Timeline


and

11/11/09:

02:23 Ticket #435 (reactivate 2 regression: home directory must be world-listable) closed by geofft
fixed: Right, this is because I started using schroot -u root and root doesn't …
02:21 Changeset [24165] by geofft
reactivate: Run root commands inside the snapshot in /, not $HOME This permits logging in if your home directory isn't system:anyuser listable, since root no longer needs to be able to cd to your home directory inside the chroot (Trac: #435).
01:22 Changeset [24164] by geofft
reactivate: Prevent schroot from filtering out KRBTKFILE

11/10/09:

18:00 Ticket #307 (the non-gdm tty "press ctrl-alt-f7 to log in" messages are gone in Jaunty) reopened by geofft
1. This affects gettys as well (I'm running a getty on lola-granola's …
17:21 Changeset [24163] by broder
In printing-config: * Only write out a block in the lpoptions file if there is a printer set in clusterinfo.
16:39 Changeset [24162] by broder
In cluster-login-config: * Revert 1.16; set the root password for both quickstation and non-quickstation machines.
16:22 Changeset [24161] by broder
Add a postinst to printing-config that refreshes clusterinfo if it's installed. This ensures that the CUPS default is updated when printing-config is initially installed or upgraded, rather than an hour later.
16:20 Changeset [24160] by broder
In clusterinfo: * Suppress the cron job if clusterinfo has been uninstalled.
16:08 Changeset [24159] by broder
In printing-config: * Take advantage of the new clusterinfo update.d hook to set a default CUPS printer when clusterinfo gets updated. (Trac: #411) sed -i -e '/### BEGIN debathena-printing-config/,/### END debathena-printing-config/d' /etc/cups/lpoptions
14:31 Changeset [24158] by broder
In clusterinfo: * Make save-cluster-info do something slightly less dumb if /var/run/athena-clusterinfo.sh or .csh is somehow a directory * Source the new clusterinfo information befure calling the update.d scripts so that they can access the environment variables easily.
13:05 Changeset [24157] by broder
In clusterinfo: * Run through scripts in /usr/share/debathena-clusterinfo/update.d after updating clusterinfo information. This gives other packages a hook for reacting to clusterinfo changes.
12:38 Ticket #437 (Consider expanding debathena-metrics blacklist) created by jdreed
We should expand the blacklist. We can either explicitly add some of the …
11:35 Changeset [24156] by broder
Fix a typo in r24154.
11:31 Changeset [24155] by broder
Add cluster-printing-config to cluster.
11:31 Changeset [24154] by broder
In printing-config: * Add a new debathena-cluster-printing-config package that configures the CUPS client to use printers.mit.edu.
02:33 Ticket #436 (repository and build process for patched schroot 1.3) created by geofft
The debathenificator doesn't currently support starting with a completely …
02:23 Ticket #435 (reactivate 2 regression: home directory must be world-listable) created by geofft
gkovacs reports and I confirmed with sipbtest that you can't log in to a …
01:04 Changeset [24153] by geofft
reactivate: Fix typo

11/09/09:

00:25 Ticket #434 ("Spooled PDF File Rejected" from GTK+ LPR backend) created by geofft
If you open a .jpg in Eye Of GNOME (the default JPG viewer), and print it …

11/08/09:

21:48 Changeset [24152] by geofft
In auto-update: * Slow updates to a 6-hour (desync'd) schedule during waking hours.
21:10 Changeset [24151] by geofft
reactivate: Restore shared mountpoint at /media.
21:10 Changeset [24150] by geofft
reactivate: Clean up /etc/schroot/schroot.conf. If this update happens during a login session, then reactivate 1.x will have modified schroot.conf, and schroot 1.3 will want to update that file, and athena-auto-update is unlikely to deal with this correctly. To avoid this, we clean up schroot.conf in our preinst; hopefully that happens before schroot 1.3 gets unpacked. And you don't particularly need to be in schroot.conf once you've logged in, anyway. (reactivate 2 uses chroot.d to avoid this problem.)
21:10 Changeset [24149] by geofft
reactivate: Restructure to make post-session cleanup easier. In addition, work with auto-update to lock out concurrent login sessions and updates, so as to reboot either if there was a package update requiring a reboot or if the login session cannot be cleaned up.
21:10 Changeset [24148] by geofft
reactivate: Remove a file that became unused in r23155.
21:10 Changeset [24147] by geofft
In auto-update: * Inhibit updates during a cluster login. * Write an /etc/nologin-style file in /var/run while updating.

