#
# ChangeLog for trunk/server/fedora
#
# Generated by Trac 1.0.2
# Jan 21, 2025, 5:18:26 AM

Fri, 21 Aug 2009 19:43:29 GMT geofft [1305]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Don't zephyr -c scripts-spew about sudo from root.

	Because we ...


Tue, 18 Aug 2009 00:43:15 GMT quentin [1302]
	* trunk/server/fedora/config/etc/pki/tls/certs/check.pl (modified)

	basename != dirname


Mon, 17 Aug 2009 02:00:52 GMT geofft [1301]
	* trunk/server/fedora/config/etc/postfix/blocked_users (modified)

	Actually unblock reuter from sending (not just receiving) mail ...


Sun, 16 Aug 2009 18:35:11 GMT geofft [1300]
	* trunk/server/fedora/config/etc/aliases (modified)

	Unblock golem from receiving mail (discussed with him over zephyr)


Sun, 16 Aug 2009 18:32:12 GMT geofft [1299]
	* trunk/server/fedora/config/etc/aliases (modified)

	Unblock reuter from sending mail [help.mit.edu #985700]


Tue, 11 Aug 2009 00:54:28 GMT mitchb [1294]
	* trunk/server/common/oursrc/nss-ldapd (deleted)
	* trunk/server/doc/install-howto.sh (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/config/etc/nss-ldapd.conf (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (deleted)

	We got nss-ldapd into Fedora!  Stop building it from OpenSuSE.


Mon, 10 Aug 2009 10:50:30 GMT mitchb [1293]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/metu.conf (added)
	* trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (added)

	Certificate and Apache config for metu.mit.edu


Thu, 06 Aug 2009 14:54:39 GMT mitchb [1291]
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (modified)
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified)

	Stop using the Fedora mirrors; they suck
	The mirrors lag behind the ...


Thu, 06 Aug 2009 14:51:45 GMT mitchb [1290]
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (added)
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (added)

	Put -updates and -updates-testing repo configs under version control


Wed, 05 Aug 2009 05:04:52 GMT mitchb [1289]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	OpenSUSE bumped the nss-ldapd release again?  Shocking!  6.4->6.5


Tue, 04 Aug 2009 01:29:34 GMT mitchb [1288]
	* trunk/server/fedora/specs/httpd.spec.patch (modified)

	Revert r1287 - we're not convinced the change is beneficial


Mon, 03 Aug 2009 12:46:05 GMT quentin [1287]
	* trunk/server/fedora/specs/httpd.spec.patch (modified)

	Don't execute scripts outside of /afs, unless they're in the trusted ...


Tue, 28 Jul 2009 05:01:37 GMT mitchb [1283]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/rubygem-rails.spec.patch (deleted)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Stop scriptsifying rubygem-rails; Fedora has taken our patch


Tue, 28 Jul 2009 04:58:19 GMT mitchb [1282]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	Update nss-ldapd from version 0.6.10 release 6.2 to release 6.4 ...


Tue, 21 Jul 2009 15:11:21 GMT ezyang [1277]
	* trunk/server/fedora/specs/httpdmods.spec (modified)

	Add missing build dependency, as suggested by adehnert.


Mon, 20 Jul 2009 16:23:01 GMT mitchb [1276]
	* trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified)

	Updated CellServDB from Ops


Sat, 18 Jul 2009 08:43:35 GMT mitchb [1275]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/rubygem-rails.spec.patch (added)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Temporarily scriptsify rubygem-rails to work around Fedora packaging ...


Thu, 16 Jul 2009 02:50:26 GMT mitchb [1274]
	* trunk/server/common/patches/openafs-delta-dprintf-rename-20090427.patch (deleted)
	* trunk/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (deleted)
	* trunk/server/common/patches/openafs-postinit.patch (deleted)
	* trunk/server/common/patches/openafs-pts-encrypt.patch (deleted)
	* trunk/server/common/patches/openafs-scripts.patch (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/openafs.spec.patch (modified)

	Upgrade OpenAFS to 1.4.11
	o Two of our patches (postinit and ...


