...

• Cname of grades.chem.cornell.edu from as-chm-vsrv-09.ad.cornell.edu to sf-as-data-001.serverfarm.cornell.edu has been submitted and will take effect at the 11am DNS update.

Projects to spin-off once everything is settled and working:

Enable NetID access to FMPro server

• For all TAs and for all staff.

Review Becky's needs of Grades DB

• Any benefit in changing the current "export" process?

To do's

See the following section for context related to these to-do's.

...

• Ensure that all "single account set up for a whole course for use by many TAs" is cleaned up. (Legacy capability which is no longer needed. And confuses things now.)
  • Dani and PatH
• Ensure works from systems: TA room, DanL, CynthiaK, and Sam's.
  • ChemIT staff:MichaelH.
• Create appropriate "read-only" account for Becky to allow her to continue doing exports herself.
  • Dani and PatH (working with Becky)
  • Outline some options, for later focus. (Unlikely do any other changes right now!)

Decisions, processes, and procedures

...

• FERPA-like data so ChemIT would appreciate understanding the ACL (see for subnet?) and firewall configurations.
  • ChemIT thinks there shouldn't be any off-campus access except via VPN. Thus take off of public net and put into 10-space. But there may be other factors to consider.
• Access to the FMPro DB is controlled by NetID (AD groups). Once in, who else has access to Grades DB FMPro DB itself?
  • Answer: Only accessible to authorized FMPro users or groups.
    • If a user isn't authorized for a DB, they dont' even get to see that the DB is available.
    • If a user enters the fully qualified name to the DB they can't see (because they aren't authorized within the DB), the DB still wont' open.
• Ideal: Make all access via NetID/ NetID p/w, not via FMPro DB's own controls.
  • Control NetID membership via Active Directory groups.
    • Start with Grad TA access, via theTA room kiosks? Also start with faculty access?
    • Once process confirmed, establish procedure for enabling and disabling NetID access to Grades FMPro DB by grads and faculty
      • Can take ChemIT staff less than a minute to do this, and is effective immediately.

• Confirm FMPro server and admin groups support required staff access rights. access is correct: Functional and secure.
  • Confirm that only permited staff can access Grades (and other CCB) DBs
  • Currently it authorized CCB staff to see all PatH sees.
  • Confirm Becky can see what she needs to see.
    • Exports data using PatH's account.
  • Confirm TAs can see/ edit what they need to edit.

...