Timeline


and

Mar 8, 2008:

7:36 PM Changeset [691] by geofft
Per RT #583975, warning about the SQL password being copied
2:07 AM Changeset [690] by quentin
Ignore more syslog messages

Mar 7, 2008:

9:12 PM Changeset [689] by andersk
Better detection in gfind that works on Macs.
7:21 PM Changeset [688] by andersk
Use built-in ldap_bv2escaped_filter_value instead of a custom escaping function.
12:20 PM Changeset [687] by andersk
We might as well present the *.scripts.mit.edu certificate for *.scripts too.
12:01 PM Changeset [686] by andersk
tabs -> spaces.
11:50 AM Changeset [685] by andersk
Fix a stupid mod_ldap caching bug.
11:49 AM Changeset [684] by andersk
Make the packaged suexec work.
11:48 AM Changeset [683] by andersk
Add SNI support to the httpd package.
10:40 AM Changeset [682] by andersk
Revert r681; this doesn't actually work.
10:28 AM Changeset [681] by andersk
Drop to nobody in case of a terrible mod_vhost_ldap disaster.
6:16 AM Changeset [680] by andersk
Simplify construction of wildcard hostnames.
5:07 AM Changeset [679] by andersk
Skip to the fallback vhost for hostname == NULL.

Mar 6, 2008:

2:53 PM Changeset [678] by quentin
Bump scripts' load warning levels
3:09 AM Changeset [677] by andersk
Remove hacks-old.
3:09 AM Changeset [676] by quentin
Remove hacks-old from ldirectord config

Mar 5, 2008:

7:56 PM Changeset [675] by geofft
Also check wildcard entries before falling back on the default.
7:51 PM Changeset [674] by geofft
This one's better, e.g., it works.
7:15 PM Changeset [673] by geofft
Right, when you're copying things you use two variables, not one.
7:08 PM Changeset [672] by geofft
Escape the hostname before inserting it in an LDAP query.

Mar 2, 2008:

11:18 PM Ticket #60 (Apache handlers for PHP and static content) created by andersk
We currently launch PHP and static-cat directly from suexec. We …
4:57 PM Ticket #59 (web_scripts_tmp is a stupid name (and a poor concept in general)) created by andersk
I really don’t like how scripts decided to litter its users’ home …

Feb 27, 2008:

11:58 PM Ticket #28 (Nagios should check for nearly-expired certificates) closed by quentin
fixed: I configured this for scripts and scripts-cert, and presbrey patched …
11:55 PM Changeset [671] by quentin
Remove broken configuration for deprecated mime_magic module, as we don't even use it.
11:27 PM Ticket #26 (upgrade PCRE, if it's old enough to be vulnerable) closed by quentin
fixed: Ran the command "yum --enablerepo=updates-testing update pcre" to …
2:06 AM Changeset [670] by presbrey
SNI certificate stuff; someone else's LVS stuff

Feb 26, 2008:

5:59 PM Changeset [669] by geofft
disable X11 forwarding; allow forwarding $EDITOR and $VISUAL because emacs annoys me
1:56 AM Changeset [668] by quentin
Ignore more meaningless sshd logs

Feb 25, 2008:

11:42 PM Changeset [667] by quentin
Don't log logins from non-root users
11:29 PM Changeset [666] by quentin
Change syslog zephyring to coalesce messages
4:26 PM Changeset [665] by quentin
Make Zephyrs more useful and move to -c scripts-auto
4:19 PM Changeset [664] by andersk
-c scripts -> -c scripts-auto.
4:22 AM Ticket #58 (signup-sql doesn't attach locker, or check validity) closed by geofft
fixed
3:14 AM Changeset [663] by geofft
Make signup-sql attach a locker before using it (per price, Trac #58)
3:04 AM Ticket #58 (signup-sql doesn't attach locker, or check validity) created by price
Below is signup-sql failing on a locker because it's not attached. …

Feb 22, 2008:

9:20 PM Ticket #57 (Autoinstallers should read sql configuration from common files) created by andersk
The autoinstallers should be modified to read the SQL username and …

Feb 17, 2008:

4:54 PM Ticket #56 (Disable global SSLUserName kludge) created by andersk
SSLUserName is an evil kludge in our global configuration that …
4:25 PM Changeset [662] by quentin
Save log and pid in the right places
4:21 PM Changeset [661] by quentin
Run whoisd on startup
3:48 PM Ticket #48 (SNI, giving certificates on *.scripts.mit.edu for FF 2 and IE 7) closed by price
fixed: This works for FF 2 and IE 7. This is probably the only solution we …
3:47 PM Ticket #55 (certificates on *.scripts.mit.edu as a separate IP address) created by price
(Split out from #48.) Currently lockername.scripts.mit.edu gives a …

