[Dev-flock] passwords and security

Lucy R Mendel lmendel at MIT.EDU
Thu Sep 27 08:25:01 EDT 2007


yo,

Now that are repository and trac site is available online we should be 
thinking about security. Your accounts on ThoughtAndMemory with sudo 
permissions are also available! This issue isn't critical today, but it 
could be soon as we publicize more and more.

Currently, you all can commit to trunk and login to trunk with your 
username (sean,mike,eggar,dan,clay,lucy) and the password 'hugin'. You can 
and should modify your password, either with me in person or via the 
following steps:

ssh to thoughtandmemory.org:

$  ssh sean at thoughtandmemory.org
pasword: password

change account password:
$  passwd
follow instructions

change svn password:
$  htpasswd -m /etc/svn-auth-file sean
follow instructions

change trac password:
$  htpasswd -m /var/www/trac/.htpasswd sean
follow instructions

If you don't want an account on ThoughtAndMemory that's fine, let me know. 
We can change passwords together in person (the trac and svn passwords 
have nothing to do with having an account).

Note, I would like to not require trac login, but I haven't been able to 
turn it off successfully yet. Since we might keep it as a short term 
solution, with many more people able to login and add tickets to trac than 
modify trunk, the authorization files for trac and svn are different.

Thanks!
Lucy.



More information about the Dev-flock mailing list