# # ChangeLog for / # # Generated by Trac 1.0.2 # Mar 28, 2024, 10:27:30 AM Mon, 01 Sep 2008 22:37:40 GMT andersk [830] * locker/bin/fssar (modified) fssar = fsr sa . Sun, 31 Aug 2008 07:38:28 GMT geofft [829] * server/fedora/config/etc/fuse.conf (added) Debathena's reasoning seems sound enough. Add fuse_allow_other, which ... Fri, 29 Aug 2008 22:36:20 GMT andersk [828] * server/common/oursrc/execsys/ldapize.pl (modified) Search by objectClass (otherwise you get “Admin limit exceeded”). Fri, 29 Aug 2008 22:17:32 GMT andersk [827] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) * server/common/oursrc/accountadm/vhostadd (modified) Create scriptsVhost records automatically. Fri, 29 Aug 2008 21:16:41 GMT andersk [826] * server/common/oursrc/accountadm/vhostedit (modified) Teach vhostedit about scriptsVhost entries. Fri, 29 Aug 2008 20:39:04 GMT andersk [825] * server/common/oursrc/execsys/Makefile.in (modified) * server/common/oursrc/execsys/ldapize.pl (added) * server/common/oursrc/execsys/scripts-svn.xinetd (added) * server/common/oursrc/execsys/svn (added) * server/common/oursrc/execsys/svnproxy.pl (added) * server/fedora/specs/execsys.spec (modified) Package the svn vhosting infrastructure into execsys. Fri, 29 Aug 2008 20:13:57 GMT andersk [824] * server/fedora/specs/httpd.spec.patch (modified) Fix `make httpd` too. Fri, 29 Aug 2008 13:38:00 GMT geofft [823] * server/common/patches/httpd-suexec-scripts.patch (modified) * server/fedora/Makefile (modified) Add suexec support for things in a trusted directory, so we can make ... Fri, 29 Aug 2008 03:33:30 GMT geofft [822] * server/fedora/config/etc/pki/tls/certs/axo.pem (added) * server/fedora/config/etc/pki/tls/certs/crew.pem (added) * server/fedora/config/etc/pki/tls/certs/lpq.pem (added) * server/fedora/config/etc/pki/tls/certs/next.pem (added) * server/fedora/config/etc/pki/tls/certs/queues.pem (added) * server/fedora/config/etc/pki/tls/certs/wakeup.pem (added) * server/fedora/config/etc/pki/tls/certs/westgate.pem (added) OM NOM NOM NOM CERTIFICATES Thu, 28 Aug 2008 20:07:10 GMT geofft [821] * server/fedora/config/etc/httpd/vhosts.d/mitsoc.conf (modified) * server/fedora/config/etc/httpd/vhosts.d/random-hall.conf (modified) I'm stupid. Wed, 27 Aug 2008 00:34:14 GMT geofft [820] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) * server/fedora/config/etc/httpd/vhosts.d (added) * server/fedora/config/etc/httpd/vhosts.d/mitsoc.conf (added) * server/fedora/config/etc/httpd/vhosts.d/random-hall.conf (added) * server/fedora/config/etc/httpd/vhosts.d/template (copied) * server/fedora/config/etc/pki/tls/certs/mitsoc.pem (added) * server/fedora/config/etc/pki/tls/certs/random-hall.pem (added) Add server certS for random-hall.mit.edu and mitsoc.mit.edu Wed, 27 Aug 2008 00:08:48 GMT geofft [819] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) Negotiate everything, don't just connect. Wed, 20 Aug 2008 18:11:05 GMT geofft [818] * server/doc/install-howto (modified) My head is starting to heal! Wed, 20 Aug 2008 15:51:23 GMT geofft [817] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) * server/fedora/config/etc/syslog-ng/syslog-ng.conf (modified) Added code to zephyr on OOM kills. Also commented out a change by ... Wed, 20 Aug 2008 07:49:58 GMT andersk [816] * server/common/patches/httpd-2.2.x-broken-ldap-caching.patch (deleted) * server/common/patches/httpd-2.2.x-sni.patch (moved) * server/fedora/specs/httpd.spec.patch (modified) Update the SNI patch for httpd 2.2.9, from ... Wed, 20 Aug 2008 07:36:07 GMT andersk [815] * server/fedora/Makefile (modified) Bring back patch-specs. Tue, 19 Aug 2008 16:05:42 GMT geofft [814] * server/fedora/config/etc/php.d/scripts.ini (deleted) As Anders would say... Tue, 19 Aug 2008 16:02:26 GMT geofft [813] * server/fedora/config/etc/php.d/Fileinfo.ini (added) * server/fedora/config/etc/php.d/_scripts.ini (added) * server/fedora/config/etc/php.d/bcmath.ini (added) * server/fedora/config/etc/php.d/dba.ini (added) * server/fedora/config/etc/php.d/dbase.ini (added) * server/fedora/config/etc/php.d/dom.ini (added) * server/fedora/config/etc/php.d/gd.ini (added) * server/fedora/config/etc/php.d/imap.ini (added) * server/fedora/config/etc/php.d/json.ini (added) * server/fedora/config/etc/php.d/ldap.ini (added) * server/fedora/config/etc/php.d/mbstring.ini (added) * server/fedora/config/etc/php.d/mcrypt.ini (added) * server/fedora/config/etc/php.d/mysql.ini (added) * server/fedora/config/etc/php.d/mysqli.ini (added) * server/fedora/config/etc/php.d/ncurses.ini (added) * server/fedora/config/etc/php.d/odbc.ini (added) * server/fedora/config/etc/php.d/pdo.ini (added) * server/fedora/config/etc/php.d/pdo_mysql.ini (added) * server/fedora/config/etc/php.d/pdo_odbc.ini (added) * server/fedora/config/etc/php.d/pdo_pgsql.ini (added) * server/fedora/config/etc/php.d/pdo_sqlite.ini (added) * server/fedora/config/etc/php.d/pgsql.ini (added) * server/fedora/config/etc/php.d/rrdtool.ini (added) * server/fedora/config/etc/php.d/snmp.ini (added) * server/fedora/config/etc/php.d/soap.ini (added) * server/fedora/config/etc/php.d/tidy.ini (added) * server/fedora/config/etc/php.d/xmlreader.ini (added) * server/fedora/config/etc/php.d/xmlrpc.ini (added) * server/fedora/config/etc/php.d/xmlwriter.ini (added) * server/fedora/config/etc/php.d/xsl.ini (added) * server/fedora/config/etc/php.d/z-mailparse.ini (added) * server/fedora/config/etc/php.d/zip.ini (added) This looks useful too Tue, 19 Aug 2008 04:35:14 GMT geofft [812] * server/doc/install-howto (modified) One day this will be a makefile or a maintainer script Mon, 18 Aug 2008 20:05:05 GMT quentin [811] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) * server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (modified) * server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (modified) Add localhost to the list of scripts names Mon, 18 Aug 2008 19:31:36 GMT quentin [810] * server/fedora/specs/httpd.spec.patch (modified) LDAP caching fix was moved upstream Mon, 18 Aug 2008 19:18:33 GMT quentin [809] * server/fedora/specs/httpd.spec.patch (modified) Make the patch valid (emacs patch-mode FTW) Mon, 18 Aug 2008 19:20:45 GMT geofft [808] * server/fedora/config/etc/php.ini (added) Probably a useful file to have. Mon, 18 Aug 2008 18:57:49 GMT quentin [807] * server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (added) Add routes for sql via eth1 Mon, 18 Aug 2008 18:05:53 GMT quentin [806] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) Revert geofft's comments Mon, 18 Aug 2008 18:01:46 GMT quentin [805] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) * lvs/debian/config/etc/network/if-up.d/iptables (modified) Load balance port 444 in addition to port 443, and do a negotiate ... Mon, 18 Aug 2008 08:38:56 GMT andersk [804] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) We don't actually have a deb.gif. Sun, 17 Aug 2008 20:19:24 GMT geofft [803] * server/doc/install-howto (modified) More steps yay Sun, 17 Aug 2008 00:57:00 GMT andersk [802] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Allow a directory index of /__scripts/icons. Wed, 13 Aug 2008 15:54:59 GMT geofft [801] * server/fedora/config/etc/pki (added) * server/fedora/config/etc/pki/tls (added) * server/fedora/config/etc/pki/tls/certs (added) * server/fedora/config/etc/pki/tls/certs/ca.pem (added) * server/fedora/config/etc/pki/tls/certs/familynet.pem (added) * server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (added) * server/fedora/config/etc/pki/tls/certs/scripts.pem (added) * server/fedora/config/etc/pki/tls/certs/star.scripts.pem (added) /etc: Add pki/tls/certs/*.pem to the repository. Sun, 10 Aug 2008 03:38:57 GMT andersk [800] * server/common/oursrc/nss_nonlocal/configure.ac (modified) * server/common/oursrc/nss_nonlocal/nonlocal-group.c (modified) * server/fedora/specs/nss_nonlocal.spec (modified) Update to nss_nonlocal 1.8. Sat, 09 Aug 2008 01:10:28 GMT geofft [799] * server/fedora/config/etc/cron.d/whoisd (modified) * server/fedora/config/etc/sysctl.conf (modified) Uncommitted changes from o-f: reboot on kernel panic (do we actually ... Wed, 06 Aug 2008 16:37:54 GMT quentin [798] * server/doc/install-howto (modified) Set up nrpe Wed, 06 Aug 2008 16:37:04 GMT quentin [797] * server/doc/install-howto (modified) Use https to check our the repo Wed, 06 Aug 2008 08:53:24 GMT geofft [796] * server/doc/install-howto (modified) * server/fedora/Makefile (modified) * server/fedora/meta-patches (deleted) oh hai, i fixed ur maekfile Wed, 06 Aug 2008 08:48:09 GMT geofft [795] * server/common/patches/httpd-2.2.x-mod_status-security.patch (added) * server/fedora/specs/httpd.spec.patch (modified) httpd: Commit quentin's mod_status patch, which disallows server- ... Wed, 06 Aug 2008 04:45:49 GMT quentin [794] * server/fedora/config/etc/sudoers (modified) Update sudoers based on F9 template Wed, 06 Aug 2008 04:28:56 GMT geofft [793] * locker/bin/ssh (modified) * locker/bin/sshmic (modified) Replacing sshmic with a script to use the system's ssh, but with our ... Wed, 06 Aug 2008 04:17:39 GMT quentin [792] * server/fedora/config/etc/exports (deleted) We don't share /tmp (eeew) Wed, 06 Aug 2008 04:07:28 GMT quentin [791] * server/fedora/config/etc/hosts (modified) Add bees-knees and cats-whiskers to /etc/hosts Tue, 05 Aug 2008 19:15:54 GMT geofft [790] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) Oops, missed scripts-test's IP. Tue, 05 Aug 2008 19:14:32 GMT geofft [789] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) Update names for scripts[1-4] Sun, 03 Aug 2008 18:10:28 GMT geofft [788] * server/doc/install-howto (modified) * server/fedora/Makefile (modified) More install instructions, and Makefile fixes from myself and Quentin. Sun, 03 Aug 2008 16:53:23 GMT geofft [787] * server/fedora/config/etc/sysconfig/iptables (modified) Fix some stuff about our iptables rules, including: - Remove ACCEPT ... Sat, 02 Aug 2008 23:36:35 GMT andersk [786] * server/fedora/Makefile (modified) Add glibc-devel.i386 to $(basic-deps). Sat, 02 Aug 2008 22:51:50 GMT geofft [785] * server/doc/install-howto (modified) all in all you're just another head in the wall Sat, 02 Aug 2008 21:25:38 GMT quentin [784] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Use explicit recipients for non-root log messages Sat, 02 Aug 2008 21:17:54 GMT geofft [783] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Make d_zroot.pl zephyr people in the .k5login in personals Tue, 29 Jul 2008 11:18:13 GMT andersk [782] * server/common/oursrc/nss_nonlocal/Makefile (deleted) * server/common/oursrc/nss_nonlocal/Makefile.am (added) * server/common/oursrc/nss_nonlocal/configure.ac (added) * server/common/oursrc/nss_nonlocal/libnss_nonlocal.map (deleted) * server/common/oursrc/nss_nonlocal/nonlocal-group.c (modified) * server/common/oursrc/nss_nonlocal/nonlocal-passwd.c (modified) * server/common/oursrc/nss_nonlocal/nonlocal.h (modified) * server/common/oursrc/nss_nonlocal/nsswitch-internal.h (modified) * server/fedora/specs/nss_nonlocal.spec (modified) Update to nss_nonlocal 1.7, which fixes the nscd bug. Fri, 25 Jul 2008 02:54:02 GMT quentin [781] * server/fedora/config/etc/munin/apache-htpasswd (copied) * server/fedora/config/etc/munin/munin-node.conf (modified) munin needs to start as root so it can setuid to run the script; it ... Fri, 25 Jul 2008 01:06:40 GMT geofft [780] * server/fedora/config/etc/munin/apache-htpasswd (deleted) * server/fedora/config/etc/munin/munin-node.conf (modified) Munin should not run as root. Remove munin's htpasswd file, since ... Fri, 25 Jul 2008 00:17:14 GMT geofft [779] * server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (modified) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) mod_status is a serious privacy violation. Sun, 13 Jul 2008 05:42:34 GMT geofft [778] * server/fedora/config/etc/sysconfig/openafs (modified) This list is a little better Sun, 13 Jul 2008 01:27:44 GMT geofft [777] * server/fedora/config/etc/sysconfig/openafs (modified) Add more sysnames to differentiate between OS releases, and add the ... Thu, 10 Jul 2008 09:52:58 GMT geofft [776] * locker/bin/signup-minimal (modified) Sleep for 10 seconds after creating a new account to let nscd's cache ... Thu, 10 Jul 2008 09:33:57 GMT geofft [775] * server/fedora/config/etc/nscd.conf (added) Version nscd.conf, and reduce the negative TTL to 5 seconds to solve ... Sat, 05 Jul 2008 16:46:52 GMT quentin [774] * lvs/debian/config/etc/apt/sources.list.d/heartbeat.list (modified) The LVS repository makes the baby Tim Berners-Lee cry Wed, 25 Jun 2008 21:47:56 GMT quentin [773] * locker/bin/signup (added) Add a "signup" meta-script for signing up individual services Thu, 19 Jun 2008 19:44:44 GMT quentin [772] * server/common/oursrc/whoisd/whoisd.tac (modified) Read whois key from filesystem Thu, 19 Jun 2008 19:40:31 GMT quentin [771] * server/common/oursrc/whoisd/whoisd.tac (modified) Commit local changes from b-m to whoisd Wed, 18 Jun 2008 22:42:57 GMT quentin [770] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Stop more spew; parse ssh keys and identify the used key when ... Wed, 18 Jun 2008 01:35:57 GMT andersk [769] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) The opendir doesn't need to succeed to trigger fakestat. Tue, 17 Jun 2008 06:11:32 GMT geofft [768] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Commented out scripts-spew. It is inappropriate to send syslogs about ... Tue, 17 Jun 2008 03:25:56 GMT geofft [767] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) No really I don't want fakestat Wed, 04 Jun 2008 19:19:36 GMT geofft [766] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) Comment out sx-blade-4 from the webzephyr pool, pending further testing. Tue, 03 Jun 2008 19:07:19 GMT presbrey [765] * server/common/oursrc/accountadm/Makefile.in (modified) * server/common/oursrc/accountadm/cronload (added) * server/common/oursrc/accountadm/vhostadd (added) * server/common/oursrc/accountadm/vhostedit (added) * server/fedora/specs/accountadm.spec (modified) packaged cronload,vhostadd,vhostedit Tue, 03 Jun 2008 18:52:08 GMT presbrey [764] * server/common/oursrc/execsys/mrproper (modified) Tue, 03 Jun 2008 18:46:00 GMT presbrey [763] * server/common/oursrc/whoisd/Makefile.in (added) * server/common/oursrc/whoisd/configure.in (added) * server/common/oursrc/whoisd/crontab (added) * server/common/oursrc/whoisd/mrproper (added) * server/fedora/Makefile (modified) * server/fedora/meta-patches (added) * server/fedora/specs/whoisd.spec (added) whoisd packaged Tue, 03 Jun 2008 17:43:58 GMT quentin [762] * server/common/oursrc/whoisd/whoisd.tac (modified) Don't scan vhosts if there isn't a vhost directory Tue, 03 Jun 2008 17:23:48 GMT presbrey [761] * server/fedora/config/gems.py (modified) gem replication install script Tue, 03 Jun 2008 17:21:05 GMT presbrey [760] * server/common/patches/openssh-5.0p1-multihomed.patch (added) * server/fedora/Makefile (modified) * server/fedora/meta-patches (deleted) * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/krb5.spec.patch (modified) * server/fedora/specs/openafs.spec.patch (modified) * server/fedora/specs/openssh.spec.patch (modified) Update build system for Fedora 9 Thu, 22 May 2008 23:30:20 GMT quentin [759] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) * server/fedora/config/etc/sysconfig/httpd (added) Tweak httpd settings Wed, 21 May 2008 21:29:00 GMT quentin [758] * server/fedora/config/etc/nagios/check_afs (modified) Avoid spew in cases of serious error Wed, 21 May 2008 21:27:41 GMT quentin [757] * server/fedora/config/etc/nagios/check_afs (added) * server/fedora/config/etc/nagios/nrpe.cfg (modified) Add AFS monitoring to Nagios Wed, 21 May 2008 07:26:51 GMT quentin [756] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) add sx-blade-4 Wed, 14 May 2008 12:53:22 GMT andersk [755] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Oops, missed a spot. Wed, 