/[pdpsoft]/trunk/egi-pilot
ViewVC logotype

Log of /trunk/egi-pilot

View Directory Listing Directory Listing


Sticky Revision:

Revision 2990 - Directory Listing
Modified Mon Apr 4 16:28:18 2016 UTC (5 years, 9 months ago) by tamasb
change the way hostname is extracted and refereced from ansible_fqdn to a more appropriate inventory_hostname


Revision 2989 - Directory Listing
Modified Mon Apr 4 15:40:57 2016 UTC (5 years, 9 months ago) by tamasb
restart network after disabling NetworkManager in ifcfg files


Revision 2970 - Directory Listing
Modified Fri Apr 1 14:51:01 2016 UTC (5 years, 9 months ago) by tamasb
removed unused web.xml templates


Revision 2969 - Directory Listing
Modified Fri Apr 1 14:29:18 2016 UTC (5 years, 9 months ago) by msalle
Remove unneeded ansible_fqdn settings, update hostcred filenames


Revision 2968 - Directory Listing
Modified Fri Apr 1 14:15:00 2016 UTC (5 years, 9 months ago) by msalle
Remove unneeded ansible_fqan
Rename host credentials into ansible_fqdn plus extension


Revision 2967 - Directory Listing
Modified Fri Apr 1 13:58:27 2016 UTC (5 years, 9 months ago) by tamasb
configure sshd: disable pw logins, add verbosity


Revision 2966 - Directory Listing
Modified Fri Apr 1 13:28:03 2016 UTC (5 years, 9 months ago) by tamasb
surrounded x.stdout_lines with {{ }} to avoid deprication 


Revision 2965 - Directory Listing
Modified Fri Apr 1 12:56:38 2016 UTC (5 years, 9 months ago) by tamasb
network.yml sets NM_CONTROLLER to no for every interface


Revision 2964 - Directory Listing
Modified Fri Apr 1 12:05:35 2016 UTC (5 years, 9 months ago) by tamasb
moved proxy extfile to templates


Revision 2963 - Directory Listing
Modified Fri Apr 1 10:24:05 2016 UTC (5 years, 9 months ago) by tamasb
updated vo-portal interface (simplified)


Revision 2962 - Directory Listing
Modified Fri Apr 1 08:52:41 2016 UTC (5 years, 9 months ago) by tamasb
add empty index page in webroot


Revision 2961 - Directory Listing
Modified Thu Mar 31 16:21:05 2016 UTC (5 years, 9 months ago) by tamasb
enable iptable task in credstore role


Revision 2960 - Directory Listing
Modified Thu Mar 31 16:03:41 2016 UTC (5 years, 9 months ago) by tamasb
install tomacat manager and make tomcat only listen on localhost


Revision 2959 - Directory Listing
Modified Thu Mar 31 15:32:39 2016 UTC (5 years, 9 months ago) by tamasb
adding missing template


Revision 2958 - Directory Listing
Modified Thu Mar 31 15:10:04 2016 UTC (5 years, 9 months ago) by tamasb
create index.html with DemoCA pem and signing policy


Revision 2957 - Directory Listing
Modified Thu Mar 31 14:15:24 2016 UTC (5 years, 9 months ago) by tamasb
add empty index.html to apache


Revision 2956 - Directory Listing
Modified Thu Mar 31 13:24:04 2016 UTC (5 years, 9 months ago) by tamasb
fix mapapp typo


Revision 2955 - Directory Listing
Modified Thu Mar 31 12:45:18 2016 UTC (5 years, 9 months ago) by msalle
Fix mapapps: should not contain \$ but $


Revision 2954 - Directory Listing
Modified Thu Mar 31 12:44:47 2016 UTC (5 years, 9 months ago) by tamasb
correct mapapp path typo


Revision 2953 - Directory Listing
Modified Thu Mar 31 12:14:41 2016 UTC (5 years, 9 months ago) by msalle
Remove unused lines


Revision 2952 - Directory Listing
Modified Thu Mar 31 12:13:59 2016 UTC (5 years, 9 months ago) by msalle
Add myproxy restart handler, remove no-longer-needed ca setup script, add
separate group ownership to secrets yml


Revision 2951 - Directory Listing
Modified Thu Mar 31 12:09:13 2016 UTC (5 years, 9 months ago) by msalle
Add basic ansible.cfg file logging


Revision 2950 - Directory Listing
Modified Thu Mar 31 12:08:48 2016 UTC (5 years, 9 months ago) by msalle
Refactor basic into proper role, similar to master-portal


Revision 2947 - Directory Listing
Modified Wed Mar 30 16:02:29 2016 UTC (5 years, 9 months ago) by msalle
Add content of basic.yml to other two 'role' files


Revision 2946 - Directory Listing
Modified Wed Mar 30 15:55:58 2016 UTC (5 years, 9 months ago) by msalle
Reorganize basic into a proper role.


