 EVS Reels, Caroline N. 219408 PSC Krogstad, Daniel V. 219409 PSC Lupascu, Andreea 219410 PSC Yu, Kaiyuan 219412 PSC Cheng, Wei 219413 ES Fayer, Trevor Alan 219414 ES Snyder, Kevin Lloyd 219415 ES Lor, Love 219416 ES Moore, Haley M. 219418 PSC Sakata, Masafumi 219419 PSC Nakase, Tomoya 219420 PSC Herdiech, Matthew W. 219424 PSC Foster, Mark P. 39566 HR Gierich, Diana L. 59763 MCS Dribinsky, Yekaterina A. 66471 PSC Tolkiehn, Martin 67116 PSC Wang, Pingshan 72085 ES Quinn, Jason 80938 PSC Mechler, Stefan 81290 PSC Chen, Jian 84467 PSC Tews, Ivo 93258 DEP Rodrigues de Carvalho, Marcos Entries: 10625

1 0

[CELS Sysadmins] Beer, now with conclusions
by Tisha Stacey 13 May '11

13 May '11

Brixie's. Craig and I are leaving in the next few minutes. However, we have to pick my car up from the shop first. It's not all that far away from Brixie's, but we won't be going straight there, anyway. - Tisha _______________________________________________ This is the CELS Sysadmins mailing list. It is sent to memebers of: core-admins(a)mcs.anl.gov, hpc-admins(a)mcs.anl.gov, systems(a)alcf.anl.gov, aig(a)alcf.anl.gov. Do not subscribe directly to this list. Thanks.

2 1

[CELS Sysadmins] Beer
by Tisha Stacey 13 May '11

13 May '11

So, are we having beer or what? _______________________________________________ This is the CELS Sysadmins mailing list. It is sent to memebers of: core-admins(a)mcs.anl.gov, hpc-admins(a)mcs.anl.gov, systems(a)alcf.anl.gov, aig(a)alcf.anl.gov. Do not subscribe directly to this list. Thanks.

6 9

Re: backup.ibi
by Robert Johnson 13 May '11

13 May '11

Here's the output. [root@backup log]# rpm --verify openssh-server SM5....T c /etc/ssh/sshd_config On May 13, 2011, at 10:23 AM, Ti Leggett wrote: > Run rpm -- verify openssh-server to see if it's been changes > > On May 13, 2011, at 10:12 AM, Craig Stacey <stace(a)mcs.anl.gov> wrote: > >> Thanks, Robert. Please copy core-admins(a)mcs.anl.gov on communications as well so we can coordinate. I've forwarded this on. >> >> On May 13, 2011, at 10:07 , Robert Johnson wrote: >> >>> Hello, >>> >>> I was concerned about backup.ibi because backup.ci needed a rebuild and the two servers communicate. >>> >>> I did not see anything in the log files that make me suspicious of a break in but the md5 sum >>> >>> [root@backup ~]# md5sum /usr/sbin/sshd >>> 16644bf80e5c8f79a03cc50e22ac8c48 /usr/sbin/sshd >>> >>> Is different from what I would expect from a bcfg CI server. >>> >>> >>> I have turned off SSH on the server as a precaution. >>> >>> >>> -- Robert >> >> == >> Craig >>

2 1

Bastion hosts
by Ti Leggett 13 May '11

13 May '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 While I'm creating a CI bastion host config, I couldn't determine whether we should allow GSSAPI for bastion host access. My initial feeling is no, only OTP since GSSAPI is re-usable if you have the right krb config on the client. What does every one else think? -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iEYEARECAAYFAk3Mrf8ACgkQ4RgdOxQVi0CjHACfXxUDjQxot0Qpz1ZI/KGfPdP8 MjMAn1tCBGkBfJOWloWB0PWtf1I5ORMm =hsc4 -----END PGP SIGNATURE-----

3 3

Cron <stace@namby> /sandbox/stace/check-for-terminations.sh
by root＠mcs.anl.gov 13 May '11

13 May '11

Employees no longer listed as active ===================================== 209006 CIS Mayfield, Gary Joseph 219361 HR Spann, Alice 34013 DEP Douglas, Barbara J. 38027 DEP Oikle, Christine L. 38935 DEP Hamilton, Sunaree 55733 PSC Fieldhouse, Nicholas M. 58105 DEP Holiski, Allison M. 58445 DEP Zordan, Diane N. 63449 PSC Guo, Qing 66626 PSC MacRenaris, Keith W. Entries: 10570 New employees on the list ========================== 219361 HR Spann, Alice M. 219376 PSC Chen, Nai-Tzu 219377 PSC Lin, Ko-Wei 219378 PSC Barrow, Andrew T. 219379 PSC Walshe, Gillian E. 219380 PSC Anantharaman, Karthik 219383 PSC Garlapalli, Ravinder Kumar 219384 PSC Meyer, Terrence R. 219385 PSC Kim, Keun Su 219386 PSC Ferguson, Jordan B. 219387 PSC Saffarini, Daad 219388 PSC Wu, Mousheng 219390 CSE Bellucci, Francesco 219391 PHY Bowry, Michael D. 219392 PHY Bunce, Michael R. 219393 LCF Ely, Geoffrey Palarz 219394 PHY Kempley, Ryan Steve 219395 CSE Lopez-Encarnacion, Juan Manuel 219396 PHY Reed, Matthew W. 219397 PHY Rodriguez Triguero, Camino 219398 PHY Wilson, Emma 34013 NE Douglas, Barbara J. 38027 NE Oikle, Christine L. 38935 NE Hamilton, Sunaree 58105 NE Holiski, Allison M. 58445 NE Zordan, Diane N. 86685 XSD Noyan, Ismail C. 86904 PSC Mao, Agnes L. Entries: 10588

1 0

dpse (login.igsb.anl.gov) ssh broken
by Hunter Matthews 12 May '11

12 May '11

Mg-rast devs, All we've had some security stuff happen today. While poking around in dpse / login.igsb.anl.gov I broke ssh logins and logged out myself before noticing that I had done this. Existing logins will continue to work, but naturally no one else can now login. I apologize for this problem. Please let me be clear - I don't have any reason to think this machine has (or had) a security problem - I broke it while trying to make sure. Dan (or anyone else from core-admins), I think I'll be in tomorrow, but if I'm not if someone could please reboot (via power switch) the machine in BB-49 labeled "dpse / login" (its one of the old pentium 4 supermicros) I would appreciate it. sshd should restart on the reboot. -- Hunter Matthews Unix Administrator Office: Bldg 221 Room B240 Argonne National Labs, MCS Key: F0F88438 / FFB5 34C0 B350 99A4 BB02 9779 A5DB 8B09 F0F8 8438 Never take candy from strangers. Especially on the internet.

3 4