[SAC] [Fwd: [support.osuosl.org #11303] OSGeos New Servers]

[Alex Mandel]

Anyone have any particular preference, it does sound like no matter
which way we go, you should all be reading up on how to generate an ssh
key if you don't already have one. Personally I find the enigmail plugin
for Thunderbird the easiest for setting up a key, and don't forget to
upload the public key to one of the keyservers MIT or Ubuntu should be
fine- I think they all sync.

Thanks,
Alex

-------- Original Message --------
Subject: [support.osuosl.org #11303] OSGeos New Servers
Date: Mon, 15 Mar 2010 18:35:35 +0000
From: Lance Albertson via RT

On Mon Mar 15 18:30:13 2010, ramereth wrote:
> Since you have so many users that need access, would it be better or
> worse to just setup a shared account that everyone uses? I'm ok either
> way, however I think it might be it might be easier for us to manage a
> single user across both boxes. Otherwise we have to create access to
> three boxes (jumphost, osgeo3, & osgeo4). I'm also assuming that you
> can restrict access via authorized_keys.
> 
> Let me know what you think. I'm planning on working on documentation
> today so that deploying and managing servers should be easier.

Another idea to bypass requiring shell access to the jumphost is to
setup an ipsec ssl certificate you can use and VPN into our backend
network.

-- 
Lance Albertson
Systems Administrator / Architect
Open Source Lab