1,103
edits
Project:Tool Access Control/ACServer: Difference between revisions
From London Hackspace Wiki
Project:Tool Access Control/ACServer (view source)
Revision as of 16:50, 4 August 2018
, 4 August 2018update with the current state of play.
mNo edit summary |
(update with the current state of play.) |
||
| Line 1: | Line 1: | ||
== Summary == | == Summary == | ||
ACServer is the access control server that is used by ACNodes (work it out!) to query weather the owner of a presented rfid card has access to the tool and what level of access he/she has. The codebase lives on our [https://github.com/londonhackspace/acserver github repo]. | ACServer is the access control server that is used by ACNodes (work it out!) to query weather the owner of a presented rfid card has access to the tool and what level of access he/she has. The codebase lives on our [https://github.com/londonhackspace/acserver-django github repo]. | ||
== TODO == | == TODO == | ||
* All [https://github.com/londonhackspace/acserver/issues issues] on the ascerver repository. | * All [https://github.com/londonhackspace/acserver-django/issues issues] on the ascerver repository. | ||
== Current deployment == | == Current deployment == | ||
* acserver:1234 current install, purpose built VM running on | * acserver:1234 current install, purpose built VM running on landin. | ||
== Troubleshooting == | == Troubleshooting == | ||
The acserver permission database is synced with our membership database every | The acserver permission database is synced with our membership database every XXX minutes. | ||
The application itself is in /var/www/acserver and relies on the local | The application itself is in /var/www/acserver and relies on the local postgres database to work properly also it uses the nginx webserver so make sure that is running too. | ||
Deployment of the acserver-django code is managed by the hackspaces ansible playbook, don't edit anything directly on the VM! | |||
Useful logs: | |||
`/var/log/acserver/django.log`: logs from the django code | |||
`/var/log/nginx/acserver_1234_access.log`: logs from the port 1234 listener on nginx, useful for checking what nodes are doing, the other nginx logs in that directory are useful. | |||
== Web UI improvement == | == Web UI improvement == | ||
=== Requirements === | === Requirements === | ||
This all needs checking against the current state of the code. The acserver-django code uses the hackspaces LDAP infrastructure for authentication and checks group membership(?) for (?). | |||
* For users with no permissions: | * For users with no permissions: | ||
** Look up the state of the tools and if they are currently in use | ** Look up the state of the tools and if they are currently in use | ||
