Minutes from the December 14, 2005 CCD meeting

CCD in Attendance: Rich Jaenson (CCD Co-Chair), Janet Heslop (CCD Co-Chair), Graham Dobson, Kevin Drake, Roger Garnett, Thomas Crook, Ray Helmke, Shari Avery, Rob Parker, James VanEe, Don Sevey, Keith Boncek, Dan Elswit
(and others that did not sign in)

Guests in Attendance:Mark Mara, Diane Kubarek, Camille Gynsun Lee, Helice Cameron-Norfleet, Pat McClary, Tracy Mitrano

Policy on Web Accessibility: Scope and implementation issues
(handout)
Presenters: Diane Kubarek, Camille Gynsun Lee, Helice Cameron-Norfleet, Tracy Mitrano

Presenter - Diane Kubarek

Web accessibility policy is fully outlined
Many challenging questions yet to be answered
This policy is not trying to duplicate ADA; not to be individualized; law already does this
Trying to enhance web experience for those all over the world

• currently conceived as a moving target
• has 3 levels of priority

As for the stringency on the standards:
Most stringent:

W3C priority 1 level
Section 508
W3C priority 2 level

W3C priority 3 level

Challenges

Scope of project
Reasonable impact; yet bring web site into compliance
Phase In
Need to categorize entire web site presence – millions of pages
Section 508 does not categorize
Implication of responsibility (personal pages on department sites)??
- part of policy creation process
Resources available – Expense and lack of staff (therefore admins and grad students end up responsible)
University needs to realize that policy promulgation has an expense to it
- will be presented as part of Impact Statement on policy
Policy has not been presented for the first step yet
- will be a minimum of 18 months to implement policy

Everyone is encouraged to participate on BLOG http://web.cornell.edu/redesign/blog/?p=104

Questions and Comments:

In the end may reduce costs by using templates and staff training

Shall the policy only be implemented on re-design sites? (Favored)

Shall external vendors be restricted if they do not offer compliance?

Volunteers were asked to participate in further policy planning

• with pictures and text
• without pictures

No site will ever be totally compliant for everyone!

Used AccVerify to verify automated checking of accessibility

Question: Will there be “web police” to enforce sites?

Cornell site has not been tested for compliancy. It is unknown at what percentage of sites actually are compliant. Have a feeling that 75% to 90% will need to be brought into compliance.

CIT will advise departments on best tool to test with, possibly getting a site license.

Available resources for site testing: http://www.cynthiasays.com/

There is a need for everyone to understand the philosophy, commit to the standards and know the guidelines.

• clear and shorter
• labeled forms

Mid-January there will be a video conference with experts in the area.
End of January there will be a two-day event.

On the UCPL site there is a 50 minute presentation by Sharon Trerise and Deborah Buck which would be useful to watch. "Solve the Mystery of the Accessible Web" http://www.cit.cornell.edu/oit/UCPL.html

Impact Statement for Proposed Revision of University Policy 5.1
(confidential handout)
Presenters: Tracy Mitrano and Pat McClary

Revision is very early in the process; much time for input
Tracy encouraged participation in IT policy

Each user must manage data on their device

4 categories of users:
Steward
Unit Head
Custodians
General users

More concrete rules over data to be coming

Steve Schuster taking charge on minimum data security standards (which is not part of the written policy)

• CIT is currently testing a university VPN
• Network Quarantine is to be available for all to use by the end of this year

• DELL has offered to do another DELL roadmap meeting for desktops, servers and peripherals
• which would include a signed NDA;
• No changes to speak of going into the quarter for bundles
• Steve Golding to present at the December CCD meeting
• please send questions to Keith prior to meeting

• Todd Olson stated that SMTPAUTH should help with this as a form of authentication
• if computers/servers are sending mail one needs to update email address to include @smtp
• Rick MacDonald will ask Jim Howell to re-send, better document how to do this

• Rick MacDonald said no

• does not change policy
• if not needed within Cornell working on conduit to route equipment

Guest Speakers:

