March 2021 - aktuell - lists.lrz.de

Provider-Wartungsarbeiten am 13.04.
by Bernhard Schmidt March 31, 2021

March 31, 2021

Sehr geehrte Damen und Herren, die Telekom hat für den 13.04.2021 Wartungsarbeiten an zwei Glasfaserleitungen angekündigt. Wo : Backbone-Verbindung zwischen TUM Stammgelände und Garching Was : Arbeiten an LWL. Es werden keine spürbaren Ausfälle im MWN erwartet, da redundante Anbindungen in die Innenstadt über LMU Stammgelände und Weihenstephan bestehen Wann : 13.04.2021, 00:00 - 05:30 Uhr, etwa 2,5h Ausfall Wo : Anbindung LMU Soziologie, Konradstr. 6 (LL) Was : Arbeiten an LWL. Ausfall der Anbindung. Wann : 13.04.2021, 00:00 - 05:30 Uhr, etwa 2,5h Ausfall

1 0

Incident 153183 - Routingstörung Campus Garching, teilweise auch andere Standorte betroffen
by Bernhard Schmidt March 26, 2021

March 26, 2021

Sehr geehrte Damen und Herren, am 26.3. gegen 12:30 Uhr gab es eine Großstörung an den Routern für den Campus Garching, ausgelöst durch eine Netzschleife in einem Gebäude am Campus. Diese hat einen der beiden Campusrouter derartig in Mitleidenschaft gezogen, dass der Kontakt zum anderen Router verloren ging (Split-Brain im Redundanzkonzept) und auch den durchlaufenden Verkehr aus den Innenstadtarealen betroffen hat. Die Störung ist seit 13:30 Uhr weitgehend behoben, allerdings gibt es noch Probleme mit einigen Firewallinstanzen am Campus Garching. Sollten Sie: - noch eine Störung bemerken und noch kein Ticket aufgemacht haben, melden Sie diese bitte unter https://servicedesk.lrz.de - eine Störung gemeldet haben die mittlerweile behoben ist bitten wir um eine entsprechende Nachricht im jeweiligen Incident, um die Kollegen bei der Fehlersuche zu unterstützen. - eine Störung gemeldet haben die noch besteht bitten wir Sie um Geduld. Wir werden den Ausfall detailliert analysieren und zu gegebener Zeit detailliertere Informationen geben.

