Rob McNicholas

An email with the subject “validate and upgrade to our new Mail hub system.” has been sent to many addresses in EECS. This email includes a link to a website with “txstate.edu” in its URL. This is a phishing attack and should be ignored and deleted.

After the [campus-wide power failure](http://www.dailycal.org/2013/09/30/campus-wide-power-outage-disrupts-classes-early-monday-evening/) of 9/30, most IT services in EECS have been restored. IRIS-managed networks (wired and wireless), email, mailing lists, file service and web services have all recovered.

At this time (9:35am) power has just been restored to 165 Cory and staff are bringing equipment back up. If you manage equipment in 165 Cory, this would be a good time to check on it.

At this time we do not have any information on whether any EECS classes might be canceled. We will post updates to this article as more information becomes available.
[Read more…] about EECS Recovering from Campus Power Failure

IRIS is pleased to announce that our new LDAP infrastructure is ready for public testing. The new LDAP servers are now accessible from any on-campus host at openldap.eecs.berkeley.edu. TLS is supported on port 389 and SSL on port 636, using a new certificate from InCommon.

#Testing
Programmers and system administrators are encouraged to test any applications or scripts they maintain against this new infrastructure. The only change that should be needed for testing is to change the hostname to openldap.eecs.berkeley.edu.

Please send any questions or report any problems that come up during testing to [help@eecs.berkeley.edu](mailto:help@eecs.berkeley.edu)

#Architecture
openldap.eecs points to a redundant load balancer, which at this time is routing ldap requests to one of three backend OpenLDAP servers that are running in multi-master mode. These load balancers and backend servers are a combination of physical and virtual hosts located in independent data centers across campus (Sutardja-Dai Hall, Soda Hall, Warren Hall). With this architecture, a power or network failure in any one building will not bring the service down.

#Schema Changes
The schema is largely unchanged, save the removal of objectclasses and attributes that were added by the Sun/iPlanet IMAP and Calendar applications previously in use in the department. With the migration to bMail and bCal, these attributes are no longer needed and so have been removed.

#Timeline

• 9/6 openldap.eecs initial public testing with a snapshot of test data. Reliability testing ongoing. [1]
• 9/11 openldap.eecs is syncing real data from ldap.eecs. firewall is opened up to world. Testing continues. Reliability testing done.
• 9/18 Assuming no major problems reported, ldap.eecs and ldap.cs become nicknames for opendap.eecs

#Notes
[1] During the next week IRIS will be conducting reliability testing, meaning we will be taking down some of the servers to ensure the service as a whole stays up. This testing might affect performance but should be completed by 9/11/2013.

[IRIS](https://iris.eecs.berkeley.edu) is embarking on a project to upgrade the department’s LDAP infrastructure (ldap.eecs and ldap.cs) before the summer is over. The current server software is a proprietary product that is at the end of its lifetime. We are migrating to an open-source product that is in wide use, [OpenLDAP](http://www.openldap.org/).

Our goal is for this transition to be largely transparent. Basic functionality such as mail client address book look-ups and anonymous binds will be thoroughly tested, and our goal is that most people won’t notice when we make the switch.

However, if you are an application developer or system administrator that accesses our directory programmatically, we would like to invite you to participate in our testing phase to ensure your applications or scripts will still work with the new server.

If you would like to participate in this testing, or just monitor the progress of the project, please subscribe to the mailing list ldap-migration@lists.eecs.berkeley.edu by [sending an email to sympa@lists.eecs.berkeley.edu with the body “subscribe ldap-migration”](mailto:sympa@lists.eecs.berkeley.edu?body=subscribe%20ldap-migration).

All further discussion of this project will take place on that mailing list. A detailed and technical project plan will be posted there early next week.

Please send any questions to the IRIS helpdesk at help@eecs.berkeley.edu

Thanks,

-Rob