}}}
* Add debian-admin@debian.org to root in /etc/aliases
+{{{
+ if ! egrep '^root:' /etc/aliases > /dev/null; then
+ echo "root: debian-admin@debian.org" >> /etc/aliases
+ elif ! egrep '^root:.*debian-admin@debian.org' /etc/aliases > /dev/null; then
+ sed -i -e 's/^root: .*/&, debian-admin@debian.org/' /etc/aliases
+ fi
+ newaliases
+}}}
* sane default editor
{{{
test that the dedicated sudo password works. if not, undo the pam sudo config.
(comment out the auth lines and include common-auth again)
-* setup ldap.conf:
-{{{
- grep '^URI.*db.debian.org' /etc/ldap/ldap.conf || cat >> /etc/ldap/ldap.conf << EOF
-
-URI ldap://db.debian.org
-BASE dc=debian,dc=org
-
-TLS_CACERT /etc/ssl/certs/spi-cacert-2008.pem
-TLS_REQCERT hard
-EOF
-}}}
-
* add to munin on spohr
{{{
: :: spohr :: && sudo vi /etc/munin/munin.conf
}}}
-* add host to nagios config
-
* disable password auth with ssh, once you verified you can log in
and become root using keys.
{{{
- vi /etc/ssh/sshd_config
- | PasswordAuthentication no
+ #vi /etc/ssh/sshd_config
+ # | PasswordAuthentication no
+
+ sed -i -e 's/^PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config &&
(cd / && env -i /etc/init.d/ssh restart)
}}}
* setup [[puppet|howto/puppet-setup]]
+* edit dedication into in $DSA-PUPPET/modules/debian-org/misc/local.yaml
+
* add to nagios
+* add host to ldap: ud-host -a $USER -h ....
+
-- weasel, Wed, 04 Jun 2008 20:52:56 +0200