- ncc-services-wg - mailman.ripe.net

LIR Portal Security Advisory
by Alex Band 08 Dec '11

08 Dec '11

Dear colleagues, There is currently a security issue with the RIPE NCC Access sign-on system when used in combination with the LIR Portal. The issue relates to previous login credentials being applied to current users. There is therefore a small chance that a user will arrive at a previous user's login session. The issue only occurs when the same machine and the same browser session is used to log in to the LIR Portal. In the meantime, to ensure this issue does not occur, please quit your browser after logging out of the LIR Portal. We will notify you as soon as the issue is resolved. Kind regards, Alex Band Product Manager RIPE NCC

1 1

Planned Maintenance 3 December, 2011
by Brian Riddle 01 Dec '11

01 Dec '11

[Apologies for duplicate emails] Dear Colleagues, On Saturday, 3 December, from 09:00 - 18:00, the RIPE NCC will carry out scheduled maintenance on its core storage infrastructure. During this period the following may experience reduced functionality: - www.ripe.net - labs.ripe.net - aso.icann.org - www.nro.net - ftp.ripe.net Delivery of messages sent to NRO and ASO mailing lists may also be delayed during this period. We apologise for any inconvenience that this may cause. If you have any questions about this, please email ops(a)ripe.net Kind regards, Brian Riddle IT Manager RIPE NCC

1 0

Policy Proposal 2010-01 "Temporary Internet Number Assignment Policies" implemented
by Radha Ramphul 30 Nov '11

30 Nov '11

[Apologies for duplicate emails] Dear Colleagues, We are pleased to announce that RIPE Policy Proposal 2010-01,"Temporary Internet Number Assignment Policies", has been implemented. The RIPE NCC is now ready to accept requests for Temporary Internet Number Assignments under this policy. The full proposal can be found at: http://www.ripe.net/ripe/policies/proposals/2010-01 The new policy "Temporary Internet Number Assignment Policies" is available at: https://www.ripe.net/ripe/docs/ripe-526 The following documents now appear online as part of this policy implementation. 1. A new contract template has been formulated which can be used as the agreement between LIRs and End-users. It can be downloaded at: http://ripe.net/lir-services/resource-management/temp-assign-agreement 2. A new request template (currently in text format only) is now available. The LIR portal version will be coming soon. http://www.ripe.net/ripe/docs/ripe-536 3. Supporting notes explaining the various sections of the form and how to complete them have been added as well. http://www.ripe.net/ripe/docs/ripe-535 4. A new FAQ page can be accessed at: https://www.ripe.net/lir-services/resource-management/number-resources/temp… The following resources have been reserved for this purpose: IPv4: 151.216.0.0/13 16-bit ASN: AS58352-AS58367 No reservations have been made for IPv6 and 32-bit ASN. Regards Radha Ramphul RIPE NCC Registration Services

1 0

LIR Portal migration to RIPE NCC Access on 29 November 2011
by Alex Band 23 Nov '11

23 Nov '11

Dear colleagues, We are in the process of rolling out RIPE NCC Access. This will enable you to access various RIPE NCC services using just one password instead of having to sign in to each tool or service separately. RIPE NCC Access is already enabled for IS Alarms and RIPE Labs, and the next service scheduled for migration is the LIR Portal. The migration will be performed on Tuesday, 29 November 2011 starting at 16:00 UTC when the maintenance window opens. Before the migration takes place, we need to temporarily disable the option for LIR Portal administrators to create new users starting on Monday, 28 November 2011 at 16:00 UTC. During this period, you will still be able to access and use the LIR Portal using your current credentials. After the migration is complete, you will no longer be able to log in to the LIR Portal using your old credentials. All LIRs will receive an email on 29 November with further instructions. If you have any questions or comments about this, please contact <ncc(a)ripe.net>. Kind regards, Alex Band Product Manager RIPE NCC

1 0

Announcement: RIPE NCC Training Courses
by Training Mailbox 21 Nov '11

21 Nov '11

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC invites you to register for one of our upcoming training courses: - The LIR Training Course This course teaches LIRs how to request Internet number resources and interact with the RIPE NCC. A course outline is available at: http://www.ripe.net/lir-services/training/courses/lir/outline/ - The Routing Registry Training Course This course teaches LIRs how to use the RIPE Database for routing. A course outline is available at: http://www.ripe.net/lir-services/training/courses/rr/ - The IPv6 Training Course This course teaches LIRs about the need for IPv6 and includes basic information on how to plan your deployment. A course outline is available at: http://www.ripe.net/training/ipv6/outline.html To see the location of upcoming courses and to register, please use the LIR Portal or complete the registration form on our website at: RIPE NCC Upcoming Courses List& Registration https://lirportal.ripe.net/training/courses If you have any questions, please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Spratley-Kanis Training Services Manager RIPE NCC

