SL7 Fermilab Context

Update: fermilab-util_kcron-1.0-0.el7

Mon, 11 Sep 2017 20:17:12 +0000

Package: fermilab-util_kcron
Summary: A utility for getting Kerberos credentials in scheduled jobs

Description:
The kcron utility has a long history at Fermilab. It is useful for running automatic jobs with kerberos rights.

Changes:

fermilab-util_kcron-1.0-0.el7.x86_64 [449 KiB]

Changelog by Olga Terlyga (2017-05-09):

- Updated for EL7

Update: xtrlock-2.8-1.el7

Thu, 24 Aug 2017 14:16:50 +0000

Package: xtrlock
Summary: Minimal X display lock program

Description:
xtrlock is a very minimal X display lock program, which uses nothing except the Xlib library. It doesn't obscure the screen, it is completely idle while the display is locked and you don't type at it, and it doesn't do funny things to the X access control lists.

Changes:

xtrlock-2.8-1.el7.x86_64 [8 KiB]

Changelog by Pat Riehecky (2017-08-23):

- Initial build from Debian

Update: fermilab-conf_tcp-wrappers-1.0-3

Tue, 11 Apr 2017 16:03:01 +0000

Package: fermilab-conf_tcp-wrappers
Summary: Adds fermilab specific entries in /etc/hosts.allow and /etc/hosts.deny

Description:
This package will add entries in /etc/hosts.allow and /etc/hosts.deny which are Fermi specific. By limiting access to certain services to Fermi sites only, it increases security. Specifically, we disallow everyone outside of .fnal.gov all service on the machine and allow virtually everything within .fnal.gov domain. If you're at an off-site institution, you'll have to edit the hosts.allow file accordingly for your domain. Per: CS-Doc-1065

Changes:

fermilab-conf_tcp-wrappers-1.0-3.noarch [4 KiB]	Changelog by Pat Riehecky (2017-04-10): - Add 'stub' ssh line if missing
fermilab-conf_tcp-wrappers-1.0-2.noarch [4 KiB]	Changelog by Pat Riehecky (2016-02-23): - Add Provides old name

Update: fermilab-conf_doe-banner-login-screen-1.0-3

Mon, 10 Apr 2017 15:02:58 +0000

Package: fermilab-conf_doe-banner-login-screen
Summary: Displays the FNAL approved text for DOE notice within GUI login

Description:
The DOE requests that we publish a login banner on all systems so that people understand their rights and restrictions on the systems. Requirement from: CS-doc-5536-v1

Changes:

fermilab-conf_doe-banner-login-screen-1.0-3.noarch [4 KiB]	Changelog by Pat Riehecky (2017-04-10): - Better cleanup on uninstall
fermilab-conf_doe-banner-login-screen-1.0-2.3.noarch [4 KiB]	Changelog by Pat Riehecky (2015-10-26): - Reformat for larger screens

Update: fermilab-conf_doe-banner-console-1.0-4

Mon, 03 Apr 2017 15:51:19 +0000

Package: fermilab-conf_doe-banner-console
Summary: Includes the FNAL approved text for the DOE notice at a console

Description:
The DOE requests that we publish a login banner on all systems so that people understand their rights and restrictions on the systems. Requirement from: CS-doc-5536-v1

Changes:

fermilab-conf_doe-banner-console-1.0-4.noarch [4 KiB]	Changelog by Pat Riehecky (2017-04-03): - Put back the defaults on uninstall
fermilab-conf_doe-banner-console-1.0-3.noarch [4 KiB]	Changelog by Pat Riehecky (2016-02-25): - Also set /etc/issue

Update: cigetcert-1.16-2.el7

Mon, 06 Mar 2017 16:02:50 +0000

Package: cigetcert
Summary: Get an X.509 certificate with SAML ECP and store proxies

Description:
cigetcert gets an X.509 certificate from a SAML 2.0 Service Provider (SP) such as CILogon using the Enhanced Client and Proxy (ECP) profile. Optionally it can also get a grid proxy certificate and/or transfer the proxy to MyProxy. It was developed for the Fermilab Distributed Computing Access with Federated Identities (DCAFI) project but is intended to be usable by other projects.

Changes:

cigetcert-1.16-2.el7.noarch [37 KiB]	Changelog by Dave Dykstra (2017-03-03): - In /usr/bin/cigetcert, invoke python with the '-E' option to avoid variables like PYTHONHOME.
cigetcert-1.16-1.el7.noarch [37 KiB]	Changelog by Dave Dykstra (2016-10-18): - Fix typo in the variable name added in the last version. This was not noticed because it was caught in an exception and caused it to always behave as if a previous proxy stored in myproxy could not be used.
cigetcert-1.2-1.el7.noarch [29 KiB]	Changelog by Dave Dykstra (2016-07-08): - Try kerberos authentication first by default when the institution's IdP is known to support it, without a --kerberos option. - Add --nokerberos option. - Add support for additional default options in $CIGETCERTOPTS. - Use getpwuid() instead of $LOGNAME for current user name. - Avoid stack trace crash on el5 when previous outfile is empty. - Avoid stack trace when password prompt is interrupted. - Add wrapper script to unset PYTHONPATH and LD_LIBRARY_PATH. - Pre-compile cigetcert python source.
cigetcert-1.0-1.el7.noarch [17 KiB]	Changelog by Dave Dykstra (2016-03-01): - Remove a pylint error and a few pylint warnings

Update: fermilab-util_makehostkeys-1.0-4

Mon, 21 Nov 2016 18:02:49 +0000

Package: fermilab-util_makehostkeys
Summary: A utility for generating keytabs

Description:
The makehostkeys utility has a long history at Fermilab. It is useful for generating the traditional host/ftp principle keytabs.

Changes:

fermilab-util_makehostkeys-1.0-4.noarch [4 KiB]	Changelog by Olga Terlyga (2016-11-21): - Accepted ENHC0002853
fermilab-util_makehostkeys-1.0-3.noarch [4 KiB]	Changelog by Frank Nagy (2016-02-24): - Accepted by Authentication Services

Update: fermilab-util_rgang-3.8.0-0

Mon, 11 Apr 2016 19:03:07 +0000

Package: fermilab-util_rgang
Summary: Parrallel execution of a command on, or copying of a file.

Description:
RGANG is a tool which allows one to execute commands on or distribute files to many nodes (computers). It incorporates an algorithm to build a tree-like structure (or "worm" structure) to allow the distribution processing time to scale very well to 1000 or more nodes. When executing a command, output is buffered and presented in node specification order.

Changes:

fermilab-util_rgang-3.8.0-0.noarch [69 KiB]

Changelog by Ron Rechenmacher (2016-04-07):

- better handling of files in node specification

Update: fermilab-conf_kerberos-5.2-1.4

Tue, 05 Apr 2016 20:40:26 +0000

Package: fermilab-conf_kerberos
Summary: A krb5.conf file setup to work with the FNAL.GOV kerberos realm

Description:
This rpm provides a krb5.conf file setup to work with the FNAL.GOV kerberos realm. You can automatically customize your default KDCs by placing them one per line in /etc/krb5.kdclist

Changes:

fermilab-conf_kerberos-5.2-1.4.noarch [11 KiB]

Changelog by Frank Nagy (2016-02-10):

- Accepted by Authentication Services

Update: fermilab-util_kx509-3.1-1.el7

Tue, 22 Mar 2016 19:02:44 +0000

Package: fermilab-util_kx509
Summary: get an X.509 certificate for Fermilab using kerberos

Description:
fermilab-util_kx509 contains a kx509 command which gets an X.509 certificate for Fermilab using cigetcert with kerberos authentication.

