# # ChangeLog for trunk # # Generated by Trac 1.0.2 # Mar 28, 2024, 6:16:19 AM Wed, 30 Dec 2009 00:04:13 GMT geofft [1405] * trunk/server/fedora/config/etc/httpd/vhosts.d/impact.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/impact.pem (added) SSL cert and config for impact.mit.edu [help.mit.edu #1111633] Tue, 29 Dec 2009 07:18:33 GMT ezyang [1404] * trunk/locker/bin (modified) * trunk/locker/bin/scripts-mediawiki (modified) * trunk/locker/bin/scripts-ssh (modified) * trunk/locker/bin/scripts-wordpress (modified) Merged up to r1403 from locker-dev to trunk. Tue, 29 Dec 2009 00:54:23 GMT mitchb [1403] * trunk/server/fedora/specs/moira.spec (modified) Update moira to new upstream version, including eunice printer client Sun, 27 Dec 2009 22:27:45 GMT gdb [1402] * trunk/server/fedora/specs/moira.spec (modified) Removed mit-zephyr from the build deps Sun, 27 Dec 2009 10:43:52 GMT andersk [1401] * trunk/locker/sbin/commit-email.pl (modified) commit-email.pl: Run in UTF-8 locale. Sun, 27 Dec 2009 10:43:50 GMT andersk [1400] * trunk/locker/sbin/commit-email.pl (modified) * trunk/locker/sbin/commit-zephyr (modified) Update commit-email.pl and commit-zephyr from upstream. Sun, 27 Dec 2009 09:54:37 GMT andersk [1399] * trunk/server/fedora/specs/moira.spec (modified) moira.spec: Remove redundant information from summaries and ... Sun, 27 Dec 2009 09:48:40 GMT gdb [1398] * trunk/server/fedora/specs/moira.spec (modified) Silly english Sun, 27 Dec 2009 09:42:01 GMT gdb [1397] * trunk/server/fedora/specs/moira.spec (modified) Fixed Requires for libmoira-devel, small style fixes in moira.spec Sun, 27 Dec 2009 09:01:12 GMT gdb [1396] * trunk/server/common/patches/moira-install-headers.patch (added) * trunk/server/common/patches/moira-update-server.rc.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/moira.spec (modified) Built and mildly tested moira RPM Sun, 27 Dec 2009 07:55:15 GMT mitchb [1395] * trunk/server/common/patches/rc.nslcd.patch (deleted) Remove nslcd initscript patch I neglected to punt this in r1294 when ... Sun, 27 Dec 2009 01:00:53 GMT gdb [1394] * trunk/server/fedora/specs/moira.spec (added) Added mostly-working spec file for moira Fri, 25 Dec 2009 09:20:39 GMT mitchb [1393] * trunk/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (modified) Don't allow mock to use mirrors for package updates You know that ... Fri, 25 Dec 2009 07:31:46 GMT andersk [1392] * trunk/README (modified) Aaaagh! It’s still there make it go away! Wed, 23 Dec 2009 19:57:55 GMT quentin [1391] * trunk/server/fedora/config/etc/logwatch/scripts/services/named (modified) Ignore DNSSEC errors Wed, 23 Dec 2009 19:55:49 GMT quentin [1390] * trunk/server/fedora/config/etc/logwatch (added) * trunk/server/fedora/config/etc/logwatch/scripts (added) * trunk/server/fedora/config/etc/logwatch/scripts/services (added) * trunk/server/fedora/config/etc/logwatch/scripts/services/named (added) Import upstream logwatch named script Wed, 23 Dec 2009 17:11:32 GMT ezyang [1389] * trunk/locker/sbin/parallel-find.pl (modified) Make git describe more resilient, and prune .scripts-version when ... Wed, 23 Dec 2009 01:41:53 GMT quentin [1388] * trunk/locker/sbin/parallel-find.pl (modified) Don't pass strings with newlines around Wed, 23 Dec 2009 01:08:57 GMT ezyang [1387] * trunk/locker/sbin/parallel-find.pl (modified) Add missing newline. Tue, 22 Dec 2009 23:53:05 GMT ezyang [1386] * trunk/locker/sbin/parallel-find.pl (modified) More bugsquishing; I think it works now. Tue, 22 Dec 2009 23:26:15 GMT ezyang [1385] * trunk/locker/sbin/parallel-find.pl (modified) Bugfixes for parallel-find. Tue, 22 Dec 2009 23:05:14 GMT ezyang [1384] * trunk/locker/sbin/parallel-find.pl (modified) Make parallel find /actually/ work with Wizard autoinstalls. Sat, 19 Dec 2009 05:39:08 GMT ezyang [1383] * trunk/lvs/debian/config/etc/aliases (modified) * trunk/server/fedora/config/etc/aliases (modified) Add ezyang@mit.edu to receive root email. Sat, 19 Dec 2009 05:38:47 GMT ezyang [1382] * trunk/server/doc/install-howto.sh (modified) Miscellaneous extra instructions from f11-test. Thu, 17 Dec 2009 09:22:36 GMT ezyang [1381] * trunk/server/doc/install-howto.sh (modified) Misc doc updates from install f11-test. Thu, 17 Dec 2009 08:17:14 GMT mitchb [1380] * trunk/server/fedora/Makefile (modified) Don't allow Canada to make our servers uninstallable Someone thought ... Fri, 11 Dec 2009 14:27:20 GMT quentin [1379] * trunk/server/fedora/config/etc/sudoers (modified) Run ldap-backup as root so it can manipulate files owned by both ... Thu, 10 Dec 2009 08:34:28 GMT quentin [1378] * trunk/server/fedora/config/etc/sudoers (modified) Allow scripts to execute ldap-backup Wed, 09 Dec 2009 09:45:19 GMT quentin [1377] * trunk/server/fedora/specs/accountadm.spec (modified) Put ldap-backup in the RPM (why isn't this automatic?) Wed, 09 Dec 2009 09:42:28 GMT quentin [1376] * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/ldap-backup (added) A (more) correct LDAP backup script Tue, 08 Dec 2009 05:09:17 GMT quentin [1375] * trunk/locker/bin/for-each-server (modified) Make for-each-server work on Darwin Mon, 07 Dec 2009 08:37:00 GMT quentin [1374] * trunk/lvs/debian/config/etc/ha.d/ldirectord-finger.sh (modified) Don't show quiescent servers in ldirectord finger output Mon, 07 Dec 2009 06:38:44 GMT quentin [1373] * trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified) Rebalance real-mccoy Mon, 07 Dec 2009 04:13:16 GMT ezyang [1372] * trunk/locker/sbin/parallel-find.pl (modified) Print lockfile name. Mon, 07 Dec 2009 04:11:44 GMT ezyang [1371] * trunk/locker/sbin/parallel-find.pl (modified) Fix some tab/space problems, add missing parameter to unlock_and_die. Mon, 07 Dec 2009 04:08:35 GMT dwilson [1370] * trunk/locker/sbin/parallel-find.pl (modified) trac #70 - parallel-find enhancement Mon, 07 Dec 2009 01:26:45 GMT mitchb [1369] * trunk/locker/doc/tickets/rt.txt (modified) Clarifications about RT zephyrbot and To/Cc fields Mon, 07 Dec 2009 01:23:32 GMT quentin [1368] * trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified) * trunk/lvs/debian/config/etc/sysctl.conf (modified) Keep old LVS mappings around with a weight of 0 so existing ... Sun, 06 Dec 2009 21:36:11 GMT ezyang [1367] * trunk/locker/doc/tickets/rt.txt (modified) Add comment about lock/unlock conventions. Sun, 06 Dec 2009 21:34:02 GMT ezyang [1366] * trunk/locker/doc/tickets/rt.txt (modified) Add more complete information about using the zephyrbot. Wed, 02 Dec 2009 06:18:14 GMT quentin [1365] * trunk/lvs/doc/install-howto (modified) Document ipvsadm configuration Tue, 01 Dec 2009 21:34:46 GMT adehnert [1364] * trunk/locker/doc/tickets/cnames.txt (modified) Added the stella command lines to cnames.txt Tue, 01 Dec 2009 21:09:07 GMT adehnert [1363] * trunk/locker/doc/tickets/cnames.txt (modified) Clarifications and updates to cnames.txt Mon, 23 Nov 2009 08:13:05 GMT andersk [1362] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/php.d/_scripts.ini (modified) Undo the REDIRECT_STATUS kludge. httpd.conf has always contained ... Fri, 20 Nov 2009 08:00:21 GMT mitchb [1360] * trunk/server/common/patches/php-scripts-304.