#
# ChangeLog for trunk/server
#
# Generated by Trac 1.0.2
# Jan 21, 2025, 11:41:10 AM

Sun, 08 Nov 2009 20:40:50 GMT geofft [1350]
	* trunk/server/fedora/config/etc/pki/tls/openssl.cnf (modified)

	Use a more accurate OU in certificates


Sun, 08 Nov 2009 17:16:51 GMT geofft [1349]
	* trunk/server/doc/package-build-howto (modified)

	Fix documentation


Sun, 08 Nov 2009 16:02:18 GMT mitchb [1348]
	* trunk/server/common/patches/httpd-2.2.x-mod_ssl-sessioncaching.patch (added)
	* trunk/server/fedora/specs/httpd.spec.patch (modified)

	Prompt for certs once, not five bajillion times (fix SSL session ...


Sun, 08 Nov 2009 10:23:09 GMT geofft [1347]
	* trunk/server/common/oursrc/accountadm/admof.c (modified)

	admof: Add a -noauth flag.


Sat, 24 Oct 2009 16:45:00 GMT mitchb [1342]
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr.real (modified)

	Improvements to check_ldap_mmr plugin
	  o Don't put a newline after ...


Mon, 19 Oct 2009 23:52:17 GMT ezyang [1341]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Disable vhost logging.


Thu, 15 Oct 2009 04:58:56 GMT mitchb [1340]
	* trunk/server/common/patches/rubygem-actionpack-2.3.x-CVE-2009-3009.patch (deleted)
	* trunk/server/common/patches/rubygem-activesupport-2.3.x-CVE-2009-3009.patch (deleted)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/rubygem-actionpack.spec.patch (deleted)
	* trunk/server/fedora/specs/rubygem-activesupport.spec.patch (deleted)

	Revert r1329 - stop scriptsifying activesupport and actionpack gems ...


Wed, 14 Oct 2009 14:40:41 GMT mitchb [1339]
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified)

	Revert r1328 - accept Rails-related updates from Fedora again


Tue, 13 Oct 2009 05:19:11 GMT geofft [1338]
	* trunk/server/common/oursrc/execsys/execsys-binfmt (modified)

	execsys: Have binfmt_misc detect executable PHP scripts via magic, ...


Tue, 13 Oct 2009 05:11:51 GMT geofft [1337]
	* trunk/server/common/oursrc/execsys/Makefile.in (modified)
	* trunk/server/common/oursrc/execsys/configure.in (modified)
	* trunk/server/common/oursrc/execsys/execsys-binfmt (moved)
	* trunk/server/common/oursrc/execsys/mrproper (modified)
	* trunk/server/common/oursrc/execsys/upd-execsys (modified)

	execsys: Stop automatically generating the binfmt_misc configuration. ...


Mon, 05 Oct 2009 18:33:56 GMT geofft [1335]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/signup.conf (added)
	* trunk/server/fedora/config/etc/pki/tls/certs/signup.pem (added)

	CSR and configuration for signup.mit.edu [help.mit.edu #1024298]


Sun, 04 Oct 2009 06:47:36 GMT mitchb [1334]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/config/etc/mock (added)
	* trunk/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (added)
	* trunk/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (added)

	Change the Scripts build system to build under mock!


Sun, 04 Oct 2009 06:44:55 GMT mitchb [1333]
	* trunk/server/fedora/config/etc/pam.d/mock (modified)

	Prevent users from trying to run mock via password auth


Sun, 04 Oct 2009 06:43:29 GMT mitchb [1332]
	* trunk/server/fedora/config/etc/pam.d/mock (added)

	Put pristine upstream mock PAM config under revision control


Sat, 03 Oct 2009 17:46:12 GMT mitchb [1331]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Revert r1330.  Try not to kill *all* of our notifications next time.


Sat, 03 Oct 2009 03:19:38 GMT geofft [1330]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	syslog: Ignore "Failed keyboard-interactive..."

	We don't permit ...


