Opened 8 years ago

Closed 7 years ago

#968 closed task (fixed)

Migrate Subversion and Trac to new hoster

Reported by: Sander Maijers Owned by: Sander Maijers
Priority: major Milestone:
Component: System administration Version:
Keywords: trac.clarin.eu svn.clarin.eu Cc: Dieter Van Uytvanck, Willem Elbers

Description

Motivation
Support from the MPI-PL, which currently hosts these services on the ems04.mpi.nl VM, will likely stop soon (perhaps in the coming weeks).

Task

  1. Create Docker-based stack.
  2. Deploy test setup.
  3. Let users test (developers.)

3.1. Trac e-mail functionality

3.2. Trac Administration actions

3.3. SVN commits, interaction with local repository clones (e.g., because of SVN server-client version mismatches).

  1. Deploy production setup.

Change History (6)

comment:1 Changed 8 years ago by DefaultCC Plugin

Cc: Willem Elbers added

comment:2 Changed 8 years ago by Sander Maijers

Blocker 1
The Trac and SVN both require a developer account. Authentication against user.clarin.eu is currently done via LDAP. Because of issues with the server software OpenDJ, this LDAP server does not do TLS anymore.

#2015-11-17 wilelb: Disabled TLS for LDAP
AuthLDAPURL "ldap://user.clarin.eu:10389/ou=members,dc=clarin,dc=eu?mail?sub?(objectClass=CLARINPerson)" 

We need to re-enable TLS now that we do not host user.clarin.eu and Trac/SVN on the same host anymore.

Solutions
A: Complete #969.
B: Fix OpenDJ configuration.

comment:3 Changed 8 years ago by Willem Elbers

StartTLS is supported by the current ldap server / configuration (this is used by the IDP). An alternative could be to configure svn/trac to use StartTLS instead of ldaps (if supported).

Last edited 8 years ago by Willem Elbers (previous) (diff)

comment:4 Changed 8 years ago by Dieter Van Uytvanck

The ems04 will not be decomissioned before we ask to do so - so this issue is not extremely time-dependent. Therefore solution B (migration to UnityIDM) is preferred, since otherwise we spend effort in getting a connection to work with an LDAP server that will be replaced by another implementation on short term.

comment:5 Changed 8 years ago by Willem Elbers

@Dieter I assume you mean solution A is preferred, since #969 is the ticket about migration to unity-idm

comment:6 Changed 7 years ago by Willem Elbers

Resolution: fixed
Status: newclosed

Migrated to clarinvm

Note: See TracTickets for help on using tickets.