University of Minnesota Duluth
People | Departments | Search UMD
ITSS

Information in archived ITSS news was current at publication time but may not reflect the present state of technology or ITSS.

Skip to: Content

In This Issue

+ Securing private data

+ Novell Office Server to be upgraded

+ Sawmill provides analysis of web server stats

+ Apple releases Tiger (OSX10.4)

+ Marketscore poses security risk

+ Upcoming system changes: UMCal; Telnet/FTP restrictions; Appletalk zones

Subscribe

View past issues

Search ITSS News archive:

ITSS home : Info.tech.NEWS : May 2005

infotech.News logo

Technology news for UMD faculty, staff and students

May 2005

Securing private data

Secure data

Requirements that we do a better job of securing private data are coming at us fast and furious. Most recently, the University must comply with the Payment Card Industry Data Security Standard by June 30, 2005. If your department is processing or storing credit card data on a computer or over the data network, ITSS must work with you to ensure compliance.

Linda Deneen is working on this project and has been in touch with many units already. If your unit does credit card transactions and you have not yet been in touch with Linda Deneen, please contact her at x7588 or ldeneen@duluth.umn.edu.

In order to raise awareness about a variety of security issues, Steve Patterson from ITSS will be contacting department heads from all departments over the next several months to check on the status of department computer security.

In particular, department heads are responsible for ensuring that their departments are compliant with: STANDARD - Securing Private Data. The ITSS desktop support team is available to review department computers to ensure they are in compliance.

Other important security information is available here:

Virus and Security Information /itss/security

Novell Office Server to be upgraded

ITSS will be upgrading the Novell Office Server (UMD-IS3) during the coming months. The new "server" will actually be a cluster of systems to provide better performance, and more redundancy. Currently, a failure on the Office Server could potentially affect all customers. The new server cluster will allow services (like files and printing) to keep working, even if there were a problem with one or more of the servers in the cluster. The new server will also support an upgraded Novell operating system, allowing us to provide additional services.

To minimize the move, we plan to migrate current office server customers to the new server by department. Many of the changes will be transparent to our customers. However, there are several areas that will require adjustments:

Retired applications

The following applications are being "retired" and will no longer be available once a customer is moved to the new office server.

Retired Applications Status Alternative
MS Office 2000 or earlier
(Access, Excel, PowerPoint, Word)
Licenses have expired. Office 2003
See: Microsoft Campus Agreement
FileMaker Pro versions 2, 3, or 4 No longer supported FileMaker Pro 5
Please note that due to licensing restrictions, there will be no future FMPro upgrades.
See: Installing FileMaker Pro5
Lotus 123 No longer supported. Excel 2003 / Office 2003
See: Microsoft Campus Agreement
PageMaker 6.5 Must be reinstalled to use new license manager. Keyed version of PageMaker.
PageMill No longer supported. DreamWeaver MX
See: Installing Dreamweaver MX
SPSS 10, SPSS 11 Licenses have expired. SPSS 12
See: Installing SPSS 12
WordPerfect 8 Replaced by Microsoft Campus Agreement. Word 2003 / Office 2003, with the "WordPerfect" document filter
See: Microsoft Campus Agreement
Continued applications:

The following applications will continue to be offered through the Office Server or the Microsoft Campus Agreement:

New Applications

The following new applications will be available when customers are moved to the upgraded server:

ITSS staff will be contacting departments and individuals with further information as we get closer to the migration date. If you have questions about the new server please contact Tim Biles, tbiles@d.umn.edu or extension 6959, and for software updates please contact Steve Patterson, spatters@d.umn.edu or extension 8785.

This article was revised 8.05

Novell services /itss/novell/

Sawmill provides analysis of web server stats

A sawmill isn't just for making lumber from logs anymore! ITSS recently installed Sawmill, a web log analysis tool, on the UMD web server, and is offering the service to the campus.

With Sawmill, you'll be able to easily view the following statistics about your college or department web site processed from the server logs:

Sawmill logo

If you'd like to try a demo of Sawmill, please contact Bruce Reeves (breeves) to have an account created. If you like the demo, ITSS can set up a personalized Sawmill account for you.

WebDev Guide /itss/webdev/

Apple releases Tiger (OSX10.4)

Tiger OSX

Apple released the latest version of the OSX operating system last week, OSX 10.4, code name "Tiger".

UMD has a license that allows the latest OSX operating system to be installed on any UMD-owned Macintosh. Apple's minimum requirements for installing OSX 10.4 is a G3 processor and 256Mb of RAM. ITSS, however, recommends at least a G4 processor with 512Mb of RAM.

OSX 10.4 is distributed on a single DVD. We should soon be receiving our new DVD duplicator and hope to soon be duplicating the DVD and making it available in our computer maintenance area in KPLZ 165 within the next few weeks. We'll announce their availability in the "News Briefs" column of our ITSS home page, so check there if you're anxious to upgrade.

