File Edit Options Buffers Tools Help NOTE: These are DRAFT minutes until this note is removed. ========================================================= Minutes of the SIPB Meeting of 2013-07-29 The meeting was called to order at 7:30:00 by achernya. In attendance were Voting members: codetaku adehnert achernya phurst dove iannucci dwilson sqshemet btidor | lfaraone Associate members: glasgall jbarnold asedeno kaduk | andersk Prospectives: k_sunter | thallada Guests: Administrivia: glasgall: Bunch of people went into SMR, did our best to try to rationalize cable situation. Failed utterly. However, did get UPS batteries installed. Old batteries are terrifyingly old. Unracked a bunch of servers not in use, virtualized others. CUrrently looking at options for how to fi power situation. Will have an allocation at some point in the near future. adeh: What got virtualized glas: SIPBIrc. The hard drive is on the pikle adeh: Does twilight-zone still exist? glas: yes. ian: Are you suggestong that the metaviser should be virtualized adeh: No, just wonderinf if turne doff achenr: Off and back on. glas; Also pullsed blade chassis out of rack. Took three people. achL Turns out if you take the fans out for more than 2 minutes, will fry everything. glas: I will spare terrifying details of extention cords. Project Updates: glas: XVM has successifyly 2/3 servers to precise. This evening cut over 3rd one. Will be100% hardy-free ach: last sipb server with harvy? glas: Yes. ALso fixed up contact information on most of the xvm iupaddressed. ach: Like 1300. glas; Steven and Alex murdered the queue. Was 0 for a while. g;as: talking about changes to netwrok. Our switch still hasn't been repklaced. I've already volunteered to go over there with a rubber mallet. The point is the mallet doesn't leave marks. glas; Scipts cutting over to F19 this weekend if we can get our act together. adeh: haven't told our users to test their stites glas; They never test them anyway ach: Gotten 2 tickets over the last three years. glas; tlak later ach: currentl priamry sql server is going to die. Throwing like 30 errors a minute. Going tobe an uncontrolled death. Going to set up f-k in replication with p-k so when sliced-bread dies things will be okay. I will probably be taking down p-k in order to rsync to f-k glas: davidben's web-based zephyr client roost is really cool iann: spiderowl remains terrifying glas; I love that spider owl. If you got me a pet spiderowl I'd totally keep it on my desk. ach: Anyone know how to sew? glas; christy does dove: can we get it made with googly eyes? ach: Of course. dove: spiders would be pretty terrifying if ythey could fly while shppting web glas; Some use litle parachute things and glide ian: Feel like deeply ironic eyes are non-retina Other: Other Other: ian: Sipb weathjer-control project has experienced a total existence failure adeh: It previously had not? glas; It went back in time. kaduk: I hear there were some security advisories last week glas: Security advisory keeping under hats since last Nov was finally announced to public and patch released on wednesday. ach: Everyone type aklog and klist-e glas: As of last wedensday, if taken both halves of fix, now possible to run afs cell without DES at all. dove; when did DES get disabled on athena.mit.edu? ach: Not yet. But defaults got disabled around Dec. glas: THen afs ot rekeyd in june. We could do this almost entirely because of kaduk, achernya, and several other people. I think they desreve a round of applause dove: So if you changed your passowrd in this year then you're fine? ach: If you're unsure, there are ways to check. glas: If you have a root insteance, it is more imporatnt than ever to make sure you have a strong key. ian: Sometime last summer, CloudCracker support happened for DES. THis enabled a ~$20-dollar 23-hour DES attack if oyu can get service tickets. Poeople didn't really put this together until our 6.858 project. That's what got fixed. ach: Raise your hand if you're not looking forward to picking new password because of new requirements. dove: Going to neexd to chance password when you get certs. Can you chnage it with kpasswd instead of on the website? ach: Going to enforce one-year exp policy. dove: It'll check to see if you have changed your password in the last mumple amount oof time kaduk: I velieve so. ian: Looking at kb.mit.edu on passwords. Asserts a bunch of requirements. glas: A correctHorsebatterystaple-style password should work now .it prevoiusly did not. The meeting was adjourned at 7:46:37. Minutes taken and submitted by sqshemet.