Distributed Computing Support
Management Team

Meeting Minutes

August 15, 2003

Joe Adamo (Computing and IT Center), Troy Bacon (AVP Finance and Business Affairs and Controller), Craig Berry (School of Visual Arts), Ginger Boone (University Union), Allen Bradley (Computing and IT Center), Sandy Burke (Computing and IT Center), Tim Christian (College of Arts and Sciences), Chu Chuah (School of Community Service), Wil Clark (UNT System Center @ Dallas), Jim Curry (Microcomputer Maintenance/Classroom Support Services), Cyndie Harris (UNT Facilities), Mike Hatch (College of Business Administration), Pamiela Hight (UNT Libraries), Elizabeth Hinkle-Turner (Student Computing Committee, Computing and IT Center),  Paul Hons (College of Education), Abraham John (VP Student Development), Kirk Kelly (Housing), Brenda Kirk (Computing and IT Center), Maurice Leatherbury (Chair, Executive Director of Information Technology and Academic Computing), Mike Maner (Computing and IT Center), Gary Mathews (School of Library and Information Science), Dallas Newell (Registrar's Office), Bruce Pollock (ABN LAN Mgmt), Chris Strauss (Computing and IT Center), Mike Wright (Computing and IT Center), Roy Zumwalt (Texas Academy of Math and Science)

Members Present
Joe Adamo (Computing and IT Center), Craig Berry (School of Visual Arts), Allen Bradley (Computing and IT Center), Tim Christian (College of Arts and Sciences),  Chu Chuah (School of Community Service), Jim Curry (Microcomputer Maintenance/Classroom Support Services), Mike Hatch (College of Business Administration), Pamiela Hight (UNT Libraries), Paul Hons (College of Education), Elizabeth Hinkle-Turner (Student Computing Committee, Computing and IT Center), Brenda Kirk (Computing and IT Center), Maurice Leatherbury (Chair, Executive Director of Information Technology and Academic Computing), Mike Maner (Computing and IT Center), Gary Mathews (School of Library and Information Science), Chris Strauss (Computing and IT Center), Mike Wright (Computing and IT Center) 

Rich Anderson (Computing and IT Center), Travis Brown (Computing and IT Center), Patrick Dolan (Computing and IT Center), Dan Glass (Computing and IT Center), Axton Grams (Computing and IT Center), Jason Gutierrez (Computing and IT Center), Judy Hunter (GALMAC, Libraries),  Krysta Kaye (UNT Libraries), Jason Myre (Computing and IT Center), Charlotte Russell (Computing and IT Center), Dennis Scroggins (Computing and IT Center), Craig Terrell (Computing and IT Center), Mike Williams (Computing and IT Center), Scott Windham (Computing and IT Center)

Approval of Minutes
Minutes from the August 1, 2003  meeting were approved with changes.

Computer Support Orientation
Maurice Leatherbury reported that in past DCSMT meetings discussions focused on the possibility of conducting orientation training for new network managers and computer support staff.  During today's meeting, Tim asked if DCSMT would send representatives from their areas if such training existed.  Maurice recommended that Tim put together a committee to develop the curriculum.  Membership would be comprised of those who could contribute content.  Tim agreed to take on the task.

Security Issues
Rich Anderson reported on the effects of the Blaster worm.  He presented a
graph of the number of machines on the internet that have been infected with the worm (up to 1.8 million).   Rich reported that the week started with 2600 vulnerable machines and is now down to 700.  He asked those who have not applied the patch please do so as soon as possible.  It only takes one machine to infect the network.  ACL's have been put into place to block Resnet and dialups from the rest of the network.  Students who will be returning next week and those who have not been on campus recently will bring or turn on infected machine when they arrive. Rich has been analyzing network traffic to check for the worm.

Maurice said that UNT was one of the only institutions that had no infections (TCU, UT and UT Arlington were affected.) He asked if DCSMT areas were having trouble patching.  Some areas were having problems because vulnerable machines were unsupported.  Other problems included difficulties with the EYE Retina scanner tool which only takes a snapshot in time.  Mike Williams will check on the availability of HfNetcheck (checks for the presence of service packs and hot fixes and pushes out updates).  Rich will check on possible options for launching eEYE retina scanner.

Nessus scans that were conducted last week inadvertently had an adverse affect on servers. Information Security will notify network managers in the future if an audit is being conducted and will create a no scan list. 

Rich also reported that he attended Black Hat and Defcon conferences.  Many discussions at the conferences focused on the RPC vulernability and worm development.  Rich has powerpoint presentations from the two conferences. Send e-mail if interested in information.

Maurice indicated that we don’t really have a choice about not becoming more intrusive about security.  Networks are being shutdown because this worm got loose.  

RPC Blaster worm
Mike Williams reported that at least two new variants of the RPC Blaster worm exist.  The newer variants have hacker tools dropped inside. Internet Storm Center recommends completely wiping infected computers to ensure that the variants are completely removed, otherwise the possibility of being hacked increases. It is the only way to make certain that a machine is clean.  The worm opens a backdoor to the command line for hackers. The Symantec tool cleans the worm and TFT files but a number of things can be left  behind.  Mike recommends backing up critical data, saving it, wiping the drive and re-installing the operating system. 

