1cea – dapnia - saclay05/19/2003 cea saclay site report amsterdam
TRANSCRIPT
05/19/2003 1CEA – DAPNIA - Saclay
CEA Saclay site report
Amsterdam
05/19/2003 2CEA – DAPNIA - Saclay
New security scheme
•four separate levels:
– Departemental networks behind firewalls
– « CEAnet interne » behind a central firewall
– « CEAnet externe » behind a filtered router
– « DataGRID » behind the first router of Saclay
•New scheme for « CEAnet externe » :
– Filters for each IP services and servers even for udp services above the 1024 limit …
– No answer to outside ping
05/19/2003 3CEA – DAPNIA - Saclay
connections
•telnet and ftp services forbiden: acces through ssh only
•Acces to DAPNIA machines from external world:
– HEP:
• 10 DELL GX 260 running Linux
• 2 SUN
– Nuclear physics
• 2 SUN
– Astrophysics
• 1 SUN
•« bbftp » service opened:
– 2 Linux machines
•VRVS local reflector soon
•Each new connection must be discussed with the CEA security managers …
05/19/2003 4CEA – DAPNIA - Saclay
AFS migration
•Open AFS 1.2.9 soon on Linux
•« dapafs01 » : IBM AIX 4.3.3 with IBM AFS 3.6:
– Should be replaced soon
– Third server on the « Orme des Merisiers site » ?
•Usage by Astrophysics people now also
•Upgrade open questions :
– RPMs versus « bos install » for the server side
– Binaries only or recompilations
– « ext2 » file systems only
– 8 gigabytes partitions
05/19/2003 5CEA – DAPNIA - Saclay
Workstations
•Windows:
– Windows XP by default with Office XP
– Windows 2000 for older machines
– NICE NT services stopped
– Phasing out of NT 4 domains soon
– Windows Terminal Server
•Linux
– Red Hat (from 6.1 to 8.0)
– AFS clients
•Mac OS X:
– No real support
– AFS clients
– Accepted for some experiments
– 1 laptop for tests
05/19/2003 6CEA – DAPNIA - Saclay
•New project :
– Windows Exchange 2000
– For the whole CEA community
– Beginning next year ?
– Phasing out of all the SMTP servers ?
05/19/2003 7CEA – DAPNIA - Saclay
Computer center
•We are using the IN2P3 computer center:
– Three years « contract »
– For HENP people but interest from:
• Some Astrophysics experiments
• Life Science services for DataGRID or PCRD6 new projects
•Some people are using the CEA computer center located in Grenoble
– FUJITSU VPP 5000/15
– COMPAQ SC 256
•There are some discussion to move this computer center to another CEA center and to change some machines …
05/19/2003 8CEA – DAPNIA - Saclay
GRID
•DataGRID:
– 7 PCs running Linux Red Hat 6.2 and edg 1.4.x
– Possible integration of new machines from the Life Science services of Saclay and Grenoble
– Special sub-network
•6th framework of EU:
– EGEE
– HEAVEN
•E-toile : french project
– VTHD network
– Cluster installed in Saclay
•CEA Grid : new project (Saclay only for the moment).