Stephen Gran [Tue, 21 Sep 2010 20:33:37 +0000 (21:33 +0100)]
stab two
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Sep 2010 20:31:29 +0000 (21:31 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 21 Sep 2010 20:30:45 +0000 (21:30 +0100)]
first stab at a v4ips fact for bsd
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 21 Sep 2010 13:33:50 +0000 (15:33 +0200)]
erm...
Peter Palfrader [Tue, 21 Sep 2010 12:59:29 +0000 (14:59 +0200)]
do away with QACORE user alias, use the qa-core group instead (RT#2533)
Peter Palfrader [Sun, 19 Sep 2010 23:19:59 +0000 (01:19 +0200)]
quantz probably deserves the heavy-exim treatment
Peter Palfrader [Sat, 18 Sep 2010 21:30:55 +0000 (23:30 +0200)]
freebsd ssh access from grieg
Peter Palfrader [Sat, 18 Sep 2010 11:44:48 +0000 (13:44 +0200)]
Maybe if we want two tunnels it has to be like this
Stephen Gran [Sat, 18 Sep 2010 11:40:10 +0000 (12:40 +0100)]
temporary access to ries to work on security upgrade for ftpteam
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Fri, 17 Sep 2010 20:59:50 +0000 (22:59 +0200)]
qa->udd
Peter Palfrader [Fri, 17 Sep 2010 20:20:34 +0000 (22:20 +0200)]
quantz does direct mail
Peter Palfrader [Fri, 17 Sep 2010 19:30:51 +0000 (21:30 +0200)]
port forward: quantz:5433 -> merkel:5433
Peter Palfrader [Fri, 17 Sep 2010 16:02:40 +0000 (18:02 +0200)]
But not nm
Peter Palfrader [Fri, 17 Sep 2010 16:00:20 +0000 (18:00 +0200)]
Also handle nm on quantz. maybe
Peter Palfrader [Fri, 17 Sep 2010 15:37:17 +0000 (17:37 +0200)]
stabile nfs server
Peter Palfrader [Fri, 17 Sep 2010 12:52:22 +0000 (14:52 +0200)]
ruby spells append with two <<
Peter Palfrader [Fri, 17 Sep 2010 12:49:24 +0000 (14:49 +0200)]
ignore openafs modules packages
Peter Palfrader [Thu, 16 Sep 2010 15:43:37 +0000 (17:43 +0200)]
ipv6 reverse for lobos/villa
Peter Palfrader [Thu, 16 Sep 2010 11:30:42 +0000 (13:30 +0200)]
On squeeze the iff file has a different name
Peter Palfrader [Wed, 15 Sep 2010 22:28:53 +0000 (00:28 +0200)]
afs for quantz
Peter Palfrader [Wed, 15 Sep 2010 22:26:56 +0000 (00:26 +0200)]
Add quantz to QAHOSTS
Peter Palfrader [Wed, 15 Sep 2010 22:03:12 +0000 (00:03 +0200)]
Add quantz
Simon Paillard [Wed, 15 Sep 2010 20:38:25 +0000 (22:38 +0200)]
Exim conf for wolkenstein (future www-master)
Peter Palfrader [Wed, 15 Sep 2010 18:24:30 +0000 (20:24 +0200)]
Move salieri to squeeze
Peter Palfrader [Wed, 15 Sep 2010 16:29:39 +0000 (18:29 +0200)]
A sudo entry for debbugs-mirror for afs
Peter Palfrader [Wed, 15 Sep 2010 14:44:11 +0000 (16:44 +0200)]
Let's prepare for a fileserver on rietz
Peter Palfrader [Wed, 15 Sep 2010 10:45:03 +0000 (12:45 +0200)]
Also install openafs-krb5
Peter Palfrader [Wed, 15 Sep 2010 10:33:55 +0000 (12:33 +0200)]
afs on draghi, take II
Peter Palfrader [Wed, 15 Sep 2010 10:32:21 +0000 (12:32 +0200)]
afs on draghi
Peter Palfrader [Wed, 15 Sep 2010 10:30:42 +0000 (12:30 +0200)]
add afs.conf.client
Peter Palfrader [Wed, 15 Sep 2010 10:29:44 +0000 (12:29 +0200)]
Try to have the openafs-client package depend on the config
Peter Palfrader [Tue, 14 Sep 2010 21:45:22 +0000 (23:45 +0200)]
krb class installs heimdal-clients
Peter Palfrader [Tue, 14 Sep 2010 21:44:22 +0000 (23:44 +0200)]
bartok basic afs client. not much magic happening
Peter Palfrader [Tue, 14 Sep 2010 21:20:14 +0000 (23:20 +0200)]
port forward pagnini->samosa
Peter Palfrader [Tue, 14 Sep 2010 17:27:49 +0000 (19:27 +0200)]
This means we will install the openafs-client package automatically
Peter Palfrader [Tue, 14 Sep 2010 17:26:32 +0000 (19:26 +0200)]
Ship CellServDB and ThisCell in puppet
Stephen Gran [Mon, 13 Sep 2010 17:40:09 +0000 (18:40 +0100)]
Revert "some gratuitous whitespace changes"
This reverts commit
9ea1140c359d4bf3c513f34f8f311b911649ceef.
Stephen Gran [Mon, 13 Sep 2010 17:39:05 +0000 (18:39 +0100)]
some gratuitous whitespace changes
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 13 Sep 2010 17:30:51 +0000 (18:30 +0100)]
make new syslog-ng module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Mon, 13 Sep 2010 12:24:46 +0000 (14:24 +0200)]
rautavaara does afs
Stephen Gran [Mon, 13 Sep 2010 07:22:29 +0000 (08:22 +0100)]
try to break syslog
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 12 Sep 2010 20:57:11 +0000 (22:57 +0200)]
Try to appease anal ferm
Peter Palfrader [Sun, 12 Sep 2010 20:42:14 +0000 (22:42 +0200)]
move rautavaara to squeeze
Martin Zobel-Helas [Sun, 12 Sep 2010 17:36:45 +0000 (19:36 +0200)]
i was never too good in math
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sun, 12 Sep 2010 17:11:09 +0000 (19:11 +0200)]
lotti for president^Wloghost
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sun, 12 Sep 2010 16:51:21 +0000 (18:51 +0200)]
add lotti
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Sun, 12 Sep 2010 10:12:30 +0000 (12:12 +0200)]
add locke
Peter Palfrader [Sun, 12 Sep 2010 08:41:19 +0000 (10:41 +0200)]
Try to allow some ports to afs hosts
Martin Zobel-Helas [Sat, 11 Sep 2010 21:27:55 +0000 (23:27 +0200)]
fix typo
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Sat, 11 Sep 2010 18:40:55 +0000 (20:40 +0200)]
move krb firewalling to modules/krb
Peter Palfrader [Fri, 10 Sep 2010 20:10:20 +0000 (22:10 +0200)]
libheimdal-kadm5-perl is a local package on draghi
Peter Palfrader [Fri, 10 Sep 2010 17:15:41 +0000 (19:15 +0200)]
krb5.conf on lamb
Peter Palfrader [Fri, 10 Sep 2010 15:20:04 +0000 (17:20 +0200)]
add basic krb module
Peter Palfrader [Fri, 10 Sep 2010 11:17:06 +0000 (13:17 +0200)]
fix domain
Peter Palfrader [Fri, 10 Sep 2010 11:15:56 +0000 (13:15 +0200)]
kerberos kadmind access from draghi
Peter Palfrader [Thu, 9 Sep 2010 20:06:38 +0000 (22:06 +0200)]
Add lamb
Peter Palfrader [Thu, 9 Sep 2010 16:08:53 +0000 (18:08 +0200)]
kerberos is also a udp service
Peter Palfrader [Thu, 9 Sep 2010 15:46:07 +0000 (17:46 +0200)]
Use service names instead of port numbers
Peter Palfrader [Thu, 9 Sep 2010 15:43:20 +0000 (17:43 +0200)]
Try to add byrd/schuetz special ports
Peter Palfrader [Thu, 9 Sep 2010 15:37:19 +0000 (17:37 +0200)]
Indenting clean-up for ferm/per-host
Peter Palfrader [Thu, 9 Sep 2010 15:03:33 +0000 (17:03 +0200)]
Add schuetz
Peter Palfrader [Thu, 9 Sep 2010 12:40:19 +0000 (14:40 +0200)]
make templates produce properly aligned output
Peter Palfrader [Thu, 9 Sep 2010 12:35:11 +0000 (14:35 +0200)]
ferm now officially sucks
Peter Palfrader [Wed, 8 Sep 2010 22:53:35 +0000 (00:53 +0200)]
Add ntp.grnet.gr to orff
Peter Palfrader [Wed, 8 Sep 2010 22:10:44 +0000 (00:10 +0200)]
add byrd
Peter Palfrader [Wed, 8 Sep 2010 12:42:11 +0000 (14:42 +0200)]
update package ignorelist for draghi and orff
Peter Palfrader [Tue, 7 Sep 2010 21:02:12 +0000 (23:02 +0200)]
mininag now runs on orff
Peter Palfrader [Tue, 7 Sep 2010 20:42:02 +0000 (22:42 +0200)]
Update the script that geo* servers run upon being triggered
Peter Palfrader [Tue, 7 Sep 2010 20:31:42 +0000 (22:31 +0200)]
allow ssh to geo[123] from orff
Peter Palfrader [Tue, 7 Sep 2010 20:19:32 +0000 (22:19 +0200)]
geo nameservers are ssh triggered from orff now
Peter Palfrader [Tue, 7 Sep 2010 20:11:14 +0000 (22:11 +0200)]
I think this ferm rule is no longer needed
Peter Palfrader [Tue, 7 Sep 2010 19:53:47 +0000 (21:53 +0200)]
s/secondary/authoritative/