1 0

Upcoming Online Courses by LRZ
by Weinberg, Volker March 24, 2021

March 24, 2021

Dear users of LRZ, we would like to point your attention to the following upcoming online courses: Data Analytics, Big Data & AI Training Week Date: Tuesday, 6 Apr 2021 09:00 – Friday, 9 Apr 2021 17:00 CEST Fee: free of charge Registration Deadline: 1 Apr 2021 Lecturers: Dr. Johannes Albert-von der Gönna (LRZ), Florent Dufour (LRZ), PD Dr. Juan Durillo Barrionuevo (LRZ), Dr. Martin Ohlerich (LRZ), Severine Habert (Intel), Shailen Sobhee (Intel) and others Abstract: This course series on Data Analytics, Big Data & AI Training offers the following course modules which build up on each other and can be selected individually during registration depending on the knowledge of the participants. * Introduction to GNU/Linux and SSH - Q&A * Introduction to the LRZ HPC Infrastructure * Introduction to the LRZ Compute Cloud * Using R at LRZ * Introduction to Container Technology & Application to AI at LRZ * Introduction to the LRZ AI Infrastructure * Intel® AI HPC Workshop #1: Machine Learning Module * Intel® AI HPC Workshop #2: Deep Learning Module Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online%20Course.ed.547518/ Parallel Programming of High Performance Systems Date: Tuesday, 13 Apr 2021 09:45 – Thursday, 15 Apr 2021 16:00 CEST Fee: 0 €– 600 €, thanks to financial support by the Competence Network for Scientific High Performance Computing in Bavaria (KONWIHR), the course is free of charge for students at Bavarian universities and members of Bavarian universities and public research institutes in Bavaria. Registration Deadline: 30 Mar 2021 Lecturers: Dr.-habil. G. Hager (NHR@FAU), A. Afzal (NHR@FAU), Dr. M. Wittmann (NHR@FAU), Dr. V. Weinberg (LRZ) Abstract: This course, a collaboration of Erlangen National High Performance Computing Center (NHR@FAU) and LRZ, is targeted at students and scientists with interest in programming modern HPC hardware, specifically the large scale parallel computing systems available in Jülich, Stuttgart and Garching near Munich. Topics covered include: * HPC Intro, Systems in Germany * Elements of MPI and OpenMP * OpenMP in Depth * MPI in Depth * Basic Computer Architecture: Shared Memory * Basic computer architecture: Distributed Memory * Profiling Tools * Performance Pitfalls Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online%20Course.ed.569860/ Introduction to LRZ HPC Systems with Focus on CFD Workflows The same course will be offered twice, in April and June 2021: Date 1: Wednesday, 14 Apr 2021, 14:00 – 16:30 CEST Registration Deadline: 7 Apr 2021 Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online-Kurs.ed.545066/ Date 2: Tuesday, 1 June 2021, 14:00 – 17:00 CEST Registration Deadline: 25 May 2021 Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online%20Course.ed.573523/ Fee: free of charge Lecturer: Dr.-Ing. habil. Thomas Frank (LRZ) Abstract: The focus of this short course is to provide to beginners in High Performance Computing (HPC) and Computational Fluid Dynamics (CFD) a crash course like introduction to the following essential knowledge: Introduction to the LRZ Linux Cluster Systems and computing environment, introduction to a typical user environment on LRZ Linux Cluster systems, Linux terminal access and file transfer tools, usage of the module system, the batch queuing or scheduling system SLURM, introduction to a typical CFD-oriented workflow on the example of ANSYS CFD and StarCCM+, aspects of licensing of commercial CFD software at LRZ. Modern C++ Software Design Date: Tuesday, 21 Apr 2021 10:00 – Thursday, 23 Apr 2021 17:00 CEST Fee: 30 € – 600 € Registration Deadline: 7 Apr 2021 Lecturers: Klaus Iglberger Abstract: This advanced C++ online training is a course on object-oriented (OO) software design with the C++ programming language. The focus of the training are the essential OO and C++ software development principles, concepts, idioms, and best practices, which enable programmers to create professional, high-quality code. Topics covered include * Overview of the STL * Proper use of the STL * Class Design * Dynamic Polymorphism Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online%20Course.ed.545034/ Accelerated Computing with OpenACC and Deep Learning Date: Tuesday, 27 Apr 2021 – Thursday, 29 Apr 2021, 10:00 – 16:00 CEST Fee: free of charge Lecturers: Dr.-habil. Juan Durillo Barrionuevo (LRZ), Dr. Volker Weinberg (LRZ), and Georg Zitzlsberger (IT4Innovations) Abstract: The course combines a lecture about Accelerated Computing with OpenACC with lectures about Fundamentals of Deep Learning for single and for Multi-GPUs. Learn how to accelerate your applications with OpenACC, how to train and deploy a neural network to solve real-world problems, and how to effectively parallelise training of deep neural networks on Multi-GPUs. The course is organised by VSC - Vienna Scientific Cluster in cooperation with LRZ, IT4Innovations (Czechia), and NVIDIA. Registration: https://vsc.ac.at/training/2021/DL/ Introduction to C++ Date: Monday, 3 May 2021 10:00 – Thursday, 6 May 2021 16:00 CEST Fee: 35 € – 780 € Registration Deadline: 19 Apr 2021 Lecturers: Dr. Carla Guillen (LRZ), Dr. Carmen Navarrete (LRZ), Dr. Martin Ohlerich (LRZ) Abstract: This 4-days online course covers an introduction into the C++ language features (types and data structures, basic key words, flow control structures, templates, ...), some of the paradigm ideas, software development process including program design, project managment, debugging, and more (cmake, doxygen, git, ...). Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online%20Course.ed.566506/ C for Beginners Date: Monday, 21 June 2021 10:00 – Wednesday, 23 June 2021 16:00 CEST Fee: 30 € – 600 € Registration Deadline: 7 Jun 2021 Lecturers: Dr. Carla Guillen (LRZ), Dr. Carmen Navarrete (LRZ), Dr. Martin Ohlerich (LRZ) Abstract: This three-day online course gives an introduction to the C programming language. Topics covered include: Basic concepts, datatypes, operators and basic statements, C-functions, code modularity, compilation, debugging, compiler directives, structures, memory model, pointers, good coding practices. Registration: https://app1.edoobox.com/en/LRZ/Online%20Courses/Online%20Course.ed.570570/ Information on further courses: * by LRZ: http://www.lrz.de/services/compute/courses/ * by the Gauss Centre of Supercomputing (GCS): http://www.gauss-centre.eu/training * by German Centres (collected by the Gauß-Allianz): https://hpc-calendar.gauss-allianz.de/ * by the Partnership for Advanced Computing in Europe (PRACE): http://www.training.prace-ri.eu/ We are looking forward to meeting you online! Kind regards, Volker Weinberg -- Dr. Volker Weinberg Education and Training Coordinator Leibniz Supercomputing Centre of the Bavarian Academy of Sciences and Humanities email: weinberg(a)lrz.de<mailto:weinberg@lrz.de> address: Boltzmannstr. 1 - D-85748 Garching bei Muenchen room: E.1.016 phone: +49 (89) 35831-8863

