# # ChangeLog for server # # Generated by Trac 1.0.2 # Mar 29, 2024, 4:40:31 AM Fri, 02 Jan 2009 07:14:01 GMT quentin [934] * server/doc/install-howto (modified) * server/doc/package-build-howto (added) Don't build packages when installing a server (oh that feels so good) Fri, 02 Jan 2009 07:12:33 GMT andersk [933] * server/fedora/specs/accountadm.spec (modified) We need the patched pts in scripts-openafs-devel for accountadm. Fri, 02 Jan 2009 07:00:21 GMT quentin [932] * server/fedora/specs/scripts-base.spec (modified) Don't install openafs-debuginfo package Fri, 02 Jan 2009 05:55:17 GMT andersk [931] * server/fedora/specs/scripts-base.spec (modified) Make scripts-base depend scripts-kmod-openafs. Fri, 02 Jan 2009 05:52:39 GMT andersk [930] * server/fedora/specs/openafs.spec.patch (modified) rpmvercmp sucks. Hopefully, there will never be a Linux kernel 100.0. Fri, 02 Jan 2009 05:14:30 GMT andersk [929] * server/fedora/specs/openafs.spec.patch (modified) Make kmod-openafs provide scripts-kmod-openafs. Fri, 02 Jan 2009 05:12:23 GMT andersk [928] * server/fedora/Makefile (modified) Use target-local Makefile variables for svnversion. Fri, 02 Jan 2009 04:26:45 GMT quentin [927] * server/fedora/specs/scripts-base.spec (modified) * server/fedora/specs/whoisd.spec (modified) More updated specs Fri, 02 Jan 2009 04:02:16 GMT quentin [926] * server/fedora/Makefile (modified) * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/execsys.spec (modified) * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/httpdmods.spec (modified) * server/fedora/specs/krb5.spec.patch (modified) * server/fedora/specs/logview.spec (modified) * server/fedora/specs/openafs.spec.patch (modified) * server/fedora/specs/openssh.spec.patch (modified) * server/fedora/specs/sql-signup.spec (modified) * server/fedora/specs/tokensys.spec (modified) Use an RPM macro instead of sed to specify package versions Fri, 02 Jan 2009 02:12:56 GMT quentin [925] * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/krb5.spec.patch (modified) * server/fedora/specs/openafs.spec.patch (modified) * server/fedora/specs/openssh.spec.patch (modified) Update specfile patches to provide scripts-specific virtual packages ... Fri, 02 Jan 2009 02:12:33 GMT quentin [924] * server/fedora/specs/scripts-base.spec (modified) Fix scripts-base package Thu, 01 Jan 2009 21:15:22 GMT quentin [923] * server/common/oursrc/scripts-base (added) * server/fedora/Makefile (modified) * server/fedora/specs/scripts-base.spec (added) Initial import of scripts-base package Thu, 01 Jan 2009 04:17:03 GMT quentin [922] * server/fedora/specs/execsys.spec (modified) don't stop execsys on package updates Thu, 01 Jan 2009 04:00:27 GMT andersk [921] * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/tokensys.spec (modified) userdel already implies groupdel. Thu, 01 Jan 2009 03:49:25 GMT quentin [920] * server/fedora/specs/logview.spec (modified) * server/fedora/specs/tokensys.spec (modified) Ignore preexisting users when reinstalling packages Thu, 01 Jan 2009 03:41:22 GMT quentin [919] * server/fedora/specs/tokensys.spec (modified) Also fix tokensys Thu, 01 Jan 2009 03:36:00 GMT quentin [918] * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/logview.spec (modified) Only remove users on erase, not upgrade Thu, 01 Jan 2009 01:49:25 GMT quentin [917] * server/fedora/Makefile (modified) * server/fedora/specs/accountadm.spec (modified) * server/fedora/specs/execsys.spec (modified) * server/fedora/specs/httpdmods.spec (modified) * server/fedora/specs/logview.spec (modified) * server/fedora/specs/sql-signup.spec (modified) * server/fedora/specs/tokensys.spec (modified) * server/fedora/specs/whoisd.spec (modified) Build packages with their svn revision as their version number Thu, 01 Jan 2009 01:18:40 GMT quentin [916] * server/doc/install-howto (modified) We now build nss-ldapd with our Makefile! Thu, 01 Jan 2009 