#
# ChangeLog for server
#
# Generated by Trac 1.0.2
# Jan 21, 2025, 8:39:46 PM

Tue, 06 Nov 2007 05:48:06 GMT andersk [510]
	* server/common/patches/openafs-splice.patch (added)
	* server/fedora/specs/openafs.spec.patch (modified)

	Implement splice_write and splice_read so that sendfile() works on ...


Mon, 05 Nov 2007 22:08:08 GMT andersk [509]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Apparently sendfile() breaks with kernel 2.6.23 and openafs 1.4.5.


Fri, 02 Nov 2007 05:27:49 GMT andersk [507]
	* server/fedora/Makefile (modified)
	* server/fedora/meta-patches/openafs-client.init.patch (deleted)
	* server/fedora/specs/openafs.spec.patch (modified)

	Bump to OpenAFS 1.4.5.


Mon, 22 Oct 2007 22:01:26 GMT quentin [503]
	* server/fedora/config/etc/munin/plugin-conf.d/hddtemp_smartctl (added)
	* server/fedora/config/etc/munin/plugin-conf.d/munin-node (added)

	Add smart monitoring to munin


Fri, 19 Oct 2007 01:06:13 GMT andersk [501]
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)

	apacheDocumentRoot: $homedir/web_scripts


Thu, 18 Oct 2007 02:38:31 GMT andersk [500]
	* server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)

	Add b-m and o-f aliases.


Wed, 17 Oct 2007 01:56:53 GMT quentin [496]
	* server/common/oursrc/accountadm/admof.in (modified)

	Prepend system:scripts-root instead of append, so it will work even ...


Wed, 17 Oct 2007 01:08:25 GMT quentin [495]
	* server/common/oursrc/accountadm/admof.in (modified)

	Remove spurious space.


Wed, 17 Oct 2007 01:07:49 GMT quentin [494]
	* server/common/oursrc/accountadm/admof.in (modified)

	Allow system:scripts-root to connect to any user account.


Tue, 16 Oct 2007 04:01:31 GMT andersk [493]
	* server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)

	Make 127.0.0.1 work, for Munin monitoring.


Mon, 15 Oct 2007 21:35:50 GMT andersk [489]
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)

	Remarkably, Perl does have a few syntactical restrictions.


Mon, 15 Oct 2007 21:29:08 GMT geofft [488]
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)

	fix banned-user parsing, per quentin


Mon, 15 Oct 2007 13:38:21 GMT andersk [487]
	* server/fedora/config/etc/sudoers (modified)

	Not used anymore.


Mon, 15 Oct 2007 13:36:18 GMT andersk [486]
	* server/fedora/config/etc/openafs/SuidCells (modified)
	* server/fedora/config/etc/sysconfig/network (deleted)

	Oops, clean up a few things from r484.


Mon, 15 Oct 2007 12:33:52 GMT andersk [485]
	* server/common/oursrc/accountadm/configure.in (modified)
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)
	* server/fedora/specs/accountadm.spec (modified)

	Make new signups go to LDAP!


Mon, 15 Oct 2007 11:37:01 GMT andersk [484]
	* server/fedora/config/etc/ha.d/ha.cf (modified)
	* server/fedora/config/etc/ha.d/haresources (modified)
	* server/fedora/config/etc/ldap.conf (added)
	* server/fedora/config/etc/openafs/SuidCells (modified)
	* server/fedora/config/etc/postfix/main.cf (modified)
	* server/fedora/config/etc/sysconfig/iptables (modified)
	* server/fedora/config/etc/sysconfig/network (modified)
	* server/fedora/config/etc/sysconfig/openafs (modified)
	* server/fedora/config/etc/yum.conf (modified)

	/etc/ldap.conf.


Mon, 15 Oct 2007 11:34:39 GMT geofft [483]
	* server/common/oursrc/httpdmods/mod_vhost_ldap.c (modified)

	allow /~user with no trailing slash to work


Mon, 15 Oct 2007 11:34:35 GMT andersk [482]
	* server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (modified)

	ou=vhosts -> ou=VirtualHosts.


Mon, 15 Oct 2007 10:46:21 GMT andersk [481]
	* server/common/oursrc/httpdmods/mod_vhost_ldap.c (modified)

	Hard-code ~username for LDAP vhosts.


Mon, 15 Oct 2007 10:31:22 GMT andersk [480]
	* server/common/oursrc/httpdmods/Makefile.in (modified)
	* server/fedora/specs/httpdmods.spec (modified)

	Build mod_vhost_ldap.


Mon, 15 Oct 2007 10:19:06 GMT andersk [479]
	* server/common/oursrc/httpdmods/mod_vhost_ldap.c (added)

	Import mod_vhost_ldap 1.2.0.


Mon, 15 Oct 2007 09:27:38 GMT geofft [478]
	* server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (modified)
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	more ldap chocolatey goodness


Mon, 15 Oct 2007 00:05:54 GMT andersk [477]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Don't IndexIgnore HEADER* README*.


Sun, 14 Oct 2007 08:32:34 GMT andersk [471]
	* server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo:0 (moved)
	* server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo:1 (moved)

	ifcfg-lo_0 -> ifcfg-lo:0 so it comes up on boot.


Fri, 12 Oct 2007 07:04:50 GMT geofft [455]
	* server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (added)

	prelim ldap stuff


Fri, 12 Oct 2007 07:04:26 GMT geofft [454]
	* server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (modified)
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	prelim ldap stuff


Sun, 07 Oct 2007 00:42:50 GMT andersk [450]
	* server/common/oursrc/accountadm/admof.in (modified)

	Rewrite admof to suck somewhat less.  In particular, do pts ...


Tue, 02 Oct 2007 01:24:17 GMT andersk [437]
	* server/common/patches/openssh-4.5p1-multihomed.patch (added)
	* server/fedora/Makefile (modified)
	* server/fedora/specs/openssh.spec.patch (added)

	Add OpenSSH multihomed patch (derived from asedeno) to enable ssh to ...


Mon, 01 Oct 2007 22:25:38 GMT andersk [436]
	* server/common/oursrc/httpdmods/mod_auth_sslcert.c (modified)

	Fix dir config merging in mod_auth_sslcert.


Sun, 30 Sep 2007 01:08:29 GMT andersk [435]
	* server/common/oursrc/accountadm/configure.in (modified)
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)

	Quick hack to support users with multiple filsys entries.


Wed, 26 Sep 2007 23:58:06 GMT andersk [432]
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)

	Backquotes and regular expressions are SHIT.


Tue, 25 Sep 2007 04:46:40 GMT andersk [426]
	* server/fedora/config/etc/aliases (modified)

	Add more users to aliases.


Tue, 25 Sep 2007 03:25:08 GMT andersk [425]
	* server/fedora/config/etc/selinux/strict/contexts/users/root (modified)

	Not sure what this is, but it's on both servers.


Tue, 25 Sep 2007 03:24:07 GMT andersk [424]
	* server/fedora/config/etc/krb.conf (modified)
	* server/fedora/config/etc/krb.realms (modified)
	* server/fedora/config/etc/krb5.conf (modified)

	Kerberos config from o-f.


Tue, 25 Sep 2007 03:12:05 GMT quentin [423]
	* server/fedora/config/etc/issue.net.no_tkt (added)
	* server/fedora/config/etc/issue.net.no_user (added)
	* server/fedora/config/etc/pam.d/sshd (added)
	* server/fedora/config/etc/ssh/sshd_config (modified)

	Tell users when they don't have tickets or don't exist


Tue, 25 Sep 2007 02:41:12 GMT quentin [422]
	* server/fedora/config/etc/aliases (modified)

	Update root mail recipients


Tue, 25 Sep 2007 02:40:25 GMT quentin [421]
	* server/fedora/config/etc/sysctl.conf (modified)

	Enabling magic sysrq


Tue, 25 Sep 2007 02:30:40 GMT quentin [420]
	* server/fedora/config/etc/php.d/scripts.ini (modified)

	Removing arbitrary limits (to sync repository to actual state)


Tue, 25 Sep 2007 02:27:06 GMT quentin [419]
	* server/fedora/config/etc/hosts (modified)

	Committing live hosts file (was same on both servers)


Tue, 25 Sep 2007 01:53:42 GMT quentin [418]
	* server/fedora/config/etc/sysconfig/openafs (modified)

	Committing unknown change (rpm upgrade?); it's true on both servers.


