[Sysadmin] [ronr at linuxdude.com: bounces]

[David Kaufman]

David A. Ulevitch <davidu at everydns.net> wrote:
>
>> William Anderson <neuro at well.com> wrote:
>>> I think we need to have local multiple-hands control over our DNS.
>>
>> Don't we?  EveryDNS has a web interface.  Don't we have a login?
>
> There is a login...I just need to know who should and shouldn't have
> access.   I assume Neuro (based on previous DNS request changes) and
> Dean Mah (because of sysadmin)...anyone else?

Currently, anyone in the sysadmin group on tempest can su to root, and
can manage the evolt.org opensrs account, so I guess those are the same
users who may need, and can be trusted with DNS permissions.

Currently those people are:

  dmah: Dean Mah <dmah at shaw.ca>
  garrett: Garrett Coakley <garrett at polytechnic.co.uk>
  genghis: John Handelaar <john at videoisland.com>
  emkay: Mike King <mike.king at redroom.biz>
  neuro: William Anderson <neuro at well.com>
  dkaufman: David Kaufman <david at gigawatt.com>

Perhaps you should be there too!

When we setup tempest, we all swapped GPG keys here on the list so I
could create user accounts for everyone on the box.  Security by public
committee is a just *bit* hair-raising :-)

So I "published" the evolt opensrs credentials in a 600 file in my home
directory so those with root will be able to get to it after I walk into
the proverbial bus, so i guess that would be a good place for the DNS
login, too...

Here is my public key again.  If you'd like, go ahead and encrypt the
EveryDNS login info to me and post it here.  I'll put it on the server
with the OpenSRS login, and if you throw in your password choice, I'll
create a user account for you on tempest too.  Since you've been the
keeper of the DNS this long, I'm sure we could use you as another
bus-redundant sysadmin for the new server, if you're interested, as well
as domain registrar operator :-)

-dave


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
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=9DFQ
-----END PGP PUBLIC KEY BLOCK-----