00:42:24 GMT quentin [915] * server/fedora/config/etc/nsswitch.conf (modified) Support mDNS on scripts Thu, 01 Jan 2009 00:37:08 GMT quentin [914] * server/fedora/config/etc/sudoers (modified) Add if_err_eth2 to allowed munin commands (wtf?) Thu, 01 Jan 2009 00:34:58 GMT quentin [913] * server/fedora/specs/nss-ldapd.spec.patch (modified) Remove openSUSEisms from the specfile Thu, 01 Jan 2009 00:21:06 GMT quentin [912] * server/fedora/Makefile (modified) * server/fedora/specs/nss-ldapd.spec (deleted) * server/fedora/specs/nss-ldapd.spec.patch (added) Package nss-ldapd as a patch on the openSUSE rpm Wed, 31 Dec 2008 22:16:38 GMT quentin [911] * server/fedora/Makefile (modified) * server/fedora/specs/nss-ldapd.spec (added) Add nss-ldapd package Wed, 31 Dec 2008 22:15:26 GMT quentin [910] * server/fedora/config/etc/nss-ldapd.conf (added) configuration for nss-ldapd Wed, 31 Dec 2008 21:21:06 GMT andersk [909] * server/common/oursrc/execsys/git (modified) * server/common/oursrc/execsys/svn (modified) git and svn don't need to set HOME anymore. Wed, 31 Dec 2008 21:18:58 GMT andersk [908] * server/common/patches/httpd-suexec-scripts.patch (modified) Teach suexec to setenv("HOME"). Wed, 31 Dec 2008 00:10:30 GMT andersk [907] * server/common/oursrc/accountadm/admof.c (modified) * server/common/patches/openafs-pts-encrypt.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Force queries to the PTS database to be encrypted, so that responses ... Mon, 29 Dec 2008 10:43:21 GMT geofft [906] * server/doc/install-howto (modified) yum remove NetworkManager isn't sustainable. Mon, 29 Dec 2008 10:32:23 GMT geofft [905] * server/common/patches/openafs-2.6.27.patch (deleted) * server/fedora/specs/openafs.spec.patch (modified) Never mind, this patch is already in OpenAFS 1.4.8. The Makefile ... Mon, 29 Dec 2008 09:59:41 GMT geofft [904] * server/common/patches/openafs-2.6.27.patch (added) * server/fedora/specs/openafs.spec.patch (modified) openafs: Compile on 2.6.27 [rt.central.org #111634]. Linux 2.6.27 ... Sun, 28 Dec 2008 06:21:33 GMT andersk [903] * server/common/oursrc/execsys/gitproxy.pl (modified) * server/common/oursrc/execsys/svnproxy.pl (modified) Replace {svnproxy,gitproxy} select() loop with a poll() loop, to ... Tue, 23 Dec 2008 03:10:59 GMT andersk [902] * server/common/patches/openafs-postinit.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Run $AFS_POST_INIT from the openafs-client initscript, if it is ... Tue, 23 Dec 2008 03:09:03 GMT andersk [901] * server/common/patches/openafs-2626.patch (deleted) * server/common/patches/openafs-enoent.patch (deleted) * server/common/patches/openafs-fill-inode.patch (deleted) * server/common/patches/openafs-splice.patch (deleted) * server/fedora/Makefile (modified) * server/fedora/specs/openafs.spec.patch (modified) Upgrade to OpenAFS 1.4.8, dropping upstreamed patches. Fri, 19 Dec 2008 17:48:18 GMT andersk [892] * server/common/oursrc/accountadm/vhostadd (modified) Avoid getpwnam in vhostadd so that it works from outside scripts. Thu, 11 Dec 2008 10:50:52 GMT quentin [891] * server/fedora/config/etc/aliases (modified) * server/fedora/config/etc/postfix/main.cf (modified) Add reuter to blocked mail accounts list, and prevent outbound mail Thu, 20 Nov 2008 05:48:08 GMT geofft [890] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) I think this works better Thu, 20 Nov 2008 05:41:24 GMT quentin [889] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Fix geofft's typo Thu, 20 Nov 2008 05:38:26 GMT geofft [888] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Display failed root logins from off campus only at 10+10k attempts. Thu, 20 Nov 2008 05:22:59 GMT quentin [887] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Ignore non-fatal authentication failures Wed, 19 Nov 2008 21:22:20 GMT geofft [886] * server/fedora/config/etc/pki/tls/certs/sipb.pem (added) sipb.mit.edu certificate