aboutsummaryrefslogtreecommitdiffstats
path: root/admin-log.org
diff options
context:
space:
mode:
Diffstat (limited to 'admin-log.org')
-rw-r--r--admin-log.org56
1 files changed, 41 insertions, 15 deletions
diff --git a/admin-log.org b/admin-log.org
index 7c68e7d..5df64d6 100644
--- a/admin-log.org
+++ b/admin-log.org
@@ -79,45 +79,71 @@ The =/etc/fstab= is no longer correct since "ext4dev" is not a supported file sy
- create an SQL-script that tests all privileges, and try it on /roundcube@localhost/ and /roundcube@%/.
- create that user on /antilop/
+ <2011-12-21 ons> When users are added, the passwords are generated on a local computer, e.g. /cantor/ using the Perl function
+ : sub smd5 {
+ : my $pw = shift;
+ : my $salt = shift || &make_salt();
+ : return "{SMD5}" . pad_base64( MIME::Base64::encode( Digest::MD5::md5( $pw . $salt ) . $salt, '' ) );
+ : }
+
+ written by Dominik Schulz, but suggested on Dovecote's wiki: [[http://wiki.dovecot.org/Authentication/PasswordSchemes]["Password Shemes"]]. Dot (.) means /concatenation/. This gives a salted 64-base MD5 encryption.
+
+ Reading Roundcube's password plugin's README, suggests we should use the last two examples in section 2.1. Also read [[http://www.roundcubeforum.net/7-third-party-contributions/46-api-based-plugins/6624-dovecot-sql-driver-password.html]["Dovecot-SQL Driver for Password"]] on Roundcube's wiki carefully. The password seem to be doubled salted.
* Preparation for migration of IMAP from /antilop/ to /mistral/ <2011-12-20 tis>
+** Åtgärder <2011-12-21 ons>
+
+ - Undersök inställningarna för IMAP
+
** Administrator's user accounts.
- The administrators /gustav/, /ljo/, and /skangas/ are in /\/etc\/sudoers/, and \/
+ The administrators /gustav/, /ljo/, and /skangas/ are in /\/etc\/sudoers/, and /\/home\/<name>\// name directories are copied from /antilop/.
** Files from /etc.
- Files to transfer to /mistral/ are:
+ <2011-12-20 tis> Files to transfer to /mistral/ are:
: bacula/ dovecot/ etckeeper/ logcheck/ mysql/ ossec-init.conf postfix/ rkhunter.conf rsyslog.conf ssh/sshd_config ssl/
- Archived in /\/home\/gustav\/ect-antilop-2011-12-20.tar.gz/, ready for transfer.
+ Archived in /\/home\/gustav\/ect-antilop-2011-12-20.tar.gz/, ready for transfer.
-** check when done
+ <2011-12-21 ons> LJO transferred all gz-files to /mistral/. All config files are also installed on the system, so there should be nothing left to do (almoast). Check POSTFIX configuration once again.
- - that /etc/cron.d and friends are the same as on /antilop/
+** Check when done
-** change luks keys
+ - that /\/etc\/cron.d/ and friends are the same as on /antilop/ <2011-12-20 tis>
+ - POSTFIX configuration <2011-12-21 ons>
-cite
+** Mounting of file systems, etc.
- Basically, you just add an additional password(LUKS allows up to 8 different passwords for the same volume) and delete the original password. Here's a link that describes the process in detail:
+ <2011-12-21 ons> The partition /\/dev\/mapper\/fripost/ -> /\/home\/mail/ is created and encrypted. Maybe the mount and encryption procedure needs to go through again.
-http://www.saout.de/tikiwiki/tiki-in...eviceUsingLUKS
+** Change luks keys
+
+Cite from Internet.
- : # cryptsetup luksAddKey /dev/sdc1
+Basically, you just add an additional password(LUKS allows up to 8 different passwords for the same volume) and delete the original password. Here's a link that describes the process in detail:
-Enter any LUKS passphrase: (enter an existing password for this partition)
-key slot 0 unlocked.
-Enter new passphrase for key slot: (enter the extra password)
+http://www.saout.de/tikiwiki/tiki-in...eviceUsingLUKS
+: # cryptsetup luksAddKey /dev/sdc1
: # cryptsetup luksDelKey /dev/sdc1 0
-** paket
+** Packets
+
+ <2011-12-20 tis> Alla paket som ska installeras och tas bort, både från dpkg-selections på antilop och från fripost-docs, finns i /\/home\/gustav\/selections-2011-12-20.tar.gz/ på antilop.
+
+ <2011-12-21 ons> LJO transferred all gz-files to /mistral/. All packets of interest are installed and those that should be removed are pruned.
+
+** OSsec
+
+ <2011-12-21 ons> OSsec is installed and running. Hope that the settings are good.
+
+** Synk of Maildir dirs.
- Alla paket som ska installeras och tas bort, både från dpkg-selections på antilop och från fripost-docs, finns i /home/gustav/selections-2011-12-20.tar.gz på antilop.
+ <2011-12-21 ons> LJO synced mails once.
** WIP: making the switch