Re: [Server-devel] make-server-delegations output and importing to XS

2010-04-23 Thread Martin Langhoff
On Fri, Apr 23, 2010 at 1:52 PM, Daniel Drake  wrote:
> OK, I pushed our work to git along with a README.delegation, comments
> appreciated.

Thanks.

Cannot review it today. But I need to demo a working set of what we
have so I've rolled an rpm with the fixes *prior* to your commit.

cheers,


m
-- 
 martin.langh...@gmail.com
 mar...@laptop.org -- School Server Architect
 - ask interesting questions
 - don't get distracted with shiny stuff  - working code first
 - http://wiki.laptop.org/go/User:Martinlanghoff
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] make-server-delegations output and importing to XS

2010-04-23 Thread Martin Langhoff
On Fri, Apr 23, 2010 at 1:17 PM, Gonzalo Odiard  wrote:
> Ok, Anything like this?

That's the idea... though one thing we might need to be aware of: CSV
files can have "quoted" values, and even commas within them. Some
exporters may even escape quotes within the value...

That's why I've used python for the other scripts that handle CSV input...

cheers,



m
-- 
 martin.langh...@gmail.com
 mar...@laptop.org -- School Server Architect
 - ask interesting questions
 - don't get distracted with shiny stuff  - working code first
 - http://wiki.laptop.org/go/User:Martinlanghoff
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


[Server-devel] Roadblocks for a central OATS server

2010-04-23 Thread Daniel Drake
Hi Martin,

As discussed we're planning on putting a central internet-accessible
OATS server in La Rioja, in addition to the ones in the schools.
The purpose is to be able to deactivate stolen laptops before their
lease expiry (assuming the thief doesn't take the laptop to the
school, but does put it online somewhere else).

We're not yet in the stages of implementing this part of the system
(still working on the in-school OATS server and delegation
technicalities, obviously more important) but our discussions have
brought up some things which you'd probably be interested in
commenting on:

1. Our central internet-accessible server for this task runs Fedora 12
and will need to be kept up to date with any security fixes, distro
EOLs, etc.
Your olpc-bios-crypto package does not install on F12 (dependency hell).
While me doing a F12 rebuild is any easy option for me, I don't feel
comfortable leaving that process with the deployment team. So we've
showed them how to install it from git in a home directory, which is
easy, documented, and sufficient for these tasks. Problem solved, for
now, but OLPC really needs to get olpc-bios-crypto into Fedora...

2. Installing an OATS server
We need to actually install an OATS server on this F12 system and...well...how?
I assume installing the xs-activation RPM would pull in a lot of XS
packages, and perhaps has implicit dependencies on certain XS elements
(moodle?).
Another option is oatslite, but that doesn't support stolen
notifications and doesn't support delegations -- Guillermo decided
that we can't put the OATS master key on this server so we have to
produce keys for it, and give it delegations for all 60k laptops.
(trivial to add this code to oatslite, but this point remains as
something undecided and uninvestigated for now)

Daniel
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] make-server-delegations output and importing to XS

2010-04-23 Thread Daniel Drake
On 23 April 2010 12:54, Martin Langhoff  wrote:
> On Thu, Apr 22, 2010 at 4:50 PM, Daniel Drake  wrote:
>> OK, no problem.
>> Just curious though, whats the justification behind this? is there an
>> existing project that runs in this way?
>> The single file model just doesn't seem so scalable.
>
> Thanks!  If we have a utility script that splits up such a file, I am happy.
>
> From the PoV of the programmers of the inventory systems we interop
> with, the simplest thing is to export a single file. That is what I
> want to ask from inventory backends.
>
> A single file simplifies little corner cases like "what when a school
> disappears / stops having XOs ?" (empty file? file removal?).
>
> There are number of such corner cases, and  by putting them clearly on
> our side of the interoperability we make them our problem, and we can
> work to make sure we handle them correctly.

OK, I pushed our work to git along with a README.delegation, comments
appreciated.

Daniel
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel