|
|
| Author |
Message |
mjd none

Joined: 31 Mar 2006 Posts: 38
|
Posted: Apr 19, 2006 2:15pm Post subject: Should network owners have access to all server shells? |
|
|
| I'd simply like to get input from other network owners/administrators to see what you think about this. In my opinion, network owners/administrators should definitaly have shell access to all boxes linked to their network. Is this not a requirement for most networks? I used to be with a network that is now ranked in the top10 networks and I know they had this requirement in place. What do you guys think? |
|
| Back to top |
|
 |
FBI Guru

Joined: 19 Aug 2005 Posts: 1534 Location: Federation Of Bored IRC'ers
|
Posted: Apr 19, 2006 2:53pm Post subject: Re: Should network owners have access to all server shells? |
|
|
| mjd wrote: | | I'd simply like to get input from other network owners/administrators to see what you think about this. In my opinion, network owners/administrators should definitaly have shell access to all boxes linked to their network. Is this not a requirement for most networks? I used to be with a network that is now ranked in the top10 networks and I know they had this requirement in place. What do you guys think? |
If the owners don't have access at least let the routing department handle it...
 |
|
| Back to top |
|
 |
mjd none

Joined: 31 Mar 2006 Posts: 38
|
Posted: Apr 19, 2006 2:56pm Post subject: |
|
|
| So you're saying that either 1.) the network owners/admins, or 2.) the tech team should have access to all shells on their network? The thing I'm wondering is what's more popular? Networks where the server administrator is the only person with access to his server and he does everything on it himself, or otherwise. |
|
| Back to top |
|
 |
Anthrax none

Joined: 04 Apr 2006 Posts: 22
|
Posted: Apr 19, 2006 3:38pm Post subject: |
|
|
| heh just enable remote includes then u can modify something once the rehash all the servers |
|
| Back to top |
|
 |
Jason SearchIRC Developer

Joined: 03 May 2003 Posts: 1484 Location: Tampa, FL
|
Posted: Apr 19, 2006 7:40pm Post subject: |
|
|
| I use to run the IRC servers for AT&T. I can tell you right now that there would be no way for anyone who didn't work for AT&T to get access to the box. |
|
| Back to top |
|
 |
mjd none

Joined: 31 Mar 2006 Posts: 38
|
Posted: Apr 19, 2006 8:39pm Post subject: |
|
|
| Maybe I stated my question wrong. I'm wanting to know, from a network owner/administrator standpoint, if you require access to all shells linked to your network. Or would you link a server that didn't want to give you access to the server's shell? |
|
| Back to top |
|
 |
Aven Idler

Joined: 05 Aug 2005 Posts: 393
|
Posted: Apr 19, 2006 9:38pm Post subject: |
|
|
I'd say it's not necassary really.
If there's a server administrator that's barely active or is barely even around, asking him/her for shell access is a good thing in case something goes wrong or the ircd needs an upgrade.
I don't think it'd be a good idea to require access when linking a server. Although, if a server admin links and is barely around or is barely active *and* refuses to give you access, then there would be no point of having him/her linked anymore. |
|
| Back to top |
|
 |
katsklaw Guru

Joined: 28 Jun 2004 Posts: 1614 Location: Somewhere you're not.
|
Posted: Apr 19, 2006 9:46pm Post subject: |
|
|
| mjd wrote: | | Maybe I stated my question wrong. I'm wanting to know, from a network owner/administrator standpoint, if you require access to all shells linked to your network. Or would you link a server that didn't want to give you access to the server's shell? |
I'm completely against asking for, requiring and surrendering shell access to servers.
IMO, the server admin has the responsibility to insure that they run their server within the guidelines of the network they are linked to. Most top 10 nets I've used have a "response period" where the server admin has to complete upgrades/configuration changes in. DALnet is or at least was 7 days even when DALnet was the largest network with 140,000 users ... server admins still managed to keep things together without surrendering access and the 7 day period was more than sufficient. UnderNet doesn't require surrendering shell access either. So if DALnet and UnderNet can operate for years with hundreds of thousands of users ... then the tiny nets should have no problems doing the same.
There is no reason other than when the server admin is on vacation or so sort of unplanned denial of internet access that would prevent him/her from making changes as required. In the event of a vacation the server admin should either name an IRCop to act in their place and have shell access or make some other arrangement.
Once a server is properly configured, even the server admin would rarely access the config file(s). There really isn't any case where a config update can't wait a few days. Some may argue that they require it in case of "emergencies" ... well IMO their emergency is nothing more than they want instant results and don't have the patience to wait for a server admin to do their job. Config files don't "magiclly" break ... so there is nothing that will cause a disruption if it isn't changed immediately. Need to add C/N lines or link blocks?
1> wait a few days (admins should have enough patience to wait)
2> add them to a server where the admin is not on vacation. (networks should have more than 1 hub server .. it's called redundancy)
3> use a system like remote includes and remote rehash so that the new link can connect anywhere.
As a server admin, I refuse to surrender shell access.
As a net admin I refuse to require shell access.
My 3 cents (2 cents plus tax) |
|
| Back to top |
|
 |
PingBad Post Whore

