# # ChangeLog for trunk # # Generated by Trac 1.0.2 # Mar 28, 2024, 4:40:13 AM Sat, 21 Aug 2010 08:03:13 GMT geofft [1601] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: Re-resolve the potential sysadmin's name within SYSADMIN_CELL ... Sat, 21 Aug 2010 07:36:13 GMT geofft [1600] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: More mutable input fun. Sat, 21 Aug 2010 07:21:52 GMT geofft [1599] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: Actually AFS likes to edit its input strings. So drop the ... Sat, 21 Aug 2010 07:09:23 GMT geofft [1598] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: Always check system:scripts-root -c athena, not in the ... Sat, 21 Aug 2010 07:00:19 GMT geofft [1597] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: Be a bit more paranoid about memory Sat, 21 Aug 2010 06:49:50 GMT geofft [1596] * trunk/server/common/oursrc/accountadm/admof.c (modified) admof: pts groups are identified by negative IDs, not colons Wed, 18 Aug 2010 14:13:17 GMT geofft [1595] * trunk/server/fedora/config/etc/httpd/vhosts.d/lpq.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/queues.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/lpq.pem (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/queues.pem (deleted) Unreify queues and lpq vhosts The site's been dead for ages -- at ... Tue, 17 Aug 2010 23:56:31 GMT geofft [1594] * trunk/server/common/oursrc/tokensys/renew.in (modified) * trunk/server/fedora/specs/tokensys.spec (modified) tokensys: aklog csail Sat, 14 Aug 2010 18:47:47 GMT geofft [1593] * trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified) Cert renewals (axo, crew, familynet, mitsoc, next, random-hall, ... Sat, 14 Aug 2010 04:25:53 GMT andersk [1592] * trunk/server/common/oursrc/scripts-static-cat/StaticCat.hs (modified) static-cat: Ignore unparsable byte ranges. Sun, 01 Aug 2010 22:42:52 GMT adehnert [1591] * trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (modified) Updated certificate for metu.mit.edu Sun, 18 Jul 2010 23:02:40 GMT andersk [1590] * trunk/server/common/oursrc/scripts-static-cat (added) * trunk/server/common/oursrc/scripts-static-cat/Setup.hs (added) * trunk/server/common/oursrc/scripts-static-cat/StaticCat.hs (added) * trunk/server/common/oursrc/scripts-static-cat/scripts-static-cat.cabal (added) * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (added) * trunk/server/fedora/specs/ghc-cgi.spec (added) * trunk/server/fedora/specs/ghc-unix-handle.spec (added) * trunk/server/fedora/specs/scripts-static-cat.spec (added) Package new static-cat written in Haskell. This adds support for ... Sat, 17 Jul 2010 22:53:37 GMT andersk [1589] * trunk/server/common/oursrc/httpdmods/mod_vhost_ldap.c (modified) mod_vhost_ldap: Fix /~user URLs. This also re-enables the upstream ... Sat, 17 Jul 2010 19:53:11 GMT andersk [1588] * trunk/server/common/oursrc/httpdmods/mod_vhost_ldap.c (modified) Update mod_vhost_ldap to 2.0.5 Now that mod_vhost_ldap upstream has ... Fri, 16 Jul 2010 06:43:10 GMT geofft [1587] * trunk/server/common/patches/ghostscript-CVE-2010-1628.