# Presentation: 849981

## CSS ServicesActivities Coordination Meeting

- March 2006
- Mark Kaletka, Kevin Hill, Ray Pasetes

## Agenda

- CSS Services Overview – Mark Kaletka
- Anti-Spam Update – Kevin Hill
- Server Consolidation Project (NAS) Update – Ray Pasetes

## General Overview of Plans for FY06

- SAN/NAS
- Site Backups
- Email
- Calendar
- Site Antivirus
- Web
- NGOP
- Other Central Services/Servers

- Windows Domain
- Security & Security Infrastructure
- Configuration Management & Inventory Control
- FNALU
- Software Products
- HelpDesk

## Covered in Other Meetings

- Fermigrid
- Databases
- Information Management
- Desktop support
- CMS support
- ILC support
- Other direct support to Div/Sec/Exp’s
- Etc, etc, etc.

## SAN/NAS

- See Ray’s talk

## Site Backups

- In production:
- Spectralogic T920 robot, 8 SuperAIT tape drives, TiBS software, 2 Sun backup servers, disk cache on SAN
- Partitioned & jointly administered by CSI, SCS
- 385 systems, 12.5 TB “fulls”, more _[metrics](http://www-css.fnal.gov/csi/afs/stats/tibs/html/bindex.html)_
- Plan to increase tape slot capacity this FY
- More _[info](http://cd-docdb.fnal.gov/cgi-bin/ShowDocument?docid=742)_

## Email

- Improved spam filtering
- Greylisting
- “Backscatter”
- Reduce relay potential
- (Above covered in Kevin’s presentation)
- Ongoing warfare
- LDAP Consolidation
- One redundant LDAP database for authentication
- Single sign-on for IMAP, MM, Jabber, etc, etc, etc.
- Listserv
- Start looking at potential replacements
- IMAP Servers
- IMAP “farm” alias
- _[Metrics](http://computing.fnal.gov/email/statistics/)_

## Slide 8

## Calendar

- Meeting Maker
- Recent major upgrade
- MM Outlook Connector
- LDAP consolidation
- Server-side notifications (paging, etc.)
- MM development tools integrated with Information Management projects (leave calendar, etc.)
- WebEvent/InDiCo
- Researching enterprise-wide scheduling tools (calendaring, meeting organization, etc.)
- InDiCo being _[prototyped ](http://indico.fnal.gov/index.py)_(chosen by ILC)

## Site Antivirus

- Responsible for central antivirus infrastructure for whole Lab
- Windows (implemented)
- Mac (being implemented)
- Linux (being researched)
- See your baseline configuration doc for requirements (in flux)
- Design note for Windows _[here](http://cd-docdb.fnal.gov:8080/cgi-bin/ShowDocument?docid=865)_

## Web

- Support central web servers
- Load balanced, redundant, secure (as we can make them)
- Apache & IIS
- _[Urchin ](http://urchin.fnal.gov:9999/)__monitoring – enormous detail available_
- Requires a password
- Security an ongoing effort
- Especially vulnerable to user-installed CGI’s, etc.

## Collaboration Tools

- Email
- (See above)
- Calendar
- (See above)
- Instant Messaging (Jabber)
- Supports Windows/Linux/Macintosh
- Communication kept secure
- Account information integrated with LDAP
- Investigating Kerberos support
- More info here

## NGOP

- See briefing here

## Configuration/Inventory Management

- Driven by DOE requirements
- Required in baseline configs
- SMS is the chosen framework
- Extensive deployment of SMS for Windows
- Implementing OCSInventoryNG as Open Source “SMS for Linux” (tie into SMS db)
- Testing Vintella commercial add-on for SMS for Mac OSX
- Detailed reports available (requires account)

## Windows Domain

- Domain Controllers
- Authentication “major application” for Windows
- Responsible for support Lab-wide, incl. OS & HW upgrades
- AD Controls NT4 domain migration
- Finally happening during shutdown (we think)
- Chair Windows Policy Committee

## Central Servers

- Windows Virtual Server
- Print Server
- Windows
- Unix
- Plone
- Part of Information Management now..

- MS-SQL, mySQL, PostGRES
- Software Repositories
- Cdcvs
- Fnkits
- Pseekits
- Bldcluster
- License Servers
- Etc, etc, etc.

**Notes:**
Not much discretionary budget, dominated by hw/sw support contracts.

## FNALU

- This cluster offers a well known, safe and  supported computing resource for the FermiLab population locally and remotely
- Services
- MySql, Mafia, Ansys, License’s, Email, LSF batch, Code development, Experiment computing, General purpose computing, Mambo
- Experiments and Users
- Minerva, Coupp, Selex, E871, Minos, CMS, E875, E881, E761, E781, Helpdesk, OSG, ...

## Security Work

- Security Infrastructure
- Kerberos & Windows Authentication
- Central Patching (Windows, Linux, Mac)
- Site Antivirus
- Configuration Management
- SMS, etc.
- Baseline Configuration Documents
- Central Service Security Plans

- Windows Authentication Security Plans
- Tools (mainly from Information Management)
- Certificates
- FCIRT workflow
- Risk analysis
- Sysadmindb
- Etc.
- Incident Response
- FCIRT, GCSC, Sysadmins, etc.

## Helpdesk

- Front tier support for CD services
- Of all kinds
- Accounts (passwords, etc.) are a big load
- New role with OSG support centers
- Close integration w/ Desktop Support
- Plan incremental improvements in:
- User interface
- Automated paging
- Off-hours call service
- HelpDesk workflow
- Remedy application support for PPD, AD, ES&H, others

**Notes:**
Defer?

## Software Products

- Scientific Linux
- Builds for 32 bit SL from “upstream vendor” source
- CERN builds 64 bit SL
- Customizations for Fermi SLF & workgroups
- Distribution infrastructure
- Participate in “community support”
- Increasing participation from outside
- The Written Word (TWW)
- Common Open Source packages for Sun, SGI
- Linux included in SLF
- Commercial (low-cost) support
- Documentation here (old)
- UPS/UPD
- No active development but still in use
- Future? (For some other meeting...)

**Notes:**
No good Division strategy here.

## Fin