Timeline
11/11/09:
- 02:23 Ticket #435 (reactivate 2 regression: home directory must be world-listable) closed by
- fixed: Right, this is because I started using schroot -u root and root doesn't …
- 02:21 Changeset [24165] by
- reactivate: Run root commands inside the snapshot in /, not $HOME This permits logging in if your home directory isn't system:anyuser listable, since root no longer needs to be able to cd to your home directory inside the chroot (Trac: #435).
- 01:22 Changeset [24164] by
- reactivate: Prevent schroot from filtering out KRBTKFILE
11/10/09:
- 18:00 Ticket #307 (the non-gdm tty "press ctrl-alt-f7 to log in" messages are gone in Jaunty) reopened by
- 1. This affects gettys as well (I'm running a getty on lola-granola's …
- 17:21 Changeset [24163] by
- In printing-config: * Only write out a block in the lpoptions file if there is a printer set in clusterinfo.
- 16:39 Changeset [24162] by
- In cluster-login-config: * Revert 1.16; set the root password for both quickstation and non-quickstation machines.
- 16:22 Changeset [24161] by
- Add a postinst to printing-config that refreshes clusterinfo if it's installed. This ensures that the CUPS default is updated when printing-config is initially installed or upgraded, rather than an hour later.
- 16:20 Changeset [24160] by
- In clusterinfo: * Suppress the cron job if clusterinfo has been uninstalled.
- 16:08 Changeset [24159] by
- In printing-config: * Take advantage of the new clusterinfo update.d hook to set a default CUPS printer when clusterinfo gets updated. (Trac: #411) sed -i -e '/### BEGIN debathena-printing-config/,/### END debathena-printing-config/d' /etc/cups/lpoptions
- 14:31 Changeset [24158] by
- In clusterinfo: * Make save-cluster-info do something slightly less dumb if /var/run/athena-clusterinfo.sh or .csh is somehow a directory * Source the new clusterinfo information befure calling the update.d scripts so that they can access the environment variables easily.
- 13:05 Changeset [24157] by
- In clusterinfo: * Run through scripts in /usr/share/debathena-clusterinfo/update.d after updating clusterinfo information. This gives other packages a hook for reacting to clusterinfo changes.
- 12:38 Ticket #437 (Consider expanding debathena-metrics blacklist) created by
- We should expand the blacklist. We can either explicitly add some of the …
- 11:35 Changeset [24156] by
- Fix a typo in r24154.
- 11:31 Changeset [24155] by
- Add cluster-printing-config to cluster.
- 11:31 Changeset [24154] by
- In printing-config: * Add a new debathena-cluster-printing-config package that configures the CUPS client to use printers.mit.edu.
- 02:33 Ticket #436 (repository and build process for patched schroot 1.3) created by
- The debathenificator doesn't currently support starting with a completely …
- 02:23 Ticket #435 (reactivate 2 regression: home directory must be world-listable) created by
- gkovacs reports and I confirmed with sipbtest that you can't log in to a …
- 01:04 Changeset [24153] by
- reactivate: Fix typo
11/09/09:
- 00:25 Ticket #434 ("Spooled PDF File Rejected" from GTK+ LPR backend) created by
- If you open a .jpg in Eye Of GNOME (the default JPG viewer), and print it …
11/08/09:
- 21:48 Changeset [24152] by
- In auto-update: * Slow updates to a 6-hour (desync'd) schedule during waking hours.
- 21:10 Changeset [24151] by
- reactivate: Restore shared mountpoint at /media.
- 21:10 Changeset [24150] by
- reactivate: Clean up /etc/schroot/schroot.conf. If this update happens during a login session, then reactivate 1.x will have modified schroot.conf, and schroot 1.3 will want to update that file, and athena-auto-update is unlikely to deal with this correctly. To avoid this, we clean up schroot.conf in our preinst; hopefully that happens before schroot 1.3 gets unpacked. And you don't particularly need to be in schroot.conf once you've logged in, anyway. (reactivate 2 uses chroot.d to avoid this problem.)
- 21:10 Changeset [24149] by
- reactivate: Restructure to make post-session cleanup easier. In addition, work with auto-update to lock out concurrent login sessions and updates, so as to reboot either if there was a package update requiring a reboot or if the login session cannot be cleaned up.
- 21:10 Changeset [24148] by
- reactivate: Remove a file that became unused in r23155.
- 21:10 Changeset [24147] by
- In auto-update: * Inhibit updates during a cluster login. * Write an /etc/nologin-style file in /var/run while updating.
