IEM Network Operation Center on IEM Network Operation Center

Introduction

Mon, 01 Jan 0001 00:00:00 +0000

Account Management

Mon, 01 Jan 0001 00:00:00 +0000

Passwords

For security reasons, it is recommended to use as long a password as possible.

A good password does not have to be complicated . For example, four simple unrelated words are quite good: correct4horse=battery&staple.

It is also recommended to use the same password for the IEM account and the KUG account (and therefore to change both at the same time).

The password (and some other settings of your own account) can be changed at https://users.iem.at/login/ .

Mail

Mon, 01 Jan 0001 00:00:00 +0000

Sending Emails (outgoing)

Configuration
Server	`mail.iem.at`
Encryption	`STARTTLS`
Port	`587`

alternative configuration	(does not always work)
Server	`mail.iem.at`
Encryption	`STARTTLS`
Port	`25`

Receiving Emails (incoming)

configuration
Protocol	`IMAPS`, `IMAP`
Server	`imap.iem.at`
Encryption	`STARTTLS`+ Port `143`
Port	`143`

alternative configuration
Protocol	`IMAPS`, `IMAP`
Server	`imap.iem.at`
Encryption	`SSL`
Port	`993`

Webmail (send/receive)

https://webmail.iem.at

Mail Filter

You can create filters via the webmail interface to sort emails into directories based on rules, forward them, delete them, etc. (e.g., automatically forward all emails from noc@iem.at to an external email address).

SPAM

Mon, 01 Jan 0001 00:00:00 +0000

To manage the SPAM problem, the IEM employs a multi-stage strategy .

This strategy consists of three main stages:

Do not engage with SPAM senders.
Reject/block SPAM emails.
Evaluate the remaining emails for “SPAM likelihood” and allow users to decide what to do with them.

The first stages are automated, with no option for individual customization.

In the automated stages, emails are never simply deleted but are always rejected (i.e., returned to the sender).

Mailing lists

Mon, 01 Jan 0001 00:00:00 +0000

Internal Communication

The following mailing list is used for internal communication; all users should be subscribed to it.

staff

Project Mailing Lists

If communication with a larger group of people is required over an extended period, it is advisable to set up one (or more) project mailing list(s).

If needed, please send an email to noc@iem.at .

Chat

Mon, 01 Jan 0001 00:00:00 +0000

There’s a chat-server available under https://chat.iem.at .

Authentication is done via our development server git.iem.at . That is, you need an account there (either a KUG-account, or your own).

IEM Calendar

Mon, 01 Jan 0001 00:00:00 +0000

Cloud Calendar

https://cloud.iem.at offers, among other features like file sharing , the ability to manage one or more online calendars. These calendars can be accessed not only via the web interface but also from other clients, such as:

Thunderbird
The Calendar app on Android
The Calendar app on iOS
…

The official documentation for the Nextcloud calendar is available here .

`IEM Events` - Institute Schedule

To keep everyone informed about what’s happening at the IEM, a shared calendar named IEM Events has been set up for IEM staff.

Fileserver

Mon, 01 Jan 0001 00:00:00 +0000

We operate a central file server named iemusers, where all users can store their data.

Central HOME Directory

This service is accessible on Windows via \\iemusers.iemnet. On Un*x systems, it can be accessed via smb://iemusers.iemnet/ (or smb://<username>@iemusers.iemnet/).

When logging in remotely (via ssh) to the Institute , you automatically land in your own home directory.

Windows Shares (with SSPR Accounts)

With the roll-out of new ZID computers at the end of 2023, the ZID has set up additional administrator accounts ( SSPR Accounts ), some of which have the same names as IEM usernames. This leads to issues with logging into network drives on Windows, as Windows automatically uses the SSPR account password (which is likely different from the IEM account password), and does not prompt for the IEM password.

File Sharing

Mon, 01 Jan 0001 00:00:00 +0000

https://cloud.iem.at/

To facilitate data exchange, both between IEM members and people without an IEM account, we use an experimental owncloud/nextcloud instance.

This is essentially a Dropbox-like platform.

This service is intended for short-term data sharing. The data stored there is not part of the institute-wide backup. Additionally, there is no guarantee that sharing URLs will not change over time.

Equipment

Mon, 01 Jan 0001 00:00:00 +0000

Equipment Loan

Equipment is generally available for loan from Stefan Warum ( facility@iem.at ).

Decentralized Equipment Loan (Re-use)

The IEM regularly acquires low-value hardware (microprocessors, electronic components, etc.) for projects that are no longer used after an initial phase. While these items are stored in offices until they become hopelessly outdated, similar hardware is often purchased anew due to lack of awareness.

To ensure these items can be reused in a timely manner, they are listed in an Excel spreadsheet on the Cloud.

Backup

Mon, 01 Jan 0001 00:00:00 +0000

Redundant Data Backup

The IEM file server has a capacity of approximately 100TB, which is stored redundantly in a RAID-6 hard disk array.

