#2016: Remove crschmidt from LDAP admin group
---------------------------+-------------------
Reporter: strk | Owner: sac@…
Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+-------------------
Chris confirmed by mail he is not active on OSGeo:
{{{
Date: Mon, 23 Oct 2017 08:13:32 -0400
From: Christopher Schmidt <crschmidt at crschmidt.net>
To: Sandro Santilli <strk at kbt.io>
Cc: Frank Warmerdam <warmerdam at pobox.com>
Message-ID: <CALxbL9pqzJ4iNc9m4sJOwi2rg+zB5ZDvXAFgWKyvf-
RyKEfniA@mail.gmail.com>
Subject: Re: [SAC] OpenAerialMap service state
In-Reply-To: <20171023074916.brskhxdgpsk4ruar@liz>
...
Yeah, I haven't touched anything OSGeo related in about 4-6 years, so
pulling my name off anything it's leftover on would be a good plan
}}}
#2016: Remove crschmidt from LDAP admin group
---------------------------+--------------------
Reporter: strk | Owner: sac@…
Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------
Comment (by wildintellect):
Probably also needs to have key removed from the root user on osgeo3 and
osgeo4 VMs. We should probably open another ticket to manage the public
keys of root users with git (or puppet) in a centralized manner.
#2016: Remove crschmidt from LDAP admin group
---------------------------+---------------------
Reporter: strk | Owner: sac@…
Type: task | Status: closed
Priority: normal | Milestone:
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------
Changes (by strk):
* status: new => closed
* resolution: => fixed
Comment:
I've removed him from the admin team for now.
Also I removed his ssh key, renamed his home directory and removed his
unix user from the "sudo" group on the following hosts:
Did I miss any other ?
+1 with managing public keys with some automatic deploy, please file
another ticket for that, I'm closing this one as done, will file another
one to remove shell access too.
#2016: Remove crschmidt from LDAP admin group
---------------------------+---------------------
Reporter: strk | Owner: sac@…
Type: task | Status: closed
Priority: normal | Milestone:
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------
Comment (by strk):
Alex you mentioned osgeo3 but I cannot even find the IP address of osgeo3,
it is not mapped as the others:
{{{
osgeo3.osgeo.osuosl.org: Name or service not known
osgeo3.osgeo.org: Name or service not known
osgeo3.osuosl.org: Name or service not known
}}}
#2016: Remove crschmidt from LDAP admin group
---------------------------+---------------------
Reporter: strk | Owner: sac@…
Type: task | Status: closed
Priority: normal | Milestone:
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------
Comment (by martin):
Additionally to your list of OSGeo servers mine also includes:
projects.osgeo.osuosl.org
osgeo3 and osgeo4 are only accessible from OSL's management network. After
feeling locked out for quite some time, I recently found out that I still
have access, but most likely Christoper never had.
Could anyone please clarify the situation ?
Is "projects.osgeo.osuosl.org" a VM on "osgeo6.osgeo.osuosl.org" ?
Sorry but I don't know how to find out by myself ( a wiki page
about management of VMs on OSgeo6 would be useful )
projects is a VM on osgeo4. I thought it was 100% migrated and turned
off. Martin did most of the migrations an would know best.
Indeed, I think three sites are still left over. I somehow got stuck,
probably due to formal reasons, but right now I don't remember the details
any more. Chances are good that I'll be able to find out this weekend.
Cheers,
Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------
On Tue, Oct 24, 2017 at 05:34:47PM +0000, Martin Spott wrote:
Alex M wrote:
> projects is a VM on osgeo4. I thought it was 100% migrated and turned
> off. Martin did most of the migrations an would know best.
Indeed, I think three sites are still left over. I somehow got stuck,
probably due to formal reasons, but right now I don't remember the details
any more. Chances are good that I'll be able to find out this weekend.
On Tue, Oct 24, 2017 at 05:34:47PM +0000, Martin Spott wrote:
Alex M wrote:
projects is a VM on osgeo4. I thought it was 100% migrated and turned
off. Martin did most of the migrations an would know best.
Indeed, I think three sites are still left over. I somehow got stuck,
probably due to formal reasons, but right now I don't remember the details
any more. Chances are good that I'll be able to find out this weekend.