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (deleted) * trunk/server/fedora/specs/scripts-base.spec (modified) Stop scriptsifying php; our patch for the-bug is r281116 in 5.2.11 ... Sat, 14 Nov 2009 00:39:00 GMT quentin [1359] * trunk/lvs/debian/config/etc/munin/munin-node.conf (modified) Add christmas-tree to Munin ACL on directors Tue, 10 Nov 2009 05:45:43 GMT andersk [1358] * trunk/server/common/oursrc/execsys/Makefile.in (modified) * trunk/server/common/oursrc/execsys/upd-execsys (modified) execsys: Unbreak stuff broken by r1337. Tue, 10 Nov 2009 05:35:05 GMT andersk [1357] * trunk/server/common/oursrc/execsys/execsys-binfmt (modified) execsys: Disable binfmt_misc extensions. For Mono, use a magic ... Tue, 10 Nov 2009 04:14:34 GMT andersk [1356] * trunk/server/common/patches/httpd-suexec-cloexec.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) suexec: Fix error logging if execv failed. Patch from httpd trunk ... Tue, 10 Nov 2009 04:14:31 GMT andersk [1355] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec: Exec static-cat or php-cgi after closing the suexec log. Tue, 10 Nov 2009 04:14:29 GMT andersk [1354] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec: Log the correct path to PHP if execv failed. Signed-off-by: ... Mon, 09 Nov 2009 08:35:35 GMT mitchb [1353] * trunk/server/doc/package-build-howto (modified) Complete overhaul of package building/patching documentation Sun, 08 Nov 2009 23:09:04 GMT geofft [1352] * trunk/server/fedora/config/etc/pki/tls/certs/barnowl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/cdsa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sipb.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/twentytwelve.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ua.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/whatsnext.pem (modified) SSL certificate renewals Sun, 08 Nov 2009 20:59:20 GMT geofft [1351] * trunk/server/fedora/config/etc/httpd/vhosts.d/textbooks.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/textbooks.pem (deleted) Punt textbooks.mit.edu's config because it is no longer on scripts Sun, 08 Nov 2009 20:40:50 GMT geofft [1350] * trunk/server/fedora/config/etc/pki/tls/openssl.cnf (modified) Use a more accurate OU in certificates Sun, 08 Nov 2009 17:16:51 GMT geofft [1349] * trunk/server/doc/package-build-howto (modified) Fix documentation Sun, 08 Nov 2009 16:02:18 GMT mitchb [1348] * trunk/server/common/patches/httpd-2.2.x-mod_ssl-sessioncaching.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) Prompt for certs once, not five bajillion times (fix SSL session ... Sun, 08 Nov 2009 10:23:09 GMT geofft [1347] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: Add a -noauth flag. Sat, 24 Oct 2009 16:45:00 GMT mitchb [1342] * trunk/server/fedora/config/etc/nagios/check_ldap_mmr.real (modified) Improvements to check_ldap_mmr plugin o Don't put a newline after ... Mon, 19 Oct 2009 23:52:17 GMT ezyang [1341] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Disable vhost logging. Thu, 15 Oct 2009 04:58:56 GMT mitchb [1340] * trunk/server/common/patches/rubygem-actionpack-2.3.x-CVE-2009-3009.patch (deleted) * trunk/server/common/patches/rubygem-activesupport-2.3.x-CVE-2009-3009.