Log of /trunk/aarc.master-portal/ansible

---

Revision 3142 - Directory Listing
Modified Thu Dec 22 15:31:10 2016 UTC (5 years, 6 months ago) by msalle

Update requested proxylifetime to something reasonable: it's in sec, not msec
Remove double line

---

Revision 3136 - Directory Listing
Modified Fri Nov 18 11:30:03 2016 UTC (5 years, 7 months ago) by msalle

Fix layout to 80 columns

---

Revision 3129 - Directory Listing
Modified Fri Oct 14 14:00:36 2016 UTC (5 years, 8 months ago) by msalle

Update registration-init.jsp in different war files.

---

Revision 3117 - Directory Listing
Modified Fri Sep 30 13:24:58 2016 UTC (5 years, 9 months ago) by tamasb

configurable deployment of trust anchor

previously the TERENA trust anchor was installed only (hard coded)
but with this option any trust root can be installed from either an
rpm package or a simple PEM file and signing policy pair.

---

Revision 3116 - Directory Listing
Modified Thu Sep 29 13:25:02 2016 UTC (5 years, 9 months ago) by tamasb

fixed a typo

---

Revision 3115 - Directory Listing
Modified Thu Sep 29 13:09:55 2016 UTC (5 years, 9 months ago) by tamasb

only deploy iptable rules when MP address is given

---

Revision 3114 - Directory Listing
Modified Thu Sep 29 12:58:02 2016 UTC (5 years, 9 months ago) by tamasb

changed rpm links to package names instead

---

Revision 3093 - Directory Listing
Modified Mon Aug 22 10:15:01 2016 UTC (5 years, 10 months ago) by tamasb

blocking /authorized has to have precedence

---

Revision 3092 - Directory Listing
Modified Mon Aug 22 10:02:29 2016 UTC (5 years, 10 months ago) by tamasb

no such config (default_authorized_renewers)

---

Revision 3091 - Directory Listing
Modified Thu Aug 18 13:39:16 2016 UTC (5 years, 10 months ago) by tamasb

added some missing fields 

---

Revision 3090 - Directory Listing
Modified Wed Aug 17 12:12:16 2016 UTC (5 years, 10 months ago) by tamasb

lineinfile now backs up before making changes

---

Revision 3081 - Directory Listing
Modified Mon Aug 15 09:00:55 2016 UTC (5 years, 10 months ago) by msalle

Purger job can be myproxy owned, also add all template secret values

---

Revision 3073 - Directory Listing
Modified Thu Jul 28 12:50:48 2016 UTC (5 years, 11 months ago) by msalle

Protect against non-matching glob. Bash has setopt nullglob, POSIX does not,
easiest is to check that file exists.

---

Revision 3071 - Directory Listing
Modified Mon Jul 25 15:34:49 2016 UTC (5 years, 11 months ago) by tamasb

add comment on scopes supported by MP Server

---

Revision 3070 - Directory Listing
Modified Mon Jul 25 14:01:53 2016 UTC (5 years, 11 months ago) by tamasb

changed default user back to root

---

Revision 3069 - Directory Listing
Modified Mon Jul 25 12:58:36 2016 UTC (5 years, 11 months ago) by tamasb

RCAuth.eu has moved into the accredited repository

---

Revision 3067 - Directory Listing
Modified Fri Jul 22 15:42:05 2016 UTC (5 years, 11 months ago) by tamasb

added HSTS support

---

Revision 3065 - Directory Listing
Modified Fri Jul 22 14:39:45 2016 UTC (5 years, 11 months ago) by tamasb

updated SSLCipher rules in httpd config

---

Revision 3063 - Directory Listing
Modified Thu Jul 21 13:40:12 2016 UTC (5 years, 11 months ago) by tamasb

deploy trust root from RPMs

fall back on deploying from tarball if first option
is not configured

---

Revision 3062 - Directory Listing
Modified Wed Jul 20 13:35:05 2016 UTC (5 years, 11 months ago) by tamasb

separete secrets into secrets_env.yml 

+ added secrets generator

---

Revision 3059 - Directory Listing
Modified Tue Jul 19 09:48:44 2016 UTC (5 years, 11 months ago) by tamasb

fix for httpoxy voulnerability (CVE-2016-5387)