Todd Olson -- Listproc to Lyris Migration

• Cornell E-list Service Upgrade Project (handout)
  • used to be list owner ---> List Administrator
• Types of E-lists
  • One to Many
  • Discussion list
  • Many to One
• Many details to be set up -- closed list, who can post, archive, list administrators
• Multiple List Administrators
• Currently only ONE FTE to run all lists
  • contact center now helping support E-lists
• Primary Administrator has final say as to what happens on list
• List Proc is open source, very complicated, not supported, forwarding mail issues with bad addresses
  • no way to determine which email address is causing the issue
• Lyris can determine with 100% accuracy as to which email has failed, even those that are forwarded
• Lyris takes care of bulk mailing
• All new lists are now built using Lyris
• Commands are sent to Lyris@cornell.edu
• Migration:
  • All documentation for every list has to be changed
  • hoping to have 80% complete by end of December; then work on remaining "problem" lists
  • Lyris has a web interface
    • exposes many options, people will most likely want to do more with more available
    • doesn't feel that support level will decline with new system
    • can download subscribers via .csv file
    • only available to administrators to begin with; not to subscribers
    • SSL access available
  • Will allow test time on new system before full cut over for list
  • List owners are going to have to be prepared to help subscribers with list questions
• Only bought a subset of Lyris product
• One password per address for all lists (old system one password per list)

Question: Will cascade of lists hold through, even if all lists have not been moved to Lyris? YES

Question: Is inheritance available from list? YES

Laurie Collinsworth -- Important Dates dealing with DNSDB

Oct 31 - past
the email list within DNSDB is used to send Audit reports every Monday to the administrator of the subnet
Nov 14 - preparation for NUBB integration
ensuring that the user is the owner; not all netadmin as owner
Nov 27 - Upgrading DHCP server radically
changes in length of lease given out to cover situations if one server were rebooting
Dec 16 - NUBB/DNS integration owner in DNS is the one kept DNS data will then be pushed to NUBB won't be able to update NUBB (read only)
Jan 9 - visitor machine registration available with a few simple questions email; verifiable with link to extend time on net soon after (but not as of Jan 9th) visitor system will be able to be popped into NQ to scan hardware
Feb 13 - Target Network Registry Compliance!! (Pizza from Steve Schuster for those compliant!!!????) ultimately being able to trace MAC address to wall jack!

Minutes from the October 12, 2005 CCD meeting

CCD Members in Attendance:
Rich Jaenson (CCD Co-Chair), Janet Heslop (CCD Co-Chair), Oliver Habicht, Graham Dobson, Keith Boncek, Ray Helmke, Mitch Collingsworth, Dan Dwyer, James VanEe, Roger Garnett, Daniel Elswit, Thomas Grook, Tim Durnford
Guests in Attendance:Sunny Donenfeld (OIT).

Items of Business:    
November and December meetings will be held in MVR location.  Beginning January 2006 we will be meeting in 655 Rhodes Hall. 

Thanks to Oliver Habicht for his accomplishments during his two years as Co-Chair of CCDs.

Topics of Discussion:
Review of last years retreat goals and how far have CCDs come as a group over the past year of IT changes at the University.

1)  There was a lot of concern during last years CCD Retreat re: WFP.  How has WFP
had an affect, positive or negative, on your organization?

Sunny -- Polley McClure has confirmed with Steve Golding that meeting with the Units to discuss the current structures and WFP outcome is a priority.  Sunny and Polley will be proceeding on this in the near future.  These meetings are to be viewed as a two-way communication, with CIT also gathering information to better understand the decentralized areas needs. 

WFP discussion:
         CALS -- created service areas, now have a college wide windows domain, have created service level agreements
         AF&F -- reorganizations have taken place, some due to staff changes
         Library -- created a subset of IT Executive Council to further communications within the library, WFP helped further cover the            decentralized areas
         Sunny Donenfeld -- reported that many units now meet regularly as a reporting structure for ITMC (Research, Engineering, Student Services)
         AAP  -- no changes to date
         Alumni -- everything was already in place, but sees positives of CIT working with units (ie: disk sharing, web hosting, etc)


2+3)  During this past year, do you feel that we were able to further clarify the role of the CCD group within the larger IT structure here at Cornell?   There was also a lot of discussion during last years retreat re: ITMC.  What are yourthoughts on how well the CCD membership has interacted with the goals and leadership provided by the ITMC?

