existing, and skip sending email.

This only copies over existing schemas and does not build them.

ClearingHouse certificate.

so make them peoper Version 3 certificate. Add a driver script to handle
all the details of updating.

Delete cached ClearingHouse credential.

It only makes sense to run this at the clearinghouse.  It brings both
the local CA bundle and the bundle to be distributed to federates up
to date with respect to .../etc/genicacerts/*.pem and
.../etc/extracerts.bundle.

Any time the sources are changed, just run this script.  The local bundle is
ready immediately.  The federates will fetch the new version as they get
around to it.

It goes in $TB/etc/extracerts.bundle.  Right now, there's no way to
similarly maintain local CRLs, CA blacklists (certificates _not_ to allow
from the CH), or to refuse certificates from the CH by default, but we
can find a way to do those things if there's any need.

for Flack.

over and over. Add a flag to geni_slices, to indicate the slice is
down.

of time that slivers are allowed to hang out without being renewed.

advertisement, continue to use it.

the local CM (-m) which can then be passed to delegatecredential to
delegate to a local user.

to delegate a credential to a user. Say you want to delegate a CH
credential to a local user so they can lookup things:

boss> getchcredential | delegatecredential 'urn:publicid:IDN+emulab.net+user+XXX' resolve:0

This will spit out a delegated credential. Save that in a file and
give to the user. The user then sends that along as the credential
argument.

sides try to stitch at the same time. One side has to back off and let
the other proceed. The problem is with the slice locking, which had to
be changed to allow one side to drop the lock so the other side could
proceed. I ended up doing this with an additional stitching lock, used
only when stitching.

to generate the giant rspec.

and stash that into a directory in /usr/testbed/www/protogeni.
Needed for the protogeni flash client.

of vlan tags.