Thu, 16 Jul 2009 02:40:10 GMT mitchb [1273]
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	Upgrade nss-ldapd to version 0.6.10


Wed, 15 Jul 2009 08:27:11 GMT mitchb [1272]
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr (added)
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr.real (copied)
	* trunk/server/fedora/config/etc/sudoers (modified)
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Wrap check_ldap_mmr with a sudo invocation, and don't spew logs about
	it


Wed, 15 Jul 2009 07:22:12 GMT mitchb [1270]
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr (added)
	* trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified)

	Nagios plugin to monitor LDAP multi-master replication status


Mon, 13 Jul 2009 00:46:52 GMT mitchb [1267]
	* trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified)
	* trunk/noc/nagios/hostgroups.cfg (modified)
	* trunk/noc/nagios/hosts.cfg (modified)
	* trunk/server/fedora/config/etc/hosts (modified)
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Configuration for new scripts webserver real-mccoy


Sun, 12 Jul 2009 03:24:40 GMT quentin [1266]
	* trunk/server/fedora/config/usr/vice/etc/NetRestrict (added)

	Symlink in case AFS is stupid


Sun, 12 Jul 2009 03:22:00 GMT quentin [1265]
	* trunk/server/fedora/config/etc/openafs/NetRestrict (added)

	Prevent AFS client from registering shared or backend IPs


Sat, 11 Jul 2009 07:01:32 GMT geofft [1264]
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified)

	Fix URL of Django admin media for F11/py2.6.


Thu, 09 Jul 2009 19:48:21 GMT mitchb [1259]
	* trunk (modified)
	* trunk/lvs/debian/config/etc/munin/plugins/cps_1_0 (modified)
	* trunk/server/common/patches/httpd-2.2.x-sni.patch (modified)
	* trunk/server/common/patches/httpd-suexec-scripts.patch (modified)
	* trunk/server/common/patches/openafs-delta-dprintf-rename-20090427.patch (copied)
	* trunk/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (copied)
	* trunk/server/common/patches/openafs-numsysnames.patch (copied)
	* trunk/server/common/patches/openafs-scripts.patch (modified)
	* trunk/server/common/patches/openssh-4.7p1-gssapi-name-in-env.patch (copied)
	* trunk/server/doc/install-howto.sh (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/config/etc/acpi (deleted)
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)
	* trunk/server/fedora/config/etc/logrotate.d/httpd (modified)
	* trunk/server/fedora/config/etc/munin/munin-node.conf (modified)
	* trunk/server/fedora/config/etc/munin/plugin-conf.d/munin-node (modified)
	* trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified)
	* trunk/server/fedora/config/etc/nscd.conf (modified)
	* trunk/server/fedora/config/etc/php.d/apc.ini (copied)
	* trunk/server/fedora/config/etc/php.d/curl.ini (copied)
	* trunk/server/fedora/config/etc/php.d/wddx.ini (copied)
	* trunk/server/fedora/config/etc/printcap (modified)
	* trunk/server/fedora/config/etc/security/limits.conf (modified)
	* trunk/server/fedora/config/etc/sudoers (modified)
	* trunk/server/fedora/config/etc/sysconfig/networking (copied)
	* trunk/server/fedora/config/etc/sysconfig/openafs (modified)
	* trunk/server/fedora/config/etc/syslog-ng/syslog-ng.conf (modified)
	* trunk/server/fedora/config/etc/yum (copied)
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (deleted)
	* trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified)
	* trunk/server/fedora/specs/httpd.spec.patch (modified)
	* trunk/server/fedora/specs/krb5.spec.patch (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)
	* trunk/server/fedora/specs/openafs.spec.patch (modified)
	* trunk/server/fedora/specs/openssh.spec.patch (modified)
	* trunk/server/fedora/specs/php.spec.patch (modified)
	* trunk/server/fedora/specs/pysvn.spec.patch (deleted)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Reintegrate branches/fc11-dev (r1121:1258) to trunk


Thu, 09 Jul 2009 05:58:10 GMT andersk [1256]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	BLUE!!!


