External developer requires root access? Advised required.

From: Richard Bemrose <rb237_at_phy.cam.ac.uk>
Date: Wed, 08 Apr 1998 12:59:35 +0100 (BST)

Hi all,

Here's a brief summary of the problem. We have a cluster of Digital UNIX
V3.2 and V4.0 and SGI IRIX V6.2 workstations within a Network Queueing
System (NQS) domain. The version for NQS we currently employ is named
Generic NQS (GNQS). See http://www.shef.ac.uk/~nqs. GNQS V3.50.2 has been
running successfully for several months. After applying the latest
operating system patches to a DEC AlphaStation 600 and DEC 433au Personal
Workstation, these workstation are seen receiving qstat packets from
remote workstation but the remote workstation do not report any jobs
running.

I wish to apply these patches to other 433au but am refraining until this
problem is resolved. (The OS patches are required to fix a problem with
the debugging section of the kernel). Another alternative is to migrate to
another NQS flavour -- not out of choice!

The GNQS maintainer has very kindly offered his services to investigate
the problem. However he requires root access to a selected number of
workstations. In addition, he would telnet in from outside of our
institution. Furthermore, he has offered his services over the Easter
Weekend (due to other commitments) and hence I would not be able to
monitor his activities.

Now here are some questions;
  1) What are other people thoughts?
  2) If I go ahead, what precautions should I take.

So for, my plan of action is:
  a) Ask him to sign some sort of 'computer misuse' binding agreement.
  b) Disable NIS from workstations and set up /etc/passwd.
  c) Remove any /.rhosts files (should be none).
  d) Ensure that the root password differs from other workstations.
  e) Attempt to isolate selected workstaions.
  f) ????

Any help and advice would be very much appreciated.

Regards,
Rich

 /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ _ \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\
/_/ Richard A Bemrose /_\ Polymers and Colloids Group \_\
/_/ email: rb237_at_phy.cam.ac.uk /_\ Cavendish Laboratory \_\
/_/ Tel: +44 (0)1223 337 267 /_\ University of Cambridge \_\
/_/ Fax: +44 (0)1223 337 000 /_\ Madingley Road \_\
/_/ (space for rent) / \ Cambridge, CB3 0HE, UK \_\
 /_/_/_/_/_/_/ http://www.poco.phy.cam.ac.uk/~rb237 \_\_\_\_\_\_\
             "Life is everything and nothing all at once"
              -- Billy Corgan, Smashing Pumpkins
Received on Wed Apr 08 1998 - 14:05:51 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:37 NZDT