Talk:SAC Meeting 2018-03-29

Transcript

   20:03:29	robe2:	everyone ready for meeting
   20:03:34		* wildintellect meetings drive us to keep on topics between meetings
   20:03:35	robe2:	sorry got distracted with PostGIS stuff
   20:03:59	robe2:	https://wiki.osgeo.org/wiki/SAC_Meeting_2018-03-29#Agenda
   20:04:00	sigabrt:	Title: SAC Meeting 2018-03-29 - OSGeo (at wiki.osgeo.org)
   20:04:02	TemptorSent:	Users with existing accounts would provide their old credentials, which would cause and auto-merge.
   20:04:35	robe2:	okay lets try to go in order -- first on agenda hardware -- wildintellect you have the floor
   20:05:17	robe2:	ping wildintellect
   20:05:20	wildintellect:	I just updated the agenda with what I just got from the vendor 5 min ago, they are waiting on some info about the parts from the company that makes them
   20:05:38	TemptorSent:	Supermicro I take it?
   20:06:21	wildintellect:	probably
   20:06:22	strk:	I'll have to go away in 10 minutes (and back after 20)
   20:06:38	wildintellect:	soon as I have the quotes, we'll review and put to vote
   20:06:43	robe2:	strk okay we'll hold the juicy discussions for you when you get back
   20:07:03	robe2:	next topic Funtoo
   20:07:25	TemptorSent:	Thanks wildintellect, I wish they would have mentioned the available pcie slot and m2 slot right up front!
   20:07:31	robe2:	On my part I haven't configured ssh login by LDAP yet, but plan to before end of weekend
   20:07:32	cvvergara:	I could use funtoo
   20:08:02	cvvergara:	(not that I know what I was doing)
   20:08:03	TemptorSent:	We now have a nextcloud instance runing in a subcontainer of our osgeo.host.funtoo.org container :)
   20:08:05	robe2:	cvvergara you should jump on the Funtoo bandwagon. It's fun too
   20:08:31	strk:	I invited a mediawiki developer in this channel, dunno if he'll join
   20:09:12	robe2:	TemporSent I tried nextcloud but didn't know what to login as is it already configured for ldap login
   20:09:14	strk:	he knows about UserMerge plugin, if he joins please try to make best use of his time :)
   20:09:20	TemptorSent:	I did a bit of twiddling to get nginx to proxy the /nextcloud subdirectory from the outer container's external IP to the inner container's instance.
   20:09:24	strk:	his nick is legoktm
   20:09:27	robe2:	also the https were we going to get a letsencrypt for that
   20:10:29	strk:	yeah dont enter your creds in clear please
   20:11:01	robe2:	well it's not clear text it's got https just looks like it's a self-cert
   20:11:24	robe2:	anyway didn't seem to accept my ldap credentials so assume not configured for ldap yet
   20:11:32	robe2:	or I mistyped them
   20:11:53	TemptorSent:	Nope, if someone would care to setup the user for it to bind, we can get that fixed.
   20:13:20	strk:	I don't get a login screen, via /nextcloud
   20:13:38	robe2:	https://osgeo.host.funtoo.org/nextcloud
   20:13:45	TemptorSent:	https://osgeo.host.funtoo.org/nextcloud :)
   20:13:45	strk:	"Access thorugh untrusted domain, add "funtoo.osgeo.org" as trusted domain
   20:13:59	strk:	ah, you didn't like funtoo.osgeo.org ? :)
   20:14:05	TemptorSent:	Oh, need to add that to the config for nextcloud.
   20:14:50	strk:	better get the right name for letsencrypt..
   20:15:17	cvvergara:	osgeo.host.funtoo.org uses an invalid security certificate.
   20:15:22	cvvergara:	i get that
   20:15:34	TemptorSent:	Yeah, we'll want to ask to have the revdns set to funtoo.osgeo.org
   20:15:47	robe2_:	sorry lost connection for a moment
   20:16:05	TemptorSent:	Yes, it's the self-signed cert for the moment until we get everthing configured for LE :)(
   20:16:35	robe2_:	I already have it set to nextcloud.osgeo.org
   20:16:43	TemptorSent:	I just wanted to get it functional enough to get the basic configuration done to start with.
