CAcert System Admins discussion list

[Daniel Black <daniel AT cacert.org>]

On Wed, 24 Dec 2008 08:20:49 am Ian G (Audit) wrote:
> As Advisory, I took some minutes of the meeting yesterday:
>
>    http://wiki.cacert.org/wiki/Advisory/AMinutes20081222#preview
>

great work folks. Good to see system admin governance coming through. Keep up 
the good work.

few questions from the minutes (and additional notes):

what do the following mean?
  Misc:
  as -> Internal Audit (test taken 2008 december) 
  (unknown when final result is revealed) 

Note: hot standby is a specific kind of redundancy
  "Redundant versus hot standby"

Notes: mysql has replication that is an online pull from the slave that has 
uses in backup and DR (non hot swap). Mysql clustering is available for hot 
standby requirements. I don't have a huge experience in these though they 
seem fairly easy from the training I've done.
  "MySQL has online PUSH?"

what does this mean?
   don't want any software development effort put in 


   Backups:
   where? 
this sort of conflicts with offsite backups below
      for security and reliability: they should be in the same place


what? a CA organisation cannot securely transmit data?
   Security cannot be ensured for transmission and storage of remote data

kinda funny to look at this standalone statement
     offsite backups need to be offsite.

is the following statement based on that we cannot securely transmit data? I 
think we should try to push backups to a different geographic area in case of 
natural disaster or localised routing issues. (pending suitable site and 
bandwidth cost determination, etc)
   Make it incremental: dailies stay in the same town


Seems excessive. System admins have a responsibility to ensure operation 
systems which would include, to my understanding, making changes that would 
effect that operation or security of a system.
   Software Development:
   sysadms will be kicked out if they fix code

> Action points are in there for some, in bold.  Out of the discussions
> came two other pages, being:
>
>    http://wiki.cacert.org/wiki/BusinessProcesses

good idea. For processes associated with systems I'm planning on linking them 
off the 'Applicable Documentation' section of 
http://wiki.cacert.org/wiki/SystemAdministration/Systems/Email

>    http://wiki.cacert.org/wiki/DisasterRecovery

great start.
>
> (strongly related, but separated for other purpose).  At some stage, the
> "first cut" notion of Disaster Recovery should slot into the SM.
>
>
> I'm sure there are errors, please yell or better yet, use the Wiki!
>
> iang
> _______________________________________________
> CAcert-sysadm mailing list
> CAcert-sysadm AT lists.cacert.org
> https://lists.cacert.org/cgi-bin/mailman/listinfo/cacert-sysadm



-- 
Daniel Black 
(daniel AT cacert.org)
Email Administrator

Attachment: smime.p7s
Description: S/MIME cryptographic signature