CERN Web Services Architecture and operations

The NICE 2000 Web Services
Ivan Deloose, Frédéric Hemmer, Alberto Pace, Maciej Sobczac,
and others
Information Technology Division - CERN
The NICE 2000 site
http://cern.ch/win
HEPNT Meeting – April 2001
Content
http://cern.ch/win

Documentation

For end-users



Supported services and “as is” information
For service providers and support staff
Services





Accounts management (users, computers, groups, Passwords)
File System (permissions, quotas, scratch space , macintosh access)
Installation
Operations (Status monitoring, scheduled jobs, alarms, updates)
Application distribution
HEPNT Meeting – April 2001
Documentation
http://cern.ch/win/docs/


Scheduled for release beginning of June 2001
Addresses the following topics



Using Win2k at CERN (all specific informations)
Using portable computers and remote access (ACB)
Using the core set of applications


Office 2000, Internet Explorer, Outlook, Exceed, …
For Support staff and service providers, it covers:

Active Directory at CERN, DFS at CERN, W2k
installation, drivers maintenance, application
distribution, accounting and operational issues
HEPNT Meeting – April 2001
Services (page 1 of 4)
http://cern.ch/win/services/

User accounts management




View Status – mainly for the help desk and support staff
but also for end-users
Change password – for end users only (old password
required)
Reset password – for helpdesk only (old password not
required)
Erase Roaming profile
HEPNT Meeting – April 2001
Services (page 2 of 4)
http://cern.ch/win/services/

Computer account management



View Status – mainly for the help desk and support staff
but also for end-users
Recreate computer account – for re-installation
Security groups management

Group manager – allows creation/deletion/modification
of security groups by end-users. Very useful for NONwindows users using the CERN web services from unix
HEPNT Meeting – April 2001
Services (page 3 of 4)
http://cern.ch/win/services/

File System



Trustee manager – Allow managing of permission from
non w2k clients (especially W95, WNT, and UNIX users
using web services)
Disk quota manager – for group administrators and for
end users (read only)
Scratch space – for end-users
HEPNT Meeting – April 2001
Services (page 4 of 4)
http://cern.ch/win/services/

Application database


List of deployed application with responsible and
support information. It is planned to generate sw
distribution policies from this database.
Operations

Main internal tools to monitor, account and alarm
notification of the servers (more than 60 for the Win and
Web services)
HEPNT Meeting – April 2001
Conclusion


When deploying Windows 2000 to a large site, it is
necessary to define and channel all “standard
interventions” through a website in order to be able to
work with a clear service definition and to outsource
interventions to external companies that do not have
elevated privileges.
Fortunately, using standard commodity tools, the
development of these web interface is relatively easy
and fast.
HEPNT Meeting – April 2001