May 5, 2009:

3:32 PM Changeset [1114] by geofft
change docroot for next.mit.edu

May 2, 2009:

6:47 PM Changeset [1113] by quentin
Use a Weighted Least Connections scheduler, to better balance load
6:23 PM Changeset [1112] by quentin
As a VM, b-k can only handle half the traffic

Apr 29, 2009:

6:17 PM Changeset [1111] by quentin
If a server doesn't answer heartbeat within 5 seconds, it's probably sad. Don't make it worse by sending more traffic to it.
3:37 PM Changeset [1110] by quentin
Ask RPM about perl modules, not just package names
3:30 PM Changeset [1109] by quentin
Copy-and-paste line to generate and install Perl package list
3:15 PM Changeset [1108] by quentin
Kill autobundle with fire.
2:00 PM Changeset [1107] by quentin
Allow specifying a line size by fingering name-SIZE@syn
1:28 PM Changeset [1106] by quentin
Treat NRPE connection failures as 'UNKNOWN' service state, and don't notify on UNKNOWN services

Apr 27, 2009:

1:43 PM Changeset [1105] by quentin
Import Nagios configuration files from /etc/nagios3/users

Apr 25, 2009:

11:34 PM Ticket #53 (upgrade Gallery installer) closed by mitchb
fixed: Screw 2.1 and 2.2.... this sat around so long that Gallery 2.3 came …
11:32 PM Changeset [1104] by mitchb
Gallery2 autoinstaller updates for version 2.3 and scriptsstar
11:17 PM Changeset [1103] by mitchb
Uncommitted scriptsstar changes from the locker
7:51 PM Ticket #23 (Host-based auth for inter-scripts-server login?) closed by mitchb
fixed: This totally works now. It spews at us, but "meh." I tried all the …
7:47 PM Ticket #22 (NFS-mounted /tmp is a bad idea) closed by mitchb
fixed: We seem to have gone with the bastard-child of 2 and 3+4. We don't …
7:43 PM Ticket #65 (Support Django) closed by mitchb
fixed: Guess what? We have a Django autoinstaller now. Occasionally, it …
7:34 PM Ticket #90 (Upgrade SNI patch) closed by mitchb
fixed: We're running the new patch now. Yay.
7:10 PM Changeset [1102] by mitchb
Update to current version of the 2.2.x SNI patch

Apr 24, 2009:

6:21 PM Changeset [1101] by presbrey
turn off ProxyPreserveHost to distinguish Host from X-Forwarded-Host
12:31 PM Changeset [1100] by quentin
Remove duplicate hostnames from the regex filter
2:13 AM Ticket #90 (Upgrade SNI patch) created by andersk
https://sni.velox.ch/misc/httpd-2.2.x-sni.patch was updated …
1:11 AM Changeset [1099] by quentin
Add scripts-user@sipb-noc
12:53 AM Changeset [1098] by quentin
Add scripts@syn
12:51 AM Changeset [1097] by quentin
Add load@syn

Apr 23, 2009:

11:57 PM Changeset [1096] by quentin
Fix alignment a bit
11:10 PM Changeset [1095] by quentin
Documentation when given an unrecognized user
11:09 PM Changeset [1094] by quentin
Allow fingering of xvm information, too
10:30 PM Changeset [1093] by quentin
finger status@sipb-noc DTRTs
10:01 PM Changeset [1092] by geofft
okay, maybe ajp was a bad idea
12:59 PM Changeset [1091] by mitchb
Upgrade from php 5.2.8-1 to 5.2.9-2. I'm sure this will solve all our stability problems. Or something.
10:41 AM Changeset [1090] by quentin
Move XVM DHCP check command into XVM configuration file

Apr 22, 2009:

5:03 PM Changeset [1089] by presbrey
httpd: add mod_proxy module and friends

Apr 20, 2009:

8:01 PM Changeset [1088] by mitchb
bc.mit.edu certificate and reified vhost
6:03 PM Changeset [1087] by geofft
multiplexer over scripts-start/signup-* for "add scripts; scripts" Plus copy the attach -q thing from signup-web to -mail and -cron

Apr 19, 2009:

5:49 PM Changeset [1086] by quentin
Test your changes! Port 444 was serving axo.mit.edu all day!
2:51 AM Changeset [1085] by mitchb
scripts.mit.edu CSR defaults
2:45 AM Changeset [1084] by mitchb
Add openssl.cnf file, so we can track our standard CSR fields

Apr 18, 2009:

7:45 PM Changeset [1083] by mitchb
New fix-php-ini script to make symlinks to php.ini from child directories. We may not be able to shoot their foot for them, but we can hand them a gun.

Apr 17, 2009:

9:20 PM Changeset [1082] by geofft
Allow reified vhosts to override *.scripts
7:45 PM Changeset [1081] by geofft
reify cycling-club.scripts.mit.edu to pick up the cert
7:36 PM Changeset [1080] by geofft
cycling-club.scripts 30 day cert from Comodo

Apr 14, 2009:

5:21 AM Changeset [1079] by mitchb
Use only our local CellServDB, not the one in the distribution so that we can track the one used by Athena without further package rebuilds.
4:22 AM Changeset [1078] by mitchb
Add a CellServDB.local so we can pull in changes without rebuilding.

Apr 12, 2009:

4:36 AM Changeset [1077] by quentin
Check command for xvm's DHCP servers
4:02 AM Changeset [1076] by quentin
Monitoring of DNS servers
3:54 AM Changeset [1075] by quentin
Add monitoring of stuff
3:53 AM Changeset [1074] by quentin
Make CPU depend on NRPE for scripts hosts

Apr 11, 2009:

3:02 PM Changeset [1073] by quentin
Don't let people lock all our memory (use the Ubuntu default of 64KB instead of 256MB)
3:39 AM Changeset [1072] by quentin
Don't apply resource limits to root's processes, and clean up formatting of limits.conf
2:55 AM Changeset [1071] by quentin
Set sane memory resource limits

Apr 9, 2009:

6:37 PM Ticket #89 (@reboot cron jobs sometimes start before afsagent gets tokens) created by geofft
Users' @reboot cron jobs, which often depend on being able to get …

Apr 8, 2009:

9:23 AM Changeset [1070] by mitchb
Build system fixes to upgrade to OpenAFS 1.4.10 Pulls in fixes for CVE-2009-1250 and CVE-2009-1251, among other enhancements and bugfixes.
7:11 AM Changeset [1069] by mitchb
Updates to the build system for krb5 Allow us to build with patches for CVE-2009-0844 through CVE-2009-0847

Apr 7, 2009:

5:29 PM Changeset [1068] by quentin
Disallow root keyboard-interactive logins
10:41 AM Changeset [1067] by quentin
tibetforum.mit.edu vhost + cert

Apr 5, 2009:

9:35 PM Changeset [1066] by quentin
Use soft states when determining dependencies, so we don't get notices for dependent services when the parent service hasn't yet hard failed
9:34 PM Changeset [1065] by quentin
Update Nagios links to mrtg
6:27 AM Changeset [1064] by mitchb
Change to new OpenSUSE nss-ldapd version so we can download and build other packages again. Because, you know, when we can't download a package completely unrelated to what we're doing, our build system breaks. We're awesome like that.
Note: See TracTimeline for information about the timeline view.