Tue, 25 Sep 2007 01:37:54 GMT quentin [417]
	* server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (modified)

	Enable munin apache graphing by turning on server-status


Tue, 25 Sep 2007 01:26:35 GMT quentin [416]
	* server/fedora/config/etc/munin (added)
	* server/fedora/config/etc/munin/apache-htpasswd (added)
	* server/fedora/config/etc/munin/munin-node.conf (added)
	* server/fedora/config/etc/munin/plugin-conf.d (added)
	* server/fedora/config/etc/munin/plugin-conf.d/apache_accesses (added)
	* server/fedora/config/etc/munin/plugin-conf.d/apache_processes (added)
	* server/fedora/config/etc/munin/plugin-conf.d/apache_volume (added)
	* server/fedora/config/etc/munin/plugins (added)
	* server/fedora/config/etc/munin/plugins/apache_accesses (added)
	* server/fedora/config/etc/munin/plugins/apache_processes (added)
	* server/fedora/config/etc/munin/plugins/apache_volume (added)

	Added munin configuration for monitoring apache


Wed, 19 Sep 2007 04:58:21 GMT andersk [409]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Remove SSLUserName, because mod_auth_sslcert is better and having the ...


Wed, 19 Sep 2007 03:33:16 GMT andersk [408]
	* server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (modified)

	SSLVerifyClient optional.


Mon, 17 Sep 2007 20:42:35 GMT andersk [407]
	* server/fedora/Makefile (modified)

	Fix the stupid rpmbuild symlink bug.


Mon, 17 Sep 2007 20:37:52 GMT andersk [406]
	* server/common/patches/httpd-suexec-scripts.patch (modified)

	Reapply selinux fix from r403.


Mon, 17 Sep 2007 20:06:51 GMT andersk [405]
	* server/common/patches/httpd-suexec-scripts.patch (modified)

	Revert r403 pending discussion of its security implications.


Mon, 17 Sep 2007 18:42:45 GMT presbrey [404]
	* server/fedora/Makefile (modified)

	slight Makefile correction for suexec


Mon, 17 Sep 2007 18:37:42 GMT presbrey [403]
	* server/common/patches/httpd-suexec-scripts.patch (modified)

	allow directives like SetEnv PYTHONPATH/PERL5LIB etc.


Mon, 10 Sep 2007 20:58:39 GMT andersk [399]
	* server/fedora/config/etc/httpd/conf.d/vhosts-vhost-names.conf (modified)

	Add www.* names for non-mit.edu fake vhosts.


Sat, 08 Sep 2007 08:37:28 GMT andersk [395]
	* server/fedora/config/etc/httpd/conf.d/vhosts-vhost-names.conf (modified)

	Make lombana a real vhost.


Wed, 05 Sep 2007 20:07:01 GMT andersk [392]
	* server/fedora/specs/accountadm.spec (modified)

	Don't fail if signup user/group already exist.


Sun, 02 Sep 2007 10:23:00 GMT andersk [391]
	* server/fedora/config/etc/httpd/conf.d/auth_sslcert.conf (modified)

	Enable mod_auth_optional.


Sun, 02 Sep 2007 10:17:43 GMT andersk [390]
	* server/common/oursrc/httpdmods/Makefile.in (modified)
	* server/common/oursrc/httpdmods/mod_auth_optional.c (added)
	* server/common/oursrc/httpdmods/mod_auth_sslcert.c (modified)
	* server/fedora/specs/httpdmods.spec (modified)

	httpd module updates, including support for optional authentication.


Sun, 02 Sep 2007 10:09:03 GMT andersk [389]
	* server/common/oursrc/httpdmods/Makefile.in (modified)
	* server/fedora/specs/httpdmods.spec (modified)

	Use apxs to build Apache modules.


