Februar 2015 - feide-updates

[Feide Updates] Feide load balancer change Tuesday 24 February at 14:00
by Olav Morken 09 Mar '15

09 Mar '15

Hi, as part of the process of replacing our current load balancer hardware, we will move our test system to new load balancers Tuesday 24 February at 14:00. Moving the test system to the new load balancers requires a configuration change on our existing load balancers, which is also hosting our production system. However, we do not expect the removal of the test system from the load balancers to have any effect on the production system. Once we have run our test system on the new load balancers for a while, we will transition the production system to the new load balancers as well. We will send a separate notification about that change when we decide on a time for moving the production system. Best regards, Olav Morken UNINETT / Feide

1 3

[Feide Updates] Feide IdP certificate change Thursday 22 January at 14:00
by Olav Morken 18 Feb '15

18 Feb '15

Hi, the Feide IdP certificate expire Friday 20 February, so we have ordered and received new certificates. The new certificates will be installed Thursdag 22 January at 14:00. The largest change with the new certificates is that they are signed using SHA-2 signatures. This should be supported by all major browsers, so we do not expect any problems with that change. Best regards, Olav Morken UNINETT / Feide

1 5

[Feide Updates] Feide IdP reboot between 10:00 and 12:00 today
by Olav Morken 12 Feb '15

12 Feb '15

Hi, due to a recently disclosed vulnerability in glibc, we will be rebooting the Feide production servers between 10:00 and 12:00 today. We are not aware of any applications on the login servers that are vulnerable to the issue, but to be certain the servers will be rebooted. Since the servers will be rebooted one-by-one, the reboots will not directly affect user logins. However, because all Feide session data is stored in-memory, user who have logged in before we the reboot will lose their single-signon session and must enter their username and password the next time they access the Feide login page. For more information about the vulnerability, see the following article at Ars Technica: http://arstechnica.com/security/2015/01/highly-critical-ghost-allowing-code… Best regards, Olav Morken UNINETT / Feide

1 3