14 May 2008 12:48:26 GMT andersk [754] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Use the scripts private key for *.scripts as well (the previous ... Tue, 13 May 2008 21:25:46 GMT quentin [753] * lvs/debian/config/etc/aliases (added) Import LVS aliases file Sun, 11 May 2008 06:27:28 GMT njess [752] * locker/sbin/mail-owners.pl (added) Script to mail to locker owners Thu, 08 May 2008 13:28:51 GMT andersk [751] * server/fedora/config/etc/nsswitch.conf (added) Configure nsswitch.conf to use nss_nonlocal. Thu, 08 May 2008 13:27:32 GMT andersk [750] * server/common/oursrc/nss_nonlocal (added) * server/common/oursrc/nss_nonlocal/Makefile (added) * server/common/oursrc/nss_nonlocal/README (added) * server/common/oursrc/nss_nonlocal/libnss_nonlocal.map (added) * server/common/oursrc/nss_nonlocal/nonlocal-group.c (added) * server/common/oursrc/nss_nonlocal/nonlocal-passwd.c (added) * server/common/oursrc/nss_nonlocal/nonlocal-shadow.c (added) * server/common/oursrc/nss_nonlocal/nonlocal.h (added) * server/common/oursrc/nss_nonlocal/nsswitch-internal.h (added) * server/fedora/Makefile (modified) * server/fedora/specs/nss_nonlocal.spec (added) Add nss_nonlocal. Wed, 07 May 2008 02:55:03 GMT andersk [749] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Nope. Don't care. Mon, 05 May 2008 01:44:51 GMT andersk [748] * locker/sbin/commit-zephyr (modified) Allow sending commits to instance rNNN or string.rNNN. Sun, 04 May 2008 09:55:46 GMT andersk [747] * locker/sbin/propose-update (modified) Correct usage message. Sun, 04 May 2008 04:35:40 GMT price [746] * locker/sbin/build-update (modified) dang shell scripting Sun, 04 May 2008 04:04:56 GMT price [745] * locker/sbin/build-update (modified) * locker/sbin/propose-update (modified) more never-committed changes from last time I don't know where ... Sun, 04 May 2008 03:41:10 GMT price [744] * locker/sbin/build-update (modified) build-update: support prepatch script Sun, 04 May 2008 03:03:35 GMT njess [743] * locker/deploy/bin/wordpress (modified) Updated wordpress installer for 2.5.1 Sun, 04 May 2008 01:25:20 GMT njess [742] * locker/sbin/build-update (modified) misc. uncommitted changes from April from acrefoot Sat, 03 May 2008 23:42:12 GMT njess [741] * locker/sbin/propose-update (modified) Added --dev argument to usage message Fri, 02 May 2008 22:45:13 GMT andersk [740] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Update SSL configuration directives from Fedora's ssl.conf. Notably, ... Fri, 02 May 2008 11:52:57 GMT andersk [739] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) spew-- Thu, 01 May 2008 12:22:00 GMT andersk [738] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) SHUT. THE. FUCK. UP. Wed, 30 Apr 2008 22:37:20 GMT geofft [737] * noc/nagios/base.cfg (modified) add a new Nagios timeperiod, 9x5 Wed, 30 Apr 2008 22:08:33 GMT quentin [736] * noc/munin/plugins/afs_df_athena.mit.edu (added) * noc/munin/plugins/afs_df_sipb.mit.edu (added) Initial import of munin AFS monitoring plugin Thu, 24 Apr 2008 19:06:48 GMT quentin [735] * noc/nagios/cgi.cfg (modified) * noc/nagios/contacts.cfg (modified) * noc/nagios/hosts.cfg (modified) * noc/nagios/services.cfg (modified) hardcode SQL alerts to sql@mit.edu Thu, 24 Apr 2008 04:36:50 GMT andersk [734] * server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl.conf (modified) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Turn on KeepAlive for SSL and increase timeouts, to avoid ... Wed, 23 Apr 2008 03:55:04 GMT geofft [733] * locker/bin/signup-minimal (modified) * locker/deploy/bin/onathena (modified) * Sync the code structure in signup-minimal and onathena * Deal with ... Thu, 17 Apr 2008 08:16:26 GMT andersk [732] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) Apparently defined(%hash) is deprecated. Thu, 17 Apr 2008 08:10:17 GMT andersk [731] * server/common/oursrc/accountadm/configure.in (modified) * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) Rewrite hesinfo parsing in perl.