Wed, 29 Aug 2007 02:10:06 GMT andersk [387]
	* server/doc/install-howto (modified)

	Mention rails.


Sat, 25 Aug 2007 05:10:22 GMT andersk [384]
	* server/fedora/config/etc/httpd/conf.d/auth_sslcert.conf (modified)

	Allow mod_auth_sslcert configuration to be overridden in .htaccess.


Mon, 13 Aug 2007 01:40:09 GMT geofft [378]
	* server/common/oursrc/accountadm/signup-scripts-backend.in (modified)

	should fix the fakestat bug [help.mit.edu #460923]


Fri, 03 Aug 2007 06:12:41 GMT geofft [377]
	* server/doc/rpm_snapshot (modified)

	Installed Django on the two servers.


Wed, 01 Aug 2007 23:45:43 GMT andersk [374]
	* server/doc/rpm (modified)
	* server/doc/rpm_snapshot (modified)

	Add arch to the rpm list.


Wed, 01 Aug 2007 23:31:22 GMT andersk [373]
	* server/doc/rpm (modified)
	* server/doc/rpm_snapshot (modified)

	Reformat and sort rpm_snapshot for better version control.
	Apologies ...


Wed, 01 Aug 2007 19:57:37 GMT jbarnold [371]
	* server/doc/install-howto (modified)
	* server/doc/rpm_snapshot (added)

	improved documentation for scripts-izing a machine


Tue, 31 Jul 2007 21:13:45 GMT andersk [370]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Move localhost.key to scripts.key.


Tue, 31 Jul 2007 21:04:11 GMT andersk [369]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	More useful certificate location.


Sun, 22 Jul 2007 23:46:42 GMT presbrey [365]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	provide header directives available to .htaccess files


Sun, 22 Jul 2007 07:42:00 GMT geofft [364]
	* server/fedora/config/etc/issue.net (modified)

	Replace the huge SSH banner with a reference to the FAQ that contains ...


Sun, 08 Jul 2007 03:33:59 GMT quentin [358]
	* server/fedora/config/etc/httpd/conf.d/vhosts-vhost-names.conf (added)
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)
	* vhosts/vhosts-vhost-names.gen.sh (added)

	made scripts.mit.edu the default vhost instead of vhosts.mit.edu; ...


Sun, 08 Jul 2007 02:29:33 GMT quentin [356]
	* server/fedora/config/etc/postfix/main.cf (modified)

	add -t to cause temporary rather than permanent failures when ...


Sat, 07 Jul 2007 19:36:55 GMT jbarnold [355]
	* server/doc/perl_snapshot.pm (modified)

	updated perl snapshot based on current scripts3


Mon, 02 Jul 2007 23:05:48 GMT jbarnold [353]
	* server/fedora/Makefile (modified)

	updated Makefile to follow conventional Fedora build process more ...


Mon, 02 Jul 2007 21:39:54 GMT jbarnold [352]
	* server/fedora/Makefile (modified)

	keyutils-libs-devel needed for building krb5 on fc7


Mon, 04 Jun 2007 16:39:20 GMT presbrey [340]
	* server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo_0 (moved)
	* server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo_1 (moved)

	renaming for svn clients that can't support colon pathnames


Thu, 31 May 2007 02:24:36 GMT andersk [336]
	* server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (modified)

	I was going to move SSLVerifyDepth 1 to vhosts-common-ssl.conf so ...


Thu, 31 May 2007 02:03:50 GMT andersk [335]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Remove authn_dbd_module.


Thu, 31 May 2007 01:45:37 GMT andersk [332]
	* server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (added)
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Accept certificates on port 444.


Wed, 30 May 2007 19:00:37 GMT andersk [330]
	* server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (added)
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Modularize scripts.mit.edu main vhost, and fix favicon.ico and ...


Tue, 29 May 2007 19:55:33 GMT andersk [325]
	* server/fedora/config/etc/sysctl.conf (modified)

	net.ipv4.tcp_keepalive_time = 825.