   20:16:47	strk:	lets configure it for nextcloud.osgeo.org at that point
   20:16:55	robe2_:	can you use that somehow or not yet until you have the internal dns thing setup
   20:16:58	strk:	why the subdomain?
   20:17:17	strk:	easier to split the load if we have the root
   20:17:18	robe2_:	strk what subdomain?
   20:17:26	strk:	sorry, the subpath I meant
   20:17:59	TemptorSent:	The container can host many services from one external ip and cert that way.
   20:18:15	robe2_:	okay I see it's setup for ldap, but doesn't have any group filter, thus explains why I can't log in
   20:18:24	strk:	you can still do all in a single ip using virtualhosts
   20:18:34	strk:	ah but cert you're right
   20:18:38	TemptorSent:	robe2_ I haven't configured anything on ldap, just enabled it
   20:18:42	strk:	is that an issue once we use letsencrypt ?
   20:18:47	robe2_:	were we going to do an osgeo ldap nextcloud group or do we think it's safe enough for any osgeo member to log in
   20:19:09	TemptorSent:	strk We could request multi-domain certs I suppose, depends on what we need.
   20:19:10	strk:	you've to check if you can configure limits per group
   20:19:15	robe2_:	I presume in nextcloud we can set security futher so should be okay similar to how we have gitea allowing all but then we set per repo/org
   20:19:22	wildintellect:	I think initially it's intended for use by the Board only
   20:19:33	strk:	ok I'm leaving, ttyl
   20:19:35	wildintellect:	but for the test instance we could limit it to SAC
   20:19:36	robe2_:	wildintellect we have a board group already right?
   20:19:44	wildintellect:	not sure
   20:19:49	robe2_:	I guess I could test by adding board and sac and see if we can all log in
   20:19:51	wildintellect:	probably
   20:19:58	robe2_:	well I'll do just sac then
   20:20:04	robe2_:	for now so we can test
   20:20:15	TemptorSent:	robe2_ may I suggest we change the name on that record to funtoo.osgeo.org for now? We can setup domain redirects later.
   20:20:29	robe2_:	TemptorSent we have that too
   20:20:41	robe2_:	I have funtoo.osgeo.org setup as an A record
   20:20:48	TemptorSent:	Okay, I'll request the reveres mapping match that then :)
   20:20:53	robe2_:	nextcloud.osgeo.org is a CName for funtoo.osgeo.org
   20:21:14	TemptorSent:	Okay, that works -- we can have it rewrite that.
   20:23:34	TemptorSent:	Anyway, status of nextcloud is up, but essentially raw, so whoever either knows it or wants to experiement with it, please dig in!
   20:24:12	TemptorSent:	If any additional software is required to provide features, let me know and we'll get it handle.d
   20:24:54	robe2_:	I put in the base dsn for ldap but it keeps on saying lost connection
   20:24:59	robe2_:	so seems to be a problem them
   20:25:01	robe2_:	there
   20:25:15	robe2_:	anyway I'll investigate further perhaps after I had ssh set up
   20:25:15	TemptorSent:	Check logs on the other end perhaps?
   20:25:21	TemptorSent:	Okay, sounds good.
   20:26:15	TemptorSent:	I need to figure out what's up with the ipv6 routing internally too.
   20:27:16	robe2_:	okay got it fix
   20:27:18	robe2_:	fixed
   20:27:22	robe2_:	just has to change to ldaps
   20:27:40	TemptorSent:	Weblate I have packaged up in an alpha state, so I'll put together a container for that as well.
   20:28:34	TemptorSent:	We'll probably want to setup replication on the postgresql instance associated with nextcloud at some point too.
   20:28:55	robe2_:	oh cool it shows me the list of all the groups we have in ldap
   20:29:43	TemptorSent:	Drone is already packaged, so that should also be straightforward, leaving github needing a bit of work to make a nice package for.
   20:30:27	robe2_:	TemptorSent well the good news is that after I added sac group to list
   20:30:35	robe2_:	I was able to log in with my LDAP account
   20:30:44	robe2_:	the bad news is that I got an internal server error
   20:30:54	robe2_:	The server was unable to complete your request. If this happens again, please send the technical details below to the server administrator. More details can be found in the server log. Technical details Remote Address: 10.215.214.1 Request ID: JHsDo4at2rWwFUVXYi4V
   20:31:05	TemptorSent:	*lol* Okay, let's see what the log says.