Thu, 01 Oct 2009 11:44:32 GMT mitchb [1329]
	* trunk/server/common/patches/rubygem-actionpack-2.3.x-CVE-2009-3009.patch (added)
	* trunk/server/common/patches/rubygem-activesupport-2.3.x-CVE-2009-3009.patch (added)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/rubygem-actionpack.spec.patch (added)
	* trunk/server/fedora/specs/rubygem-activesupport.spec.patch (added)

	Scriptsify activesupport and actionpack ruby gems, patch for ...


Thu, 01 Oct 2009 10:40:20 GMT mitchb [1328]
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified)

	Stop accepting Rails-related updates from Fedora


Fri, 25 Sep 2009 01:50:10 GMT mitchb [1327]
	* trunk/server/fedora/specs/accountadm.spec (modified)

	Corrections to build and install dependencies for accountadm


Sat, 19 Sep 2009 21:36:28 GMT quentin [1326]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/ua.conf (modified)

	Goddamn hardcoded vhosts


Mon, 14 Sep 2009 19:17:00 GMT mitchb [1325]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/ai6034.conf (added)
	* trunk/server/fedora/config/etc/pki/tls/certs/ai6034.pem (added)

	Certificate and SSL config for ai6034.mit.edu


Sun, 13 Sep 2009 10:47:26 GMT mitchb [1323]
	* trunk/server/fedora/config/etc/logrotate.d/httpd (modified)

	Fix global scoping problem from r1317 and r1319
	One of these days ...


Sat, 12 Sep 2009 18:38:44 GMT geofft [1322]
	* trunk/server/fedora/config/etc/sysconfig/freshclam (added)

	Don't disable freshclam


Sat, 12 Sep 2009 12:12:01 GMT quentin [1321]
	* trunk/server/fedora/config/etc/freshclam.conf (added)

	Add freshclam configuration


Fri, 11 Sep 2009 16:09:32 GMT mitchb [1320]
	* trunk/server/doc/install-howto.sh (modified)

	The whois daemon needs a credential file installed, too


Wed, 09 Sep 2009 12:55:02 GMT mitchb [1319]
	* trunk/server/fedora/config/etc/logrotate.d/httpd (modified)

	Fix vhost log rolling config from r1317


Tue, 08 Sep 2009 04:55:54 GMT quentin [1317]
	* trunk/server/fedora/config/etc/logrotate.d/httpd (modified)

	Temporarily keep 14 days of vhost logs


Tue, 08 Sep 2009 04:54:55 GMT quentin [1316]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)
	* trunk/server/fedora/config/etc/httpd/statistics_log_mitonly.sh (modified)

	Handle ~urls as well when gathering statistics


Tue, 08 Sep 2009 04:07:29 GMT quentin [1315]
	* trunk/server/fedora/config/etc/httpd/statistics_log_mitonly.sh (modified)

	Flush log after each entry, to avoid a big 4k buffer


Tue, 08 Sep 2009 04:04:40 GMT ezyang [1314]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)
	* trunk/server/fedora/config/etc/httpd/statistics_log_mitonly.sh (added)

	Collect logs about virtual host hits from MITnet at ...


Wed, 02 Sep 2009 04:33:46 GMT mitchb [1311]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/bookspicker.conf (added)

	SSL config for bookspicker.mit.edu.  The cert doesn't do much without
	it.


Tue, 01 Sep 2009 19:08:09 GMT geofft [1310]
	* trunk/server/fedora/config/etc/pki/tls/certs/bookspicker.pem (added)

	SSL certificate for bookspicker.mit.edu


Wed, 26 Aug 2009 05:49:45 GMT geofft [1307]
	* trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/lpq.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/queues.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified)
	* trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified)

	certificate renewals


Tue, 25 Aug 2009 12:18:12 GMT mitchb [1306]
	* trunk/server/common/patches/httpd-2.2.x-sni.patch (deleted)
	* trunk/server/fedora/specs/httpd.spec.patch (modified)

	Upgrade Apache to 2.2.13; don't patch in SNI support anymore
	And we ...


Fri, 21 Aug 2009 19:43:29 GMT geofft [1305]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Don't zephyr -c scripts-spew about sudo from root.

	Because we ...


Tue, 18 Aug 2009 00:43:15 GMT quentin [1302]
	* trunk/server/fedora/config/etc/pki/tls/certs/check.pl (modified)

	basename != dirname


Mon, 17 Aug 2009 02:00:52 GMT geofft [1301]
	* trunk/server/fedora/config/etc/postfix/blocked_users (modified)

	Actually unblock reuter from sending (not just receiving) mail ...