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/rubygem-actionpack.spec.patch (deleted) * trunk/server/fedora/specs/rubygem-activesupport.spec.patch (deleted) Revert r1329 - stop scriptsifying activesupport and actionpack gems ... Wed, 14 Oct 2009 14:40:41 GMT mitchb [1339] * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified) Revert r1328 - accept Rails-related updates from Fedora again Tue, 13 Oct 2009 05:19:11 GMT geofft [1338] * trunk/server/common/oursrc/execsys/execsys-binfmt (modified) execsys: Have binfmt_misc detect executable PHP scripts via magic, ... Tue, 13 Oct 2009 05:11:51 GMT geofft [1337] * trunk/server/common/oursrc/execsys/Makefile.in (modified) * trunk/server/common/oursrc/execsys/configure.in (modified) * trunk/server/common/oursrc/execsys/execsys-binfmt (moved) * trunk/server/common/oursrc/execsys/mrproper (modified) * trunk/server/common/oursrc/execsys/upd-execsys (modified) execsys: Stop automatically generating the binfmt_misc configuration. ... Thu, 08 Oct 2009 05:38:24 GMT mitchb [1336] * trunk/locker/bin/for-each-server (modified) Make for-each-server work on Suns Look, I know nobody else *thinks* ... Mon, 05 Oct 2009 18:33:56 GMT geofft [1335] * trunk/server/fedora/config/etc/httpd/vhosts.d/signup.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/signup.pem (added) CSR and configuration for signup.mit.edu [help.mit.edu #1024298] Sun, 04 Oct 2009 06:47:36 GMT mitchb [1334] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/config/etc/mock (added) * trunk/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (added) * trunk/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (added) Change the Scripts build system to build under mock! Sun, 04 Oct 2009 06:44:55 GMT mitchb [1333] * trunk/server/fedora/config/etc/pam.d/mock (modified) Prevent users from trying to run mock via password auth Sun, 04 Oct 2009 06:43:29 GMT mitchb [1332] * trunk/server/fedora/config/etc/pam.d/mock (added) Put pristine upstream mock PAM config under revision control Sat, 03 Oct 2009 17:46:12 GMT mitchb [1331] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Revert r1330. Try not to kill *all* of our notifications next time. Sat, 03 Oct 2009 03:19:38 GMT geofft [1330] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) syslog: Ignore "Failed keyboard-interactive..." We don't permit ... Thu, 01 Oct 2009 11:44:32 GMT mitchb [1329] * trunk/server/common/patches/rubygem-actionpack-2.3.x-CVE-2009-3009.patch (added) * trunk/server/common/patches/rubygem-activesupport-2.3.x-CVE-2009-3009.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/rubygem-actionpack.spec.patch (added) * trunk/server/fedora/specs/rubygem-activesupport.spec.patch (added) Scriptsify activesupport and actionpack ruby gems, patch for ... Thu, 01 Oct 2009 10:40:20 GMT mitchb [1328] * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (modified) Stop accepting Rails-related updates from Fedora Fri, 25 Sep 2009 01:50:10 GMT mitchb [1327] * trunk/server/fedora/specs/accountadm.spec (modified) Corrections to build and install dependencies for accountadm Sat, 19 Sep 2009 21:36:28 GMT quentin [1326] * trunk/server/fedora/config/etc/httpd/vhosts.d/ua.conf (modified) Goddamn hardcoded vhosts Mon, 14 Sep 2009 19:17:00 GMT mitchb [1325] * trunk/server/fedora/config/etc/httpd/vhosts.d/ai6034.