Jason Tasks.

• Finish Nagios plug-in doco
• Dreamhost weekly report (every Sunday?)
• write aide scripts for checking and reseting hashes
• untangle vlad’s OS sync scripts, recommend future solution
• daily sync of hash databases between prod and redundant, along with report of differences
• Reboot Database to finish patches

Stuff to do before Chicago

• Download Solaris 10 isos (ideally at home or off hours)
• Install Solaris 10 on dev machine
• Figure out what Solaris 10 uses for software raid (zfs?)
• put together rough draft of Solaris 10 build document

• Download Redhat 5 isos
• Install Redhat 5 on vmware (or similar)
• put together rough draft build document

Kyle’s Tasks

• Apache 2.0 on production
• Make sure password auth is disabled everywhere
• Do Quarterly Firewall Audit
• Do Quarterly Nessus Scan
• Delete passwords from SFTP customer accounts
• Start locking down SFTP key accounts by IP
• Add UPS monitor
• research linux kernel tuning parameters
• research ip stacks?

Stuff to do before Chicago

• Firewall Audit (probably mainly test)
• Run Nessus
• Do ARP scan (or make nessus scan for hosts)

Things Solaris Patches mess up:

• sendmail configuration (smarthost = qpsftp01)
• umask settings in /etc/profile (should be 077)
• su privileges (should be restricted to wheel)
• password rules
• duplex/100 meg status

Mike’s Tasks

• sudoize current ‘Mike’ responsibilities
  • setup test / prod environment for new school
  • install / sign customers public pgp key (on ujrun account)
  • install secure certificates into java cacerts
  • put up maintainance page for school / whole system
  • start / stop / restart jrun

• Check NTP Config
• Stricter Firewall Rules
  • Outbound
  • Inter-DMZ

• Install Solaris 10 on qpdb01-XX
• Configure storedge

Ticket Number 1-98195178