1 0

Handlungshinweise zu den kritischen Sicherheitslücken in Exchange
by Tröbs, Helmut March 19, 2021

March 19, 2021

Sehr geehrte Damen und Herren, diese E-Mail richtet sich primär an Administratoren bzw. Betreiber von Exchange Servern, die bisher ausschließlich die Security Updates installiert und ihre Exchange Server noch nicht hinsichtlich einer möglichen Kompromittierung untersucht haben. Relevanter Sachverhalt zusammengefasst: Auch wenn Sie die Security Updates bereits eingespielt haben und Sie damit - wie Exploit-Tests [1] bestätigen können - aktuell nicht mehr für CVE-2021-26855 [2] anfällig sind, bleiben Systeme, die vor der Installation der Updates erfolgreich kompromittiert wurden durch die Einspielung der Security Updates weiterhin kompromittiert. Von Angreifern installierte Web-Shells können also weiterhin genutzt werden, um beliebigen Programmcode mit hohen Rechten auf dem Exchange-Server auszuführen. Durch die Auswertung großflächiger Scan-Ergebnisse konnte das LRZ Security Operations Center einige Web-Shells im MWN bereits identifizieren und die Betroffenen benachrichtigen. Lokale Überprüfungen sind jedoch weitaus effektiver als externe Scans, da Dateinamen für Web-Shells vom Angreifer beliebig gewählt werden konnten. Bitte überprüfen Sie daher falls noch nicht geschehen Ihre Exchange Server mittels offizieller [3] Skripte zur Identifizierung von Web-Shells [4][5]. Weitere Informationen können Sie der Zusammenfassung der Exchange Schwachstellen des BSI entnehmen [6]. Auf dieser Webseite ist auch ein Link [7] zu der Aufzeichnung des BSI-Livestreams "Informationen und Hilfestellungen" vom 11. März 2021 zu finden. Bitte berücksichtigen Sie auch die Hilfestellung des Bayerischen Landesamt für Datenschutzaufsicht (BayLDA) [8], insbesondere die Abschnitte: - B. Überprüfung auf technische Kompromittierung - C. Maßnahmen bei Kompromittierungsverdacht Sollten Sie Probleme bei der Bearbeitung haben, melden sich Sie gerne bei uns: abuse(a)lrz.de Mit freundlichen Grüßen MWN/LRZ Abuse Response Team [1] https://github.com/microsoft/CSS-Exchange/tree/main/Security#http-vuln-cve20 21-26855nse [2] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855 [3] https://github.com/microsoft und https://github.com/cert-lv (Label:Verified) [4] https://github.com/cert-lv/exchange_webshell_detection [5] https://github.com/microsoft/CSS-Exchange/tree/main/Security [6] https://www.bsi.bund.de/Exchange-Schwachstellen [7] https://youtu.be/QcqRRc-VoB0?t=92 [8] https://lda.bayern.de/media/themen/exchange_security_check_incident_response .pdf ---------------------------------------------------------------------------- --- Dear Sir or Madam, This e-mail is primarily intended for administrators of Exchange servers who have only installed the security updates so far, and have not yet examined their Exchange servers with regards to a potential compromise. Summary of relevant facts: Even if you have already installed the security updates, and are therefore no longer vulnerable to CVE-2021-26855 [2] - as confirmed by exploit tests [1] - systems that were successfully compromised before the updates were installed, remain compromised even after the security updates were installed. Web shells installed by attackers can therefore still be used to execute arbitrary code with high privileges on the Exchange server. By evaluating large-scale scan results, the LRZ Security Operations Center has already been able to identify some web shells in the MWN and notify those affected. However, local scans are far more effective than external scans, as file names for web shells could be chosen arbitrarily by the attacker. Therefore, if you have not already done so, please scan your Exchange servers using official [3] scripts to identify web shells [4][5]. More information can be found in the BSI's summary of Exchange vulnerabilities [6]. This web page also provides a link [7] to the recording of BSI's March 11, 2021 "Information and Assistance" livestream. Please also consider the assistance provided by the Bavarian State Office for Data Protection Supervision (BayLDA) [8], in particular sections: - B. Checking for technical compromise - C. Measures in case of suspected compromise If you have any problems or require assistance, please contact us: abuse(a)lrz.de Yours sincerely MWN/LRZ Abuse Response Team [1] https://github.com/microsoft/CSS-Exchange/tree/main/Security#http-vuln-cve20 21-26855nse [2] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855 [3] https://github.com/microsoft und https://github.com/cert-lv (Label:Verified) [4] https://github.com/cert-lv/exchange_webshell_detection [5] https://github.com/microsoft/CSS-Exchange/tree/main/Security [6] https://www.bsi.bund.de/Exchange-Schwachstellen [7] https://youtu.be/QcqRRc-VoB0?t=92 [8] https://lda.bayern.de/media/themen/exchange_security_check_incident_response .pdf

