Workshop:2019/06/01 - Revision history

DavidNewman: Added some possible modules

2019-05-30T09:57:43Z

Added some possible modules

← Older revision		Revision as of 09:57, 30 May 2019
Line 11:		Line 11:
	* Look at how the SOWN works and consider how it can be modularised		* Look at how the SOWN works and consider how it can be modularised
	** Discuss how to implement SOWN login for SSH to SOWN servers.		** Discuss how to implement SOWN login for SSH to SOWN servers.
	** Possible first ~~modules:~~ RADIUS authentication and ~~SSO to sit on top.~~		** Possible Modules
	*** May help with implementation of SSH login to individual servers for individual users described above.		*** User Authentication
			**** Possible abstract with implementation for first RADIUS and maybe later others and
			*** Single Sign On (uses User authentication)
			*** VPN (OpenVPN sits underneath)
			*** Node setup
			*** Node admin
			*** Node config
			*** Node firmware build
			*** Node package management
			*** Monitoring (nodes and servers)
			*** Firewall
			*** Routing
			*** Usage accounting
			** May help with implementation of SSH login to individual servers for individual users described above.
	* Consider how we can expand SOWN coverage		* Consider how we can expand SOWN coverage
	** More SOWN nodes		** More SOWN nodes

DavidNewman: Added upgrade radius2 and vpn2

2019-05-30T09:08:28Z

Added upgrade radius2 and vpn2

← Older revision		Revision as of 09:08, 30 May 2019
Line 25:		Line 25:
	** Remove routes to force traffic to ECS DMZ servers, via the gateways' DMZ interface as ECS firewall changes should have been made		** Remove routes to force traffic to ECS DMZ servers, via the gateways' DMZ interface as ECS firewall changes should have been made
	** Switch SSH checks for sown-www and suws-marconi to be proxy checks using nrpe on sown-auth2		** Switch SSH checks for sown-www and suws-marconi to be proxy checks using nrpe on sown-auth2
			* Upgrade sown-radius2 and sown-vpn2 to Ubuntu 18.04
			** Maybe worth installing from scratch and using Ansible playbooks to reinstall stuff.

	=== Todo list tasks ===		=== Todo list tasks ===

DavidNewman: /* Todo list tasks */

2019-05-30T07:01:10Z

Todo list tasks

← Older revision		Revision as of 07:01, 30 May 2019
Line 27:		Line 27:

	=== Todo list tasks ===		=== Todo list tasks ===
	It is unlikely we would actually do any of these tasks but they are useful to bb aware of during our discussions of points in the main task list.		It is unlikely we would actually do any of these tasks but they are useful to be aware of during our discussions of points in the main task list.
	* [[sown:todo:task/628\|Munge check_eapol script to allow it to send RADIUS accounting start and stop messages to keep iSolutions happy]]		* [[sown:todo:task/628\|Munge check_eapol script to allow it to send RADIUS accounting start and stop messages to keep iSolutions happy]]
	* [[sown:todo:task/590\|Consider how to setup openwrt git repo and branches so it can easily be pushed/pulled on buildroot and buildroot-dev]]		* [[sown:todo:task/590\|Consider how to setup openwrt git repo and branches so it can easily be pushed/pulled on buildroot and buildroot-dev]]

DavidNewman: Added todo list tasks

2019-05-30T07:00:35Z

Added todo list tasks

@@ Line 17: / Line 17: @@
 ** Make it easier to deploy eduroam on own hardware
 * Update keepalived on gateway servers
 * Investigate reboot issues with sown-auth2 where routes do not get setup as needed
 * Planning for what needs to be done before upgrading sown-auth2 OS
 * Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes
-* Remove routes to force traffic to ECS DMZ servers, via the gateways' DMZ interface as ECS firewall changes should have been made.
+* [[sown:todo:task/676|Routing issues between sown-www and sown-monitor]]
-* Switch SSH checks for sown-www and suws-marconi to be proxy checks using nrpe on sown-auth2
+** Remove routes to force traffic to ECS DMZ servers, via the gateways' DMZ interface as ECS firewall changes should have been made

DavidNewman: Added update keepalived task

2019-05-29T23:02:26Z

Added update keepalived task

← Older revision		Revision as of 23:02, 29 May 2019
Line 16:		Line 16:
	** More SOWN nodes		** More SOWN nodes
	** Make it easier to deploy eduroam on own hardware		** Make it easier to deploy eduroam on own hardware
			* Update keepalived on gateway servers
	* Investigate reboot issues with sown-auth2 where routes do not get setup as needed		* Investigate reboot issues with sown-auth2 where routes do not get setup as needed
	* Planning for what needs to be done before upgrading sown-auth2 OS		* Planning for what needs to be done before upgrading sown-auth2 OS

DavidNewman: Added suggested modules for SOWN modularization

2019-05-29T22:35:32Z

Added suggested modules for SOWN modularization

← Older revision		Revision as of 22:35, 29 May 2019
Line 11:		Line 11:
	* Look at how the SOWN works and consider how it can be modularised		* Look at how the SOWN works and consider how it can be modularised
	** Discuss how to implement SOWN login for SSH to SOWN servers.		** Discuss how to implement SOWN login for SSH to SOWN servers.
			** Possible first modules: RADIUS authentication and SSO to sit on top.
			*** May help with implementation of SSH login to individual servers for individual users described above.
	* Consider how we can expand SOWN coverage		* Consider how we can expand SOWN coverage
	** More SOWN nodes		** More SOWN nodes

DavidNewman: Added a couple more tasks

2019-05-29T22:31:35Z

Added a couple more tasks

← Older revision		Revision as of 22:31, 29 May 2019
Line 17:		Line 17:
	* Planning for what needs to be done before upgrading sown-auth2 OS		* Planning for what needs to be done before upgrading sown-auth2 OS
	* Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes		* Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes
			* Remove routes to force traffic to ECS DMZ servers, via the gateways' DMZ interface as ECS firewall changes should have been made.
			* Switch SSH checks for sown-www and suws-marconi to be proxy checks using nrpe on sown-auth2

DavidNewman: Added extra point

2019-05-29T14:40:26Z

Added extra point

← Older revision		Revision as of 14:40, 29 May 2019
Line 15:		Line 15:
	** Make it easier to deploy eduroam on own hardware		** Make it easier to deploy eduroam on own hardware
	* Investigate reboot issues with sown-auth2 where routes do not get setup as needed		* Investigate reboot issues with sown-auth2 where routes do not get setup as needed
			* Planning for what needs to be done before upgrading sown-auth2 OS
	* Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes		* Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes

DavidNewman: Added a couple of tasks

2019-05-28T12:59:42Z

Added a couple of tasks

← Older revision		Revision as of 12:59, 28 May 2019
Line 10:		Line 10:
	== Task list ==		== Task list ==
	* Look at how the SOWN works and consider how it can be modularised		* Look at how the SOWN works and consider how it can be modularised
			** Discuss how to implement SOWN login for SSH to SOWN servers.
	* Consider how we can expand SOWN coverage		* Consider how we can expand SOWN coverage
	** More SOWN nodes		** More SOWN nodes
	** Make it easier to deploy eduroam on own hardware		** Make it easier to deploy eduroam on own hardware
	* Investigate reboot issues with sown-auth2 where routes do not get setup as needed		* Investigate reboot issues with sown-auth2 where routes do not get setup as needed
			* Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes

DavidNewman: Added task list

2019-05-25T21:09:59Z

Added task list

New page

{{WorkshopInfo
|time=11:00
|date=2019/06/01
|endtime=17:00
|enddate=2019/06/01
|location=59/1257
}}
== SOWN Workshop ==

== Task list ==
* Look at how the SOWN works and consider how it can be modularised
* Consider how we can expand SOWN coverage
** More SOWN nodes
** Make it easier to deploy eduroam on own hardware
* Investigate reboot issues with sown-auth2 where routes do not get setup as needed