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/ghostscript.spec.patch (added) Patch Ghostscript overflow error, see GS bug #691295 (CVE-2010-1628) Wed, 14 Jul 2010 04:57:57 GMT geofft [1586] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/libpng.spec.patch (added) Update to libpng 1.2.44 (CVE-2010-1205) (CVE-2010-2249) Wed, 07 Jul 2010 06:01:41 GMT ezyang [1585] * trunk/locker/bin/scripts-start (modified) Desupport new installations of e107, phpical, advancedguest and ... Mon, 05 Jul 2010 18:52:23 GMT geofft [1584] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) d_zroot: Also punt the logic for counting failed root logins This ... Mon, 05 Jul 2010 14:35:05 GMT geofft [1583] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Fix r1330 and reapply it. Sat, 03 Jul 2010 18:10:01 GMT geofft [1582] * trunk/server/fedora/config/etc/aliases (modified) * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Remove e-mail blocks (timeout!) Tue, 29 Jun 2010 23:31:07 GMT geofft [1581] * trunk/server/fedora/config/etc/named.conf (modified) Comment out DNSSEC because upstream's package is borked See ... Tue, 29 Jun 2010 23:29:35 GMT geofft [1580] * trunk/server/fedora/config/etc/named.conf (added) check in upstream named.conf Thu, 24 Jun 2010 05:21:33 GMT mitchb [1579] * trunk/server/fedora/config/etc/nagios/check_ldap_mmr.real (modified) Augment LDAP-MMR NRPE plugin to check for replication conflicts ... Thu, 24 Jun 2010 02:42:46 GMT geofft [1578] * trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified) New certificate for scripts-cert Tue, 22 Jun 2010 07:49:05 GMT mitchb [1577] * trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (modified) Renewed certificate for tours.mit.edu Mon, 07 Jun 2010 13:32:28 GMT geofft [1575] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Also disable outgoing mail, not just incoming bounces Mon, 07 Jun 2010 10:45:39 GMT adehnert [1574] * trunk/server/fedora/config/etc/aliases (modified) Disable problematic user Sun, 06 Jun 2010 08:48:12 GMT adehnert [1573] * trunk/server/fedora/config/etc/cron.d/scripts-ldap-cert-check (added) Add cron job to check the cert Sun, 06 Jun 2010 08:38:20 GMT adehnert [1572] * trunk/locker/sbin/check-ldap-cert.pl (moved) Check localhost, not all the web hosts Sun, 06 Jun 2010 08:38:11 GMT adehnert [1571] * trunk/locker/sbin/check-ldap-certs.pl (modified) Print the local hostname from check-ldap-certs.pl Sun, 06 Jun 2010 07:38:03 GMT adehnert [1570] * trunk/locker/sbin/ssl-get-endtime (modified) Oops, punt an unwanted echo line Sun, 06 Jun 2010 07:35:41 GMT adehnert [1569] * trunk/locker/sbin/check-ldap-certs.pl (added) * trunk/locker/sbin/ssl-get-endtime (added) Add script to check LDAP cert expiration Thu, 27 May 2010 09:08:19 GMT geofft [1565] * trunk/server/common/oursrc/accountadm/mbashrc (modified) mbashrc: Replace su/sudo with shell functions giving nice errors ... Thu, 20 May 2010 15:31:10 GMT adehnert [1562] * trunk/server/fedora/specs/krb5.spec.patch (modified) Update krb5.spec patch for new upstream version Wed, 19 May 2010 07:02:32 GMT adehnert [1561] * trunk/server/common/patches/texlive-CVE-2010-1440.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/texlive.spec.patch (deleted) Revert "Patch for CVE-2010-1440 (and CVE-2010-0739)" This reverts ... Wed, 19 May 2010 07:02:29 GMT adehnert [1560] * trunk/server/common/patches/dvipng-CVE-2010-0829.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/dvipng.spec.patch (deleted) Revert "Patch for CVE-2010-0829... SSDP: Same Thing, Different ... Fri, 07 May 2010 07:48:20 GMT mitchb [1559] * trunk/server/common/patches/dvipng-CVE-2010-0829.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/dvipng.spec.patch (added) Patch for CVE-2010-0829... SSDP: Same Thing, Different Package Fri, 07 May 2010 05:48:18 GMT adehnert [1558] * trunk/server/doc/package-build-howto (modified) Clarify/expand the package build instructions Fri, 07 May 2010 05:44:58 GMT adehnert [1557] * trunk/server/common/patches/texlive-CVE-2010-1440.