January 2013 - Core-sysadmins - mailman3.cels.anl.gov

ANL AD Notes
by Craig Stacey 31 Jan '13

31 Jan '13

2 2

Fwd: Reminder: 1 Week Left to Submit an Abstract for the NLIT Summit 2013!
by Craig Stacey 31 Jan '13

31 Jan '13

-- Craig Begin forwarded message: > From: Jennifer Resnick <jennifer(a)fbcdb.com> > Subject: Reminder: 1 Week Left to Submit an Abstract for the NLIT Summit 2013! > Date: January 31, 2013 9:10:31 AM CST > To: stace(a)mcs.anl.gov > Reply-To: jennifer(a)fbcdb.com > > Having trouble viewing this email? Click here > > > > > > > > > > > > > REMINDER: One Week Left to Submit Abstracts for the NLIT Summit 2013! > > > January 31, 2013 > Tracks for the NLIT Summit 2013 > Presentation Guidelines for the NLIT Summit 2013 > Submit an Abstract! > Please note: NLIT Summit 2013 is pending DOE approval. All that submit an abstract and/or register will be notified as soon as a decision is made. > > Click Here > to Submit an Abstract! > > Deadline to submit an abstract is Friday, February 8, 2013! > > > Schedule for NLIT Summit 2013: > Monday, May 13th: > Summit Registration & Welcome Reception > Tuesday, May 14th: > Summit Sessions & Exhibit Hall Reception > Wednesday, May 15th: > Summit Sessions, Exhibit Hall & Evening Reception > Thursday, May 16th: > Summit Sessions & Exhibit Hall > New for 2013: Deep Dive Day & Classified Sessions > Click Here to Register to Attend! > > > Tracks for the NLIT Summit 2013 are: > Desktop Management: Desktop Virtualization, Endpoint Protection, Provisioning, Monitoring, Sustainability, Cyber-Security > Network Management: Routers, Switches, Monitoring, Network Virtualization, Wireless, Sustainability, Cyber-Security > Mobility Management: MDM, App Deployment, Hardware, Recharge/Cost Recovery, Data Protection, Administrative Controls, Cyber-Security > IT Management and Governance: ITIL, Enterprise Architecture, Risk Management, Cyber-Security > Collaboration: Tools, Cloud, Desktop Integration, VTC, Cyber-Security > Enterprise: Provisioning / Deprovisioning; Role Management; Data Security; Entitlement Management; Directory Management (Active Directory / Enterprise Directory) > Deadline to submit abstracts is February 8, 2013. > > Presentation Guidelines for the NLIT Summit 2013: > All abstracts and presentations should be cleared for public dissemination. > > This year's NLIT will have a number of formats for presentations and also offer an opportunity for classified presentations. Below are the types of presentations the committee is seeking for this year's NLIT: > 45 minute Presentations: Allow 10-15 minutes of the 45 minutes for questions. > 90 minute Deep Dive: Deep Dives are meant to be more technical, so be prepared to show and discuss your topic to a much fuller extent. Allow 10-20 minutes of the 90 minutes for questions. > Panel Discussion: If you would like to be on a panel for a particular topic, you may simply submit your name and topic area. You may be asked to give a short presentation (5 minutes) on your site's relationship to the topic area. > Birds of Feather Session: If you would like to lead a BoF, please submit a short abstract stating the topic area. > Classified Talks: If you would like to have any of the above sessions as a classified session, please submit an unclassified abstract and check the "request a classified room" in the proposal submission form. Classified talks will require an active DOE "Q" clearance. > > Forward this email > > This email was sent to stace(a)mcs.anl.gov by jennifer(a)fbcdb.com | > Update Profile/Email Address | Instant removal with SafeUnsubscribe™ | Privacy Policy. > FedPage IT Finder | 8975 Henkels Lane | Suite 700 | Annapolis Junction | MD | 20701

1 0

Where's max?
by Max Trefonides 31 Jan '13

31 Jan '13

I left the done light on last night, got a jump and here I come.

1 0

Case for switching to AD auth
by Craig Stacey 30 Jan '13

30 Jan '13

Here's my attempt at bullet point summation of why we want to switch to AD accounts. Feedback welcome. Apologies for rich text. Existing Situation §MCS Accounts –Unrelated to Argonne accounts –Have their own sponsorship and expiry rules –Have their own username and passwords –Have their own authentication system §Argonne accounts –Status tied to HR status (for non-collaborator accounts). Account is disabled when employment/appointment ends. –180 day password expiration rule –Collaborator accounts for people who have no appointment renew annually. •Temporary employees would not need a collaborator account. An active appointment is all that’s required, including no-pay appointments. Advantages of switching §Easier on the users –New employees and employees who transfer from other divisions have great difficulty determining whether to use their MCS or ANL credentials. –A single password will work for any resources that use password authentication –Integration into broader authentication schemes such as InCommon and eduroam (both of which are in early testing at Argonne now). §Lower burden of account administration –We can focus on resource provisioning and access, but no longer need to worry about staying on top of status changes and account expirations. Which leads to… §Better compliance with lab requirements on account policies. –The laboratory (via the Board of Governors) has strict requirements on the timing, handling, and closing of accounts held by those whose appointments end. We are minimally compliant, but this will make us fully compliant. Disadvantages of switching §Some established users will resist. –Many won’t like the password expiry requirements, though this is a requirement of lab cyber security policy §Username differences –We can allow existing users to keep their MCS usernames in the case of conflict for Unix accounts and e-mail addresses. New users will be required to use the ANL account name to avoid conflicts. –Users who have different usernames between MCS and ANL will be given the option to rename one or the other as well, allowing them to match up. §Accounts cannot switch between collaborator (external) and regular accounts. –If someone has an appointment and wishes to keep their account beyond their termination date, a no-pay appointment will need to be set up. Otherwise, the account will close and they can open a collaborator account under a new username. §MCS will have no leeway or flexibility in enabling accounts. –If an account is closed due to policy, we do not have the administrative capability to override that. –This includes new employees and appointments. Argonne accounts are often not created until the second day of employment. We may not have a choice §Exchange is probably going to drive this. –Despite the recent upgrade to Zimbra 7, it is looking extremely likely the lab will switch to running a single e-mail environment under Microsoft Exchange. That lacks the ability to have multiple authentication back ends, and thus will require all e-mail accounts to authenticate against Argonne Active Directory. –Moving forward on this prior to it becoming an issue will allow us to handle transitioning authentication more smoothly and have that problem solved before focusing on the project of migrating to a new mail system. -- Craig

