www-builds mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Niklas Gustavsson <nik...@protocol7.com>
Subject Re: LDAP configuration for the new Hudson master (was: New Machine waiting for Hudson Master)
Date Sat, 17 Jul 2010 07:07:18 GMT
On Sat, Jul 17, 2010 at 1:09 AM, Tony Stevenson <tony@pc-tony.com> wrote:
> On Sat, Jul 17, 2010 at 12:04:38AM +0200, Niklas Gustavsson wrote:
>> Job admins are managed in a LDAP group managed by PMC chairs. Thus, if
>> a PMC wants to add a new Hudson job admin, they manage this themselves
>> without any need for Hudson admins to get in their way. A shell script
>> on people.a.o, like the current one for PMC roster management, will be
>> available. Hudson admins will not have access to manage this group.
>
> Actually, I just set it up so that hudson admins can add users to this group.  Is this
not wanted?  PMC-Chairs will also have access.  I'll document the process separately as
this list isn't the place for that discussion.

Personally, I'm fine with either way.

>> Hudson web access will only be available over https, as we will now
>> use the LDAP passwords.
>
> With this in mind, please do not publicise the current URL, to anyone, as it is not over
SSL.
> Access is currently restricted to the hudson-admin group, once the site is on SSL I will
allow access for everyone again.

Since we haven't migrated any of the jobs, slaves or plugin configs,
the new site is pretty useless to anyone so far :-)

>> Current accounts will be migrated as part of setting up the new Hudson master.
>
> How will this be done?  I presume you mean add all users to the hudson-jobadmin group?

Yes.

/niklas

Mime
View raw message