Unverified Commit 1b765f7b authored by anarcat's avatar anarcat
Browse files

resolve another authentication wtf

parent 5bda0cfd
Loading
Loading
Loading
Loading
+8 −1
Original line number Diff line number Diff line
@@ -200,7 +200,14 @@ backend CiviCRM server. The middle and the CiviCRM server talk to each
other through a Redis instance, accessible only through an [IPsec](howto/ipsec)
tunnel (as a 172.16/12 private IP address).

TODO: how do contractors access the servers over SSH?
Both servers have firewalled SSH servers (rules defined in Puppet,
`profile::civicrm`). To get access to the port, [ask TPA][File].

Once inside SSH, regular users must use `sudo` to access the
`tordonate` (on the external server) and `torcivicrm` (on the internal
server) accounts, e.g.

    crm-ext-01$ sudo -u tordonate git -C /srv/donate.torproject.org/htdocs-stag/ status

### Queues