Spring 2012 FlossUK Conference

The Spring 2012 FlossUK Conference was held between 21st-22nd March in the “Informatics Forum” building at Edinburgh University.  The conference has been attended by members of the Sysdev team in the past (under both the older UKUUG and newer FlossUK banners).  FlossUK tends to be the UK’s only systems and network administration specific conference, and as such it’s always well worth the visit.

As with any conference it is not purely the workshops, talks, and presentations that make this the case, it is usually all the other bits, between talks, after the official daily schedule is complete, and at the functions, that the real benefit of a conference appears — the chance to meet others in the field, and talk more informally with the various presenters.  With that in mind I have to thank OUCS for giving me, and others in the team, the opportunity to attend.

As is usual, given the number of talks on the timetable, the conference was split into two tracks, each with double sessions between breaks.  This does mean that sometimes you pull a short straw and get stuck with one interesting, and one slightly less interesting talk in a session (they’re all interesting, just some more so than others).  However, the inevitable can-I-get-this-projector-to-work-with-my-laptop pause between speakers, and the reasonably informal tone of the conference meant that there was usually a chance to swap tracks if you were desperate to see something particular.

There was the usual mix of talks for a technical conference: talks that tell you about stuff you already do (still interesting, because you almost always learn something new due to the way implementations and environments differ); talks that tell you about super cool stuff off on the horizon; and talks about things that are just around the corner.  It is the latter that are usually the most relevant, and this was the case from my perspective.

Many of the talks have PDFs available (see the schedule for links).  Of those without directly downloadable material there are two that I’d like to mention briefly, not because they were better than the rest in anyway, but because their content is likely to be of interest/importance to Sysdev “just around the corner”.

The first was Kris Buytaert’s talk “Seven Tools for your DevOps Stack”.  Now, we may not strictly be in a “DevOps” environment (if you read through his slides you will note that the definition of “devops” is pretty extensive), but we do support our own development activities, and many of the tools he mentioned are more widely useful when viewed individually.

Sysdev is among the teams at OUCS that is taking part in the internship program, with our particular project relating to the feasibility of a central/shared logging service.  Cognisant of that I was interested to hear about some of the “measurement” tools in Kris’ talk, namely Logstash and Kibana.  They may not be perfect for our current purposes, but could potentially give us a head-start, and certainly a few ideas.

It seems that Simon Wilkinson is a perennial presenter at these events, so I wasn’t surprised to see him listed in the schedule.  This years talk was essentially a quick look back at the last 30 years of use and development of AFS (originally known as the “Andrew File System”), followed by a view of the current development roadmap.

Although not widely used at OUCS, and not viewed as an “official” service we provide in and of itself, AFS underpins a reasonable amount of our infrastructure, such as the Mirror service and Weblearn.  I was glad to see that there are several interesting things on the OpenAFS roadmap (“OpenAFS” being the Free software implementation we use).  Primarily of interest will be the introduction of per-file ACLs (currently, access control is limited to the directory level), plans for IPv6 Support, and the up-coming addition of support for Kerberos v5 encryption types (Kerberos v4 is getting rather old now…).  Other interesting developments, that wouldn’t affect the way we currently use AFS, include the enhancements to support file-system attributes (used extensively on MacOS X), and significant ongoing work on the Windows client.

Even though there was the usual backlog of email to wade through after returning, the conference was well worth attending, and I would certainly try to go again.  Besides, more than 99% of Dentists would suggest you floss regularly, and it doesn’t pay to argue with your Dentist…

Posted in Conferences | Comments Off on Spring 2012 FlossUK Conference

Multiple vacancies within Sysdev

As the Systems Development and Support section at OUCS continues to reform and grow (the OUCS registration team became part of the section last year) there are now several vacancies available within the section (although the Technical Manager post is joint with NSMS). Please see the following links for the job adverts, full details to and apply:

In addition, current student members of the University may be interested in OUCS’s 2012 internship programme; the Linux Systems Development and Administration internship is hosted by Sysdev.

