Page MenuHomeDevCentral
Feed Advanced Search

Jun 3 2016

dereckson created T848: hotglue.nasqueron.org serves http:// content.
Jun 3 2016, 17:06 · Servers
dereckson closed T516: hotglue.nasqueron.org returns a 500 error as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson closed T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson closed T517: Apache SuEXEC isn't configured on Ysul as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson added a comment to T517: Apache SuEXEC isn't configured on Ysul.

Should normally definitively fixed with this:

Jun 3 2016, 17:01 · Servers
dereckson added a comment to T824: Tests for SuEXEC on Ysul.

Another thing to test: SuEXEC AP_DOC_ROOT should be /var/wwwroot.

Jun 3 2016, 16:59 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T214: Software security issues on Ysul.

So for reference, we can now customize SuEXEC settings.

Jun 3 2016, 16:58 · security, Servers
dereckson updated subscribers of T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
dereckson created T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
Sandlayth updated subscribers of T846: Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:11 · Servers, Nasqueron Docker deployment squad
Sandlayth renamed T846: Migrate Pootle from Ysul to a docker container on Dwellers from Migrate Pottle from Ysul to a docker container on Dwellers to Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:08 · Servers, Nasqueron Docker deployment squad
Sandlayth created T846: Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:05 · Servers, Nasqueron Docker deployment squad
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul as "Open".

docroot switched back to /usr/local/www/data

Jun 3 2016, 15:44 · Servers
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Open.
Jun 3 2016, 15:44 · Servers
dereckson added a comment to T516: hotglue.nasqueron.org returns a 500 error.

Still the same error:

Jun 3 2016, 15:42 · Servers
dereckson created T845: Create a wiki farm.
Jun 3 2016, 15:31 · Servers

Jun 2 2016

dereckson closed T492: When using a front-end server with SSL termination, back-end serves http:// links., a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
Jun 2 2016, 04:59 · Nasqueron Docker deployment squad, Servers, Auth Grove

May 31 2016

Sandlayth added a comment to T824: Tests for SuEXEC on Ysul.

We can have the complete path to the executable through

httpd -V | grep SUEXEC_BIN | grep -o "/.*" | sed 's/.$//'
May 31 2016, 22:19 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T824: Tests for SuEXEC on Ysul.

So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.

May 31 2016, 21:28 · Operations sprints (Consolidate them all), Servers
dereckson closed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as Resolved.

That doesn't need any Postfix restart.

May 31 2016, 21:19 · Nasqueron Docker deployment squad, Mail, Servers
dereckson raised the priority of T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from High to Unbreak Now!.
May 31 2016, 20:52 · Nasqueron Docker deployment squad, Mail, Servers
dereckson added a subtask for T271: Deploy Auth Grove to login.nasqueron.org: T492: When using a front-end server with SSL termination, back-end serves http:// links..
May 31 2016, 18:52 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson renamed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from renew SSL certificate for mail.nasqueron.org to Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container.
May 31 2016, 17:10 · Nasqueron Docker deployment squad, Mail, Servers

May 30 2016

dereckson triaged T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as High priority.
May 30 2016, 14:31 · Nasqueron Docker deployment squad, Mail, Servers

May 23 2016

dereckson added projects to T841: Add a #nolog feature to PhabricatorBot: Servers, IRC, DevCentral.
May 23 2016, 16:37 · DevCentral, IRC, Servers

May 22 2016

dereckson added a comment to T271: Deploy Auth Grove to login.nasqueron.org.

