[clue-admin] User setup for "member" accounts

[David Anselmi]

Jed S. Baer wrote:
> On Thu, 30 Dec 2004 17:16:22 -0700
> Jeff Cann wrote:
> 
>>I meant to say that we should 'allow users to change the forwarding
>>address of their clue.denver.co.us email address without sys admin
>>intervention'.
> 
> Well, I think we all understood that we're talking about the forwarding
> address.

Yes.  But the issue is authentication regardless.

> In practice, the number of times this will happen doesn't seem to me to be
> a burden on the admin who'll do the actual work. It's login, change one
> line, run postalias.

I agree.  If we decide we need a level of authentication that is 
burdensome for an admin to perform then we might want to automate it. 
Ditto if we have a large number of members.  But I think we can afford 
to try it manually for now.  We do need to define (and probably 
document) what authentication is acceptible.

[OT] Postfix is like Sendmail in that both need a command run after 
changes to the aliases file.  Exim parses aliases directly. [rant about 
ease of administration snipped]

>>Another thing I thought of is : what are we going to do about removing 
>>forwarding addresses that are no longer valid?

I would guess the admins would notice and deal with those in their daily 
log reviews. ;-)

Obviously they'd use something like logwatch to make that easy.  And 
there's no point arguing about whether reviews need to be done daily, 
weekly, or whatever.

But we should expect our admins to do basic admin work--log reviews and 
software updates (for security purposes).  I think that to do less, as 
we have in the past, is irresponsible to the 'net.

I don't think that fixing dead aliases needs to be an urgent thing.  We 
probably don't have time to chase down good forwards for people which 
leaves deleting the alias.  Whether the bounce comes from CLUE or from 
the next upstream MTA isn't a crisis.  But I'd let the admins decide how 
to handle it once they have some practice with it.

Dave