source: server/fedora/config

Revision Log Mode:


Legend:

Added
Modified
Copied or renamed
Diff Rev Age Author Log Message
(edit) @947   17 years quentin Add shosts.equiv for allowing logins
(edit) @946   17 years quentin Allow ssh hostbased authentication
(edit) @943   17 years geofft Hacks because Apache makes things hard at the .htaccess level.
(edit) @942   17 years geofft debathena.mit.edu vhost
(edit) @941   17 years geofft cert for debathena.mit.edu
(edit) @940   17 years geofft Whoops, forgot to reify-vhost.py sipb.mit.edu
(edit) @939   17 years geofft Setting tty modes failed: Invalid argument
(edit) @938   17 years andersk d_zroot.pl: Read .ssh/authorized_keys, not just authorized_keys2. ...
(edit) @915   17 years quentin Support mDNS on scripts
(edit) @914   17 years quentin Add if_err_eth2 to allowed munin commands (wtf?)
(edit) @910   17 years quentin configuration for nss-ldapd
(edit) @891   17 years quentin Add reuter to blocked mail accounts list, and prevent outbound mail
(edit) @890   17 years geofft I think this works better
(edit) @889   17 years quentin Fix geofft's typo
(edit) @888   17 years geofft Display failed root logins from off campus only at 10+10k attempts.
(edit) @887   17 years quentin Ignore non-fatal authentication failures
(edit) @886   17 years geofft sipb.mit.edu certificate
(edit) @885   17 years geofft and the vhosts they rode in on
(edit) @884   17 years geofft More noms.
(edit) @883   17 years geofft Re r882, make the resulting log zephyr public. (Thanks to price for ...
(edit) @879   17 years quentin Update nscd configuration to cache smarter
(edit) @878   17 years quentin Enable sshd verbose mode, so we can identify the public key used for login
(edit) @877   17 years quentin Provide commented-out non-nss_nonlocal region in nsswitch
(edit) @876   17 years quentin Uncommitted changes on b-k
(edit) @872   17 years geofft forgot to fix SSLVerifyclient on familynet
(edit) @870   17 years geofft yay SSL vhosts yay
(edit) @869   17 years geofft SSLVerifyClient optional on port 444. Oops. ^_^;;
(edit) @868   17 years quentin Ignore all partitions mounted under /mnt
(edit) @867   17 years quentin Update postfix configuration for version 2.5.1
(edit) @866   17 years quentin Use scripts yum repository (yay!)
(edit) @865   17 years quentin Use sudo to monitor hardware sensors for munin
(edit) @864   17 years quentin Ignore f7root partitions when checking disk space
(edit) @857   17 years quentin User is named scripts-build...
(edit) @856   17 years quentin Add .rpmmacros file for configuring the rpmbuild user
(edit) @854   17 years geofft Add a script to convert LDAP vhosts into <VirtualHost> blocks, so it's ...
(edit) @853   17 years andersk Put the children out of their misery.
(edit) @847   17 years andersk Run munin as an unprivileged user with sudo for root access when necessary
(edit) @845   17 years andersk Use the local LDAP server (as is already the case on both servers).
(edit) @842   17 years andersk Run php directly from suexec, so php scripts don’t need to be executable.
(edit) @841   17 years geofft [help.mit.edu #694790]
(edit) @831   17 years andersk MaxRequestsPerChild < Ridiculous
(edit) @829   17 years geofft Debathena's reasoning seems sound enough. Add fuse_allow_other, which ...
(edit) @822   17 years geofft OM NOM NOM NOM CERTIFICATES
(edit) @821   17 years geofft I'm stupid.
(edit) @820   17 years geofft Add server certS for random-hall.mit.edu and mitsoc.mit.edu
(edit) @817   17 years geofft Added code to zephyr on OOM kills. Also commented out a change by ...
(edit) @814   17 years geofft As Anders would say...
(edit) @813   17 years geofft This looks useful too
(edit) @811   17 years quentin Add localhost to the list of scripts names
(edit) @808   17 years geofft Probably a useful file to have.