11/04/09:

14:54 Changeset [24146] by broder
In linerva: * Also make /var/run/screen sticky after screen-cleanup runs.
14:48 Changeset [24145] by broder
In linerva: * Set mmap_min_addr to 65536.

11/02/09:

13:48 Changeset [24144] by broder
Correct for LP #430224 in our chroot build script (initctl doesn't respect policy-rc.d, so we need to move it out of the way)
13:23 Ticket #433 (syslog-config needs to use rsyslog) created by broder
It looks like rsyslog has finally replaced sysklogd. Since ubuntu-minimal …

10/31/09:

11:17 Ticket #432 (collate by default) created by geofft
Apparently when you print multiple copies through the default PDF viewer …

10/30/09:

19:54 Ticket #431 (Karmic's gdm does not support custom commands, e.g. launching the kiosk ...) created by rbasch
The version of gdm in Karmic (2.28) does not seem to support defining …
16:20 Ticket #421 (autodebathenified packages should go straight into production) closed by broder
fixed: This is now done; a18r builds go directly into production. I've also …

10/29/09:

22:25 Changeset [24143] by broder
In rs: * Rename getline to rs_getline to avoid conflicting with the getline in <stdio.h>.
15:55 Changeset [24142] by broder
Karmic is released.

10/28/09:

14:53 Ticket #369 (gdm-config needs to be entirely rewritten for Karmic’s gdm) closed by broder
fixed: Since the user list and skinning have been split out to #429 and #430
14:53 Ticket #430 (gdm-config should skin post-2.20 gdms) created by broder
Right now our debathena-gdm-config package won't make any attempt to skin …
14:52 Ticket #429 (gdm-config should set /apps/gdm/simple-greeter/disable_user_list) created by broder
This will, predictably, disable the user list that comes up and shows the …
14:48 Ticket #367 (nss-nonlocal should disallow numeric group names) closed by broder
fixed
14:47 Ticket #427 (firefox-extension uninstallable without krb4) closed by broder
fixed

10/27/09:

15:39 Changeset [24141] by broder
In linerva, dh_bash-completion is provided by the bash-completion package, not debhelper, so fix the build-deps.
15:35 Changeset [24140] by broder
In debathena-linerva, cdbs doesn't automatically run dh_bash-completion, so we need to do it.
15:24 Changeset [24139] by broder
In linerva: * Add bash completion for linerva-install. local cur cur=`_get_cword` COMPREPLY=($( apt-cache pkgnames $cur 2> /dev/null ))

10/25/09:

20:57 Changeset [24138] by broder
Add a Trac closer for r24137.
20:56 Changeset [24137] by broder
In firefox-extension: * Update the GSSAPI dependency for post-krb5-1.7.
17:40 Changeset [24136] by broder
In pam-config: * Make that a Breaks and not a Conflicts, because Conflicting with earlier-than versions is wrong.
16:37 Changeset [24135] by broder
In pam-config: * Explicitly conflict with the old libpam-krb5-config, because apparently just conflicting with diverts-usr++share++pam-configs++krb5 isn't always good enough.
15:45 Changeset [24134] by broder
Things that are not the same in shell scripts: &, &&
15:37 Changeset [24133] by broder
In xsession: * Close the conditional in quotawarn.
14:46 Changeset [24132] by broder
Add vim-nox to extra-software-nox. This adds syntax highlighting support, which is apparently what people actually want.
14:30 Ticket #428 (debathena-pidgin-wrapper doesn't respect ATHENA_USER) created by broder
So when I start pidgin with my local account of evan, it tries to log me …
14:24 Changeset [24131] by broder
In build-depends: * Version bump to recalculate dependencies.
14:21 Changeset [24130] by broder
Since Etch, vim-full has actually been a transitional package to vim-gnome. Since vim-gnome is distinctly not X-less, move vim-gnome into extra-software and punt vim-full from extra-software-nox.
14:02 Changeset [24129] by broder
In xsession: * Demote mitmailutils to a recommendation while it's uninstallable on krb4-less systems.
14:00 Ticket #427 (firefox-extension uninstallable without krb4) created by broder
firefox-extension depends on libkrb53, which no longer exists in krb4-less …
12:52 Changeset [24128] by broder
In gdm-config: * Don't configure /etc/gdm/gdm.conf{,-custom} on post-gdm-2.20 platforms. - Themes are no longer supported, so there's no point setting one - Xauthority files are now going into /var/run
01:50 Changeset [24127] by nelhage
In linerva: Fix distribution from Ubuntu's dch.
01:48 Changeset [24126] by nelhage
In linerva: * Configure bitlbee not to run its system daemon.
01:21 Changeset [24125] by geofft
In reactivate: * Rewrite to use schroot 1.3 and aufs union mounts instead of LVM. This makes logins on a Dell 760 take about 8 seconds to reach the desktop. - TODO: Reincorporate clean-up fallbacks (e.g. rebooting) of previous version. - TODO: Deal with manually modified /etc/schroot/schroot.conf.
01:07 Ticket #426 (kill dsc_setup) created by geofft
dsc_setup is really annoying and useless, and arguably helps perpetuate …

