LAL Site Report Michel Jouvin LAL / IN2P3

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 Main Resources 1,5 TB NFS SMB Appletalk www Mail Print LSF Cluster (batch + interactive) Alpha PWS500 Alpha ES47 Gb Ethernet DS20 PC (250)Mac (100) Experiments Servers (Alpha, HP, Linux) DS20e 10 Mb Mechanical CAD (Alphas) Electronic CAD (Sun + Cadence) 100 Mb 100 Go FC Xterm

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 Main Resources Changes More CPUs –Main interactive server replaced by HP ES47 (Alpha) –10 dual P4 Xeon on order (Dell PE 1750, 1U) KVM / IP (Dell DS 2650) for easier managment More TBs –SAN consolidation (fabric redundancy configured) –1,5 TB to be received next week (HDS 9570V) Real end of Tx ? (<30) Less budget… –Severe budget restrictions decided by government

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 Server Software Updates Deployment of Tru64 5.1B started –Presently mainly central cluster –AFS client is a pending issue… Resource monitoring in production –Based on Nagios –Development of user oriented view of the resources (Web-based) and plugins –Automatic notification, history (based on rrd, ext mrtg) –Work done by Jacquelin Charbonnel (unable to come because of budget cut)

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 Mail Service Evaluating Authenticated SMTP to restrict relaying –Sendmail + SASL (CRAM or DIGEST MD5) –Before production, need to work transition from Unix pwd Virus/Spam filtering production –Spam Assassin + MimeDefang –2 phases deployment : Tag in subject allowing client filtering (should start next week) SIEVE server for filtering at delivery (plan for this autumn) Upgrade IMAP server to Cyrus v2 –Required for SIEVE filtering –Main issue : message store conversion (35GB)

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 Windows Infrastructure IN2P3 forest in production –Pilot moved to production in Dec 2002, no major issue –3 days workshop with labs administrators to start the project (Dec. 2002) –9 labs already joined (12 plan to participate) 1 large NT domain migrated (IPN), others new domains –2 technical coordinators (Yves Pharipou, Michel Jouvin) Move LAL domain to IN2P3 forest (by end of July) –Convert back to NT4 and then re upgrade to AD (no production interruption expected)

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 VPN Server Main goals –Windows AD remote access –Mail relaying restricted to LAN connected machines –Clear text pwd protocols (ftp, telnet) to specific devices Based on solution presented by CERN at FNAL –Windows 2000 server –Authentication server : AD controller No need for a separate account –Tunneling : PPTP + CHAP/MS-CHAP –Encryption : MPPE (RSA/RC4) Pilot started last week…

19/5/2003 LAL Site Report - HEPix - Amsterdam 2003 Miscellaneous Projects Unattended Linux installation server –Based on PXE + Kickstart –Ready for public launch –Still no formal support on desktop (Vmware recommended) Web dynamic content management –Evaluating Zope/Plone EDG/LCG –Should resume participation to testbed shortly… Backup : cross backup with IPN (geographically closed, same size as LAL), based on Legato