Thu, 09 Jul 2009 05:08:32 GMT geofft [1255]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	Second coat of paint on an empty bikeshed


Thu, 09 Jul 2009 04:38:54 GMT geofft [1254]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	Still not convinced, but perhaps it works now too


Thu, 09 Jul 2009 04:35:31 GMT geofft [1253]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	I'm not convinced this package exists, but it's up to date now


Thu, 09 Jul 2009 03:51:45 GMT mitchb [1250]
	* trunk/server/fedora/config/etc/hosts (modified)
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Configuration for new scripts webserver busy-beaver


Wed, 08 Jul 2009 19:51:30 GMT mitchb [1245]
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Missed one; pancake-bunny backend route config


Wed, 08 Jul 2009 19:49:35 GMT mitchb [1244]
	* trunk/server/fedora/config/etc/hosts (modified)
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)

	Configuration for new scripts webserver pancake-bunny


Wed, 08 Jul 2009 16:27:22 GMT mitchb [1242]
	* trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified)

	Renewal certificate for scripts-cert.mit.edu


Tue, 07 Jul 2009 01:31:00 GMT ezyang [1240]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Revert change, as this will fail if AFS is not loaded.


Tue, 07 Jul 2009 01:09:26 GMT ezyang [1239]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Have zroot also look in /mit/scripts/.ssh/authorized_keys.

	This is ...


Fri, 03 Jul 2009 07:16:30 GMT mitchb [1236]
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Nitpick punctuation fix in spec file; doesn't change anything


Fri, 03 Jul 2009 06:58:56 GMT mitchb [1235]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/php_scripts.spec (modified)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Tidy up dependencies for php_scripts
	  o Add BuildRequires ...


Fri, 03 Jul 2009 06:03:02 GMT mitchb [1234]
	* trunk/server/common/oursrc/php_scripts/Makefile.in (added)
	* trunk/server/common/oursrc/php_scripts/build.sh (deleted)
	* trunk/server/common/oursrc/php_scripts/mrproper (added)
	* trunk/server/common/oursrc/php_scripts/php.ini (deleted)
	* trunk/server/common/oursrc/php_scripts/php_scripts-config.m4 (moved)
	* trunk/server/common/oursrc/php_scripts/test.php (deleted)
	* trunk/server/doc/install-howto.sh (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/php_scripts.spec (added)

	Package the php scripts.so logging module ...


Fri, 03 Jul 2009 05:01:22 GMT mitchb [1233]
	* trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified)

	Update to new Athena CellServDB


Wed, 01 Jul 2009 18:14:49 GMT quentin [1227]
	* trunk/server/fedora/config/etc/postfix/blocked_users (added)
	* trunk/server/fedora/config/etc/postfix/main.cf (modified)

	Add cycling-club to set of blocked mail users, and split the list off ...


Wed, 01 Jul 2009 13:17:22 GMT mitchb [1219]
	* trunk/server/common/oursrc/athrun (added)
	* trunk/server/common/oursrc/athrun/Makefile.in (added)
	* trunk/server/common/oursrc/athrun/athrun.sh (added)
	* trunk/server/common/oursrc/athrun/configure.in (added)
	* trunk/server/common/oursrc/athrun/mrproper (added)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/athrun.spec (added)

	Add a very braindead implementation of athrun for scripts.
	This ...


Tue, 30 Jun 2009 18:50:39 GMT geofft [1214]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/tours.conf (added)
	* trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (added)

	SSL cert and config for tours.mit.edu


Thu, 25 Jun 2009 13:07:53 GMT mitchb [1209]
	* trunk/server/fedora/config/etc/yum.conf (modified)

	kmod-openafs should be shaken, not stirred... err, installed, not ...


Wed, 24 Jun 2009 17:54:14 GMT quentin [1208]
	* trunk/server/fedora/config/etc/php.d/imagick.ini (added)

	Add ImageMagick PHP extension


Sun, 14 Jun 2009 07:31:09 GMT ezyang [1193]
	* trunk/server/fedora/config/etc/php.d/dom.ini (modified)

	Commiting enabling of dom.ini, pending further performance review.


Sat, 13 Jun 2009 18:12:29 GMT mitchb [1191]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/geofft.conf (deleted)
	* trunk/server/fedora/config/etc/pki/tls/certs/geofft.pem (deleted)

	Remove expired test cert and config for geofft.mit.edu


Thu, 11 Jun 2009 15:32:48 GMT quentin [1187]
	* trunk/server/fedora/config/etc/sysconfig/crond (added)

	Always ensure we have tokens before starting crond


Sat, 06 Jun 2009 17:57:02 GMT quentin [1171]
	* trunk/server/fedora/config/etc/pki/tls/certs/check.pl (added)

	Script for checking certificate expiration times


Fri, 05 Jun 2009 20:18:20 GMT geofft [1170]
	* trunk/server/fedora/config/etc/pki/tls/certs/scripts.pem (modified)

	scripts.mit.edu Equifax-signed 2-year cert


Fri, 05 Jun 2009 03:32:42 GMT geofft [1168]
	* trunk/server/fedora/config/etc/environment (added)

	Make Java work again by reducing its maximum heap size.

