linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] Maintenance: No Sysdb changes with bob on 19.12.2022 14:00-14:30

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: [[Linux-announce] ] Maintenance: No Sysdb changes with bob on 19.12.2022 14:00-14:30
Date: Mon, 12 Dec 2022 08:32:23 +0100
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 20.250.76.7) smtp.rcpttodomain=lists.psi.ch smtp.mailfrom=psi.ch; dmarc=bestguesspass action=none header.from=psi.ch; dkim=none (message not signed); arc=none (0)
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=t2NjsXxaDY6fwnfNHoUr18Huvp0Md0wwOsNdGoqJHUA=; b=eoCqbbFTAWjaNZrnk/ao52y3LEveXNGwCCXi9x9AFH/By9BE2ZVoTNCMyJP++AU5xmI0EoJFlYnoCqubx6u5+ewdNzbMS0QHkDfvr4it6yL1PQop7PdTO4ahZ8NDrgwSJzwZ/JtiF0pg77a+Qb7VYL9gy+khWezaxt687MJRJ/o3n1HkvdQIbIJiogw8FUGIOQRR8rtFHKF6C5FbrEEpa/sLumOrzBXTrMNlUa6fcd0SgdB1GyMW0K8Od/TNWCqXrXK1ighiZwlUwh1EgljR1UsApWiODP9ywH3/YRkvVWFWij1Tx0k7yqLwGRdGwr/TonmRVyS+Ar/1VrJZYCa4Aw==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LRyxburBIKFLW+2la7i49dG635e/n19zoQ85lg7h2nBxmDKKhuwmsUgSrgapnMYNj10+vSizAasCpcPDPt85Jo9CIv8FYz1h10nonRuGr1nE8ccDmAxYfNkMGjN0mfM+G+GWncv3xpnuPNcbppaAqLsGb0vh5myAdtYIM+9gc0ya4Y3QhHm25HFpCAT2JVNBCHVzJUn1iSooYhSzZlKZ020wlp6b0YV2KyJSQHaLeJv1kCylmhXqRBTwlzKgidwAWHcmRXZLIPuB9gCY8l6kZFhbS2qnOEHwK/m7LrbeobqX31XBx/FFxfrf7KvNFL77r/b9a62CXRiZuaXje5ZqJQ==
Authentication-results-original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Dear Linux Admins

Timeframe
---------
Mon 19.05.2022 14:00 - 14:30

Effects
-------
Changes in Sysdb are not possible using the API or the bob tool. Read access, which includes the boot menues, is still possible

Changes
-------
The Kerberos keytab of boot00.psi.ch will be replaced. The current one uses the deprecated RC4 cipher and it will get one with AES256.
When the new keytab has been created the AD will not accept the old keytab any more and thus there will be an outage until the new keytab is rolled out. Note that this only concerns changes as for read access no authentication is required.

Cheers
Konrad

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
WHGA/038
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch

[[Linux-announce] ] Maintenance: No Sysdb changes with bob on 19.12.2022 14:00-14:30, Konrad Bucheli (PSI), 12/12/2022