80 likes | 200 Views
LAL Site Report. Michel Jouvin LAL / IN2P3 jouvin@lal.in2p3.fr. 100 Go. Alpha PWS500. Alpha ES47. 1,5 TB. Electronic CAD (Sun + Cadence). Mechanical CAD (Alphas). Experiments Servers (Alpha, HP, Linux). Xterm. Mac (100). PC (250). Main Resources. DS20. NFS SMB Appletalk www
E N D
LAL Site Report Michel Jouvin LAL / IN2P3 jouvin@lal.in2p3.fr
100 Go Alpha PWS500 Alpha ES47 1,5 TB Electronic CAD (Sun + Cadence) Mechanical CAD (Alphas) Experiments Servers (Alpha, HP, Linux) Xterm Mac (100) PC (250) Main Resources DS20 • NFS • SMB • Appletalk • www • Mail • Print FC DS20e Gb Ethernet 100 Mb 10 Mb LSF Cluster (batch + interactive) LAL Site Report - HEPix - Amsterdam 2003
Main Resources Changes • More CPUs • Main interactive server replaced by HP ES47 (Alpha) • 10 dual P4 Xeon on order (Dell PE 1750, 1U) • KVM / IP (Dell DS 2650) for easier managment • More TBs • SAN consolidation (fabric redundancy configured) • 1,5 TB to be received next week (HDS 9570V) • Real end of Tx ? (<30) • Less budget… • Severe budget restrictions decided by government LAL Site Report - HEPix - Amsterdam 2003
Server Software Updates • Deployment of Tru64 5.1B started • Presently mainly central cluster • AFS client is a pending issue… • Resource monitoring in production • Based on Nagios • Development of user oriented view of the resources (Web-based) and plugins • Automatic notification, history (based on rrd, ext mrtg) • Work done by Jacquelin Charbonnel (unable to come because of budget cut) LAL Site Report - HEPix - Amsterdam 2003
Mail Service • Evaluating Authenticated SMTP to restrict relaying • Sendmail + SASL (CRAM or DIGEST MD5) • Before production, need to work transition from Unix pwd • Virus/Spam filtering production • Spam Assassin + MimeDefang • 2 phases deployment : • Tag in subject allowing client filtering (should start next week) • SIEVE server for filtering at delivery (plan for this autumn) • Upgrade IMAP server to Cyrus v2 • Required for SIEVE filtering • Main issue : message store conversion (35GB) LAL Site Report - HEPix - Amsterdam 2003
Windows Infrastructure • IN2P3 forest in production • Pilot moved to production in Dec 2002, no major issue • 3 days workshop with labs administrators to start the project (Dec. 2002) • 9 labs already joined (12 plan to participate) • 1 large NT domain migrated (IPN), others new domains • 2 technical coordinators (Yves Pharipou, Michel Jouvin) • Move LAL domain to IN2P3 forest (by end of July) • Convert back to NT4 and then re upgrade to AD (no production interruption expected) LAL Site Report - HEPix - Amsterdam 2003
VPN Server • Main goals • Windows AD remote access • Mail relaying restricted to LAN connected machines • Clear text pwd protocols (ftp, telnet) to specific devices • Based on solution presented by CERN at FNAL • Windows 2000 server • Authentication server : AD controller • No need for a separate account • Tunneling : PPTP + CHAP/MS-CHAP • Encryption : MPPE (RSA/RC4) • Pilot started last week… LAL Site Report - HEPix - Amsterdam 2003
Miscellaneous Projects • Unattended Linux installation server • Based on PXE + Kickstart • Ready for public launch • Still no formal support on desktop (Vmware recommended) • Web dynamic content management • Evaluating Zope/Plone • EDG/LCG • Should resume participation to testbed shortly… • Backup : cross backup with IPN (geographically closed, same size as LAL), based on Legato LAL Site Report - HEPix - Amsterdam 2003