--- doc/loncapafiles/loncapafiles.lpml	2017/02/25 20:27:22	1.946
+++ doc/loncapafiles/loncapafiles.lpml	2018/11/24 16:19:14	1.976
@@ -2,7 +2,7 @@
  "http://lpml.sourceforge.net/DTD/lpml.dtd">
 <!-- loncapafiles.lpml -->
 
-<!-- $Id: loncapafiles.lpml,v 1.946 2017/02/25 20:27:22 raeburn Exp $ -->
+<!-- $Id: loncapafiles.lpml,v 1.976 2018/11/24 16:19:14 raeburn Exp $ -->
 
 <!--
 
@@ -259,7 +259,7 @@ echo '**********************************
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/httpd/conf</targetdir>
   <targetdir dist='suse9.2 suse9.3 sles9'>etc/httpd</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/apache2</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/apache2</targetdir>
   <categoryname>standard</categoryname>
   <description>web configuration files</description>
 </directory>
@@ -267,7 +267,7 @@ echo '**********************************
   <protectionlevel>modest_delete</protectionlevel>
   <targetdir dist='default'>etc/httpd/conf/rewrites</targetdir>
   <targetdir dist='suse9.2 suse9.3 sles9'>etc/httpd/rewrites</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/apache2/rewrites</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/apache2/rewrites</targetdir>
   <categoryname>standard</categoryname>
   <description>
   default configuration files to enable/disable http:// -> https:// rewrites
@@ -280,9 +280,9 @@ echo '**********************************
   <description>configuration directory for password authentication mechanism
   </description>
 </directory>
-<directory dist='default'>
+<directory dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 fedora1 fedora2 fedora3 fedora4 fedora5 fedora6 fedora7 fedora8 fedora9 fedora10 fedora11 fedora12 fedora13 fedora14 fedora15 fedora16 fedora17 fedora18 fedora19 fedora20 fedora21 fedora22 fedora23 fedora24 fedora25 rhes4 rhes5 rhes6 rhes7 scientific5 scientific6 scientific7 centos5 centos6 centos7'>
   <protectionlevel>never_delete</protectionlevel>
-  <targetdir dist='default'>etc/rc.d/init.d</targetdir>
+  <targetdir dist='fedora1 fedora2 fedora3 fedora4 fedora5 fedora6 fedora7 fedora8 fedora9 fedora10 fedora11 fedora12 fedora13 fedora14 fedora15 fedora16 fedora17 fedora18 fedora19 fedora20 fedora21 fedora22 fedora23 fedora24 fedora25 rhes4 rhes5 rhes6 rhes7 scientific5 scientific6 scientific7 centos5 centos6 centos7'>etc/rc.d/init.d</targetdir>
   <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/init.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run during system startup</description>
@@ -290,49 +290,49 @@ echo '**********************************
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc0.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc0.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc0.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 0</description>
 </directory>
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc1.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc1.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc1.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 1</description>
 </directory>
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc2.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc2.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc2.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 2</description>
 </directory>
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc3.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc3.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc3.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 3</description>
 </directory>
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc4.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc4.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc4.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 4</description>
 </directory>
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc5.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc5.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc5.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 5</description>
 </directory>
 <directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>etc/rc.d/rc6.d</targetdir>
-  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc6.d</targetdir>
+  <targetdir dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18 suse9.2 suse9.3 sles9 sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2'>etc/rc6.d</targetdir>
   <categoryname>standard</categoryname>
   <description>scripts that run for run-level 6</description>
 </directory>
@@ -384,6 +384,17 @@ Used by lond parent to check if children
 </directory>
 <directory dist='default'>
   <protectionlevel>modest_delete</protectionlevel>
+  <targetdir dist='default'>home/httpd/html/lon-status/loncchld</targetdir>
+  <categoryname>server standard</categoryname>
+  <description>
+Used by a loncnew child which has negotiated a lond connection, to store its
+pid so loncron can send a QUIT signal to any created with insecure key exchange
+following SSL certificate verification failure, to accommodate installation of
+of updated certificate(s) on remote hosts.