ITMC vs CCD comments:
         CCD not as formal
         ITMC to big of a group to have a interactive discussion
         1/3 of ITMC is CIT, so feel that the discussion is more "closed lipped", afraid to speak out about CIT concerns
         ITMC has positively helped with decentralized communications
         New comers to campus like having CIT at ITMC
         "Techno-geeks" feel more at home with CCD group
         Retreat notes from last year follow VERY closely for ITMC and CCD
         CCD has a comfort level of many years;  ITMC is still new and everyone is still feeling their way
         ITMC representatives have to state what their Unit wants, not necessarily their opinion
         ITMC seems to have more University clout
         CCD more inquisitive; ability to question

TSP discussion:
         Needs some nurturing; needs central support, used to be steering committe for topics
         Currently is a monthly meeting with CCD Co-chairs and Sunny Donenfeld to help form topics
         CIT presentations are good
         IT Forum ideas could be good TSP topics or a mix similar
         Need to be technical; dealing with operations/functions of IT at Cornell
         Not just CIT topics
         Possibly only meet twice per year; with vendors etc.; sessions/tracks seminar style
         Maybe help desk staff should be more responsive/ responsible for TSP (Sunny to talk to Jim Lombardi)
         Identity problem of TSP vs NetAdmin
         Often topics are outdated for some decentralized units
         Decentralized units are more reactive to customers; CIT time frames to deliver to the University level not timely
         Home grown products that have proven to work at the University level -- CALS financials, COLTS
         Need to leverage Decentralized units

4)  How can we encourage greater participation from non-regular CCD members? 
        
         Currently 36 on mail list
         review mail list; call  those not attending
         get ITMC leaders to identify members in their units
         review past sign-in sheets to determine which areas are not being represented

5) Finally, some new goals and ideas we would like to continue to explore through
CCD meetings.

         Possibly revamp CCD meetings to leave time for "talk time" during last 1/2 hour
                  - what is happening in your unit
                  - what innovations have you implemented
                  - what areas may you be considering and like feedback on
                  - what areas are you having difficulties in

We would like to see this list grow very large so we can bring in guests
to further explore some of these ideas.
        
         DELL Road Map - at least once per year
        

• Dave Vernon - VOIP
  • The PBX is fully capitalized and is about 5 years old.
  • VOIP is an additional voice delivery mechanism.
  • Cell phones are having an affect and there is a loss of income in the Res. Halls.
  • Vonage is a basic VOIP service.
  • Cornell's current Avaya switches can already do VOIP
  • IP Phones are more expensive and more proprietary.
  • There is no cost savings at this point to switch over to VOIP.
  • PBX maintenance contract is scheduled to go up in cost in 2007 plus the loss of revenue from the Res. Halls means CIT will target 2007 for more analysis.
  • Signal propagation within buildings are also problems.
  • 911 can be a problem on VOIP phones.
  • No other major Universities have made the switch to VOIP.
  • Bottom line is watch and wait.
• Dave Vernon - IPTV
  • Campus Life and CIT have been working on a IPTV project to bring 50 Time Warner channels to the Campus.
  • The service will be provided for Windows boxes only (no Mac & Unix at this time).
  • IPTV is really being driven by Campus Life.
  • The service is $30.00/month and anyone can sign up.
  • The IPTV service will also run on a set top TV Box.
  • It is encrypted and multicast.
  • CUTV is multicast campus content, not encrypted and it will be free.
  • IPTV is very encrypted VS. CUTV, so finding a common focus would be beneficial, but a solution is quite a way off.  Therefore, CUTV is temporarily on hold.
  • Cornell is the first major University to offer IPTV.

