Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#2016 closed task (fixed)

Remove crschmidt from LDAP admin group

Reported by: strk Owned by: sac@…
Priority: normal Milestone:
Component: SysAdmin Keywords:
Cc: neteler, martin

Description

Chris confirmed by mail he is not active on OSGeo:

Date: Mon, 23 Oct 2017 08:13:32 -0400                                                                                                              
From: Christopher Schmidt <crschmidt at crschmidt.net>                                                                                                
To: Sandro Santilli <strk at kbt.io>                                                                                                                  
Cc: Frank Warmerdam <warmerdam at pobox.com>   
Message-ID: <CALxbL9pqzJ4iNc9m4sJOwi2rg+zB5ZDvXAFgWKyvf-RyKEfniA@mail.gmail.com>                                              
Subject: Re: [SAC] OpenAerialMap service state                                                                                                     
In-Reply-To: <20171023074916.brskhxdgpsk4ruar@liz>                                                                                                 

...

Yeah, I haven't touched anything OSGeo related in about 4-6 years, so                                                                              
pulling my name off anything it's leftover on would be a good plan :)

Change History (7)

comment:1 by wildintellect, 7 years ago

Probably also needs to have key removed from the root user on osgeo3 and osgeo4 VMs. We should probably open another ticket to manage the public keys of root users with git (or puppet) in a centralized manner.

comment:2 by strk, 7 years ago

Resolution: fixed
Status: newclosed

I've removed him from the admin team for now. Also I removed his ssh key, renamed his home directory and removed his unix user from the "sudo" group on the following hosts:

  • trac.osgeo.org
  • www.osgeo.org
  • osgeo6.osgeo.osuosl.org
  • secure.osgeo.osuosl.org
  • adhoc.osgeo.osuosl.org
  • backup.osgeo.osuosl.org
  • wiki.osgeo.org
  • webextra.osgeo.osuosl.org
  • download.osgeo.org

Did I miss any other ? +1 with managing public keys with some automatic deploy, please file another ticket for that, I'm closing this one as done, will file another one to remove shell access too.

comment:3 by strk, 7 years ago

Alex you mentioned osgeo3 but I cannot even find the IP address of osgeo3, it is not mapped as the others:

osgeo3.osgeo.osuosl.org: Name or service not known
osgeo3.osgeo.org: Name or service not known
osgeo3.osuosl.org: Name or service not known

The wiki page should be updated with some info about it: https://wiki.osgeo.org/wiki/SAC_Service_Status#osgeo3

comment:4 by wildintellect, 7 years ago

Just the VMs on osgeo3 not the host itself.

comment:5 by strk, 7 years ago

VMs on osgeo3 should be all covered, let me know if you see anyone missing.

comment:6 by martin, 7 years ago

Additionally to your list of OSGeo servers mine also includes:

projects.osgeo.osuosl.org

osgeo3 and osgeo4 are only accessible from OSL's management network. After feeling locked out for quite some time, I recently found out that I still have access, but most likely Christoper never had.

comment:7 by strk, 7 years ago

Thanks, projects.osgeo.osuosl.org now also done.

Note though that according to https://wiki.osgeo.org/wiki/ProjectsVM the services in the "projects" VM were all migrated to osgeo6 while there's no mention of a "VM" from here: https://wiki.osgeo.org/wiki/Osgeo6

Could anyone please clarify the situation ? Is "projects.osgeo.osuosl.org" a VM on "osgeo6.osgeo.osuosl.org" ? Sorry but I don't know how to find out by myself ( a wiki page about management of VMs on OSgeo6 would be useful )

Note: See TracTickets for help on using tickets.