11/04/09:
- 14:54 Changeset [24146] by
- In linerva: * Also make /var/run/screen sticky after screen-cleanup runs.
- 14:48 Changeset [24145] by
- In linerva: * Set mmap_min_addr to 65536.
11/02/09:
- 13:48 Changeset [24144] by
- Correct for LP #430224 in our chroot build script (initctl doesn't respect policy-rc.d, so we need to move it out of the way)
- 13:23 Ticket #433 (syslog-config needs to use rsyslog) created by
- It looks like rsyslog has finally replaced sysklogd. Since ubuntu-minimal …
10/31/09:
- 11:17 Ticket #432 (collate by default) created by
- Apparently when you print multiple copies through the default PDF viewer …
10/30/09:
- 19:54 Ticket #431 (Karmic's gdm does not support custom commands, e.g. launching the kiosk ...) created by
- The version of gdm in Karmic (2.28) does not seem to support defining …
- 16:20 Ticket #421 (autodebathenified packages should go straight into production) closed by
- fixed: This is now done; a18r builds go directly into production. I've also …
10/29/09:
- 22:25 Changeset [24143] by
- In rs: * Rename getline to rs_getline to avoid conflicting with the getline in <stdio.h>.
- 15:55 Changeset [24142] by
- Karmic is released.
10/28/09:
- 14:53 Ticket #369 (gdm-config needs to be entirely rewritten for Karmic’s gdm) closed by
- fixed: Since the user list and skinning have been split out to #429 and #430 …
- 14:53 Ticket #430 (gdm-config should skin post-2.20 gdms) created by
- Right now our debathena-gdm-config package won't make any attempt to skin …
- 14:52 Ticket #429 (gdm-config should set /apps/gdm/simple-greeter/disable_user_list) created by
- This will, predictably, disable the user list that comes up and shows the …
- 14:48 Ticket #367 (nss-nonlocal should disallow numeric group names) closed by
- fixed
- 14:47 Ticket #427 (firefox-extension uninstallable without krb4) closed by
- fixed
10/27/09:
- 15:39 Changeset [24141] by
- In linerva, dh_bash-completion is provided by the bash-completion package, not debhelper, so fix the build-deps.
- 15:35 Changeset [24140] by
- In debathena-linerva, cdbs doesn't automatically run dh_bash-completion, so we need to do it.
- 15:24 Changeset [24139] by
- In linerva: * Add bash completion for linerva-install. local cur cur=`_get_cword` COMPREPLY=($( apt-cache pkgnames $cur 2> /dev/null ))
10/25/09:
- 20:57 Changeset [24138] by
- Add a Trac closer for r24137.
- 20:56 Changeset [24137] by
- In firefox-extension: * Update the GSSAPI dependency for post-krb5-1.7.
- 17:40 Changeset [24136] by
- In pam-config: * Make that a Breaks and not a Conflicts, because Conflicting with earlier-than versions is wrong.
- 16:37 Changeset [24135] by
- In pam-config: * Explicitly conflict with the old libpam-krb5-config, because apparently just conflicting with diverts-usr++share++pam-configs++krb5 isn't always good enough.
- 15:45 Changeset [24134] by
- Things that are not the same in shell scripts: &, &&
- 15:37 Changeset [24133] by
- In xsession: * Close the conditional in quotawarn.
- 14:46 Changeset [24132] by
- Add vim-nox to extra-software-nox. This adds syntax highlighting support, which is apparently what people actually want.
- 14:30 Ticket #428 (debathena-pidgin-wrapper doesn't respect ATHENA_USER) created by
- So when I start pidgin with my local account of evan, it tries to log me …
- 14:24 Changeset [24131] by
- In build-depends: * Version bump to recalculate dependencies.
- 14:21 Changeset [24130] by
- Since Etch, vim-full has actually been a transitional package to vim-gnome. Since vim-gnome is distinctly not X-less, move vim-gnome into extra-software and punt vim-full from extra-software-nox.
- 14:02 Changeset [24129] by
- In xsession: * Demote mitmailutils to a recommendation while it's uninstallable on krb4-less systems.
- 14:00 Ticket #427 (firefox-extension uninstallable without krb4) created by
- firefox-extension depends on libkrb53, which no longer exists in krb4-less …
- 12:52 Changeset [24128] by
- In gdm-config: * Don't configure /etc/gdm/gdm.conf{,-custom} on post-gdm-2.20 platforms. - Themes are no longer supported, so there's no point setting one - Xauthority files are now going into /var/run
- 01:50 Changeset [24127] by
- In linerva: Fix distribution from Ubuntu's dch.
