page_title: Su-log-2014-12-08 page_touched: 20141215182451 old_text: ===Monday=== * Work a bit on afs-mac-mini * Work on pam_duo support for bastion hosts * Work with Stanley's group to create a puppet3 environment for rhel * Finish build/load of the ldap-ps servers * Respond to Thomas Z's directory server question * Respond to auditor questions * Look at using match user sshd config instead of Russ's suggestion * Puppet run and tripwire on kdc's * Add Kevin and remove Xueshan from KDCs
===Tuesday=== * Work on Nessus scanning * Create /admin principal for Kevin * Update root@stanford.edu to allow normal user login. ** Old attributes: disallow-svr, requires-pre-auth, disallow-all-tix * Wallet examination of some ACL groups. Rename group/its-idg. Set out ACL remove policy/changes for peer review. * Upgrade kerberos2
===Wednesday=== * Document for network that ldap connections to the ldap-ps systems still are being blocked by the firewall. * Work on scanning. Make changes to root .k5login on an assortment of systems.
===Thursday=== * Package stanford-account-app * Upgrade kerberos1 * Find logsearch1 and logsearch2 * Shutdown kerberos1 and kerberos2. Looks like kerberos1 has a hardware failure. * Update stanford-server-directory with working ldap-auth-report script. * Help Toi with access to the directory. * Grant additional directory access for benpass
===Friday=== * OS patching on zimbra servers
===Saturday=== * Duo upgrade * The remctl command for password changes
k5start -F -S kadmin -I changepw whm
remctl -p 4443 -s kadmin/changepw kerberos1 kadmin password food
===Sunday=== * More duo pam work. Hack in support for password entry to luckdragon to support Windows users. * Bring up acct-webapps-duo as a account services system before the upgrade. * Look at problem on logsink1 and figure out the issue is with the NFS mount. Request a reboot of the system.
SUDailyLogs 338. row