+  </description>
+</directory>
+<directory dist='default'>
+  <protectionlevel>modest_delete</protectionlevel>
   <targetdir dist='default'>home/httpd/perl/tmp</targetdir>
   <categoryname>server standard</categoryname>
   <description>location where temporary files (for caching) are stored
@@ -417,6 +428,12 @@ Used by lond parent to check if children
 </directory>
 <directory dist='default'>
   <protectionlevel>modest_delete</protectionlevel>
+  <targetdir dist='default'>home/httpd/lonLTItmp</targetdir>
+  <categoryname>server standard</categoryname>
+  <description>for temporary storage of LTI nonces</description>
+</directory>
+<directory dist='default'>
+  <protectionlevel>modest_delete</protectionlevel>
   <targetdir dist='default'>home/httpd/webdav</targetdir>
   <categoryname>server standard</categoryname>
   <description>for storage of webdav DAVLock files</description>
@@ -481,6 +498,12 @@ extensions</description>
 </directory>
 <directory dist='default'>
    <protectionlevel>modest_delete</protectionlevel>
+ <targetdir dist='default'>home/httpd/balanceIDs</targetdir>
+  <categoryname>server standard</categoryname>
+  <description>cookie jar</description>
+</directory>
+<directory dist='default'>
+   <protectionlevel>modest_delete</protectionlevel>
  <targetdir dist='default'>home/httpd/scantron</targetdir>
   <categoryname>server standard</categoryname>
   <description>uploaded scantron forms directory</description>
@@ -498,6 +521,12 @@ extensions</description>
   <description>lonc's sockets (delayed)</description>
 </directory>
 <directory dist='default'>
+  <protectionlevel>modest_delete</protectionlevel>
+  <targetdir dist='default'>home/httpd/sockets/nosslverify</targetdir>
+  <categoryname>server standard</categoryname>
+  <description>Remote hosts where SSL certificate verification failed</description>
+</directory>
+<directory dist='default'>
   <protectionlevel>never_delete</protectionlevel>
   <targetdir dist='default'>home/httpd/cgi-bin</targetdir>
   <categoryname>standard</categoryname>
@@ -1024,7 +1053,7 @@ each list element consists of only two s
 <file>
 <source>loncom/loncapa.conf</source>
 <target dist='default'>etc/httpd/conf/loncapa.conf</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/loncapa.conf</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/loncapa.conf</target>
 <categoryname>conf</categoryname>
 <description>
 <p>
@@ -1067,7 +1096,7 @@ MySQL database</td></tr>
 <file type="postaboutversion">
 <source>loncom/loncapa_apache.conf</source>
 <target dist='default'>etc/httpd/conf/loncapa_apache.conf</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/loncapa_apache.conf</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/loncapa_apache.conf</target>
 <categoryname>static conf</categoryname>
 <description>
 The goal of this file is to implement all LON-CAPA specific
@@ -1087,7 +1116,7 @@ the www@localhost MySQL password, and br
 <file>
 <source>loncom/loncapa_apache_local.conf</source>
 <target dist='default'>etc/httpd/conf/loncapa_apache_local.conf</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/loncapa_apache_local.conf</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/loncapa_apache_local.conf</target>
 <categoryname>static conf</categoryname>
 <description>
 Documentation file describing how to add domain-specific Apache configuration
@@ -1100,7 +1129,7 @@ Include conf/loncapa_apache_local*.conf
 <file>
 <source>loncom/startup.pl</source>
 <target dist='default'>etc/httpd/conf/startup.pl</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/startup.pl</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/startup.pl</target>
 <categoryname>static conf</categoryname>
 <description>
 This file provides initializations for perl handlers.  It adjusts what
@@ -1111,7 +1140,7 @@ well as causing the Apache module to be
 </file>
 <link>
 <linkto>etc/apache2</linkto>
-<target dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>
+<target dist='debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>
 etc/apache2/conf
 </target>
 <categoryname>symbolic link</categoryname>
@@ -1122,7 +1151,7 @@ symbolic link to directory /etc/apache2
 <file>
 <source>loncom/rewrites/loncapa_rewrite_off.conf</source>
 <target dist='default'>etc/httpd/conf/loncapa_rewrite.conf</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/loncapa_rewrite.conf</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/loncapa_rewrite.conf</target>
 <categoryname>conf</categoryname>
 <description>
 Default rewrite file. 
@@ -1134,18 +1163,18 @@ by setting: RewriteEngine off
 <source>loncom/rewrites/loncapa_rewrite_on.conf</source>
 <target dist='default'>etc/httpd/conf/rewrites/loncapa_rewrite_on.conf</target>
 <target dist='sles9'>etc/apache/rewrites/loncapa_rewrite_on.conf</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/rewrites/loncapa_rewrite_on.conf</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/rewrites/loncapa_rewrite_on.conf</target>
 <categoryname>static conf</categoryname>
 <description>
 File to copy to /etc/apache2/loncapa_rewrite.conf (SuSE/SLES/Debian/Ubuntu LTS) or to  /etc/httpd/conf/loncapa_rewrite.conf to enable rewriting of
-external requests for http:// to https:// 
+external requests for http:// to https://
 </description>
 </file>
 <file>
 <source>loncom/rewrites/loncapa_rewrite_off.conf</source>
 <target dist='default'>etc/httpd/conf/rewrites/loncapa_rewrite_off.conf</target>
 <target dist='sles9'>etc/apache/rewrites/loncapa_rewrite_off.conf</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/rewrites/loncapa_rewrite_off.conf</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/rewrites/loncapa_rewrite_off.conf</target>
 <categoryname>static conf</categoryname>
 <description>
 File to copy to /etc/apache2/loncapa_rewrite.conf (SuSE/SLES/Debian/Ubuntu LTS) or to  /etc/httpd/conf/loncapa_rewrite.conf to disable rewriting of
@@ -1775,6 +1804,30 @@ server. Updated by loncron.
 </file>
 
 <file>
+  <source>loncom/connectionrules.tab</source>
+  <target dist='default'>home/httpd/lonTabs/connectionrules.tab</target>
+  <categoryname>www conf</categoryname>
+  <description>
+File containing contection rules for outbound (lonc) and inbound (lond) 
+connections for this host. Updated by loncron using domain configuration
+for host's domain from primary library server for domain. Called by lonssl.pm
+and used by lond and LondConnection.pm.
+  </description>
+</file>
+
+<file>
+  <source>loncom/hosttypes.tab</source>
+  <target dist='default'>home/httpd/lonTabs/hosttypes.tab</target>
+  <categoryname>www conf</categoryname>
+  <description>
+File containing classification of other hosts in the cluster into one of:
+dom, intdom, other (if shares this host's domain, if shares this host's 
+"internet domain", or neither, respectively). Updated by loncron.
+Called by lonssl.pm and used by LondConnection.pm.
+  </description>
+</file>
+
+<file>
 <source>loncom/spare.tab</source>
 <target dist='default'>home/httpd/lonTabs/spare.tab</target>
 <categoryname>conf</categoryname>
@@ -1968,6 +2021,15 @@ small script to handle the start up of t
     </description>
 </file>
 <file>
+    <source>loncom/manage_ssl_certs.pl</source>
+    <target dist='default'>home/httpd/lonCerts/manage_ssl_certs.pl</target>
+    <categoryname>script</categoryname>
+    <description>
+       Script to create LON-CAPA SSL key, and/or LON-CAPA SSL 
+       certificate signing requests for hostId, and/or hostname.
+    </description>
+</file>    
+<file>
 <source>loncom/lond</source>
 <target dist='default'>home/httpd/perl/lond</target>
 <categoryname>script</categoryname>
@@ -2501,11 +2563,66 @@ Handler to edit external resource.
 <target dist='default'>home/httpd/lib/perl/Apache/lonexttool.pm</target>
 <categoryname>handler</categoryname>
 <description>
-Handler to allow LON-CAPA to operate as an LTI Tool Consumer 
+Handler to allow LON-CAPA to operate as an LTI Consumer 
+</description>
+<status>works/unverified</status>
+</file>
+<file>
+<source>loncom/lti/ltiauth.pm</source>
+<target dist='default'>home/httpd/lib/perl/Apache/ltiauth.pm</target>
+<categoryname>handler</categoryname>
+<description>
+Handler to allow LON-CAPA to operate as an LTI Provider
 </description>
 <status>works/unverified</status>
 </file>
 <file>
+<source>loncom/lti/ltiroster.pm</source>
+<target dist='default'>home/httpd/lib/perl/Apache/ltiroster.pm</target>
+<categoryname>handler</categoryname>
+<description>
+Handler to allow LON-CAPA to service roster requests, as an LTI Consumer.