Peter Palfrader [Tue, 7 Sep 2010 19:49:28 +0000 (21:49 +0200)]
configure orff as master too
Peter Palfrader [Tue, 7 Sep 2010 17:18:38 +0000 (19:18 +0200)]
Update sudoers for move of dns master
Stephen Gran [Tue, 7 Sep 2010 08:07:59 +0000 (09:07 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 7 Sep 2010 08:07:54 +0000 (09:07 +0100)]
update apt preferences for new name
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 5 Sep 2010 19:20:01 +0000 (21:20 +0200)]
allow dak on morricone to trigger archvsync
Stephen Gran [Sat, 4 Sep 2010 14:01:47 +0000 (15:01 +0100)]
add security@ rbllist
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Sep 2010 13:47:39 +0000 (14:47 +0100)]
fix rbl and rhsbl list handling
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Sep 2010 11:13:38 +0000 (12:13 +0100)]
no more non-us
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Fri, 3 Sep 2010 12:58:10 +0000 (14:58 +0200)]
Improve on nodeinfo (i.e. make it work)
Peter Palfrader [Fri, 3 Sep 2010 12:47:47 +0000 (14:47 +0200)]
$fqdn is not defined in functions
Peter Palfrader [Fri, 3 Sep 2010 12:33:51 +0000 (14:33 +0200)]
Try to enable ntp keying
Peter Palfrader [Fri, 3 Sep 2010 12:17:18 +0000 (14:17 +0200)]
Sometimes this ruby puppet thing is weird
Peter Palfrader [Fri, 3 Sep 2010 12:03:06 +0000 (14:03 +0200)]
Try to make extractnodeinfo accept more than one level of hash keys
Peter Palfrader [Fri, 3 Sep 2010 10:10:44 +0000 (12:10 +0200)]
Find out if we are natted
Peter Palfrader [Thu, 2 Sep 2010 15:05:37 +0000 (17:05 +0200)]
Revert "We use "keyinfo" in all kinda of places. Rename it to something more generic"
This reverts commit
d7475f90c56697e9589e1386ced135498df68c81.
Peter Palfrader [Thu, 2 Sep 2010 15:05:34 +0000 (17:05 +0200)]
Revert "We use "keyinfo" in all kinda of places. Rename it to something more generic, II"
This reverts commit
e6859bc74154e89b4996313992cc58c1f002be5e.
Peter Palfrader [Thu, 2 Sep 2010 15:01:14 +0000 (17:01 +0200)]
We use "keyinfo" in all kinda of places. Rename it to something more generic, II
Peter Palfrader [Thu, 2 Sep 2010 14:59:44 +0000 (16:59 +0200)]
We use "keyinfo" in all kinda of places. Rename it to something more generic
Peter Palfrader [Thu, 2 Sep 2010 14:48:43 +0000 (16:48 +0200)]
Slightly modify ldapinfo, let's see what blows up
Peter Palfrader [Thu, 2 Sep 2010 14:25:36 +0000 (16:25 +0200)]
A reordering that should not matter
Peter Palfrader [Thu, 2 Sep 2010 14:05:21 +0000 (16:05 +0200)]
No point in giving albeniz and goetz a local ntp server too - they are too broken to keep proper time anyway
Stephen Gran [Tue, 31 Aug 2010 07:30:09 +0000 (08:30 +0100)]
fix whitelist macro
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 31 Aug 2010 00:31:59 +0000 (01:31 +0100)]
this should make whitelist, greylist and callout work as expected for virtual domains
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Mon, 30 Aug 2010 07:11:56 +0000 (09:11 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Joerg Jaspert [Sun, 29 Aug 2010 22:20:32 +0000 (00:20 +0200)]
Add njabl.org list for a set of addresses
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Joerg Jaspert [Sun, 29 Aug 2010 22:19:12 +0000 (00:19 +0200)]
Remove dsbl.org, its dead
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Fri, 27 Aug 2010 08:28:06 +0000 (09:28 +0100)]
ries not a recursor
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 27 Aug 2010 07:40:10 +0000 (08:40 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
projects / mirror / dsa-puppet.git / log