In order to set up the ovequota and shibboleth modules provided by this package, you need to follow the procedure described below. It is meant to be applied along with the synnefo upgrade to 0.18.
Upgrade synnefo to new (0.18) version.
Install okeanos-policy on both astakos and admin nodes.
Set QUOTA_POLICY_MODULE = 'okeanos_policy.overquota.check' on both astakos and admin nodes.
Fix quotaholder values that have been disturbed by ok_policy_enforce.py (add --fix to apply):
astakos.host$ snf-manage quota-verify
Suspend projects for previously deactivated users (add --fix to apply):
astakos.host$ snf-manage user-check --all-users --suspend-deactivated --noemail
Mark overquota memberships (add --run to apply):
admin.host$ snf-manage overquota --states OK
Migrate to the new shibboleth policy (add --run to apply):
admin.host$ snf-manage shibboleth-enforce --migrate-ok-policy-enforce
In admin node, replace file /etc/cron.d/okpolicy by a file named /etc/cron.d/shibboleth with the following content:
45 3 * * * root snf-manage shibboleth-enforce --run
In admin node, add file /etc/cron.d/overquota with content:
45 4 * * * root snf-manage overquota --run