CalNetAD Planning Committee

October 20, 2006

2195 Hearst, 200C Conference Room, 11AM-12:30 PM

Updated: 10/11/2006

Agenda

1. UCLA Disaster Recovery Servers (John Weber)

2. MIT Kerberos migration to Active Directory (Karl Grose)

3. Opt-In SNS credentialed scanning (Allison Henry)

4. Other Business

Notes

UCLA Disaster Recovery Servers

John announced the installation of Active Directory Domain Controllers ACTDIR08 and ACTDIR09 as well as an application server at UCLA. These servers are part of the Disaster Recover Plan for Active Directory infrastructure. Most CalNetAD clients will not communicate with these servers because they are in a different Active Directory site.

MIT Kerberos migration to Active Directory

Karl discussed the drivers behind the migration of MIT Kerberos into Active Directory and outlined the proposed migration timeline. This information is contained at https://webfiles.berkeley.edu/karl_grose/public_html/Kerberos_at_UC_Berkeley.html.

Opt-In SNS credentialed scanning

Allison Henry from SNS announced a new scanning service that uses credentials to run a deep security scan on a particular system. These credentials will be stored in CalNetAD and maintained by the Enterprise Administrators. In order to use this opt-in service, SNS will need an IP address or IP subnet of the hosts that CalNetAD OU Administrators wish to be scanned. Contact sns at berkeley dot edu for more details.

Other Business