Newer
Older
release/002.000 (unreleased)
The deprecated classes base::newsyslog::messages::sa and
base::newsyslog::messages::sa::override have been deleted. Global
overrides for the default base::newsyslog behavior should be put into
the local defaults module instead.
base::cron::filter-user-noise has been deleted. This was specific to
Research Computing systems and should be handled in that local
repository.
base::ssh::rc has been deleted. This isn't part of any base::ssh
inheritance tree and can live only in the Research Computing Puppet
Git repository.
The static crontab files installed by base::cron have been replaced
with a template to handle differences between Red Hat and Debian. The
periodic cron jobs no longer even attempt to use anacron, avoiding any
problems with unpredictable cron run times if anacron is installed on
the system.
Move campus anycast DNS servers to the bottom of the DNS server list
for now. These are not yet considered production DNS servers.
newsyslog::config now supports a new analyze_logs parameter, which
specifies the list of logs to run through the analyze action (when
different than the list in logs). analyze_logs defaults to logs if
not given.
Restructure the newsyslog::config template so that both the template
and its output is somewhat more readable.
newsyslog no longer sets up a weekly command to tar up
/root/.history-save and removes /etc/newsyslog.weekly/audit if it
exists. We're no longer using per-user history files and we're
letting bash handle managing the length of the history file.
newsyslog now creates btmp and wtmp writable by group utmp, matching
the operating system defaults.
newsyslog no longer attempts to clean up sysklogd cron jobs or remove
the old /etc/newsyslog.daily/syslog file installed by ancient versions
of stanford-server.
Append to the temporary file used for Dell warranty facts instead of
deleting it and recreating it (which defeats some of the point of
The default out-of-date cron job always uses the host/* principal of
the local host for authentication instead of the first principal in
/etc/krb5.keytab, which may be for some other principal or a host/*
principal for an old hostname.
Remove out-of-date::server. This is only used on a single host, so
all of the files and Puppet manifest have been moved to the Puppet
model for that server.
Change Puppet master server for frankoz servers to jimhenson1 since
jimhenson4 is down with hardware trouble.
Change the base::dns* classes to use a template to generate the
resolv.conf file for a system and add the DNS anycast servers into
the configuration.
release/001.001 (2013-06-25)
Drop installation of stanford-klogin from base::os::debian. We've
switched completely to Kerberized ssh and no longer install Kerberos
rlogin or rsh, so no need for the clients.
release/001.000 (2013-06-22)
Enable the security and updates repositories for wheezy now that
wheezy has been released.
For Red Hat systems, switch to using the VMware tools packages and
install the necessary yum configuration.
Add filter-syslog rules for new remctl error messages and another sshd
error message from terminated network connections.
Add base::portmap.