Instructional & Research Information Systems
We experienced a failure of EECS LDAP authentication, from about 5:50pm to 10:30pm, due to routine patches changing some file permissions for saslauthd. The issue has been corrected, and LDAP authentication is working again.
The problem may have been most noticeable when attempting to login to various EECS web forms (e.g. system registration or user account request forms).
Various Linux servers will be down for patching and needed reboots to activate changes delivered by some RHEL patches.
login.EECS.Berkeley.EDU is scheduled for downtime from 6:30am to 7am.
The departmental dhcp server is scheduled for downtime from 6:30am to 7am.
cronus one of the departmental DNS and time servers is scheduled for downtime from 6:45am-7:00am.
rhea the other departmental DNS and time server is scheduled for downtime from 7:00am-7:15am.
The departmental authenticating outgoing SMTP server gateway.eecs is scheduled for downtime from 7:30am to 7:45am.
We expect actual downtimes to be less than scheduled.
[Read more…] about Various Linux servers (login, dhcp, DNS, SMTP, NTP) downtime Wednesday May 25, 2022 06:30-07:45 amThere was an unplanned outage to the EECS network this morning from 9:32 until approximately 9:46 this morning due to a router crash. The outage primarily affected Soda and Jacobs Halls as well as BWRC; but there was also some lesser effect in other locations. This was unrelated to the planned maintenance which occurred earlier this morning.
Network service has been restored, and we are investigating the cause of the crash. Please email help@eecs.berkeley.edu if you notice any ongoing issues.
Between 5 and 7AM on Thursday, May 19th, we will be performing firmware upgrades on various Sutardja Dai and Blum Hall network hardware. Wired networks in SDH will be unavailable for approximately 15 minutes beginning at 5:00AM. Wireless networks in both buildings will experience a number of interruptions throughout the two hour period. We expect all connectivity will be restored by 7AM.
We recommend system administrators check their systems on Monday morning after 7AM to verify they are working as expected. Some systems or services, such as nfs mounts, may need to be restarted.
This maintenance is complete as of 6:20AM. Please contact us at help@eecs.berkeley.edu if you have any questions or notice any lingering issues.
At 5AM on Tuesday, May 17th, we will be performing firmware upgrades on various Soda Hall network hardware. Wired networks in Soda and Jacobs Halls will be unavailable for approximately 15 minutes beginning at 5:00AM; BWRC networks will also be isolated from EECS, campus, and the Internet during this short period. Wireless networks in Soda Hall will experience a number of interruptions throughout the two hour period. We expect all connectivity will be restored by 7AM.
We do not expect significant interruption to most IRIS services hosted in 290 Soda.
This maintenance is complete as of 6:20AM. Please contact us at help@eecs.berkeley.edu if you have any questions or notice any lingering issues.
Between 5 and 7AM on Monday, May 16th, we will be performing firmware upgrades on various Cory Hall network hardware. Wired networks will be unavailable for approximately 15 minutes beginning at 5:00AM. Wireless networks will experience a number of interruptions throughout the two hour period. We expect all connectivity will be restored by 7AM.
We recommend system administrators check their systems on Monday morning after 7AM to verify they are working as expected. Some systems or services, such as nfs mounts, may need to be restarted.
This maintenance is complete as of 6:30AM. Please contact us at help@eecs.berkeley.edu if you have any questions, or notice any lingering issues.
We are investigating an outage of Jacobs Hall wired networks which began approximately 2:30AM on May 8th. We currently believe that wi-fi is unaffected. An update will be posted this afternoon when we have more information.
Update: All Jacobs Hall network service was restored shortly after 2PM. Please email help@eecs.berkeley.edu if you notice any continuing issues.
Microsoft will release their patches for the month on Tuesday, May 10th, 2022. PRINT, WINTERM and WDS will automatically patch and reboot Wednesday, May 11th, at 3:00 am.
WINTERM may be unavailable till 10:00 am Wednesday, May 11th, depending on additional software updates.
[Read more…] about May 2022 Windows Server PatchingWe’ve confirmed an issue affecting Linux wireless clients using wpa_supplicant version 2.10, which includes the already-released Ubuntu 22.04. These clients are unable to connect to both eduroam and EECS-Secure due to an incompatibility in TLS negotiation methods.
We are working with our vendor to see if the eduroam and EECS-Secure authentication servers can be updated to comply with the relevant RFC. Some Linux distributions, including Ubuntu 22.04 and Fedora 36, are working on patches to address this issue from the client side.
Until a fix is deployed for your distro or our software, we suggest those affected by this issue employ the fix described in this link:
https://askubuntu.com/questions/279762/how-to-connect-to-wpa2-peap-mschapv2-enterprise-wifi-networks-that-dont-use-a-c/1405397#1405397
Our thanks to Alex Reinking, a member of the EECS community, who first reported this issue and also provided the fix linked above.
This post was updated on May 5th with newer information and to correct some errors.
We are implementing an update to Group Policy that affects our Windows Domain Controllers this morning at 10am. No impact is expected on end users, but we are mindful that a similar change last week caused an unexpected problem with LDAP-auth (see https://iris.eecs.berkeley.edu/news/resolved-incidents/eecs-ldap-logins-not-working/).
This update improves the security profile of our Domain Controllers. In particular, we are removing explicitly-listed Null Session Named Pipes, as is best practice.