Additionally, an off-site backup (at KUG-ZID) is performed every night.

These backups are incremental, meaning:

Daily snapshots for the last two weeks
Weekly snapshots for the last two months
Monthly snapshots for the last quarter

What is (Not) Stored?

Stored items include home directories , emails , and project data.

IAEM

Mon, 01 Jan 0001 00:00:00 +0000

We operate a Content Management System ( https://iaem.at/ ), primarily for teaching and internal projects.

Access is granted with KUG username/password, both for instructors and students!

Webspace for Users

Mon, 01 Jan 0001 00:00:00 +0000

My Own Website

All users have access to a private webspace, which can be accessed at https://users.iem.at/USERNAME .

To use this, simply upload data (e.g., HTML files) to the public_html/ directory in your home directory on the server (login.iem.at (external) or pressl.iemnet (internal)). These files (including directories) must be readable by everyone (especially the web server) at the filesystem level (chmod +rX ~/public_html).

Legacy

Your personal webspace is also accessible via https://iem.at/~USERNAME . However, I recommend using https://users.iem.at/USERNAME .

Development

Tue, 15 Dec 2020 13:39:00 +0100

For development purposes, the IEM operates a VCS server based on git with integrated Continuous Integration service.

https://git.iem.at/

User Management

KUG Users

Access to the git server is granted using KUG credentials (username: p.... or s.......).

All KUG users automatically have (read) access to projects with visibility set to internal (in addition to public projects, which are also visible to non-logged-in users).

KUG users can create any number of projects and groups (subgroups and projects within groups, of course, only if they have write access to the respective parent group).

iem.sh

Tue, 15 Dec 2020 13:39:00 +0100

At the iem, anyone can set up their own webspace in a subdomain of iem.sh (e.g., vrr.iem.sh ).

Homepages are managed in a source code repository.

You do not necessarily need to upload HTML code; you can also “build” the page from MarkDown or similar formats. For more information, see here .

Attention

These pages are not suitable for large amounts of data (e.g., no large sound files or video files!). See Size Limit .
These pages are static, meaning no server-side PHP, Python, etc., code can be executed.

Step-by-step Instruction

Choose a name, e.g., FOOBAR.iem.sh.

WLAN

Thu, 18 Jan 2024 09:23:52 +0100

KUGwlan

All KUG employees can access the internet at KUG via kugwlan using their KUG username and password.

Manual Configuration

This usually happens automatically. If the connection needs to be set up manually, the following information might help:

Field	Value
Security	WPA/WPA2 Enterprise
Authentication	Tunneled TLS
Anonymous identity	~~(none)~~
Domain	~~(none)~~
CA certificate required	no
Inner authentication	MSCHAPv2 (no EAP)
Username	`p????`
Password	KUG password

eduroam

You can log in via eduroam anywhere at KUG and TUgraz (convenient for lecturers).

Fernzugriff

Mon, 01 Jan 0001 00:00:00 +0000

Firewalling

The iem intranet is protected from the internet by a firewall at the KUG.

Everything behind the iem firewall is referred to as the iemnet.

SSH

From outside (e.g., from home), one can access the iemnet via ssh (an encrypted protocol for remote access and data transfer).

Popular ssh clients include fugu for macOS and WinSCP for Windows.

Configuration	Value
Protocol	`SSH`, `SFTP`
Server	`login.iem.at`
Port	`22`

VPN

Alternatively, one can connect via the KUG VPN using a VPN client.

KUG Printing

Tue, 15 Dec 2020 10:28:24 +0100

The KUG provides network printers that require special drivers and software (to associate and bill print jobs to individuals). This software is primarily available as a SuSE package and does not work well with Debian (& Ubuntu,…).

To address this issue, the ZID has set up a pseudo-network printer that allows direct printing from Linux to the printer located at Inffeldgasse 10/3.OG. Print jobs are associated with the IEM and billed globally.

KUG Mail

Mon, 01 Jan 0001 00:00:00 +0000

Those who cannot or do not wish to use Outlook as their mail client can receive and send official KUG emails using a standard mail client (at least if it supports Oauth2.0 ):

Sending Emails (Outgoing)

Configuration	Value
Server	`smtp.office365.com`
Encryption	`STARTTLS`
Port	`587`
Authentication Method	`Oauth2`
Username	`<vorname>.<nachname>@kug.ac.at` (KUG email)

Attention

Emails with the sender address ...@kug.ac.at must be sent via the Microsoft mail server (smtp.office365.com). Otherwise, they will not be delivered.

Reading Emails (Incoming)

Configuration	Value
Protocol	`IMAP`
Server	`outlook.office365.com`
Encryption	`SSL/TLS`
Port	`993`
Authentication Method	`OAuth2`
Username	`<vorname>.<nachname>@kug.ac.at` (KUG-Email)

Two-Factor Authentication

For the Two-Factor Authentication (2FA) you need a mail client that supports OAuth2.0 and a 2FA-app .

KUG Files

Mon, 01 Jan 0001 00:00:00 +0000

On Windows computers provided by the ZID, you can easily access the KUG network drive.

However, accessing it from macOS & Linux is not as straightforward.

Web Interface

You can access the data from anywhere (including from home) via the web interface at https://filer.kug.ac.at .

SAMBA Access under macOS/Linux

Within the local network, you can directly access the network drive:

smb://kugfiles.iemnet/DATA/

or smb://<kugusername>@/kugfiles.iemnet/DATA/

Key	Value
Network Drive (Personal Files)	`\\kugfiles.iemnet\DATA`
Network Drive (Groups)	`\\kuggroups.iemnet\DATA`
Network Drive (Transfer,…)	`\\kugtransfer.iemnet\DATA`
Username	`p????`

From the command line, you can access the data as follows (backslashes can be replaced with forward slashes on the command line to avoid escaping them):

go.iem.at

Fri, 27 Jan 2023 07:53:23 +0100

Many URLs you want to share are simply too long (e.g., links to content on the KUG homepage). Sometimes, you may not know the actual URL at the time you need to send it out (e.g., links to a Vimeo live stream that hasn’t been set up yet).

With the IEM Link Shortener at https://go.iem.at/ , you can create short, readable URLs yourself and edit them later.

Step-by-Step Guide

Creating a Short URL

Go to https://go.iem.at/ .

webMUSHRA

Mon, 01 Jan 0001 00:00:00 +0000

First things first

Often, personal data is collected in listening tests (e.g., email addresses of participants). If this is the case, make sure to obtain a consent form from the participants beforehand!

Technical Setup

The test administrators create their webMUSHRA test in a git repository, which can be copied to the iem server.
The listening test is offered via https://experiments.iem.at/XXXXXXX , where XXXXXXX is a randomly generated string provided by the system.
The test results are regularly (multiple times a day) made available to the test administrators via a second git repository.

Setup

Create a new public git repository with the webMUSHRA experiment:

Machine Learning

Mon, 01 Jan 0001 00:00:00 +0000

For machine learning projects (e.g., those using TensorFlow), one or more headless Linux workstations with CUDA-capable hardware and Docker are available.

This allows long-running jobs to be executed without blocking your own workstation.

Available Workstations

Hostname	Notes	Status
`lucier`	2* `GeForce RTX 3080`	2024-12-18
`petrou`	3* `GeForce GTX 4090`	2024-12-18
~~`peach`~~	This machine is now used elsewhere and is no longer available!	2024-12-18

Prerequisites

An iem account
The account must be additionally activated. Please contact noc@iem.at .

First Steps

AI Tools

Thu, 05 Dec 2024 10:34:00 +0100

Currently, we do not provide any services based on Large Language Models/Deep Learning. However, some external AI services are available for free to KUG employees.

Academic AI

A ChatGPT based platform “free of security concerns” (mostly this means, that input data is not re-used by the service).

https://kunstunigraz.academic-ai.at/

field	value
username	`p????`
password	KUG-password

Documentation/Overview

https://inside.kug.ac.at/en/aup/services/digitalisierung/academic-ai (KUG documentation)
https://acomarket.at/en/portfolio/projects/academic-ai-en (ACOnet dokcmentation)

GitHub Copilot

Teachers and students can use GitHub’s Copilot for free by signing up for the GitHub Education program.

IEM Network Operation Center on IEM Network Operation Center

Introduction

Account Management

Passwords

Mail

Sending Emails (outgoing)

Receiving Emails (incoming)

Webmail (send/receive)

Mail Filter

SPAM

Mailing lists

Internal Communication

Project Mailing Lists

Chat

IEM Calendar

Cloud Calendar

IEM Events - Institute Schedule

Fileserver

Central HOME Directory

Windows Shares (with SSPR Accounts)

File Sharing

Share Data

Equipment

Equipment Loan

Decentralized Equipment Loan (Re-use)

Backup

Redundant Data Backup

What is (Not) Stored?

IAEM

Webspace for Users

My Own Website

Legacy

Development

User Management

KUG Users

iem.sh

Attention

Step-by-step Instruction

WLAN

KUGwlan

Manual Configuration

eduroam

Fernzugriff

Firewalling

SSH

VPN

KUG Printing

KUG Mail

Sending Emails (Outgoing)

Attention

Reading Emails (Incoming)

Two-Factor Authentication

KUG Files

Web Interface

SAMBA Access under macOS/Linux

go.iem.at

Step-by-Step Guide

Creating a Short URL

webMUSHRA

First things first

Technical Setup

Setup

Machine Learning

Available Workstations

Prerequisites

First Steps

AI Tools

Academic AI

Documentation/Overview

GitHub Copilot

`IEM Events` - Institute Schedule