PAUL SCHERRER INSTITUT Paul Scherrer Institut 5232 Villigen PSI HEPIX_Edinb / / Juergen Baschnagel Site Report: PSI [email protected]

PAUL SCHERRER INSTITUT

Paul Scherrer Institut • 5232 Villigen PSI HEPIX_Edinb / </Spring/2004> / Juergen Baschnagel

Site Report: PSISite Report: PSI

[email protected]@psi.ch



PSI LinuxPSI Linux

currently Redhat 9.0currently Redhat 9.0– Future Plans:Future Plans:

Redhat advanced WS and Server (price?) Redhat advanced WS and Server (price?) Debian Sarge if stable Version available, Debian Sarge if stable Version available, otherwiseotherwise modified modified WoodyWoody

PXEPXE– Tests thin Clients with PXE bootTests thin Clients with PXE boot– Diskless WS boot via PXEDiskless WS boot via PXE– PXE boot based InstallationPXE boot based Installation– Cfengine tests startetCfengine tests startet



StorageStorage

SANSAN extension extension– 2 indipendent Fabrics2 indipendent Fabrics– LTO Libraries and divers ServerLTO Libraries and divers Server– FC Switches: Brocade and McDataFC Switches: Brocade and McData– AFS and Windows on discrete Storage arraysAFS and Windows on discrete Storage arrays– LSI ProFibre Storage Array DF 4000RLSI ProFibre Storage Array DF 4000R

2TB AFS; 2TB Windows Filestore2TB AFS; 2TB Windows Filestore

– StoreStoreAgeAge Virtualization tested but not implemented Virtualization tested but not implemented



AFS Service:AFS Service:

HW Consolidation:HW Consolidation:– 1 DB Server added (total 3 Dell PowerEdge 1550)1 DB Server added (total 3 Dell PowerEdge 1550)– 5 Fileserver + 1 Spare (IBM XSeries 345)5 Fileserver + 1 Spare (IBM XSeries 345)

AFS Storage with SANAFS Storage with SAN2TB low cost Serial ATA Filestore (no_backup) 2TB low cost Serial ATA Filestore (no_backup) Linux OS consolidated (RedHat9) OpenAFS Linux OS consolidated (RedHat9) OpenAFS 1.2.111.2.11Kerberos5 Authentication (Heimdal) planed for Kerberos5 Authentication (Heimdal) planed for 3. Quarter3. Quarter



WindowsWindows

Software Update ServiceSoftware Update Service– one server connected to the Internet one server connected to the Internet

Local version of the public Windows Update site Local version of the public Windows Update site

Automatic Update client on all Windows2000/XP PCs Automatic Update client on all Windows2000/XP PCs

GPO used to download and install updates automatically on GPO used to download and install updates automatically on schedule, no User intervention possibleschedule, no User intervention possible

Application for Exception necessaryApplication for Exception necessary

– Some useful hints and tools found at:Some useful hints and tools found at:http://www.susserver.comhttp://www.susserver.com

Fileserver UpgradeFileserver Upgrade– 4 old Fujitsu-Siemens FS with direct attached Storage replaced by 2 4 old Fujitsu-Siemens FS with direct attached Storage replaced by 2

IBM Xseries 345 Servers with 2TB SAN StorageIBM Xseries 345 Servers with 2TB SAN Storage



Mail System Mail System

StatisticStatisticSpamassassin implemented for SpamfilteringSpamassassin implemented for Spamfiltering– approx. 15 000 Spam Mails per Dayapprox. 15 000 Spam Mails per Day– Users can set Spamfilter behavior Users can set Spamfilter behavior

Client roles Client roles WEB interface to set required and blocked hits, black and white listsWEB interface to set required and blocked hits, black and white lists

Rejection of unkwon MailaddressesRejection of unkwon Mailaddresses– ldap lookup script verifyes recipient addressldap lookup script verifyes recipient address

approx. 20 000 rejected Mails per Dayapprox. 20 000 rejected Mails per Day

Additional Virus ProtectionAdditional Virus Protection– Incomming Mails on our exim Mailserver get first checked using amavisd and Incomming Mails on our exim Mailserver get first checked using amavisd and

McAfee Virusscan McAfee Virusscan – second check with TrendMicro Viruswallsecond check with TrendMicro Viruswall– Third check with TrendMicro Scan Mail at the Exchange StoreThird check with TrendMicro Scan Mail at the Exchange Store

Future:Future:– Update to Exchange2003 untill end of 2004Update to Exchange2003 untill end of 2004



Thank you for your attentionThank you for your attention



PSI SANPSI SAN



Documents

PAUL SCHERRER INSTITUT Paul Scherrer Institut 5232 Villigen PSI HEPIX_Edinb / / Juergen Baschnagel Site Report: PSI [email protected]