Fri, 25 May 2007 06:37:51 GMT geofft [323]
	* server/common/oursrc/accountadm/admof.in (modified)

	fix a regex


Fri, 25 May 2007 04:59:40 GMT quentin [322]
	* server/common/oursrc/accountadm/admof.in (modified)

	Allow / in Kerberos principals so that non-null instances can be used ...


Tue, 22 May 2007 15:31:24 GMT andersk [316]
	* server/fedora/Makefile (modified)

	Build openafs against latest (not running) kernel.


Tue, 22 May 2007 14:43:43 GMT andersk [315]
	* server/common/oursrc/execsys/upd-execsys (modified)
	* server/common/patches/httpd-suexec-scripts.patch (modified)

	Add .xhtml to the list of static extensions.


Sun, 06 May 2007 06:28:52 GMT andersk [305]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Add heartbeat to scripts-cert.


Mon, 30 Apr 2007 21:57:28 GMT andersk [302]
	* server/common/oursrc/execsys/upd-execsys (modified)

	Remove static-cat entries from binfmt-misc, since they are no longer ...


Tue, 24 Apr 2007 23:38:15 GMT presbrey [301]
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	raised RLimitMEM


Mon, 23 Apr 2007 08:19:41 GMT andersk [300]
	* server/common/patches/httpd-suexec-scripts.patch (modified)

	Fix expected_len check.


Mon, 23 Apr 2007 08:18:06 GMT andersk [299]
	* server/fedora/Makefile (modified)

	Don't fail to build suexec if there's already a build in place!!!


Mon, 23 Apr 2007 07:45:08 GMT andersk [298]
	* server/common/patches/httpd-suexec-scripts.patch (modified)

	* Call static-cat directly from suexec on static extensions, instead ...


Mon, 23 Apr 2007 06:26:05 GMT andersk [297]
	* server/fedora/ref-prepatch/httpd.spec (modified)

	Replace ref-prepatch/httpd.spec with the actually unpatched version.


Mon, 23 Apr 2007 06:25:01 GMT andersk [296]
	* server/fedora/ref-prepatch/suexec.c (modified)

	Replace ref-prepatch/suexec.c with the actually unpatched version.


Sat, 14 Apr 2007 20:22:02 GMT presbrey [288]
	* server/fedora/config/etc/ha.d/haresources (modified)




Thu, 12 Apr 2007 06:47:22 GMT andersk [284]
	* server/fedora/config/etc/aliases (modified)

	Add myself to root@scripts mail.  (Should this maybe be the scripts- ...


Thu, 12 Apr 2007 01:10:44 GMT presbrey [283]
	* server/fedora/config/etc/ha.d (added)
	* server/fedora/config/etc/ha.d/ha.cf (added)
	* server/fedora/config/etc/ha.d/haresources (added)

	main server heartbeat configuration


Wed, 11 Apr 2007 21:07:20 GMT presbrey [282]
	* server/common/oursrc/tokensys/crontab (modified)
	* server/fedora/specs/tokensys.spec (modified)

	tokensys: move afsagent crontab to isolate from fail-over cron


Wed, 11 Apr 2007 20:50:11 GMT presbrey [281]
	* server/fedora/config/etc/syslog.conf (added)

	syslog.conf


Wed, 11 Apr 2007 17:42:02 GMT geofft [278]
	* server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl.conf (modified)

	Debugging an HTTPS problem...


Fri, 06 Apr 2007 23:43:50 GMT andersk [270]
	* server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (modified)
	* server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	* Complete alias list for main SSL vhost.
	* /heartbeat should only ...


Fri, 06 Apr 2007 17:03:45 GMT geofft [263]
	* server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (added)

	Include file to enable certificate authentication


Wed, 04 Apr 2007 02:53:32 GMT presbrey [260]
	* server/fedora/Makefile (modified)

	use web to retrieve sources


Wed, 04 Apr 2007 02:28:21 GMT jbarnold [259]
	* server/common/patches/openafs-scripts.patch (modified)

	Some patch offsets changed that should not have changed.
	I'm not ...


Wed, 04 Apr 2007 01:44:25 GMT presbrey [258]
	* server/common/patches/openafs-scripts.patch (modified)

	Added special permission bits for root and signup