Home » Groups » STAR Protected

Jan 14

Updated on Tue, 2014-01-14 20:49. Originally created by wbetts on 2014-01-14 20:39.

Working on the TPC gas system spare computer trying to make it a ready-to-go standby.  Mostly trying to get the assigned COM port numbers to match those on the primary computer so that the software settings are identical and hardware can be plugged into the replacement without any additional changes, setting up shortcuts and network communications for Slow Controls data.  Also took the opportunity to apply updates to both machines, which cleared some Nessus findings.  Speaking of which...

cleaning up Nessus results:

Some Netgear switches once again had public and private SNMP access enabled.  Apparently deleting public and private is not sufficient - they appear to come back after a power cycle.  This time, instead of deleting them, I set them to disabled.  That cleared the Nessus results - it remains to be seen if a power cycle re-enables them or not.

sc's Archive Engines were recently restarted, and Nessus found their web control interfaces and complains about cross-site scripting vulnerabilities.  Discussed this with Chanaka and determined that no remote access is needed to the Archive Engine web interfaces, so used iptables to limit access to only the sc machine itself.  Rescanned and the Nessus results are gone.

Dick Majka reported that he could not start the ESL editor on the shift-leader computer.  This is a "new" default feature in a recent Java release that prevents self-signed apps from running.  As of Java 7U51, an exception list can be given, which was done on the shift-leader computer, but expect other systems to hit the same snag as Java updates get applied.

Additional discussion with Chanaka, including hands-on demos of the peculiarities of medm and fonts.  Some testing of font issues on astaire, but no closer to understanding why medm segfaults with scalable fonts selected on some machines (SL 6 in particular).  There is also the mystery of why two "variable" aliases are showing up on astaire, though only one appears to be defined in the files.  Removed the cjkuni-uming-fonts from astaire, because it was indicating some trouble determining font characteristics, but that did not make any difference as far as I could tell.

One long-time mystery solved perhaps?  aliases are not used with strace it seems (definitely caused me some confusion in the past)

But a new mystery arising this week - why is onl53 rebooting several times a day?  Unexplained reboots may go back a few weeks, but the frequency in the last three days has been much higher.

Groups: