All: ---- Add a section in the cf.services.file for netatalk. Move all the fake domains to bind/fake from bind/pri. Add squid support: Search /etc/squid.conf for "YOUR OWN RULE" and add "acl localnet src $(LOCALNET)" and "http_access allow localnet". Add integrit support: Remove all relevant comments in /etc/integrit/integrit.conf and "# ! " in /etc/cron.daily.integrit. Implement meta-hints about filesharing: ftp should use "-l" and "~ users" when default users are dummy users. And the local user-init, adduser.local and deluser.local should be generic. Figure out if bind or bind9 is installed as nameserver (currently both are reloaded, which is non-optimal and _can_ lead to errors) Calibrate max open files based on available memory (as suggested at http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap6sec72.html and http://www.xenoclast.org/doc/benchmark/HTTP-benchmarking-HOWTO/node7.html): FILEMAX = (INSTALLED_RAM*256)/4 /etc/sysctl.conf: fs.file-max = FILEMAX /etc/security/limits.conf: * soft nofile 1024 /etc/security/limits.conf: * hard nofile FILEMAX Use m4 to make sharefiles and cfengine cleanup files for samba. Move zonefiles out of local-COMMON and into separate CVS modules. Check that m4 is installed before using it in cfengine! Figure out a smarter way to do the following on the command line: for host in xayide coreander jawa.homebase.dk gmork satsbutikken ida cherry.107b.dk tulle; do fping $host && ssh -t ${host/tulle/tulle -p 53} "for dir in /etc/local-COMMON /usr/local/bin /usr/local/sbin; do (cd \$dir && cvs update -dP); done; /etc/cfengine/cfengine.conf -q; /etc/local-COMMON/postfix/postfix.sh"; done Xenux: ------ Finish the cf.services.fai file DONE: ----- samba/netlogon/common.bat is XENUX-centric Correct dns (and other places like samba?) to use FQDN, not only host. Move all domain files to local-COMMON lue='author'>author
path: root/tags/4d/0a/4DF1AA96.8090700@afaics.de
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2023-06-27 09:35:08 +0200
committerJonas Smedegaard <dr@jones.dk>2023-06-27 09:35:08 +0200
commitfd54908da2b05c526dd3bee9b6dcd093214a220d (patch)
treec69c845069c99d1d01044f6fafda7c08433329c6 /tags/4d/0a/4DF1AA96.8090700@afaics.de
parentba46132213560cf3335d53560d519c0ec0190da2 (diff)
master
Diffstat (limited to 'tags/4d/0a/4DF1AA96.8090700@afaics.de')
-rw-r--r--tags/4d/0a/4DF1AA96.8090700@afaics.de/debian0
1 files changed, 0 insertions, 0 deletions