Sun, 16 Aug 2009 18:35:11 GMT geofft [1300]
	* trunk/server/fedora/config/etc/aliases (modified)

	Unblock golem from receiving mail (discussed with him over zephyr)


Sun, 16 Aug 2009 18:32:12 GMT geofft [1299]
	* trunk/server/fedora/config/etc/aliases (modified)

	Unblock reuter from sending mail [help.mit.edu #985700]


Sat, 15 Aug 2009 18:34:54 GMT mitchb [1296]
	* trunk/server/doc/389-ds-enable-ssl-and-kerberos.diff (moved)
	* trunk/server/doc/HOWTO-SETUP-LDAP (modified)
	* trunk/server/doc/install-howto.sh (modified)

	fedora-ds is now 389-ds - "People like alphanumeric digits"


Tue, 11 Aug 2009 00:54:28 GMT mitchb [1294]
	* trunk/server/common/oursrc/nss-ldapd (deleted)
	* trunk/server/doc/install-howto.sh (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/config/etc/nss-ldapd.conf (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (deleted)

	We got nss-ldapd into Fedora!  Stop building it from OpenSuSE.


Mon, 10 Aug 2009 10:50:30 GMT mitchb [1293]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/metu.conf (added)
	* trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (added)

	Certificate and Apache config for metu.mit.edu


Thu, 06 Aug 2009 14:54:39 GMT mitchb [1291]
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (modified)
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified)

	Stop using the Fedora mirrors; they suck
	The mirrors lag behind the ...


Thu, 06 Aug 2009 14:51:45 GMT mitchb [1290]
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (added)
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (added)

	Put -updates and -updates-testing repo configs under version control


Wed, 05 Aug 2009 05:04:52 GMT mitchb [1289]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	OpenSUSE bumped the nss-ldapd release again?  Shocking!  6.4->6.5


Tue, 04 Aug 2009 01:29:34 GMT mitchb [1288]
	* trunk/server/fedora/specs/httpd.spec.patch (modified)

	Revert r1287 - we're not convinced the change is beneficial


Mon, 03 Aug 2009 12:46:05 GMT quentin [1287]
	* trunk/server/fedora/specs/httpd.spec.patch (modified)

	Don't execute scripts outside of /afs, unless they're in the trusted ...


Tue, 28 Jul 2009 05:01:37 GMT mitchb [1283]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/rubygem-rails.spec.patch (deleted)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Stop scriptsifying rubygem-rails; Fedora has taken our patch


Tue, 28 Jul 2009 04:58:19 GMT mitchb [1282]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	Update nss-ldapd from version 0.6.10 release 6.2 to release 6.4 ...


Tue, 21 Jul 2009 15:11:21 GMT ezyang [1277]
	* trunk/server/fedora/specs/httpdmods.spec (modified)

	Add missing build dependency, as suggested by adehnert.


Mon, 20 Jul 2009 16:23:01 GMT mitchb [1276]
	* trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified)

	Updated CellServDB from Ops


Sat, 18 Jul 2009 08:43:35 GMT mitchb [1275]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/rubygem-rails.spec.patch (added)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Temporarily scriptsify rubygem-rails to work around Fedora packaging ...


Thu, 16 Jul 2009 02:50:26 GMT mitchb [1274]
	* trunk/server/common/patches/openafs-delta-dprintf-rename-20090427.patch (deleted)
	* trunk/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (deleted)
	* trunk/server/common/patches/openafs-postinit.patch (deleted)
	* trunk/server/common/patches/openafs-pts-encrypt.patch (deleted)
	* trunk/server/common/patches/openafs-scripts.patch (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/openafs.spec.patch (modified)

	Upgrade OpenAFS to 1.4.11
	o Two of our patches (postinit and ...


