Header Search Widget

IRIS

Instructional & Research Information Systems

Network at Soda 4TH floor

by

Since the devices affected by the switch failure have been moved to temp ports on an alternate switch, we plan to move ports from the alternate switch to the replaced/new switch on Sep 19 between 9:00-10:00am. You might experience some intermittent network connectivity issues at 4th floor of Soda. Please let us know at help@eecs or 510-642-7777 if your device is still having network connectivity issues after 10:00am. Thanks.

Resolved as of 2013-09-19 10:00:00

Sep 2013 Server Patching

by

Microsoft will release their patches for the month on Tuesday, Sep 10th, 2013.

PRINT and WINTERM will automatically patch and reboot Wednesday, Sep 11th, at 3:00 am.

WINTERM may be unavailable till 10:00am Wednesday, Sep 11th. This depends on the needed level of application updates in addition to the operating system updates.

Resolved as of 2013-09-23 11:55:00

filesystem problem in LDAP server may have caused temporary authentication failures

by

One of the LDAP servers in our pair became unresponsive due to a filesystem problem. Some services (such as Jabber) had authentication problems during this time. The system is back online now after running fsck.

The current LDAP servers are old legacy systems slated to be replaced in the very near future. The configuration of these servers and the services that rely on it is non-optimal which results in problems with authentication to some (but not all) services that rely on LDAP.

The new LDAP system is in its final testing phases now and will completely replace the aging infrastructure we have now.

The problem with the system was detected by IT staff with one of our monitoring systems which alerted us. We are not aware of any impact to the community and have received no reports from anyone. If you experienced any authentication problems between 1-2am then please let us know by writing to help@eecs.berkeley.edu

Resolved as of 2013-09-07 01:57:00

New LDAP Infrastructure Ready for Testing

by

IRIS is pleased to announce that our new LDAP infrastructure is ready for public testing. The new LDAP servers are now accessible from any on-campus host at openldap.eecs.berkeley.edu. TLS is supported on port 389 and SSL on port 636, using a new certificate from InCommon.

#Testing
Programmers and system administrators are encouraged to test any applications or scripts they maintain against this new infrastructure. The only change that should be needed for testing is to change the hostname to openldap.eecs.berkeley.edu.

Please send any questions or report any problems that come up during testing to [help@eecs.berkeley.edu](mailto:help@eecs.berkeley.edu)

#Architecture
openldap.eecs points to a redundant load balancer, which at this time is routing ldap requests to one of three backend OpenLDAP servers that are running in multi-master mode. These load balancers and backend servers are a combination of physical and virtual hosts located in independent data centers across campus (Sutardja-Dai Hall, Soda Hall, Warren Hall). With this architecture, a power or network failure in any one building will not bring the service down.

#Schema Changes
The schema is largely unchanged, save the removal of objectclasses and attributes that were added by the Sun/iPlanet IMAP and Calendar applications previously in use in the department. With the migration to bMail and bCal, these attributes are no longer needed and so have been removed.

#Timeline

  • 9/6 openldap.eecs initial public testing with a snapshot of test data. Reliability testing ongoing. [1]
  • 9/11 openldap.eecs is syncing real data from ldap.eecs. firewall is opened up to world. Testing continues. Reliability testing done.
  • 9/18 Assuming no major problems reported, ldap.eecs and ldap.cs become nicknames for opendap.eecs

#Notes
[1] During the next week IRIS will be conducting reliability testing, meaning we will be taking down some of the servers to ensure the service as a whole stays up. This testing might affect performance but should be completed by 9/11/2013.