Difference between revisions of "Authentication Server"

From sshcWiki
Jump to navigation Jump to search
(Edited to do list)
Line 5: Line 5:
 
Here's a list of things that need to still be done before we put it into production.
 
Here's a list of things that need to still be done before we put it into production.
  
* Install in a VM
+
* <strike>Install in a VM</strike> Done
 
* Get properly backed up  
 
* Get properly backed up  
* Get our PEM from IANA, (request submitted March 9 2014)
+
* <strike>Get our PEM from IANA, (request submitted March 9 2014)</strike> Done
 
* Extend the LDAP schema to hold additional member information (CRM ID, join date, ID card number, key number, etc)
 
* Extend the LDAP schema to hold additional member information (CRM ID, join date, ID card number, key number, etc)
* Set up CA and such
+
* <strike>Set up CA and such</strike> Done
 
* Set up VPN link between sshc0 and the space (this depends on the CA being set up properly)  
 
* Set up VPN link between sshc0 and the space (this depends on the CA being set up properly)  
 
* Migrate user data from 389 on sshc0 to FreeIPA
 
* Migrate user data from 389 on sshc0 to FreeIPA
 
* Enroll all existing systems in it
 
* Enroll all existing systems in it
 
* Document adding users
 
* Document adding users
* Document enrolling systems
+
* <strike>Document enrolling systems</strike> Done

Revision as of 13:41, 30 March 2014

We're looking to use FreeIPA (http://www.freeipa.org/page/Main_Page) for an authentication store within the space.

To do list

Here's a list of things that need to still be done before we put it into production.

  • Install in a VM Done
  • Get properly backed up
  • Get our PEM from IANA, (request submitted March 9 2014) Done
  • Extend the LDAP schema to hold additional member information (CRM ID, join date, ID card number, key number, etc)
  • Set up CA and such Done
  • Set up VPN link between sshc0 and the space (this depends on the CA being set up properly)
  • Migrate user data from 389 on sshc0 to FreeIPA
  • Enroll all existing systems in it
  • Document adding users
  • Document enrolling systems Done