1#!/bin/sh
2
3# -------------------------------------------------------------
4# Auth Grove
5# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6# Author: Sébastien Santoro aka Dereckson
7# Project: Nasqueron
8# Created: 2016-05-21
9# Description: SSO for Nasqueron services.
10# Image: nasqueron/auth-grove
11# Services used: MySQL server (acquisitariat)
12# Docker volume (/data/notifications/storage)
13# -------------------------------------------------------------
14
15# -------------------------------------------------------------
16# Container parameters
17# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
18
19INSTANCE_NAME=login
20PORT=25080
21MYSQL_INSTANCE=acquisitariat
22STORAGE=/data/login/storage
23CANONICAL_URL=http://login.nasqueron.org
24
25# -------------------------------------------------------------
26# Database parameters
27#
28# Get credentials from zr
29# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
30
31MYSQL_HOST=mysql
32MYSQL_USER=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67 username`
33MYSQL_PASS=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67`
34MYSQL_DB=$INSTANCE_NAME
35
36# -------------------------------------------------------------
37# Run the container
38# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
39
40# Checks container isn't running
41docker-container-status $INSTANCE_NAME > /dev/null
42if [ "$?" -lt 2 ]; then
43 echo "Container is already running."
44 echo "To force relaunch, try docker stop $INSTANCE_NAME ; docker rm $INSTANCE_NAME ; $0"
45 exit 1
46fi
47
48mkdir -p $STORAGE
49chcon -Rt svirt_sandbox_file_t $STORAGE
50chown 431:433 $STORAGE
51docker run -t -d \
52 --link $MYSQL_INSTANCE:$MYSQL_HOST \
53 -p $PORT:80 \
54 -e DB_HOST=$MYSQL_HOST \
55 -e DB_DATABASE=$MYSQL_DB \
56 -e DB_USERNAME=$MYSQL_USER \
57 -e DB_PASSWORD=$MYSQL_PASS \
58 -e CANONICAL_URL="$CANONICAL_URL" \
59 --name $INSTANCE_NAME nasqueron/auth-grove
60
61echo "Deployment done at `date`."
62exit 0

May 22 2016, 20:27 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson closed T839: Current URL detection code in views aren't coherent, a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
May 22 2016, 20:23 · Nasqueron Docker deployment squad, Servers, Auth Grove

May 21 2016

dereckson closed T838: Disable gulp-notify, a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
May 21 2016, 22:13 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added subtasks for T271: Deploy Auth Grove to login.nasqueron.org: T838: Disable gulp-notify, T837: Investigate gulp issue to minimize CSS, T836: Update MySQL users table in migration, T835: Commit storage/ folder.
May 21 2016, 22:08 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added a comment to T271: Deploy Auth Grove to login.nasqueron.org.
Dwellers
$ mysql-acquisitariat-client 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 25258597
Server version: 5.7.11 MySQL Community Server (GPL)
May 21 2016, 16:08 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added a revision to T271: Deploy Auth Grove to login.nasqueron.org: D376: 502 for login.nasqueron.org.
May 21 2016, 15:35 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson moved T271: Deploy Auth Grove to login.nasqueron.org from Backlog to Working on on the Servers board.
May 21 2016, 15:07 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson moved T271: Deploy Auth Grove to login.nasqueron.org from Backlog to Working on on the Nasqueron Docker deployment squad board.
May 21 2016, 15:06 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson claimed T271: Deploy Auth Grove to login.nasqueron.org.
May 21 2016, 15:03 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson created T834: Upgrade vma.nasqueron.org from 3.0.12 to 3.0.15.
May 21 2016, 14:34 · Nasqueron Docker deployment squad, Servers, Mail
dereckson added a subtask for T833: Decommission bioty.co: T832: Decommission mail.bioty.co.
May 21 2016, 14:31 · Servers, bioty.co hosting
dereckson added a parent task for T832: Decommission mail.bioty.co: T833: Decommission bioty.co.
May 21 2016, 14:31 · Servers, Mail, bioty.co hosting
dereckson created T833: Decommission bioty.co.
May 21 2016, 14:31 · Servers, bioty.co hosting
dereckson closed T832: Decommission mail.bioty.co as Resolved.

Done, Let's encrypt certificates renewd successfully for mail servers (now independant certificates).

May 21 2016, 14:30 · Servers, Mail, bioty.co hosting
dereckson created T832: Decommission mail.bioty.co.
May 21 2016, 14:17 · Servers, Mail, bioty.co hosting

May 17 2016

dereckson added a project to T827: Install reptyr on Ysul: Servers.
May 17 2016, 15:55 · Servers

May 13 2016

Sandlayth removed a revision from T768: Create a HE tunnel for Eglide: Restricted Differential Revision.
May 13 2016, 11:31 · Eglide, IPv6, Servers
Sandlayth added a revision to T826: Create a systemd timer to renew letsencrypt certificat on Dwellers: Restricted Differential Revision.
May 13 2016, 11:26 · User-Sandlayth, Servers
Sandlayth added a revision to T768: Create a HE tunnel for Eglide: Restricted Differential Revision.
May 13 2016, 11:26 · Eglide, IPv6, Servers

May 12 2016

dereckson raised the priority of T826: Create a systemd timer to renew letsencrypt certificat on Dwellers from Normal to High.

We need that before June, the next renewal time window.

May 12 2016, 12:34 · User-Sandlayth, Servers
dereckson updated the task description for T826: Create a systemd timer to renew letsencrypt certificat on Dwellers.
May 12 2016, 12:33 · User-Sandlayth, Servers
Sandlayth created T826: Create a systemd timer to renew letsencrypt certificat on Dwellers.
May 12 2016, 10:50 · User-Sandlayth, Servers
dereckson closed T825: Renew Let's encrypt certificate for notifications.nasqueron.org as Resolved.
May 12 2016, 10:02 · Servers
dereckson added a comment to T825: Renew Let's encrypt certificate for notifications.nasqueron.org.

I've ran letsencrypt renew on Dwellers, then reloaded nginx.

May 12 2016, 10:02 · Servers
dereckson added a project to T825: Renew Let's encrypt certificate for notifications.nasqueron.org: Servers.
May 12 2016, 09:57 · Servers
dereckson added a revision to T824: Tests for SuEXEC on Ysul: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:53 · Operations sprints (Consolidate them all), Servers
dereckson removed a revision from T823: Missing suexec on ysul: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:53 · Servers
dereckson removed a revision from T818: Add banner on Eglide: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:52 · Eglide, Servers
dereckson added a revision to T823: Missing suexec on ysul: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:52 · Servers
dereckson added a revision to T818: Add banner on Eglide: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:49 · Eglide, Servers
dereckson created T824: Tests for SuEXEC on Ysul.
May 12 2016, 09:35 · Operations sprints (Consolidate them all), Servers
dereckson closed T823: Missing suexec on ysul as Resolved.

Same procedure than in

for T508:

May 12 2016, 09:31 · Servers

May 10 2016

Sandlayth added a revision to T768: Create a HE tunnel for Eglide: D370: Salt configuration for IPv6 for Debian.
May 10 2016, 07:19 · Eglide, IPv6, Servers

May 6 2016

dereckson added a comment to T823: Missing suexec on ysul.

Probably deinstalled during Apache update. Or maybe they don't ship
SuEXEC at all in the binary package:

May 6 2016, 07:02 · Servers

May 5 2016

amj created T823: Missing suexec on ysul.
May 5 2016, 21:58 · Servers
amj added projects to T822: SSL certificates: migrate from Startcom to Let's encrypt: security, Servers.
May 5 2016, 14:28 · Servers, security

May 4 2016

dereckson created T819: Web hosting on Eglide.
May 4 2016, 17:53 · Eglide, Salt, IRC, Servers
dereckson added a project to T818: Add banner on Eglide: Servers.
May 4 2016, 17:50 · Eglide, Servers

Apr 28 2016

dereckson triaged T816: Install Python jenkinsapi module on Ysul as Normal priority.
Apr 28 2016, 13:59 · Servers
dereckson added a project to T816: Install Python jenkinsapi module on Ysul: Servers.

Trying a Python script to ask Jenkins to start a job:

Apr 28 2016, 13:58 · Servers

Apr 22 2016

Sandlayth closed T778: DNS configuration for eglide.org as Resolved.
Apr 22 2016, 16:01 · Eglide, IRC, Servers
Sandlayth closed T778: DNS configuration for eglide.org, a subtask of T767: Run a shell service allowing IRC connections, as Resolved.
Apr 22 2016, 16:01 · Eglide, IRC, Servers
dereckson added a comment to T778: DNS configuration for eglide.org.

Okay, looks good.

Apr 22 2016, 15:55 · Eglide, IRC, Servers

Apr 21 2016

Sandlayth added a comment to T778: DNS configuration for eglide.org.

IPv6 configured:

*.eglide.org 300 IN A 212.47.244.42
@ 300 IN A 212.47.244.42
www.eglide.org 300 IN A 212.47.244.42
eglide.org 10800 IN AAAA 2001:470:1f13:896:0:c0de:15:11fe
eglide.org 10800 IN SSHFP 1 1 23d53659502c8926754b8adb2784279db14b8b24
eglide.org 10800 IN SSHFP 1 2 bf0cbd68b0e7b25b28f81f5c3bf5bf135e1846f5435a258a71055533d9fcb750
eglide.org 10800 IN SSHFP 2 1 a5f162fd1a969f0cf6517b987baabd5e622790e1
eglide.org 10800 IN SSHFP 2 2 2f1ef927f698c751a5d199d2eaacea675cf1e81db917e8daa14a6957e32d9daa
eglide.org 10800 IN SSHFP 3 1 44d267dc76fcf634f178aba0c54c56dc9d79f70f
eglide.org 10800 IN SSHFP 3 2 1547976c85f83babc2534fbb82b1475e7bf230f29fd5ffec1de83bf55bf60bc5
eglide.org 10800 IN SSHFP 4 1 165403ebd193c90af5223a196c2cd150daa0be0a
eglide.org 10800 IN SSHFP 4 2 d2d38e7e7ffd0cb6968d2711df9843fa0c8825c8636fde0ab3d69c22e59fe81c
Apr 21 2016, 22:40 · Eglide, IRC, Servers
Sandlayth added a comment to T778: DNS configuration for eglide.org.

