page_title: Su-log-2014-06-02 page_touched: 20140609070323 old_text: ===Monday=== * Status * Research DNS log sizes sent into splunk

===Tuesday=== * Add posixGroups for BenPass * Submit orderit for 10g connection to idg-xen2 * Submitted request to trunk VLAN ldapdev to the idg-xen servers on campus * xen vlan trunking reference https://wiki.debian.org/NetworkConfiguration#Howto_use_vlan.28dot1q.2C_802.1q.2C_trunk.29.28Etch.2C_Lenny.29

===Wednesday=== * Hack ldapstats package to get it to display again * Turn on stats and run mail destination stats * Generate CA cert for rsyslog tls testing

     openssl genrsa -rand /dev/urandom -out logsink.stanford.edu.ca.key 2048
     openssl req -new -key logsink.stanford.edu.ca.key \
        -subj '/C=US/ST=CA/L=Stanford/O=Stanford University/OU=ITS/CN=logsink.stanford.edu.ca' \
        -out logsink.stanford.edu.ca.csr
     openssl x509 -req -in logsink.stanford.edu.ca.csr \
        -signkey logsink.stanford.edu.ca.key \
        -out logsink.stanford.edu.ca.pem -days 3650

• Generate cert for rsyslog client

     openssl genrsa -out syslog.zoot-vm1.stanford.edu.key 2048
     openssl req -new -key syslog.zoot-vm1.stanford.edu.key \
        -subj '/C=US/ST=CA/L=Stanford/O=Stanford University/OU=ITS/CN=logsink.stanford.edu.ca' \
        -out syslog.zoot-vm1.stanford.edu.csr
     openssl x509 -req -in syslog.zoot-vm1.stanford.edu.csr \
        -signkey logsink.stanford.edu.ca.key \
        -out syslog.zoot-vm1.stanford.edu.pem -days 3650
  

===Thursday=== * Work on getting certs for rsyslog. Figure out that the new inputs.conf file was the problem. Lots of cert variations.

===Friday=== * Patching because of kernel problems ldap-test ldap-uat ldap-dev laudit www-liv1 weblogin-liv1 * Update logsink package with working scripts for cert handling * Test rsyslog tls/relp configuration

===Sunday=== * Patch and reboot afssvr30, afssvr32 * Reboot policy-db servers 313. row