3. Installation notesΒΆ

In order to set up the ovequota and shibboleth modules provided by this package, you need to follow the procedure described below. It is meant to be applied along with the synnefo upgrade to 0.18.

  1. Upgrade synnefo to new (0.18) version.

  2. Install okeanos-policy on both astakos and admin nodes.

  3. Set QUOTA_POLICY_MODULE = 'okeanos_policy.overquota.check' on both astakos and admin nodes.

  4. Fix quotaholder values that have been disturbed by ok_policy_enforce.py (add --fix to apply):

    astakos.host$ snf-manage quota-verify
    
  5. Suspend projects for previously deactivated users (add --fix to apply):

    astakos.host$ snf-manage user-check --all-users --suspend-deactivated --noemail
    
  6. Mark overquota memberships (add --run to apply):

    admin.host$ snf-manage overquota --states OK
    
  7. Migrate to the new shibboleth policy (add --run to apply):

    admin.host$ snf-manage shibboleth-enforce --migrate-ok-policy-enforce
    
  8. In admin node, replace file /etc/cron.d/okpolicy by a file named /etc/cron.d/shibboleth with the following content:

    45 3 * * *  root     snf-manage shibboleth-enforce --run
    
  9. In admin node, add file /etc/cron.d/overquota with content:

    45 4 * * *  root     snf-manage overquota --run
    

Previous topic

2. Handle shibboleth-expired users

This Page