[sf-lug] SF-LUG web site is being "maintained" ...

[Michael Paoli]

So, let's see, who's got access to update the SF-LUG web pages (besides
myself).

Canonical hostname: balug-sf-lug-v2.balug.org
non-canonical names (e.g. web DNS names) might happen to get you to same
host, but no guarantees that will work and/or always be the case).

Note that it's *not* an SF-LUG machine, or even SF-LUG virtual machine,
but is a BALUG virtual machine which is also hosting some SF-LUG
services, notably: web, DNS (public & master), and also overnightly
backups of SF-LUG's list (mbox) and roster (member email addresses).

Web DocumentRoot? ...
$ fgrep DocumentRoot /etc/apache2/sites-available/Include/www.sf-lug.org
DocumentRoot /var/www/www.sf-lug.org/
And file ownerships/permissions? ...
$ ls -al /var/www/www.sf-lug.org/
total 116
drwxrwsr-x  2 root     sflugwww  4096 May 15 22:22 .
drwxr-xr-x 11 root     root      4096 Jun 18 13:02 ..
-rw-r--r--  1 sflugwww sflugwww 35516 Sep  1  2008 LinuxKongSmall.jpg
-rw-r--r--  1 sflugwww sflugwww 35516 Dec  8  2006 LinuxKongSmall.jpg.test
-rw-r--r--  1 sflugwww sflugwww  2469 Sep  1  2008 functions.php
-rw-r--r--  1 sflugwww sflugwww    55 Sep  1  2008 index.html.test
-rw-r--r--  1 sflugwww sflugwww  3902 Jul 18  2016 index.php
-rw-r--r--  1 sflugwww sflugwww  3864 Aug  3  2008 index.test
-rw-r--r--  1 sflugwww sflugwww  1994 Sep  1  2008 logo-servepath.gif
-rw-r--r--  1 sflugwww sflugwww 13542 Sep  1  2008 silicon_mechanics_logo.gif
$
# su - sflugwww -c id
uid=22035(sflugwww) gid=22035(sflugwww) groups=22035(sflugwww)
#

Who has access?
# (cd /etc/sudoers.d && grep -h 'su.*sflugwww' *)
grantbow        ALL=(root) /bin/su - sflugwww
jstockford      ALL=(root) /bin/su - sflugwww
thawley ALL=(root) /bin/su - sflugwww
#
Who are those folks?
$ awk -F: '{if($1 ~ /^(grantbow|jstockford|thawley)$/)print $5;}' \
> /etc/passwd | sed -e 's/,.*$//'
Jim Stockford
Grant Bowman
Todd Hawley
$
How long has it been since they logged in?
$ lastlog | egrep '^(grantbow|jstockford|thawley) ' | sort -k 9,9n -k  
5,5M -k 6,
6n -k 7,7
grantbow         pts/8    173-8-189-243-sf Sun Apr 28 13:50:11 -0700 2013
thawley          pts/8    104-244-27-45.pu Thu Jan 14 22:05:40 -0800 2016
jstockford       pts/9    173-13-130-174-s Thu Jul 28 21:20:37 -0700 2016
$
Well thank you Jim Stockford!  At least would seem quite probable he
updated the web page less than a year ago.  Haven't seem much other nor
more recent activity (not counting those bits I may do myself ... e.g.
DNS maintenance, operating system maintenance, ...).

Hmmm, who else has access, to, oh, maintain DNS?
# (cd /etc/sudoers.d && fgrep -h bind *)
grantbow        ALL=(root) sudoedit /etc/bind/master/sf-lug.org
grantbow        ALL=(root) sudoedit /etc/bind/master/sf-lug.com
grantbow        ALL=(root) /bin/systemctl reload bind9
jstockford      ALL=(root) sudoedit /etc/bind/master/sf-lug.org
jstockford      ALL=(root) sudoedit /etc/bind/master/sf-lug.com
jstockford      ALL=(root) /bin/systemctl reload bind9
#

So, if I also include myself, total of 4 folks that have access to
update SF-LUG's web content (not including list related content hosted
by Rick Moen on linuxmafia.com),
likewise if I include myself, total of 3 folks that have access to
update/manage SF-LUG's DNS.

There are also 3 folks that have access to the registrar account
controlling sf-lug.org and sf-lug.com - effectively ultimate point of
control if needed (or if/when it needs updating).

So, if someone else wants to update the SF-LUG web site stuff, fine by
me, just get Jim Stockford's endorsement/approval (most notably if I
don't know you at all), and get your relevant information to me:
full name:
contact phone number(s) (home and/or work/office):
email address:
preferred login name(s) (in preference order,
3-8 characters, ASCII lowercase letters and decimal digits,
first character must be lowercase ASCII letter, if none
specified/available, one will be created for you):
ssh public key (optional, and if so, you should save the fingerprints
thereof, so I can verify it with you before activation):


> From: "Michael Paoli" <Michael.Paoli at cal.berkeley.edu>
> Subject: SF-LUG web site is being "maintained" ... Noisebridge, ...  
> Re: SF-LUG meeting notes
> Date: Tue, 20 Jun 2017 18:09:59 -0700

> SF-LUG website.  There are multiple folks that have access to update the
> page ... seems about never that anyone else does it.  Y'all might want to
> take an interest in it.  ;-)  Anyway, I'll follow-up on that *real soon*
> (like overnight or so) on who's got access.  Other folks can also gain
> access - at least if Jim Stockford generally approves (or at least
> doesn't object).  I'd prefer, however, that folks I bother to set up
> such access for, actually use it to help maintain the page(s) there or
> whatever.  Many folks I've set up access and they can't be bothered to
> login, let alone maintain a web page ... just sayin'  ;-)  And if you
> think you're gonna use some Microsoft web page publishing thingy to
> upload the pages using FTP, please don't bother me.  For numerous reasons
> FTP isn't run on the server.  One needs understand how to login via ssh,
> use sudo, and edit a file in a Linux/Unix* environment.  If you can't do
> that, please learn how before bothering to have me create an account for
> you (not that that's an issue with all that have gotten accounts, but it
> sometimes happens.  8-O).  And yes, I've given sessions on ssh(1) and vi(1)
> before - probably have covered both at BALUG in the past.
>
> *or at least how to transfer it and edit it properly elsewhere if need be,
> including dealing with access and permissions and sudo.