Add the squeeze-lts distribution to sources.list for squeeze systems.
This is the long-term support archive, which provides extended
security support.

Update ssh filter-syslog rules for current staff members and add
another failed login pattern.

v7 systems.

comments in remctl.pp and ssh.pp.

Change the default transport for rsyslog v5 remote syslog message
delivery to UDP.  This will result in message loss when the remote
syslog server is unavailable, but it avoids the complexities of the v5
queue configuration.  (whm)

where booleans must be tested as strings.

Modify the default rsyslog configuration for V7 servers.  The new
configuration creates a separate queues for writing to the local disk
and sending to the remote syslog server.  This prevents messages from
being lost when the central server is down and allows writing to local
disk to continue.

Default to the backports version of facter on wheezy systems to pick
up the fix for detecting Xen VMs.

URL. (sfeng)

In the old version of base::syslog::fragment, nothing would attempt
to resolve the template in the ensure => 'absent' case.  Reproduce
that behavior with a conditional.

Coding style cleanup for base::syslog::fragment, using the newer
method for handling defines that should take both source and content.

Remove base::kerberos filter-syslog rules.  These only had rules for
ksu, which we no longer use, so they're now pointless.

Add dependencies in base::postfix::recipient on the postfix package so
that the required directory structure will exist.

Change the handling of the use_syslog_conf variable in the
rsyslog.conf.erb template to allow the variable to be either a string
or a boolean.  This works around a problem with puppet's handling of
booleans in some situations.  (whm)

central syslog service, i.e. logsink.stanford.edu.