- 01:48 Changeset [24126] by
- In linerva: * Configure bitlbee not to run its system daemon.
- 01:21 Changeset [24125] by
- In reactivate: * Rewrite to use schroot 1.3 and aufs union mounts instead of LVM. This makes logins on a Dell 760 take about 8 seconds to reach the desktop. - TODO: Reincorporate clean-up fallbacks (e.g. rebooting) of previous version. - TODO: Deal with manually modified /etc/schroot/schroot.conf.
- 01:07 Ticket #426 (kill dsc_setup) created by
- dsc_setup is really annoying and useless, and arguably helps perpetuate …
10/24/09:
- 23:31 Changeset [24124] by
- In nmh: * Conflict with dvb-apps, because that too has a /usr/bin/scan.
- 21:17 Ticket #208 (graphical login doesn't deal well with being unplugged) closed by
- fixed: I moved the PAM config change into production. I'm pretty sure I'm OK with …
- 21:10 Ticket #379 (debathena-kerberos-config depends krb4-config, which is gone in squeeze) closed by
- fixed: I moved this fix to production yesterday.
- 21:10 Ticket #319 (debathena-kerberos-config upgrade left behind obsolete conffile) closed by
- fixed: I moved this fix to production yesterday.
- 20:01 Changeset [24123] by
- In linerva: * Change FIRST_SYSTEM_GID to 103 to avoid creating group 101.
- 19:22 Ticket #425 (switch to pacmd for muting sound on cluster machines) created by
- I wrote in #292: > There's a related issue that …
10/23/09:
- 14:23 Ticket #424 (network-manager-config should name the network "Auto MIT") created by
- For the sake of collapsing the config with a possible per-user config that …
- 14:09 Changeset [24122] by
- In libnss-nonlocal: * New upstream version. - Disallow numeric nonlocal user/group names that look like local uid/gids.
10/22/09:
- 20:25 Ticket #423 (2-up printing from evince to lprng doesn't work) created by
- I printed my bio pset twice from evince with 2-up printing selected in the …
- 15:12 Changeset [24121] by
- In gdm-config: [ Geoffrey Thomas ] [ Evan Broder ] * Move the pam-message field back into the login box, so that the new missing network connection message shows up. In pam-config: * Un-word-wrap the missing network connection message, beacuse gdm includes the carriage return, and it looks weird.
- 04:46 Ticket #422 (alpine doesn't respect $ATHENA_USER for sender) created by
- My local account on my -workstation laptop is named sipbadmin. If I …
- 02:24 Ticket #421 (autodebathenified packages should go straight into production) created by
- Right now packages built by the autodebathenifier are going into proposed, …
10/21/09:
- 22:30 Changeset [24120] by
- Revert r24119 (Fix a typo in /etc/issue.net.no_network). I can't read.
- 22:28 Ticket #393 (remove renew and add from debathena-dotfiles) closed by
- fixed: Whoops - forgot to close this, but the fix was moved into production …
- 22:28 Ticket #417 (Renew doesn't work properly on Karmic) closed by
- fixed: Whoops - forgot to close this, but the fix was moved into production …
- 21:50 Changeset [24119] by
- In pam-config: * Fix a typo in /etc/issue.net.no_network.
- 13:30 Changeset [24118] by
- Add fftw-dev to thirdparty-libraries at alexp's request.
- 09:26 Changeset [24117] by
- Now that evolution is using GSSAPI, the krb4-enabled evolution-data-server is no longer necessary.
10/20/09:
- 22:16 Ticket #272 (debathena-tellme: tellme has no manpage) closed by
- fixed
- 22:15 Ticket #414 (mark firefox-extension compatible with 3.5) closed by
- fixed
- 22:15 Ticket #402 (evolution-wrapper should support krb5 auth) closed by
- fixed
- 16:42 Changeset [24116] by
- DEB_TRANSFORM_FILES needs to have paths with the .debathena suffix (again, kerberos-config).
- 16:29 Changeset [24115] by
- And...we need to split up the stuff that triggers config-package-dev and the stuff that uses config-package-dev's definitions in kerberos-config.
- 16:08 Changeset [24114] by
- In kerberos-config, if we're hacking together our own version of DEB_TRANSFORM_FILES, like we do for usr.sbin.cupsd.debathena, it needs to come after the include so we can use functions defined by config-package-dev.
- 15:32 Changeset [24113] by
- Put all of the config-package-dev configuration in kerberos-config before the includes.
- 15:15 Changeset [24112] by
- In kerberos-config: * Apparently /etc/apparmor.d/abstractions/kerberosclient has to still exist, so switch back to DEB_TRANSFORM_FILES for that, but keep using DEB_REMOVE_FILES for the CUPS config file.
- 14:33 Changeset [24111] by
- Cleanup one more stale diversion on kerberos-config.
- 14:25 Changeset [24110] by
- In kerberos-config: * Clean up the upgrade path from 1.7 by undoing the DEB_TRANSFORM_FILES before replacing it with a DEB_REMOVE_FILES.
- 12:34 Changeset [24109] by
- In kerberos-config, why don't we use makefile syntax instead of shell syntax?
- 12:17 Changeset [24108] by
- Use the same logic for determining at build time whether to configure krb4 as is used in the postinst for determining whether to keep krb4 configured. Otherwise systems (such as Karmic) which don't have krb4, but do come with a krb4-config, would install the transformed files and then immediately undo the transformations on upgrades.
- 12:17 Changeset [24107] by
- Add missing new build-dep to maybe-krb4-config
- 12:10 Changeset [24106] by
- Testing installability in maybe-krb4-config didn't work either, so instead let's examine the version of kerberos-configs that's available ot us.
- 11:46 Changeset [24105] by
- In maybe-krb4-config: * Because we already have packages depending on krb4-config, it's always going to be in apt's cache. A better question is whether or not we can install the package.
- 11:31 Ticket #340 (Metrics gathering) closed by
- fixed: This has been moved into production, along with documentation on the …
- 11:31 Changeset [24104] by
- Move the DEB_TRANSFORM_FILES setup in kerberos-config above the config-package.mk include. Because of how make processes Makefiles, if it comes after, the krb.conf and krb.realms files never get transformed.
- 11:04 Changeset [24103] by
- In kerberos-config: * Only configure krb4 on systems that have it. (Trac: #379)
- 10:38 Ticket #382 (Quickstation login times are unacceptable) closed by
- fixed: This was deployed last evening. Obviously we should revisit this when we …
- 00:47 Changeset [24102] by
- In the pam_krb5 config, instead of just skipping the pam_echo in case of failure, immediately die. This works around a bug in pam-auth-update where default=1 is treated differently depending on whether or not the "end" in success=end has been replaced with a number. This was causing pam-auth-update to spuriously detect changes to /etc/pam.d/common-auth. This change does have the effect that a failure of pam_krb5 will no longer bubble down to any other potential auth providers. However, I think that the scenario of (a) using >=debathena-login, (b) having a second PAM auth module you want to use that, (c) is managed by pam-auth-update and not by hand and (d) comes after pam_krb5 in pam-auth-update's ordering scheme is pretty unlikely.
10/19/09:
- 11:59 Changeset [24101] by
- In dotfiles: * Fix the test of from's availability.
10/18/09:
- 02:44 Ticket #420 (How to configure VPN on Ubuntu 9.04) closed by
- wontfix: This is a support issue, not a bug. I've answered via e-mail.
- 02:34 Ticket #420 (How to configure VPN on Ubuntu 9.04) created by
- I was following the steps …
10/17/09:
- 15:04 Changeset [24100] by
- 14:58 Changeset [24099] by
- In kerberos-config: * Reload apparmor on upgrades (Trac: #326)
- 14:52 Changeset [24098] by
- Don't try to DEB_UNREMOVE the files we replace for apparmor in kerberos-configs - it's not necessary, because the files aren't vanishing or anything.
- 12:56 Changeset [24097] by
- In shell-config: * Only pass -45 to kinit on systems that still have a krb4. (Trac: #417)
- 12:29 Changeset [24096] by
- In dotfiles: * Stop defining add and renew in the Athena dotfiles - they should be getting defined in the system dotfiles anyway. (Trac: #393)
- 04:00 Ticket #419 (debathena-nmh depends on krb4) created by
- This is a problem on platforms that don't have krb4, such as Karmic and …
- 03:54 Ticket #418 (pam-config enables libpam-krb524 on krb4-less systems) created by
- Right now we're still enabling libpam-krb524 on Squeeze and Karmic. Since …
- 03:50 Changeset [24095] by
- In dotfiles: * If we're not running from, don't run mailquota either - they're both provided by mitmailutils.
- 03:19 Changeset [24094] by
- There's one more package in debathena-clients that depends on debathena-mitmailutils, so let's demote it to a reocommendation (and promote it to a cluster dependency) as well!
10/16/09:
- 23:59 Changeset [24093] by
- In reactivate: * Fix init script metadata (overlooked in 1.21).
- 17:52 Changeset [24092] by
- In mutt-config: * Now that mutt is using GSSAPI instead of krb4, we no longer need to depend on libsasl2-krb4-mit.
- 17:51 Changeset [24091] by
- Demote nmh to a recommendation as well, pending getting it working without krb4. Again, promote it to a dependency of cluser, to make sure it sticks around there.
- 17:17 Changeset [24090] by
- Start building packages for Karmic by default.
- 17:01 Changeset [24089] by
- In dotfiles: * Only run from at login if it's available, and demote it to a recommendation.
- 16:36 Changeset [24088] by
- So long as we're not depending on mitmailutils in clients, depend on it in cluster to make sure it stays installed there.
- 16:29 Changeset [24087] by
- In evolution-wrapper: * Update evolution wrapper to use username.mail.mit.edu and GSSAPI instead of Hesiod and krb4. (Trac: #402)
- 16:28 Changeset [24086] by
- Demote mitmailutils to a recommendation in debathena-clients, pending us getting a version of mitmailutils that works with GSSAPI.
- 14:28 Changeset [24085] by
- In tellme: * Add a manpage for tellme. (Trac: #272)
10/15/09:
- 19:49 Ticket #417 (Renew doesn't work properly on Karmic) created by
- Error: "Kerberos 4 is no longer supported". Presumably this is a result …
10/14/09:
- 18:27 Changeset [24084] by
- In firefox-extension: * Bump the max supported version for Firefox 3.5. (Trac: #414) * Update help and home page URLs.
- 14:48 Changeset [24083] by
- In reactivate: * geofft's transformation of /etc/pam.d/su was running outside the chroot, and editing the file in place, thus clobbering the symlink. We need to fix all of this in the postinst.
- 14:38 Changeset [24082] by
- In reactivate: * geofft's transformation of /etc/pam.d/su in athena-login-snapshot isn't being overwritten by package upgrades, so we'll have to cleanup for it in the postinst by hand.
- 14:04 Changeset [24081] by
- In reactivate: * Always lecture users trying to sudo on quickstations. * Stop editing /etc/pam.d/sudo in the snapshot setup, since we're no longer diverting it.
- 12:41 Changeset [24080] by
- In cluster-login-config: * Deny everybody sudo privileges by default, then override that for the admin group. This makes sure that everybody is somewhere in the sudoers file, which also ensures that they get lectured. In reactivate: * Specify both of the lecture files in /etc/sudoers: error for everybody, and warning for the admin group. The latter overrides the former.
- 11:29 Changeset [24079] by
- Add convenience repo-management scripts dacopy and daremove, and change damove to use those.
- 09:03 Changeset [24078] by
- reactivate: Use PAM even more differently on quickstations. My previous implementation was all kinds of wrong.
- 08:54 Ticket #416 (reactivate's transform scripts never fail) created by
- If for some reason the PAM config no longer includes `@include …
- 07:43 Changeset [24077] by
- reactivate: Fix .install file.
- 07:20 Changeset [24076] by
- reactivate: Use PAM more differently on quickstations.
10/13/09:
- 14:50 Ticket #415 (Write authenticator daemon to conspire with PyHesiodFS to get tokens) created by
- One of the few things we still need an attach command for is acquiring …
- 14:32 Changeset [24075] by
- In metrics: * If a process is being started inside the login chroot, strip off the /login prefix for path consistency. * Add an application blacklist for apps that always run in a login session.
10/12/09:
- 19:48 Changeset [24074] by
- In alpine-config: * Revert 1.14, because it doesn't appear to be necessary anymore.
- 19:15 Changeset [24073] by
- In alpine-config: * Replace the old creatdir patch from the debathenified alpine with equivalent code in the alpine wrapper script.
- 15:50 Changeset [24072] by
- Punt the $Id$ tag from quota's Makefile - make doesn't seem to like it.
- 15:48 Changeset [24071] by
- In reactivate: * Use PAM instead of the sudo lecture_file to lecture users.
- 14:59 Changeset [24070] by
- In attach: * Now that liblocker doesn't require krb4, don't require it here either. * Since Debathena is building liblocker without krb4, don't build with it here either.
- 14:59 Changeset [24069] by
- In locker: * Add a configure-time option to tear the NFS (and therefore the krb4) out of liblocker. * Shell out to aklog, instead of duplicating all of its code. * On Debathena, build without NFS support.
- 14:58 Changeset [24068] by
- cd
- 13:21 Changeset [24067] by
- Now that username.mail.mit.edu support GSSAPI, we no longer need to debathenify alpine to support krb4 and Hesiod.
Note: See TracTimeline
for information about the timeline view.