Move campus anycast DNS servers to the bottom of the DNS server list
for now.  These are not yet considered production DNS servers.

The static crontab files installed by base::cron have been replaced
with a template to handle differences between Red Hat and Debian.  The
periodic cron jobs no longer even attempt to use anacron, avoiding any
problems with unpredictable cron run times if anacron is installed on
the system.

base::ssh::rc has been deleted.  This isn't part of any base::ssh
inheritance tree and can live only in the Research Computing Puppet
Git repository.

base::cron::filter-user-noise has been deleted.  This was specific to
Research Computing systems and should be handled in that local
repository.

The deprecated classes base::newsyslog::messages::sa and
base::newsyslog::messages::sa::override have been deleted.  Global
overrides for the default base::newsyslog behavior should be put into
the local defaults module instead.

The ::override subclass was also using the class variable.

A refactoring of base::newsyslog removed a variable that it was
assuming was set.

These classes all need to inherit from each other or the include
methods we use don't work properly.  Recreate the inheritance
structure and use overrides to change the resolv.conf parameters.

Also fix a few coding style issues.

Allow logs to be set to a single log as a string by coercing logs
to a flattened array.  Do the same for the analyze_logs parameter.

In addition to adding the anycast DNS servers the individual
resolv.conf files are replaced with a single template.  The existing
class interfaces are preserved and they all create the appropriate
resolv.conf file by invoking the define that handles the small number
of resolv.conf variants.

Change Puppet master server for frankoz servers to jimhenson1 since
jimhenson4 is down with hardware trouble.

Append to the temporary file used for Dell warranty facts instead of
deleting it and recreating it (which defeats some of the point of
using mktemp.

On some hosts, the default domain isn't stanford.edu.  In those
cases, we need to tell k5start that we only want to get stanford.edu
credentials.

The default out-of-date cron job always uses the host/* principal of
the local host for authentication instead of the first principal in
/etc/krb5.keytab, which may be for some other principal or a host/*
principal for an old hostname.

Having a blank line when there's no stop or restart action is going
to bother me too much.  Make it go away.  Also remove the extra
spacing after stop, since there usually isn't both stop and restart.

Fix support for analyze_logs, which wasn't working due to the
immutable variable problems with how Puppet uses ERB.  Restructure
the template to not precalculate the results, group lines for a
particular log together, and format everything a bit better.

Also remove the old one for right now until the mistake is purged
everywhere.

The deletion of the server files was somewhat too aggressive.

newsyslog no longer sets up a weekly command to tar up
/root/.history-save and removes /etc/newsyslog.weekly/audit if it
exists.  We're no longer using per-user history files and we're
letting bash handle managing the length of the history file.

newsyslog now creates btmp and wtmp writable by group utmp, matching
the operating system defaults.

newsyslog no longer attempts to clean up sysklogd cron jobs or remove
the old /etc/newsyslog.daily/syslog file installed by ancient versions
of stanford-server.

General coding style cleanup.

Make the script executable, test analyze_logs, and fix for to_s
on an array no longer resulting in a good template string.

newsyslog::config now supports a new analyze_logs parameter, which
specifies the list of logs to run through the analyze action (when
different than the list in logs).  analyze_logs defaults to logs if
not given.

Also update the coding style, simplify the define drastically, and
clean up indentation and comments.

This was testing the old Apache newsyslog configuration template,
which no longer exists.

Remove out-of-date::server.  This is only used on a single host, so
all of the files and Puppet manifest have been moved to the Puppet
model for that server.

We've switched completely to Kerberized ssh and no longer install
Kerberos rlogin or rsh.

This was only missing because our mirror script didn't know about
it.  That's now been fixed, so add wheezy-updates back into the
default sources.list for wheezy.

Remove some comments that don't make sense in the generated file.

error: ssh_msg_send: write appears to be from a network connection
error.  It was logged on git.stanford.edu.  I don't think we care
about it.

The new version of remctld changes some of the logged error messages.
Update the filter-syslog rules accordingly.

cherry-picked from the master branch by adamhl

This is the (old) master branch along with the fixes to the
cron file permissions that Russ made.