• Sunny Donenfeld- ITMC updates and other CIT news.
  • Sunny gave an update on syncing between NUBB and DNSDB.
  • He also mentioned that Steve Schuster's office will be doing network scanning on new and returning students.
  • Sunny also noted the work that Jim Avery has been doing on the Audio/Visual DB (AVDB).
    • Some questions were raised about who has access to the DB and how it was initially populated and now currently maintained.
  • Steve Schuster will be creating a IT Security Council.  ITMC Reps. will be responsible for chosing the ITSC liaison for their represented unit.
  • Anne Snell presented on FLSA (Federal Labor Standards Act) at the last ITMC meeting.
    • A general FLSA discussion commenced in the CCD meeting.
• Paul Davis - CommonSpot SIG update
  • Paul commented that the focus of the SIG is:
    • Content Support training
    • Best practices
    • Governance
• Keith Boncek - Dell Configuration committee.
  • Over 50 people attended the Dell Service Meeting
  • New Bundles are being worked on.
  • There is a new Dell/CU list:  cu-dell-info-L
• Chuck Jessop (CIT)  Software Acquisition:
  • Adobe Products.
    • TechDepot won the bid for providing all Adobe products to Cornell.
    • Users should no longer use Software Spectrum for Adobe products.
    • The online web order form is not quite ready.
    • There is a dedicated Cornell Representative.
    • www.cit.cornell.edu/software/licenses/adobe.html (for ordering information)
  • Microsoft - MS Campus Agreement (CA)
    • Currently we use MS Select, which is transactional
    • Campus Agreement is based on the total number of FTE's per unit
    • Computer labs are not part of the FTE count. (and are licensed at no additional cost)
    • There will be an annual agreement with a 3 year umbrella.
    • The FTE count can be modified to not include non-computer users.
    • Chuck will be looking for Unit people to work with to discuss the change/switch to CA.
    • CA should provide approximately a 30% savings across units.
    • Units should aggregate Departmental purchases.
    • Chuck also gave a brief BRIO update.

Minutes from the June 8, 2005 CCD meeting

CCD Members in Attendance: Rich Jaenson, Thomas Crook, Sunny Donenfeld, Tim Durnford, Keith Boncek, Janet Heslop, James VanEe, Mary Stauble, Kevin Baradet, Marcy Rosenkrantz, Jeff Bishop, Mark Sanford, Craig Trowbridge, Graham Dobson, Ray Helmke, Hurf Sheldon, Roger Garnett.


Note:  This was a shortened CCD meeting that ran from 12:00-12:45, so that those
CCD members who wished to attend CIT's Career Information session would be able
to do so.

After brief around the table introductions, a general discussion developed around future
CCD meeting topics, and especially the use and support of Blackberry PDA's on campus.
More and more support personnel are starting to see a fair number of these devices.
A suggestion was made to maybe invite Gail Shaff to a future CCD meeting to see
what kind of support could be provided for Oracle Calendaring.  Someone mentioned that
there was a lot of activity surrounding Blackberry's over in Tommy Bruces office in Day Hall.
It turned out that when I  (Rich) went to the CIT forum after the CCD meeting, I ran into
Gail and asked her about calendar support.  She informed me that she has a Blackberry
and that she is not only able to receive Cornell mail, but also Oracle data.  She has been
running a pilot project along with Jim Lombardi, providing Blackberry Enterprise Server
support.  The Enterprise Server provides the gateway between Cornell's environment and
RIM's Blackberry accounts.  Gail said that the pilot project will run for a couple more
months, and then decisions will be made wether or not to go production with this.  Gail
also said that the project is really Jim's, so Oliver and I will be talking to him to see if we can
get either himself or Gail to talk at a future CCD meeting.
Another CCD member (Marcy I believe) also asked if we could get Andrea Beesing to briefly
talk about Shiboleth (spelling??) at a future meeting

Kevin Baradet  gave a update on the Guest ID initiative at Cornell.  This subject raised
quite a bit of discussion also, mainly concerning authorization vs. authentication  and Guest
Red Rover, which is not part of Guest ID.  Guest ID is Self Registering and was really driven
by Blackboard, which will be using kerberos for authentication.  Actually this has already
happened I believe. Guest ID's may or may not have differing expiration and deletion times,
possibly based on who sponsors the guest.  The question was also brought up as to how
to use guest ID and CuWebAuth  to guarantee that the Guest was a member of the
Cornell community and authorized to access the service they requested.