10/24/09:

23:31 Changeset [24124] by geofft
In nmh: * Conflict with dvb-apps, because that too has a /usr/bin/scan.
21:17 Ticket #208 (graphical login doesn't deal well with being unplugged) closed by broder
fixed: I moved the PAM config change into production. I'm pretty sure I'm OK with …
21:10 Ticket #379 (debathena-kerberos-config depends krb4-config, which is gone in squeeze) closed by broder
fixed: I moved this fix to production yesterday.
21:10 Ticket #319 (debathena-kerberos-config upgrade left behind obsolete conffile) closed by broder
fixed: I moved this fix to production yesterday.
20:01 Changeset [24123] by nelhage
In linerva: * Change FIRST_SYSTEM_GID to 103 to avoid creating group 101.
19:22 Ticket #425 (switch to pacmd for muting sound on cluster machines) created by geofft
I wrote in #292: > There's a related issue that …

10/23/09:

14:23 Ticket #424 (network-manager-config should name the network "Auto MIT") created by geofft
For the sake of collapsing the config with a possible per-user config that …
14:09 Changeset [24122] by andersk
In libnss-nonlocal: * New upstream version. - Disallow numeric nonlocal user/group names that look like local uid/gids.

10/22/09:

20:25 Ticket #423 (2-up printing from evince to lprng doesn't work) created by geofft
I printed my bio pset twice from evince with 2-up printing selected in the …
15:12 Changeset [24121] by broder
In gdm-config: [ Geoffrey Thomas ] [ Evan Broder ] * Move the pam-message field back into the login box, so that the new missing network connection message shows up. In pam-config: * Un-word-wrap the missing network connection message, beacuse gdm includes the carriage return, and it looks weird.
04:46 Ticket #422 (alpine doesn't respect $ATHENA_USER for sender) created by geofft
My local account on my -workstation laptop is named sipbadmin. If I …
02:24 Ticket #421 (autodebathenified packages should go straight into production) created by broder
Right now packages built by the autodebathenifier are going into proposed, …

10/21/09:

22:30 Changeset [24120] by broder
Revert r24119 (Fix a typo in /etc/issue.net.no_network). I can't read.
22:28 Ticket #393 (remove renew and add from debathena-dotfiles) closed by broder
fixed: Whoops - forgot to close this, but the fix was moved into production …
22:28 Ticket #417 (Renew doesn't work properly on Karmic) closed by broder
fixed: Whoops - forgot to close this, but the fix was moved into production …
21:50 Changeset [24119] by broder
In pam-config: * Fix a typo in /etc/issue.net.no_network.
13:30 Changeset [24118] by broder
Add fftw-dev to thirdparty-libraries at alexp's request.
09:26 Changeset [24117] by broder
Now that evolution is using GSSAPI, the krb4-enabled evolution-data-server is no longer necessary.

10/20/09:

22:16 Ticket #272 (debathena-tellme: tellme has no manpage) closed by broder
fixed
22:15 Ticket #414 (mark firefox-extension compatible with 3.5) closed by broder
fixed
22:15 Ticket #402 (evolution-wrapper should support krb5 auth) closed by broder
fixed
16:42 Changeset [24116] by broder
DEB_TRANSFORM_FILES needs to have paths with the .debathena suffix (again, kerberos-config).
16:29 Changeset [24115] by broder
And...we need to split up the stuff that triggers config-package-dev and the stuff that uses config-package-dev's definitions in kerberos-config.
16:08 Changeset [24114] by broder
In kerberos-config, if we're hacking together our own version of DEB_TRANSFORM_FILES, like we do for usr.sbin.cupsd.debathena, it needs to come after the include so we can use functions defined by config-package-dev.
15:32 Changeset [24113] by broder
Put all of the config-package-dev configuration in kerberos-config before the includes.
15:15 Changeset [24112] by broder
In kerberos-config: * Apparently /etc/apparmor.d/abstractions/kerberosclient has to still exist, so switch back to DEB_TRANSFORM_FILES for that, but keep using DEB_REMOVE_FILES for the CUPS config file.
14:33 Changeset [24111] by broder
Cleanup one more stale diversion on kerberos-config.
14:25 Changeset [24110] by broder
In kerberos-config: * Clean up the upgrade path from 1.7 by undoing the DEB_TRANSFORM_FILES before replacing it with a DEB_REMOVE_FILES.
12:34 Changeset [24109] by broder
In kerberos-config, why don't we use makefile syntax instead of shell syntax?
12:17 Changeset [24108] by broder
Use the same logic for determining at build time whether to configure krb4 as is used in the postinst for determining whether to keep krb4 configured. Otherwise systems (such as Karmic) which don't have krb4, but do come with a krb4-config, would install the transformed files and then immediately undo the transformations on upgrades.
12:17 Changeset [24107] by broder
Add missing new build-dep to maybe-krb4-config
12:10 Changeset [24106] by broder
Testing installability in maybe-krb4-config didn't work either, so instead let's examine the version of kerberos-configs that's available ot us.
11:46 Changeset [24105] by broder
In maybe-krb4-config: * Because we already have packages depending on krb4-config, it's always going to be in apt's cache. A better question is whether or not we can install the package.
11:31 Ticket #340 (Metrics gathering) closed by broder
fixed: This has been moved into production, along with documentation on the …
11:31 Changeset [24104] by broder
Move the DEB_TRANSFORM_FILES setup in kerberos-config above the config-package.mk include. Because of how make processes Makefiles, if it comes after, the krb.conf and krb.realms files never get transformed.
11:04 Changeset [24103] by broder
In kerberos-config: * Only configure krb4 on systems that have it. (Trac: #379)
10:38 Ticket #382 (Quickstation login times are unacceptable) closed by broder
fixed: This was deployed last evening. Obviously we should revisit this when we …
00:47 Changeset [24102] by broder
In the pam_krb5 config, instead of just skipping the pam_echo in case of failure, immediately die. This works around a bug in pam-auth-update where default=1 is treated differently depending on whether or not the "end" in success=end has been replaced with a number. This was causing pam-auth-update to spuriously detect changes to /etc/pam.d/common-auth. This change does have the effect that a failure of pam_krb5 will no longer bubble down to any other potential auth providers. However, I think that the scenario of (a) using >=debathena-login, (b) having a second PAM auth module you want to use that, (c) is managed by pam-auth-update and not by hand and (d) comes after pam_krb5 in pam-auth-update's ordering scheme is pretty unlikely.

10/19/09:

11:59 Changeset [24101] by rbasch
In dotfiles: * Fix the test of from's availability.

10/18/09:

02:44 Ticket #420 (How to configure VPN on Ubuntu 9.04) closed by geofft
wontfix: This is a support issue, not a bug. I've answered via e-mail.
02:34 Ticket #420 (How to configure VPN on Ubuntu 9.04) created by cgao
I was following the steps …

10/17/09:

15:04 Changeset [24100] by broder
14:58 Changeset [24099] by broder
In kerberos-config: * Reload apparmor on upgrades (Trac: #326)
14:52 Changeset [24098] by broder
Don't try to DEB_UNREMOVE the files we replace for apparmor in kerberos-configs - it's not necessary, because the files aren't vanishing or anything.
12:56 Changeset [24097] by broder
In shell-config: * Only pass -45 to kinit on systems that still have a krb4. (Trac: #417)
12:29 Changeset [24096] by broder
In dotfiles: * Stop defining add and renew in the Athena dotfiles - they should be getting defined in the system dotfiles anyway. (Trac: #393)
04:00 Ticket #419 (debathena-nmh depends on krb4) created by broder
This is a problem on platforms that don't have krb4, such as Karmic and …
03:54 Ticket #418 (pam-config enables libpam-krb524 on krb4-less systems) created by broder
Right now we're still enabling libpam-krb524 on Squeeze and Karmic. Since …
03:50 Changeset [24095] by broder
In dotfiles: * If we're not running from, don't run mailquota either - they're both provided by mitmailutils.
03:19 Changeset [24094] by broder
There's one more package in debathena-clients that depends on debathena-mitmailutils, so let's demote it to a reocommendation (and promote it to a cluster dependency) as well!

