James E. (Jed) Donnelley Over thirty years experience in system administration, network programming, integration, operating systems (Unix, Windows, Mac, and in-house), debugging and analysis, research, and management. Strong background in programming (e.g. OS, Web, simulation, scripting, etc. numerous languages) communications (LAN/WAN - e.g. Ethernet, Fibre Channel, multicast, protocols, etc.) and software (e.g. applications such as LAMP, DB, LDAP, etc. kernel code and drivers, TCP/IP, etc.). Excellent problem solving such as debugging and performance tuning. Outstanding at communications such as presentations, documentation and publications, management, teaching and selling. Recognized at LLNL and LBNL as an innovative leader, architect, and problem solver. Owner since 1995 of the profitable Webstart Communications small business that hosts Web content and sells Web advertising. Recent experience from project leading and research publications to system configuration, programming, and support. E-MAIL donnelley1@webstart.com WWW http://www.webstart.com/jed/ HOME ADDRESS 2835 Benvenue Avenue, Berkeley, Ca. 94705 WORK ADDRESS Berkeley Lab, Berkeley, CA., 94720 TELEPHONE (510) 548-4590 PERSONAL 6 feet tall, 185 pounds, excellent health. Born July 5, 1948. Married to Yvonne, daughters Faye (9/90) and Claire (6/92). FORMAL Graduate of Palo Alto High School, 1966. EDUCATION B.A. Physics, B.S. Mathematics 1970, M.S. Mathematics 1972, University of California Davis. Transcripts available upon request HONORS Departmental citation for outstanding achievement in undergraduate mathematics from U.C. Davis, 1970. REFERENCES Available upon Request WORK EXPERIENCE Summary, most recent first: 1. Sept. 2008 to May 2014 - Mypoints, first as a contractor and then as a Senior Systems and Network Administrator starting in June of 2009. Mostly responsible for managing about 500 Redhat/CentOS Linux servers in one east coast and one west coast computer center. During this work I developed a configuration management system (~10k lines of Perl) that automated the processes at MyPoints, including builds to configured systems with PXE, Cobbler, and then to my configuration management code. I was also responsible for integrating SSDs into the MyPoints MySQL DB servers (Virident and now IBM). 2. Jan. 2002 to Jul. 2008 - Computer Scientist in the server team of the Network and Security group of NERSC (below) at Berkeley Lab. Responsible for project leading of efforts like the recent LDAP (Lightweight Directory Access Protocol) integration into NERSC, the conversion of NERSC servers from Solaris to Linux. Provided systems administration for numerous Unix (Linux, Solaris, and FreeBSD) systems, many application systems such as Web sites, Web front ends to Oracle, help desk systems, CVS services, system security, RAID configuration, Nagios, etc. 3. Jan. 2007 to Jan. 2008 - Subject matter expert (consultant) for Raytheon, proposed system technical director, supercomputing. 4. 1995 to present - owner of Webstart Communications, a profitable Web business developing content (index/search) and selling advertising on the Web/Internet. 5. Jan. 1998 to Jan. 2002 - Webmaster and staff member of the User Systems Group at the National Energy Scientific Computer center (NERSC) at Lawrence Berkeley National Laboratory. Responsible for the main NERSC Web servers and numerous virtual hosts, system security, Web front ends for Oracle databases, etc. 6. July 1996 to Jan. 1998 - Technology Information Group staff member, Webmaster for the Engineering Records Center: http://ercu.llnl.gov/. Reengineered the centers business processes to base electronic transactions on a Web (mostly Netscape) front end and a database (Oracle) back end. 7. April 1995 to July - Integration team leader for the Scaleable I/O project http://www.llnl.gov/liv_comp/siof/ (also helped with Web work - e.g. the on-line demonstrations for the Supercomputer 1995 conference). 8. April 1994 to April 1995 - Professional research leave to the Communication Systems and Belvue development group at the computer center of the University of Stuttgart, Stuttgart, Germany. 9. June 1990 to April 1994 - Gigabit Test Bed manager, Webmaster and staff member of the Advanced Telecommunication Program. 10. Apr. 1988 to June 1990 - Group leader of the operating systems group in the Livermore Computer Center at LLNL. 11. May 1980 to April 1988 - Technical lead of the Network LTSS distributed operating system project. 12. Sept. 1976 to May 1980 - Principal investigator for the Local Network Research project at LLNL. 13. July 1975 to Sept. 1976 - Coprincipal investigator for the Department of Transportation funded Intelligent Gateway Project at LLNL. 14. Sept. 1972 to July 1975 - Staff member and ARPA network Technical Liaison for the ARPA funded Research Into the Security of Operating Systems (RISOS) project at LLNL. 1972 to July 1975. 15. Teaching Assistant for the University of California (Davis Campus) December 1970 to June 1972. 16. 1968 to 1971 summers - Hydrologist for the U.S. Geological Survey. 17. June to Sept. 1966 - Summer engineering program participant at Hewlett Packard Corporation. Consulting experience: Raytheon (Falls Church, Reston, Va), Aerospace Corporation (Los Angeles), Rockwell International (Los Angeles), EDP Audit Control (Berkeley), American Supercomputer Inc. (Cupertino), Defense Airborne Reconnaissance Office, others. Expert witness for Dietrich, Glasrud and Jones (Fresno). Teaching experience: Differential equations, calculus, and computer programming, University of California, Davis. Analysis of Hyperchannel, University of Calgary. LLNL in-house courses. High speed networking tutorials. Overview: Unusual breadth and depth of experience, technical and communication: 1. Technical - developed two OSs (RATS implementation and lead the NLTSS architecture and implementation), parts of three networking protocols (ARPA NCP, in-house 'Delta-T', and TCP/IP) and numerous other programming projects. 2. Management/coordination - Project leader, group leader, technical lead, Cooperative Research and Development Agreement lead, consulting for industry and government, expert witness, teaching, etc. 3. R&D - Operating System security (RISOS), Local Area Network (Local Network Research Project - e.g. Hyperchannel), the Advanced Telecommunications Program - with publications and conference presentations from each. Recent experience with Object Capability systems. 4. Systems administration - Lead a two person team to administer 70+ Linux and FreeBSD systems providing services from Web and email to LDAP and Radius, etc. at NERSC. Lead development and support of the supercomputer systems at LLNL from 1985 to 1990, including interacting with user groups, management and managing all OS and network software. More detailed (first person) work experience description (historical): I was honored by Hewlett Packard Corporation with a position in a summer engineering program for promising high school graduates in 1966. In this program I analyzed semiconductor components and studied digital circuits. In the Summers between studies at U.C. Davis I worked as a hydrologist for the U.S. Geological Survey doing surface and ground water hydrology. I obtained early computer experience on the network of IBM 360 computers run by the U.S.G.S.. As a teaching assistant at U.C.Davis I taught differential equations, calculus, and computer programming. When teaching computer programming I brought time sharing into the classroom for the first time at UCD. In 1972 I joined the staff of the Research Into the Security of Operating Systems (RISOS) project at Lawrence Livermore Laboratory (LLL). This project was supported by the DOD ARPA to discover flaws in computer operating systems and to search for ways to eliminate such flaws in future systems. This work offered tremendous breadth of study in computer systems including: IBM (OS, VS2, VM), Honeywell (GECOS, WWMCCS, and Multics), Univac Exec8, Burrough MCP, and Dec (TENEX, RSX-11M, TOPS-10, Unix). While on the RISOS staff I was technical liaison for LLL to the ARPA network during the pioneering phase of ARPA network development. In this capacity I was the technical interface for the Network Control Program, Telnet, and FTP protocols that were implemented by the RISOS staff for our in-house developed operating system on the ARPA network (RATS). While on the RISOS staff I did research on advanced concepts in operating system design and developed techniques for testing computer software. Much of the development work for this project was done on Unix. The publications in the bibliography 1, 2, 3, 4, 5, and 7 further describe my RISOS work. During 1975 and 1976 I was co-principal investigator for a contract with the Department of Transportation (DOT) to develop a system (termed a "transaction controller") to simplify, coordinate, and facilitate access by DOT analysts to a distributed transportation database. A prototype system was demonstrated in July 1976 running on a DEC PDP-11/45 computer with auto-dialed telephones and access to Infonet, Tymnet, and ARPA net. This system was the first of a series of Intelligent Gateway Processors (IGPs) that eventually was licensed to Control Data Corporation under the name ASCENT* gateway. Publications 6, 8, and 9 further describe this work. During this period I was also the LLL representative to the Energy Research and Development Administration's network investigators group. Publication 10 further describes this work. In 1977 I initiated the Local Network Research Project at LLL to study the impact of (then) recent developments in local area network (e.g. broadcast buses and rings). As part of this work I did detailed discrete event simulations of the Network Systems Corporation Hyperchannel product. These simulations pointed out flaws in Hyperchannel that were subsequently corrected. Publications 11 and 12 further describe these studies. I taught 1 week classes related to these studies on Hyperchannel at the University of Calgary, Canada in the summers of 1979 and 1980. In 1980 (while still at LLL) I began consulting for Aerospace Corporation. I continued consulting for them off and on until 1988. During 1982 and 1983 I served as an expert witness for Dietrich, Glasrud and Jones. During 1986 and 1987 I consulted for Rockwell International. I have often done other occasional consulting over the years. Most recently I have given a tutorial on High Speed Networking in a half day format at Supercomputer '92, at Aptec Computers (Portland, Oregon), and in a full day format at the German Weather Center (DKRZ) in Hamburg, Germany and later (1996) for JASA (below). Between 1979 and 1990 my work at LLNL was directed to supplying production operating systems and network protocols for the Livermore Computer Center. Anticipating the proliferation of local area networks and workstations during the early 1980s my colleagues and I developed link, network, transport, session, presentation, and application level protocols for the network operating system that I was the technical lead for. This work is further described in publications 13 - 17. As time passed all of these in-house protocols were replaced with emerging standards. For example, we have replaced the Delta-T transport protocol (which I implemented) with TCP (which I also helped to integrate). In 1984 the scope of my work increased when it was decided to emulate the interface for the existing operating systems on the supercomputers at LLL in order to transit to the new network operating system. About that same time we began work to support shared memory multiprocessing. These changes expanded the project to involve 30-40 people. In 1986 this system began production use. During that time frame my efforts were largely refocused on debugging and improving the performance of this production system. Early in 1988 I was given the additional assignment of administrative leadership for the operating system group (10 people). In this group leader position I was responsible for further developing and maintaining the distributed operating system for the Livermore Computer Center and insuring that users needs were met. In about 1990 the software systems that were previously developed at LLNL were replaced by vendor supplied systems. In 1990 I began working as a staff member in the Advanced Telecommunication Program at LLNL. My primary responsibility was managing test bed activities for gigabit networking components. In this role I conducted numerous tests of early release HIPPI prototypes and products and participated in testing of early Fibre Channel products. During this work I worked with a HIPPI tester developed at Los Alamos National Laboratory (and later marketed by what is now called Avaika Networks Corporation) and with a Fibre Channel tester from Finisar Corporation. As a member of the ATP staff I worked closely with a variety of companies developing and/or selling advanced networking products including Ancor Communications, IBM AWD, Hewlett Packard, Sun Microsystems, Finisar, and many others. I was also involved in testing advanced wide area networking technologies such as ATM in the Xunet (eXperimental University NETwork) collaboration with AT&T (Sanctioned by CNRI as the "Blanca" gigabit test bed), in the Northern California Gigabit network (Bagnet) with Pacific Bell, and others. I participated in commercializing technology developed at LLNL such as advanced frequency and wavelength division multiplexing for very high speed digital communication (> 10 gigabits/sec link speeds). While working for the ATP I also developed their Web site (e.g. still visible at: http://www-atp.llnl.gov/atp/atp.html) during the early development phase of the Web and continued some communication and Web related activites while on the professional research leave below. I spent the year from April 1994 to April 1995 on a professional research leave to the Communication Systems and BelWŸ Development group in the computer center at the University of Stuttgart, Germany. During this time I helped this group in a variety of areas including: 1. TCP/IP debugging and performance analysis. For example, I discovered a buffering inadequacy in Cisco's support for IP over X.25 that led to substantial packet losses. 2. Participation in demonstrations of applications (e.g. a cooperative visualization and simulation package) over high speed networks (e.g. ATM and SMDS networks at the 1995 InterOp in Paris as part of the Deutsche Telecom booth). I was also involved in a number of "MBone" demonstrations. 3. Presentations and participation in many technology transfer meetings, including: a. The presentation "Multifunction LAN Communication" in the session on Ultra High-Speed LAN Technologies at the June 1994 Berlin InterOp: http://www-ks.rus.uni-stuttgart.de/atp/talks/berlin-interop.html b. SMDS, ATM, and cooperative simulation demonstration in the Deutsche Telecom booth at InterOp in Paris, Fall 1994. c. The presentation, "WWW Media Distribution via Hopwise Reliable Multicast" at the April WWW'95 conference in Darmstadt: http://www-ks.rus.uni-stuttgart.de/atp/papers/HRM/HRM.html This paper is also published in "Computer Networks and ISDN Systems" - see publication 18 below. During my time in Stuttgart I also supported quite a number of WWW pages, including the moderately popular (~3000 impressions per work day) Computer and Communications pages at: http://www.cmpcmm.com/cc/ that eventually became managed by Webstart Communications. This content was copied widely both as authorized mirrors and as unauthorized copies. In the middle of April 1995 I returned to the Livermore Computer Center at LLNL and began work as the team leader for the integration team in the Scalable I/O project. In this work I helped coordinate the low level hardware aspects (e.g. the Network Attached Peripherals, NAPs, with the higher level work such as the MPI-I/O developments and the integration into the High Performance Storge System (HPSS: http://www.hpss-collaboration.org/). After I completed work for the SIOF demonstration at Supercomputer 1995 I began to work on essentially a consulting effort to help select appropriate high performance LAN technologies for the Joint Airborne SIGINT Architecture (JASA) standardization effort within the the Defense Airborne Reconnaissance Office (DARO). Part of this work was making presentations to the JASA organization about high speed networking technologies (e.g.: http://atp.llnl.gov/www/emerg_nets/index.htm). It also involved interaction with the group members on LAN recommendations (e.g. ATM, various Ethernets, Fibre Channel, HIPPI, etc.). As the JASA work was winding down (1995) I was looking for more directly Internet/Web/DBMS oriented work. I want to be able to play a part in the transition to network based electronic commerce. I took on the task of reengineering the Engineering Records Center at LLNL as an example of this transition. I put into place a Web front end for an Oracle backend that supported the engineering drawings at LLNL. During this work I did early evaluation and testing of Web certificate systems (e.g. Entrust) and supported a variety of developing standards in the Web/database area. I moved to Berkeley in late 1995 (not long after returning from Germany) and looked for an opportunity at Berkeley Lab. I found an opportunity as Webmaster for the main and other Web sites for the National Energy Research Scientific Computer center (NERSC) at Berkeley Lab. Initially I worked in the User Systems Group as Webmaster and and also supported Web front ends to Oracle databases such as for the NERSC NIM (NERSC Information Management) system. From 2002 July 2008 I moved into the Network and Security group within NERSC, transitioned to more system administration work, and took on project leadership work for integrating LDAP (Light Weight Directory Access Protocol) at NERSC. In this role I administer numerous (~50) Unix systems (mostly CentOS/Redhat Linux and FreeBSD) and support a variety of applications running on server systems, including Web servers with Oracle back ends, but also including LDAP (where I lead an OpenLDAP integration project with data movement from Oracle to an LDAP master to numberous SyncRepl synchronized replicas), email, instant messaging, Wiki, security scanning, DNS, DHCP, portal, one time password, and many more services. During this time greater emphasis has been placed on insuring the security of the various server systems that I support - tying back to my initial operating systems security and networking roots. During 2007 I worked as a subject matter expert (consultant) for Raytheon Corportation. This work focused on managing the systems aspects of large scientific computer centers. Beginning in September of 2008 I started work as a Senior Network and Systems Administrator for Mypoints, first as a contractor and then from June 2009 as a full time employee. PUBLICATIONS Reprints available upon Request 1. J. E. Donnelley, "DCAS" - A Distributed Capability Access System, Lawrence Livermore Laboratory Report UCID-16903, August 1975. 2. J. E. Donnelley, Notes on "RATS" and Capability-List Operating Systems, Lawrence Livermore Laboratory Report UCID-16903, September 1975. 3. R. P. Abbott, J. E. Donnelley, et. al., Security Analysis and Enhancement of Computer Operating Systems, National Bureau of Standards Report NBSIR 76-1041, April 1976. http://www.webstart.com/jed/papers/NBSIR-76-1041-security-enhancements.pdf 4. J. E. Donnelley, Extended Information Formats, Proceedings of the Berkeley Workshop on Distributed Data Management and Computer Networks, May 1976, pp. 107-113. 5. J. E. Donnelley, A Distributed Capability Computing System, Proceedings of the Third International Conference on Computer Communication, August 1976, pp. 432-440. http://www.webstart.com/jed/papers/DCCS/ 6. J. E. Donnelley, Controlling Transactions Between Distributed Computer Resources, Proceedings of the Fifth Texas Conference on Computing Sciences, October 1976, pp. 48-55. 7. D. Webb, J. E. Donnelley, et. al., Operating System Security Analysis Handbook, published by the Lawrence Livermore Laboratory for the National Security Agency, November 1976. 8. E. W. Birss, J. E. Donnelley, and J. W. Yeh, A Monitor of Distributed Data Systems (MODDS): Part 1, Digest of Functional Specifications, Lawrence Livermore Laboratory Report UCID-17314 Part 1, November 1976. 9. E. W. Birss, J. E. Donnelley, and J. W. Yeh, A Monitor of Distributed Data Systems (MODDS): Part 2, Detailed Functional Specifications, Lawrence Livermore Laboratory Report UCID-17314 Part 2, November 1976. 10. Gerald Estrin, J. E. Donnelley, et. al., General Purpose Computer Networks and Resource Sharing in ERDA, Volumes 1-4, published by the Office of Engineering, Mathematical and Geosciences, Division of Basic Energy Sciences, ERDA, July 1977. 11. J. E. Donnelley and J. W. Yeh, Interaction Between Protocol Levels in a Prioritized CSMA Broadcast Network, Proceedings of the Third Berkeley Workshop on Distributed Data Management and Computer Networks, August 1978, pp. 123-143. Also in Computer Networks 3 (1979) 9-23. 12. J. E. Donnelley and J. W. Yeh, Simulation Studies of Round Robin Contention in a Prioritized CSMA Broadcast Network, Third University of Minnesota Conference on Local Area Networks, October 1978. 13. J. E. Donnelley, Components of a Network Operating System, Fourth Conference on Local Networks, Minneapolis, 1979. Also in Computer Networks 3 (1979) 389-399. http://www.webstart.com/jed/papers/Components/ 14. J. E. Donnelley and J. G. Fletcher, Resource Access Control in a Network Operating System, Proceedings of the ACM Pacific '80 Conference, San Francisco, November 1980, pp. 115-125. 15. J. E. Donnelley, Managing Domains in a Network Operating System, Proceedings of Local Networks and Distributed Office Systems Conference, London, May 1981, pp. 345-361. http://www.webstart.com/jed/papers/Managing-Domains/ 16. J. Minton and J. E. Donnelley, The Syntax and Semantics of NLTSS Message Tokens, Lawrence Livermore Laboratory Report UCID-18852, April 1982. 17. J. E. Donnelley, Support for Parallel Input/Output in Light/ Heavyweight Multiprocessing, Proceedings of the Cray Users Group Conference, Garmish West Germany, October 1986. 18. J. E. Donnelley, WWW Media Distribution via Hopwise Reliable Multicast, in the proceedings of the WWW'95 conference, Darmstadt, Germany, April 1995. Also in Computer Networks and ISDN Systems 27 (1995) 781-768. http://www.igd.fhg.de/www/www95/papers/87/HRM.html http://www.webstart.com/jed/papers/HRM/HRM.html 19. Mark S. Miller, James E. Donnelley, Alan H. Karp, Delegating Responsibility in Digital Systems: Horton's "Who Done It?", in the proceedings of the HotSec '07 Usenix Workshop, August 7, 2007: http://www.erights.org/elib/capability/horton/ http://www.usenix.org/events/hotsec07/tech/