   20:31:48	robe2_:	while you are looking at that next topic -
   20:31:57	TemptorSent:	:"Configuration Error (prefix ): login filter does not contain %uid place holder."
   20:32:08	robe2_:	FOSS4G2018 on wordpress
   20:32:14	robe2_:	ah okay let me fix that
   20:32:35	TemptorSent:	Needs the uid to bind as :)
   20:33:46	robe2_:	hmm added that no error
   20:33:53	robe2_:	but keeps on saying I have wrong log in
   20:34:05	robe2_:	It's possible I forgot my password. Want to try logging in
   20:34:52	TemptorSent:	"message":"LDAP Login: Could not get user object for DN uid=robe,ou=people,dc=osgeo,dc=org. Maybe the LDAP entry has no set display name attribute?"
   20:35:18	TemptorSent:	I think you want dn=%uid for that filter
   20:36:42	robe2_:	hmm I changed that though I may have a typo elsewhere
   20:36:59	robe2_:	originally I was just using the gui and then tried to edit the query
   20:37:03	robe2_:	I'll fuss with it later
   20:37:28	TemptorSent:	Okay.
   20:37:44	robe2_:	on the topic of FOSS4G2018 anyone here from the LOC for that?
   20:38:07	TemptorSent:	Logs are in /srv/localhost/www/htdocs/nextcloud/data/nextcloud.log
   20:38:20	robe2_:	anyway my plan is to setup wordpress on web18a with the root template used by www.osgeo.org - I should get to that this weekend
   20:39:41	robe2_:	next topic wiki ldap
   20:40:02	robe2_:	TemptorSent btw good to see you and MartinSpott trying to work together on that
   20:40:23	robe2_:	not as much fun to watch as you two fighting but :)
   20:40:50	TemptorSent:	As discussed with Martin a bit earlier, the sanest approach is to force wiki users to login with osgeo credentials and migrate their old account
   20:40:58	wildintellect:	+1
   20:41:03	TemptorSent:	*lol*
   20:41:25	wildintellect:	though make sure they can provide the password to their old account, so that people can't grab other people's wiki accounts
   20:41:26	cvvergara:	I wonder how many have a wiki account but not an OSGeo account
   20:41:31	TemptorSent:	We can probably simply update the usernames in the database for all unmigrated users to prevent any conflicts as well.
   20:41:45	robe2_:	cvvergara I suspect many
   20:41:47	wildintellect:	cvvergara, see the email thread on that, it's a lot
   20:41:55	TemptorSent:	Right, they'd have to log in to their old wiki credentials after logging in with their osgeo credentials.
   20:42:36	robe2_:	so we can just put a note on the page if you don't have an osgeo account, go here ...
   20:42:47	TemptorSent:	We might pull the list of active emails from the wiki to whitelist for osgeo account signup.
   20:42:55	robe2_:	I wonder if we can at least show them the mantra
   20:42:56	wildintellect:	do we have to migrate/update users at all - unclear on how the LDAP integration works, but I assumed it linked to existing accounts, and we just disable the non-LDAP way of logging in
   20:43:07	robe2_:	so we are not inundated with people emailing asking for mantra code
   20:43:50	TemptorSent:	Ideally, we'd keep ldap as the authoritative account backend.
   20:44:05	TemptorSent:	And we should be able to add a whitelist of emails easily to that script.
   20:44:19	TemptorSent:	if it's in the list, skip the mantra requirement.
   20:44:55	robe2_:	also it could be a lot of those folks with only wiki accounts are fly-by folks
   20:45:08	robe2_:	a lot had to register to sign up for FOSS4G Events
   20:45:17	robe2_:	so they may have needed wiki access one time only
   20:45:17	TemptorSent:	If we don't migrate the users, we end up loosing authorship.
   20:45:52	robe2_:	TemporSent ? but that would be the person that created the page right?
   20:45:54	TemptorSent:	Fair enough, but if they want to sign up for the osgeo account, no reason to not whitelist them, as they're unlikely to be spammers at that point.