Roger Garnett gave a brief update on the Security SIG.  Helix training has already started
and at the time of the meeting, not much was happening with Remote access and VPN's.
During Alumni weekend, Steve Schuster's group was going to start doing system scans
on alumni systems in the resident halls.  We will need to get a status update from Steve
as to how this worked out.

Kevin Baradet noted that the Johnson Business School is looking at using RSA for secure
authentication for accessing secure servers and accounts.  He is coordinating this
effort with Steve Schuster and Mark Mara.

Keith Boncek gave an update on the Dell Bundles.  The Optiplex 620 is the new system
in this go around.  In an upcoming CCD meeting Keith will be bringing the subject
of Dell repair certification and repair training and related options to the table.

Thanks,

Rich and Oliver, CCD co-chairs.

Minutes from the May 11, 2005 CCD meeting

CCD Members Attendance: Oliver Habicht (CCD Co-Chair), Rich Jaenson (CCD Co-Chair), Wendy Busch, Graham Dobson, Frank Strickland, David DeHaan, James VanEe, Shari Avery, Roger Garnett, Jeff Morse (for Keith Boncek), Craig Adams, Geoffrey Yearwood (Craig's guest), Janet Heslop, Marcy Rosenkrantz, Thomas Crook, Mitch Collinsworth.


Other Guests in Attendance:Steve Schuster (CIT), Rick MacDonald (CIT), Tony Damiani (CIT) Sunny Donenfeld (OIT).

Introductions and Oliver presented ideas for the June meeting.

Briefings:

• Sunny - ITMC  The ITMC website is now live.  Sunny continues to look for suggestions.
  • Sunny also gave a brief update on Kuali with general table discussion.
• Steve Schuster - Security SIG.  Helix training is being worked out and more sessions will be added as demand grows. Training will be in the June time frame.
• Frank Strickland - IT training.  CIT is ramping up training offerings through Sebastian Carello's efforts and there will be a fair number of new courses offered starting late June.
• Thomas Crook - Thomas has been working with Sebastian also, setting up a  training curriculum for IT support in Human Ecology, based on helpdesk responses for end user training.
• Oliver - Dell Bundles.  There will be only minor changes from Q1 to Q2.
  • There was some discussion regarding the actual price savings of the Dell Bundles.
  • Dell expects to roll out new Optiplex models starting in June.  New CU bundles will be created as the models become available.  In the past, we've been able to retain the listing of the bundles for the older models for a period of time, and we expect to do the same again.
• Oliver - Netprint.  CIT is considering reducing their Net-Print charges (per page and/or charges to Partner Labs) and a meeting is scheduled for May 13 to discuss the impact.
• Sunny - CIT is considering moving off campus.  They are looking at all of their options as well as looking at customer relations, etc.   There has been no time frame set.
• Oliver - Oliver noted to the group that there are pending upgrades to the e-mail lists.
• Steve Schuster - A question was asked as to how broad CIT's general e-mailings go:
  • IT-Security-L is subscription based
  • CIT-Alert-L is subscription based
  • Bulkmail goes to everyone.

• Please see Tony's Word document located on the CCD website: http://www.ccd.cornell.edu/docs/index.htm
• A question was asked as to how much a similar Oracle setup would cost.  Wendy Busch from Gannett Health noted that they currently out source their Oracle support on a monthly fee basis.  A Oracle license is approximately $3000.00/cpu so the combination of vendor fees and license fees seems to make CIT's fee of $3800.00/year quite inexpensive.

