Workshop:2019/06/01: Difference between revisions
From SUWS-wiki
DavidNewman (talk | contribs) (Added suggested modules for SOWN modularization) |
DavidNewman (talk | contribs) (Added update keepalived task) |
||
| Line 16: | Line 16: | ||
** More SOWN nodes | ** More SOWN nodes | ||
** Make it easier to deploy eduroam on own hardware | ** Make it easier to deploy eduroam on own hardware | ||
* Update keepalived on gateway servers | |||
* Investigate reboot issues with sown-auth2 where routes do not get setup as needed | * Investigate reboot issues with sown-auth2 where routes do not get setup as needed | ||
* Planning for what needs to be done before upgrading sown-auth2 OS | * Planning for what needs to be done before upgrading sown-auth2 OS | ||
Revision as of 23:02, 29 May 2019
<< Meeting 30 May 2019 18:00:00 | Current Event: 1 June 2019 11:00:00 | Meeting 6 June 2019 18:00:00 >>
[[|]] | Current Workshop:
|
[[|]]
Workshop (to be) held from 11:00-17:00 on 2019/06/01 in Zepler CLS Lecture Room
SOWN Workshop
Task list
- Look at how the SOWN works and consider how it can be modularised
- Discuss how to implement SOWN login for SSH to SOWN servers.
- Possible first modules: RADIUS authentication and SSO to sit on top.
- May help with implementation of SSH login to individual servers for individual users described above.
- Consider how we can expand SOWN coverage
- More SOWN nodes
- Make it easier to deploy eduroam on own hardware
- Update keepalived on gateway servers
- Investigate reboot issues with sown-auth2 where routes do not get setup as needed
- Planning for what needs to be done before upgrading sown-auth2 OS
- Update to SOWN firmware to fix known issue with dnsmasq amongst other bug fixes
- Remove routes to force traffic to ECS DMZ servers, via the gateways' DMZ interface as ECS firewall changes should have been made.
- Switch SSH checks for sown-www and suws-marconi to be proxy checks using nrpe on sown-auth2