   20:46:07	robe2_:	I suspect most folks that created the page have OSGeo LDAP accounts
   20:46:25	robe2_:	it's those folks putting their name on the list of some event that I think we can afford to lose
   20:46:42	TemptorSent:	robe2_ - Right, but if we don't migrate the existing wiki users to merge with the ldap accounts, we'll have no authorship info once people log in with just ldap
   20:46:47	robe2_:	so even if the history for those is orphaned, I don't think its a huge deal
   20:47:04	TemptorSent:	its the entire history that we lose.
   20:47:30	robe2_:	? You mean we have to map all users? even those that don't have ldap accounts?
   20:47:35	TemptorSent:	To avoid namespace conflicts, we can't have existing accounts names and new ldap user account names match.
   20:47:45	robe2_:	we can't just say joeblow == anonymous :)
   20:47:57	robe2_:	or legacy user
   20:48:21	robe2_:	some dummy catchall ldap account we setup to map all that don't have accounts
   20:48:41	TemptorSent:	No, we need to do something like joeblow -> __old__joeblow
   20:48:45	wildintellect:	I think this is why I was thinking about just associating LDAP with wiki accounts
   20:49:03	robe2_:	wildintellect I'm fine with that
   20:49:11	TemptorSent:	The fix is simple enough, it just requires doing thigns in the right order.
   20:49:16	wildintellect:	the example I'm thinking of is when you use google or facebook to login to some other service, but you have to have an account on that service to begin with
   20:49:25	robe2_:	I was thinking if I looked at the mediawiki database I could figure out how to auto update them all like I did with wordpress
   20:49:34	TemptorSent:	That will be a disaster to keep track of I'm afraid.
   20:49:57	robe2_:	for wordpress I just pulled the whole ldap directory, first match by user name, then email address if user name failed and then various permutations of other things
   20:50:10	TemptorSent:	Let's not do that, please.
   20:50:31	wildintellect:	I agree that's not likely to work in this case
   20:50:37	TemptorSent:	That's a good way to end up with a very confusing error situation.
   20:50:55	TemptorSent:	1 - ALL logins are OSGeo LDAP logins.
   20:50:57		* robe2_ doesn't understand why it wouldn't for a first pass, but okay
   20:51:13	wildintellect:	I could see first pass if name/email both match
   20:51:22	robe2_:	yah that's what I would do
   20:51:31	TemptorSent:	2 - Users with existing accounts can provide those credentials once they're already logged in to OSGeo to migrate.
   20:51:37	robe2_:	I would definitely not match if there is some ambiguity
   20:51:38	cvvergara:	I wonder whats my name
   20:51:55	cvvergara:	and I think I have one account to one e-mail and the other to another
   20:52:00	TemptorSent:	That way all usernames end up reflecting the same regardless of where.
   20:52:23	robe2_:	TemptorSent but we have to eventually get to a point of all matched right? or no we can live in limbo forever?
   20:52:26	TemptorSent:	Only unmigrated users would have mismatched names, and you can't log in to those.
   20:52:43	robe2_:	That's my only concern with letting users proactively link themselves
   20:52:45	TemptorSent:	We can leave unmigrated accounts unmigrated and disabled for login.
   20:52:59	wildintellect:	question, what happens when an unmigrated user is blocking a valid username by squatting a name?
   20:53:15	TemptorSent:	Thats why we'd want to bulk-rename users
   20:53:23	wildintellect:	I see
   20:53:32	TemptorSent:	Just prefix them with a tag.
   20:54:04	TemptorSent:	oldaccnt_ or some such
   20:54:36	robe2_:	TemptorSent so first pass, rename all accounts to oldacct_oldname
   20:54:39	TemptorSent:	I would recommend doing this as part of a migration to an updated wikimedia instance
   20:54:43	robe2_:	then force people to log in with the ldap
   20:54:49	TemptorSent:	Correct robe2_
   20:54:56	robe2_:	how do they know which one to merge if we have renamed them?
   20:55:11	wildintellect:	they would type in the name they remember
   20:55:16	robe2_:	presumably after we rename, they can't log in with the renamed
   20:55:19	wildintellect:	we add the prefix in our code
   20:55:25	TemptorSent:	Because they provide their old credentials and we rewrite it with the new oldacct_ tag
   20:55:28	robe2_:	oh okay
   20:55:47	cvvergara:	so I would be oldaccnt_cvvergara?
