RegistryOfAccountsAndPasswords

How can we store our infrastructure account information?

The longer our projects goes on, the less we know what our other infrastructure team members are doing.

We don't currently have a secure registry of accounts and passwords - I would like is to figure out a way that we can do this so that we don't each have a list to lose, and that we can deputise new team members trivially.

• accounts, setup and howtos are needed - but how do we secure them?
• there is that FireGPG addin for firefox i keep meaning to try out? - DEAD as of 5/14 but there is something called "WebPG" that sounds similar.

List of Foswiki accounts

Name	Url	Account	Responsible Person	Comment
blog	https://blog.foswiki.org	foswiki.org accounts	MichaelDaum
facebook	https://www.facebook.com/foswiki	n/a	MichaelDaum, LynnwoodBrown	Add board members as admins
github	https://github.com/	https://github.com/orgs/foswiki/dashboard	Sven, Michael, Babar, Paul, Crawford, George & "FoswikiBot"	Who has Foswikibot password?
google calendar	FoswikiCalendar		MichaelDaum
mailing lists	https://lists.foswiki.org		InfrastructureTaskTeam
sourceforge	https://sourceforge.net/p/foswiki/_members/	https://sourceforge.net/projects/foswiki/	see members list
twitter	https://twitter.com/foswiki	foswiki	MichaelDaum	unused
mastodon	https://fosstodon.org/@foswiki	foswiki	MichaelDaum

Discussion

Got a PasswordPlugin that implements a password formfield with real passwords stored in an offline encrypted database. Does fine with MetaDataPlugin to store lists of passwords in Foswiki.

Checked it in for review Tasks.Item12903.

-- MichaelDaum - 20 May 2014

Personally I think anything like an encrypted database is overkill. A simple file on foswiki.org, only accessible to root, would seem to suffice.

-- CrawfordCurrie - 20 May 2014

In any case we would have to switch f.o to ssl. Btw PasswordPlugin is fine using an sqlite dbi.

-- MichaelDaum - 20 May 2014

No, read my comment. A "simple file, accessible only to root" does not imply web access to that file. I was anticipating you'd have to log in to f.o to read it (via ssh).

I'm not anti-PasswordPlugin, except insofar as it's yet more infrastructure that has to be maintained.

-- CrawfordCurrie - 22 May 2014

SvenDowideit has added me as a manager to the Google+ page (thanks Sven), and I see that it supports the creation of events that can then be added to to other people's calendars. This is good, and satisfies the GA action.

Obviously it is not sufficient for me to be the only manager for the page, however. Any volunteers? All you need is a google+ account (and preferably be a member of foswiki-infra / foswiki-board)

-- CrawfordCurrie - 22 May 2014

I'll volunteer to be one of the calendar managers. That way release info can be put into the calendar.

I've added some comments to the passwords list.

-- GeorgeClark - 22 May 2014

Created a mastodon account for foswiki.

-- MichaelDaum - 18 Sep 2023

Commenting is disabled while not logged in