Help operations team use the submission server

Many folks on the ops/moneymachine teams are having email problems, and while it may not be the only problem, one of the issues is that many of them are not using the tor submission server. They aren't using it often because they don't have a LDAP account in order to set up a submission password.

I've talked with @anarcat and @lavamind about this and @smith has shared with @lavamind a spreadsheet that has each person's individual state.

added Email label

assigned to @lavamind

made the issue visible to everyone

added Next label

added Doing label and removed Next label

OK so one large bit of uncertainty was related to the matter of being able to provision a mail submission server account for users with no current LDAP account and no PGP key (or a key for which control has been lost).

I've experimented adding a test LDAP account for the exclusive purpose of providing access to the mail submission server. It turns out adding the account to the LDAP database directly using ldapvi, using a pre-generated password hash, works.

First, generate a password hash:

mkpasswd -m bcrypt-a

Second, add the uid/gid using ldapvi:

add gid=testuser,ou=users,dc=torproject,dc=org
gid: testuser
gidNumber: 1510
objectClass: top
objectClass: debianGroup

add 458 uid=testuser,ou=users,dc=torproject,dc=org
uid: testuser
objectClass: top
objectClass: inetOrgPerson
objectClass: debianAccount
objectClass: shadowAccount
objectClass: debianDeveloper
uidNumber: 1510
gidNumber: 1510
gecos: testuser,,,,
cn: Test
sn: User
userPassword: {crypt}$LK$
mailPassword: <REDACTED>
loginShell: /bin/bash
mailCallout: FALSE
mailContentInspectionAction: reject
mailGreylisting: FALSE
mailDefaultOptions: FALSE

userPassword: {crypt}$LK$ should ensure the account is not otherwise useable besides its mail purpose.

I've started reaching out to members of the list provided by @smith

mentioned in issue #41411 (closed)

marked this issue as related to #41411 (closed)

mentioned in issue #32351

added Next label and removed Doing label

added Doing label and removed Next label

added Next label and removed Doing label

This issue has been waiting for information two weeks or more. It needs attention. Please take care of this before the end of 2023-12-26. ~"Needs Information" tickets will be moved to the Icebox after that point.

(Any ticket left in Needs Review, Needs Information, Next, or Doing without activity for 14 days gets such notifications. Make a comment describing the current state of this ticket and remove the Stale label to fix this.)

To make the bot ignore this ticket, add the bot-ignore label.

added Stale label

added Doing label and removed Next label

removed Stale label

added Next label and removed Doing label

added Doing label and removed Next label

@al @micah On that Google Docs spreadsheet was mentioned the grants@torproject.org alias. I assume it's because some people need to send as this email address?

Currently it's possible to do this, because of #40587, as long as the identity is configured to use the Tor submission server.

marked this issue as related to #41539 (closed)

added Needs Information label and removed Doing label

This issue has been waiting for information two weeks or more. It needs attention. Please take care of this before the end of 2024-03-26. ~"Needs Information" tickets will be moved to the Icebox after that point.

(Any ticket left in Needs Review, Needs Information, Next, or Doing without activity for 14 days gets such notifications. Make a comment describing the current state of this ticket and remove the Stale label to fix this.)

To make the bot ignore this ticket, add the bot-ignore label.

added Stale label

added Next label and removed Needs Information label

removed Stale label

added Doing label and removed Next label

I had a meeting with Sue today and we properly set up set up and tested her @torproject.org email identities with her Gmail account.

And with this, the operations team should be considered on-boarded to the email submission server!

You're amazing, thank you @lavamind!

...

On 3/13/24 12:28 PM, Jérôme Charaoui (@lavamind) wrote:

GitLab

Jérôme Charaoui https://gitlab.torproject.org/lavamind commented #41396 (comment 3007893):

I had a meeting with Sue today and we properly set up set up and tested her |@torproject.org| email identities with her Gmail account.

And with this, the operations team should be considered on-boarded to the email submission server!

— Reply to this email directly or view it on GitLab #41396 (comment 3007893). You're receiving this email because of your account on gitlab.torproject.org https://gitlab.torproject.org. Unsubscribe https://gitlab.torproject.org/-/sent_notifications/REDACTED/unsubscribe from this thread · Manage all notifications https://gitlab.torproject.org/-/profile/notifications · Help https://gitlab.torproject.org/help

closed

I believe that @pavel has this same issue @lavamind would you mind scheduling a time with him to get this resolved?

Got in touch with Pavel, trying to schedule a meeting in the next few weeks.

reopened

added bot-ignore label

added Needs Information label and removed Doing label

@lavamind can you connect with @isabela to help her with her thunderbird and the submission server for sending as @tpo ? You helped her with gmail, but she is trying to get it setup with thunderbird

I had a meeting wiht Isa this morning and we did setup Thunderbird and configured the submission server. However she also needed to setup a new GPG and that failed more or less, because it looks like creating a new GPG key for a non-default identity doesn't work at all in Thunderbird... We ran out of time but she'll attempt to create a new key using an external tool, associate both her Gmail and TPO identities to the same key, and then import that into Thunderbird

I also met with Pavel today and helped him set up Gmail with the submission server and test that his mails were going through as expected.

added Doing label and removed Needs Information label

closed

I'm sorry to re-open this, but it appears that there are more people now and this is not on the on-boarding checklist.

@tyler and @bella both use gmail to send as @torproject.org and have to configure their submission server settings.

I'm trying to find out if @bokonon, Gillian and Arturo also need this.

@tyler and @bella both use gmail to send as @torproject.org and have to configure their submission server settings.

Was that per their request? IIRC we already went through the setup together, and when I look at recent mails from both of them, they're indeed using the email submission server as recommended.

I'm trying to find out if @bokonon, Gillian and Arturo also need this.

That's fine. But can we make new issues instead of beating this year old ticket to death? The 16 participants here probably don't need all the notifications we're generating.

I'm sorry - I asked operations if there were any new people who had not been setup, and Bella and Tyler told me that they had not, but I believe they misunderstood what I asked.

After Bella started, this is now part of onboarding process because it was built into the template.

I know that Arturo does not need this, but I'm awaiting the others, will open a ticket for those and close this one.

reopened

closed

mentioned in commit wiki-replica@ecfb92f4

changed milestone to %get everyone on the submission server