   20:55:53	TemptorSent:	Yep.
   20:55:57	wildintellect:	yes but you wouldn't need to know that
   20:56:12	robe2_:	yep but you'd still log in as cvvergara but be forced to relogin with your ldap
   20:56:20	TemptorSent:	And we'd want to block logins to those prefixed accounts and force osgeo login.
   20:56:51	TemptorSent:	That prevents namespace collisions
   20:57:08	wildintellect:	well write up this plan from start to finish, with all the steps required, then we can ask the mediawiki specialist with the UserMerge plugin how to implment
   20:57:47	TemptorSent:	See notes on the bug.
   20:57:55	robe2_:	okay next topic osgeo website
   20:57:59	robe2_:	ping jive[m]
   20:58:04	cvvergara:	So, after I relogin with ldap, the oldaccnt_cvvergara gets merged?
   20:58:31	robe2_:	cvvergara yap
   20:58:58	TemptorSent:	cvvergara After you login with ldap for the first time, you'd get a screen asking you for old credentials to merge if you have an existing account.
   20:59:33	TemptorSent:	That takes care of people with different usernames on the old wiki vs ldap
   20:59:58	robe2_:	I was going to play devils advocate, but I fear this meeting will never end if I do that so I'll skip
   21:00:14	robe2_:	okay jive[m] is not hear
   21:00:16	TemptorSent:	Go for it, let's screw things up before we screw thigns up.
   21:00:17	robe2_:	here
   21:00:30	cvvergara:	so next topic, there was a geoforall meeting
   21:00:45	robe2_:	what if strk's account is not claimed and I claim his as mine, how does that work?
   21:01:00	TemptorSent:	robe2_ You'd need his username AND password.
   21:01:02	robe2_:	but we are on geoforall now :)
   21:01:16	robe2_:	TemptorSent okay that answers that :)
   21:01:16	cvvergara:	and jive[m] and me went there ...
   21:01:39	cvvergara:	There is this document: (I pasted the link of the directory in the agenda)
   21:02:55	cvvergara:	Looks like the way its working now is "too complicated"
   21:03:11	robe2_:	cvvergara that document is too long for me to read :)
   21:03:34	cvvergara:	there is a wiki page that had the labs and they want to simplify the process
   21:03:59	wildintellect:	What do they need from SAC?
   21:04:42	cvvergara:	actually from what I heard, they have budget and they are going to ask get_interactive to do the work
   21:04:47	robe2_:	wildintellect my thoughts too :)
   21:05:04	robe2_:	cvvergara so they don't need sac right?
   21:05:27	robe2_:	although I guess we should be somewhat involved
   21:05:32	wildintellect:	is geoforall going into the osgeo site, or maintaining their geoforall site?
   21:05:37	cvvergara:	but then, get_interactive might modify the wordpress
   21:05:53	robe2_:	then we don't end up with silly things like we had last time with ancient version of mysql and php and non-utf8 database
   21:05:59	cvvergara:	yeah, they want that wildintellect (so I understood)
   21:06:34	wildintellect:	well we can tell get_interactive about those mistakes, to get them corrected
   21:06:38	robe2_:	I think geoforall is a subsection of osgeo wordpress like?
   21:06:41	robe2_:	right
   21:06:59	robe2_:	wildintellect well I mentioned that already to them so I think it's okay
   21:07:15	TemptorSent:	Hmm, if it's tied to the main wp, this could get "interesting"
   21:07:16	robe2_:	there was the issue of the proprietary plugins that you and strk are still angry about :)
   21:07:18	wildintellect:	should it be? if they want their own brand - but also from a maintainence standpoint do we want all that code in one site or two?
   21:07:37	cvvergara:	so maybe just keep an eye wen they want to do PR to the wordpress repo
   21:07:56	wildintellect:	I'm only annoyed about not knowing upfront about the plugins, when I specifically asked what plugins were required, the reply was none
   21:08:46	TemptorSent:	This really looks like it should live in it's own little space, not part of the rest of the site...