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/texlive.spec.patch (added) Patch for CVE-2010-1440 (and CVE-2010-0739) Both are crashes or ... Wed, 05 May 2010 05:06:27 GMT mitchb [1555] * trunk/server/common/patches/openafs-release-glock.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) There can be only one! (so stop hogging the GLOCK) OpenAFS 1.4.12 ... Mon, 03 May 2010 05:24:10 GMT andersk [1554] * trunk/server/fedora/specs/nss_nonlocal.spec (modified) nss_nonlocal.spec: License is LGPLv2+. Mon, 03 May 2010 05:20:42 GMT andersk [1553] * trunk/server/common/oursrc/nss_nonlocal/COPYING.LESSER (added) * trunk/server/common/oursrc/nss_nonlocal/README (modified) * trunk/server/common/oursrc/nss_nonlocal/configure.ac (modified) * trunk/server/common/oursrc/nss_nonlocal/nonlocal-group.c (modified) * trunk/server/common/oursrc/nss_nonlocal/nonlocal-passwd.c (modified) * trunk/server/common/oursrc/nss_nonlocal/nonlocal-shadow.c (modified) * trunk/server/fedora/specs/nss_nonlocal.spec (modified) Update nss_nonlocal to 1.11. Thu, 29 Apr 2010 23:55:20 GMT adehnert [1552] * trunk/server/fedora/config/etc/httpd/vhosts.d/finboard.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/finboard.pem (added) Add certificate for Finboard Mon, 26 Apr 2010 22:22:18 GMT ezyang [1551] * trunk/locker/deploy/bin/mediawiki-star (deleted) * trunk/locker/deploy/bin/onathena-star (deleted) * trunk/locker/deploy/bin/wordpress-star (deleted) Remove star scripts from production Mon, 26 Apr 2010 22:18:07 GMT ezyang [1550] * trunk/locker/deploy/bin (modified) * trunk/locker/deploy/bin/onathena (modified) * trunk/locker/deploy/bin/rails (modified) * trunk/locker/deploy/bin/trac (modified) * trunk/locker/deploy/bin/turbogears (modified) Do --record-only merge to fix mergeinfo. Mon, 26 Apr 2010 22:11:26 GMT ezyang [1549] * trunk/locker/deploy/bin/rails (modified) Update rails mergeinfo (revert obliterated the update.) Mon, 26 Apr 2010 22:08:36 GMT ezyang [1547] * trunk/locker/deploy/bin (modified) * trunk/locker/deploy/bin/phpical (modified) * trunk/locker/deploy/bin/trac (modified) * trunk/locker/deploy/bin/turbogears (modified) Merge adehnert's phpical changes, update mergeinfo. Mon, 26 Apr 2010 19:00:33 GMT quentin [1546] * trunk/lvs/debian/config/etc/aliases (modified) New maintainers Sun, 25 Apr 2010 10:33:53 GMT mitchb [1545] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs.spec.patch (modified) Revert r1510. Back out to OpenAFS 1.4.11. 1.4.12 may not have been ... Sat, 24 Apr 2010 03:14:20 GMT geofft [1544] * trunk/server/doc/install-howto.sh (modified) Revert "install-howto.sh: Unpushed commit from February 8" As Mitch ... Tue, 20 Apr 2010 07:13:32 GMT geofft [1543] * trunk/server/fedora/config/etc/aliases (modified) aliases: Update root@scripts.mit.edu list to current maintainers Tue, 20 Apr 2010 06:42:22 GMT geofft [1542] * trunk/server/doc/install-howto.sh (modified) install-howto.sh: Unpushed commit from February 8 Apparently I was ... Tue, 20 Apr 2010 04:20:49 GMT mitchb [1541] * trunk/server/fedora/config/etc/httpd/vhosts.d/asa.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (added) SSL certificate and config for asa.mit.edu Fri, 16 Apr 2010 09:40:31 GMT mitchb [1540] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Two's company and three's a crowd, but have an orgy if you must ... Fri, 16 Apr 2010 09:21:37 GMT mitchb [1539] * trunk/server/common/patches/httpd-2.2.x-CVE-2010-0434.patch (deleted) * trunk/server/common/patches/httpd-2.2.x-mod_ssl-sessioncaching.patch (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Upgrade to Apache 2.2.15 Also drop the CVE-2010-0434 patch which is ... Sun, 11 Apr 2010 13:49:07 GMT mitchb [1538] * trunk/server/fedora/config/etc/pki/tls/certs/bc.pem (modified) Renewed certificate for bc.mit.edu Sun, 11 Apr 2010 10:38:29 GMT mitchb [1537] * trunk/server/fedora/specs/krb5.spec.patch (modified) Upstream krb5 update Sun, 11 Apr 2010 01:16:22 GMT ezyang [1536] * trunk/server/fedora/config/etc/httpd/vhosts.d/quickprint.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/quickprint.pem (added) Certificate and Apache config for quickprint. Thu, 08 Apr 2010 07:41:09 GMT mitchb [1535] * trunk/server/fedora/specs/moira.spec (modified) Update moira snapshot Wed, 31 Mar 2010 23:26:32 GMT quentin [1532] * trunk/server/doc/HOWTO-SETUP-LDAP (modified) Add an index on scriptsVhostAccount, so that Pony's query will be happy Tue, 30 Mar 2010 07:09:00 GMT mitchb [1531] * trunk/server/fedora/specs/openssh.spec.patch (modified) Upstream openssh release bump Mon, 29 Mar 2010 04:18:28 GMT mitchb [1530] * trunk/locker/bin/scripts-remove (modified) Teach scripts-remove about locker.scripts.mit.edu URLs ... Mon, 29 Mar 2010 03:29:00 GMT mitchb [1529] * trunk/server/fedora/config/etc/pki/tls/certs/tibetforum.pem (modified) New certificate for tibetforum.mit.edu Fri, 26 Mar 2010 10:46:21 GMT mitchb [1522] * trunk/server/fedora/Makefile (modified) Make it possible to build packages that haven't been committed yet Fri, 26 Mar 2010 08:02:21 GMT mitchb [1519] * trunk/server/fedora/specs/krb5.spec.patch (modified) Upstream update of krb5 packages Tue, 23 Mar 2010 04:12:51 GMT mitchb [1515] * trunk/locker/bin/crontab (added) Put the initial user crontab under revision control Tue, 23 Mar 2010 02:39:54 GMT mitchb [1514] * trunk/locker/deploy/bin/trac (modified) Fix Trac's git browser plugin in autoinstalls Closes Trac #85 ... Tue, 23 Mar 2010 02:26:20 GMT mitchb [1513] * trunk/locker/deploy/bin/onathena (modified) Make autoinstallers use ATHENA_USER instead of USER Closes Trac ... Thu, 18 Mar 2010 05:18:34 GMT mitchb [1510] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs.spec.patch (modified) It's a new thing! It's a nice thing! It's... Supe^WOpenAFS 1.4.12! Fri, 12 Mar 2010 09:13:12 GMT andersk [1509] * trunk/server/common/patches/openafs-scripts.patch (modified) Return real error codes from unauthorized PGetTokens, PSetTokens, ... Fri, 12 Mar 2010 07:13:48 GMT mitchb [1508] * trunk/server/fedora/specs/nss_nonlocal.spec (modified) Don't remove groups on uninstallation of nss_nonlocal Fri, 12 Mar 2010 06:18:34 GMT mitchb [1507] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/scripts-base.spec (modified) * trunk/server/fedora/specs/shadow-utils.spec.patch (added) Temporarily scriptsify shadow-utils to fix max length of group names ... Fri, 12 Mar 2010 04:23:35 GMT mitchb [1506] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) New CellServDB from grand.central.org, via Ops Thu, 11 Mar 2010 11:29:29 GMT mitchb [1505] * trunk/server/common/patches/httpd-2.2.x-CVE-2010-0434.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) CVE-2010-0434: Putting the "Patch" in "Apache" since... well, 2010 Mon, 08 Mar 2010 08:24:37 GMT quentin [1504] * trunk/lvs/debian/config/etc/munin/plugin-conf.d/cps (modified) Fix graph titles... Fri, 05 Mar 2010 05:05:16 GMT mitchb [1503] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/scripts-wizard.spec (added) New scripts-wizard package This package presently provides a ... Fri, 05 Mar 2010 03:58:51 GMT mitchb [1502] * trunk/server/common/oursrc/scripts-wizard (added) Directory for scripts-wizard package Yes, it's empty. Yes, it's ... Thu, 04 Mar 2010 18:39:25 GMT