1 0

ISP Hard- und Softwarewartung vom 23.3. - 25.3.2021
by Hufnagl, Monika March 18, 2021

March 18, 2021

ISP Hard- und Softwarewartung vom 23.3. - 25.3.2021 An folgenden Tagen findet der Umzug der Library-Manager auf neue Hardware statt. In dieser Zeit sind keine Tape-Operationen möglich. Insbesondere ist es nicht möglich Daten Wiederherzustellen (kein Restore und kein Retrieve). The library manager will be moved on new hardware on the following days. During this time are tape operations not possible. In particular, it is not possible to restore or retrieve the data. HPC User are affected too. 23.3.2021 T70I2: Folgende Instanzen sind betroffen: S35 T67I1 T68I1 T68I2 T68I3 T68I4 T69I1 T69I2 T69I3 T69I4 24.3.2021 S55: Folgende Instanzen sind betroffen: S100 S101 S13 S24 S25 S35 S381 S39 S40 S41 S42 S43 S44 S45 S47 S48 S49 S500 S501 S51 S52 S53 S54 S55 S60 S62 S65 S67 S68 T68I1 T68I2 T68I3 T68I4 T69I1 T69I2 T69I3 T69I4 25.3.2021 T58I1: Folgende Instanzen sind betroffen: S12 S13 S14 S15 S16 S17 S18 S19 S20 S21 S22 S23 S24 S25 S27 S28 S29 S30 S381 S382 S393 S403 S501 S68 T58I1 T67I1 Wir bitten um Ihr Verständnis Ihr ISP-Team ________________________________

1 0

ACHTUNG - Kritische Sicherheitslücke in Exchange - sofortiges Update erforderlich
by Bernhard Schmidt March 3, 2021

March 3, 2021

Sehr geehrte Damen und Herren, es gibt eine extrem kritische Sicherheitslücke in Microsoft Exchange (aktiv ausgenutzte Sicherheitslücke mit unauthentifizierter Remote Code Exection). Im Anhang die Information von Microsoft. Die LRZ-Installation wird gerade aktualisiert. Bitte leiten Sie diese Information an alle Betreiber lokaler Exchange-Installationen an Ihren Einrichtungen weiter. --- Today, Microsoft released patches for multiple different on-premises Microsoft Exchange Server zero-day vulnerabilities that are being exploited by a nation-state affiliated group. The vulnerabilities exist in on-premises Exchange Servers 2010, 2013, 2016, and 2019. Your Microsoft Customer Success Account Manager and Technical Support Teams will be engaging with your technical teams to assist in addressing this issue. We wanted to ensure you were aware of the situation and would ask that you help drive immediate remediation steps. For on-premises Exchange Servers, we ask that you direct your teams to /start immediate action/ to assess your Exchange infrastructure and patch vulnerable servers, with the first priority being servers which are accessible from the Internet (/e.g/., servers publishing Outlook on the web/OWA and ECP). To patch these vulnerabilities, you should move to the latest Exchange Cumulative Updates and then install the relevant security updates on each Exchange Server. You can use the Exchange Server Health Checker script, which can be downloaded from GitHub <https://aka.ms/ExchangeHealthChecker> (use the latest release). Running this script will tell you if you are behind on your on-premises Exchange Server updates (note that the script does not support Exchange Server 2010). We also recommend that your security team assess whether or not the vulnerabilities were being exploited by using the Indicators of Compromise we shared here - https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchan… <https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchan…> We are committed to working with you through this issue. Your Microsoft account and support teams have been fully mobilized. Please let me know if you need additional help. *_Information to assist you and your teams: _**__* ** March 2, 2021 Security Update Release - Release Notes - Security Update Guide - Microsoft <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-26412 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-26854 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-26855 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-26857 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-26858 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-27065 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> CVE-2021-27078 <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmsrc.micr…> Exchange Team Blog Post - Article Not Found - Microsoft Tech Community <https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-20…> Microsoft Security Response Center release - Article Not Found - Microsoft Tech Community <https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-20…> CSS Support: https://support.microsoft.com/ <https://support.microsoft.com/> ---

1 0