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/ai6034.pem (added) Certificate and SSL config for ai6034.mit.edu Mon, 14 Sep 2009 18:19:20 GMT mitchb [1324] * trunk/locker/deploy/bin/django (modified) Fix the django autoinstaller? Who, me? When they upgraded from 1.0 ... Sun, 13 Sep 2009 10:47:26 GMT mitchb [1323] * trunk/server/fedora/config/etc/logrotate.d/httpd (modified) Fix global scoping problem from r1317 and r1319 One of these days ... Sat, 12 Sep 2009 18:38:44 GMT geofft [1322] * trunk/server/fedora/config/etc/sysconfig/freshclam (added) Don't disable freshclam Sat, 12 Sep 2009 12:12:01 GMT quentin [1321] * trunk/server/fedora/config/etc/freshclam.conf (added) Add freshclam configuration Fri, 11 Sep 2009 16:09:32 GMT mitchb [1320] * trunk/server/doc/install-howto.sh (modified) The whois daemon needs a credential file installed, too Wed, 09 Sep 2009 12:55:02 GMT mitchb [1319] * trunk/server/fedora/config/etc/logrotate.d/httpd (modified) Fix vhost log rolling config from r1317 Wed, 09 Sep 2009 12:34:42 GMT mitchb [1318] * trunk/noc/nagios/services.cfg (modified) Don't exempt sql webservers from Nagios alerts during the AFS restart Tue, 08 Sep 2009 04:55:54 GMT quentin [1317] * trunk/server/fedora/config/etc/logrotate.d/httpd (modified) Temporarily keep 14 days of vhost logs Tue, 08 Sep 2009 04:54:55 GMT quentin [1316] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/httpd/statistics_log_mitonly.sh (modified) Handle ~urls as well when gathering statistics Tue, 08 Sep 2009 04:07:29 GMT quentin [1315] * trunk/server/fedora/config/etc/httpd/statistics_log_mitonly.sh (modified) Flush log after each entry, to avoid a big 4k buffer Tue, 08 Sep 2009 04:04:40 GMT ezyang [1314] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/httpd/statistics_log_mitonly.sh (added) Collect logs about virtual host hits from MITnet at ... Fri, 04 Sep 2009 18:42:30 GMT geofft [1313] * trunk/locker/sql/bin/get-password (modified) Make the [mysql] to [client] change everywhere that writes .my.cnf Fri, 04 Sep 2009 18:08:32 GMT geofft [1312] * trunk/locker/sql/bin/save-password (modified) Use [client] header instead of [mysql] in .my.cnf This unbreaks ... Wed, 02 Sep 2009 04:33:46 GMT mitchb [1311] * trunk/server/fedora/config/etc/httpd/vhosts.d/bookspicker.conf (added) SSL config for bookspicker.mit.edu. The cert doesn't do much without it. Tue, 01 Sep 2009 19:08:09 GMT geofft [1310] * trunk/server/fedora/config/etc/pki/tls/certs/bookspicker.pem (added) SSL certificate for bookspicker.mit.edu Fri, 28 Aug 2009 16:41:59 GMT presbrey [1309] * trunk/noc/nagios/services.cfg (modified) Fri, 28 Aug 2009 16:39:32 GMT presbrey [1308] * trunk/noc/nagios/services.cfg (modified) add nagios check sql.mit.edu SSL certificate Wed, 26 Aug 2009 05:49:45 GMT geofft [1307] * trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/lpq.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/queues.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified) certificate renewals Tue, 25 Aug 2009 12:18:12 GMT mitchb [1306] * trunk/server/common/patches/httpd-2.2.x-sni.patch (deleted) * trunk/server/fedora/specs/httpd.spec.patch (modified) Upgrade Apache to 2.2.13; don't patch in SNI support anymore And we ... Fri, 21 Aug 2009 19:43:29 GMT geofft [1305] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Don't zephyr -c scripts-spew about sudo from root. Because we ... Tue, 18 Aug 2009 02:18:29 GMT quentin [1304] * trunk/noc/nagios/scripts-plugins/check_svn (modified) Use Python 2.5-compatible kill Tue, 18 Aug 2009 02:00:41 GMT quentin [1303] * trunk/noc/nagios/scripts-plugins/check_svn (modified) Kill all svn child processes when exiting Tue, 18 Aug 2009 00:43:15 GMT quentin [1302] * trunk/server/fedora/config/etc/pki/tls/certs/check.pl (modified) basename != dirname Mon, 17 Aug 2009 02:00:52 GMT geofft [1301] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Actually unblock reuter from sending (not just receiving) mail ...