Migrate Users/Logins

[landauf]

Users from the old system should be migrated to the new server. We don't necessarily need to migrate ALL users if it causes too much work because a lot of users are inactive for years.

If possible, the credentials for login should remain the same.

The roles for each user will be defined manually.

[lferran]

• Users in the old server are defined under /var/svn/svnusers. Most of them can potentially be omitted for the migration, since they are inactive since long time ago.

• Only the MD5 hash of the passwords are stored in the old server.

• Possible users migration procedure:
  1. Select which users should be migrated
  2. For each selected user:
  3. Go to the ldap admin panel and copy one of the existing users.
  4. Change credentials with the credentials of the user that is being migrated
  5. In the password field add a random-generated password, that will be sent to the user. Additionally, we will ask the user to log in into roundcube and change its own password.

• If the user to migrate has login access to the server:
  1. Copy user's ssh public key from the old server to the new one
  2. Copy the user's shadow entry too, so that the user can maintain its unix password.

[lferran]

UNIX users selected in ticket:452 have been created in the new server:

• Login passwords have been kept
• ssh authorized keys have been copied
• Preferred shell has been migrated too
• Sudoer permissions have been kept too!