[00:13:37] <jamesofur>	 !log sugarcrm reassociated external IP to officetools
[00:13:38] <labs-morebots>	 Logged the message, Master
[00:13:52] <jamesofur>	 !log sugarcrm switched test crm installs to use proxy rather then external IP
[00:14:23] <labs-morebots>	 Logged the message, Master
[00:20:41] <jamesofur>	 !log sugarcrm setup apache/php/mysql/certs on officetools
[00:20:43] <labs-morebots>	 Logged the message, Master
[03:43:59] <Jamesofur>	 !log sugarcrm set up domain for officetools
[03:44:01] <labs-morebots>	 Logged the message, Master
[03:44:34] <Jamesofur>	 !log sugarcrm imported lca sugar database into new officetools instance
[03:44:36] <labs-morebots>	 Logged the message, Master
[06:16:50] <tonythomas>	 Hi ! How can I get exim4 configuration out of the default pupetization scheme for my instance ? 
[07:21:13] <Jamesofur>	 the private and public ssl keys that were installed for star.wmflabs.org don't appear to match....
[07:21:21] <Jamesofur>	 (on my new instance)
[07:51:02] <matanya>	 hi Jamesofur 
[07:51:05] <Jamesofur>	 ahoy :)
[07:51:35] <matanya>	 please explian what you are trying to achieve 
[07:52:04] <Jamesofur>	 the goal is to have https on the new instance :) but using the wmf CA is ... dirty and causes a lot of questions when it's a tool that a lot of people use (and we expect it to be used https at all times)
[07:53:19] <Jamesofur>	 I've been moving (I'm in the office now, at 1am, trying to get it finished... though at this point close to calling it at night) the LCA crm from an internal Office IT host to labs.
[07:53:47] <matanya>	 Jamesofur: the best would be to talk to coren or andrewbogott_afk 
[07:54:04] * Jamesofur  nods

[07:54:17] <matanya>	 but you will need to add some puppet classes to that instance
[07:55:03] <Jamesofur>	 aye, what classes are you thinking? I have the apache/php/ssl classes on there at the moment... but if star. is revoked they aren't very helpful
[07:55:35] * matanya  is looking it up

[07:56:26] <Jamesofur>	 <3
[07:56:40] <matanya>	 Jamesofur: did you add security groups ?
[07:57:21] <Jamesofur>	 right now it has default and web... it's possible it could need more?
[07:57:37] <matanya>	 and what is domain you need?
[07:57:41] <matanya>	 *the
[07:57:49] <Jamesofur>	 officetools.wmflabs.org
[07:58:04] <matanya>	 should be accessed from outside ?
[07:58:07] <Jamesofur>	 aye
[07:58:18] <Jamesofur>	 I have an external IP on the instance
[07:58:19] <matanya>	 so you need proxy/public ip
[07:58:24] <matanya>	 ok
[07:58:36] <matanya>	 did you open 443 in the security group ?
[07:58:46] <Jamesofur>	 yeah, tcp 
[07:59:59] <matanya>	 hmm
[08:01:49] <Jamesofur>	 the star.wmflabs.org.pem cert is a mismatch but that makes some sense if you said it was revoked (though why they put 1 public and a different private in there I have no idea)
[08:03:41] <Jamesofur>	 the private key it actually gives appears to be for a cert issues by the wmf CA and with some hacking together I was able to get working at one point but since it was an untrusted CA sends up warnings all over the place (unsurprisingly).
[08:03:56] <matanya>	 Jamesofur: you need the puppet role: certificates::star_wmflabs_org
[08:04:06] <matanya>	 as it seems
[08:04:18] <matanya>	 though star is revoked, so this is weird :)
[08:04:33] <Jamesofur>	 yeah :-/ and I have that role... none of the certs it gives me seem to work :-/
[08:04:54] <Jamesofur>	 which means either it doesn't exist, or I just haven't found it lol
[08:06:06] <matanya>	 Jamesofur: se SAL of jan 24 :  21:52 RobH: old outdated (had already beed revoked) star.wikimedia.org cert removed from fenari 
[08:07:34] <matanya>	 Jamesofur: it was replaced by geotrust ssl, known as rapidssl
[08:07:35] <Jamesofur>	 hmm, but that's for wikimedia.org ... (which I assume they replaced because I can still have https on wikimedia.org sites ;) )
[08:07:40] <Jamesofur>	 yeah
[08:09:35] <matanya>	 i'm not much of a help here :/
[08:10:30] <matanya>	 Jamesofur: when you find out, please doc it
[08:10:33] <Jamesofur>	 no worries, I appreciate it, i've been beating my head on it for hours
[08:10:37] <Jamesofur>	 will do
[11:03:57] * Betacommand  grumbles about having to re open bug 54052

[11:05:28] <petan>	 it talks!]
[11:05:45] <petan>	 !b 54052
[11:05:45] <wm-bot>	 https://bugzilla.wikimedia.org/54052
[11:08:36] <Betacommand>	 petan: Im always discovering bugs
[11:08:47] <Steinsplitter>	 petan :O is this a new feature :O?
[11:10:17] <petan>	 !say nah | Steinsplitter
[11:10:17] <wm-bot>	 Steinsplitter: nah 
[11:10:36] <Steinsplitter>	 ah :)
[11:10:39] <petan>	 !say I could always talk :) | Steinsplitter
[11:10:39] <wm-bot>	 Steinsplitter: I could always talk :) 
[11:21:49] <tonythomas>	 I want to setup an environment in which my isntance 1 (box1 ) 's exim is configured in a way that it sends email via another instance ( box2 ) acting as the smarthost. But everytime I change some settings in exim configs, the puppet over writes on next login 
[11:22:01] <tonythomas>	 how to get exim out of pupet-isation
[15:21:38] <scfc_de>	 tonythomas: The big gun for that is https://wikitech.wikimedia.org/wiki/Help:Self-hosted_puppetmaster.  I don't know (and don't think) that there is a "smaller" solution.
[15:24:11] <tonythomas>	 scfc_de: that looks good. Letme try 
[20:31:03] <SigmaWP>	 What is with the vim configuration that features a gray background with green text?
[20:44:55] <scfc_de>	 SigmaWP: https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL says: "petrb: disabled default vimrc which everybody hates on -login", so you might want to discuss that with petan (or go Emacs! :-)).
[20:52:30] <SigmaWP>	 scfc_de: Oh, it's on -dev too :(
[20:57:08] <scfc_de>	 SigmaWP: The only thing about vim I know is ":q!" :-); but I'm pretty sure you there is a ~/.vimrc or something like that.
[20:57:40] <SigmaWP>	 petan: wrt  "petrb: disabled default vimrc which everybody hates on -login", I suggest that you do the same for -dev
[20:58:02] <SigmaWP>	 scfc_de: Sadly, I'm not a vim master
[20:58:04] <SigmaWP>	 Thanks anyway