Thu, 16 Jul 2009 02:40:10 GMT mitchb [1273]
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)

	Upgrade nss-ldapd to version 0.6.10


Wed, 15 Jul 2009 08:27:11 GMT mitchb [1272]
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr (added)
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr.real (copied)
	* trunk/server/fedora/config/etc/sudoers (modified)
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Wrap check_ldap_mmr with a sudo invocation, and don't spew logs about
	it


Wed, 15 Jul 2009 07:22:12 GMT mitchb [1270]
	* trunk/server/fedora/config/etc/nagios/check_ldap_mmr (added)
	* trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified)

	Nagios plugin to monitor LDAP multi-master replication status


Mon, 13 Jul 2009 00:46:52 GMT mitchb [1267]
	* trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified)
	* trunk/noc/nagios/hostgroups.cfg (modified)
	* trunk/noc/nagios/hosts.cfg (modified)
	* trunk/server/fedora/config/etc/hosts (modified)
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Configuration for new scripts webserver real-mccoy


Sun, 12 Jul 2009 03:24:40 GMT quentin [1266]
	* trunk/server/fedora/config/usr/vice/etc/NetRestrict (added)

	Symlink in case AFS is stupid


Sun, 12 Jul 2009 03:22:00 GMT quentin [1265]
	* trunk/server/fedora/config/etc/openafs/NetRestrict (added)

	Prevent AFS client from registering shared or backend IPs


Sat, 11 Jul 2009 07:01:32 GMT geofft [1264]
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified)

	Fix URL of Django admin media for F11/py2.6.


Thu, 09 Jul 2009 19:48:21 GMT mitchb [1259]
	* trunk (modified)
	* trunk/lvs/debian/config/etc/munin/plugins/cps_1_0 (modified)
	* trunk/server/common/patches/httpd-2.2.x-sni.patch (modified)
	* trunk/server/common/patches/httpd-suexec-scripts.patch (modified)
	* trunk/server/common/patches/openafs-delta-dprintf-rename-20090427.patch (copied)
	* trunk/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (copied)
	* trunk/server/common/patches/openafs-numsysnames.patch (copied)
	* trunk/server/common/patches/openafs-scripts.patch (modified)
	* trunk/server/common/patches/openssh-4.7p1-gssapi-name-in-env.patch (copied)
	* trunk/server/doc/install-howto.sh (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/config/etc/acpi (deleted)
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)
	* trunk/server/fedora/config/etc/logrotate.d/httpd (modified)
	* trunk/server/fedora/config/etc/munin/munin-node.conf (modified)
	* trunk/server/fedora/config/etc/munin/plugin-conf.d/munin-node (modified)
	* trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified)
	* trunk/server/fedora/config/etc/nscd.conf (modified)
	* trunk/server/fedora/config/etc/php.d/apc.ini (copied)
	* trunk/server/fedora/config/etc/php.d/curl.ini (copied)
	* trunk/server/fedora/config/etc/php.d/wddx.ini (copied)
	* trunk/server/fedora/config/etc/printcap (modified)
	* trunk/server/fedora/config/etc/security/limits.conf (modified)
	* trunk/server/fedora/config/etc/sudoers (modified)
	* trunk/server/fedora/config/etc/sysconfig/networking (copied)
	* trunk/server/fedora/config/etc/sysconfig/openafs (modified)
	* trunk/server/fedora/config/etc/syslog-ng/syslog-ng.conf (modified)
	* trunk/server/fedora/config/etc/yum (copied)
	* trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (deleted)
	* trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified)
	* trunk/server/fedora/specs/httpd.spec.patch (modified)
	* trunk/server/fedora/specs/krb5.spec.patch (modified)
	* trunk/server/fedora/specs/nss-ldapd.spec.patch (modified)
	* trunk/server/fedora/specs/openafs.spec.patch (modified)
	* trunk/server/fedora/specs/openssh.spec.patch (modified)
	* trunk/server/fedora/specs/php.spec.patch (modified)
	* trunk/server/fedora/specs/pysvn.spec.patch (deleted)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Reintegrate branches/fc11-dev (r1121:1258) to trunk


Thu, 09 Jul 2009 05:58:10 GMT andersk [1256]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	BLUE!!!