   21:08:48	wildintellect:	in this case I'm wondering if the code will get overly complicated with geoforall inside the main osgeo
   21:08:49	robe2_:	wildintellect yah that's why I am seeing we should at least keep a cursory view of what they are doing
   21:09:05	robe2_:	saying
   21:09:10	wildintellect:	+1
   21:09:29	wildintellect:	cvvergara, do you want to the be the SAC liason to this project?
   21:09:32	robe2_:	as to whether geoforall should be it's own site I don't know.
   21:09:50	cvvergara:	geoforall right now has its own site:
   21:09:52	robe2_:	+1 for cvvergara being SAC liaison :)
   21:09:54	TemptorSent:	Not necessarily it's own site, but a containerized little portion.
   21:09:54	wildintellect:	I think the dns migration is still stuck
   21:10:03	cvvergara:	http://www.geoforall.org/
   21:10:05	sigabrt:	Title: OSGeo Labs - Mission - "Making geospatial education and opportunities accessible to all" (at www.geoforall.org)
   21:10:15	robe2_:	BTW I think we had given get interactive sudo access to the server and we can if they don't have it
   21:10:26	robe2_:	I'm not sure if we always want to be in the middle of everything they are doing
   21:10:45	wildintellect:	they shouldn't be doing much now, the contract for the main site is mostly over
   21:10:53	TemptorSent:	Hmm, can we setup lxd on that server and just give them a container?
   21:11:01	cvvergara:	they have some budget, I think they will use
   21:11:04	robe2_:	oh so geoforall does have it's own website :)
   21:11:11	wildintellect:	currently yet
   21:11:13	wildintellect:	yes
   21:11:31	wildintellect:	hence why I'm confused where this new site is supposed to be
   21:11:53	TemptorSent:	Likewise, I'm a bit lost as to what the intent is here.
   21:12:06	strk:	sorry I'm back but not here yet
   21:12:09	cvvergara:	I think its to put all their stuff on OSGeo site
   21:12:11	robe2_:	skimming thru the docs looked like it was intended to be a subdirectory of main www.osgeo.org or cvvergara did I read that wrong
   21:12:17	cvvergara:	but I will figure out
   21:12:31	wildintellect:	cvvergara, yes please clarify
   21:12:56	robe2_:	next topic board request for mail boxes
   21:13:04	wildintellect:	that just seems silly to give up the branding they've made so far
   21:13:18	TemptorSent:	It almost looks like it's requesting the ability to link to new labs? I'm really lost on that proposal.
   21:13:30	robe2_:	wildintellect agree yah I thought they spent a lot of time on that branding
   21:14:00	wildintellect:	so email, I think the immediate need was met on the un@osgeo.org by using the reply_to function on a gmail account
   21:14:20	wildintellect:	long term I can see why the board officers want actual email boxes they can pass on to their replacements
   21:14:27	robe2_:	wildintellect that was my conclusion too reading netler's dialog
   21:14:40	robe2_:	delawen[m] any comments on the topic?
   21:16:08	robe2_:	next topic and hopefully last alternate times for meetings
   21:16:34	wildintellect:	Martin above suggested Sat night US, Sun morning EU
   21:16:36	robe2_:	MartinSpott said weekend work's best for him. I'm okay with that
   21:16:46		* cvvergara goto go
   21:17:19	wildintellect:	it's hit or miss for me, weekdays I can do meetings on work time (GeoForAll Lab afterall)
   21:17:29	TemptorSent:	What's his TZ UTC+3?
   21:17:42	wildintellect:	I think so, Germany?
   21:18:46	TemptorSent:	I'm -7, but anyone in wester eu is in the middle of the night at a reasonable time for both US and Germany.
   21:19:25	robe2_:	I'm -4 at moment
   21:20:10	TemptorSent:	0400 UTC perhaps?
   21:20:10	robe2_:	ping strk did you get back yet?
   21:21:24	wildintellect:	If EU are willing to get up early something like this could work https://www.timeanddate.com/worldclock/meetingdetails.html?year=2018&month=4&day=14&hour=4&min=0&sec=0&p1=217&p2=37&p3=43
   21:21:25	sigabrt:	Title: The World Clock Meeting Planner - Details (at www.timeanddate.com)
   21:22:03	wildintellect:	1 hour later would also be ok for me, but push East coast US to 1 am
   21:22:09	TemptorSent:	Yeah, that's as reasonable as I could come up with.