6 11

Re: Cron <root@newman> /root/bin/create-mailbox-list.sh force
by Craig Stacey 26 Jan '13

26 Jan '13

Huh. No idea where this came from, and why there were three of them at 11:30. A test run again ran cleanly. I'll see what happens at noon. On Jan 26, 2013, at 11:30 AM, Cron Daemon <root(a)mcs.anl.gov> wrote: > ssh_exchange_identification: read: Connection reset by peer > rm: cannot remove `/etc/postfix/dropbox/owney.mcs.anl.gov': No such file or directory > mv: cannot stat `/etc/postfix/address-lists/mailboxes': No such file or directory > mv: cannot stat `/etc/postfix/address-lists/aliases': No such file or directory > cp: cannot stat `/etc/postfix/address-lists/lists-and-rt': No such file or directory > mv: cannot stat `/etc/postfix/address-lists/lists-and-rt': No such file or directory > mv: cannot stat `/etc/postfix/address-lists/stage1': No such file or directory [...] -- Craig

1 0

Re: Cron <root@newman> /root/bin/create-mailbox-list.sh force
by Craig Stacey 26 Jan '13

26 Jan '13

Looks like someone got to this and rebooted owney. I just verified that things ran cleanly. On Jan 26, 2013, at 10:30 AM, root(a)mcs.anl.gov (Cron Daemon) wrote: > ssh_exchange_identification: read: Connection reset by peer > scp: /tmp/mailman-domains/*: No such file or directory > Failed to ssh to owney -- Craig

1 0

Where's max?
by Max Adam Trefonides 25 Jan '13

25 Jan '13

Feeling like crap, going back to bed. I expect to feel well enough to get online by this afternoon. Please put me down got a sick day.

1 0

No services meeting tomorrow
by Craig Stacey 23 Jan '13

23 Jan '13

I don't have anything requiring us to meet, let's use the hour productively. -- Craig (mobile)

1 0

Fwd: Avere Systems Meeting
by Craig Stacey 18 Jan '13

18 Jan '13

Anyone interested in meeting with Avere on Wednesday afternoon or Thursday afternoon next week? -- Craig Begin forwarded message: > From: Steve Kives <skives(a)averesystems.com> > Subject: Avere Systems Meeting > Date: January 18, 2013 3:48:15 PM CST > To: stace(a)mcs.anl.gov > Cc: Kent Ritchie <kritchie(a)averesystems.com> > > > Craig, > > Thanks for your time today on the phone. > > We would like to meet next week to review Avere's 3.0 release of code which includes SMB2 support as well GNS and Non-disruptive data migration. January 23rd in the afternoon or anytime on the 24th works for us. Let me know what works best for you. > > Thanks > > Stephen Kives > Sales Director| North Central > Mobile: +1.248.219.0746 > E-Mail: skives(a)averesystems.com > > > > > > > > > > >

1 0

NLIT presentations?
by Craig Stacey 18 Jan '13

18 Jan '13

Anyone interested or have ideas? In the tracks below, the following presentation types are being sought: 45 minute presentation, 90 minute Deep Dive presentation, Panel Discussion, or BoF session. > Tracks for the NLIT Summit 2013 are: > > • Desktop Management: Desktop Virtualization, Endpoint Protection, Provisioning, Monitoring, Sustainability, Cyber-Security > • Network Management: Routers, Switches, Monitoring, Network Virtualization, Wireless, Sustainability, Cyber-Security > • Mobility Management: MDM, App Deployment, Hardware, Recharge/Cost Recovery, Data Protection, Administrative Controls, Cyber-Security > • IT Management and Governance: ITIL, Enterprise Architecture, Risk Management, Cyber-Security > • Collaboration: Tools, Cloud, Desktop Integration, VTC, Cyber-Security > • Enterprise: Provisioning / Deprovisioning; Role Management; Data Security; Entitlement Management; Directory Management (Active Directory / Enterprise Directory) > While we encourage abstract submissions in one of the above categories, we welcome any submissions that the presenter feels is of interest to other laboratories. > > The authors of selected presentations will be notified by March 20th. > > The NLIT Society will start accepting proposals on January 8th. All proposals must be submitted by midnight EST on February 8th. A confirmation email will be sent once the submission has been received. Please look over the confirmation email to ensure your submission is correct. -- Craig

3 3