Admin Tasks

From Van Essen Lab

Revision as of 16:30, 10 September 2013 by WikiSysop (Talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Current Tasks

  • Assist in myelin JBOD disk expansion / the rack-mounting of both myelins and JBOD storage chassis
  • Work with MSCITS on Network line inventory, switch inventory, switch upgrade to Cisco, firewall rules migration plan from Juniper to Cisco ASA

investigate increasing bandwidth to/from myelin for data transfers and file access. Status: ongoing , mtgs. every other week John Roman's group

  • Upgrade mail server to support encrypted files for extra security (in case disks are stolen)

Status: backburner as this would involve volume encrytpion and a performance penalty

  • Set up a single sign on system (LDAP) for all machines to make it easier to keep accounts and passwords in sync across all machines

Status: lowered priority, current authentication is via /etc/passwd & /etc/shadow & PAM files. Proving problematic implementing openldap for the many diff. unix/linux clients in use in lab.

  • Migrate sumsdev to latest LTS release of ubuntu

Status: moved to backburner

  • Create and/or support development environment releases for 3rd party developers

Status: lowered priority

  • Create and maintain git servers, actively support granting access to outside developers where appropriate

Status: in process, admin piece working, maintenance piece training with Jon.

Completed Tasks

  • Increase DHCP address pool in hippocampus to increase concurrent remote VPN connections - now has 4 IP

addresses for use , up from two. Will allow more concurrent VPN connections.

  • Update the SSL certificate on brainvis to remove warning when accessing brainvis through SSL/https.

brainvis currently runs a valid, self-signed OpenSSL certificate set to expire 2/11/2017 (free) and can be imported to users browser when a certificate error appears.

  • Upgrade Brainvis to latest LTS release (running CentOS 6.2 EL )
  • Upgrade mail server to support mail dir (which should help improve performance)
  • Migrate wiki pages to new wiki on brainvis
  • Upgrade brainvis hardware, either by purchasing a machine from a well-known vendor or building a machine
  • Upgrade NFS shares to version 3 at minimum, and make sure permissions are set up so that all users can access files with appropriate permissions
  • Continue to update and maintain build systems, as needed(Jon to manage new build servers, can revisit this)
  • Migrate build servers to myelin2 (our secondary file server), running under virtual box. native build servers winbuild and linuxbuild have replaced the VMs
  • Maintain, and possibly upgrade the linux machines that are used by our rotating graduate students.New brainmappers3 and brainmappers4 installed and in use
  • Perform an inventory of all back up procedures and come up with a sensible back up policy that will ensure that all important files and data are backed up regularly (on PCinventory wiki page.)
  • Perform an inventory of all equipment and machines. Attempt to standardize on certain versions linux/OSX/Windows where appropriate to make our systems easier to maintain, updated on PCinventory wiki page.
  • Perform an inventory of our installed software. Ensure that all software is licensed properly. Also, manage site license programs, such as Vmware's Academic Alliance, MatLab, MSDN, and any other programs that require an administrative point of contact.

assumed point of contact for Vmware, provide licensing/media support for Adobe Suite, MS products ; OS, Office, Mathworks for Matlab licensing changes.

  • As you perform an inventory of the hardware and software above, document all possible security threats or situations that could cause catastrophic failure (e.g. data loss, hardware failure, etc.). After coming up with this list, come up with strategies for tackling these issues and meet with the rest of the lab to discuss them.

ongoing watch. Tightend network security, particularly access to myelin1 and myelin2, added UPS units so all systems have battery backup. Host-firewalls turned on. Added lab systems and network switches, firewall to Nagios system management for remote monitoring status.

  • Document all procedures, inventories, and policies on the wiki, as necessary. Where policies are ambiguous (the rule, not the exception), meet with the rest of the tech and admin staff to develop sensible policies and procedures for usage of equipment.
  • Susan's iMac

Status: installed and Susan is using to disclose any issues.

  • Assist Ping with new system & OS for DB server

new system installed, Ubuntu 12.04

  • Assist Ping with moving her old home dir. from now retired sums , mount old sums

disk on sumsdev.

  • Copy CVS dir from sums to myelin1.
Personal tools
Sums Database