Re: sshd config change on vmgump
On 16/04/2010, Sander Temme wrote: > Folks, > > Following the recent havoc on ASF servers, new rules have been imposed on > sshd keys and the use of passwords. > > I have implemented the first part of this today by changing the sshd > configuration. Right now, the only ones that have sshd access are myself and > Infra's Joe Schaefer and Mark Thomas. > > I am seeing the following accounts on the VM: > > leosimons > bodewig > brett > billbarker > dims > mvdb > sebb > > Who (still) needs sshd access? I can migrate keys accordingly. I do still occaisionally find shell access to Gump useful for debugging failed runs, but I cannot really claim that I *need* access. If there was an easy way to get read-only access to the Gump workspaces (rather than just the reports) I would not need a login. > Next up, implementation of OPIE which has to happen by May 1 Or Else. > > Thanks, > > S. > > > -- > san...@temme.net http://www.temme.net/sander/ > PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF > > > - > To unsubscribe, e-mail: general-unsubscr...@gump.apache.org > For additional commands, e-mail: general-h...@gump.apache.org > > - To unsubscribe, e-mail: general-unsubscr...@gump.apache.org For additional commands, e-mail: general-h...@gump.apache.org
Re: VMGump account
On Apr 15, 2010, at 11:47 PM, Mark Thomas wrote: > On 16/04/2010 02:31, Sander Temme wrote: >> Created, with the regular ssh scaffolding in place. You are in sshusers and >> admin, and the latter has blanket sudo. >> >> Enjoy, >> >> S. >> > > Many thanks. > > I've got a few things to check. Depending on what needs doing, I may need to > reboot the vm. Is there anyone / any list you want me to notify before I do? Naah. I figure it crashes so often that no one will notice. You might steer clear of the actual Gump runs at midnight, 8:00 and 16:00 (Pacific): scte...@vmgump:/srv/gump/public/gump$ sudo crontab -u gump -l # "OFFICIAL" Public - The official Gump run, the one that sends email (uses JDK 1.6 and the 'live' branch) 0 0 * * * cd /srv/gump/public/gump/cron; /bin/bash gump.sh all --official # Public - these are subruns of public that don't send email but update the web site 0 8,16 * * *cd /srv/gump/public/gump/cron; /bin/bash gump.sh all # Clean up older artifacts 5 21 * * * /usr/bin/find /srv/gump/*/jars -type f -ctime +2 | /usr/bin/xargs -r /bin/rm 10 21 * * * /usr/bin/find /home/gump/.ivy -type f -ctime +7 | /usr/bin/xargs -r /bin/rm 15 21 * * * /usr/bin/find /home/gump/.m2 -type f -ctime +7 | /usr/bin/xargs -r /bin/rm #20 21 * * * /usr/bin/find /home/gump/.maven -type f -ctime +7 | /usr/bin/xargs -r /bin/rm #Clean up after POI... 0 0 * * * /bin/rm -f /tmp/*.xls If you happen to kill a run, remove /srv/gump/public/gump/gump.lock afterwards. S. -- san...@temme.net http://www.temme.net/sander/ PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF - To unsubscribe, e-mail: general-unsubscr...@gump.apache.org For additional commands, e-mail: general-h...@gump.apache.org
Re: svn commit: r934914 - in /gump/metadata/project: db-ojb.xml jakarta-slide.xml
On 16/04/2010, bode...@apache.org wrote: > Author: bodewig > Date: Fri Apr 16 14:27:48 2010 > New Revision: 934914 > > URL: http://svn.apache.org/viewvc?rev=934914&view=rev > Log: > remove references to commons-transaction > > Modified: > gump/metadata/project/db-ojb.xml > gump/metadata/project/jakarta-slide.xml Oops, sorry, forgot there might be dependencies... > Modified: gump/metadata/project/db-ojb.xml > URL: > http://svn.apache.org/viewvc/gump/metadata/project/db-ojb.xml?rev=934914&r1=934913&r2=934914&view=diff > > == > --- gump/metadata/project/db-ojb.xml (original) > +++ gump/metadata/project/db-ojb.xml Fri Apr 16 14:27:48 2010 > @@ -51,7 +51,6 @@ > > > > - > > > > @@ -117,7 +116,6 @@ > > > > - > > > > > Modified: gump/metadata/project/jakarta-slide.xml > URL: > http://svn.apache.org/viewvc/gump/metadata/project/jakarta-slide.xml?rev=934914&r1=934913&r2=934914&view=diff > > == > --- gump/metadata/project/jakarta-slide.xml (original) > +++ gump/metadata/project/jakarta-slide.xml Fri Apr 16 14:27:48 2010 > @@ -41,7 +41,6 @@ > > > > - > > > > > > - To unsubscribe, e-mail: general-unsubscr...@gump.apache.org For additional commands, e-mail: general-h...@gump.apache.org
Re: svn commit: r934914 - in /gump/metadata/project: db-ojb.xml jakarta-slide.xml
On 2010-04-16, sebb wrote: > On 16/04/2010, bode...@apache.org wrote: >> Author: bodewig >> Date: Fri Apr 16 14:27:48 2010 >> New Revision: 934914 >> URL: http://svn.apache.org/viewvc?rev=934914&view=rev >> Log: >> remove references to commons-transaction >> Modified: >> gump/metadata/project/db-ojb.xml >> gump/metadata/project/jakarta-slide.xml > Oops, sorry, forgot there might be dependencies... Well, one is dead anyway (OJB doesn't build on Java6 and hasn't seen a commit in more than two years) and the other one is heading towards the Attic, it wouldn't have done much harm. Once we start removing Slide and Taglibs things will become more difficult since there are quite a few dependencies on slide-webdavlib (will need an installed package for the Ant and Maven 1 based builds) and taglibs-standard (can be replaced by something in tomcat svn?). Stefan - To unsubscribe, e-mail: general-unsubscr...@gump.apache.org For additional commands, e-mail: general-h...@gump.apache.org
Re: svn commit: r934914 - in /gump/metadata/project: db-ojb.xml jakarta-slide.xml
On 2010-04-16, Stefan Bodewig wrote: > and taglibs-standard (can be replaced by something in tomcat svn?). It is already pulled from tomcat, I'll rename the descriptor and project to make this explicit. Stefan - To unsubscribe, e-mail: general-unsubscr...@gump.apache.org For additional commands, e-mail: general-h...@gump.apache.org
Re: sshd config change on vmgump
On 2010-04-16, Sander Temme wrote: > Stefan, > I have added you to the centralized keystore and the appropriate > group. The keys are the same keys that were in your > ~/.ssh/authorized_keys* > You should be able to log back in now. Yes, works fine, thanks. Stefan - To unsubscribe, e-mail: general-unsubscr...@gump.apache.org For additional commands, e-mail: general-h...@gump.apache.org
BATCH: All dressed up, with nowhere to go...
