June 2013 - Core-sysadmins - mailman3.cels.anl.gov

usagedb refresh
by Ken Raffenetti 03 Jul '13

03 Jul '13

Stu, The server that houses the usagedb database is at 85% full. /dev/sdb1 4.9T 3.9T 746G 85% /var/lib The hardware is from 2009 and is out of support. If this is still to be housed at MCS, we need to start the process of procuring a new machine. Can you help us with that? -- Ken Raffenetti Systems Administration Associate MCS Division - Argonne National Laboratory

3 7

Argonne Username Change Draft
by Craig Stacey 01 Jul '13

01 Jul '13

Hi. As announced on May 21, we've got a change coming in MCS accounts. You can see the details here if you've forgotten: http://mcssys.wordpress.com/2013/05/21/some-upcoming-changes-you-may-have-h… The short version is that we're getting rid of the concept of "MCS accounts" and you will use your Argonne account to login to MCS resources beginning later this year. Our first pass at making this change go smoothly is identifying users whose MCS username and Argonne username currently differ and fixing those differences. You're getting this note because we've identified you as one of those users. The good news (at least, as far as we're concerned) is that your MCS username is available as an Argonne username. Ideally, the way we'd like to handle as many of these as we can is to have the Argonne username change to match the MCS username, since you probably have a lot of history in your MCS username (your home directory, the login you use most frequently, etc.). Once those are done, we'll deal with users who have differing usernames, but the MCS name is not available. Now, since we've identified you as someone whose username is currently available, we'd like to get that taken care of as quickly as possible, lest it cease to be available. The best and quickest way to handle this is for us to change these in bulk. We'll be doing the batch that includes your account on July 22. We'll send you a note to remind you before, and a note once it's done. Once this is changed, you'll need to use that username for any Argonne logins (inside.anl.gov, kronos, etc.) The passwords will still be technically separate for now, but that will be solved when we make the final switch to Argonne accounts for everything. After July 22, we recommend you change both your MCS and Argonne passwords at the same time, and have them match up. This way, when we do make the switch, you won't even notice the switch since you'll already be using the same username and password you'll be using going forward. We'll send instructions on how and when to change your passwords with the "all clear" note. If, for some reason, you really don't want to use your current MCS username as your Argonne username, let us know before July 22 and we'll see what options are available to you. Likewise, if you have any questions, please feel free to contact me or send a note to systems(a)mcs.anl.gov. -- Craig

4 7

Fwd: IGSB networks
by Craig Stacey 28 Jun '13

28 Jun '13

Is this something we handle through IHW or is this something we need to ping CIS to do for us? Ultimately we're looking to have 140.221.76.0/22 to be counted as an Argonne network (probably (though I guess the request to not trust .79 makes it into just the bottom 3 /24s in that range). IHW shows it as a Green network, but I don't think that's affecting anything. This is probably something in the firewall configs, so hopefully Corby will have an opinion. -- Craig Begin forwarded message: > From: Hunter Matthews <hunter(a)mcs.anl.gov> > Subject: IGSB networks > Date: June 6, 2013 4:53:21 PM CDT > To: Craig Stacey <stace(a)mcs.anl.gov> > > Craig, > While testing some newly registered IP's in hostbase I noticed a failure to resolve DNS from the anl dns servers. The MCS > DNS servers work fine. > > The newly registered IP's are in the 140.221.77/24 subnet. > > IGSB has 4 subnets assigned: > > 140.221.76/24 is the mgrast complex. I call that network IGSB-MGRAST. > 140.221.77/24 is everything else that isn't mgrast. I call it IGSB-CORE. > 140.221.78/24 is unused at the moment but intended for similar purposes. I don't have a name for it. > 140.221.79/24 is unused at the moment as well. If IGSB ever needs a DMZ/untrusted network I was going to use this. > > Long story short, I would like argonne to trust .76, .77 and .78 and to leave .79 as other/untrusted if possible. > > If thats politically complicated just make them all the same (trusted) and we'll apply for an untrusted net when we > actually need it. > > -- > Hunter Matthews Unix Administrator > Office: Bldg 240 Room 2139 Argonne National Labs, MCS > Key: F0F88438 / FFB5 34C0 B350 99A4 BB02 9779 A5DB 8B09 F0F8 8438 > Never take candy from strangers. Especially on the internet. >

3 5

Userbase script error
by Chris Walker 27 Jun '13

27 Jun '13

looks like something was going after cored by ip: /my/adm/userbase/bin/removemcswebuser dubey Errors: Traceback (most recent call last): File "/my/adm/userbase/bin/removemcswebuser", line 17, in ? db='clsweb') File "/usr/lib/python2.4/site-packages/MySQLdb/__init__.py", line 66, in Connect return Connection(*args, **kwargs) File "/usr/lib/python2.4/site-packages/MySQLdb/connections.py", line 134, in __init__ super(Connection, self).__init__(*args, **kwargs2) _mysql_exceptions.OperationalError: (1045, "Access denied for user 'clsdama'@'10.140.224.15' (using password: YES)")

