90 likes | 214 Vues
This report outlines the current and future plans for the Linux and Windows environments at PSI. We are evaluating RedHat Advanced WS and Server as well as Debian Sarge for stability. Future initiatives include PXE testing for thin clients and diskless workstations, as well as consolidating storage solutions in our SAN architecture. Additionally, we are strengthening security through Kerberos authentication and implementing robust mail filtering systems. We also plan to upgrade our mail server to Exchange 2003 by the end of 2004 while enhancing spam protection and virus scanning.
E N D
Site Report: PSI Juergen.Baschnagel@psi.ch
PSI Linux • currently Redhat 9.0 • Future Plans: • Redhat advanced WS and Server (price?) • Debian Sarge if stable Version available, otherwise modified Woody • PXE • Tests thin Clients with PXE boot • Diskless WS boot via PXE • PXE boot based Installation • Cfengine tests startet
Storage • SAN extension • 2 indipendent Fabrics • LTO Libraries and divers Server • FC Switches: Brocade and McData • AFS and Windows on discrete Storage arrays • LSI ProFibre Storage Array DF 4000R • 2TB AFS; 2TB Windows Filestore • StoreAge Virtualization tested but not implemented
AFS Service: • HW Consolidation: • 1 DB Server added (total 3 Dell PowerEdge 1550) • 5 Fileserver + 1 Spare (IBM XSeries 345) • AFS Storage with SAN • 2TB low cost Serial ATA Filestore (no_backup) • Linux OS consolidated (RedHat9) OpenAFS 1.2.11 • Kerberos5 Authentication (Heimdal) planed for 3. Quarter
Windows • Software Update Service • one server connected to the Internet • Local version of the public Windows Update site • Automatic Update client on all Windows2000/XP PCs • GPO used to download and install updates automatically on schedule, no User intervention possible • Application for Exception necessary • Some useful hints and tools found at: http://www.susserver.com • Fileserver Upgrade • 4 old Fujitsu-Siemens FS with direct attached Storage replaced by 2 IBM Xseries 345 Servers with 2TB SAN Storage
Mail System • Statistic • Spamassassin implemented for Spamfiltering • approx. 15 000 Spam Mails per Day • Users can set Spamfilter behavior • Client roles • WEB interface to set required and blocked hits, black and white lists • Rejection of unkwon Mailaddresses • ldap lookup script verifyes recipient address • approx. 20 000 rejected Mails per Day • Additional Virus Protection • Incomming Mails on our exim Mailserver get first checked using amavisd and McAfee Virusscan • second check with TrendMicro Viruswall • Third check with TrendMicro Scan Mail at the Exchange Store • Future: • Update to Exchange2003 untill end of 2004