Steve Schuster - CIT - Steve gave a overview of his Program Plan Review for IT Security.  The major program plans he listed are:

• Identity Management
• Operations and Incident Response
• Security Infrastructure and Monitoring
• Dept. Consulting and Assessments
• Data Centric Security
• Governance, Partnerships and Outreach

Meeting adjourned.

Thanks,
Oliver and Rich - CCD Co-Chairs

Minutes from the April 13, 2005 CCD meeting

CCD in Attendance: Oliver Habicht, Rich  Jaenson, Ray Helmke, Keith Boncek,
Graham Dobson, Thomas Crook, Shari Avery, James VanEe, Mitch Collinsworth,
Roger Garnett, Jeff Bishop, Mike Currie, Mark Sanford, Hurf Sheldon,
Jennifer Holleran, and Craig Trowbridge.

Other Guests in Attendance:Steve Schuster (OIT)

Introductions.

Briefings/Updates:

• Steve Schuster - Identity Management
  • Password complexity is turned on in Kerberos
  • 8 characters using 3 character sets
  • Crack has been run against KDC - 6% within CIT was successfully cracked.
  • Rainbow Crack
  • Identity Management website has a password strength checker.
• Steve Schuster - Security SIG
  • There is a subgroup looking at remote users.
    • There are many restrictions at Hotels
    • Need to define what users need.
    • Who needs them?
    • What solutions are available?
  • Steve has SIG minutes he can share with the CCD list and Oliver will put them
  • on the CCD website.
• Dell Bundles - Keith Boncek
  • New road maps every 6-12 months.
  • Need to review past purchases.
  • Comments on bundles will be solicited.
  • Keith has a 12 month schedule in place.
  • Dell Service is putting on a High Ed. Service summit.
  • There will be one central service number for Cornell issues.
  • There are 10 self-certification spots still available.
  • Service Options:
    • Call Dell
    • Call a service provider like The Computing Center or DLI.
    • Self Service - Certified - Dell pays $50.00 per call.
• Steve Schuster - There is a master document that discusses Authentication and Authorization extensively.
• Oliver - Idea proposed - CCD picnic.
• Steve Schuster - Verifying PPG Emails - Encryption
  • Steve has a powerpoint handout dated April 13, 05 entitled 'Encryption Discussion'
  • Geotrust - Being run out of Student Services.
    • Possibly used to sign transcripts.
  • There are commercial and free versions of PGP.
  • Implementing PKI can be a big undertaking.
  • Should there be a Univ. wide initiative to sign 'important' messages like closings and messages from the President?
  • It will take a  huge effort to implement a campus wide solution.
  • Nicknames have been disabled in WhoIam.
• Oliver - WIKI
  • They can be changed easily.
  • WIKI seems more effective for general topic storage and discussions
  • WIKI is a good collaborative tool for sub-group discussions
  • Some WIKI's are completely open and others are password protected.
  • Is there a need for a central effort?
    • Software is free
    • Maybe there isn't a need!
  • Possibly a tab on Uportal?
• Brief NUBB discussion:
  • Most CCD'ers are only monitoring NUBB, and no one at this point is billing.

