Workshop:2016/02/14

Workshop (to be) held on 2016/02/14 at 11:00 in Mary Campbell Room

Previous workshop: 16 April 2015 17:30:00 Next workshop: 25 February 2016 18:00:00

Task List

• Node Firmware

• VM Builds

• Projects
  • Eduroam Extender
  • SOWN[at]Anywhere
  • SOWN[at]Coordinates
  • SOWN-Zepler replacement

• Todo List
  • Figure out why Dropbear on nodes appears to be crashing since SSH password check has been introduced
  • Figure out why nagios-apid sometimes stalls on monitor
  • Figure out why backing up the database causes issues with RADIUS accounting
  • Fix credentials script so that if client cert exists, but we're still in setup mode things don't fail
  • Configure server-side openvpn tunnels to work with ipv6
  • Configure our RADIUS server to disallow remote authentication of non-academic users, then open relevant ports
  • Improve security of our OpenWRT packages
  • Some users can only login to www.sown.org.uk/secure and Icinga using username with uppercase first letter
  • Fix firewalling on sown-vms so ping/ssh works for the IPv6 address on the SOWN interface
  • download_package does not timeout or attempt retries
  • Get SNMP working properly on DD nodes so UPGRADEABLE check can run successfully
  • Add support for client isolation on wireless interface.
  • Make update_openvpn clear old configs
  • Allow node config to specify additional DNS servers for selected domains and make this configurable from the admin site
  • Make radmatrix graphs available via public radmatrix
  • Investigate whether usage stats for deployments get deleted after 3 months?
  • Alter auth2:/etc/openvpn/update_openvpn to remove vpn config files for servers that are no longer configured
  • swap 'sown' and 'atheros' packages trees on the public website once all nodes have the config
  • Make openvpn try to start each vpnserver config file independently
  • remove new nodes dependency on sown-auth when installing
  • Check/add support for IPv6 on nodes where host network supports IPv6.