# # ChangeLog for server/fedora # # Generated by Trac 1.0.2 # Mar 29, 2024, 12:48:40 AM Tue, 21 Apr 2009 00:01:01 GMT mitchb [1088] * server/fedora/config/etc/httpd/vhosts.d/bc.conf (added) * server/fedora/config/etc/pki/tls/certs/bc.pem (added) bc.mit.edu certificate and reified vhost Sun, 19 Apr 2009 21:49:25 GMT quentin [1086] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Test your changes! Port 444 was serving axo.mit.edu all day! Sun, 19 Apr 2009 06:51:58 GMT mitchb [1085] * server/fedora/config/etc/pki/tls/openssl.cnf (modified) scripts.mit.edu CSR defaults Sun, 19 Apr 2009 06:45:22 GMT mitchb [1084] * server/fedora/config/etc/pki/tls/openssl.cnf (added) Add openssl.cnf file, so we can track our standard CSR fields Sat, 18 Apr 2009 01:20:45 GMT geofft [1082] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Allow reified vhosts to override *.scripts Fri, 17 Apr 2009 23:45:18 GMT geofft [1081] * server/fedora/config/etc/httpd/vhosts.d/cycling-club.conf (added) * server/fedora/config/etc/httpd/vhosts.d/debathena.conf (modified) reify cycling-club.scripts.mit.edu to pick up the cert Fri, 17 Apr 2009 23:36:26 GMT geofft [1080] * server/fedora/config/etc/pki/tls/certs/cycling-club.pem (added) cycling-club.scripts 30 day cert from Comodo Tue, 14 Apr 2009 09:21:11 GMT mitchb [1079] * server/common/patches/openafs-localcsdb.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Use only our local CellServDB, not the one in the distribution so ... Tue, 14 Apr 2009 08:22:05 GMT mitchb [1078] * server/fedora/config/usr (added) * server/fedora/config/usr/vice (added) * server/fedora/config/usr/vice/etc (added) * server/fedora/config/usr/vice/etc/CellServDB.local (added) Add a CellServDB.local so we can pull in changes without rebuilding. Sat, 11 Apr 2009 19:02:13 GMT quentin [1073] * server/fedora/config/etc/security/limits.conf (modified) Don't let people lock all our memory (use the Ubuntu default of 64KB ... Sat, 11 Apr 2009 07:39:21 GMT quentin [1072] * server/fedora/config/etc/security/limits.conf (modified) Don't apply resource limits to root's processes, and clean up ... Sat, 11 Apr 2009 06:55:37 GMT quentin [1071] * server/fedora/config/etc/security/limits.conf (modified) Set sane memory resource limits Wed, 08 Apr 2009 13:23:50 GMT mitchb [1070] * server/common/patches/openafs-scripts.patch (modified) * server/fedora/Makefile (modified) * server/fedora/specs/openafs.spec.patch (modified) Build system fixes to upgrade to OpenAFS 1.4.10 Pulls in fixes for ... Wed, 08 Apr 2009 11:11:17 GMT mitchb [1069] * server/common/patches/krb5-kuserok-scripts.patch (modified) * server/fedora/specs/krb5.spec.patch (modified) Updates to the build system for krb5 Allow us to build with patches ... Tue, 07 Apr 2009 21:29:01 GMT quentin [1068] * server/fedora/config/etc/pam.d/sshd (modified) Disallow root keyboard-interactive logins Tue, 07 Apr 2009 14:41:33 GMT quentin [1067] * server/fedora/config/etc/httpd/vhosts.d/tibetforum.conf (added) * server/fedora/config/etc/pki/tls/certs/tibetforum.pem (added) tibetforum.mit.edu vhost + cert Sun, 05 Apr 2009 10:27:32 GMT mitchb [1064] * server/fedora/Makefile (modified) Change to new OpenSUSE nss-ldapd version so we can download and build ... Sat, 04 Apr 2009 04:54:44 GMT geofft [1059] * server/fedora/config/etc/nsswitch.conf (modified) We don't need mDNS Thu, 02 Apr 2009 04:53:52 GMT geofft [1043] * server/fedora/config/etc/nagios/check_afs (modified) contrib.scripts moved Wed, 01 Apr 2009 14:43:33 GMT mitchb [1040] * server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Use the django media directory from the RPM, not the egg. Silly ... Wed, 01 Apr 2009 01:28:32 GMT mitchb [1039] * server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Provide autoinstalled Djangos with /__scripts/django/media for admin CSS Sat, 28 Mar 2009 20:19:19 GMT mitchb [1035] * server/common/patches/httpd-2.2.x-304.patch (added) * server/common/patches/php-scripts-304.patch (added) * server/fedora/Makefile (modified) * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/php.spec.patch (added) * server/fedora/specs/scripts-base.spec (modified) Fix "the-bug" (non-empty content in 304s) in PHP (patch by ezyang) ... Sat, 28 Mar 2009 17:57:34 GMT mitchb [1034] * server/fedora/specs/httpd.spec.patch (modified) Fedora 9 changed from Apache 2.2.9 to 2.2.10 while we weren't looking Sat, 28 Mar 2009 17:29:57 GMT mitchb [1033] * server/fedora/specs/httpd.spec.patch (modified) Revert r959; we're not using Fedora 10. Fri, 27 Mar 2009 05:13:50 GMT mitchb [1032] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Change CPU time limit for Apache-spawned processes from 3min to 5min. ... Mon, 23 Mar 2009 15:31:59 GMT mitchb [1024] * server/fedora/Makefile (modified) * server/fedora/specs/pysvn.spec.patch (added) * server/fedora/specs/scripts-base.spec (modified) Clean up pysvn kludge for svn 1.5 on scripts. Patch the package ... Mon, 23 Mar 2009 04:25:28 GMT geofft [1020] * server/fedora/config/etc/sysconfig/openafs (modified) /etc/sysconfig/openafs: for great awesome Fri, 20 Mar 2009 18:38:23 GMT mitchb [1019] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Increase CPU time limit for processes spawned by Apache. This should ... Fri, 20 Mar 2009 10:42:46 GMT quentin [1018] * server/fedora/config/etc/ssh/shosts.equiv (modified) Allow hostbased authentication over the backend network (Yay!) Fri, 20 Mar 2009 10:19:50 GMT quentin [1017] * server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified) Route to b-k over the backend network Fri, 20 Mar 2009 03:19:50 GMT quentin [1016] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Allow FastCGIs to take up to 5 minutes to respond Tue, 10 Mar 2009 00:08:12 GMT quentin [1010] * server/fedora/config/etc/acpi (added) * server/fedora/config/etc/acpi/actions (added) * server/fedora/config/etc/acpi/actions/power.sh (added) ACPI event handler so you can't shut down with the power button Fri, 06 Mar 2009 07:23:21 GMT quentin [1006] * server/fedora/config/etc/sysctl.conf (modified) Reboot on OOM Wed, 04 Mar 2009 12:43:27 GMT mitchb [1001] * server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (modified) We need subversion-devel from testing as well, so that we can build ... Wed, 04 Mar 2009 00:23:46 GMT andersk [1000] * server/fedora/config/etc/security/limits.conf (modified) Change the core file limit from hard to soft. Tue, 03 Mar 2009 07:29:48 GMT geofft [999] * server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (added) Install Subversion (1.5) from the updates-testing-newkey repo. Tue, 03 Mar 2009 05:59:36 GMT geofft [998] * server/fedora/config/etc/httpd/vhosts.d/schuh.conf (added) * server/fedora/config/etc/pki/tls/certs/schuh.pem (added) cert and vhost for schuh.mit.edu Mon, 02 Mar 2009 07:01:13 GMT mitchb [996] * server/fedora/config/etc/sysconfig/openafs (modified) i386_linux3 isn't actually twice as good just because we listed it ... Mon, 02 Mar 2009 00:05:18 GMT geofft [994] * server/fedora/config/etc/sysconfig/openafs (modified) i386_deb40 is better than i386_linux1 Sun, 22 Feb 2009 12:49:04 GMT mitchb [992] * server/fedora/config/etc/cron.d/scripts-cron_status (modified) Don't let cron send mail if it can't touch the cron status file. ... Fri, 20 Feb 2009 10:12:16 GMT mitchb [988] * server/fedora/config/etc/aliases (modified) I should start reading root's mail. I will probably regret this. Thu, 19 Feb 2009 15:57:51 GMT quentin [986] * server/fedora/config/etc/hosts (modified) Add reverse-resolution for the backend IPs Thu, 19 Feb 2009 15:57:27 GMT quentin [985] * server/fedora/config/etc/postfix/virtual_re (modified) Map to local usernames, instead of to @scripts.mit.edu addresses ... Thu, 19 Feb 2009 04:34:42 GMT quentin [984] * server/fedora/config/etc/postfix/virtual_re (modified) Allow local part to contain @ Thu, 19 Feb 2009 04:10:28 GMT quentin [983] * server/fedora/config/etc/postfix/main.cf (modified) * server/fedora/config/etc/postfix/virtual (modified) * server/fedora/config/etc/postfix/virtual_re (added) Support mail to foo@bar.scripts.mit.edu Wed, 18 Feb 2009 15:06:18 GMT quentin [982] * server/fedora/config/etc/cron.d/scripts-cron_status (added) * server/fedora/config/etc/nagios/check_cron_working (added) * server/fedora/config/etc/nagios/nrpe.cfg (modified) Check that cron can actually run things as users Sat, 14 Feb 2009 04:51:55 GMT geofft [979] * server/fedora/config/etc/vimrc (modified) er, Fedora has a nontrivial vimrc Sat, 14 Feb 2009 04:48:23 GMT geofft [978] * server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) * server/fedora/config/etc/ssh/sshd_config (modified) undo miscommit Sat, 14 Feb 2009 04:45:39 GMT geofft [977] * server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) * server/fedora/config/etc/ssh/sshd_config (modified) * server/fedora/config/etc/vimrc (added) Suppress writing .viminfo file Fri, 13 Feb 2009 03:37:57 GMT geofft [975] * server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (added) * server/fedora/config/etc/pki/tls/certs/eastgate.pem (added) eastgate.mit.edu SSL cert and conf [help.mit.edu #792732] Wed, 11 Feb 2009 10:11:27 GMT andersk [974] * server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) Change sipb.mit.edu DocumentRoot to web_scripts/sipb. Wed, 11 Feb 2009 09:42:33 GMT geofft [973] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Change default cert to *.scripts except for 18.181.0.43. Wed, 11 Feb 2009 09:39:36 GMT geofft [972] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Uncommitted changes to httpd.conf. These seem to involve ... Wed, 11 Feb 2009 09:13:05 GMT andersk [971] * server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) Get rid of the custom sipb.mit.edu aliases. Mon, 09 Feb 2009 19:45:55 GMT andersk [970] * server/fedora/config/etc/hosts (modified) Change the IP for scripts.mit.edu and add scripts-vhosts.mit.edu. Fri, 06 Feb 2009 02:37:36 GMT andersk [969] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) Add scripts-vhosts. Fri, 06 Feb 2009 02:35:31 GMT andersk [968] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) Add 18.181.0.43 and scripts-vhosts.mit.edu. Thu, 05 Feb 2009 22:23:30 GMT geofft [967] * server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo:3 (modified) oops Thu, 05 Feb 2009 22:03:11 GMT geofft [966] * server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo:3 (added) Add new scripts.mit.edu IP address Thu, 29 Jan 2009 09:33:24 GMT quentin [963] * server/fedora/config/etc/httpd/vhosts.d/picker.conf (added) Add vhost entry for picker.mit.edu so it picks up its cert Thu, 29 Jan 2009 09:25:21 GMT geofft [962] * server/fedora/config/etc/pki/tls/certs/picker.pem (added) SSL cert for picker.mit.edu Wed, 28 Jan 