[CLUE-Admin] New server plan [was A Spam Which Raises Questions].

[CLUE President]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 20 April 2004 6:23 pm, David Anselmi wrote:
> CLUE President wrote:
> [...]
>
> > The alternative is to setup spam assassin for our email delivery system. 
> > This is the plan for the new server... sigh.
>
> Speaking of which, Jed mentioned there was a plan.  Can anyone lay it
> out for me?

Dave,

Here was the updated notes from a meeting we (Jed, Lynn, Jeff O. and I had 
back in October).  This is The Plan (tm) as it stood then.

Jeff

- ----------  Forwarded Message  ----------

Subject: CLUE System Upgrade
Date: Sunday 26 October 2003 10:06 pm
From: CLUE President <president at clue.denver.co.us>
To: Lynn Danielson <lynnd at techangle.com>, Jed Baer <thag at frii.com>, Lynn 
Danielson <lynnd at techangle.com>, Jed Baer <thag at frii.com>
Cc: president at clue.denver.co.us

Thanks for meeting on Saturday.  Updated notes below.

I'm still waiting to hear back from Roy about the new server's IP addy (I
expect he'll respond tomorrow when he gets to work).

Jeff

Here's that LJ article Jed mentioned:
 + http://www.linuxjournal.com/article.php?sid=7084

- ------ CLUE Migration Tasks ----------
DNS Record
	We want to switch to cluedenver.org as our primary address.
	We need to update the cluedenver.org record to the new server IP
	a few days in advance and then set the TTL for our record to a
	short period (< 1 day).

	Jeff Cann submitted new .US domains to update our
	primary and secondary name servers.

	Jeff Orrock will look into a secondary DNS service (friend in Palo
	Alto).

	Jed completed the check of hard-coded URLs in HTML/PHP code.

Mail server
	Installed:		sendmail

	Notes:
		Lynn D. will have additional details on members.

	To Do:
		exim is installed on the new server.
		Migrate sendmail aliases to exim.

Mailman
	Installed:		/home/mailman/  (2.0.13)

	To Do:
		rsync current mailman installation (2.0.130
		Upgrade mailman 2.1  (requires python 2.2.2)
		Change list configuration to use 'cluedenver.org' as the address.

		Not required to go live:
		  Install spamassassin.
		  Configure mailman to use spamassassin:
		 + http://www.daa.com.au/~james/articles/mailman-spamassassin/

	Questions:
		1)  Can we use mailman configuration to help with spam?

CVS
	Installed:		/usr/local/cvsroot

	Notes:
		Current installation uses pserver with separate user and passwds.
		Should be configured already for SSH tunneling on new server.

	To Do:
		Check that CVS repository will not allow pserver and use logins.
		Need to rsync /usr/local/cvsroot/ to the new server.
		Migrate website publication CGI script.
			/var/apache/cgi-bin/publish.cgi
			/var/apache/cgi-bin/publish.sh

Web Site
	Installed:		Apache 1.3.12 (oof)  /var/apache

	Notes:
		Migration should be straightforward.
		There is an /admin/ directory, protected by BASIC auth.
		We can probably come up with another way to authenticate
		  admin users than an .htpasswd and .htacess file...

	To Do:
		Obtain latest apache 2.0.x version + php shared object.
		Use publication cgi scripts to check out a copy of the web
		site from the migrated CVS root.
		Confirm that /var/apache/htdocs/admin/.htaccess and
		/var/apache/conf/.htpasswd are migrated.
		Check on migration of the log files to use with apache 2.0.x.
		  At a minimum, we want to copy them to save for stats.

		We need to generate a self-signed SSL certificate to use
		for admin logins (http://cluedenver.org/admin/).

Webalizer
	Installed:		/usr/local/bin/webalizer

	Notes:
		There is a monthly root cron job to generate new statistics.
		There is a yearly job to copy logs to access.year.

	To Do:
		Jeff Cann will remove any webalizer related things from our
		cvs repository and will migrate existing reports and cron jobs
		to the new server.


- -- 
Colorado Linux Users and Enthusiasts (CLUE)
http://cluedenver.org/
Jeffery Cann, President


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFAheHB8E9qvtPugKYRAnN9AJ9MNZJKYEByNyk6x6AjBcvE+xlR+QCglDUz
GCeNe4V9uJoNLxsII3RFKWY=
=izcp
-----END PGP SIGNATURE-----