RegistryOfAccountsAndPasswords

How can we store our infrastructure account information?

The longer our projects goes on, the less we know what our other infrastructure team members are doing.

We don't currently have a secure registry of accounts and passwords - I would like is to figure out a way that we can do this so that we don't each have a list to lose, and that we can deputise new team members trivially.
  • accounts, setup and howtos are needed - but how do we secure them?
  • there is that FireGPG addin for firefox i keep meaning to try out? - DEAD as of 5/14 but there is something called "WebPG" that sounds similar.

List of Foswiki accounts

Name Url Account Responsible Person Comment
blog http://blog.foswiki.org/wp-login.php (personal accounts) CrawfordCurrie, ColasNahaboo, GeorgeClark, JanKrueger, KoenMartens, MichaelDaum listed wp-administrators still active in the community
facebook https://www.facebook.com/foswiki n/a MichaelDaum, PaulHarvey, LynnwoodBrown Add board members as admins
facebook https://www.facebook.com/pages/Foswiki/42446368483     probably redundant
freecode.com http://freecode.com/ ( use personal account) Marcus, Sven, Crawford & George have access
github https://github.com/ https://github.com/orgs/foswiki/dashboard Sven, Michael, Babar, Paul, Crawford, George & "FoswikiBot" Who has Foswikibot password?
google+   foswiki SvenDowideit (owner) CrawfordCurrie (manager)  
project honey pot http://projecthoneypot.org fowiki-infra@lists.sourceforge.net CrawfordCurrie Password and httpBL code are in DB
roundteam https://roundteam.co foswiki MichaelDaum log in with twitter account; this account retweets everything on the foswiki account tagged #foswiki or addressed to @foswiki
sourceforge mailing lists InfrastructureTaskTeam These can be managed from a SourceForge account. It's a bit obsure though. I have the passwords to a couple of the lists -- George
twitter https://twitter.com/foswiki foswiki MichaelDaum  

Discussion

Got a PasswordPlugin that implements a password formfield with real passwords stored in an offline encrypted database. Does fine with MetaDataPlugin to store lists of passwords in Foswiki.

Checked it in for review Tasks.Item12903.

-- MichaelDaum - 20 May 2014

Personally I think anything like an encrypted database is overkill. A simple file on foswiki.org, only accessible to root, would seem to suffice.

-- CrawfordCurrie - 20 May 2014

In any case we would have to switch f.o to ssl. Btw PasswordPlugin is fine using an sqlite dbi.

-- MichaelDaum - 20 May 2014

No, read my comment. A "simple file, accessible only to root" does not imply web access to that file. I was anticipating you'd have to log in to f.o to read it (via ssh).

I'm not anti-PasswordPlugin, except insofar as it's yet more infrastructure that has to be maintained.

-- CrawfordCurrie - 22 May 2014

SvenDowideit has added me as a manager to the Google+ page (thanks Sven), and I see that it supports the creation of events that can then be added to to other people's calendars. This is good, and satisfies the GA action.

Obviously it is not sufficient for me to be the only manager for the page, however. Any volunteers? All you need is a google+ account (and preferably be a member of foswiki-infra / foswiki-board)

-- CrawfordCurrie - 22 May 2014

I'll volunteer to be one of the calendar managers. That way release info can be put into the calendar.

I've added some comments to the passwords list.

-- GeorgeClark - 22 May 2014
 

BasicForm edit

TopicClassification CommunityMatters
Topic Summary
Interested Parties
Related Topics
Topic revision: r12 - 03 Jun 2014, CrawfordCurrie - This page was cached on 19 Mar 2019 - 02:29.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy