Skip to content

Idle culler #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 785 commits into from
Closed

Idle culler #2

wants to merge 785 commits into from

Conversation

kyeb
Copy link

@kyeb kyeb commented Nov 13, 2020

No description provided.

quentinmit and others added 30 commits January 21, 2020 23:41
We can't uninstall it because it's required by Nagios
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
This reverts commit 63f81cf.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
This fixes a dependency loop that was interfering with clean
shutdowns.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Instead of emptying /etc/php.d/*.ini, we simply configure PHP to
ignore /etc/php.d and use our own /etc/scripts/php.d directory
instead.

This whitelist is initialized with all modules from the php-common,
php-mysqlnd, and php-xml packages.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Apparently ldapi doesn’t work, for reasons that have not yet been
debugged.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
We've been piggybacking on the function openssh uses to set the
krb5 credential cache name in the environment.  Some time ago,
when Fedora switched to using the KEYRING type, they found that
an interaction with the upstream defaults caused that code to
prevent kinit'ing to another principal because their tickets
were in a subsidiary cache.  So, they conditionalized running
the function on having set a non-default credential cache, and
possibly on tickets having been forwarded - which means it
almost never runs in the cases we're interested in.

See RHBZ #1199363.

We can't move our code out to session.c because it doesn't have
access to the gssapi_client structure, and we can't move the
conditional into gss-serv.c because it doesn't have the session
object that knows whether a non-default cache was set.  So, break
our code out into its own function run unconditionally when built
with GSSAPI.
Port whoisd to python3

Also incidentally seems to fix a longstanding bug that caused
aliases to never be shown correctly, though it's unclear why
"Thy remembrance shall endure into all generations." - Psalm 102
This allows the installation of test servers without making any changes to the repo.

To use, write a file at inventory/local.yml like:

scripts-real-test:
  hosts:
    quentin-scripts-f30.xvm.mit.edu:
      syslog_client: yes

(i.e., the first line contains the group the host should be configured for, the middle
line contains the hostname, and any variables to override go at the end)
@kyeb kyeb closed this Nov 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants