LAL Site Report
The 2003 LAL Site Report outlines significant infrastructure updates and changes at the LAL facility in Amsterdam. Key highlights include the consolidation of server resources, enhanced CPU capabilities, and the deployment of Power 4 Xeon servers. Upgrades to server software, notably the introduction of Tru64 and improved mail services with authenticated SMTP, have been initiated. Budget constraints pose challenges, leading to resource optimization efforts. The report also discusses VPN enhancements and plans for professional workshops to bolster collaboration across labs.
LAL Site Report
E N D
Presentation Transcript
LAL Site Report Michel Jouvin LAL / IN2P3 jouvin@lal.in2p3.fr
100 Go Alpha PWS500 Alpha ES47 1,5 TB Electronic CAD (Sun + Cadence) Mechanical CAD (Alphas) Experiments Servers (Alpha, HP, Linux) Xterm Mac (100) PC (250) Main Resources DS20 • NFS • SMB • Appletalk • www • Mail • Print FC DS20e Gb Ethernet 100 Mb 10 Mb LSF Cluster (batch + interactive) LAL Site Report - HEPix - Amsterdam 2003
Main Resources Changes • More CPUs • Main interactive server replaced by HP ES47 (Alpha) • 10 dual P4 Xeon on order (Dell PE 1750, 1U) • KVM / IP (Dell DS 2650) for easier managment • More TBs • SAN consolidation (fabric redundancy configured) • 1,5 TB to be received next week (HDS 9570V) • Real end of Tx ? (<30) • Less budget… • Severe budget restrictions decided by government LAL Site Report - HEPix - Amsterdam 2003
Server Software Updates • Deployment of Tru64 5.1B started • Presently mainly central cluster • AFS client is a pending issue… • Resource monitoring in production • Based on Nagios • Development of user oriented view of the resources (Web-based) and plugins • Automatic notification, history (based on rrd, ext mrtg) • Work done by Jacquelin Charbonnel (unable to come because of budget cut) LAL Site Report - HEPix - Amsterdam 2003
Mail Service • Evaluating Authenticated SMTP to restrict relaying • Sendmail + SASL (CRAM or DIGEST MD5) • Before production, need to work transition from Unix pwd • Virus/Spam filtering production • Spam Assassin + MimeDefang • 2 phases deployment : • Tag in subject allowing client filtering (should start next week) • SIEVE server for filtering at delivery (plan for this autumn) • Upgrade IMAP server to Cyrus v2 • Required for SIEVE filtering • Main issue : message store conversion (35GB) LAL Site Report - HEPix - Amsterdam 2003
Windows Infrastructure • IN2P3 forest in production • Pilot moved to production in Dec 2002, no major issue • 3 days workshop with labs administrators to start the project (Dec. 2002) • 9 labs already joined (12 plan to participate) • 1 large NT domain migrated (IPN), others new domains • 2 technical coordinators (Yves Pharipou, Michel Jouvin) • Move LAL domain to IN2P3 forest (by end of July) • Convert back to NT4 and then re upgrade to AD (no production interruption expected) LAL Site Report - HEPix - Amsterdam 2003
VPN Server • Main goals • Windows AD remote access • Mail relaying restricted to LAN connected machines • Clear text pwd protocols (ftp, telnet) to specific devices • Based on solution presented by CERN at FNAL • Windows 2000 server • Authentication server : AD controller • No need for a separate account • Tunneling : PPTP + CHAP/MS-CHAP • Encryption : MPPE (RSA/RC4) • Pilot started last week… LAL Site Report - HEPix - Amsterdam 2003
Miscellaneous Projects • Unattended Linux installation server • Based on PXE + Kickstart • Ready for public launch • Still no formal support on desktop (Vmware recommended) • Web dynamic content management • Evaluating Zope/Plone • EDG/LCG • Should resume participation to testbed shortly… • Backup : cross backup with IPN (geographically closed, same size as LAL), based on Legato LAL Site Report - HEPix - Amsterdam 2003