Joined: 05 Feb 2005 Posts: 3027 Location: New Zealand
|
Posted: Apr 19, 2006 10:25pm Post subject: |
|
|
| katsklaw wrote: | | In the event of a vacation the server admin should either name an IRCop to act in their place and have shell access or make some other arrangement | Enter the Server Co-Admin
<offtopic> | Quote: | | My 3 cents (2 cents plus tax) | Can I apply for a refund at the end of the financial year?</offtopic> |
|
| Back to top |
|
 |
Scire Newbie

Joined: 14 Apr 2006 Posts: 84 Location: IRC
|
Posted: Apr 20, 2006 7:22am Post subject: |
|
|
| mjd wrote: | | Maybe I stated my question wrong. I'm wanting to know, from a network owner/administrator standpoint, if you require access to all shells linked to your network. Or would you link a server that didn't want to give you access to the server's shell? | Not required, if the admin cant handle things on his end then his link should be dropped imho. Now if someone wants to give you shell access 'just in case' thats fine and can be helpful, but again not required. |
|
| Back to top |
|
 |
mentor Newbie

Joined: 22 Jun 2004 Posts: 91 Location: San Diego, CA
|
Posted: Apr 20, 2006 1:50pm Post subject: |
|
|
I have to agree with the last few posts -- it isn't necessary. When I ran servers for 2 of the top 5/10 networks it was not an issue. You should be able to depend on your server admins to make any necessary changes.
And, like Jason stated, most of your larger providers will not give access to anyone who is not an employee. This was also the case for me. |
|
| Back to top |
|
 |
mjd none

Joined: 31 Mar 2006 Posts: 38
|
Posted: Apr 20, 2006 9:36pm Post subject: |
|
|
| I certainly appreciate your responses guys. Purhaps I was simply misdirected for the last 4-7 (who's counting) years. Anyways, thanks again for your posts. |
|
| Back to top |
|
 |
MOVIEBOT Lurker

Joined: 24 May 2004 Posts: 229 Location: Poland
|
Posted: Apr 21, 2006 2:16am Post subject: |
|
|
| i am netadmin myself and before allowing servers to link i tell them routing must have all shell access or your server will not be acepted. we just ask for shell access incase ur server goes down to restart it and other maintenance upgrades we might do. |
|
| Back to top |
|
 |
mjd none

Joined: 31 Mar 2006 Posts: 38
|
Posted: Apr 21, 2006 5:43am Post subject: |
|
|
| MOVIEBOT, do none of your server admins have a problem with this? If not, about how many servers do you have linked? Are they all people you've known for a while, or do you have some random links as well? |
|
| Back to top |
|
 |
Anthrax none

Joined: 04 Apr 2006 Posts: 22
|
Posted: Apr 21, 2006 6:44am Post subject: |
|
|
noone should have access if the servers are set up right, netadmins can restart a unreal server online, addlines to the config, and if a server went down and it needs to be restarted well then one would add a crontab for the server, there u go, you dont need access to everyones shell, it tends to make them feel dumb that they cant do the job them selves.
put the shoe on the other foot, would you give someone ur shell details? i think not lol.
i guess if the shoe fit, wear it |
|
| Back to top |
|
 |
|