RegistryOfAccountsAndPasswords

How can we store our infrastructure account information?

The longer our projects goes on, the less we know what our other infrastructure team members are doing.

We don't currently have a secure registry of accounts and passwords - I would like is to figure out a way that we can do this so that we don't each have a list to lose, and that we can deputise new team members trivially.
  • accounts, setup and howtos are needed - but how do we secure them?
  • there is that FireGPG addin for firefox i keep meaning to try out? - DEAD as of 5/14 but there is something called "WebPG" that sounds similar.

List of Foswiki accounts

Name Url Account Responsible Person Comment
blog https://blog.foswiki.org foswiki.org accounts MichaelDaum  
facebook https://www.facebook.com/foswiki n/a MichaelDaum, LynnwoodBrown Add board members as admins
github https://github.com/ https://github.com/orgs/foswiki/dashboard Sven, Michael, Babar, Paul, Crawford, George & "FoswikiBot" Who has Foswikibot password?
google calendar FoswikiCalendar   MichaelDaum  
mailing lists https://lists.foswiki.org InfrastructureTaskTeam  
sourceforge https://sourceforge.net/p/foswiki/_members/ https://sourceforge.net/projects/foswiki/ see members list  
twitter https://twitter.com/foswiki foswiki MichaelDaum unused
mastodon https://fosstodon.org/@foswiki foswiki MichaelDaum  

Discussion

Got a PasswordPlugin that implements a password formfield with real passwords stored in an offline encrypted database. Does fine with MetaDataPlugin to store lists of passwords in Foswiki.

Checked it in for review Tasks.Item12903.

-- MichaelDaum - 20 May 2014

Personally I think anything like an encrypted database is overkill. A simple file on foswiki.org, only accessible to root, would seem to suffice.

-- CrawfordCurrie - 20 May 2014

In any case we would have to switch f.o to ssl. Btw PasswordPlugin is fine using an sqlite dbi.

-- MichaelDaum - 20 May 2014

No, read my comment. A "simple file, accessible only to root" does not imply web access to that file. I was anticipating you'd have to log in to f.o to read it (via ssh).

I'm not anti-PasswordPlugin, except insofar as it's yet more infrastructure that has to be maintained.

-- CrawfordCurrie - 22 May 2014

SvenDowideit has added me as a manager to the Google+ page (thanks Sven), and I see that it supports the creation of events that can then be added to to other people's calendars. This is good, and satisfies the GA action.

Obviously it is not sufficient for me to be the only manager for the page, however. Any volunteers? All you need is a google+ account (and preferably be a member of foswiki-infra / foswiki-board)

-- CrawfordCurrie - 22 May 2014

I'll volunteer to be one of the calendar managers. That way release info can be put into the calendar.

I've added some comments to the passwords list.

-- GeorgeClark - 22 May 2014

Created a mastodon account for foswiki.

-- MichaelDaum - 18 Sep 2023
 

BasicForm edit

TopicClassification CommunityMatters
Topic Summary
Interested Parties
Related Topics
Topic revision: r14 - 18 Sep 2023, MichaelDaum
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy