Charles-H.Schulz wrote:
David, Aiet,
here's my partner's answer to your mail below:
Hi Charles, thanks for getting this going! My responses to him below...
On Tue, 2005-04-26 at 23:24 +0200, David Fraser wrote:
(Hi, I'm the tech. guy about the server.) No problem, I recentlyHi Charles
Sorry to take a while to write back, have been off work sick.
Pootle basically needs
- Python 2.3 or greater
switched from python 2.3.4 to 2.4.1 on some computer, both seem good.
To be tested: in the past, some tools (like Zope) used older versions of
python... However, if needed, installing several versions of python is
easy.
Python 2.4.1 would be fine, so no problems here.
Basically the port is only needed internally so that the Pootle web server can run somewhere, everyone should access it through Apache which proxies the calls to it, so you shouldn't have to allow outside access to the port. This is how I currently run my demo pootle server (and it means we can let Apache serve the static files)- A directory to run in
no pb.
- The ability to listen on a network port (which you can set Apacheto
proxy to)no pb. Of course, I'll need more details on this. As a general rule,
I'll try to keep a good overall security scheme, but all customization
of port listening, etc... is possible. Including "non standard" ports
for ssh, apache, and so on.
(Aside: In the future, Pootle should be able to run under Apache, its mostly handling the multiprocess situation properly thats preventing this)
- Probably best if I could have shell access to help administrate it
Yes, especially in the beginning. Probably ssh key authentication for a limited set of admins. The precise policy will be adapted depending on the soft needs/risks. I mean: does some/all/none softawre will require some limits (chroot, ulimit, quots...) ? Of course, I hope no ;-)
Basic guidelines: obtaining the best reliability and security with the
minimal waste of time, for evveryone.
OK let me know where to send my ssh key to. I don't think any limits like that will be required...
The CVS would probably be hosted on openoffice.org's normal CVS (I'll mail the list about this separately).- If it needs to access CVS repositories etc then network access forthat
Let me know if you need more informationyes, but I'll probably make proposals. For axample: CVS authentication
David
system (and CVS admin responsible ?) ? Need of cvsweb ? special needs for backup policy ?
So there shouldn't be need to have an actual CVS server running on the machine, (although that may be faster, but shouldn't be an issue).
I think this doesn't need to be resolved in advance though.
Note that all these choices don't need to be "hard coded" from the beginning!
I'll setup some various basic services too (ftp, mailman, ...)
Charles.
This is fantastic as I said before, thanks Charles!
David
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
