page_title: Su-log-2009-08-10 page_touched: 20090817034153 old_text: ==Monday== * Tripwire * Grant service/massmail access to suseassunetid * Grant service/sueacad access on prod servers * Update backup passwords on the im servers and catchup the ones that I missed * Finish initial version of ldap maintenance script for gsb-hub * Create initial git and debian structures for gsb-hub package

==Tuesday== * Work on gsb-hub package * modify the gsb-hub initial.ldif * test and install gsb-ldap-maint script * tripwire * Upgrade snsr1 to lenny

==Wednesday== * vppa puppet restructure. New virtual hosts news-drupal and news-drupal-dev.
* Suggest change to apache::cert::self-signed. * Fix another problem with snsr directory permissions. * Beat my head against the openfire/java/gssapi wall again. Figured out that openfire re-writes the openfire.xml file every time system parameters are re-written. It appears to only use the mysql parameters and reads everything else from the database. But, it might use the values from the xml file to populate the database. That will require a bit more testing. * Install sun-java6-jce-policy and hope that that solves the problem with gssapi and openfire. That was it. It appears java6 is required for openfire/gssapi.

==Thursday== * Write script to add users to openfire. Figure out that the time is a string that is epoch milliseconds. * Create webAuthTools group for Jon Robertson * Rebuild the im server multiple times in an attempt to get openfire to use the configuration xml file. Gave up in the end and just manually entered the values required. Something has changed because it used to work and I am not sure what the problem is. * Upgrade snsr2 to lenny. * Shutdown servers in livermore for quarterly maintenance. * Handle an AFS group request.

==Friday== * Create ldap access for im * Finish debugging im add user script. Add delete and show to the script in preparation for a remctl interface. * Re-work the im puppet model.
Create template for jaas.conf Create template for gas.conf Create template for openfire cronjob to allow it to run less frequently on the primary server. Create template for my.cnf ** Create template for stunnel configuration for db servers * Try and get mysql replication to work over stunnel and fail. Drop back to non-ssl replication for the time being.

* Obsolete openfire.my.cnf and just install openfire.xml on the database servers as well.

SUDailyLogs 47. row