LAL Site Report

1
LAL Site Report

• Michel Jouvin
• LAL / IN2P3
• jouvin_at_lal.in2p3.fr

2
Main Resources

DS20

• NFS
• SMB
• Appletalk
• www
• Mail
• Print

DS20e
Gb Ethernet
LSF Cluster (batch interactive)
100 Mb
10 Mb
3
Main Resources Changes

• More Linux CPUs
• 10 dual P4 Xeon on order (Dell PE 1750, 1U)
• More TBs
• HDS 9570V 1.5 TB
• Running very well
• Less budget
• Budget uncertainty (always changing)
• No OS upgrade since last meeting

4
Mail Service

• Virus/Spam filtering production
• Spam Assassin MimeDefang
• Message tags still processed by clients
• Less efficient since September
• Late with all our main projects for mail service
• SIEVE for filtering at message delivery (server
  based)
• Upgrade IMAP server to Cyrus v2
• Required for SIEVE filtering
• Authenticated SMTP

5
Windows Infrastructure

• IN2P3 forest in production
• 7 labs in production
• 4 labs should join shortly (by the end of 03)
• No problem so far, even if master domain not
  reachable
• 1 global catalog per site
• Forest management not to heavy
• Domain management delegated to labs
• Move of LAL domain to IN2P3 forest delayed
• Planned in November
• Back to NT4 domain and reupgrade to
  ActiveDirectory

6
Blaster/Lovesan

• Not too much affected
• Ports attacked filtered in border router
• 7 PCs, infected outside LAL
• Continuing
• Main tool SMS
• Rapid deployment of fixes
• 2nd alert (Sept 10th) 90 of running PCs
  patched in 2 hours
• Detection of infected PCs based on inventory
• Can take 3 days to detect an infected PC
• Investigate automatic isolation of weak/infected
  PCs

7
VPN Server

• Based on solution presented by CERN at FNAL
• Windows 2000 server
• Authentication server AD controller
• No need for a separate account
• Tunneling PPTP CHAP/MS-CHAP
• Encryption MPPE (RSA/RC4)
• Works with Macintosh (tested) and Linux (not
  tested)
• Now in production
• Current service access to ActiveDirectory,
  management (RDP, SMS)
• Plan to investigate RADIUS authentication
• Performance impact unclear (WAN vs server)

8
Miscellaneous Projects

• Unattended Linux installation server
• Currently based on PXE Kickstart
• Plan to investigate WP4 Quattor
• Servers and desktops
• Web content management
• Zope abandoned
• Home made solution (J. Charbonnel)
• EDG/LCG/EGEE
• Strong LAL involvement (3 persons)