Staff Training Week ( June 2013) A SECURE AND USABLE COMPUTER SYSTEM FOR ADMINISTRATIVE STAFF Antonio Ruiz González Beatriz Jiménez Valverde

SUMMARY 1. The challenge 1. The challenge 2. The problems 2. The problems 3. Our solution 3. Our solution 4. In numbers 4. In numbers 5. Architecture 5. Architecture 6. Authentication Service 6. Authentication Service 7. Backup Service 7. Backup Service

The challenge Operating system for end-user: Microsoft Windows More than 2000 users, spread over several centers, all around the city. Less than 10 people to manage the system

The problems Main threats: Virus attacks Software misconfiguration Disk space decreasing Document loss or damage Very difficult to manage and maintain.

Our solution Every computer boots every morning with a clean operating system image, that it gets through the network from a server. This process is named Remote Boot Service. The “image” is a pre-installed operating system, currently MS Windows XP. This image is prepared with the software, drivers and applications needed by the staff.

Our solution User profiles are kept at the server in order to apply user customizations when the user logs in at his/her computer. Incrementals: useful tool to add specific software to a computer. User documents are stored using Network Drives, physically located at the server. Data backups at the server guarantee the recovery of documents accidentally lost or damaged.

Our solution User quotas: needed in order to ensure free disk space. The operating system image is kept up to date: antivirus signatures database updated twice a week Microsoft updates applied when available Enforcing user password change: needed for security.

In numbers More than 1600 personal computers connected to the network, booting every morning More than 2000 user accounts 4 servers providing the remote boot service in parallel 1 server for printing services 1 server for users authentication (user accounts management) and Network Drives service.

Architecture University of Granada (UGR) has a distributed data network to support administrative services. Goals distributed data network : Availability Flexibility Scalability

Architecture DC (Data Center) Sta.Lucia DC (Data Center) Mecenas

Architecture DC Sta.Lucia DC Mecenas ….. fibre channel switch switch switch switch backuprobot backupserver diskstoragecabinet diskstoragecabinet applicationserver applicationserver authenticationserverauthenticationserver

Architecture Technologies: SAN (Storage Area Network) NAS (Network Attachment Storage) Standards: Fibre Channel NFS (Network File System)

Authentication Service File & User Authentication Service –> SAMBA Free Software File sharing As if it is a hard disk on client machine. User authentication Each user has his own username/password. System Administrator can grant or deny access on an individual basis. Flexible work environment Allow our servers run on UNIX platform with Solaris operating system and interact with Microsoft Windows clients.

Backup Service Global backup Support : tape Frecuency : Every 6 months Software: Veritas Netbackup Daily differential incremental backup Support : tape Frecuency : Every night Software: Veritas Netbackup Mirror Support : disk Frecuency : 2 a.m,10 a.m,2 p.m and 5 p.m Unix scripts.

Thanks for you attention ! More about us …