2009 17:50:10 GMT quentin [961] * server/fedora/config/etc/dirsrv (added) * server/fedora/config/etc/dirsrv/slapd-scripts (added) * server/fedora/config/etc/dirsrv/slapd-scripts/schema (added) * server/fedora/config/etc/dirsrv/slapd-scripts/schema/98scripts-vhost.ldif (added) * server/fedora/config/etc/dirsrv/slapd-scripts/schema/99mod_vhost_ldap.ldif (added) Add scripts LDAP schema to the repo Wed, 28 Jan 2009 05:36:35 GMT geofft [959] * server/fedora/specs/httpd.spec.patch (modified) Update httpd.spec.patch for Fedora 10 Wed, 28 Jan 2009 03:42:28 GMT quentin [957] * server/common/oursrc/scripts-python-path (added) * server/common/oursrc/scripts-python-path/00scripts-home.pth (added) * server/fedora/specs/scripts-python-path.spec (added) Add scripts-python-path package Wed, 28 Jan 2009 02:58:23 GMT quentin [956] * server/fedora/specs/krb5.spec.patch (modified) Make filenames consistent in the krb5.spec patch Wed, 28 Jan 2009 02:31:26 GMT geofft [955] * server/fedora/specs/krb5.spec.patch (modified) Update krb5 patch for Fedora 10 Tue, 27 Jan 2009 08:13:05 GMT andersk [953] * server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) Revert r952. Tue, 27 Jan 2009 07:09:22 GMT quentin [952] * server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) Serve sipb.mit.edu wiki content directly via Apache Tue, 20 Jan 2009 21:51:24 GMT quentin [950] * server/common/oursrc/nss-ldapd (added) * server/fedora/specs/nss-ldapd.spec.patch (modified) Add a scripts version number to the nss-ldapd package Tue, 20 Jan 2009 09:22:17 GMT quentin [948] * server/fedora/config/etc/ssh/ssh_config (modified) Try hostbased authentication in the client Tue, 20 Jan 2009 09:17:10 GMT quentin [947] * server/fedora/config/etc/ssh/shosts.equiv (added) Add shosts.equiv for allowing logins Tue, 20 Jan 2009 09:16:40 GMT quentin [946] * server/fedora/config/etc/ssh/ssh_config (added) * server/fedora/config/etc/ssh/ssh_known_hosts (added) * server/fedora/config/etc/ssh/sshd_config (modified) Allow ssh hostbased authentication Thu, 15 Jan 2009 03:30:15 GMT geofft [943] * server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) Hacks because Apache makes things hard at the .htaccess level. Wed, 14 Jan 2009 01:43:34 GMT geofft [942] * server/fedora/config/etc/httpd/vhosts.d/debathena.conf (added) debathena.mit.edu vhost Wed, 14 Jan 2009 01:41:47 GMT geofft [941] * server/fedora/config/etc/pki/tls/certs/debathena.pem (added) cert for debathena.mit.edu Sun, 11 Jan 2009 03:52:47 GMT geofft [940] * server/fedora/config/etc/httpd/vhosts.d/sipb.conf (added) Whoops, forgot to reify-vhost.py sipb.mit.edu Wed, 07 Jan 2009 17:46:21 GMT geofft [939] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Setting tty modes failed: Invalid argument Tue, 06 Jan 2009 21:30:00 GMT andersk [938] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) d_zroot.pl: Read .ssh/authorized_keys, not just authorized_keys2. ... Fri, 02 Jan 2009 07:12:33 GMT andersk [933] * server/fedora/specs/accountadm.spec (modified) We need the patched pts in scripts-openafs-devel for accountadm. Fri, 02 Jan 2009 07:00:21 GMT quentin [932] * server/fedora/specs/scripts-base.spec (modified) Don't install openafs-debuginfo package Fri, 02 Jan 2009 05:55:17 GMT andersk [931] * server/fedora/specs/scripts-base.spec (modified) Make scripts-base depend scripts-kmod-openafs. Fri, 02 Jan 2009 05:52:39 GMT andersk [930] * server/fedora/specs/openafs.spec.patch (modified) rpmvercmp sucks. Hopefully, there will never be a Linux kernel 100.0. Fri, 02 Jan 2009 05:14:30 GMT andersk [929] * server/fedora/specs/openafs.spec.patch (modified) Make kmod-openafs provide scripts-kmod-openafs. Fri, 02 Jan 2009 05:12:23 GMT andersk [928] * server/fedora/Makefile (modified) Use target-local Makefile variables for svnversion. Fri, 02 Jan 2009 04:26:45 GMT quentin [927] * server/fedora/specs/scripts-base.spec (modified) * server/fedora/specs/whoisd.spec (modified) More updated specs Fri, 02 Jan 2009 04:02:16 GMT quentin [926] * server/fedora/Makefile (modified) * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/execsys.spec (modified) * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/httpdmods.spec (modified) * server/fedora/specs/krb5.spec.patch (modified) * server/fedora/specs/logview.spec (modified) * server/fedora/specs/openafs.spec.patch (modified) * server/fedora/specs/openssh.spec.patch (modified) * server/fedora/specs/sql-signup.spec (modified) * server/fedora/specs/tokensys.spec (modified) Use an RPM macro instead of sed to specify package versions Fri, 02 Jan 2009 02:12:56 GMT quentin [925] * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/krb5.spec.patch (modified) * server/fedora/specs/openafs.spec.patch (modified) * server/fedora/specs/openssh.spec.patch (modified) Update specfile patches to provide scripts-specific virtual packages ... Fri, 02 Jan 2009 02:12:33 GMT quentin [924] * server/fedora/specs/scripts-base.spec (modified) Fix scripts-base package Thu, 01 Jan 2009 21:15:22 GMT quentin [923] * server/common/oursrc/scripts-base (added) * server/fedora/Makefile (modified) * server/fedora/specs/scripts-base.spec (added) Initial import of scripts-base package Thu, 01 Jan 2009 04:17:03 GMT quentin [922] * server/fedora/specs/execsys.spec (modified) don't stop execsys on package updates Thu, 01 Jan 2009 04:00:27 GMT andersk [921] * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/tokensys.spec (modified) userdel already implies groupdel. Thu, 01 Jan 2009 03:49:25 GMT quentin [920] * server/fedora/specs/logview.spec (modified) * server/fedora/specs/tokensys.spec (modified) Ignore preexisting users when reinstalling packages Thu, 01 Jan 2009 03:41:22 GMT quentin [919] * server/fedora/specs/tokensys.spec (modified) Also fix tokensys Thu, 01 Jan 2009 03:36:00 GMT quentin [918] * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/logview.spec (modified) Only remove users on erase, not upgrade Thu, 01 Jan 2009 01:49:25 GMT quentin [917] * server/fedora/Makefile (modified) * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/execsys.spec (modified) * server/fedora/specs/httpdmods.spec (modified) * server/fedora/specs/logview.spec (modified) * server/fedora/specs/sql-signup.spec (modified) * server/fedora/specs/tokensys.spec (modified) * server/fedora/specs/whoisd.spec (modified) Build packages with their svn revision as their version number Thu, 01 Jan 2009 00:42:24 GMT quentin [915] * server/fedora/config/etc/nsswitch.conf (modified) Support mDNS on scripts Thu, 01 Jan 2009 00:37:08 GMT quentin [914] * server/fedora/config/etc/sudoers (modified) Add if_err_eth2 to allowed munin commands (wtf?) Thu, 01 Jan 2009 00:34:58 GMT quentin [913] * server/fedora/specs/nss-ldapd.spec.patch (modified) Remove openSUSEisms from the specfile Thu, 01 Jan 2009 00:21:06 GMT quentin [912] * server/fedora/Makefile (modified) * server/fedora/specs/nss-ldapd.spec (deleted) * server/fedora/specs/nss-ldapd.spec.patch (added) Package nss-ldapd as a patch on the openSUSE rpm Wed, 31 Dec 2008 22:16:38 GMT quentin [911] * server/fedora/Makefile (modified) * server/fedora/specs/nss-ldapd.spec (added) Add nss-ldapd package