   21:22:37	robe2_:	MartinSpott really wants to get up at 6AM? Crazy man
   21:22:50	robe2_:	mignight is pretty perfect for me
   21:23:08	robe2_:	1 AM is workable for me too
   21:24:49	wildintellect:	no idea, but we can offer that
   21:25:12	TemptorSent:	0400 or 0500 UTC
   21:25:44	wildintellect:	is that too early for strk ?
   21:26:21	robe2_:	hmm I completely blanked out what strk's schedule is you'd think I'd know it by heart by now
   21:26:37	robe2_:	I think it should be fine
   21:26:48	robe2_:	cause when I'm on at 1AM I recall him being wide awake
   21:27:09	wildintellect:	ok, so post that suggested time for the next meeting, and get feedback on the list
   21:27:11	cvvergara:	if robe2_is awalke I am awake
   21:27:18	robe2_:	but then again can't remember if that's during the week or weekends
   21:27:30	strk:	robe2_: I'm back
   21:28:22	strk:	sitting on the dock of the bay (I'm listening to the rearshal recordings)
   21:30:44	robe2_:	strk what time works for you for meeting
   21:30:50	robe2_:	https://www.timeanddate.com/worldclock/meetingdetails.html?year=2018&month=4&day=14&hour=4&min=0&sec=0&p1=217&p2=37&p3=43
   21:30:51	sigabrt:	Title: The World Clock Meeting Planner - Details (at www.timeanddate.com)
   21:30:52	robe2_:	does that work
   21:31:16	robe2_:	cvvergara doesn't sleept
   21:31:22	robe2_:	sleept/ sleep
   21:31:52	cvvergara:	robe2_ doesnt sleep either
   21:32:12	robe2_:	though I thought Martin said Sunday morning
   21:32:25	wildintellect:	well we are suggesting compromises
   21:32:32	robe2_:	why did we do Saturday EU?
   21:32:41	wildintellect:	Fri US is better for me
   21:32:51	wildintellect:	there are lots of Sat I would miss
   21:33:04	robe2_:	okay
   21:33:20	robe2_:	sounded like he might be okay any weekend just sunday preferred
   21:33:25	wildintellect:	but ask on the list, if more people want the Sat/Sun time that might be ok
   21:33:38	robe2_:	ping strk thoughts
   21:33:58	robe2_:	strk and sorry we couldn't hold out for you on the LDAP / Wiki thing
   21:34:20	robe2_:	TemptorSent is going to draft up the plan on that and he and Martin will work together to make it happen :)
   21:34:24	strk:	did the mediawiki guy show up ?
   21:34:29	robe2_:	strk no
   21:34:54	TemptorSent:	No, but we can summarize what we need easily enough.
   21:34:55	strk:	he said there might or might not be an API, but eventually a script could submit web forms (to automate merging of users)
   21:35:14	strk:	don't wait for me for timing meetings
   21:35:17	strk:	just do it
   21:35:25	strk:	if I'll be able to attend I will
   21:35:35	strk:	but I'm trying to live more of a off-grid life
   21:35:52	strk:	(said the guy on a chat line at 23:30...)
   21:36:04	TemptorSent:	:)
   21:36:04	robe2_:	off-grid like no internet off-grid -- living in the woods with a pee hole off-grid :)
   21:36:47	strk:	off-grid like playing trumpet instead of keyboard
   21:37:00	wildintellect:	off-key
   21:37:08	strk:	that too :)
   21:37:17	robe2_:	strk at the very least have a mobile phone with you in case you need a human voice are start getting chased by wild animals and need to call for help
   21:38:34	robe2_:	okay guess that's it for meeting. Only took us 1 hr and 38 minutes but at least we got thru the list
   21:52:53	TemptorSent:	See comments at bottom of: https://trac.osgeo.org/osgeo/ticket/165
   21:52:54	sigabrt:	Title: #165 (Wiki LDAP integration) – OSGeo (at trac.osgeo.org)
   21:54:47	TemptorSent:	robe2_ Let me know if you run into any snags on the ldap ssh front. I theoretically have it all setup and ready, it just needs the config options enabled and the key schema added.
   21:55:24	robe2_:	okay will do
   21:55:35	robe2_:	probably won't get to it before weekend