Actually, password authentication isn't necessary at all. An ssh keypair would be better.

You should be able to set this all up yourself.

Basically make a freeipa user in fas add them to the gitfreeipa group (this will give them write access there and access to fedorapeople because they have cla+1), setup ssh keys for them and upload them to fas.

Let us know if you run into any issues with it... I think it should just work. Feel free to re-open or just comment here if you have problems.

:green_heart:

For security reasons, we do not want this account to be a member of gitfreeipa group.

I found out we already have a FAS account we can use for this purpose (ipa-maint) . I can set up the SSH key and sign the CLA. Would it please be possible to:

• Change ownership of /srv/groups/freeipa to ipa-maint:gitfreeipa
• Add ipa-maint to some placeholder / insignificant group, so we can access the fedorapeople.org storage

The user has been added to wikiedit for now. If we think of a better group, we can change, but for now I think this'll do as it doesn't give any additional privileges.