4 13

Where's max?
by Max Trefonides 27 Jun '13

27 Jun '13

In traffic. 15 minutes or so late. Agh sorry

1 0

Where's Hunter
by Hunter Matthews 26 Jun '13

26 Jun '13

My air 13" is really dead this time and I have an appointment with the genuis bar at 7pm so I'll be leaving a little early to make that time. -- Hunter Matthews Unix Administrator Office: Bldg 240 Room 2139 Argonne National Labs, MCS Key: F0F88438 / FFB5 34C0 B350 99A4 BB02 9779 A5DB 8B09 F0F8 8438 Never take candy from strangers. Especially on the internet.

1 0

Fwd: [mcs-systems #167302] Testing your mail
by Max Trefonides 25 Jun '13

25 Jun '13

FYI: -- Max Trefonides MCS Systems maxadam(a)mcs.anl.gov Begin forwarded message: > From: Max Trefonides <maxadam(a)mcs.anl.gov> > Subject: Fwd: [mcs-systems #167302] Re: Testing your mail > Date: June 18, 2013 4:58:02 PM CDT > To: Mike Rios <mrios(a)anl.gov> > > This is a user who was suspended in our account system yesterday, we reactivated and now the user does not see any old mail in his account. > > > I gotta go, but this is what our system ran ... > > /root/bin/zimbra-deact.sh mcs.anl.gov knight > > it looks like this is what was run: > > root@newman:/etc/postfix# less /root/bin/zimbra-deact.sh > #!/bin/sh > > DOMAIN=$1 # domain name > USERNAME=$2 # Username > > if ssh -q -i /root/.ssh/zimbra-deact-key mcsadmin(a)zimbra.anl.gov $DOMAIN:$USERNAME > then > if ! /root/bin/update-zimbra-user.sh $DOMAIN $USERNAME REMOVE > then > echo mailrelay fail > exit 1 > fi > else > echo zimbra fail > exit 1 > fi > > UGH! why is that a REMOVE?!?!? > > > Can you help me restore this account? new mail has been being delivered today, I wanted to tell you as soon as I knew, to try to avoid the problem we had last time. right now I have a little league playoff game to get to ... > > > -- > Max Trefonides > MCS Systems > maxadam(a)mcs.anl.gov > > Begin forwarded message: > >> From: Chris Knight <knight(a)mcs.anl.gov> >> Subject: [mcs-systems #167302] Re: Testing your mail >> Date: June 18, 2013 4:46:03 PM CDT >> To: Tina Stanton-Piersanti <tstanton(a)mcs.anl.gov> >> Cc: systems(a)mcs.anl.gov >> Reply-To: systems(a)mcs.anl.gov, Chris Knight <knight(a)mcs.anl.gov> >> >> quick update: messages started coming in at 3:48pm (which is, of course, shortly after I created the ticket), but contents from Saturday still gone. >> >> chris >> >> >> On Jun 18, 2013, at 4:41 PM, Tina Stanton-Piersanti <tstanton(a)mcs.anl.gov> wrote: >> >> >> >

4 7

Re: June Electric
by Craig Stacey 25 Jun '13

25 Jun '13

https://sharepoint.anl.gov/Divisions/mcs/operations/Systems%20Documentation… -- Craig On Jun 19, 2013, at 11:18 AM, Ti Leggett <leggett(a)mcs.anl.gov> wrote: > I'm not sure what that means. Can you explain a little more and then maybe I can dig up something? > > On Jun 19, 2013, at 11:15 AM, Jim Feigl <feigl(a)mcs.anl.gov> wrote: > >> Ti: >> >> In Craig's absence, can you provide me the needed BCM report of power usage by machine? >> >> Thanks >> Jim >> >> >> Begin forwarded message: >> >>> From: Jim Feigl <feigl(a)mcs.anl.gov> >>> Subject: Fwd: June Electric >>> Date: June 19, 2013 11:13:47 AM CDT >>> To: Craig Stacey <stace(a)mcs.anl.gov> >>> >>> Craig: >>> >>> Can you provide me the BCM report for 30 days, May 16 to June 14 ? >>> >>> Thank you. >>> Jim >>> >>> >>> Begin forwarded message: >>> >>>> From: "Pesavento, Carol V." <cdixon(a)anl.gov> >>>> Subject: June Electric >>>> Date: June 19, 2013 10:46:03 AM CDT >>>> To: "Wesolowski, Linda L." <LWesolowski(a)anl.gov>, "Feigl, James J., Jr." <feigl(a)anl.gov> >>>> >>>> My entry is due on Tuesday the 25th this month. >>>> >>>> If I can get numbers by this Friday the 21st that would be great. But I understand if you will not have them ready until next week. >>>> >>>> Thanks for your help! J >>> >> >

