2.1 KiB
Infrastructure Administration
How to Grant a Access to bob/sysdb
bob is making http calls to the sysdb app. Authorization (https://git.psi.ch/linux-infra/sysdb#authentication-and-authorization) is done via krb5 tokens. Operations outside of environments (creating/changing the owner of/deleting environments) needs to be done by a sysdb admin, ie someone who is a member of the group sysdb-admins. Group membership of the authenticated users is evaluated on the OS level on sysdb.psi.ch. So group memberships can be set both locally or in the AD. This makes it a bit confusing, but both are used.
For the envs (bob env list), only adding and listing are implemented in bob, any other operation, like deletion or modification can only be performed in the sysdb sqlite database itself.
Each env can only have one user and one group assigned to it.
To grant access to different environments data-xxx repositories normal Git access control is used. Nothing overrides the access control of the git server.
linux.psi.ch
linux.psi.ch is hosted from this git repo as git pages. There is a proxy entry for the domain name linux.psi.ch on the F5 reverse proxy, that is managed by the network team, to reach the git pages by https://linux.psi.ch
The HTTPS certificates of the domain linux.psi.ch is managed by the network team.
Email Lists
linux@psi.ch
Right now following people are on the list:
- Marc Caubet
- Derek Feichtinger
- Peter Huesser
- Rene Kapeller
- Gilles Martin
- Leonardo Sala
- Ivano Talamo
- Alvise Dorigo
- Joshua Taylor
- Simon Ebner
- Konrad Bucheli
This email list is administered by Outlook in the following way (if you have manager right):
- Open outlook and go to the address book
- Search for the PSI.Linux mailing list and double click
- Go to modify members (you only see this if you are a manager)
- Click on Add and add a new email address
