approves his own account!

testbed. Turns out the the steps we get to skip are mostly the more
complicated ones.

table and create a new table to hold user_pubkeys, indexed by the
comment field of the key. Change mkacct to insert newly created Emulab
keys into that table, and to regen the users authorized_keys file
from the DB. Users should no longer edit their own authorized_keys
file or the changes will be lost (I put a comment in their files).

Change the three pages that deal with keys. join/new project can now
take a file of multiple keys; each is inserted. Moved the key stuff
that was in the update user info page into a new pubkeys page that
allows users to add/sub keys easily. New key additions are password
protected.

Unrelated change: Add an audit mode to mkacct to log its output and
send it to the tblogs email. Previously, warnings and errors tended to
get lost.

adminmode). Red means DANGER!

node connects with UDP, update the nodes table status with 'up' and the
current time. This is the only thing that can happen when a remote
node connects with UDP (since there is no ssl). The idea is that a
daemon on the remote nodes will wake up periodically and send in a UDP
packet that says its alive. Since the idea is to be low overhead, I'm
using a UDP packet for now, which means I can run it fairly often on
all the clients, without it being too much of a drain. By its nature,
if the remote node can start up tmcc and get a udp packet out, its
probably in good shape. Maybe we will find out this does not work, but
if so I will have lost only "30 minutes". See related changes in
db/node_status.in.

Also, add the code that kicks out remote nodes that connect with tcp
but no ssl (it was commented out while I originally updated the ron
nodes with the new tmcc stuff).

node status.

Add a taint check for \-tcsh, per Leigh's suggestion. It fixes the bug we were seeing, oddly enough.

Add idlecheck to the web pages. To have suexec let us run idlecheck, I had to make a wrapper to go in the libexec dir, and add it to the makefile and configure. Added a warning to idlecheck about its output format being the input format for showexp_list.php3, so people change both if they change one.

name of the script, and the name of the user who ran it, in the form
"script:user" . Should be useful for accounting.

Also moved pidfile location to /var/run (was /tmp)

Changed default path, made it a #define.

Send the output logfile to TBOPS when it is non-zero so we all see
any bootup problems.

node we don't know about. This will prevent the case where a new node
is referenced within an hour of it first being added to the nodes
table.

Move Ian to Alumni.  Put SG in alpha order by last name.

Shashi just went by. I bumped the number and added a check for too
many to avoid the core dump. Need a watchdog for this, but I had to
churn another process just for that.

since the nodes now do that themselves. This means that node_reboot
now only reports a state change if it uses IPOD to reboot the node.

Banner bar to indicate what you are. Click the dot toggles the mode.
Might have the colors backwards though. Perhaps green dot should
indicate adminmode is off and red dot indicate on?

as a script in init.d that gets called when the node goes into
runlevel 6 (reboot.)

(Note, it has to get 'started' earlier, when going into runlevel 3,
because if it has not created a lockfile in /var/lock/subsys,
it will not get called when shutting down.)

This is done by creating a new directory, /etc/testbed/rc.d .
This works just like /usr/local/etc/rc.d . Right now, it
only has one script, which does a 'tmcc state REBOOTING' when
called with the 'stop' argment.

While I'm at it, checked in rc.conf - it contains some testbed
specific things now, so it should be in CVS.

(Right now, a hash is hard-coded. this must change.)

Gettin' my mini on.

(for the -G arg to pw usermod).

if its equal to bossnode.