1 0

Re: ALCF use of Tivoli
by Craig Stacey 25 Jun '13

25 Jun '13

Okay, we need to gather that list. I suspect once we're done moving, it will be all LCF machines on those boxes, yes? Is vserver.mcs.anl-external.org really for LCF? -- Craig On Jun 20, 2013, at 3:47 PM, Max Trefonides <maxadam(a)mcs.anl.gov> wrote: > Craig, > > I neglected to CC you on this: > > -- > Max Trefonides > MCS Systems > maxadam(a)mcs.anl.gov > > Begin forwarded message: > >> From: William Allcock <allcock(a)alcf.anl.gov> >> Subject: Re: ALCF use of Tivoli >> Date: June 20, 2013 3:21:07 PM CDT >> To: Max Trefonides <maxadam(a)mcs.anl.gov> >> Cc: William Allcock <allcock(a)alcf.anl.gov>, "dolson(a)mcs.anl.gov Olson" <dolson(a)mcs.anl.gov> >> >> I will approve this for this year, but I would like to understand what is running on those servers. I know we bought two servers so that we were sure that we had enough horsepower for our services, but I *think* those boxes are being used for non-ALCF services as well, in which case ALCF probably shouldn't be picking up the entire tab. On the other hand, I could be completely off-base. >> >> Bill >> On Jun 20, 2013, at 11:59 AM, Max Trefonides <maxadam(a)mcs.anl.gov> wrote: >> >>> This is based on a percentages of the services that each group runs on the servers that we back up. >>> >>> These three servers are LCF machines: >>> >>> PVU HOST >>> === =================== >>> 100 BG.ANL-EXTERNAL.ORG >>> 400 VSERVER.MCS.ANL-EXTERNAL.ORG >>> 840 VSERVER2-ALCF-221.MCS.ANL.GOV >>> === >>> 1340 >>> >>> >>> -- >>> Max Trefonides >>> MCS Systems >>> maxadam(a)mcs.anl.gov >>> >>> On Jun 20, 2013, at 8:43 AM, William Allcock <allcock(a)alcf.anl.gov> wrote: >>> >>>> Max, >>>> >>>> I am being asked to authorize the charges for the ALCF use of the MCS tivoli. I honestly don't know what we use it for. Can you tell me what we use and how you determined the PVUs? >>>> >>>> Thanks, >>>> >>>> Bill >>>> >>>> This is the table I am being asked to approve, from an email you sent yesterday: >>>> >>>> >>>> Here's how the numbers break down in terms of PVUs per group, (also see attached spreadsheet): >>>> >>>> >>>> Group PVUs Percentage >>>> ---------------------------------- >>>> ALCF 1340 9.71 >>>> Bredbrd 400 2.90 >>>> COSMEA 600 4.35 >>>> GLOBUS 1000 7.25 >>>> I2U2 200 1.45 >>>> KBASE 560 4.06 >>>> LCRC 400 2.90 >>>> MCS 7100 51.45 >>>> MREN 200 1.45 >>>> NETWORK 600 4.35 >>>> SEED 1400 10.14 >>>> ======================= >>>> TOTAL 13800 100.00 >>>> >>>> >>>> -------------------------------------------------------------- >>>> William (Bill) E. Allcock >>>> allcock(a)alcf.anl.gov >>>> Office 1123, Bldg 240 >>>> 9700 S. Cass Ave >>>> Argonne, IL 60439 >>>> Google Voice: 630-233-4865 (preferred) >>>> Office: 630-252-7573 >>>> Fax: 630-252-6585 >>>> >>>> >>>> The test of courage comes when we are in the minority. >>>> The test of tolerance comes when we are in the majority. >>>> - Ralph W. Sockman >>>> >>> >> >> -------------------------------------------------------------- >> William (Bill) E. Allcock >> allcock(a)alcf.anl.gov >> Office 1123, Bldg 240 >> 9700 S. Cass Ave >> Argonne, IL 60439 >> Google Voice: 630-233-4865 (preferred) >> Office: 630-252-7573 >> Fax: 630-252-6585 >> >> >> The test of courage comes when we are in the minority. >> The test of tolerance comes when we are in the majority. >> - Ralph W. Sockman >> >

1 0

Master Keys
by Craig Stacey 25 Jun '13

25 Jun '13

If the need arises for us to need access to a locked office for support purposes when someone with a master isn't available, I now have sub-masters for floors 1-4. Because these are in my name (and ultimately my responsibility if they go missing), I'm going to keep them in my office rather than the safe. There are two keys, one works on 1-3 and one works on 4. I didn't get one for 5, since it would also include 6 and 7 and I don't want that responsibility. If you need to get these, they're in my office in the little IBM SP model behind my phone. Let me know any time you use them. This is kind of an experiment and I don't want it to go badly since the last time a master was lost it was an expensive pain in the ass. -- Craig

1 0