page_title: Su-log-2011-08-08 page_touched: 20110815170651 old_text: ==Monday== * Status catch up * Work with Adam on ssh problem * SNSR changes Add old snsr.sunetid cert to new production servers Create a define to apply apache config across environments * Test alternate configuration on ga-ldapsync01. Paged results still fail.

idassert-bind bindmethod=SASL
              saslmech=GSSAPI
              mode=none
              binddn=cn=auth

==Tuesday== * Try and install mcree's alpha kernels. Problems with the version numbers. I will have to build it myself. * Dataowner approval role based navigation changes. * LDAP ACL audit of production servers

==Wednesday== * Dataowner approver error handling * ACL work for mailbox server access, zimbra and gmail * Email discussion about highwire using kerberos/directory to control access to their systems

==Thursday== * Livermore shutdown lbdns-liv1 ipmi not working No access to root on calypso, kerberos-liv1 * SNSR Re-build snsr-dev1, snsr-dev2 as squeeze Re-build snsr3 and snsr4. Figure out the tangled network interfaces. Discover problem with apache puppet module * LDAP Re-build directory1 and directory2

==Friday== * Fix problem with directory rebuilds by pulling them out of the production pool until krb tickets expire * snsr incommon metadata * snsr directory permissions * Add --both to serverctl to update both masters and replicas * Modify serverctl to not restart replicas if they are not part of the load balanced pool * Add --force to serverctl to restart even non-pool members and keep them out of the pool

==Saturday== * Upgrade directory-master0 * Work on consolidating variable directory remctl commands into the single ldap command

---

SUDailyLogs 157. row