10/16/09:

23:59 Changeset [24093] by geofft
In reactivate: * Fix init script metadata (overlooked in 1.21).
17:52 Changeset [24092] by broder
In mutt-config: * Now that mutt is using GSSAPI instead of krb4, we no longer need to depend on libsasl2-krb4-mit.
17:51 Changeset [24091] by broder
Demote nmh to a recommendation as well, pending getting it working without krb4. Again, promote it to a dependency of cluser, to make sure it sticks around there.
17:17 Changeset [24090] by broder
Start building packages for Karmic by default.
17:01 Changeset [24089] by broder
In dotfiles: * Only run from at login if it's available, and demote it to a recommendation.
16:36 Changeset [24088] by broder
So long as we're not depending on mitmailutils in clients, depend on it in cluster to make sure it stays installed there.
16:29 Changeset [24087] by broder
In evolution-wrapper: * Update evolution wrapper to use username.mail.mit.edu and GSSAPI instead of Hesiod and krb4. (Trac: #402)
16:28 Changeset [24086] by broder
Demote mitmailutils to a recommendation in debathena-clients, pending us getting a version of mitmailutils that works with GSSAPI.
14:28 Changeset [24085] by broder
In tellme: * Add a manpage for tellme. (Trac: #272)

10/15/09:

19:49 Ticket #417 (Renew doesn't work properly on Karmic) created by ismith
Error: "Kerberos 4 is no longer supported". Presumably this is a result …

10/14/09:

18:27 Changeset [24084] by rbasch
In firefox-extension: * Bump the max supported version for Firefox 3.5. (Trac: #414) * Update help and home page URLs.
14:48 Changeset [24083] by broder
In reactivate: * geofft's transformation of /etc/pam.d/su was running outside the chroot, and editing the file in place, thus clobbering the symlink. We need to fix all of this in the postinst.
14:38 Changeset [24082] by broder
In reactivate: * geofft's transformation of /etc/pam.d/su in athena-login-snapshot isn't being overwritten by package upgrades, so we'll have to cleanup for it in the postinst by hand.
14:04 Changeset [24081] by broder
In reactivate: * Always lecture users trying to sudo on quickstations. * Stop editing /etc/pam.d/sudo in the snapshot setup, since we're no longer diverting it.
12:41 Changeset [24080] by broder
In cluster-login-config: * Deny everybody sudo privileges by default, then override that for the admin group. This makes sure that everybody is somewhere in the sudoers file, which also ensures that they get lectured. In reactivate: * Specify both of the lecture files in /etc/sudoers: error for everybody, and warning for the admin group. The latter overrides the former.
11:29 Changeset [24079] by broder
Add convenience repo-management scripts dacopy and daremove, and change damove to use those.
09:03 Changeset [24078] by geofft
reactivate: Use PAM even more differently on quickstations. My previous implementation was all kinds of wrong.
08:54 Ticket #416 (reactivate's transform scripts never fail) created by geofft
If for some reason the PAM config no longer includes `@include …
07:43 Changeset [24077] by geofft
reactivate: Fix .install file.
07:20 Changeset [24076] by geofft
reactivate: Use PAM more differently on quickstations.

10/13/09:

14:50 Ticket #415 (Write authenticator daemon to conspire with PyHesiodFS to get tokens) created by broder
One of the few things we still need an attach command for is acquiring …
14:32 Changeset [24075] by broder
In metrics: * If a process is being started inside the login chroot, strip off the /login prefix for path consistency. * Add an application blacklist for apps that always run in a login session.

10/12/09:

19:48 Changeset [24074] by broder
In alpine-config: * Revert 1.14, because it doesn't appear to be necessary anymore.
19:15 Changeset [24073] by broder
In alpine-config: * Replace the old creatdir patch from the debathenified alpine with equivalent code in the alpine wrapper script.
15:50 Changeset [24072] by broder
Punt the $Id$ tag from quota's Makefile - make doesn't seem to like it.
15:48 Changeset [24071] by broder
In reactivate: * Use PAM instead of the sudo lecture_file to lecture users.
14:59 Changeset [24070] by broder
In attach: * Now that liblocker doesn't require krb4, don't require it here either. * Since Debathena is building liblocker without krb4, don't build with it here either.
14:59 Changeset [24069] by broder
In locker: * Add a configure-time option to tear the NFS (and therefore the krb4) out of liblocker. * Shell out to aklog, instead of duplicating all of its code. * On Debathena, build without NFS support.
14:58 Changeset [24068] by broder
cd
13:21 Changeset [24067] by broder
Now that username.mail.mit.edu support GSSAPI, we no longer need to debathenify alpine to support krb4 and Hesiod.
Note: See TracTimeline for information about the timeline view.