Two versions of puppet dev config one for puppetca-dev and
one for lsdb-dev (this is for testing the PuppetCA migration to frankoz1).

Replaced frankoz-dev with two servers: frankoz1-dev and
frankoz2-dev. Updated the Puppet conf file to reflect this change.

Try to stick with the same method of a conditional blank line.

Comment the protocol restriction and the explicit enabling of
UsePrivilegeSeparation on Red Hat.

This should be next to the port configuration, since it's related,
and is important enough that it needs to be at the top of the file
so that it can be easily found.  It also doesn't make sense after
per-user settings.

If no ListenAddress directives are specified, then sshd will list for
incoming connections at all addresses. You can alter this by specifying
the listen_addresses parameter. For example:
listen_addresses => '192.168.1.1,192.168.2.1'

Ignore some more harmless messages that appear to be caused by
someone connecting to the server and then disconnecting without
trying to authenticate (such as when they realize their Kerberos
ticket is expired or doesn't exist).

Don't single out the specific accounts that Nessus checks, but instead
skip all the errors about disconnecting due to too many authentication
failures.

Add additional ignore patterns for failed ssh logins from IT Services
staff.

frankoz-dev is now frankoz1-dev and frankoz2-dev, so had to modify the
puppetclient db credentials class to account for this.

base::remctl no longer installs remctl-client.  This is going to be
handled by the stanford-server-packages metapackage, and is
independent of what's set up by this module.

Make this dependency explicit.

The acceptable runtime for tmpreaper (used by base::tmpclean on Debian
and Ubuntu) has been extended to 20 minutes globally, and the
base::tmpclean::longer class, which existed only to do that, has been
removed as unnecessary.  The longer runtime limit should not pose a
problem on any system.

Clean up formatting and comments for installed files and Puppet
manifests.

base::daemontools::supervise now uses current coding standards and no
longer special-cases various default options to some of its
parameters.

Reindent for our current indentation standards, and fix the examples
to use the correct URLs with the /modules component.

Move campus anycast DNS servers to the bottom of the DNS server list
for now.  These are not yet considered production DNS servers.

The static crontab files installed by base::cron have been replaced
with a template to handle differences between Red Hat and Debian.  The
periodic cron jobs no longer even attempt to use anacron, avoiding any
problems with unpredictable cron run times if anacron is installed on
the system.

base::ssh::rc has been deleted.  This isn't part of any base::ssh
inheritance tree and can live only in the Research Computing Puppet
Git repository.

base::cron::filter-user-noise has been deleted.  This was specific to
Research Computing systems and should be handled in that local
repository.

The deprecated classes base::newsyslog::messages::sa and
base::newsyslog::messages::sa::override have been deleted.  Global
overrides for the default base::newsyslog behavior should be put into
the local defaults module instead.

The ::override subclass was also using the class variable.

A refactoring of base::newsyslog removed a variable that it was
assuming was set.

These classes all need to inherit from each other or the include
methods we use don't work properly.  Recreate the inheritance
structure and use overrides to change the resolv.conf parameters.

Also fix a few coding style issues.

Allow logs to be set to a single log as a string by coercing logs
to a flattened array.  Do the same for the analyze_logs parameter.

In addition to adding the anycast DNS servers the individual
resolv.conf files are replaced with a single template.  The existing
class interfaces are preserved and they all create the appropriate
resolv.conf file by invoking the define that handles the small number
of resolv.conf variants.

Change Puppet master server for frankoz servers to jimhenson1 since
jimhenson4 is down with hardware trouble.

Append to the temporary file used for Dell warranty facts instead of
deleting it and recreating it (which defeats some of the point of
using mktemp.