Computing Service – Registration and authentication

advertisement
INFORMATION SYSTEMS SERVICES
SERVICE COMMITMENT
COMPUTING SERVICE – REGISTRATION AND AUTHENTICATION
13.07.04
DESCRIPTION
The Computing Service allocates a computing account to each registered user and maintains a user database.
Each computing account consists primarily of a login name and a password. In addition, the user database
contains other information, including full name, department, course, and housekeeping information. All
registered students and staff are eligible to hold computing accounts, and there are certain additional categories
of eligibility. The criteria are published on the web.
All accounts for students are created automatically from information provided nightly from MIS student
databases.
Accounts for staff are created on request to the Computing Service.
Passwords are assigned to all computing accounts when they are created, which must be changed within four
weeks of issue. Subsequent passwords must be changed every four months.
When an account-holder leaves the University, the computing account is automatically deactivated, normally
two weeks after ceasing to be registered with the University for a student and on dropping off the payroll for a
member of staff. Resources associated with the account are kept for a longer period.
Each registered user is granted access to:
 open access machines within the University (Computing Service open access laboratories and Library open
access PCs). Other computers within the University may also be accessible depending on the department
that the owner belongs to;
 a central file store allocation;
 an email account and access to any relevant internal mailing lists. The mailbox address is the assigned login
name with ‘@essex.ac.uk’ appended;
 resources on the campus network and the Internet;
 centrally provided network printers;
 the University dial-up service.
The Computing Service maintains a number of authentication domains based on the computer accounts it
provides, used by the Computing Service and other departments to control access to computer resources. These
are currently based on Microsoft Active Directory for authentication on Windows systems and an in-house
system for authentication on Unix.
AVAILABILITY
Authentication services are available 24 hours a day 365 days a year, subject to scheduled maintenance and
interruptions due to emergencies.
Technical support is provided from 0900 to 1700 on working days. In addition, a call-out service is provided for
senior University staff (on a list approved by the Vice-Chancellor) from 0900 to 1700 at weekends and on bank
holidays.
The Computing Service provides support for registered users with problems access their computing account
from 0900 – 1700 on normal working days and by special arrangement at other times.
1
TARGETS
The Computing Service aims to provide a reliable service, and to correct problems and failures promptly. It
undertakes to act promptly in the case of virus infection or other abuse, and monitors national security warnings
issued by the UKERNA CERT team. Maintenance which involves withdrawal of part of the service will
whenever possible be scheduled outside the period 0900 to 1800 on working days, and at least three working
days notice will be given except in emergencies. Scheduled maintenance is announced on the Computing Service
Announcements web page. Return of service after scheduled maintenance, unscheduled emergency maintenance
and problems affecting the service are announced on the Status web page and subscription email list.
Outside scheduled hours support is on a best-efforts basis.
MONITORING
Maintenance, and faults and the subsequent recovery action, are recorded in the Computing Service Systems
Group systems log. Serious problems are monitored closely by the Systems Manager and the Director of
Information Systems.
CHARGES
There are no charges for central registration and authentication services.
2
Download