# # ChangeLog for server # # Generated by Trac 1.0.2 # Mar 28, 2024, 6:30:34 AM Fri, 16 Nov 2007 23:57:35 GMT andersk [516] * server/fedora/Makefile (modified) Make it easier to override kvariants and kernvers. Thu, 08 Nov 2007 04:31:32 GMT andersk [512] * server/fedora/config/etc/ldap.conf (modified) Use ldapi:// url. Tue, 06 Nov 2007 05:49:53 GMT andersk [511] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Re-enable sendfile now that it works. Tue, 06 Nov 2007 05:48:06 GMT andersk [510] * server/common/patches/openafs-splice.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Implement splice_write and splice_read so that sendfile() works on ... Mon, 05 Nov 2007 22:08:08 GMT andersk [509] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Apparently sendfile() breaks with kernel 2.6.23 and openafs 1.4.5. Fri, 02 Nov 2007 05:27:49 GMT andersk [507] * server/fedora/Makefile (modified) * server/fedora/meta-patches/openafs-client.init.patch (deleted) * server/fedora/specs/openafs.spec.patch (modified) Bump to OpenAFS 1.4.5. Mon, 22 Oct 2007 22:01:26 GMT quentin [503] * server/fedora/config/etc/munin/plugin-conf.d/hddtemp_smartctl (added) * server/fedora/config/etc/munin/plugin-conf.d/munin-node (added) Add smart monitoring to munin Fri, 19 Oct 2007 01:06:13 GMT andersk [501] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) apacheDocumentRoot: $homedir/web_scripts Thu, 18 Oct 2007 02:38:31 GMT andersk [500] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) Add b-m and o-f aliases. Wed, 17 Oct 2007 01:56:53 GMT quentin [496] * server/common/oursrc/accountadm/admof.in (modified) Prepend system:scripts-root instead of append, so it will work even ... Wed, 17 Oct 2007 01:08:25 GMT quentin [495] * server/common/oursrc/accountadm/admof.in (modified) Remove spurious space. Wed, 17 Oct 2007 01:07:49 GMT quentin [494] * server/common/oursrc/accountadm/admof.in (modified) Allow system:scripts-root to connect to any user account. Tue, 16 Oct 2007 04:01:31 GMT andersk [493] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) Make 127.0.0.1 work, for Munin monitoring. Mon, 15 Oct 2007 21:35:50 GMT andersk [489] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) Remarkably, Perl does have a few syntactical restrictions. Mon, 15 Oct 2007 21:29:08 GMT geofft [488] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) fix banned-user parsing, per quentin Mon, 15 Oct 2007 13:38:21 GMT andersk [487] * server/fedora/config/etc/sudoers (modified) Not used anymore. Mon, 15 Oct 2007 13:36:18 GMT andersk [486] * server/fedora/config/etc/openafs/SuidCells (modified) * server/fedora/config/etc/sysconfig/network (deleted) Oops, clean up a few things from r484. Mon, 15 Oct 2007 12:33:52 GMT andersk [485] * server/common/oursrc/accountadm/configure.in (modified) * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) * server/fedora/specs/accountadm.spec (modified) Make new signups go to LDAP! Mon, 15 Oct 2007 11:37:01 GMT andersk [484] * server/fedora/config/etc/ha.d/ha.cf (modified) * server/fedora/config/etc/ha.d/haresources (modified) * server/fedora/config/etc/ldap.conf (added) * server/fedora/config/etc/openafs/SuidCells (modified) * server/fedora/config/etc/postfix/main.cf (modified) * server/fedora/config/etc/sysconfig/iptables (modified) * server/fedora/config/etc/sysconfig/network (modified) * server/fedora/config/etc/sysconfig/openafs (modified) * server/fedora/config/etc/yum.conf (modified) /etc/ldap.conf. Mon, 15 Oct 2007 11:34:39 GMT geofft [483] * server/common/oursrc/httpdmods/mod_vhost_ldap.c (modified) allow /~user with no trailing slash to work Mon, 15 Oct 2007 11:34:35 GMT andersk [482] * server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (modified) ou=vhosts -> ou=VirtualHosts. Mon, 15 Oct 2007 10:46:21 GMT andersk [481] * server/common/oursrc/httpdmods/mod_vhost_ldap.c (modified) Hard-code ~username for LDAP vhosts. Mon, 15 Oct 2007 10:31:22 GMT andersk [480] * server/common/oursrc/httpdmods/Makefile.in (modified) * server/fedora/specs/httpdmods.spec (modified) Build mod_vhost_ldap. Mon, 15 Oct 2007 10:19:06 GMT andersk [479] * server/common/oursrc/httpdmods/mod_vhost_ldap.c (added) Import mod_vhost_ldap 1.2.0. Mon, 15 Oct 2007 09:27:38 GMT geofft [478] * server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (modified) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) more