Posted in Vacancies | Comments Off on Multiple vacancies within Sysdev

Another Unix (Linux) Systems Administrator vacancy

They say that buses come in threes; I can’t promise that this will be the case with our team vacancies, but we have recently advertised a second Systems Administrator role. Again, we are looking for someone to join the team to work with us on maintaining and improving existing services, as well as supporting the development of new ones. The job advert is included below, along with a link to further details:

Do you consider yourself a capable Unix/Linux systems administrator? Are you enthusiastic about working in an expert team where quality of service, attention to detail, and a willingness to respond positively to new challenges are all important? Would you also be able to specify, install, network and configure Linux platforms for resilient, enterprise IT systems? If so, we invite you to apply for the post of Unix Systems Administrator at Oxford University Computing Services.

The Unix Systems Administrator will join a team responsible for many of the IT services critical to the operation of the University, including Identity and Access Management services; web hosting; email and collaboration services; standard and bespoke application hosting platforms for other parts of the Department; and substantial infrastructure and monitoring capabilities. The post-holder will contribute to, and carry out independent work on, the development and management of new and existing systems and services.

The primary deployment platform used by the Systems Development and Support section is Debian GNU/Linux, and includes an extensive configuration and software management suite. The ideal candidate will have experience of a university environment, and knowledge of technologies such as Kerberos, LDAP, AFS, and systems management and monitoring.

There are many advantages to working at the University other than the world-class research culture. Benefits include flexible working, an excellent pension, career prospects and generous holiday provision.

Applications for this vacancy are to be made online. Please ensure that you address each of the selection criteria in your supporting statement.

In order to apply for this role and for further details, including a job description and selection criteria, please visit the University recruitment site: Unix Systems Administrator (Systems Development and Support Section) post.

Posted in Vacancies | Comments Off on Another Unix (Linux) Systems Administrator vacancy

Team vacancy: Unix (Linux) Systems Administrator

Sysdev are currently looking for an experienced Systems Administrator to join the team to work with us on maintaining and improving existing services, as well as supporting the development of new ones. The job advert is included below, along with a link to further details:

Salary: £36,862 – £44,016

Do you consider yourself an expert in Unix/Linux systems management? Are you enthusiastic about working in an expert team where quality of service, attention to detail, and a willingness to respond positively to new challenges are all important? Would you also be able to specify, network and configure hardware and Linux platforms for resilient, enterprise IT systems? If so, we invite you to apply for the post of Unix Systems Administrator at Oxford University Computing Services.

The Unix Systems Administrator will join a team responsible for many of the IT services critical to the operation of the University, including Identity and Access Management services; web hosting; email and collaboration services; standard and bespoke application hosting platforms for other parts of the Department; and substantial infrastructure and monitoring capabilities. The postholder will take a leading role in the development and management of new and existing systems and services.

The primary deployment platform used by the Systems Development and Support section is Debian GNU/Linux, and includes an extensive configuration and software management suite. The ideal candidate will have experience of web application hosting and development, the ability to address the interoperability challenges posed by a mixed platform environment, and experience of large-scale systems management.

There are many advantages to working at the University other than the world-class research culture. Benefits include flexible working, an excellent pension, career prospects and generous holiday provision.

This position is offered on a fixed term of two years initially.

In order to apply for this role and for further details, including a job description and selection criteria, please visit the University recruitment site: Unix Systems Administrator (Systems Development and Support Section) post.

Posted in Vacancies | Comments Off on Team vacancy: Unix (Linux) Systems Administrator

Password-change emails without the taste of phish

SSO account holders are automatically emailed when their password needs to be changed – but surely any email that says “access to your account will be restricted until you have logged in here <url>” will be counted as a phishing message and ignored.

The template in current use was designed in 2006, and aside from a few minor adjustments has remained largely the same for over 5 years. Although x0,000 users process it smoothly each year, it certainly does exhibit several characteristics that should trigger caution from a responsible user. Recently there has been a campaign to raise user awareness of phishing and, whether consequently or coincidentally, there is (anecdotal) evidence of increased numbers of enquiries about the authenticity of our internal messages, including password expiry notifications.

Designing a good template for this message is hard. On one hand there is a desire to avoid looking like a phishing email – mentioning account management, loss / restriction of access, and providing links to reset / confirm account details are all features that should sound alarm bells for most users. On the other hand, the very nature of what we need to communicate means that in order to be effective a message will touch on these aspects – and users will expect us to make life easy with a handy link.

We have recently invited Oxford ITSS to suggest improved versions of the “password expiry” template by emailing them to sysdev@oucs.ox.ac.uk. Other members of the University are welcome to contribute to this as well, through the same channel.

Posted in Uncategorized | Comments Off on Password-change emails without the taste of phish