Thu, 09 Jul 2009 05:08:32 GMT geofft [1255]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	Second coat of paint on an empty bikeshed


Thu, 09 Jul 2009 04:38:54 GMT geofft [1254]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	Still not convinced, but perhaps it works now too


Thu, 09 Jul 2009 04:35:31 GMT geofft [1253]
	* trunk/server/fedora/specs/scripts-python-path.spec (modified)

	I'm not convinced this package exists, but it's up to date now


Thu, 09 Jul 2009 03:51:45 GMT mitchb [1250]
	* trunk/server/fedora/config/etc/hosts (modified)
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Configuration for new scripts webserver busy-beaver


Wed, 08 Jul 2009 19:51:30 GMT mitchb [1245]
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Missed one; pancake-bunny backend route config


Wed, 08 Jul 2009 19:49:35 GMT mitchb [1244]
	* trunk/server/fedora/config/etc/hosts (modified)
	* trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified)
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)

	Configuration for new scripts webserver pancake-bunny


Wed, 08 Jul 2009 16:27:22 GMT mitchb [1242]
	* trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified)

	Renewal certificate for scripts-cert.mit.edu


Tue, 07 Jul 2009 01:31:19 GMT ezyang [1241]
	* trunk/server/doc/install-xen (added)

	Preliminary commit of Xen installation documents.


Tue, 07 Jul 2009 01:31:00 GMT ezyang [1240]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Revert change, as this will fail if AFS is not loaded.


Tue, 07 Jul 2009 01:09:26 GMT ezyang [1239]
	* trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified)

	Have zroot also look in /mit/scripts/.ssh/authorized_keys.

	This is ...


Fri, 03 Jul 2009 07:27:01 GMT mitchb [1237]
	* trunk/server/doc/install-howto.sh (modified)

	Small fixes to the server installation doc


Fri, 03 Jul 2009 07:16:30 GMT mitchb [1236]
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Nitpick punctuation fix in spec file; doesn't change anything


Fri, 03 Jul 2009 06:58:56 GMT mitchb [1235]
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/php_scripts.spec (modified)
	* trunk/server/fedora/specs/scripts-base.spec (modified)

	Tidy up dependencies for php_scripts
	  o Add BuildRequires ...


Fri, 03 Jul 2009 06:03:02 GMT mitchb [1234]
	* trunk/server/common/oursrc/php_scripts/Makefile.in (added)
	* trunk/server/common/oursrc/php_scripts/build.sh (deleted)
	* trunk/server/common/oursrc/php_scripts/mrproper (added)
	* trunk/server/common/oursrc/php_scripts/php.ini (deleted)
	* trunk/server/common/oursrc/php_scripts/php_scripts-config.m4 (moved)
	* trunk/server/common/oursrc/php_scripts/test.php (deleted)
	* trunk/server/doc/install-howto.sh (modified)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/php_scripts.spec (added)

	Package the php scripts.so logging module ...


Fri, 03 Jul 2009 05:01:22 GMT mitchb [1233]
	* trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified)

	Update to new Athena CellServDB


Wed, 01 Jul 2009 18:14:49 GMT quentin [1227]
	* trunk/server/fedora/config/etc/postfix/blocked_users (added)
	* trunk/server/fedora/config/etc/postfix/main.cf (modified)

	Add cycling-club to set of blocked mail users, and split the list off ...


Wed, 01 Jul 2009 16:11:27 GMT mitchb [1225]
	* trunk/server/common/oursrc/athrun/athrun.sh (modified)

	Make athrun use arch/@sys/bin instead of just bin


Wed, 01 Jul 2009 13:17:22 GMT mitchb [1219]
	* trunk/server/common/oursrc/athrun (added)
	* trunk/server/common/oursrc/athrun/Makefile.in (added)
	* trunk/server/common/oursrc/athrun/athrun.sh (added)
	* trunk/server/common/oursrc/athrun/configure.in (added)
	* trunk/server/common/oursrc/athrun/mrproper (added)
	* trunk/server/fedora/Makefile (modified)
	* trunk/server/fedora/specs/athrun.spec (added)

	Add a very braindead implementation of athrun for scripts.
	This ...


Tue, 30 Jun 2009 18:50:39 GMT geofft [1214]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/tours.conf (added)
	* trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (added)

	SSL cert and config for tours.mit.edu


Thu, 25 Jun 2009 13:07:53 GMT mitchb [1209]
	* trunk/server/fedora/config/etc/yum.conf (modified)

	kmod-openafs should be shaken, not stirred... err, installed, not ...


Wed, 24 Jun 2009 17:54:14 GMT quentin [1208]
	* trunk/server/fedora/config/etc/php.d/imagick.ini (added)

	Add ImageMagick PHP extension


Sun, 14 Jun 2009 07:31:09 GMT ezyang [1193]
	* trunk/server/fedora/config/etc/php.d/dom.ini (modified)

	Commiting enabling of dom.ini, pending further performance review.


Sat, 13 Jun 2009 18:12:29 GMT mitchb [1191]
	* trunk/server/fedora/config/etc/httpd/vhosts.d/geofft.conf (deleted)
	* trunk/server/fedora/config/etc/pki/tls/certs/geofft.pem (deleted)

	Remove expired test cert and config for geofft.mit.edu


Fri, 12 Jun 2009 23:35:40 GMT mitchb [1190]
	* trunk/server/doc/install-howto.sh (modified)

	Make the server install directions slightly more complete


Thu, 11 Jun 2009 15:32:48 GMT quentin [1187]
	* trunk/server/fedora/config/etc/sysconfig/crond (added)

	Always ensure we have tokens before starting crond


Mon, 08 Jun 2009 11:51:42 GMT mitchb [1178]
	* trunk/server/doc/HOWTO-SETUP-LDAP (modified)
	* trunk/server/doc/install-howto.sh (modified)

	Make installation of a scripts server less of a hazing ritual
	by ...


Sun, 07 Jun 2009 06:31:55 GMT quentin [1177]
	* trunk/server/doc/HOWTO-SETUP-LDAP (modified)

	Document how to generate a pkcs12 file from a PEM certificate and key


Sat, 06 Jun 2009 17:57:02 GMT quentin [1171]
	* trunk/server/fedora/config/etc/pki/tls/certs/check.pl (added)

	Script for checking certificate expiration times


Fri, 05 Jun 2009 20:18:20 GMT geofft [1170]
	* trunk/server/fedora/config/etc/pki/tls/certs/scripts.pem (modified)

	scripts.mit.edu Equifax-signed 2-year cert


Fri, 05 Jun 2009 04:24:02 GMT geofft [1169]
	* trunk/server/common/patches/httpd-suexec-scripts.patch (modified)

	suexec: Hardcode the JAVA_TOOL_OPTIONS value.

	Because, otherwise, ...


Fri, 05 Jun 2009 03:32:42 GMT geofft [1168]
	* trunk/server/fedora/config/etc/environment (added)

	Make Java work again by reducing its maximum heap size.

	Otherwise, ...


Fri, 05 Jun 2009 02:47:14 GMT geofft [1167]
	* trunk/server/common/patches/httpd-suexec-scripts.patch (modified)

	suexec: Let the JAVA_TOOL_OPTIONS environment variable through.


Fri, 05 Jun 2009 01:04:46 GMT geofft [1166]
	* trunk/server/fedora/config/etc/pki/tls/certs/star.scripts.pem (modified)

	Replace *.scripts' cert with an Equifax-signed one from RapidSSL.


Thu, 04 Jun 2009 09:20:36 GMT geofft [1165]
	* trunk/server/fedora/config/etc/security/limits.conf (modified)

	limits.conf: Actually, keep data and as around.

	rss isn't respected ...


Thu, 04 Jun 2009 09:18:04 GMT quentin [1164]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Revert r1162 (DDoS over?)


Thu, 04 Jun 2009 06:13:40 GMT andersk [1163]
	* trunk/server/fedora/config/etc/security/limits.conf (modified)

	Punt memory limits other than rss.


Wed, 03 Jun 2009 17:31:38 GMT quentin [1162]
	* trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified)

	Temporarily reduce request timeouts in order to deal with DDoS


Wed, 03 Jun 2009 15:30:18 GMT mitchb [1160]
	* trunk/server/fedora/config/etc/ssh/shosts.equiv (modified)
	* trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified)
	* trunk/server/fedora/config/etc/ssh/sshd_config (modified)
	* trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified)

	Config for ssh and networking to interact with cats-whiskers