ldap chocolatey goodness Mon, 15 Oct 2007 00:05:54 GMT andersk [477] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Don't IndexIgnore HEADER* README*. Sun, 14 Oct 2007 08:32:34 GMT andersk [471] * server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo:0 (moved) * server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo:1 (moved) ifcfg-lo_0 -> ifcfg-lo:0 so it comes up on boot. Fri, 12 Oct 2007 07:04:50 GMT geofft [455] * server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (added) prelim ldap stuff Fri, 12 Oct 2007 07:04:26 GMT geofft [454] * server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (modified) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) prelim ldap stuff Sun, 07 Oct 2007 00:42:50 GMT andersk [450] * server/common/oursrc/accountadm/admof.in (modified) Rewrite admof to suck somewhat less. In particular, do pts ... Tue, 02 Oct 2007 01:24:17 GMT andersk [437] * server/common/patches/openssh-4.5p1-multihomed.patch (added) * server/fedora/Makefile (modified) * server/fedora/specs/openssh.spec.patch (added) Add OpenSSH multihomed patch (derived from asedeno) to enable ssh to ... Mon, 01 Oct 2007 22:25:38 GMT andersk [436] * server/common/oursrc/httpdmods/mod_auth_sslcert.c (modified) Fix dir config merging in mod_auth_sslcert. Sun, 30 Sep 2007 01:08:29 GMT andersk [435] * server/common/oursrc/accountadm/configure.in (modified) * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) Quick hack to support users with multiple filsys entries. Wed, 26 Sep 2007 23:58:06 GMT andersk [432] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) Backquotes and regular expressions are SHIT. Tue, 25 Sep 2007 04:46:40 GMT andersk [426] * server/fedora/config/etc/aliases (modified) Add more users to aliases. Tue, 25 Sep 2007 03:25:08 GMT andersk [425] * server/fedora/config/etc/selinux/strict/contexts/users/root (modified) Not sure what this is, but it's on both servers. Tue, 25 Sep 2007 03:24:07 GMT andersk [424] * server/fedora/config/etc/krb.conf (modified) * server/fedora/config/etc/krb.realms (modified) * server/fedora/config/etc/krb5.conf (modified) Kerberos config from o-f. Tue, 25 Sep 2007 03:12:05 GMT quentin [423] * server/fedora/config/etc/issue.net.no_tkt (added) * server/fedora/config/etc/issue.net.no_user (added) * server/fedora/config/etc/pam.d/sshd (added) * server/fedora/config/etc/ssh/sshd_config (modified) Tell users when they don't have tickets or don't exist Tue, 25 Sep 2007 02:41:12 GMT quentin [422] * server/fedora/config/etc/aliases (modified) Update root mail recipients Tue, 25 Sep 2007 02:40:25 GMT quentin [421] * server/fedora/config/etc/sysctl.conf (modified) Enabling magic sysrq Tue, 25 Sep 2007 02:30:40 GMT quentin [420] * server/fedora/config/etc/php.d/scripts.ini (modified) Removing arbitrary limits (to sync repository to actual state) Tue, 25 Sep 2007 02:27:06 GMT quentin [419] * server/fedora/config/etc/hosts (modified) Committing live hosts file (was same on both servers) Tue, 25 Sep 2007 01:53:42 GMT quentin [418] * server/fedora/config/etc/sysconfig/openafs (modified) Committing unknown change (rpm upgrade?); it's true on both servers. Tue, 25 Sep 2007 01:37:54 GMT quentin [417] * server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (modified) Enable munin apache graphing by turning on server-status Tue, 25 Sep 2007 01:26:35 GMT quentin [416] * server/fedora/config/etc/munin (added) * server/fedora/config/etc/munin/apache-htpasswd (added) * server/fedora/config/etc/munin/munin-node.conf (added) * server/fedora/config/etc/munin/plugin-conf.d (added) * server/fedora/config/etc/munin/plugin-conf.d/apache_accesses (added) * server/fedora/config/etc/munin/plugin-conf.d/apache_processes (added) * server/fedora/config/etc/munin/plugin-conf.d/apache_volume (added) * server/fedora/config/etc/munin/plugins (added) * server/fedora/config/etc/munin/plugins/apache_accesses (added) * server/fedora/config/etc/munin/plugins/apache_processes (added) * server/fedora/config/etc/munin/plugins/apache_volume (added) Added munin configuration for monitoring apache Wed, 19 Sep 2007 04:58:21 GMT andersk [409] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Remove SSLUserName, because mod_auth_sslcert is better and having the ... Wed, 19 Sep 2007 03:33:16 GMT