February 2014 - Core-students - mailman3.cels.anl.gov

userbase2 cross domain account name uniqueness
by John Valdes 04 Jun '14

04 Jun '14

Hi Ti, I'm trying to create an account in the LCRC domain in userbase2 for Xiaoliang Zhong, an ANL Postdoc in MSD. His ANL username is "zhongx" which isn't used in LCRC (or MCS), so I'd like to use that as his LCRC account name (that's the name he chose in his account request). However, that account name is in use in the CI domain by ID Xiang Zhong (aka Sally Zhong) who appears to be a different person, and so userbase2 (via sovereign) isn't allowing me to use zhongx as Xiaoliang Zhong's account name in the LCRC domain. Is it possible to remove the requirement that account names be unique across domains in userbase2? Or at least between CI and ANL domains (the latter being MCS, LCRC and Kbase), as having unique account names within ANL would be desirable I think (when approving accounts for LCRC, I try to use the person's ANL username or MCS account name if they have one of the latter). Or will allowing non-unique account names between CI and ANL cause problems? Alternately, in this specific case, it looks like Xiang Zhong in CI is an old account (from 2012) and was denied every resource she requested (except Zimbra Mail), so if that account isn't active in CI, maybe we could rename it and/or purge it from userbase2 and free up zhongx as an account name? Otherwise, I'll assign a different account name to Xiaoliang Zhong for his LCRC account. John

2 3

Hostbase Cleanup
by John Roberts 28 Feb '14

28 Feb '14

So we are running out of IPs on MCS desktop net and this will be a problem soon, if not for sure by summer. Trying to think of a way to rectify this. I’m going to see what I can find as far as Summer student laptops go from the last few years. I think when these machines come in we should make a comment noting this for easier cleanup in the future. I tried to do this for a number of them through the years, but I’m sure more came in that I didn’t add. I’ve also gathered a list of machines last updated in host base from 2007-2009. I’m attaching it here. There are a couple of obvious ones that should stay up, but is there any reason we shouldn’t turn the rest off? If everyone agrees, can you look at the list and tell me what SHOULD stay on in case I miss them? -- John Roberts Argonne National Laboratory Desktop/Network Support MCS/CLS/LCF jeroberts(a)anl.gov

6 5

Where's Martino
by Martino Henderson 28 Feb '14

28 Feb '14

I left my phone at home and had to turn back to get it. I'll be about 15 minutes late. Sent from my Android mobile device. Martino Henderson CELS System Support

1 0

March/April Vacation time
by Murphy-Olson, Daniel E. 26 Feb '14

26 Feb '14

Hi all, I'm planning on taking vacation for 2 weeks in March/April 3/3 - 3/7 3/31 - 4/4 ---- Daniel Murphy-Olson Sr. Systems Administrator Computing, Environment and Life Sciences Division Argonne National Laboratory 630-252-0055

2 1

With all of the discussions on the iOS SSL bug...
by Scott Devoid 26 Feb '14

26 Feb '14

I think it's funny that this news went completely under the radar last Fall... http://www.sicherheitsforschung-magdeburg.de/uploads/journal/MJS-025_Lukas_…

2 1

Where's JohnR?
by John Roberts 26 Feb '14

26 Feb '14

I have a dr appt. today that wasn’t on my calendar. It’s a 5, so I’ll be leaving shortly before then and making up the time now over non-lunch. thanks. -- John Roberts Argonne National Laboratory Desktop/Network Support MCS/CLS/LCF jeroberts(a)anl.gov

1 0

Ti Vacation : 3/24 - 3/28
by Leggett, Torrance I. 26 Feb '14

26 Feb '14

Aidan's spring break is the week of 3/24. I'm taking that week off as vacation.