Changes:

fermilab-util_kx509-3.1-1.el7.noarch [3 KiB]

Changelog by Dave Dykstra (2016-02-18):

- Add support for X509_USER_PROXY variable

Update: fermilab-util_ocsinventory-0.9.9-26

Tue, 15 Mar 2016 21:35:51 +0000

Package: fermilab-util_ocsinventory
Summary: OCS Inventory NG - Customized for Fermilab

Description:
Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computer configuration and software installed on the network. This version has been customized for Fermilab

Changes:

fermilab-util_ocsinventory-0.9.9-26.noarch [24 KiB]

Changelog by Connie Sieh (2016-03-15):

- Added requires for net-tools and pciutils

Update: fermilab-base_on-site-1.0-3

Mon, 29 Feb 2016 19:54:38 +0000

Package: fermilab-base_on-site
Summary: Pull in the packages required on the FNAL network

Description:
Using the network on site at Fermilab requires a some specific config settings and applications. This package will ensure those are loaded on your system.

Changes:

fermilab-base_on-site-1.0-3.noarch [2 KiB]

Changelog by Pat Riehecky (2016-02-29):

- build as noarch

Update: fermilab-util_k5push-1.0-3

Mon, 29 Feb 2016 19:47:09 +0000

Package: fermilab-util_k5push
Summary: A utility for pushing

Description:
The k5push utility has a long history at Fermilab. It is useful for pushing fresh credentials to an existing environment.

Changes:

fermilab-util_k5push-1.0-3.noarch [4 KiB]

Changelog by Frank Nagy (2016-02-23):

- Accepted by Authentication Services

Update: yum-conf-context-fermilab-1.0-6.el7

Thu, 25 Feb 2016 16:03:35 +0000

Package: yum-conf-context-fermilab
Summary: yum repo files for the SL 7 Fermilab Context

Description:
Yum repository file that point to the Scientific Linux 7 Fermilab Context. These packages may change in ABI/API incompatible ways.

Changes:

yum-conf-context-fermilab-1.0-6.el7.noarch [7 KiB]

Changelog by Pat Riehecky (2016-02-25):

- added %check

Update: fermilab-conf_apache-use-syslog-1.1-3.1

Thu, 25 Feb 2016 16:02:40 +0000

Package: fermilab-conf_apache-use-syslog
Summary: Change the default httpd.conf to use clogger and local logging

Description:
This package will reconfigure the default /etc/httpd/conf/httpd.conf to use clogger in addition to the traditional /var/log/httpd/ logging. We will enable syslog via adding: ErrorLog "| /usr/bin/logger -thttpd -plocal6.err" CustomLog "| /usr/bin/logger -thttpd -plocal6.notice" combined This package requires rsyslog configured for Fermilab's central logging service. Per: RITM0193644

Changes:

fermilab-conf_apache-use-syslog-1.1-3.1.noarch [9 KiB]

Changelog by Pat Riehecky (2016-02-25):

- Check to make sure the services are enabled before restarting them

Update: fermilab-conf_screenlock-1.0-2

Tue, 23 Feb 2016 17:59:55 +0000

Package: fermilab-conf_screenlock
Summary: Sets a default screenlock for the GUI sessions

Description:
Set a default screensaver for Gnome3, KDE, and MATE. Per: CS-Doc-1065

Changes:

fermilab-conf_screenlock-1.0-2.noarch [3 KiB]

Changelog by Pat Riehecky (2016-02-23):

- Provide old name

Update: fermilab-conf_ssh-server-1.0-4.1

Fri, 12 Feb 2016 16:02:48 +0000

Package: fermilab-conf_ssh-server
Summary: Change sshd_config to meet Fermilab's standards

Description:
The default configuration for openssh-server is not suitable for Fermilab. This RPM will update /etc/ssh/sshd_config to meet Fermilab standards. Requirement from: CS-doc-1186

Changes:

fermilab-conf_ssh-server-1.0-4.1.noarch [14 KiB]

Changelog by Pat Riehecky (2016-02-12):

- this should cover all my edge cases...

Update: fermilab-base_kerberos-1.0-2.el7

Wed, 27 Jan 2016 16:02:40 +0000

Package: fermilab-base_kerberos
Summary: Pull in the packages required to participate in FNAL Kerberos

Description:
Using the Kerberos realm at Fermilab requires a few some specific config settings and applications. This package will ensure those are loaded on your system.