Dear Gumpmeisters, The following 8 notifys should have been sent *** G U M P [g...@vmgump]: Project xml-security-tests (in module xml-security) failed [g...@vmgump]: Project naming-config-test (in module directory-naming) failed [g...@vmgump]: Project JacORB-idllib (in module JacORB) failed [g...@vmgump]: Project maven (in module maven) failed [g...@vmgump]: Project portals-bridges-common (in module portals-bridges) failed [g...@vmgump]: Project maven-bootstrap (in module maven) failed [g...@vmgump]: Project portals-pluto-portal-1.0 (in module portals-pluto-1.0) failed [g...@vmgump]: Project authx-example (in module authx) failed *** G U M P [g...@vmgump]: Project xml-security-tests (in module xml-security) failed To whom it may engage... This is an automated request, but not an unsolicited one. For more information please visit http://gump.apache.org/nagged.html, and/or contact the folk at gene...@gump.apache.org. Project xml-security-tests has an issue affecting its community integration. This issue affects 1 projects. The current state of this project is 'Failed', with reason 'Build Failed'. For reference only, the following projects are affected by this: - xml-security-tests : XML-Signature Syntax and Processing Full details are available at: http://vmgump.apache.org/gump/public/xml-security/xml-security-tests/index.html That said, some information snippets are provided here. The following annotations (debug/informational/warning/error messages) were provided: -DEBUG- Dependency on jce exists, no need to add for property lib.jce. -INFO- Failed with reason build failed The following work was performed: http://vmgump.apache.org/gump/public/xml-security/xml-security-tests/gump_work/build_xml-security_xml-security-tests.html Work Name: build_xml-security_xml-security-tests (Type: Build) Work ended in a state of : Failed Elapsed: 2 mins 9 secs Command Line: /usr/lib/jvm/java-6-sun/bin/java -Djava.awt.headless=true -Dant.build.clonevm=true -Xbootclasspath/p:/srv/gump/public/workspace/xml-commons/java/external/build/xml-apis.jar:/srv/gump/public/workspace/xml-xerces2/build/xercesImpl.jar:/srv/gump/public/workspace/xml-xalan/build/serializer.jar:/srv/gump/public/workspace/xml-xalan/build/xalan-unbundled.jar org.apache.tools.ant.Main -Dgump.merge=/srv/gump/public/gump/work/merge.xml -Dbuild.sysclasspath=only -Djce.download.sha1=c1f0e975e8c8e0a0105787b249a50615b485d109 -Dlib.jce=/srv/gump/packages/jce/jce-jdk13-116.jar -Djce.download.md5=85c64cd754719a4bc8da7e9aa0e113fd test [Working Directory: /srv/gump/public/workspace/xml-security] CLASSPATH: /usr/lib/jvm/java-6-sun/lib/tools.jar:/srv/gump/public/workspace/xml-security/build/test:/srv/gump/public/workspace/xml-security:/srv/gump/public/workspace/xml-security/build/xmlsec-16042010.jar:/srv/gump/public/workspace/ant/dist/lib/ant-jmf.jar:/srv/gump/public/workspace/ant/dist/lib/ant-swing.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-resolver.jar:/srv/gump/public/workspace/ant/dist/lib/ant-apache-xalan2.jar:/srv/gump/public/workspace/ant/dist/lib/ant-junit.jar:/srv/gump/public/workspace/ant/dist/lib/ant-launcher.jar:/srv/gump/public/workspace/ant/dist/lib/ant-nodeps.jar:/srv/gump/public/workspace/ant/dist/lib/ant.jar:/srv/gump/packages/junit3.8.1/junit.jar:/srv/gump/public/workspace/xml-commons/java/build/resolver.jar:/srv/gump/public/workspace/xml-commons/java/external/build/xml-apis-ext.jar:/srv/gump/packages/jce/jce-jdk13-116.jar:/srv/gump/public/workspace/apache-commons/logging/target/commons-logging-16042010.jar:/srv/gump/public/workspace/apach e-commons/logging/target/commons-logging-api-16042010.jar:/srv/gump/public/workspace/junit/dist/junit-16042010.jar - [junit] at org.apache.xml.security.encryption.XMLCipher.decryptElement(Unknown Source) [junit] at org.apache.xml.security.encryption.XMLCipher.doFinal(Unknown Source) [junit] at org.apache.xml.security.test.encryption.BaltimoreEncTest.decryptElement(Unknown Source) [junit] at org.apache.xml.security.test.encryption.BaltimoreEncTest.test_five_element_aes192_cbc_ref(Unknown Source) [junit] [junit] Testcase: test_five_data_aes128_cbc took 0.258 sec [junit] Testcase: test_five_data_aes256_cbc_3des took 0.121 sec [junit] Caused an ERROR [junit] Illegal key size [junit] org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size [junit] Original Exception was java.security.InvalidKeyException: Illegal key size [junit] at org.apache.xml.security.encryption.XMLCipher.decryptToByteArray(Unknown Source) [junit] at org.apache.xml.security.test.encryption.BaltimoreEncTest.decryptData(Unknown Source) [junit] at org.apache.xml.security.test.encryption.BaltimoreEncTest.test_five_data_a