1 0

MacOS versions.
by rackow＠anl.gov 25 Feb '14

25 Feb '14

Much like that of the XP machines I sent earlier, here is a report on what claims to be outdated MacOS. I didn't include todays patches in the set so things 10.9.1 were considered current. As you know, Windows XP hits end-of-life on April 8, 2014. This is causing concern/attention about running outdated and unsupported operating systems and software at very high levels. Apple over the weekend supplied a patch to iOS that impacts MacOS as well, but they don't have that patch ready. When it is available, it will probably be limited to just Mtn-Lion and Mavericks. This hole impacts all use of SSL protocols on the machine. While it's not clear if that hole exists in the older operating systems, Apple has stated that they only supply patches for the current and 1-prior systems. Other sysetms are supposed to be upgraded. To that end, here are a list of MacOS machines in your area that appear out of date and should be upgraded. This is taken from the User-Agent strings when web browsing. In cases where it only has 10.X, not 10.X.Y, these are coming from tools that don't identify the patch level Where X == 9. (mavericks) You should be upgrading to 10.9.2. This was released on Feb 25, 2014 and fixes the major security hole in their SSL system. Where X == 7(Lion) or 8(Mt.Lion) You should be at 10.X.5. There is also a follow-on 2014-001 patch that needs to be applied to the system for the SSL problem. If they indicate 10.6 or earlier, they are no longer supported. They will need an upgrade plan and/or documentation on why they can not be upgraded. These are what was "seen" on Feb 20-22, if the machine didn't hit our monitor filter, then it's not in this list. More updates may be coming later. niicavo.mcs.anl.gov. 140.221.10.166 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko)" snow.mcs.anl.gov. 140.221.3.28 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko)" tcs-3162.mcs.anl.gov. 140.221.5.10 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko)" brak.mcs.anl.gov. 140.221.10.170 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.107 Safari/537.36" blaas-imac.mcs.anl.gov. 140.221.13.25 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:15.0) Gecko/20100101 Firefox/15.0.1" mendez-mbp.mcs.anl.gov. 140.221.10.18 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:26.0) Gecko/20100101 Firefox/26.0" werner-mbp.mcs.anl.gov. 140.221.11.238 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:26.0) Gecko/20100101 Firefox/26.0" bullock-mbp.mcs.anl.gov. 140.221.11.105 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:27.0) Gecko/20100101 Firefox/27.0" dmarconi-mbp.mcs.anl.gov. 140.221.10.241 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:27.0) Gecko/20100101 Firefox/27.0" dsouza.mcs.anl.gov. 140.221.10.82 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:27.0) Gecko/20100101 Firefox/27.0" horkey-mbp.mcs.anl.gov. 140.221.11.108 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:27.0) Gecko/20100101 Firefox/27.0" palomino-mbp.mcs.anl.gov. 140.221.11.114 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:27.0) Gecko/20100101 Firefox/27.0" platinum.mcs.anl.gov. 140.221.8.32 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:27.0) Gecko/20100101 Firefox/27.0" monera.mcs.anl.gov. 140.221.11.123 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/536.30.1 (KHTML, like Gecko)" aherman-mbp.mcs.anl.gov. 140.221.10.87 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:26.0) Gecko/20100101 Firefox/26.0" carolyn.mcs.anl.gov. 140.221.11.91 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" csi0347245.mcs.anl.gov. 140.221.3.34 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" dzielski-mbp.mcs.anl.gov. 140.221.11.153 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" edietrich-display.mcs.anl.gov. 140.221.11.101 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" jstover-mbp.mcs.anl.gov. 140.221.3.80 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" mkaczmar-mba.mcs.anl.gov. 140.221.3.145 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" vdoyle-mbp.mcs.anl.gov. 140.221.3.55 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" zidel-mbp.mcs.anl.gov. 140.221.11.119 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:27.0) Gecko/20100101 Firefox/27.0" hyperion.mcs.anl.gov. 140.221.11.83 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:27.0) Gecko/20100101 Firefox/27.0" jbischof.mcs.anl.gov. 140.221.11.19 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:27.0) Gecko/20100101 Firefox/27.0" kconrad-mbp.mcs.anl.gov. 140.221.10.187 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:27.0) Gecko/20100101 Firefox/27.0" spark.mcs.anl.gov. 140.221.3.160 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:27.0) Gecko/20100101 Firefox/27.0" --Gene

1 0

Undelivered Mail Returned to Sender
by MAILER-DAEMON＠mcs.anl.gov 25 Feb '14

25 Feb '14

This is the mail system at host mailrelay.mcs.anl.gov. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <unfurbah(a)xsukyfrz.com>: Host or domain name not found. Name service error for name=xsukyfrz.com type=A: Host not found

1 0

FW: FW: EOL on windows boxes.
by Stacey, Craig J. 25 Feb '14

25 Feb '14

Gene, are you sure this is detecting correctly? -- Craig From: jason.sarich(a)gmail.com [mailto:[email protected]] On Behalf Of Jason Sarich Sent: Tuesday, February 25, 2014 11:57 AM To: Stacey, Craig J. Subject: Re: FW: EOL on windows boxes. Craig, I'm not running XP, I'm on a systems-built ubuntu box with no vm, but my chromium command looks like this: /usr/bin/chromium-browser %U --user-agent="Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/534.4 (KHTML, like Gecko) Chrome/6.0.481.0 Safari/534.4" I don't remember if I set this or not to get some broken web page to render, but I will remove the user-agent string. Jason On Tue, Feb 25, 2014 at 11:46 AM, Stacey, Craig J. <stace(a)anl.gov<mailto:[email protected]>> wrote: Your machines are showing up as using Windows XP. I show them as linux boxes, so I'm guessing these must be VMs you're running? Just as a heads up, later this year once XP is officially end of life, the lab's firewall will deny outbound internet traffic from windows XP hosts. If you don't have a specific reason to be running XP, you should upgrade to Windows 7. Let me know if you need help. -- Craig > -----Original Message----- > From: core-helpdesk-bounces(a)mcs.anl.gov<mailto:[email protected]> [mailto:core-helpdesk-<mailto:core-helpdesk-> > bounces(a)mcs.anl.gov<mailto:[email protected]>] On Behalf Of Gene Rackow > Sent: Tuesday, February 25, 2014 11:36 AM > To: core-admins(a)mcs.anl.gov<mailto:[email protected]> > Cc: Rackow, Eugene A. > Subject: EOL on windows boxes. > > FYI, > Doing some web user-agent string digging and see these... > 140.221.10.231<tel:140.221.10.231> "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) > AppleWebKit/534.4 (KHTML, like Gecko) Chrome/6.0.481.0 Safari/534.4" > 140.221.3.32 "Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) > AppleWebKit/534.4 (KHTML, like Gecko) Chrome/6.0.481.0 Safari/534.4" > > With XP coming to an end, DOE-HQ is hot to make it all go away. > While indicating XP, they are also running an ancient version of Chrome. > Can those machines get updated soon? >

3 4