---

Revision 3052 - Directory Listing
Modified Wed Jul 13 12:53:52 2016 UTC (5 years, 11 months ago) by tamasb

renamed democa.tar.gz because its not longer just a demo

---

Revision 3051 - Directory Listing
Modified Tue Jul 12 13:32:01 2016 UTC (5 years, 11 months ago) by tamasb

override default client lifetime of 1 year to 11 days

The Long Lived Proxy Certificate lifetime should match that of the EEC. This is currently hardcoded to be 11 days

---

Revision 3050 - Directory Listing
Modified Mon Jul 11 13:49:53 2016 UTC (5 years, 11 months ago) by tamasb

validators configuration for MP

---

Revision 3049 - Directory Listing
Modified Mon Jul 11 13:45:22 2016 UTC (5 years, 11 months ago) by tamasb

config allowing self-renewal of certificates

---

Revision 3024 - Directory Listing
Modified Tue May 24 11:37:13 2016 UTC (6 years, 1 month ago) by tamasb

update db handling for mysql 

so that it would match the handling of mariadb

---

Revision 3023 - Directory Listing
Modified Tue May 24 11:35:39 2016 UTC (6 years, 1 month ago) by tamasb

correct some of the displayed messages

---

Revision 3022 - Directory Listing
Modified Mon May 23 14:40:21 2016 UTC (6 years, 1 month ago) by tamasb

sample passwords for DB secrets

---

Revision 3018 - Directory Listing
Modified Fri May 20 15:16:53 2016 UTC (6 years, 1 month ago) by tamasb

add myproxy_purge in a cronjob 

this gets rid of expired / revoked certificates

---

Revision 3017 - Directory Listing
Modified Fri May 20 10:09:04 2016 UTC (6 years, 1 month ago) by tamasb

added default/maximum lifetimes to config with tolerance

---

Revision 3016 - Directory Listing
Modified Thu May 19 14:47:47 2016 UTC (6 years, 1 month ago) by tamasb

set default credstore proxy lifetime to 11 days

---

Revision 3014 - Directory Listing
Modified Wed May 11 15:35:40 2016 UTC (6 years, 1 month ago) by tamasb

updated MP server config with scope support and transaction with claims support 

---

Revision 3013 - Directory Listing
Modified Tue May 10 15:09:39 2016 UTC (6 years, 1 month ago) by tamasb

support for DB backend for the Master Portal

---

Revision 3012 - Directory Listing
Modified Mon May 9 15:24:06 2016 UTC (6 years, 1 month ago) by tamasb

updated url for epel rpm

---

Revision 3011 - Directory Listing
Modified Mon May 9 13:00:51 2016 UTC (6 years, 1 month ago) by tamasb

ssl config template differs from btw rh6 and rh7

---

Revision 3010 - Directory Listing
Modified Mon May 9 13:00:02 2016 UTC (6 years, 1 month ago) by tamasb

add support for rh7 

---

Revision 2997 - Directory Listing
Modified Wed Apr 6 15:05:11 2016 UTC (6 years, 2 months ago) by tamasb

use template instead of copy for myproxy-proxy-extfile

---

Revision 2994 - Directory Listing
Modified Tue Apr 5 13:30:10 2016 UTC (6 years, 2 months ago) by tamasb

switched from using ansible_fqdn to inventory_hostname

---

Revision 2993 - Directory Listing
Modified Tue Apr 5 13:27:02 2016 UTC (6 years, 2 months ago) by tamasb

updated readme and hostcert PLACEHOLDERs

---

Revision 2971 - Directory Listing
Modified Fri Apr 1 15:24:03 2016 UTC (6 years, 3 months ago) by tamasb

Merging modification made during EGI MP deployment

---

Revision 2910 - Directory Listing
Modified Fri Mar 18 16:15:38 2016 UTC (6 years, 3 months ago) by tamasb

removed unused template web.xml

---

Revision 2891 - Directory Listing
Modified Fri Mar 18 01:01:57 2016 UTC (6 years, 3 months ago) by tamasb

added readme file

---

Revision 2890 - Directory Listing
Modified Thu Mar 17 17:51:45 2016 UTC (6 years, 3 months ago) by tamasb

impoved master portal deploy scritps

---

Revision 2884 - Directory Listing
Added Wed Mar 16 16:07:02 2016 UTC (6 years, 3 months ago) by tamasb

moved into a subdirectory