Wed, 19 Nov 2008 02:53:55 GMT geofft [885] * server/fedora/config/etc/httpd/vhosts.d/barnowl.conf (added) * server/fedora/config/etc/httpd/vhosts.d/cdsa.conf (added) * server/fedora/config/etc/httpd/vhosts.d/textbooks.conf (added) * server/fedora/config/etc/httpd/vhosts.d/twentytwelve.conf (added) * server/fedora/config/etc/httpd/vhosts.d/ua.conf (added) * server/fedora/config/etc/httpd/vhosts.d/whatsnext.conf (added) and the vhosts they rode in on Wed, 19 Nov 2008 02:43:56 GMT geofft [884] * server/fedora/config/etc/pki/tls/certs/barnowl.pem (added) * server/fedora/config/etc/pki/tls/certs/cdsa.pem (added) * server/fedora/config/etc/pki/tls/certs/textbooks.pem (added) * server/fedora/config/etc/pki/tls/certs/twentytwelve.pem (added) * server/fedora/config/etc/pki/tls/certs/ua.pem (added) * server/fedora/config/etc/pki/tls/certs/whatsnext.pem (added) More noms. Mon, 17 Nov 2008 04:25:45 GMT geofft [883] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Re r882, make the resulting log zephyr public. (Thanks to price for ... Mon, 17 Nov 2008 03:06:32 GMT geofft [882] * server/common/oursrc/accountadm/admof.c (modified) Log when using superuser rights to ssh directly to a locker Mon, 17 Nov 2008 03:05:16 GMT geofft [881] * server/doc/install-howto (modified) Update install-howto a little Fri, 14 Nov 2008 09:18:10 GMT quentin [880] * server/doc/HOWTO-SETUP-LDAP (modified) Add indexes for Apache vhosts Fri, 14 Nov 2008 08:37:22 GMT quentin [879] * server/fedora/config/etc/nscd.conf (modified) Update nscd configuration to cache smarter Fri, 14 Nov 2008 08:21:52 GMT quentin [878] * server/fedora/config/etc/ssh/sshd_config (modified) Enable sshd verbose mode, so we can identify the public key used for ... Fri, 14 Nov 2008 08:11:16 GMT quentin [877] * server/fedora/config/etc/nsswitch.conf (modified) Provide commented-out non-nss_nonlocal region in nsswitch Fri, 14 Nov 2008 08:10:18 GMT quentin [876] * server/fedora/config/etc/hosts (modified) Uncommitted changes on b-k Fri, 14 Nov 2008 01:50:15 GMT quentin [875] * server/doc/install-howto (modified) Make sure machines come up with network Sun, 09 Nov 2008 05:12:49 GMT broder [874] * server/common/oursrc/httpdmods/Makefile.in (modified) Fix the Apache modules Makefile to make them more package-friendly Sat, 08 Nov 2008 05:20:41 GMT andersk [873] * server/common/patches/httpd-suexec-scripts.patch (modified) * server/common/patches/openafs-scripts.patch (modified) No more x bit hack. Tue, 04 Nov 2008 01:24:27 GMT geofft [872] * server/fedora/config/etc/httpd/vhosts.d/familynet.conf (modified) forgot to fix SSLVerifyclient on familynet Mon, 03 Nov 2008 23:50:26 GMT andersk [871] * server/fedora/specs/openssh.spec.patch (modified) Unrevert r837, which was clobbered in r859. Mon, 03 Nov 2008 19:42:11 GMT geofft [870] * server/fedora/config/etc/httpd/vhosts.d/axo.conf (modified) * server/fedora/config/etc/httpd/vhosts.d/crew.conf (added) * server/fedora/config/etc/httpd/vhosts.d/familynet.conf (added) * server/fedora/config/etc/httpd/vhosts.d/lpq.conf (added) * server/fedora/config/etc/httpd/vhosts.d/mitsoc.conf (modified) * server/fedora/config/etc/httpd/vhosts.d/next.conf (added) * server/fedora/config/etc/httpd/vhosts.d/queues.conf (added) * server/fedora/config/etc/httpd/vhosts.d/random-hall.conf (modified) * server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) * server/fedora/config/etc/httpd/vhosts.d/template (modified) * server/fedora/config/etc/httpd/vhosts.d/wakeup.conf (added) * server/fedora/config/etc/httpd/vhosts.d/westgate.conf (added) yay SSL vhosts yay Mon, 03 Nov 2008 19:10:37 GMT geofft [869] * server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (modified) SSLVerifyClient optional on port 444. Oops. ^_^;; Sun, 02 Nov 2008 21:02:50 GMT quentin [868] * server/fedora/config/etc/nagios/nrpe.cfg (modified) Ignore all partitions mounted under /mnt Sun, 02 Nov 2008 20:26:13 GMT quentin [867] * server/fedora/config/etc/postfix/main.cf (modified) Update postfix configuration for version 2.5.1 Sun, 02 Nov 2008 20:25:40 GMT quentin [866] * server/fedora/config/etc/yum.repos.d (added) * server/fedora/config/etc/yum.repos.d/scripts.repo (added) Use scripts yum repository (yay!) Sun, 02 Nov 2008 20:24:36 GMT quentin [865] * server/fedora/config/etc/munin/plugin-conf.d/munin-node (modified) * server/fedora/config/etc/sudoers (modified) Use sudo to monitor hardware sensors for munin Sun, 02 Nov 2008 20:23:53 GMT quentin [864] * server/fedora/config/etc/nagios/nrpe.cfg (modified) Ignore f7root partitions when checking disk space Sun, 02 Nov 2008 02:15:27 GMT xavid [863] * server/doc/install-howto (modified) Took out the atime thing, which is not relevant for recent kernels, ... Sun, 02 Nov 2008 01:44:37 GMT xavid [862] * server/doc/HOWTO-SETUP-LDAP (modified) * server/doc/install-howto (modified) Reload iptables to nix firewall. Sun, 02 Nov 2008 00:48:34 GMT xavid [861] * server/doc/HOWTO-SETUP-LDAP (added) * server/doc/fedora-ds-enable-ssl-and-kerberos.diff (added) * server/doc/install-howto (modified) Documentation impovements. Sat, 01 Nov 2008 23:43:02 GMT quentin [860] * server/fedora/Makefile (modified) Update dependencies for f9 Sat, 01 Nov 2008 23:42:40 GMT quentin [859] * server/fedora/specs/execsys.spec (modified) * server/fedora/specs/openssh.spec.patch (modified) Update openssh and execsys spec files Sat, 01 Nov 2008 20:38:50 GMT quentin [858] * server/fedora/Makefile (modified) Fetch compat-readline43 from mirror, and download mit-zephyr from scripts Sat, 01 Nov 2008 20:17:24 GMT quentin [857] * server/fedora/config/home/scripts-build (moved) User is named scripts-build... Sat, 01 Nov 2008 20:14:49 GMT quentin [856] * server/fedora/config/home (added) * server/fedora/config/home/rpmbuild (added) * server/fedora/config/home/rpmbuild/.rpmmacros (added) Add .rpmmacros file for configuring the rpmbuild user Tue, 28 Oct 2008 06:00:39 GMT andersk [855] * server/common/patches/httpd-suexec-scripts.patch (modified) Make suexec log scripts without execute permission (the group x-bit, ... Mon, 27 Oct 2008 18:28:07 GMT geofft [854] * server/fedora/config/etc/httpd/vhosts.d/reify-vhost.py (added) Add a script to convert LDAP vhosts into blocks, so ... Fri, 24 Oct 2008 00:32:30 GMT andersk [853] * server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Put the children out of their misery. Wed, 08 Oct 2008 19:01:22 GMT andersk [852] * server/common/oursrc/execsys/git (modified) Call git daemon with no dash (dashed commands are removed in Git 1.6). Wed, 08 Oct 2008 18:55:27 GMT andersk [851] * server/common/oursrc/execsys/gitproxy.pl (modified) Check the right message length. Wed, 08 Oct 2008 18:45:12 GMT andersk [850] * server/common/oursrc/execsys/gitproxy.pl (modified) Check message length. Wed, 08 Oct 2008 18:34:18 GMT andersk [849] * server/common/oursrc/execsys/Makefile.in (modified) * server/common/oursrc/execsys/git (added) * server/common/oursrc/execsys/gitproxy.pl (added) * server/common/oursrc/execsys/ldapize.pl (modified) * server/common/oursrc/execsys/scripts-git.xinetd (added) * server/fedora/specs/execsys.spec (modified) Support Git. Tue, 07 Oct 2008 19:05:03 GMT andersk [848] * server/common/patches/openafs-enoent.patch (added) * server/common/patches/openafs-jhutz.patch (deleted) * server/fedora/specs/openafs.spec.patch (modified) Unrevert STABLE14-linux-fakestat-avoid-mtpt-fillin-issue-20080415 and ... Tue, 07 Oct 2008 06:50:02 GMT andersk [847] * server/fedora/config/etc/munin/apache-htpasswd (modified) * server/fedora/config/etc/munin/munin-node.conf (modified) * server/fedora/config/etc/munin/plugin-conf.d/hddtemp_smartctl (modified) * server/fedora/config/etc/munin/plugin-conf.d/munin-node (modified) * server/fedora/config/etc/munin/plugin-conf.d/postfix (added) * server/fedora/config/etc/munin/plugin-conf.d/sendmail (added) * server/fedora/config/etc/sudoers (modified) Run munin as an unprivileged user with sudo for root access when ... Tue, 07 Oct 2008 03:44:00 GMT andersk [846] * server/common/patches/openafs-fill-inode.