This allows "odd" machines to suppress loading ipmi support and
running the exec that disables cipher zero.

Thanks to Rob Riepel for pointing out what the directory should be.

On each Puppet run on a system that enables Puppet, check if cipher
zero is enabled and disable it if so.  Recipe from Darren Patterson.

base::syslog::tls_support. (whm)

comments in remctl.pp and ssh.pp.

where booleans must be tested as strings.

Modify the default rsyslog configuration for V7 servers.  The new
configuration creates a separate queues for writing to the local disk
and sending to the remote syslog server.  This prevents messages from
being lost when the central server is down and allows writing to local
disk to continue.

Default to the backports version of facter on wheezy systems to pick
up the fix for detecting Xen VMs.

In the old version of base::syslog::fragment, nothing would attempt
to resolve the template in the ensure => 'absent' case.  Reproduce
that behavior with a conditional.

Coding style cleanup for base::syslog::fragment, using the newer
method for handling defines that should take both source and content.

Remove base::kerberos filter-syslog rules.  These only had rules for
ksu, which we no longer use, so they're now pointless.

Add dependencies in base::postfix::recipient on the postfix package so
that the required directory structure will exist.

Change the handling of the use_syslog_conf variable in the
rsyslog.conf.erb template to allow the variable to be either a string
or a boolean.  This works around a problem with puppet's handling of
booleans in some situations.  (whm)

central syslog service, i.e. logsink.stanford.edu.

This change is to allow the v7 rsyslog template to be corrected
without changing the default rsyslog behavior.

* Forward messages to central syslog server
* Change date format

Add an apt preferences file to use the rsyslog version from
backports.  Remove preferences installation from the syslog
module.

Correct variable used to identified the syslog server to send output
to in base::syslog::fragment.

Update comment documentation in base::pam::workgroup.  Remove unused
parameter and variables.

The output templates can be ignored if they are not useful for a
specific configuration.  Most of them time they are useful and
releaves custom configurations from the responsibility of installing
the templates separately when they are needed.

When using v7 add an apt preferences fragment that pulls rsyslog
from backports.

This also leaves a place for redhat folks to add special processing.

This should be overridden for testing syslog sink configurations.