Should you upgrade to OSX 10.4?

If you're currently running OSX 10.2 and have at least 512 MB of RAM you should probably update to OSX 10.3 or 10.4. If you're currently running OSX 10.3 then there's probably no real urgency to upgrade. A conservative Mac user would wait at least until Apple releases a 10.4.1 update to resolve some of inevitable issues that come with a major operating system update.

OSX 10.4 has some nifty new features (see Tiger unleashed for more information). However, for most Mac users on campus few of these features will be a large or immediate benefit for the work we do on our computers.

Some utilities and applications may not be upgraded yet for OSX 10.4 compatibility. The VPN client that many Mac laptop users rely on for secure connections on our wireless net and for connecting from off campus won't work with 10.4. We expect Cisco to release a new version sometime this month. Until then, Mac users who depend on VPN for secure connections and accessing UMD resources should probably wait on upgrading to 10.4.

Virtual PC has problems with 10.4. Microsoft should have an update available later this summer. Some applications, such as UMCal and Symantec/Norton's Antivirus, may require reinstalling after upgrading to 10.4.

Norton's Anti-Virus may also give an error on startup (a new version should be available this month). Even though there are currently no OSX viruses that attack the Mac operating system, we still find Word macro viruses popping up on both Mac and Windows platforms. Installing NAV also prevents you from passing on files that are infected with macro or other viruses to Windows users. NAV 10, which will be released in the next few months, will be more compatible with OSX 10.4.

If you have purchased a QuickTime Pro 6 serial number you'll have to purchase a new QuickTime Pro 7 serial number if you upgrade OSX 10.3 to QuickTime 7 (via Software Update) or if you install OSX 10.4 (which comes with QuickTime 7).

One excellent source for learning about issues and problems some Macintosh users have experienced in upgrading to 10.4 is MacFixit.

If you have questions or would like more information an Macintosh or Macintosh OS issues, contact Joel Ness (x8841, email:jness).

Marketscore poses security risk

Recently, we received notice from OIT that a number of campus computers had their web browsing, including encrypted passwords and other secure transactions, redirected through Marketscore.com. Marketscore is considered to be a security risk and must be removed from all University computers.

What is Marketscore?

Marketscore is proxy software that is sometimes installed in conjunction with other software downloaded from the Internet, such as network acceleration software. It installs a certificate in the web browser that allows outside access to encrypted data such as passwords and other secure transactions.

Marketscore directs ALL of your web traffic through their servers, allowing them to collect and analyze any information you send or receive through your web browser. This includes data that you send through "secure" connections (the one that creates the little lock icon in the lower corner of your web browser) such as credit card transactions and University login credentials. They can then either utilize that information, or sell it to their partners.

Because this is a network security violation, any SSL encrypted outbound traffic to Marketscore has been blocked at the University border. Non-encrypted traffic is not blocked. Computers that have this software installed may not be able to use their web browser until the software and the certificate are removed.

Detecting Marketscore

OIT has provided a tool that may detect if your computer is a proxy. Simply go to the following web site:

http://www.umn.edu/oit/security/marketscore-proxycheck.html

Removing Marketscore

If Marketscore is running on your University computer, you must remove it. You may follow the instructions below, or call the ITSS Help Desk (x8847) to request assistance.

Upcoming system changes

Just a quick reminder about some upcoming system changes:

7/05: UMD calendar users need to move to UMCal
The UMD Calendar server, known as "Corporate Time" or "Oracle Calendar" has been replaced by an enterprise server (UMCal) and will be shut down this summer. If you have not yet moved your data to the University-wide server, please contact ITSS to make arrangements to get your data moved.
More info: April 2005
7/05: FTP and telnet access to be restricted
On July 11, 2005, ITSS will eliminate off-campus access to our major servers for non-secure login access and file transfer programs (telnet, ftp, rsh, rcp, etc.). The major servers involved are our login and web servers, including ub and bulldog (general access servers), www (our main web server), and several special purpose web servers.
More info: March 2005
1/06: AppleTalk zones going away
Next January, ITSS will be changing how the Macintosh AppleTalk protocol works on campus. Most Macintosh users may not even notice the changes, but departments with Apple LaserWriters will need to start planning for a replacement.
More info: AppleTalk zones going away in 2006

info.tech.News is published monthly during the academic year by ITSS. An email digest is also sent to all users subscribed to the infotech.announce, UMD.business.announce and studenttech.announce. The goal is to distribute information useful to the daily routines of the University of Minnesota Duluth campus community in conjunction with computer and telephone technologies. Comments or suggestions may be sent to the editor at: sbradt@d.umn.edu.