Mike also reported that patches for WinNT, 2K, XP, and 2003 server are available on the NCS website and that a denial of service attack will be launched against windowsupdate.com tomorrow.   

Rich and Datacom will be on standby tomorrow to deal with security or network issues that may arise.

Old Business

New Business

Status Reports
Mike Wright reported that he has enough requests to place a Macromedia order.  Immediate orders will be placed at the end of this month (as scheduled).  All other orders will have to be made after Mike receives a minimum of 50 orders. 

Chris Strauss reported that he has not noticed any problems with Remedy 5.5 switch over; however end-users are experiences difficulties.  There are many changes between versions 5.0 and 5.12. 

Axton Grams asked DCSMT to notify him if there are any problems or if there is something missing in the new Remedy application.  Listed below are a few key points about the new version of Remedy:

Judy Hunter reported that things are good with the labs. 

Craig Berry reported that he is having a very busy week.  He is mostly convinced no worm infections occurred even though there were symptoms all week.   Network traffic had been almost non-existent in his area .  There were problems with half duplexed ports causing machines to shut down.  Datacom helped to diagnose and repair the problems.  He was then able to migrate to a new netware server. 

Travis Brown reported that he had problems with LDAP but it is now stable.  Send Travis trouble tickets and feedback about system.  The email directory will be populated by the end of the month.  Preferred email addresses will be recognized and populated in the database.  On the first pass the full GW address will be included. On the second pass an alias will override the GW address and become the preferred e-mail address.  The official address book will feed email addresses into LDAP and LDAP will feed Remedy.

Craig Terrell reported that he's just trying to help Travis and has mostly been trying to clean up data in the directory. 

Jason Myre reported that one of the GW servers will be migrated to new hardware tomorrow and that two other server migrations have been rescheduled. 

Jason Gutierrez reported that he noticed a paging outage. 

Mike Williams reported that he is trying to finish version 7 of the McAfee cd.  He hopes to have it in the bookstore and available for download next week.

Tim Christian reported that maintenance will take place tonight and that his network will be down for several periods this weekend. 

Pam Hight reported that Library servers were down from 9am to 10:30 or 11:00 today in order to change wiring.  Pam also reported that she will be in a meeting next week to try to determine how to define a student as "current" and an employee as "active" without violating contractual obligations.  The person who normally handles contracts will be returning from vacation soon.  In the meantime, some users will not be able to use some services until their status is determined. 

Libraries is moving printers and servers around for a VLAN.  CITC nessus scan caused Libraries netware servers to abend and also caused garbage print-outs.  Some backup agents were unavailable. 

Mike Wright reported that he is now managing WinZip orders.  Send information to Mike instead of CAS.

Maurice reported that CITC is paying $400,000 for shared software. 

Joe Adamo reported that there is only one remaining meeting to discuss network monitoring system requirements.  This phase of the project should be wrapping up soon.   

Joe also reported that the wireless network in the ISB is up in a pre-production environment.  The Union will also be up soon in pre-production mode.   After several more buildings come up in pre-production status Datacom plans to move to production mode. The wireless network is called Eaglenet and is available to anyone with an euid and password.  Upon connection, the user is re-directed to a logon page.  Only web service is presently available.  Authentication is encrypted.  VPN and GW will be added later (after applicable change requirements have been made in LDAP).   Contact Rory if you encounter strange things. 

Scott Windham reported that lab machines have been ghosted. 

Mike Maner reported that he is trying to get everything going for the start of the semester. Traditions Hall is ready.  A few people are moving in.   Two more dorms will come on-line.  Mike also reported that combinations of Remedy and LDAP issues have prevented Datacom from finding trouble tickets. 

Mike Hatch introduced Charlie Brian, the new lab manager in COBA (replacing Jan Brothers).  Mike reported that he is replacing faculty machines and coping with new things.

Jim Curry reported that due to budget cuts HP printers, dot matrix printers, and Apple II service will no longer be supported effective September 1, 2003.  Jim will give parts to areas who need them.  A notice has been posted on the MMS website.

During the DCSMT meeting, a demo model of a Dell D600 was passed around.  (In a previous DCSMT meeting, this model was a candidate for purchase.)  Cost is $2052 delivered. Jim plans to stock this model next fiscal year and will check the stock level of current machines.

Jim also reported that is has been a rough week for the green case. He has been negotiating through Antec, a third party vendor. At one point the vendor indicated that cases would be painted but it turns out that the case is actually a green plastic painted with a nice sheen.  100 cases should arrive on August 25 or 26.  840 will arrive a few weeks later.  After the cases arrive, it will be possible to deliver orders in bulk within 5 days after receiving an order.  Tower case customers have been notified and offered a black case.   Contact Peggy if you need an immediate order.

The meeting adjourned at 11:45 a.m.


Return to Distributed Computing Support Management Team Home Page.

Page last modified on September 11, 2003.  Send comments to Maurice Leatherbury.