Su-log-2012-09-24

page_title: Su-log-2012-09-24 page_touched: 20120928184509 old_text: ===Monday=== * More mail catch up * Read account-slog * Build new version of openldap for wheezy * Move ACL for anonymous access to new affiliation attributes without val-sort control to production. * Status report. * Work with Patrick on account-slog changes

===Tuesday=== * Respond to Phil Farrell about uidnumber policy change * Add documentation of uid number ranges to public web pages * Agenda for directory team meeting * Work on guest accounts in dev * Test account-slog changes * Directory ACL fix up for JCR

===Wednesday=== * Pull latest openldap release and build package

    git clone git://git.openldap.org/openldap.git
    cd openldap.org
    git archive --format=tar.gz -o ../openldap-REL-ENG-2-4-20120926.tar.gz 73dc8ffe9b4d84a2371379762d4571760427311d
    cp ../openldap-REL-ENG-2-4-20120926.tar.gz /afs/ir/users/w/h/whm/public
    ssh leviticus
    mv /afs/ir/users/w/h/whm/public /tmp/whm/
    cd /tmp/whm/openldap
    git-import-orig --upstream-version=2.4.32+20120926 --debian-branch=stanford ../openldap-REL-ENG-2-4-20120926.tar.gz
    git-buildpackage --git-ignore-new --git-debian-branch=stanford

Clean limits a bit and grant unlimited searches to mdm
Start testing account-slog Generate a full ldif - the full ldif does not set suPrivilegeGroup. The sync will need to be run whenever the ldif is applied. Generate a diff ldif - no changes

===Thursday=== * Look at problem/misunderstanding about usage of 'by * break' * Look at build issues for openldap * Work on new release of guest accounts

===Friday=== * Reply to Tom Black about data owner approval process

===ToDo=== * Finish up packaging cn=monitor and move to production. Upload to debian. * Update net-ldapapi to make it easier to use. Add support for valsort and matchedValues request controls. * Add example data to attribute definitions on public directory web site * Migrate auth groups from cn=applications to cn=auth,cn=applications * Look at issues with routing on dr. The current configuration always routes to smtp.stanford.edu which will not work when the campus is not accessible. * Clean up smtp-dr email configuration by using templates to support common configurations. This includes at least main.cf. * Move dr zimbra preauth from smtp-dr to its own vm * Rebuild java for amd64 to correct problems on the im-dr vm * Talk to Xueshan about phishing warnings and smtp maintenance * Finish up DR scripts to maintain dr zimbra accounts and mail lists * Updates to dataowner scripts to support better comment handling and more extensive email processing * Email to directory partners about valsort usage in Stanford Directory * Email to directory partners about uid/gid and pam/nss support

SUDailyLogs 226. row