SSHFP configured:

Apr 21 2016, 22:12 · Eglide, IRC, Servers

Apr 20 2016

dereckson closed T813: Renew www.espace-win.org certificate as Resolved.

So the issue was this nginx block, which deny access to .well-known like anything else starting with a dot:

Apr 20 2016, 22:21 · security, Servers
dereckson added a comment to T813: Renew www.espace-win.org certificate.
$ letsencrypt renew
[...]
-------------------------------------------------------------------------------
Processing /usr/local/etc/letsencrypt/renewal/www.espace-win.org.conf
-------------------------------------------------------------------------------
2016-04-20 22:10:33,464:WARNING:letsencrypt.renewal:Attempting to renew cert from /usr/local/etc/letsencrypt/renewal/www.espace-win.org.conf produced an unexpected error: Failed authorization procedure. dropbox.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://dropbox.espace-win.org/.well-known/acme-challenge/AFcGawsTLFqpJwWWZDmMh4LHjMVRkIbAfbq13_6qM40 [212.83.187.132]: 403, files.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://files.espace-win.org/.well-known/acme-challenge/43QDyWupIPxeAlNMyXgvDezCIMf-6kGxvAn2SzBIrak [212.83.187.132]: 403, forum.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://forum.espace-win.org/.well-known/acme-challenge/rHPn1p3iNsjXBzgAC0Hk-npvdCRF1qmJTrohgFkmugM [212.83.187.132]: 403, espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://espace-win.org/.well-known/acme-challenge/o_7sf9acLUEuHzVQNOHBcHvTG73l7xlP8mMX6nhx22c [212.83.187.132]: 403, pastebin.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://pastebin.espace-win.org/.well-known/acme-challenge/QCzu4WhOSjhRPzH6BvjMgAn2tggV1qbBW0q9tdyYACs [212.83.187.132]: 403, assets.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://assets.espace-win.org/.well-known/acme-challenge/LU-KuSB2bzPYmxw2vACtLu6yZj8ygXkAZiPxwHOMcHE [212.83.187.132]: 403, excel.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://excel.espace-win.org/.well-known/acme-challenge/5iaG0F-_T5a2TKlFWDxTqvBxg6GD50B_YfY5sxolNQ0 [212.83.187.132]: 403, www.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.espace-win.org/.well-known/acme-challenge/Pw6LYupam92EIy330xYlAuHuKvNKpp6unoVU8UAOrmw [212.83.187.132]: 403, gd.espace-win.org (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://gd.espace-win.org/.well-known/acme-challenge/SP1gRHzjZR39Ai9lZXQvEsTi9i7f0dYSL2bbR_bPOY4 [212.83.187.132]: 403. Skipping.
Apr 20 2016, 22:12 · security, Servers
dereckson created T813: Renew www.espace-win.org certificate.
Apr 20 2016, 22:08 · security, Servers

Apr 10 2016

dereckson closed T809: Scale roles/shellserver/users/ to support several users account as Resolved by committing rOPSc0fd36490c7d: Scale roles/shellserver/users/ to support several users account.
Apr 10 2016, 22:26 · Eglide, Salt, Servers
dereckson added a comment to T778: DNS configuration for eglide.org.
eglide.org has address 212.47.244.42
eglide.org mail is handled by 10 spool.mail.gandi.net.
eglide.org mail is handled by 50 fb.mail.gandi.net.
Apr 10 2016, 22:08 · Eglide, IRC, Servers
dereckson moved T809: Scale roles/shellserver/users/ to support several users account from Backlog to Pending review on the Servers board.
Apr 10 2016, 21:25 · Eglide, Salt, Servers
dereckson added a revision to T809: Scale roles/shellserver/users/ to support several users account: D359: Scale roles/shellserver/users/ to support several users account.
Apr 10 2016, 21:16 · Eglide, Salt, Servers
dereckson changed the visibility for T809: Scale roles/shellserver/users/ to support several users account.
Apr 10 2016, 21:16 · Eglide, Salt, Servers
dereckson added a comment to T795: Allow through sudo users from salt group to run commands as salt user on Ysul.

