[clue-admin] User setup for "member" accounts

[David Anselmi]

Collins Richey wrote:
[...]
> So, in my estimation,  we are down to the following:
> 
> 1. Maintaining email aliases. Just as we don't provide login accounts
> for members, I recomment that we NOT provide an external means to
> update the aliases file. We can provide an online form that submits a
> request to the appropriate admin (or group of admins).

We should spell out how these requests will be authenticated.  Email 
(perhaps with a confirmation) is probably good enough but not an 
unauthenticated form.

[...]
> 3. This leaves the method that users employ to update their
> ~/public_html up for grabs. Jed has suggested scp or sftp. There's
> also the possibility of including a member update function in the web
> site redesign. Your thoughts, please.

Seems reasonable to use OpenSSH for the authentication piece of this.  I 
can't think of anything better at the moment.  Might be nice to support 
rsync which should ride on ssh the same as scp and sftp do.  I expect 
it's easy to limit ssh to the file transfer stuff we want and nothing 
else (though I don't have the docs handy at the moment).

Dave