• Keith Boncek - Dell Bundles - Dell Warranty
  • Enroll your own technician
  • Tier1 and Tier2 support
  • Online testing to certify a technician
  • Contact the Dell Bundle group at cu-dell-configs@cornell.edu for more info.
• Sunny - ITMC update:
  • ITMC has met 4 times as of March 2005
  • There are 5 subcommittees:
    • Software Acquisition
    • Best Practices
    • IT Professional Training
    • Operational Procedures i.e., how the ITMC works.
    • Standards (new)
• Steve Schuster - Security, DNSDB, NUBB
  • Multiple ways to get info into the registration DB
  • Nubb & Network registry collapsing together
    • Development is complete but some inconsistencies and are still being analyzed
    • There will be a common interface for the 2 DB's.
  • Mac -> IP DB is in the works
• Software Licensing at Cornell - Dean Krafft
  • Software Acquisition Sub-Committee - ITMC update.
    • How are we doing on campus wide SW acquisition?
    • What are the criteria for SW selection and Lic. centrally?
    • Subcommittee first met with Chuck, Wes & Purchasing.
    • Long term goals:
      • Improve SW acquisition website
      • Integrate with a new e-procurement process
    • CIT's Software acquisition team is running on a very tight budget.
    • Dean hopes to work with ITMC to ID ways to help.
• Software Acquisition - Chuck Jessop - CIT
  • Chuck provided copies of two PowerPoint Presentations titled:
    • Software Acquisition Services - As-Is Processes (25 May 04)
    • Software Acquisition Services (21 Feb 05)
  • Goal is to achieve cost benefits by leveraging economies of scale.
  • Since 2000 Chuck has been by himself.  He now has a tech. support person
  • Funding - Appropriation dollars for overhead and major licenses.
  • Software Acquisition is really set up as a pass through/cost recovery service.
  • Microsoft Select - Chuck update
    • Buy as you go and track your own licenses
    • New - Campus Agreement (CA) is FTE driven.
    • Should each unit participate?
    • Should Microsoft Select stay?
    • These questions will need to be discussed in the next couple months.

• Send Best Practices tools and procedures to Anita (ash2)
• Examples such as IT Policies (usage and support) in units.
• IT Position Descriptions
• Information should be sent to Anita (through the units ITMC rep, by 2/22/05

• Gartner Group
  • The Gartner Group has a new Cornell  Representative.  She would like to present
    • to the CCD's or as an out-of-band meeting
  • Cornell has its own Gartner mirror site.
• Web Services Guidelines
  • How does a web site get requested?
  • What are the types of data that can be put up?
  • A suggestion was made for the ATA group to put on periodic information meetings.
• Financial Systems Development - Work flow - (Handout by Mark)
  • They are doing analysis of how work flow organizes at Cornell.

• The University  Auditor has recommended some type of netid complexity enforcement.
• Tom's group is doing CRACK analysis on KDC passwords in order to better understand
  • the depth of the problem

• The Burton Group will be presenting a two day workshop for Identity Management
  • Architecture and best practices for IDM
  • Provisioning issues (issuing netids and getting ID's into the system) etc.
  • Understanding Cornell's specific needs.
• Andrea would like CCD participation.  The workshop agenda will be posted on
  • CCD Web Site.
  • Early April is the workshop scheduled date.

• Dell Bundles.
  • Bundles can be added to but not easily downgraded.
  • The selection of future new bundles will come from the ITMC bundles group.
  • Sunny will be going over more details of bundle selection in the future.

• Diane noted that Web Communication services are available to everyone on campus.
• Their office did the new www.cornell.edu site.
• The Web Programming Group (WPG) is the primary Web Service Provider
• The site is still growing.
• Major improvements:
  • Searches
  • Event Calendar
  • Internal Communication - Best Practices
  • Re-design of Undergraduate Admissions web site to be up by May of this year.
• The new logo is not being policed, but developers should be incorporating as soon as they can.
• The Office of Web Communications supports web developers across campus
• The Office  started and participates in the CuWeb Forum SIG.

• They gave an overview and history of how CommonSpot was selected.
  • There were 6 units interested in a common Content Management System
  • Initially there were 3 major vendors.
  • Each vendor had plusses and minuses, but CommonSpot seemed to satisfy all requirements.
• The group talked about how CommonSpot is being used.
• The role of the CommonSpot SIG:
  • The SIG will have a governance role in managing CS use and deployment.
  • The SIG will also work on training modules.
• There are 3 methods of delivery:
  • Units can go it alone, i.e., they can run their own CS server
  • Middle Model - CS is hosted at CIT but users still control templates.
  • Full Service - sites are hosted and maintained by WPG.
• More information from the CommonSpot SIG kickoff meeting can be found at:
  • http://intranet.engr.cornell.edu/intranet/it/collegeIntranet/documents/SIG1_14.ppt

• Al gave an overview of WPG Growth and Services, both current and future.