So finally we use a specific salt group instead of using wheel.

Apr 10 2016, 20:56 · Salt, Servers
dereckson renamed T795: Allow through sudo users from salt group to run commands as salt user on Ysul from Allow through sudo users from wheel group to run commands as salt user on Ysul to Allow through sudo users from salt group to run commands as salt user on Ysul.
Apr 10 2016, 20:55 · Salt, Servers
dereckson closed T795: Allow through sudo users from salt group to run commands as salt user on Ysul as Resolved by committing rOPS7d36cf5c0110: Allow salt group's users to run salt commands.
Apr 10 2016, 20:54 · Salt, Servers
dereckson closed D352: Allow salt group's users to run salt commands by committing rOPS7d36cf5c0110: Allow salt group's users to run salt commands (authored by Sandlayth).
Apr 10 2016, 20:54 · Servers, Salt
dereckson closed T795: Allow through sudo users from salt group to run commands as salt user on Ysul, a subtask of T156: Kickstart Salt Nasqueron infrastructure, as Resolved.
Apr 10 2016, 20:54 · Eglide, Salt, Servers
dereckson accepted D352: Allow salt group's users to run salt commands.
Apr 10 2016, 20:50 · Servers, Salt
dereckson updated the diff for D352: Allow salt group's users to run salt commands.
  • %wheel → %salt
  • added rc script
Apr 10 2016, 20:49 · Servers, Salt
dereckson requested changes to D352: Allow salt group's users to run salt commands.

A specific group for salt will be better.

Apr 10 2016, 20:41 · Servers, Salt
dereckson retitled D352: Allow salt group's users to run salt commands from Allow wheel group's users to use docker commands to Allow salt group's users to run salt commands.
Apr 10 2016, 20:40 · Servers, Salt
dereckson created T809: Scale roles/shellserver/users/ to support several users account.
Apr 10 2016, 16:26 · Eglide, Salt, Servers

Apr 9 2016

dereckson added projects to P187 ASCII art logo for Eglide: design, IRC, Servers.
Apr 9 2016, 10:47 · Servers, IRC, design
dereckson added revisions to T767: Run a shell service allowing IRC connections: D353: New unit for shellserver: users, D355: [Eglide] Base software for generic shell servers.
Apr 9 2016, 01:25 · Eglide, IRC, Servers
dereckson triaged T806: rsyslogd: action 'action 9' suspended as Low priority.

I stopped the systemd service, then launched manually with debug mode (rsyslog -dn) and can't repro the issue.

Apr 9 2016, 00:22 · User-Dereckson, Eglide, Servers

Apr 8 2016

dereckson changed the visibility for D5: Adding HTML homepage.
Apr 8 2016, 23:22 · Servers
dereckson created T806: rsyslogd: action 'action 9' suspended.
Apr 8 2016, 21:04 · User-Dereckson, Eglide, Servers
dereckson created T804: Provision a new hypervisor.
Apr 8 2016, 17:07 · Servers

Apr 2 2016

dereckson added a comment to T783: Run an extra SSH server on Ysul for OTP/Yubikey.

This works:

Apr 2 2016, 01:15 · security, Servers

Apr 1 2016

dereckson closed T803: Users can't create subdirectories in /var/tmp/whom/ as Resolved.
$ mkdir /var/tmp/whom/paladox
$ chown paladox:shell /var/tmp/whom/paladox
$ chmod 1777 /var/tmp/whom
Apr 1 2016, 22:38 · Servers
dereckson created T803: Users can't create subdirectories in /var/tmp/whom/.
Apr 1 2016, 22:29 · Servers
dereckson added a comment to T783: Run an extra SSH server on Ysul for OTP/Yubikey.

Hmmm, we need to recompile another OpenSSH server to be able to change the PAM service name

Apr 1 2016, 21:50 · security, Servers
dereckson reassigned T795: Allow through sudo users from salt group to run commands as salt user on Ysul from dereckson to Sandlayth.
Apr 1 2016, 21:45 · Salt, Servers
dereckson moved T795: Allow through sudo users from salt group to run commands as salt user on Ysul from Backlog to Working on on the Servers board.
Apr 1 2016, 21:45 · Salt, Servers