Setup account for foss4g2011 workshop file uploads

[Jeff McKenna]

• similar to ticket:563 (for foss4g2010) we need an account on a server for foss4g2011 workshop presenters to upload their files (data, software, printing material, images) through SFTP.
• last year's account was moved from xblade11-2 to the ProjectsVM (using the '2010.foss4g.org host' ​http://wiki.osgeo.org/wiki/ProjectsVM)
• I wonder if we should create an account on the projectsVM again? (there seems to be 114G available)
• I see AdhocVM doesn't have much space avail (32G)

[wildintellect]

1. We can attach additional storage specifically for the files, which could be on Adhoc VM and easily moved to another VM later with mount commands. (This drive could easily be attached to Projects instead.)
2. I'm not particularly fond of shared passwords/accounts, would prefer if SFTP was auth via osgeo LDAP and we create an LDAP group to hold all the presenters or something similar.

I don't have a particular preference for which server it's on, however if it's on projects it should be kept distinctly separate from what's on there now. This seems like something the download server should do, I'll have to bring up the need for more disk space at telescience with them.

[tmitchell]

I'm sure it doesn't matter right now, but we could put them onto the web VM along with the FOSS4G site.

Any idea on amount of disk space needed?

[Jeff McKenna]

That could work for sure. I'd say somewhere around 100GB to be safe (some might upload VMs).

[Jeff McKenna]

Can we create a login on the same VM that hosts the foss4g2 site?

[warmerdam]

Jeff,

www.foss4g.org is on osgeo1, space is somewhat limited I think. 2011.foss4g.org is on the "web" vm with only about 25GB free.

I don't really understand wildintellect's idea about extra attached storage but if that can be done it might be good. Otherwise we can use the projects vm but we will need to be cautious about the disk space.

[Jeff McKenna]

update: the workshop committee needs something by this Friday. Are any of the above options do-able for that deadline?

[wildintellect]

I already opened a ticket with osuosl to add a 100GB volume to one of our VMs. Minor issue came up but we should have it settled in the next 24hours.

[wildintellect]

/dev/vdb ~107 GB according to fdisk has now been added to webextra

TODO:

1. Format as one large partition, ext4
2. Create mount point /foss4g2011 ?
3. Add to fstab for auto mounting
4. Configure permissions and account level access to the space (should this use osgeo LDAP, I'm not fond of a single login)

[wildintellect]

All that's left is to configure accounts and permssions, I'd prefer if someone else more familiar with the past setups does that step.

TODO:

1. Format as one large partition, ext4->ext3(Lenny doesn't do ext4)
2. Create mount point /foss4g2011 ? as /osgeo/foss4g/uploads
3. Add to fstab for auto mounting
4. Configure permissions and account level access to the space (should this use osgeo LDAP, I'm not fond of a single login)

[Jeff McKenna]

SFTP access for several workshop providers is needed. If we go the LDAP route, does that mean that I'll have to provide you with each userid that needs access? If the answer is no, then let's do that now.

The other option is that we create a 'foss4g' account with /osgeo/foss4g/uploads/ as the home dir.

[wildintellect]

Well there would be a webpage where you would enter all of their OSGeo ids to grant them access.

Single accounts with 1 password shared are simply not secure. At the minimum we should set the workshop account to expire in a reasonable amount of time. Limit the shell and possibly use rssh to block other types of connections.

[Jeff McKenna]

Ok then let's go for LDAP access. Mine is 'jmckenna'. If you can provide me that permissions page link also that would be great. I'll then login and setup the structure (folders) for the workshops, and then contact the workshop providers for their account IDs.

[Jeff McKenna]

can we do this this morning? I need:

1) sftp access to the machine 2) a way to set permissions for the workshop providers

If LDAP is too difficult can we just create one account then? Please ping me on IRC in #osgeo (username: jmckenna)

[warmerdam]

I have created a foss4g account on the webextra vm, and made /osgeo/foss4g/uploads as it's home directory. I have notified Jeff of the password. It is just a regular local account.

Should I create a dns alias for this machine? Perhaps 2011ws.foss4g.org?

[warmerdam]

I have created the 2011ws.foss4g.org DNS alias for this machine. So folks can sftp to foss4g@….

Jeff can now create subdirectories and such as needed.

[Jeff McKenna]

verified!

[Jeff McKenna]

FYI I made a note of this service on its wiki page: ​http://wiki.osgeo.org/wiki/WebExtraVM