[kdewebdev-site] The new KDEWebDev server

[Paulo Moura Guedes]

On Tuesday 27 March 2007 18:09, Andras Mantia wrote:
> Hi,
>
>  As I announced earlier (to -devel lists), the KDEWebDev website was
> moved to a new server, which is completely under our control, Eric and
> myself having root access to it. The biggest change regarding the
> server itself is that it runs PHP5, Apache2 and Subversion.
> *.kdewebdev.org already points to the new site.
>  The user accounts were not migrated, therefore I ask everybody who
> wants to have an account there to contact me. The following persons are
> qualified for an account:
> - application developers (for the KDEWebDev module)
> - persons wanting to help with the website itself
> - persons wanting to help with the newstuff database
>
> Information about developing the KDEWebDev site:
>
> 1) The repository is available at
> svn+ssh://USERNAME@kdewebdev.org/home/kdewebdev/kdewebdev.org/trunk

I'm getting an error:

mourao at mourao-laptop:~/development/kdewebdev-site$ svn co 
svn+ssh://moura@kdewebdev.org/home/kdewebdev/kdewebdev.org/trunk
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The RSA host key for kdewebdev.org has changed,
and the key for the according IP address 209.208.122.238
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
72:f5:a7:06:fa:cc:05:e3:23:79:a8:fa:76:b1:14:7c.
Please contact your system administrator.
Add correct host key in /home/mourao/.ssh/known_hosts to get rid of this 
message.
Offending key in /home/mourao/.ssh/known_hosts:5
RSA host key for kdewebdev.org has changed and you have requested strict 
checking.
Host key verification failed.
svn: Connection closed unexpectedly

> 2) The site layout is the following:
> - there is a directory for each subsite (e.g. "quanta" for
> quanta.kdewebdev.org)
> - the main site (kdewebdev.org) is under "main"
> - "main" holds the common PHP and CSS files as well
> - "scripts" holds important scripts for developing the site
>
> 3) The configuration for the site is in a site.conf.php file (not in
> svn, but there is an example there), which you should modify to set up
> a local test site.
>
> 4) You SHOULD NOT use the upload feature of Quanta. There is a live test
> site on the server, meaning that the commits are automatically visible.

That's great. Commit + upload doesn't do it for me...

> The test site can be accessed by appending .test to the domain name
> (e.g. quanta.kdewebdev.org.test). As such domain names are not
> recognized by DNS servers, you have to add it yourselv to
> your /etc/hosts file and point to the same IP address as the
> kdewebdev.org is.
>
> 5) Propagating the changes to the real site can be done with the
> updater.kmdr script. 

Where can one get the script?

Paulo

> It takes your username as an argument. We might 
> discuss if it will be allowed to everyone to update the main site or if
> it will be restricted to some persons.
>
> I think these are the most important informations about the site itself.
> For further discussions please use the kdewebdev-site list
> (http://mail.kdewebdev.org/mailman/listinfo/kdewebdev-site).
>
> People who are "good hackers" and would like to test the securness of
> the site  should contact us before trying to do so, otherwise it would
> be considered as a malicious attack.
>
> Andras