1 0

Securing MD5 Hashes in the RIPE Database
by Denis Walker 15 Nov '11

15 Nov '11

[Apologies for duplicate emails] Dear colleagues, The RIPE NCC has formed a technical solution for the issue of publicly displaying MD5 password hashes in the RIPE Database. The solution includes: * Filtering out of all "auth:" attributes from all query results of MNTNER objects * Displaying MNTNER objects with "auth:" attributes only in Webupdates after password authentication We published an article on RIPE Labs describing the details, including a mockup of the password authentication required by Webupdates: https://labs.ripe.net/Members/denis/securing-md5-hashes-in-the-ripe-database Additionally, we added a basic strength indicator to the password generator: https://apps.db.ripe.net/crypt/crypt.html We look forward to your comments and feedback, either on the Database Working Group mailing list or below the article itself. Kind regards, Denis Walker Business Analyst RIPE NCC Database Group

3 2

New article on RIPE Labs: Password Management in RIPE Database
by Mirjam Kuehne 09 Nov '11

09 Nov '11

[Apologies for duplicate emails] Dear colleagues, Please see a new article on RIPE Labs describing some issues with the use of password hashes and what you can do to secure your objects until this has been addressed: https://labs.ripe.net/Members/kranjbar/password-management-in-ripe-database Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: A RIPE Atlas Probe for every RIPE NCC Member
by Mirjam Kuehne 08 Nov '11

08 Nov '11

[Apologies for duplicate mails] Dear colleagues, RIPE Atlas has made steady progress in its first year. But we have more ambitious plans. Read in this new article on RIPE Labs how we want to achieve these plans and why we need your support: http://labs.ripe.net/Members/dfk/a-ripe-atlas-probe-for-each-ripe-ncc-member Kind Regards, Mirjam Kuehne RIPE NCC

6 9

Re: [ncc-services-wg] Fwd: Fwd: Re: New mailing list hardware and software at the RIPE NCC
by Mihnea-Costin Grigore 01 Nov '11

01 Nov '11

>> Could this be done on the server level, using HTTP redirection? > Judging from the lack of response and the present brokenness of a myriad of > links, apparently not. :( > Please try to avoid similar flaws when carrying out future changes. Hello, Thank you for your feedback, and sorry for the delay in replying. The old archiving system that was in use until recently was no longer maintained and had several issues that resulted in problems with the generated archives. In cooperation with our IT department, we chose a newer, more resilient system and completed the implementation a couple of weeks ago. Unfortunately, the message indexes follow a completely different pattern in the new system, so it is not a simple matter of redirecting through HTTP. After the feedback received regarding this move, we are looking into ways of implementing a programmatic solution that would allow old links to function with the new system. However, that will not be available straight away and will require development and testing. We apologise for the inconvenience caused in the meantime. Regards, -- Mihnea-Costin Grigore RIPE NCC Web Services Team Leader -- http://www.ripe.net

1 0

New mailing list hardware and software at the RIPE NCC
by Mihnea-Costin Grigore 01 Nov '11

01 Nov '11

[Apologies for duplicates] Dear colleagues, The RIPE NCC is in the process of updating its mailing list hardware and software. This will allow us to implement new features on the mailing lists, such as a complex search functionality throughout the archives. The new servers are currently undergoing testing and will be put into production today -- 13 October, 2011. You do not need to take any action and all subscriptions and settings will be copied over to the new system. However, we would like to inform you that, after implementation, the mailing list archives will have a slightly different look and you will need to update any direct links to messages in the archives. A description of all RIPE and RIPE NCC mailing lists can be found here: http://www.ripe.net/ripe/mail We apologise in advance for any inconvenience this may cause. Please contact us at webmaster(a)ripe.net if you encounter any issues following the implementation. Regards, -- Mihnea-Costin Grigore RIPE NCC Web Services Team Leader - http://www.ripe.net/

2 2