Revision 2945 - Directory Listing
Modified Wed Mar 30 15:19:28 2016 UTC (5 years, 9 months ago) by tamasb
set hostname for hosts from ansible_fqdn


Revision 2942 - Directory Listing
Modified Wed Mar 30 13:52:19 2016 UTC (5 years, 9 months ago) by tamasb
updated tasks and variables to configure myproxy (no more simple_ca_script)


Revision 2941 - Directory Listing
Modified Wed Mar 30 13:31:19 2016 UTC (5 years, 9 months ago) by tamasb
add links and premission to host creds for myproxy


Revision 2940 - Directory Listing
Modified Wed Mar 30 13:27:35 2016 UTC (5 years, 9 months ago) by msalle
Remove unused tasks and now unused template simple_ca_setup.sh which has been
ansible-ized.


Revision 2939 - Directory Listing
Modified Wed Mar 30 13:26:15 2016 UTC (5 years, 9 months ago) by tamasb
updated tasks and defaults instead of simple_ca_setup.sh


Revision 2938 - Directory Listing
Modified Wed Mar 30 13:20:54 2016 UTC (5 years, 9 months ago) by msalle
Split simple_ca_setup.sh into sub templates and remove unused tasks and
templates


Revision 2937 - Directory Listing
Modified Wed Mar 30 13:02:08 2016 UTC (5 years, 9 months ago) by msalle
Cleanup templates and split simple_ca_setup.sh into sub templates for different
files.


Revision 2936 - Directory Listing
Modified Wed Mar 30 10:40:51 2016 UTC (5 years, 9 months ago) by msalle
split between user and group


Revision 2935 - Directory Listing
Modified Wed Mar 30 10:39:23 2016 UTC (5 years, 9 months ago) by msalle
Remove robot tarball creation script from robotCA


Revision 2934 - Directory Listing
Modified Tue Mar 29 10:38:17 2016 UTC (5 years, 9 months ago) by msalle
Update name and description for the services.


Revision 2933 - Directory Listing
Modified Tue Mar 29 10:15:42 2016 UTC (5 years, 9 months ago) by msalle
Use templates instead of explicit text (and fix copy/paste error)


Revision 2932 - Directory Listing
Modified Tue Mar 29 08:20:28 2016 UTC (5 years, 9 months ago) by msalle
Remove eduPersonScopedAffiliation (not useful enough)


Revision 2931 - Directory Listing
Modified Fri Mar 25 15:42:14 2016 UTC (5 years, 9 months ago) by msalle
Update Shibboleth metadata (templates) for OnlineCA and PUSP CA.


Revision 2930 - Directory Listing
Modified Fri Mar 25 14:10:45 2016 UTC (5 years, 9 months ago) by msalle
Update metadata for SP (/Shibboleth.sso/Metadata) mainly for requested
attributes.


Revision 2928 - Directory Listing
Modified Wed Mar 23 17:06:52 2016 UTC (5 years, 9 months ago) by msalle
Fix typo in PUSP DN and fix missed CA->Robot in simple CA setup.


Revision 2927 - Directory Listing
Modified Wed Mar 23 13:13:14 2016 UTC (5 years, 9 months ago) by msalle
Backport improvements from robot/PUSP CA


Revision 2926 - Directory Listing
Modified Wed Mar 23 11:33:28 2016 UTC (5 years, 9 months ago) by msalle
Split access task into access and iptables tasks.


Revision 2925 - Directory Listing
Modified Wed Mar 23 11:23:40 2016 UTC (5 years, 9 months ago) by msalle
Backport of updates in masterportal-pusp


Revision 2924 - Directory Listing
Modified Wed Mar 23 11:22:27 2016 UTC (5 years, 9 months ago) by msalle
Updated version of the masterportal installation. Mostly a split of the iptables
between the basic set, credstore and masterportal.


Revision 2923 - Directory Listing
Modified Wed Mar 23 10:50:38 2016 UTC (5 years, 9 months ago) by msalle
Fix two mistakes in simple CA setup script: extensions where not installed in
same directory as where they were looked for. Robot subjectDN got CA part twice.


Revision 2922 - Directory Listing
Modified Tue Mar 22 20:33:07 2016 UTC (5 years, 9 months ago) by msalle
Fix typo and reorder the disabling/enabling of the services.


Revision 2921 - Directory Listing
Modified Tue Mar 22 15:12:19 2016 UTC (5 years, 9 months ago) by msalle
Rename masterportal_env.yml into masterportal_env.yml.template since it's not
the real file to use.


Revision 2920 - Directory Listing
Modified Tue Mar 22 15:07:11 2016 UTC (5 years, 9 months ago) by msalle
- Don't yet chown the hostcert/key in hostcreds.yml since myproxy isn't yet
  installed
- set proper ntp servers (not localhost alias).
- don't install RH7-like iptables-services and don't disable not-yet-existing
  firewalld.
- enable nscd, fetch-crl-cron
- need to specify path to task files.


