page_title: Su-log-2010-07-12 page_touched: 20100719174439 old_text: ==Monday== * Tripwire * Announce readiness of new OpenLDAP servers * Disaster Recovery shit * took down a lot that depended on lbdns because of lbdns-liv1 configuration. Networking did not sever complete connection to Livermore. parkdns ate my lunch * whois problem
==Tuesday== * debug whois problem * disable parkdns and tinydns on lbdns-liv1 because of problems it is causing for campus dns * shutdown lbnamed on lbdns-liv1 because it is handing out bad addresses. Fall back to using host entries for the test period. * Modify hosts and krb5.conf on all of the livermore hosts while puppet is off ===weblogin problem at livermore===
There was a stale keyring on the weblogin server. This is a known problem. It is solved by either copying over the keyring from a production service or restarting the applications using webauth. This was corrected Monday afternoon.
There was a problem with the /etc/webauth/keytab on the www-liv1 on the www-liv1 server. This did not affect AS, but it did affect out ability to test. This was resolved Monday evening.
On the campus weblogin servers the service/webkdc keytab had been re-key to support stronger encryption. The keytab file on the Livermore system have not been updated. This was fixed on Tuesday morning with Jon Robertson's help.
As this point the webauth service in Livermore was fully functional. The last issue for the oflappdr02 server was that the krb5.conf file had the wrong permissions and the apache server was prevented from reading the file. Once the permissions where changed to make the file world readable webauth was working everywhere. (It should be noted that AS implemented an ITS suggested change to the krb5.conf file and when that edit was made is probably when the permissions were set incorrectly. The krb5.conf file contains critical, but not sensitive, information and should always be work readable.)
==Wednesday== * ldap alias import work for gsb * email routing for dr exercise * fix problem with limited searches for the virtual email domain sync process * move db credentials from ldap-alias-maint into separate config file and put the file into wallet * Make sure that service/ldap has unlimited searches on the master to allow large updates by ldap-alias-maint * Create a separate dev database for testing of ldap-alias-maint * Reduce the log level on ldap-dev systems
==Thursday== * Create suPrivilegeGroupCompare group * puppet global change * allow users at Livermore to set their forwarding address in zimbra * clean up syslog on im db servers * correct location for livespace logs in afs-land * drop managing space_tree_changes.log from livespace config * make sure openfire user is created on all im servers * Implement mailRouters group
==Friday== * email virtual domain work * implement suPrivilegeGroupCompare for Linda Regan, Student Information Services
SUDailyLogs SUToDo 102. row