WP8578 decommission remote access central management machine (cdsadminctrl)
Jonathan, Dave:
We have started removing the reliance of remote login sessions from being monitored by the central cdsadminctrl computer, which is a single point failure for remote logins. Jonathan is removing the authentication system's reliance on this machine. We have stopped the EPICS IOC running on this machine and I have written python ioc code which will run on the two remote login machines directly (cdsssh and cdslogin).
While this work is proceding, you might notice RACCESS channels whitened on MEDMs and the EDC with a disconnect count.
cdsadminctrl also monitored login sessions to itself and h1hwinj1. We are no longer monitoring these systems, but to preserve their channels which are being acquired by the DAQ I am spoofing these channels on cdsssh. When we can restart the DAQ, I'll take these channels out of H1EPICS_RACCESS.ini and the IOC.
this work is now completed, cdsadminctrl has been turned off (was a VM). Local IOCs are now running on cdsssh and cdslogin, the legacy PVs are handled by IOCs runnig on zotws6 currently.
I've created a simplied RACCESS MEDM. In the new scheme, only the username, num_sessions and UID are stored per user. The IOC has additional diagnostics including GPS time, uptime, processing and updating times.
I'll write up the details in a wiki.