Feb 16, 2008:

6:11 PM Changeset [660] by geofft
mkdir -p, to avoid errors if it's already there revert removal of 2>/dev/null from sshrun to suppress banner
5:35 PM Changeset [659] by broder
Don't blow errors to /dev/null

Feb 15, 2008:

10:25 PM Ticket #54 (Trac autoinstaller) created by price
Plenty of people use Trac -- and we can hardly deny their desire to do …
9:55 PM Ticket #53 (upgrade Gallery installer) created by price
We have an installer for Gallery 2.0. Gallery 2.1 and 2.2 now exist. …
3:25 PM Changeset [658] by andersk
Unbreak for sun machines.

Feb 14, 2008:

8:21 PM Ticket #35 (sql web interface should make the lockername+ prefix more obvious) closed by price
fixed: Fixed by presbrey. It's in SVN now.

Feb 12, 2008:

3:57 PM Ticket #52 (support per-vhost certs in mod_vhost_ldap) created by quentin
Per help.mit.edu 569297, we should support per-vhost certificates by …
1:11 PM Changeset [657] by quentin
Run if_ plugin as root so it can determine the interface speed
12:28 AM Changeset [656] by andersk
And finally the vhosts directory is unused.
12:25 AM Changeset [655] by andersk
Remove unused framewrapper vhost server.
12:23 AM Changeset [654] by andersk
Remove old framewrapper vhost settings.

Feb 11, 2008:

11:56 PM Changeset [653] by andersk
Convert framewrapper vhosts to real vhosts in LDAP.
10:26 PM Changeset [652] by andersk
Add default syslog-ng configuration.
6:04 PM Ticket #51 (old-faithful loses backend connection sql on reboot) created by andersk
After a reboot, old-faithful cannot connect to sql. This is fixed by …
6:03 PM Ticket #50 (Install automatic cron failover) created by andersk
We need to deploy an automatic cron failover system, potentially based …
4:51 PM Changeset [651] by andersk
Move sipb-tor to LDAP also, since the error log problem seems to have gone away.
4:04 PM Changeset [650] by andersk
We don't actually have any wildcard records pointing to us, so move these to LDAP also.
3:10 PM Changeset [649] by presbrey
httpd.conf: configure SNI support for *:444
2:39 PM Changeset [648] by presbrey
httpd.conf: configure SNI support
2:39 PM Changeset [647] by andersk
Move eastgate to LDAP.
1:01 PM Changeset [646] by quentin
Send to host-specific instance, and send for both root and logview
1:28 AM Changeset [645] by quentin
syslog-ng configuration for zephyring when root logs in
1:27 AM Changeset [644] by quentin
Remove overrides of session.save_path and include_path (old uncommitted change)
1:22 AM Changeset [643] by quentin
Commit outstanding change allowing ldap backups

Feb 10, 2008:

9:55 AM Ticket #32 (check for .htaccess files only inside ~/web_scripts) closed by andersk
fixed
9:54 AM Changeset [642] by andersk
Only check .htaccess files inside web_scripts, thus eliminating a past source of user confusion, and speeding up responses by about 1ms.

Feb 9, 2008:

5:20 AM Ticket #6 (Install scripts should validate locker name) closed by broder
fixed
5:20 AM Changeset [641] by broder
*mumble stupid Sun dialups* - changed signup-minimal to use /bin/bash
5:15 AM Ticket #49 (Make logview work) created by price
logview suffers from two problems that sharply limit its value to …
5:13 AM Changeset [640] by broder
Fixes #6 in trac (Install scripts should validate locker name)
4:58 AM Ticket #31 (enable RT ticket-closing by email) closed by andersk
fixed: Fixed by geofft.
4:49 AM Ticket #48 (SNI, giving certificates on *.scripts.mit.edu for FF 2 and IE 7) created by andersk
Currently lockername.scripts.mit.edu gives a certificate error. We …
4:40 AM Ticket #47 (autoinstallers should support vhosts) created by andersk
Most of our autoinstallers, in particular Wordpress, break when …

Feb 8, 2008:

10:47 PM WikiStart edited by andersk
(diff)
10:26 PM Ticket #42 (Testing zephyrbot again…?) closed by anonymous
invalid
9:34 PM Ticket #36 (trac–zephyr integration) closed by broder
fixed: Ok. This appears to work now. Zephyrs get sent to -c scripts -i …
9:30 PM Ticket #45 (One last zephyr test?) closed by broder
fixed
9:29 PM Ticket #46 (One last zephyr test?) closed by broder
fixed
9:27 PM Ticket #46 (One last zephyr test?) created by broder
Quick comment to check the current status...Quick comment to check the …
9:26 PM Ticket #45 (One last zephyr test?) created by broder
Quick comment to check the current status...Quick comment to check the …
9:05 PM Ticket #44 (Zephyrbot test again!) closed by broder
fixed
9:05 PM Ticket #44 (Zephyrbot test again!) created by broder
Quick comment to check the current status...Quick comment to check the …
9:00 PM Ticket #43 (One last zephyrbot test...) closed by broder
duplicate
9:00 PM Ticket #43 (One last zephyrbot test...) created by broder
Ok. I'm going to make a really long description to test wrapping. Ok. …
8:54 PM Ticket #41 (Testing zephyrbot again...?) closed by broder
fixed
8:51 PM Ticket #40 (Testing zephyrbot again...?) closed by broder
duplicate
8:51 PM Ticket #42 (Testing zephyrbot again…?) reopened by broder
8:47 PM Ticket #42 (Testing zephyrbot again…?) closed by broder
duplicate
8:43 PM Ticket #42 (Testing zephyrbot again…?) created by broder
Woo! asdfasdf
8:41 PM Ticket #41 (Testing zephyrbot again...?) created by broder
Woo!
8:41 PM Ticket #40 (Testing zephyrbot again...?) created by broder
Woo!
8:20 PM Ticket #39 (Testing ticket creation zephyr notification) closed by broder
duplicate
8:19 PM Ticket #39 (Testing ticket creation zephyr notification) created by broder
Blah, blah, blah
3:45 PM Ticket #7 (log -c scripts) closed by anonymous
fixed: -c scripts is now logged at /afs/sipb/project/zlog/scripts.
4:24 AM Changeset [639] by andersk
Applied customizations to .htaccess and moved to LDAP.
3:33 AM Changeset [638] by andersk
Migrate most vhosts from vhosts.d to LDAP, where they can be manipulated with the new vhostadd and vhostedit commands. For now I've left behind vhosts with wildcard aliases, and a few with customized configuration.
1:54 AM Changeset [637] by andersk
Whitespace.
1:51 AM Changeset [636] by quentin
Move yaa.mit.edu to the yaa locker
1:40 AM Ticket #14 (more detail in Rails FAQ) closed by broder
fixed: Ok. Added a note reminding users to set the database server host to …
1:20 AM Ticket #38 (Testing Trac emails) closed by andersk
invalid
1:17 AM Ticket #38 (Testing Trac emails) created by andersk
This is a test of the new [http://scripts.scripts.mit.edu/trac/
12:44 AM Ticket #37 (tomcat support?) created by andersk
(Imported from [https://help.mit.edu/Ticket/Display.html?id=547795
12:42 AM Ticket #36 (trac–zephyr integration) created by andersk
It would be nice to have Zephyr integration with trac.
12:41 AM Ticket #35 (sql web interface should make the lockername+ prefix more obvious) created by andersk
(Imported from [https://help.mit.edu/Ticket/Display.html?id=545970
12:35 AM Ticket #15 (move hodge-podge to its own machine) closed by andersk
fixed
12:34 AM Ticket #34 (long delays with ssh -X) created by andersk
(Imported from [https://help.mit.edu/Ticket/Display.html?id=492117
12:31 AM Ticket #33 (Add information on Kerberos logins to scripts to FAQ) created by andersk
(Imported from [https://help.mit.edu/Ticket/Display.html?id=548433
12:18 AM Ticket #32 (check for .htaccess files only inside ~/web_scripts) created by andersk
(Imported from [https://help.mit.edu/Ticket/Display.html?id=546828
12:05 AM Ticket #31 (enable RT ticket-closing by email) created by price
It'd be awesome if we could set the status and owner of a ticket in …
12:00 AM Ticket #30 (upgrade nss_ldap out of a vulnerability) created by price
Quentin writes: """We are probably being affected by this. We …
12:00 AM Ticket #29 (give example using Delivered-To/$1) created by broder
"The ability to examine the delivered address is extremely useful, but …
Note: See TracTimeline for information about the timeline view.