Log of /trunk/aarc.master-portal/ansible

---

Revision 3081 - Directory Listing
Modified Mon Aug 15 09:00:55 2016 UTC (5 years, 10 months ago) by msalle

Purger job can be myproxy owned, also add all template secret values

---

Revision 3073 - Directory Listing
Modified Thu Jul 28 12:50:48 2016 UTC (5 years, 11 months ago) by msalle

Protect against non-matching glob. Bash has setopt nullglob, POSIX does not,
easiest is to check that file exists.

---

Revision 3071 - Directory Listing
Modified Mon Jul 25 15:34:49 2016 UTC (5 years, 11 months ago) by tamasb

add comment on scopes supported by MP Server

---

Revision 3070 - Directory Listing
Modified Mon Jul 25 14:01:53 2016 UTC (5 years, 11 months ago) by tamasb

changed default user back to root

---

Revision 3069 - Directory Listing
Modified Mon Jul 25 12:58:36 2016 UTC (5 years, 11 months ago) by tamasb

RCAuth.eu has moved into the accredited repository

---

Revision 3067 - Directory Listing
Modified Fri Jul 22 15:42:05 2016 UTC (5 years, 11 months ago) by tamasb

added HSTS support

---

Revision 3065 - Directory Listing
Modified Fri Jul 22 14:39:45 2016 UTC (5 years, 11 months ago) by tamasb

updated SSLCipher rules in httpd config

---

Revision 3063 - Directory Listing
Modified Thu Jul 21 13:40:12 2016 UTC (5 years, 11 months ago) by tamasb

deploy trust root from RPMs

fall back on deploying from tarball if first option
is not configured

---

Revision 3062 - Directory Listing
Modified Wed Jul 20 13:35:05 2016 UTC (5 years, 11 months ago) by tamasb

separete secrets into secrets_env.yml 

+ added secrets generator

---

Revision 3059 - Directory Listing
Modified Tue Jul 19 09:48:44 2016 UTC (5 years, 11 months ago) by tamasb

fix for httpoxy voulnerability (CVE-2016-5387)

---

Revision 3052 - Directory Listing
Modified Wed Jul 13 12:53:52 2016 UTC (5 years, 11 months ago) by tamasb

renamed democa.tar.gz because its not longer just a demo

---

Revision 3051 - Directory Listing
Modified Tue Jul 12 13:32:01 2016 UTC (5 years, 11 months ago) by tamasb

override default client lifetime of 1 year to 11 days

The Long Lived Proxy Certificate lifetime should match that of the EEC. This is currently hardcoded to be 11 days

---

Revision 3050 - Directory Listing
Modified Mon Jul 11 13:49:53 2016 UTC (5 years, 11 months ago) by tamasb

validators configuration for MP

---

Revision 3049 - Directory Listing
Modified Mon Jul 11 13:45:22 2016 UTC (5 years, 11 months ago) by tamasb

config allowing self-renewal of certificates

---

Revision 3024 - Directory Listing
Modified Tue May 24 11:37:13 2016 UTC (6 years, 1 month ago) by tamasb

update db handling for mysql 

so that it would match the handling of mariadb

---

Revision 3023 - Directory Listing
Modified Tue May 24 11:35:39 2016 UTC (6 years, 1 month ago) by tamasb

correct some of the displayed messages

---

Revision 3022 - Directory Listing
Modified Mon May 23 14:40:21 2016 UTC (6 years, 1 month ago) by tamasb

sample passwords for DB secrets

---

Revision 3018 - Directory Listing
Modified Fri May 20 15:16:53 2016 UTC (6 years, 1 month ago) by tamasb

add myproxy_purge in a cronjob 

this gets rid of expired / revoked certificates

---

Revision 3017 - Directory Listing
Modified Fri May 20 10:09:04 2016 UTC (6 years, 1 month ago) by tamasb

added default/maximum lifetimes to config with tolerance

---

Revision 3016 - Directory Listing
Modified Thu May 19 14:47:47 2016 UTC (6 years, 1 month ago) by tamasb

set default credstore proxy lifetime to 11 days

---

Revision 3014 - Directory Listing
Modified Wed May 11 15:35:40 2016 UTC (6 years, 1 month ago) by tamasb

updated MP server config with scope support and transaction with claims support 

---

Revision 3013 - Directory Listing
Modified Tue May 10 15:09:39 2016 UTC (6 years, 1 month ago) by tamasb

support for DB backend for the Master Portal

---

Revision 3012 - Directory Listing
Modified Mon May 9 15:24:06 2016 UTC (6 years, 1 month ago) by tamasb

updated url for epel rpm

---

Revision 3011 - Directory Listing
Modified Mon May 9 13:00:51 2016 UTC (6 years, 1 month ago) by tamasb

ssl config template differs from btw rh6 and rh7

---

Revision 3010 - Directory Listing
Modified Mon May 9 13:00:02 2016 UTC (6 years, 1 month ago) by tamasb

add support for rh7 

---

Revision 2997 - Directory Listing
Modified Wed Apr 6 15:05:11 2016 UTC (6 years, 2 months ago) by tamasb

use template instead of copy for myproxy-proxy-extfile

---

Revision 2994 - Directory Listing
Modified Tue Apr 5 13:30:10 2016 UTC (6 years, 2 months ago) by tamasb

switched from using ansible_fqdn to inventory_hostname

---

Revision 2993 - Directory Listing
Modified Tue Apr 5 13:27:02 2016 UTC (6 years, 2 months ago) by tamasb

updated readme and hostcert PLACEHOLDERs

---

Revision 2971 - Directory Listing
Modified Fri Apr 1 15:24:03 2016 UTC (6 years, 3 months ago) by tamasb

Merging modification made during EGI MP deployment

---

Revision 2910 - Directory Listing
Modified Fri Mar 18 16:15:38 2016 UTC (6 years, 3 months ago) by tamasb

removed unused template web.xml

---

Revision 2891 - Directory Listing
Modified Fri Mar 18 01:01:57 2016 UTC (6 years, 3 months ago) by tamasb

added readme file

---

Revision 2890 - Directory Listing
Modified Thu Mar 17 17:51:45 2016 UTC (6 years, 3 months ago) by tamasb

impoved master portal deploy scritps

---

Revision 2884 - Directory Listing
Added Wed Mar 16 16:07:02 2016 UTC (6 years, 3 months ago) by tamasb

moved into a subdirectory