Changes:

fermilab-base_kerberos-1.0-2.el7.noarch [2 KiB]

Changelog by Pat Riehecky (2016-01-27):

- Correctly noarch

Update: fermilab-conf_kerberos-local-passwords-1.0-2.1

Tue, 17 Nov 2015 19:52:49 +0000

Package: fermilab-conf_kerberos-local-passwords
Summary: Enables use of KERBEROS passwords to authenticate local users

Description:
The default configuration of Enterprise Linux is to require local passwords, which may not be suitable for all situations. This RPM will update the system pam configuration to allow FNAL.GOV KERBEROS passwords to be used in addition to any local passwords.

Changes:

fermilab-conf_kerberos-local-passwords-1.0-2.1.noarch [4 KiB]

Changelog by Pat Riehecky (2015-11-17):

- Cleaner calling of the post/preun scripts

Update: fermilab-conf_apache-no-browsable-directory-1.2-3

Wed, 11 Nov 2015 21:14:23 +0000

Package: fermilab-conf_apache-no-browsable-directory
Summary: Change the default httpd.conf to disable autoindex

Description:
This modifies the /etc/httpd/conf/httpd.conf and /etc/httpd/conf.d/userdir.conf files using augeas so that mod_autoindex does not list your directories out by default. This will remove 'Indexes' from your 'Options' list for '/var/www/html' and '/var/www/icons'. It will also remove 'Indexes' from the sample options list for mod_userdir (~username directories). For this change to take effect you must restart httpd. You can still enable this option with a .htaccess file or by editing the config file yourself. To return indexes to working state you will need to add: Options +Indexes to either your apache config or your .htaccess file See: http://httpd.apache.org/docs/2.4/mod/mod_autoindex.html Requirement from: CS-doc-4807

Changes:

fermilab-conf_apache-no-browsable-directory-1.2-3.noarch [9 KiB]

Changelog by Pat Riehecky (2015-11-11):

- Shouldn't require httpd, only trigger on it

Update: fermilab-conf_timesync-1.0-3

Mon, 02 Nov 2015 17:32:57 +0000

Package: fermilab-conf_timesync
Summary: Configures network time sync for use at Fermilab

Description:
This package configures a time daemon correctly for use at Fermilab. At this time the default time servers are listed as: 131.225.8.126 131.225.8.127 131.225.17.126 131.225.17.127 131.225.32.205

Changes:

fermilab-conf_timesync-1.0-3.noarch [32 KiB]

Changelog by Pat Riehecky (2015-11-02):

- now removes config on uninstall

Update: fermilab-conf_system-logger-1.1-5.1

Mon, 02 Nov 2015 17:32:52 +0000

Package: fermilab-conf_system-logger
Summary: Log your system logs to the Fermi central logger

Description:
This package will change your rsyslog configuration that will send all of your logs to the Fermilab central logger. Requirement from: CS-doc-5590-v1

Changes:

fermilab-conf_system-logger-1.1-5.1.noarch [3 KiB]

Changelog by Pat Riehecky (2015-11-02):

- added postun to hup the daemon

Update: fermilab-conf_ssh-client-1.0-3

Mon, 02 Nov 2015 17:32:46 +0000

Package: fermilab-conf_ssh-client
Summary: Change ssh_config to utilize Fermilab behavior

Description:
The default configuration for openssh-client does not take full advantage of the expected Fermilab openssh-server settings. This includes X11Forwarding and GSSAPI credential forwarding. This RPM will update /etc/ssh/ssh_config to meet Fermilab standards. Behavior from: CS-doc-1186

Changes:

fermilab-conf_ssh-client-1.0-3.noarch [13 KiB]

Changelog by Pat Riehecky (2015-11-02):

- Now removes config during uninstall

Update: fermilab-conf_email-gateway-1.1-3

Mon, 02 Nov 2015 17:31:52 +0000

Package: fermilab-conf_email-gateway
Summary: Configure postfix to use the FNAL email gateway

Description:
Email sent from Fermilab's network must route through an authorized SMTP server. This rpm will configure postfix to utilize an authorized gateway. See: KB0010765

Changes:

fermilab-conf_email-gateway-1.1-3.noarch [10 KiB]

Changelog by Pat Riehecky (2015-11-02):

- Now removes config during uninstall