Project Development Meeting (IF4.31 10:00 - 12:00) - Minutes 2014-01-08

Present: Chris, Toby, Richard, Ian, Craig, Stephen, Roger, Alastair, Neil, George, Iain, Graham, Ross, Tim (convener and minutes)

1. Minutes of last meeting

Accepted.

2. Matters arising

Update on actions from last meeting.

• Take to CSG policy on not archiving and just deleting accounts after grace period. [Action Alastair]
• Redevelop User Documentation
  • Submit the skeleton system status summary from Nagios project (for maintaining the status tab). [Action Stephen]
  • We should be getting emailed (annually?) when pages we own need to be reviewed. Turn this on. [Action Alison]
  • Run a scan of pages in www.dice and wiki.inf/DICE which need to be pulled into computing.help. Done fair bit, ongoing. Done.
  • Look at the support contact page to see if we can migrate into Drupal. [Action Alastair]
• Account reconciliation
  • Can we use a trigger such as a host drop-off spanning map for a number of weeks to automate host key principal deletion (in some fashion) and could this be part of Prometheus? For consideration and comment. This is on the list.
• Deploy Git/Gerrit as full services
  • Add security header to Git server as ssh will be accessable from outside ed. Done, but could add a change to iptables to restrict further ssh from the host. [Action Craig]
  • Use of AFS+SSH to solve end user managed access control means that iFriend write access to Git repositories for collaboration will probably not work as-is (would require full DICE account). Needs consideration (e.g. use https instead) but does not need to block this approach. [Action Craig]
• Review of OpenLDAP DICE client configuration
  • Investigate using SSSD minimal cacheing to protect against connectivity issues, although this may just be an action to create a separate project. [Action Ian]
• Securing School Web Servers
  • Sends notes from meeting to COs. Done.
• Options for two-factor authentication
  • Include investigation of whether OTP support can be done at the same time. Add to project descriptor. Done.
• Windows 7 Upgrade
  • Take to CEG for ratification. [Action Tim]

3. Approved Projects

See Activity with annotated comments from meeting.

4. Project Status Changes

None.

5. System Blog Articles

• Git

6. Technical Talk

Graham did a talk on WSGI and Apache Session Handling.

7. AOB

-- TimColles - 03 Feb 2014