Revision 2919 - Directory Listing
Modified Tue Mar 22 13:58:11 2016 UTC (5 years, 9 months ago) by msalle
Add basic ansible.cfg file, for logging to file


Revision 2918 - Directory Listing
Modified Tue Mar 22 13:55:40 2016 UTC (5 years, 9 months ago) by msalle
Fix typos: no tabs, need spaces, and fix indentation of explicit tasks


Revision 2917 - Directory Listing
Modified Tue Mar 22 13:46:52 2016 UTC (5 years, 9 months ago) by msalle
PUSP master portal with changes as implemented in the robot CA


Revision 2916 - Directory Listing
Modified Mon Mar 21 16:25:07 2016 UTC (5 years, 9 months ago) by msalle
Update for robotCA instead of onlineCA, i.e. using robot cert instead of real CA
cert:
- cafrontend_env.yml:
  remove unused myproxy_ca_cn and add robot_tarball
- delegserver_env.yml:
  update hostname
- update egi: update hostname
- roles/cafrontend/handlers/main.yml: add restart myproxy server handler
- fix some typos
- copy hostcert/key using a new task hostcreds.yml
- adapt myproxy.yml to rerun when the serial does not exist (the cacert is
  extracted from the robots tarball)
- add gpg key for shibboleth repo and install using a copy task (see repos.yml)
- don't create repos using 'yumrepo' from ansible extras (very unstable) but use
  a simple template: security_shibboleth.repo.j2 and eugridpma.repo.j2
- don't use IGTF repositories (util) and IGTF repositories (lcg)
- replace robot task with extracting the tarball
- update simple_ca_setup.sh.j2 for using robot cert instead of cacert.
- update README for egi instead of Nikhef
- update typo in ansible.cfg


Revision 2915 - Directory Listing
Modified Mon Mar 21 08:15:28 2016 UTC (5 years, 9 months ago) by msalle
- Remove unused kickstart file
- Clone OnlineCA for robot CA (will need updating)


Revision 2914 - Directory Listing
Modified Fri Mar 18 17:47:16 2016 UTC (5 years, 10 months ago) by tamasb
changed robot cert to tarball


Revision 2913 - Directory Listing
Modified Fri Mar 18 17:40:10 2016 UTC (5 years, 10 months ago) by tamasb
imporved basic_env and ip6tables


Revision 2912 - Directory Listing
Modified Fri Mar 18 16:29:12 2016 UTC (5 years, 10 months ago) by tamasb
updated to latest masterportal ansible scripts


Revision 2911 - Directory Listing
Modified Fri Mar 18 16:16:07 2016 UTC (5 years, 10 months ago) by tamasb
uncommented the cafrontend role


Revision 2909 - Directory Listing
Modified Fri Mar 18 15:31:47 2016 UTC (5 years, 10 months ago) by tamasb
switched symlinked wars to their real part
made impovment for other bits too


Revision 2908 - Directory Listing
Modified Fri Mar 18 15:28:27 2016 UTC (5 years, 10 months ago) by msalle
Leave robot stuff in a tarball


Revision 2906 - Directory Listing
Modified Fri Mar 18 14:58:35 2016 UTC (5 years, 10 months ago) by msalle
Forgot to writeout key to $ROBOT_KEY


Revision 2905 - Directory Listing
Modified Fri Mar 18 14:56:24 2016 UTC (5 years, 10 months ago) by msalle
Adding ePUID (eduPersonUniqueId) attribute.


Revision 2904 - Directory Listing
Modified Fri Mar 18 14:44:55 2016 UTC (5 years, 10 months ago) by msalle
Minor update


Revision 2903 - Directory Listing
Modified Fri Mar 18 14:22:07 2016 UTC (5 years, 10 months ago) by msalle
Update robot script to use custom extensions in order to insert the right OID.


Revision 2902 - Directory Listing
Modified Fri Mar 18 13:55:26 2016 UTC (5 years, 10 months ago) by msalle
Add note on rebuilding the jar and war files


Revision 2901 - Directory Listing
Modified Fri Mar 18 13:51:39 2016 UTC (5 years, 10 months ago) by msalle
Adding separate script to create robot cert using our shiny new myproxy-server


Revision 2896 - Directory Listing
Modified Fri Mar 18 11:44:33 2016 UTC (5 years, 10 months ago) by msalle
remove unused offline CA


Revision 2895 - Directory Listing
Modified Fri Mar 18 11:21:00 2016 UTC (5 years, 10 months ago) by msalle
Adding CA + Robot cert setup script


Revision 2892 - Directory Listing
Added Fri Mar 18 10:10:36 2016 UTC (5 years, 10 months ago) by msalle
Clone AARC/Elixir/RCAuth setup for EGI pilot


grid.support@nikhef.nl
ViewVC Help
Powered by ViewVC 1.1.28