LAL Site Report

1
LAL Site Report

• Michel Jouvin
• LAL / IN2P3
• jouvin_at_lal.in2p3.fr

2
Main Resources

DS20
LSF Cluster

• NFS
• SMB
• Appletalk
• www
• Mail
• Print

DS20e
Gb Ethernet
100 Mb
10 Mb
3
Main Resources Changes

• More Linux CPUs
• 25 dual Opteron 2,2 installed (IBM e325, 1U)
• Linux upgrade to Scientific Linux
• Currently installed on all new machines (i386 or
  amd64)
• Proposed on desktop, preconfigured with Kickstart
• Network new switch with 10 Gbs uplink
• XtremNetworks Summit 400 (48 Gb ports)
• Used by Opteron farm
• Plan to replace central switch (Cabletron SSR
  8000) next year

4
Mail Service

• Authenticated SMTP in production
• Required to relay through LAL mailer (roaming
  users, home access)
• Based on Sendmail SASL
• Password management integrated in npasswd used
  for NIS passwords
• LAL extensions to npasswd
• Spam Bayesian filtering useful
• Filtering efficiency 95
• Slow learning curve for this filter (3 months)
• Need to feed filter db with undetected SPAM once
  a month at least
• New patterns appear on a regular basis
• Undetected SPAM collection need to be automated ?
• Plan to move to Cyrus v2
• SIEVE for filtering at message delivery (server
  based)

5
Windows Infrastructure

• IN2P3 forest in production
• 11 labs in production
• All IN2P3 labs should participate
• No problem so far
• Move of LAL AD domain to IN2P3 forest delayed
• Planned this summer but time is missing
• Challenge transparent to users, preserving GPOs
• By the end of the year ?
• Pressure growing as this is requirement to use
  national repository for mechanical CAD/CAM (CATIA
  SmarTeam PDF)

6
Windows Infrastructure

• SMS key management component for LAL
• Complements AD based tools
• Deployment of security patches, SPs and system
  upgrades
• SUS feature pack (presented at Edinburgh meeting)
• Based on SMS inventory and logging capabilities
  (push model)
• Plan to upgrade to SMS 2003
• Better integration of SUS features
• Integration with ActiveDirectory
• Virus attack caused by a problem in CISCO ACLs
• Few machines affected (unpatched machines,
  proactive patching critical)
• Checking is time consuming

7
Printing Multi-Site Printer Wizard

• Based on CERN Printer Wizard (Windows only)
• Management of LPR based printers by an
  unprivileged user
• Printers described in a central database
• Support any LPD/LPRng server
• Now supports the concept of Site
• Work done in common between CERN and LAL
• Allow to use the same client on several sites
• Each site has its own database of printers
• In production at LAL since last summer
• Very appreciated by our users involved in CERN
  experiments
• Could be used/supported by other sites to help
  traveling users

8
GRID

• Strong involvement from LAL in EDG / LCG / EGEE
• LCG Tier 2 (plan to do in common with DAPNIA)
• 4 FTE including PTB leader (Cal Loomis)
• Still 1 additional open position to fill (2 years
  European contract)
• Fabric currently 40 CPU (1/3 Xeon 3Ghz, 2/3
  Opteron 2.2 Ghz)
• Recent machines running SL
• Current focus middleware deployment, Quattor
  integration
• XtremWeb a P2P computing project
• Partnership with LRI (Orsay, computing research)
  for 4 years
• Significant resources 30 CPUs (Xeon 3 Ghz,
  Opteron 2.2 Ghz)
• LAL interest use of P2P resource as a fabric
  via OGSA

9
Miscellaneous Projects

• Unattended Linux installation server
• Currently based on Kickstart for initial
  installation
• Still planning to investigate EDG WP4 Quattor
• Initial installation and updates
• Servers and desktops
• In conjunction with EGEE involvement
• Serial Console Management with SLAC/CERN tool
• Presented at Hepix by C. Boeheim and H. Meinhard
• Conference organization tool
• InDiCo installation in progress
• EU project based on CERN Agenda, presented at
  Edinburgh
• Automatic visitor registration and DHCP quarantine