added more documentation about george, and more TODO notes.

diff --git a/doc/TODO b/doc/TODO
index 3538fbf6a8c8831b31783cb48bc13304323f987a..e2fce0e8f7a10f45f4cd43751a835d81a13b905c 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -8,12 +8,33 @@ Detail advantages of monkeysphere: detail the race conditions in ssh,
 Determine how openssh handles multiple processes writing to
    known_hosts/authorized_keys files (lockfile, atomic appends?)
 
-Handle unknown hosts in such a way that they're not always removed
-   from known_hosts file.  Ask user to lsign the host key?
+Handle unverified monkeysphere hosts in such a way that they're not
+   always removed from known_hosts file.  Ask user to lsign the host
+   key?
 
 Handle multiple hostnames (multiple user IDs?) when generating host
    keys with gen-key.
 
+Work out the details (and describe a full use case) for assigning a
+   REVOKER during monkeysphere-server gen_key -- how is this set?  How
+   do we export it so it's available when a second-party revocation is
+   needed?
+
+Actually enable server hostkey publication.
+
+Streamline host key generation, publication, verification.  See
+   doc/george/host-key-publication for what dkg went through on
+   2008-06-19
+
+Streamline authorized_user_ids setup (including question of where
+   authorized_user_ids files should go).  See
+   doc/george/user-id-configuration for what dkg went through on
+   2008-06-19
+
+Ensure that authorized_user_ids are under as tight control as ssh
+   expects from authorized_keys: we don't want monkeysphere to be a
+   weak link in the filesystem.
+
 Make sure alternate ports are handled for known_hosts.
 
 Script to import private key into ssh agent.

diff --git a/doc/george/changelog b/doc/george/changelog
index 8eebe4b3933a0858545bd0a8b802d2a1b8883ba9..afea2d049ce3b06d40c2537e886c3cff58a2f4c9 100644 (file)
--- a/doc/george/changelog
+++ b/doc/george/changelog
@@ -20,8 +20,18 @@
        Installed syslog-ng in their stead, which still gives errors
        related to /proc/kmsg unreadability, but the install completes :/
        
-       * added experimental, juggled pinning: 
-       experimental: 1, unstable: 2    
+       * added experimental
+       * juggled pinning: experimental: 1, unstable: 2 
+       * added mathopd onak, tweaked /etc/mathopd.conf and /etc/onak.conf
+       
+       * installed monkeysphere v0.1-1, changed host key, published
+       them via the local keyserver (see host-key-publication)
+
+       * added local unprivileged user accounts for everyone listed in
+       /usr/share/doc/monkeysphere/copyright
+
+       * configured authorized_user_ids for every user account based on
+       my best guess at their OpenPGP User ID.
        
 2008-06-18 - jrollins
        * installed less, emacs;

diff --git a/doc/george/user-id-configuration b/doc/george/user-id-configuration
new file mode 100644 (file)
index 0000000..d95279d
--- /dev/null
+++ b/doc/george/user-id-configuration
@@ -0,0 +1,21 @@
+2008-06-19 03:00:58-0400
+------------------------
+
+setting up authorized_user_id configuration on george was also more
+cumbersome than it needs to be.  Here's what i (dkg) did:
+
+ GNUPGHOME=/etc/monkeysphere/gnupg gpg --keyserver subkeys.pgp.net --search dkg@fifthhorseman.net
+ GNUPGHOME=/etc/monkeysphere/gnupg gpg --fingerprint dkg@fifthhorseman.net
+
+set up the authorized_user_ids (why are these in /etc/ and not in
+people's home directories?)
+
+echo 'Daniel Kahn Gillmor <dkg@fifthhorseman.net>' > /etc/monkeysphere/authorized_user_ids/dkg
+echo 'Jameson Rollins <jrollins@fifthhorseman.net>' > /etc/monkeysphere/authorized_user_ids/jrollins
+echo 'Micah Anderson <micah@riseup.net>' > /etc/monkeysphere/authorized_user_ids/micah
+echo 'Matthew Goins <mjgoins@openflows.com>' > /etc/monkeysphere/authorized_user_ids/mjgoins
+echo 'Ross Glover <ross@ross.mayfirst.org>' > /etc/monkeysphere/authorized_user_ids/ross
+echo 'Jamie McClelland <jamie@mayfirst.org>' > /etc/monkeysphere/authorized_user_ids/jamie
+echo 'mike castleman <m@mlcastle.net>' > /etc/monkeysphere/authorized_user_ids/mlcastle
+echo 'Elliot Winard <enw@caveteen.com>' > /etc/monkeysphere/authorized_user_ids/enw
+echo 'Greg Lyle <greg@stealthisemail.com>' > /etc/monkeysphere/authorized_user_ids/greg