	Otherwise, ...


Fri, 05 Jun 2009 01:04:46 GMT geofft [1166]
	* trunk/server/fedora/config/etc/pki/tls/certs/star.scripts.pem (modified)

	Replace *.scripts' cert with an Equifax-signed one from RapidSSL.


Thu, 04 Jun 2009 09:20:36 GMT geofft [1165]
	* trunk/server/fedora/config/etc/security/limits.conf (modified)

	limits.conf: Actually, keep data and as around.

	rss isn't respected ...


Thu, 04 Jun 2009 09:18:04 GMT quentin [1164]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Revert r1162 (DDoS over?)


Thu, 04 Jun 2009 06:13:40 GMT andersk [1163]
	* trunk/server/fedora/config/etc/security/limits.conf (modified)

	Punt memory limits other than rss.


Wed, 03 Jun 2009 17:31:38 GMT quentin [1162]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Temporarily reduce request timeouts in order to deal with DDoS


Wed, 03 Jun 2009 15:30:18 GMT mitchb [1160]
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Config for ssh and networking to interact with cats-whiskers


Tue, 02 Jun 2009 21:47:37 GMT geofft [1136]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/cycling-club.conf (deleted)

	Also delete the config


Tue, 02 Jun 2009 21:47:01 GMT geofft [1135]
	* trunk/server/fedora/config/etc/pki/tls/certs/cycling-club.pem (deleted)

	cycling-club.scripts' 30-day cert expired, so revert to the *.scripts ...


Sun, 24 May 2009 22:49:14 GMT andersk [1133]
	* trunk/server/fedora/Makefile (modified)

	Build nss-ldapd.i386.


Sun, 24 May 2009 22:48:49 GMT andersk [1132]
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	Update nss-ldapd to 0.6.8.


Sun, 24 May 2009 22:03:52 GMT andersk [1131]
	* trunk/server/common/oursrc/nss_nonlocal/configure.ac (modified)
	* trunk/server/common/oursrc/nss_nonlocal/nonlocal-group.c (modified)
	* trunk/server/common/oursrc/nss_nonlocal/nonlocal-passwd.c (modified)
	* trunk/server/fedora/specs/nss_nonlocal.spec (modified)

	Update nss_nonlocal to 1.9.


Sat, 16 May 2009 04:40:09 GMT mitchb [1128]
	* trunk/server/fedora/config/etc/acpi/actions/power.sh (deleted)

	Revert r1010, make the power button work, as previously directed.


Sat, 16 May 2009 04:34:28 GMT quentin [1127]
	* trunk/server/fedora/config/etc/php.d/json.ini (modified)

	Don't make exceptions for single extensions


Sat, 16 May 2009 04:07:57 GMT mitchb [1126]
	* trunk/server/fedora/config/etc/php.d/json.ini (modified)

	People want json.  Turn it on.


Wed, 13 May 2009 22:43:02 GMT geofft [1125]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/geofft.conf (added)

	reified vhost for geofft.mit.edu


Wed, 13 May 2009 22:39:34 GMT geofft [1124]
	* trunk/server/fedora/config/etc/pki/tls/certs/geofft.pem (added)

	RapidSSL 30-day certificate for geofft.mit.edu


Wed, 13 May 2009 21:58:23 GMT mitchb [1123]
	* trunk/server/fedora/config/etc/postfix/main.cf (modified)

	Proofreading... 9 out of 10 optometrists agree!


Wed, 13 May 2009 21:43:45 GMT geofft [1122]
	* trunk/server/fedora/config/etc/postfix/main.cf (modified)

	(Temporarily?) permit mail to user@scripts-vhosts.mit.edu


Sun, 10 May 2009 18:27:18 GMT mitchb [1119]
	* trunk (copied)

	Restructure so trunk of the repo is at /trunk, not / (part 1)


Tue, 05 May 2009 19:32:40 GMT geofft [1114]
	* server/fedora/config/etc/httpd/vhosts.d/next.conf (modified)

	change docroot for next.mit.edu