Hydra DHCP migration: what, when, why and how

This post assumes you know about the University’s central DHCP provision and have some interest in its migration to a new management platform. Towards the end of 2019 the DNS management platform for University of Oxford migrated to a custom-built … Continue reading

Posted in DHCP | Comments Off on Hydra DHCP migration: what, when, why and how

eduroam 802.1X deviceauth refresh

Do you recognize the following web form? If you don’t then you can stop reading. If you do then, even if you haven’t had occasion to fill it in often, please read on as there are changes coming. Above is … Continue reading

Posted in eduroam | Tagged , | Comments Off on eduroam 802.1X deviceauth refresh

OWL Visitor refresh – Timetable

This blog post is an expansion on the previous post about Tawny OWL to give timescales. The upgrade of the FroDos to re-route OWL traffic from the current system to the new one (called Tawny) is roughly a two stage … Continue reading

Posted in Uncategorized | Comments Off on OWL Visitor refresh – Timetable

What happens to mail you mark as spam?

This blog post hasn’t spun out of any particular instance, but I sometimes get the feeling that clicking the “Mark as SPAM” button in a mail client isn’t completely understood by everyone, which isn’t surprising as everything that follows is … Continue reading

Posted in Uncategorized | Comments Off on What happens to mail you mark as spam?

eduroam and realmless usernames: an update

You may be aware that the University of Oxford will shortly be mandating fully qualified usernames for eduroam, explained and for reasons discussed in a previous blog post. This post is intended as a followup, highlighting how we’re intending on … Continue reading

Posted in Uncategorized | Tagged , , , | Comments Off on eduroam and realmless usernames: an update

eduroam and realmless usernames

IT Services’s user-facing instructions for connecting to eduroam have always been unequivocal about the username to use: if you want to connect to eduroam, your username is your SSO with @ox.ac.uk appended on at the end, all lower case. So, … Continue reading

Posted in eduroam | Comments Off on eduroam and realmless usernames

The University’s mail relays and encryption

By the time this post has been published, the Oxmail relays will most likely be using opportunistic encryption to encrypt outgoing emails, in response to actions by cloud mail providers. However, we would like to make it clear that we … Continue reading

Posted in Mail Relay, Message Submission | Tagged , , | 4 Comments

DNS Resolvers – DNSSEC

We are approaching deployment of a new fleet of DNS resolvers and there are a few questions that we would like feedback from the wider ITSS community. Specifically this post is broaching the subject of DNSSEC. Just to be clear, … Continue reading

Posted in DNS | 6 Comments

FreeRADIUS, sql_log, PostgreSQL and upserting

While this is superficially a post for creating an upsert PostgreSQL query for FreeRADIUS’s sql_log module, I felt the problem was general enough to warrant an explanation as to what CTEs can do. As such, the post should be of … Continue reading

Posted in eduroam, Uncategorized | Tagged , , | Comments Off on FreeRADIUS, sql_log, PostgreSQL and upserting

Linux and eduroam: RADIUS

A service separate from, but tightly coupled to, eduroam is our RADIUS service. This is the service that authenticates a user, making sure that the username and password typed into the password dialog box (or WPA supplicant) is correct. Authorization … Continue reading

Posted in eduroam, Linux | Tagged , , , | 3 Comments