mitchb [1501] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) We won't always have paris (CellServDB update, take 2) Wed, 03 Mar 2010 18:10:32 GMT mitchb [1500] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) Updated CellServDB from Ops Sun, 28 Feb 2010 11:09:13 GMT mitchb [1499] * trunk/server/fedora/specs/httpd.spec.patch (modified) Upgrade Apache from 2.2.13-1 to 2.2.14-1 Sun, 28 Feb 2010 10:22:49 GMT mitchb [1498] * trunk/server/fedora/Makefile (modified) Make sure that SRPMs for upstream packages actually come from ... Fri, 26 Feb 2010 07:25:25 GMT mitchb [1497] * trunk/locker/deploy/bin/onathena (modified) Support out-of-locker autoinstallers This parameterizes the locker ... Thu, 25 Feb 2010 23:33:53 GMT mitchb [1491] * trunk/server/fedora/specs/moira.spec (modified) Make it possible for Accounts to create users on scripts (new moira, ... Thu, 25 Feb 2010 08:10:38 GMT mitchb [1490] * trunk/server/common/patches/moira-install-headers.patch (deleted) * trunk/server/fedora/specs/moira.spec (modified) New moira packages Wed, 24 Feb 2010 04:44:33 GMT mitchb [1489] * trunk/server/doc/adding-static-exts (modified) Fix directions for adding static extensions ========= Instance: ... Wed, 24 Feb 2010 04:21:42 GMT mitchb [1488] * trunk/locker/deploy/bin/rails (modified) Various tweaks to rails autoreloading code o Don't watch all of ... Wed, 24 Feb 2010 04:00:08 GMT mitchb [1487] * trunk/server/fedora/config/etc/pki/tls/certs/schuh.pem (modified) Renewed certificate for schuh.mit.edu Mon, 22 Feb 2010 08:09:49 GMT geofft [1483] * trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) __scripts/needcerts: Add support for working around Safari Safari ... Sat, 20 Feb 2010 23:18:36 GMT ezyang [1482] * trunk/server/doc/install-howto.sh (modified) * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Take upstream changes to use alternative runtime directory for fcgi; ... Sat, 20 Feb 2010 21:25:07 GMT ezyang [1481] * trunk/server/doc/install-howto.sh (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Don't chmod /var/run/httpd 0700, since that breaks fcgid. Sat, 20 Feb 2010 09:49:33 GMT mitchb [1480] * trunk/locker/deploy/bin/turbogears (modified) Hit the turbo button and make those gears spin! Sat, 20 Feb 2010 09:31:08 GMT mitchb [1479] * trunk/locker/deploy/bin/turbogears (modified) * Don't put SQL passwords in command-line arguments. * When using ... Fri, 19 Feb 2010 21:58:09 GMT ezyang [1476] * trunk/lvs/debian/config/etc/munin/plugin-conf.d/cps (added) Add environment variables for CPS for nicer graph titles. Fri, 19 Feb 2010 21:49:30 GMT ezyang [1475] * trunk/lvs/debian/config/etc/munin/plugins/cps_1_0 (modified) Read graph_title from environment. Fri, 19 Feb 2010 21:18:13 GMT ezyang [1474] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) Specify uid 102 is signup, and remove dead SELinux code. Fri, 19 Feb 2010 08:44:47 GMT mitchb [1473] * trunk/server/doc/HOWTO-SETUP-LDAP (modified) LDAP, now with 200% more indexed queries! Previously, only about ... Fri, 19 Feb 2010 06:11:57 GMT quentin [1472] * trunk/server/fedora/config/etc/cron.d/quickprint (modified) Use the right script... Fri, 19 Feb 2010 03:56:32 GMT quentin [1471] * trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified) make r-m's RAM match Fri, 19 Feb 2010 00:07:31 GMT quentin [1470] * trunk/lvs/debian/config/etc/ha.d/ldirectord.cf (modified) b-b and p-b have real hardware, yay Wed, 17 Feb 2010 16:44:13 GMT gdb [1468] * trunk/server/common/oursrc/hacron/hacron (modified) Fixed the exception type problem in this code; fixed up remove- servers.