page_title: Su-log-2013-08-12 page_touched: 20130819151412 old_text: ===Monday=== * logindex-dev firewall rule for splunk server * splunk server puppet configuration for init script * Create ldap-posix-group wrapper script, update stanford-server-directory package, update remctl config * Retire some obsolete ldap config scripts * aptitude dist-upgrade test ldap systems

====spunk cert creation====

    # generate the CA certificate
    openssl genrsa -des3 -out idgSplunkCA.key 2048
    openssl req -new -key idgSplunkCA.key -out idgSplunkCA.csr
    openssl x509 -req -in idgSplunkCA.csr -sha1 -signkey idgSplunkCA.key -CAcreateserial -out idgSplunkCA.pem -days 3650
    #
    # generate the cert for logindex-dev.stanford.edu
    openssl genrsa -des3 -out logindex-dev.stanford.edu.key 2048
    openssl req -new -key logindex-dev.stanford.edu.key -out logindex-dev.stanford.edu.csr
    openssl x509 -req -in logindex-dev.stanford.edu.csr -sha1 -CA idgSplunkCA.pem -CAkey idgSplunkCA.key -CAcreateserial -out logindex-dev.stanford.edu.pem -days 3650

===Tuesday=== * Complete work on the cert handling in the splunk server puppet manifest * Rebuild ldap-unixdev2 as logindex

===Wednesday=== * Try and use Jason Bishop's redhat thumb rhel6 to update BIOS on ldap-unixdev1 and fail * splunk work with stacy * create stanford-server-splunk package with script to generate splunk compatible self-signed certificates

===Thursday=== * Build ldap-unixdev1 as a redhat box * RHEL BIOS upgrades testing * Move splunk to 5tb partition on logindex * Add sh -> bash to debinit * splunk inputs change * Update root mail for pg servers

===Friday=== * Install hardware on zimbra servers * zimbra upgrade * Work on smtp-dr manifests * Add ssh::defense to afs-mac-mini

* splunk cert cleanup

SUDailyLogs 274. row