diff options
| author | Matt Goins <mjgoins@openflows.com> | 2008-06-20 14:23:41 -0400 |
|---|---|---|
| committer | Matt Goins <mjgoins@openflows.com> | 2008-06-20 14:23:41 -0400 |
| commit | 3a6f611a52d56b919b8c50a6e1700af43ff49578 (patch) | |
| tree | 1bbbb9fef2438c47c5801ea822099c97fabdcf6f /doc/george/user-id-configuration | |
| parent | b75cb97e42dd3327942d8b32cac2d9ee97e9aa4a (diff) | |
| parent | 9efdaab59edb2ff4454082f6a36c9dc0d90b8885 (diff) | |
Merge branch 'master' of http://lair.fifthhorseman.net/~dkg/git/monkeysphere
Conflicts:
gpg2ssh/Makefile
Diffstat (limited to 'doc/george/user-id-configuration')
| -rw-r--r-- | doc/george/user-id-configuration | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/doc/george/user-id-configuration b/doc/george/user-id-configuration new file mode 100644 index 0000000..9a7f4d2 --- /dev/null +++ b/doc/george/user-id-configuration @@ -0,0 +1,40 @@ +2008-06-19 03:00:58-0400 +------------------------ + +setting up authorized_user_id configuration on george was also more +cumbersome than it needs to be. Here's what i (dkg) did: + +monkeysphere-server trust-keys 0EE5BE979282D80B9F7540F1CCD2ED94D21739E9 + +monkeysphere-server update-user-userids dkg 'Daniel Kahn Gillmor <dkg@fifthhorseman.net>' +monkeysphere-server update-user-userids jrollins 'Jameson Rollins <jrollins@fifthhorseman.net>' +monkeysphere-server update-user-userids micah 'Micah Anderson <micah@riseup.net>' +monkeysphere-server update-user-userids mjgoins 'Matthew Goins <mjgoins@openflows.com>' +monkeysphere-server update-user-userids ross 'Ross Glover <ross@ross.mayfirst.org>' +monkeysphere-server update-user-userids jamie 'Jamie McClelland <jamie@mayfirst.org>' +monkeysphere-server update-user-userids mlcastle 'mike castleman <m@mlcastle.net>' +monkeysphere-server update-user-userids enw 'Elliot Winard <enw@caveteen.com>' +monkeysphere-server update-user-userids greg 'Greg Lyle <greg@stealthisemail.com>' + + +then i added a scheduled: + + monkeysphere-server update-users + +to run hourly via /etc/crontab + +and made sure that root's keys were working with a temporary symlink +(see TODO about that business) + +and then modified /etc/ssh/sshd_config with: + + AuthorizedKeysFile /var/cache/monkeysphere/authorized_keys/%u + + +Some outstanding questions: + + * Should we ship a scheduled monkeysphere-server update-users cron + job automatically? + + * why was i not prompted to confirm the trust-keys line, which seems + like the most delicate/sensitive line of all of them? |