---------------------------------------------------
IMPORTANT INFORMATION ABOUT CHANGES TO CPSNET
---------------------------------------------------

Posted: May 27, 1999 after ARGENTO upgrade.

As you can probably tell, everything is back to normal.  Argento has an
upgraded operating system (IRIX 6.5.3).   Our system is more secure than
before.  But, as you know, any security is only as good as the passwords
of its users.


Here is a list of changes which you should be aware of:



	1. COMMAND TO CHANGE PASSWORDS.
	   The command to change passwords is yppasswd.
	   YOU can now run the yppasswd command ONLY
	   on the newly upgraded SGI machines.  The
	   program on these machines check to see that
	   your password conforms to certain requirements
	   (i.e., it cannot be a word, must contain 2
	   uppercase letters, 2 lowercase letters, and a
	   punctuation character).

	   To change your password follow these instructions:

		a. log into argento, daneel, bailey, trantor
		   macduff, arkady, or seldon

		b. type the command

				yppasswd

		c. though it DOES NOT CHECK, PLEASE DO
		   NOT MAKE YOUR PASSWORD THE SAME AS
		   THAT ON ANY OTHER ACCOUNTS YOU MAY
		   HAVE WITHIN BU OR OUTSIDE!!!! 

	2.  If you have a .rhosts file, machines outside of
	    the CPSNET will be commented out, in order
	    to improve security.

	3.  YOU MUST COMPLETELY LOG OUT OF ARGENTO EVERY NIGHT
	    BEFORE YOU GO HOME!  This will help us track
	    unauthorized and suspicious users.  When there
	    are 20 people logged in idle, it makes it harder
	    to examine the system for hackers.  

	4.  Files on /scratch/argento were moved to /scratch/arkady.
	    Argento is no longer being used for any scratch or
	    tmp space.  UNFORTUNATELY, some data was lost in
	    the transfer.  PLEASE see guide on backing up your data.

	5.  Argento's mail partition was increased to 512MB.
	    Therefore we are removing restrictions on filesize's
	    allowed through sendmail.  BUT PLEASE do not abuse
	    this!  And please continue to save your mailbox to your 
	    own account.

	6.  Argento is running TCP Wrappers and does NOT allow
	    access from sites OUTSIDE of BU.  Access on an 
	    individual basis will be granted if messages are
	    sent to help@polymer.

	7.  Anonymous FTP server is currently DOWN.  I am figuring
	    out a way to have such a server that will work in
	    consort with TCP-Wrappers.

	8.  RLOGIN's to ARGENTO are disabled.  To access argento, 
	    one must telnet to it.

Please send mail to help@polymer  if you have any questions or comments.