[61] in Kakapo Windows Team
25 July WIN Container Admins Meeting
daemon@ATHENA.MIT.EDU (Thomas L. Thornton)
Mon Aug 11 20:19:50 2003
Date: Mon, 11 Aug 2003 20:19:45 -0400 (EDT)
Message-Id: <200308120019.h7C0Jj1q020511@the-rim.mit.edu>
From: "Thomas L. Thornton" <tomt@MIT.EDU>
To: contact-container-admins@MIT.EDU, kakapo@MIT.EDU
WIN Container Admins Meeting
25 July, 2003
Agenda:
Win2K SP4, related to OpenAFS
IE6, XP SP1 certificate issue?
Unicode filename issue?
RPC vulnerability - push to entire domain?
Release of other MSIs: Oracle not until campus release date...
Deployment of pismire.msi and openafs.msi
What additional testing do you need?
When will this be pushed to all machines?
Is there an opt-out? If so for how long?
XML MSI information views
As we wrote in the meeting announcement, this is an important time to
meet. The Pismere and OpenAFS auto-deployments come soon - our
schedule slates a domain-wide assign for 8/01-8/08. We want to learn
from each Container Admin when is the most realistic deployment time,
and current GP deployment will be available for only one week after
this meeting. So, if a Container Admin does not speak up by 8/08, we
assume all will be ready.
Win2K SP4
Attendees come in slowly, so we begin with the original second agenda
item. We see W2K SP4 works with our new OpenAFS client. Another bug
fix may come from PSS, so we agree to deploy SP4 after OpenAFS.
IE6, XP SP1 certificate issue
The XP SP1, xenroll and IE6 bug reported by Steve Dowdy shows
non-Local Admins cannot get certs. OpenAFS has a fix for this, which
may not be the end of the story, since some non-domain machines begin
to report it. SWRT and Help Desk are looking for more cases.
Unicode filename issue
Unicode filenames are still a problem, though PSS may help. The
development team may be able to come up with a sanitize logout script.
Perhaps this is an issue related to a Building 37 failure to save an
Access DB file, so Chad will send Paul the full path to it. Chad also
sees Adobe MSIs fail to save settings under XP and will let us know
more. This is not related to offline file syncs, for which Paul and
Joe seek a disabling method.
RPC vulnerability - push to entire domain?
We believe most containers and machines already have deployed the
MS003-026 RPC hotfix, but at least one container has not. Paul sends
mail today, hoping to deploy it very soon. This will not work on
W2K3.
Release of other MSIs: Oracle not until campus release date...
We expect a new Oracle release in mid-August and do not have a copy of
the final installer before then. Please try it, report any problems,
and we will make the blessed installers available later, especially
after the 14 and 15 August External Reviewer visits.
Deployment of pismire.msi and openafs.msi
This agenda item moves here from its original the top spot. The
latest OpenAFS and Pismere installers are under test, and so far we
believe that AFS will need a fixed aklog. No one asks for additional
testing or makes objections to a rapid deployment. So, we remain on
schedule to push them to all machines by 8 August. We will offer by
email that anyone who asks opt-out, but we cannot support the old MSIs
three weeks after the deployment.
XML MSI information views
Right now Joe's prototype of an XML_based MSI viewer consists of:
http://web.mit.edu/pismere/msilist/msilist.xml : a sample xml database of
MSIs.
http://web.mit.edu/acs/windows/msisupport.html : is the actual Academic
Computing msi information web page.
http://web.mit.edu/pismere/msilist/acst/msisupport.xsl : a sample xslt
stylesheet to convert the xml database into the style of the
Academic Computing msi information web page (only works on MSXSL
because of multiple output documents require extensions)
and
http://web.mit.edu/pismere/msilist/acst/msisupport.html : is the
result html document you get by running MSXSL on the .xml and .xsl
files listed above. (Actually, this file is just the main result
document. The other related documents are in
http://web.mit.edu/pismere/msilist/acst/msiinfo/ )
News and new containers
There is an XP RIS advanced image that Richard ACLs. It is to be used
with the MIT select key. Optiplex problems are to be addressed in
this image. There may be some XP-vs.-W2K settings problems that Ed
has seen, and he will re-scan them for candidates to send to PSS.
New containers exist for Libraries, ChemE and Sidney-Pacific. ChemE
has Optiplex 260 machines, so awaits the new advanced image. They
plan to use RIPREP, because they have so many apps.
Container Admins need more scripting examples and skeletons. Joe and
Chad plan to use those in in win\dfs\37-win\departmental and
msi\acst\scripts to document and possibly do training.
Discussion
A questioner asks about departmental server licenses - they are about
$100 apiece, since Microsoft encourages their use.
Some wonder whether to set Auto Update by GP. See the "Extensions"
document by Joe. Also remember that autohotfixer covers a middle
ground, so Container Admins can choose which hotfix they want.
