[SAC] [OSGeo] #730: Setup account for foss4g2011 workshop file uploads

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------
- similar to ticket:563 (for foss4g2010) we need an account on a server
for foss4g2011 workshop presenters to upload their files (data, software,
printing material, images) through SFTP.
  - last year's account was moved from xblade11-2 to the ProjectsVM (using
the '2010.foss4g.org host' http://wiki.osgeo.org/wiki/ProjectsVM)
  - I wonder if we should create an account on the projectsVM again? (there
seems to be 114G available)
  - I see AdhocVM doesn't have much space avail (32G)

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by wildintellect):

1. We can attach additional storage specifically for the files, which
could be on Adhoc VM and easily moved to another VM later with mount
commands. (This drive could easily be attached to Projects instead.)
2. I'm not particularly fond of shared passwords/accounts, would prefer if
SFTP was auth via osgeo LDAP and we create an LDAP group to hold all the
presenters or something similar.

I don't have a particular preference for which server it's on, however if
it's on projects it should be kept distinctly separate from what's on
there now. This seems like something the download server should do, I'll
have to bring up the need for more disk space at telescience with them.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:1&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by tmitchell):

I'm sure it doesn't matter right now, but we could put them onto the web
VM along with the FOSS4G site.

Any idea on amount of disk space needed?

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:2&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by jmckenna):

That could work for sure. I'd say somewhere around 100GB to be safe (some
might upload VMs).

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:3&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by jmckenna):

Can we create a login on the same VM that hosts the foss4g2 site?

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:4&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by warmerdam):

Jeff,

www.foss4g.org is on osgeo1, space is somewhat limited I think.
2011.foss4g.org is on the "web" vm with only about 25GB free.

I don't really understand wildintellect's idea about extra attached
storage but if that can be done it might be good. Otherwise we can use
the projects vm but we will need to be cautious about the disk space.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:5&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by jmckenna):

update: the workshop committee needs something by this Friday. Are any of
the above options do-able for that deadline?

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:6&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by wildintellect):

I already opened a ticket with osuosl to add a 100GB volume to one of our
VMs. Minor issue came up but we should have it settled in the next
24hours.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:7&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by wildintellect):

/dev/vdb ~107 GB according to fdisk has now been added to webextra

TODO:
  1. Format as one large partition, ext4
  1. Create mount point /foss4g2011 ?
  1. Add to fstab for auto mounting
  1. Configure permissions and account level access to the space (should
this use osgeo LDAP, I'm not fond of a single login)

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:8&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by wildintellect):

All that's left is to configure accounts and permssions, I'd prefer if
someone else more familiar with the past setups does that step.

TODO:

    1. ~~Format as one large partition, ext4->ext3(Lenny doesn't do ext4)
~~
    2. ~~Create mount point /foss4g2011 ?~~ as /osgeo/foss4g/uploads
    3. ~~Add to fstab for auto mounting~~
    4. Configure permissions and account level access to the space (should
this use osgeo LDAP, I'm not fond of a single login)

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/730#comment:9&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by jmckenna):

SFTP access for several workshop providers is needed. If we go the LDAP
route, does that mean that I'll have to provide you with each userid that
needs access? If the answer is no, then let's do that now.

The other option is that we create a 'foss4g' account with
/osgeo/foss4g/uploads/ as the home dir.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:10&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by wildintellect):

Well there would be a webpage where you would enter all of their OSGeo ids
to grant them access.

Single accounts with 1 password shared are simply not secure. At the
minimum we should set the workshop account to expire in a reasonable
amount of time. Limit the shell and possibly use rssh to block other types
of connections.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:11&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by jmckenna):

Ok then let's go for LDAP access. Mine is 'jmckenna'. If you can provide
me that permissions page link also that would be great. I'll then login
and setup the structure (folders) for the workshops, and then contact the
workshop providers for their account IDs.

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:12&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#730: Setup account for foss4g2011 workshop file uploads
---------------------------+------------------------------------------------
Reporter: jmckenna | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+------------------------------------------------

Comment(by jmckenna):

can we do this this morning? I need:

1) sftp access to the machine
2) a way to set permissions for the workshop providers

If LDAP is too difficult can we just create one account then? Please ping
me on IRC in #osgeo (username: jmckenna)

--
Ticket URL: <http://trac.osgeo.org/osgeo/ticket/730#comment:13&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.