andersk [408] * server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (modified) SSLVerifyClient optional. Mon, 17 Sep 2007 20:42:35 GMT andersk [407] * server/fedora/Makefile (modified) Fix the stupid rpmbuild symlink bug. Mon, 17 Sep 2007 20:37:52 GMT andersk [406] * server/common/patches/httpd-suexec-scripts.patch (modified) Reapply selinux fix from r403. Mon, 17 Sep 2007 20:06:51 GMT andersk [405] * server/common/patches/httpd-suexec-scripts.patch (modified) Revert r403 pending discussion of its security implications. Mon, 17 Sep 2007 18:42:45 GMT presbrey [404] * server/fedora/Makefile (modified) slight Makefile correction for suexec Mon, 17 Sep 2007 18:37:42 GMT presbrey [403] * server/common/patches/httpd-suexec-scripts.patch (modified) allow directives like SetEnv PYTHONPATH/PERL5LIB etc. Mon, 10 Sep 2007 20:58:39 GMT andersk [399] * server/fedora/config/etc/httpd/conf.d/vhosts-vhost-names.conf (modified) Add www.* names for non-mit.edu fake vhosts. Sat, 08 Sep 2007 08:37:28 GMT andersk [395] * server/fedora/config/etc/httpd/conf.d/vhosts-vhost-names.conf (modified) Make lombana a real vhost. Wed, 05 Sep 2007 20:07:01 GMT andersk [392] * server/fedora/specs/accountadm.spec (modified) Don't fail if signup user/group already exist. Sun, 02 Sep 2007 10:23:00 GMT andersk [391] * server/fedora/config/etc/httpd/conf.d/auth_sslcert.conf (modified) Enable mod_auth_optional. Sun, 02 Sep 2007 10:17:43 GMT andersk [390] * server/common/oursrc/httpdmods/Makefile.in (modified) * server/common/oursrc/httpdmods/mod_auth_optional.c (added) * server/common/oursrc/httpdmods/mod_auth_sslcert.c (modified) * server/fedora/specs/httpdmods.spec (modified) httpd module updates, including support for optional authentication. Sun, 02 Sep 2007 10:09:03 GMT andersk [389] * server/common/oursrc/httpdmods/Makefile.in (modified) * server/fedora/specs/httpdmods.spec (modified) Use apxs to build Apache modules. Wed, 29 Aug 2007 02:10:06 GMT andersk [387] * server/doc/install-howto (modified) Mention rails. Sat, 25 Aug 2007 05:10:22 GMT andersk [384] * server/fedora/config/etc/httpd/conf.d/auth_sslcert.conf (modified) Allow mod_auth_sslcert configuration to be overridden in .htaccess. Mon, 13 Aug 2007 01:40:09 GMT geofft [378] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) should fix the fakestat bug [help.mit.edu #460923] Fri, 03 Aug 2007 06:12:41 GMT geofft [377] * server/doc/rpm_snapshot (modified) Installed Django on the two servers. Wed, 01 Aug 2007 23:45:43 GMT andersk [374] * server/doc/rpm (modified) * server/doc/rpm_snapshot (modified) Add arch to the rpm list. Wed, 01 Aug 2007 23:31:22 GMT andersk [373] * server/doc/rpm (modified) * server/doc/rpm_snapshot (modified) Reformat and sort rpm_snapshot for better version control. Apologies ... Wed, 01 Aug 2007 19:57:37 GMT jbarnold [371] * server/doc/install-howto (modified) * server/doc/rpm_snapshot (added) improved documentation for scripts-izing a machine Tue, 31 Jul 2007 21:13:45 GMT andersk [370] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Move localhost.key to scripts.key. Tue, 31 Jul 2007 21:04:11 GMT andersk [369] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) More useful certificate location. Sun, 22 Jul 2007 23:46:42 GMT presbrey [365] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) provide header directives available to .htaccess files Sun, 22 Jul 2007 07:42:00 GMT geofft [364] * server/fedora/config/etc/issue.net (modified) Replace the huge SSH banner with a reference to the FAQ that contains ... Sun, 08 Jul 2007 03:33:59 GMT quentin [358] * server/fedora/config/etc/httpd/conf.d/vhosts-vhost-names.conf (added) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) * vhosts/vhosts-vhost-names.gen.sh (added) made scripts.mit.edu the default vhost instead of vhosts.mit.edu; ... Sun, 08 Jul 2007 02:29:33 GMT quentin [356] * server/fedora/config/etc/postfix/main.cf (modified) add -t to cause temporary rather than permanent failures when ... Sat, 07 Jul 2007 19:36:55 GMT jbarnold [355] * server/doc/perl_snapshot.pm (modified) updated perl snapshot based on current scripts3 Mon, 02 Jul 2007 23:05:48 GMT jbarnold [353] * server/fedora/Makefile (modified) updated Makefile to follow conventional Fedora build process more ... Mon, 02 Jul 2007 21:39:54 GMT jbarnold [352] * server/fedora/Makefile (modified) keyutils-libs-devel needed for building krb5 on fc7 Mon, 04 Jun 2007 16:39:20 GMT presbrey [340] * server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo_0 (moved) * server/fedora/config/etc/sysconfig/network-scripts/ifcfg-lo_1 (moved) renaming for svn clients that can't support colon pathnames Thu, 31 May 2007 02:24:36 GMT andersk [336] * server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (modified) I was going to move SSLVerifyDepth 1 to vhosts-common-ssl.conf so ... Thu, 31 May 2007 02:03:50 GMT andersk [335] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Remove authn_dbd_module. Thu, 31 May 2007 01:45:37 GMT andersk [332] * server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (added) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Accept certificates on port 444. Wed, 30 May 2007 19:00:37 GMT andersk [330] * server/fedora/config/etc/httpd/conf.d/scripts-vhost.conf (added) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Modularize scripts.mit.edu main vhost, and fix favicon.ico and ... Tue, 29 May 2007 19:55:33 GMT andersk [325] * server/fedora/config/etc/sysctl.conf (modified) net.ipv4.tcp_keepalive_time = 825. Fri, 25 May 2007 06:37:51 GMT geofft [323] * server/common/oursrc/accountadm/admof.in (modified) fix a regex Fri, 25 May 2007 04:59:40 GMT quentin [322] * server/common/oursrc/accountadm/admof.in (modified) Allow / in Kerberos principals so that non-null instances can be used ... Tue, 22 May 2007 15:31:24 GMT andersk [316] * server/fedora/Makefile (modified) Build openafs against latest (not running) kernel. Tue, 22 May 2007 14:43:43 GMT andersk [315] * server/common/oursrc/execsys/upd-execsys (modified) * server/common/patches/httpd-suexec-scripts.patch (modified) Add .xhtml to the list of static extensions. Sun, 06 May 2007 06:28:52 GMT andersk [305] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Add heartbeat to scripts-cert. Mon, 30 Apr 2007 21:57:28 GMT andersk [302] * server/common/oursrc/execsys/upd-execsys (modified) Remove static-cat entries from binfmt-misc, since they are no longer ... Tue, 24 Apr 2007 23:38:15 GMT presbrey [301] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) raised RLimitMEM Mon, 23 Apr 2007 08:19:41 GMT andersk [300] * server/common/patches/httpd-suexec-scripts.patch (modified) Fix expected_len check. Mon, 23 Apr 2007 08:18:06 GMT andersk [299] * server/fedora/Makefile (modified) Don't fail to build suexec if there's already a build in place!!! Mon, 23 Apr 2007 07:45:08 GMT andersk [298] * server/common/patches/httpd-suexec-scripts.patch (modified) * Call static-cat directly from suexec on static extensions, instead ... Mon, 23 Apr 2007 06:26:05 GMT andersk [297] * server/fedora/ref-prepatch/httpd.spec (modified) Replace ref-prepatch/httpd.spec with the actually unpatched version. Mon, 23 Apr 2007 06:25:01 GMT andersk [296] * server/fedora/ref-prepatch/suexec.c (modified) Replace ref-prepatch/suexec.c with the actually unpatched version. Sat, 14 Apr 2007 20:22:02 GMT presbrey [288] * server/fedora/config/etc/ha.d/haresources (modified) Thu, 12 Apr 2007 06:47:22 GMT andersk [284] * server/fedora/config/etc/aliases (modified) Add myself to root@scripts mail. (Should this maybe be the scripts- ... Thu, 12 Apr 2007 01:10:44 GMT presbrey [283] * server/fedora/config/etc/ha.d (added) * server/fedora/config/etc/ha.d/ha.cf (added) * server/fedora/config/etc/ha.d/haresources (added) main server heartbeat configuration Wed, 11 Apr 2007 21:07:20 GMT presbrey [282] * server/common/oursrc/tokensys/crontab (modified) * server/fedora/specs/tokensys.spec (modified) tokensys: move afsagent crontab to isolate from fail-over cron Wed, 11 Apr 2007 20:50:11 GMT presbrey [281] * server/fedora/config/etc/syslog.conf (added) syslog.conf Wed, 11 Apr 2007 17:42:02 GMT geofft [278] * server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl.conf (modified) Debugging an HTTPS problem... Fri, 06 Apr 2007 23:43:50 GMT andersk [270] * server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (modified) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) * Complete alias list for main SSL vhost. * /heartbeat should only ... Fri, 06 Apr 2007 17:03:45 GMT geofft [263] * server/fedora/config/etc/httpd/conf.d/vhosts-common-ssl-cert.conf (added) Include file to enable certificate authentication