1383: lilo7 access with managed SSH keys

We have updated the authentication process for login server lilo7 (lilo7.science.ru.nl) as part of a test. As of now, your ~/.ssh/authorized_keys file on lilo7 is ignored. This change is designed to prevent bad actors from easily gaining persistent access. The good news is that we can now grant access to lilo7 from outside the previously very restricted IP ranges. To gain access from a new IP range, you will need to provide us with your public SSH key and the IP range you will be connecting from....

1382: Science services behind EduVPN

De following Science services will be placed behind EduVPN. This means if you want to have continued access, you must use this VPN. De volgende Science services worden achter EduVPN gezet. DHZ/DIY SMTP (mail sending) LILOs Webmail If you have questions are experience problems with setting up EduVPN, please contact our helpdesk.

Updated Nov 27, 2024  ·  Bram Daams · Created Nov 26, 2024

Retiring Windows 2008 Terminal Server ts2   news

Mid july 2019 the Windows 2008 Terminal Server ts2 will be switched off. This terminal server used to be necessary for non-Windows users to use BASS or Tracelab. Please contact C&CZ if you think this might cause problems for you.

TeX Collection 2019   news

The most recent version of the TeX Collection, 2019, is available for MS-Windows, Mac OS X and Linux. It can be found on the Install network share.

Intel compilers update   news

Update 4 of the Intel Parallel Studio XE Cluster Edition for Linux 2019 has been installed in /vol/opt/intelcompilers and is available on a.o. clusternodes en loginservers. The older (2019 and 2014) versions can also be found there. To set the environment variables correctly, BASH-users must first run: source /vol/opt/intelcompilers/intel-2019u4/composerxe/bin/compilervars.sh intel64 After that, icc -V gives the new version number as output. For more info see the page on Intel compilers

VPN with two-factor authentication for shielded lab-network   news

The Science VPN has a new technique, in which individual users can get access to restricted parts of the network with two-factor authentication (username/password and certificate). This has been developed on request of a department that wants to give maintenance partners access to only the equipment that they service. Departments that are interested in this access, can contact C&CZ.

Secure Email: end of Squirrel webmail July 1   news

Because Squirrel webmail can’t handle the STARTTLS security level that we want to achieve, Squirrel will be phased out July 1. Users are advised to switch to a more modern Science webmail system.

Secure Email: SPF/STARTTLS, DANE/DMARC and DKIM   news

Recently, C&CZ worked on DNS based techniques that can be used to fight spam, phishing and eavesdropping of mail. Of the list of mandatory open standards of the [https://www.forumstandaardisatie.nl/open-standaarden/lijst/verplicht?f%5B0%5D=field_keywords%3A68 Pas-Toe-of-Leg-Uit] list w.r.t. email, C&CZ implemented SPF a while ago. Because strict implementation [https://en.wikipedia.org/wiki/Sender_Policy_Framework#FAIL_and_forwarding breaks simple/automatic forwarding], SPF has not been implemented in a strict manner. Also STARTTLS for mail encryption has been implemented a while ago. Recently, we introduced [https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities DANE] and DMARC, which makes it possible to start with DKIM....

Secure DNS (DNSSEC) introduced   news

As a requisite for the RU project “Introduction Safe Email Standards” project, that deals with the list of mandatory open standards of the Pas-Toe-of-Leg-Uit list, C&CZ introduced DNSSEC for all mail domains within ru.nl administered by C&CZ (science.ru.nl, cs.ru.nl, astro.ru.nl, math.ru.nl, …).

Old MFPs will be removed April 25   news

The old Konica Minolta MFPs will be removed from April 25. Users have had several weeks time to move over to the new system, that is much faster and more user friendly. For students: try to use up your old credit and do not top up. Can’t use up all your credit? Then you can ask to get a refund at the Library of Science until June 1, 2019. For all users: EveryOnePrint will be shutdown too, this functionality can be found in the SafeQ web upload....

Matlab R2019a available   news

The latest version of Matlab, R2019a, is available for departments that have licenses. The software and license codes can be obtained through a mail to postmaster for those entitled to it. The software can also be found on the install-disc. All C&CZ-managed Linux machines will soon have this version installed, an older version (/opt/matlab-R2018b/bin/matlab) is still available temporarily. The C&CZ-managed Windows machines will not receive a new version during the semester to prevent problems with version dependencies in current lectures....

Maple new version: Maple2019   news

The latest version of Maple, Maple2019, can be found on the Install network share and has been installed on C&CZ managed Linux computers. License codes can be requested from C&CZ helpdesk or postmaster by departments that take part in the license.