Hello Labs, Today, I've cleaned up and made sane the PAM configuration puppet places on labs instances (by relying on the debian-provided facilities rather than manual overrides).
However, instances using a self-hosted puppet master will not have picked the change up. This is essentially harmless in the short time (since it maintains status-quo) but requires a brief intervention to prevent your instances' configuration from diverging over time: Once you have pulled the master changes to your puppet master (and ran the agent on your instances), there will be a script /usr/local/sbin/cleanup-pam-config that needs to be run once as root on every instance; this restores the /etc/pam.d/ configuration to the distribution default then uses the system pam-auth-update system to apply the labs-specific settings the "right" way. Thank you, -- Marc _______________________________________________ Labs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/labs-l