(edit) @807   17 years quentin Add routes for sql via eth1
(edit) @804   17 years andersk We don't actually have a deb.gif.
(edit) @802   17 years andersk Allow a directory index of /__scripts/icons.
(edit) @801   17 years geofft /etc: Add pki/tls/certs/*.pem to the repository.
(edit) @799   17 years geofft Uncommitted changes from o-f: reboot on kernel panic (do we actually ...
(edit) @794   17 years quentin Update sudoers based on F9 template
(edit) @792   17 years quentin We don't share /tmp (eeew)
(edit) @791   17 years quentin Add bees-knees and cats-whiskers to /etc/hosts
(edit) @790   17 years geofft Oops, missed scripts-test's IP.
(edit) @789   17 years geofft Update names for scripts[1-4]
(edit) @787   17 years geofft Fix some stuff about our iptables rules, including: - Remove ACCEPT ...
(edit) @784   17 years quentin Use explicit recipients for non-root log messages
(edit) @783   17 years geofft Make d_zroot.pl zephyr people in the .k5login in personals
(edit) @781   17 years quentin munin needs to start as root so it can setuid to run the script; it ...
(edit) @780   17 years geofft Munin should not run as root. Remove munin's htpasswd file, since it's ...
(edit) @779   17 years geofft mod_status is a serious privacy violation.
(edit) @778   17 years geofft This list is a little better
(edit) @777   17 years geofft Add more sysnames to differentiate between OS releases, and add the ...
(edit) @775   17 years geofft Version nscd.conf, and reduce the negative TTL to 5 seconds to solve ...
(edit) @770   17 years quentin Stop more spew; parse ssh keys and identify the used key when ...
(edit) @768   17 years geofft Commented out scripts-spew. It is inappropriate to send syslogs about ...
(edit) @761   17 years presbrey gem replication install script
(edit) @759   17 years quentin Tweak httpd settings
(edit) @758   17 years quentin Avoid spew in cases of serious error
(edit) @757   17 years quentin Add AFS monitoring to Nagios
(edit) @755   17 years andersk Oops, missed a spot.
(edit) @754   17 years andersk Use the scripts private key for *.scripts as well (the previous ...
(edit) @751   18 years andersk Configure nsswitch.conf to use nss_nonlocal.
(edit) @749   18 years andersk Nope. Don't care.
(edit) @740   18 years andersk Update SSL configuration directives from Fedora's ssl.conf. Notably, ...
(edit) @739   18 years andersk spew--
(edit) @738   18 years andersk SHUT. THE. FUCK. UP.
(edit) @734   18 years andersk Turn on KeepAlive for SSL and increase timeouts, to avoid pathological ...
(edit) @715   18 years quentin Allow syn to access nrpe through iptables
(edit) @712   18 years quentin Allow syn to monitor scripts
(edit) @708   18 years geofft Add rebecca to sudoers.
(edit) @707   18 years andersk This sucker has had it coming for a long time.
(edit) @690   18 years quentin Ignore more syslog messages
(edit) @687   18 years andersk We might as well present the *.scripts.mit.edu certificate for ...
(edit) @682   18 years andersk Revert r681; this doesn't actually work.
(edit) @681   18 years andersk Drop to nobody in case of a terrible mod_vhost_ldap disaster.
(edit) @677   18 years andersk Remove hacks-old.
(edit) @671   18 years quentin Remove broken configuration for deprecated mime_magic module, as we ...
(edit) @669   18 years geofft disable X11 forwarding; allow forwarding $EDITOR and $VISUAL because ...
(edit) @668   18 years quentin Ignore more meaningless sshd logs
(edit) @667   18 years quentin Don't log logins from non-root users
(edit) @666   18 years quentin Change syslog zephyring to coalesce messages
(edit) @665   18 years quentin Make Zephyrs more useful and move to -c scripts-auto
(edit) @664   18 years andersk -c scripts -> -c scripts-auto.
(edit) @662   18 years quentin Save log and pid in the right places
Note: See TracRevisionLog for help on using the revision log.