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Apply /afs/andrew.cmu.edu/usr/shadow/fill-inode.diff, fixing the ... Mon, 06 Oct 2008 03:02:07 GMT andersk [845] * server/fedora/config/etc/httpd/conf.d/vhost_ldap.conf (modified) Use the local LDAP server (as is already the case on both servers). Thu, 02 Oct 2008 19:33:27 GMT andersk [844] * server/common/oursrc/accountadm/vhostadd (modified) `getent passwd 2011` doesn’t work. Thu, 02 Oct 2008 04:08:21 GMT andersk [843] * server/common/patches/openafs-scripts.patch (modified) Copy user x-bit to group x-bit for transitional testing. Sun, 28 Sep 2008 07:43:31 GMT andersk [842] * server/common/patches/httpd-suexec-scripts.patch (modified) * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Run php directly from suexec, so php scripts don’t need to be executable. Sat, 27 Sep 2008 05:51:51 GMT geofft [841] * server/fedora/config/etc/httpd/vhosts.d/axo.conf (added) [help.mit.edu #694790] Thu, 25 Sep 2008 22:31:46 GMT andersk [840] * server/common/patches/openafs-jhutz.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Revert STABLE14-linux-fakestat-avoid-mtpt-fillin-issue-20080415 in an ... Mon, 15 Sep 2008 08:45:46 GMT andersk [839] * server/common/patches/openafs-2626.patch (added) * server/fedora/Makefile (modified) * server/fedora/specs/openafs.spec.patch (modified) Make openafs build on 2.6.26. Sun, 14 Sep 2008 22:45:09 GMT andersk [838] * server/common/oursrc/python-routefs (added) * server/common/oursrc/python-routefs/routefs (added) * server/common/oursrc/python-routefs/routefs/__init__.py (added) * server/common/oursrc/python-routefs/routefs/dictfs.py (added) * server/common/oursrc/python-routefs/routefs/examples (added) * server/common/oursrc/python-routefs/routefs/examples/__init__.py (added) * server/common/oursrc/python-routefs/routefs/examples/dictexfs.py (added) * server/common/oursrc/python-routefs/routefs/examples/pyhesiodfs.py (added) * server/common/oursrc/python-routefs/setup.py (added) * server/fedora/Makefile (modified) * server/fedora/specs/python-routefs.spec (added) Package python-routefs. Sun, 14 Sep 2008 02:58:25 GMT andersk [837] * server/fedora/specs/openssh.spec.patch (modified) Update patch context. Sat, 13 Sep 2008 20:48:08 GMT andersk [836] * server/common/patches/httpd-2.2.x-sni.patch (modified) Update the SNI patch as per ... Mon, 08 Sep 2008 05:45:35 GMT andersk [835] * server/common/oursrc/execsys/svnproxy.pl (modified) Meh. Sun, 07 Sep 2008 17:36:17 GMT andersk [834] * server/common/oursrc/accountadm/vhostedit (modified) Rephrase the vhostedit LDAP query. Sun, 07 Sep 2008 17:24:39 GMT andersk [833] * server/common/oursrc/accountadm/vhostadd (modified) Not all users are andersk. Fri, 05 Sep 2008 03:50:46 GMT geofft [832] * server/doc/install-howto (modified) nelhage is much more awesome than CPAN.pm Thu, 04 Sep 2008 05:11:41 GMT andersk [831] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) MaxRequestsPerChild < Ridiculous Sun, 31 Aug 2008 07:38:28 GMT geofft [829] * server/fedora/config/etc/fuse.conf (added) Debathena's reasoning seems sound enough. Add fuse_allow_other, which ... Fri, 29 Aug 2008 22:36:20 GMT andersk [828] * server/common/oursrc/execsys/ldapize.pl (modified) Search by objectClass (otherwise you get “Admin limit exceeded”). Fri, 29 Aug 2008 22:17:32 GMT andersk [827] * server/common/oursrc/accountadm/signup-scripts-backend.in (modified) * server/common/oursrc/accountadm/vhostadd (modified) Create scriptsVhost records automatically. Fri, 29 Aug 2008 21:16:41 GMT andersk [826] * server/common/oursrc/accountadm/vhostedit (modified) Teach vhostedit about scriptsVhost entries.