Jefferson Lab Site Report Sandy Philpott Thomas Jefferson National Accelerator Facility Newport News, Virginia USA Sandy. Philpott@jlab. org 757 -269 -7152 http: //cc. jlab. org HEPi. X -RZTUBS, 4/6/00
Jefferson Lab Common User Environment (CUE) Mass Storage SUN E 4000 Symbios /stage OSM jput/jg et STK Redwoods DLT jukebox jexport CACHEL /cache Farm cache JLABN* NT Domain Central Fileservers Net. App /home, /apps, /group, /site S IF App) C (N Metastor /work et JLABH/S Central Computing NFS OS: H-HP-UX 10. 20 L-Linux RH 5. 2 N-NT 4. 0 S-Solaris 2. 6 FARML/S IFARMH/L/S Batch farm - LSF RAServer Interactive farm Network:
Central Computing – UNIX • Solaris - stable; 2. 6 • HP-UX - no new systems; 10. 20 (still a lot around) • AIX – decommissioned – Windows • no physics computing; desktop only • Currently NT 4. 0; Single Master Domain • Testing 2000 client; no immediate plans for server – Network Appliance – concurrent NFS & CIFS • Guarantee 3 years full support, 5 years “gold” (new!) • /home, /group, /site, /apps, /mail
Experimental Physics Computing • File Servers – 5 TB total /work- Metastor– RAID 5 - NFS – 800 GB New Linux /cache server testing – RAID 0 • Batch Farming – 75 RH Linux dual-processors – 2700 SPECint 95 – LSF licensing/pricing issue being resolved • Mass Storage – CA OSM – now on 2 SUN servers (new) – STK Powderhorn silo - /mss • 8 Redwoods • 10 new 9840 s working
Batch Farm Nodes Cisco 2900 Batch Farm Nodes Ifarm Work Cache CISCO 5500 Work Cache Ifarm Mss 100 mbit 1000 mbit FCAL (100 MByte) Mss Current Configuration • Central Cisco 5500 switch. • Cisco 2900 switches with gigabit uplinks to some farm nodes. • Work and Cache on same file servers with 100 mbit Ethernet. • Local stage disk on mss nodes. • Direct access to ifarm systems.
Batch Farm Nodes Cisco 2900 Batch Farm Nodes Work Cache CISCO 5500 Work Mss 100 mbit 1000 mbit FCAL (100 MByte) Ifarm Cache Mss First Stage • Add separate cache file servers. • Cache servers are divided into groups. • Tape. Server will copy to cache servers via our in house protocol (not NFS). • Allow NFS access only to interactive cache systems. • Data flow should become MSS-Cache-Farm. Work-MSS.
Analysis Farm Nodes Batch Farm Nodes Cisco 2900 Cisco 2900 Cache Work Foundry Big. Iron 8000 Cache Mss FCAL Switch 100 mbit 1000 mbit FCAL (100 MByte) Second Stage • Replace central switch with a Foundry Big. Iron 8000 (faster backplane). • Farm nodes on Cisco 2900 switches. • Separate Analysis Farm. • Upgrade work file servers and use gigabit Ethernet. • More cache file servers. • Increased staging disk space on mss nodes. • Future tape drives may be on FCAL.
Analysis Farm Nodes Batch Farm Nodes Cisco 2900 Cisco 2900 Work Cache Foundry Big. Iron 8000 Work Cache Work Stager Cache Mss FCAL Switch 100 mbit 1000 mbit FCAL (100 MByte) Mss Third Stage • More farm nodes, cache, and work servers. • More mss nodes sharing file systems on a SAN. • More staging disk space. • Stage nodes copy data to and from stage disks. • OSM is replaced.
Projects Status • Distributed Web Servers – Linux, Apache - done • Distributed Systems Management – no recent changes – Mon, Jman – Jlab management database – Linux/My. SQL • User Support/Help. Desk – CCPR implemented (was GNATS) – Linux My. SQL database – NT Cold. FusionIIS interface Desktop Support • Security – SSH, Secure IMAP - get rid of clear-text passwords! • Telnet only open to 1 Internet-accessible machine • Secure IMAP protocol only, after April 2000 – DMZ – DNS, Secure IMAP (no Web mirror or secure FTP yet) • Grid…
Projects Status (cont) – Windows • 2000 Pro in eval; wait to eval Server • 95/98 support ends June 30 (no domain authentication) • SMS – beginning widespread use – Linux: announcing CC desktop support this week • 2 Levels – standard CUE configuration – 1 – no root, /home – 2 – root, no /home (Samba 2. 6? ) • /site, 2 /apps versions exported readonly to entire site • Kickstart installs with floppy • Nightly auto. RPM security updates
Projects Status (cont) – UNIX/NT Integration – Passwords – target June 30 Why we need: • • even just 2 accounts (UNIX & NT) are confusing to users! (they have at least 10 different names based on use); recently added a third calendar account, and have to request it remote and UNIX-only users can’t change NT password, but it expires and they can’t access services based on NT authentication (dial-in, MIS) Next phases: • User Accounts • Groups/Netgroups Common Password Implementation • • • Java Mysql databases – user, pending actions Public/private key authentication Web & command line user interface User interface -> Master controller – Input from web interface, command line – Outputs passwords to NT, NIS, DB
Скачать презентацию Jefferson Lab Site Report Sandy Philpott Thomas Jefferson
a1f5027cc5b746eac9cbe60ffebf0f74.ppt