I think we're ready to start giving mire/kerberos/afs accounts to users immediately, with the caveat that "Mailman, DNS hosting, and dynamic web content are not yet supported on the new hardware". Everything else is, to my knowledge, good to go.
On deleuze, bind is running as a non-root user. I propose that we give Justin Leitgeb a sudo line for that particular userid and take him up on his very generous offer to be our DNS guru. Alternatively I can k5start bind and put all of its configuration files in AFS. We can easily do something similar for Mailman if somebody wants to step up to the plate; I'm happy to install the deb's, fling all of its gook into AFS-space, and hand off the tokens to somebody else (who then doesn't need root). Preferably somebody who understands Python. And then there's Apache dynamic content. I've posted our options on the wiki. I'm not ok with assuming responsibility for the reliability/maintainability of options #2 and #3. I just don't feel good about it (yes, I know that sounds pretty lame). Adam, if you can tweak domtool to emit Apache13 configuration files, I can take it from there using a solution that is robust, reliable, and battle-tested on a cell with thousands of users. There's a very good chance that mod_waklog will be ported to Apache2 in the next few months. But not soon enough for our immediate migration needs, which is why I think a step backward to Apache13 is our best option in the near term. It's really not that bad, especially since we weren't planning on using Apache2's most compelling feature (threads) anyways. - a Adam Chlipala <[EMAIL PROTECTED]> writes: > So where are we on the timeline of being ready to start migrating > users? I'll just remind everyone that we're already paying $750/mo. for > Peer 1 colocation. It hasn't seemed like a good idea (politically) to > bill members for these charges yet, since they aren't seeing any > concrete benefits from the new stuff yet, and it might even turn out > that we fail miserably to get things up and running and they never do. > As a result, I sent out a request to hcoop-announce for people to throw > in a little extra money, but very few people seemed to answer it. I've > deposited $2000 of my own money in the HCoop bank account in the last > month or so, to prevent us from running out of money to pay our bills. > > So, I'd really like to see a list of all remaining tasks, assigned to > specific people with specific dates marked for completion. Otherwise, > I'm starting to feel like it's time to declare "a state of emergency" > here.... -- PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380 _______________________________________________ HCoop-SysAdmin mailing list [email protected] http://hcoop.net/cgi-bin/mailman/listinfo/hcoop-sysadmin
