Instructional & Research Information Systems
Microsoft will release their patches for the month on Tuesday, May 10th, 2022. PRINT, WINTERM and WDS will automatically patch and reboot Wednesday, May 11th, at 3:00 am.
WINTERM may be unavailable till 10:00 am Wednesday, May 11th, depending on additional software updates.
[Read more…] about May 2022 Windows Server PatchingWe’ve confirmed an issue affecting Linux wireless clients using wpa_supplicant version 2.10, which includes the already-released Ubuntu 22.04. These clients are unable to connect to both eduroam and EECS-Secure due to an incompatibility in TLS negotiation methods.
We are working with our vendor to see if the eduroam and EECS-Secure authentication servers can be updated to comply with the relevant RFC. Some Linux distributions, including Ubuntu 22.04 and Fedora 36, are working on patches to address this issue from the client side.
Until a fix is deployed for your distro or our software, we suggest those affected by this issue employ the fix described in this link:
https://askubuntu.com/questions/279762/how-to-connect-to-wpa2-peap-mschapv2-enterprise-wifi-networks-that-dont-use-a-c/1405397#1405397
Our thanks to Alex Reinking, a member of the EECS community, who first reported this issue and also provided the fix linked above.
This post was updated on May 5th with newer information and to correct some errors.
We are implementing an update to Group Policy that affects our Windows Domain Controllers this morning at 10am. No impact is expected on end users, but we are mindful that a similar change last week caused an unexpected problem with LDAP-auth (see https://iris.eecs.berkeley.edu/news/resolved-incidents/eecs-ldap-logins-not-working/).
This update improves the security profile of our Domain Controllers. In particular, we are removing explicitly-listed Null Session Named Pipes, as is best practice.
On Monday, May 16th, at 7AM we will cease public broadcast of the EECS-Secure wireless network. The network will continue to exist and devices already configured to use it will be able to continue to do so. However, it will not be available as a visible option to new devices which are not currently configured to connect to EECS-Secure. In other words, EECS-Secure will become a hidden SSID.
We recommend users of EECS-Secure begin transitioning to eduroam effective immediately. Information about how to connect to eduroam is available at:
https://technology.berkeley.edu/wi-fi
Please read the full post below for more information.
[Read more…] about Announcing Retirement of the EECS-Secure Wireless NetworkWe are investigating an issue with EECS Windows Domain Controllers, preventing LDAP-to-Windows password passthrough from working. This affects all systems that rely on EECS LDAP for authentication, including various webpages, the EECS-Secure wireless network, and linux machines configured to use EECS LDAP. The issue began at approximately 7:45PM on 4/20.
[Read more…] about EECS LDAP logins not workingVarious Linux servers will be down for patching and needed reboots to activate changes delivered by some RHEL patches.
login.EECS.Berkeley.EDU is scheduled for downtime from 6:30am to 7am.
The departmental dhcp server is scheduled for downtime from 6:30am to 7am.
cronus one of the departmental DNS and time servers is scheduled for downtime from 6:45am-7:00am.
rhea the other departmental DNS and time server is scheduled for downtime from 7:00am-7:15am.
The departmental authenticating outgoing SMTP server gateway.eecs is scheduled for downtime from 7:30am to 7:45am.
We expect actual downtimes to be less than scheduled.
[Read more…] about Various Linux servers (login, dhcp, DNS, SMTP, NTP) downtime Wednesday April 13, 2022 06:30-07:45 amMicrosoft will release their patches for the month on Tuesday, April 12th, 2022. PRINT, WINTERM and WDS will automatically patch and reboot Wednesday, April 13th, at 3:00 am.
WINTERM may be unavailable till 10:00 am Wednesday, April 13th, depending on additional software updates.
[Read more…] about April 2022 Windows Server PatchingWi-Fi networks for a large portion of Soda Hall third floor are offline since 7:20 this morning due to a switch failure. Staff are currently in transit to install a replacement.
Update 11:27: Wi-fi service in most areas was restored around 10:35. The remainder was restored at 11:25. Please contact help@eecs.berkeley.edu if you notice any ongoing issues.
Beginning April 5, 2022, you will start to see changes in the CalNet 2-Step process for browsers (e.g., Apple Safari, Google Chrome, Mozilla Firefox, etc.). The upgraded workflow provides a simplified and accessible Duo login experience and offers a redesigned visual interface with security and usability enhancements.
[Read more…] about New CalNet 2-Step Look for BrowsersAt 6AM on Monday, March 21, we will be migrating the following networks to our new border firewall:
169.229.3.96/27 (Instructional Support Group servers)
169.229.3.128/26 (IRIS NetApp file servers, including home and project shares)
There will be a brief interruption to these networks as they are migrated. This will affect all home, project, and other file storage provided by the IRIS NetApps. After the migration, we encourage system administrators to test that connections to the NetApps are behaving as expected. Some file service clients may need to be rebooted or have their nfs service restarted.
Please contact us at help@eecs.berkeley.edu with any questions or concerns.
[Read more…] about Firewall Migrations for IRIS NetApps and Instructional Servers, 3/21 6AM