+</description>
+<status>works/unverified</status>
+</file>
+<file>
+<source>loncom/lti/ltipassback.pm</source>
+<target dist='default'>home/httpd/lib/perl/Apache/ltipassback.pm</target>
+<categoryname>handler</categoryname>
+<description>
+Handler to allow LON-CAPA to service pass back of scores from a Tool Provider,
+as an LTI Consumer.
+</description>
+<status>works/unverified</status>
+</file>
+<file>
+<source>loncom/lti/ltiutils.pm</source>
+<target dist='default'>home/httpd/lib/perl/LONCAPA/ltiutils.pm</target>
+<categoryname>system file</categoryname>
+<description>
+Common routines for LTI (Consumer or Provider)
+</description>
+<status>works/unverified</status>
+</file>
+<file>
+<source>loncom/lti/templates/LTIstandard.tool.meta</source>
+<target dist='default'>home/httpd/html/res/lib/templates/LTIstandard.tool.meta</target>
+<categoryname>interface file</categoryname>
+<description>
+Meta file which specifies package source for external tool (LTI) without passback
+of grades 
+</description>
+</file>
+<file>
+<source>loncom/lti/templates/LTIpassback.tool.meta</source>
+<target dist='default'>home/httpd/html/res/lib/templates/LTIpassback.tool.meta</target>
+<categoryname>interface file</categoryname>
+<description>
+Meta file which specifies package source for external tool (LTI) which supports passback
+of grades, and storable parameters.
+</description>
+</file>
+<file>
   <source>loncom/interface/lonpickcode.pm</source>
   <target dist='default'>home/httpd/lib/perl/Apache/lonpickcode.pm</target>
   <categoryname>handler</categoryname>
@@ -2962,6 +3079,7 @@ fromfile.gif;
 grds.gif;
 grps.gif;
 help.gif;
+helpdesk-access.gif;
 html_page_plaintext.gif;
 html_page_richtext.gif;
 list-add.gif;
@@ -3020,6 +3138,7 @@ roles.gif;
 rsrv.gif;
 scoreupfrm.gif;
 sctr.gif;
+selfenrl-queue.gif;
 self_enroll.gif;
 simple.gif;
 simpprob.gif;
@@ -3148,6 +3267,7 @@ fromfile.eps;
 grds.eps;
 grps.eps;
 help.eps;
+helpdesk-access.eps;
 html_page_plaintext.eps;
 html_page_richtext.eps;
 list-add.eps;
@@ -3205,6 +3325,7 @@ roles.eps;
 rsrv.eps;
 scoreupfrm.eps;
 sctr.eps;
+selfenrl-queue.eps;
 self_enroll.eps;
 simple.eps;
 simpprob.eps;
@@ -3282,6 +3403,7 @@ Annotation.tex;
 Authentication.tex;
 Auth_Options.tex;
 Authoring_Adding_Pictures.tex;
+Authoring_CustomResponse.tex;
 Authoring_DataResponse.tex;
 Authoring_Dynamic_Plot_Axes.tex;
 Authoring_Dynamic_Plot_Color_Selection.tex;
@@ -3295,8 +3417,11 @@ Authoring_Dynamic_Plot_Linestyle.tex;
 Authoring_Dynamic_Plot.tex;
 Authoring_Dynamic_Plot_Tics.tex;
 Authoring_Dynamic_Plot_Title_X_Y_Label.tex;
+Authoring_Equations.tex;
+Authoring_EssayResponse.tex;
 Authoring_ExternalResponse.tex;
 Authoring_Foil_Structure_Tags.tex;
+Authoring_FormulaResponse.tex;
 Authoring_Hint_Tags.tex;
 Authoring_HTML_vs_Tex.tex;
 Authoring_ImageResponse.tex;
@@ -3304,18 +3429,23 @@ Authoring_Input_Tags.tex;
 Authoring_Internal_Tags.tex;
 Authoring_Intro.tex;
 Authoring_Library_Scripts.tex;
+Authoring_MatchResponse.tex;
 Authoring_Math_Editor.tex;
 Authoring_Multilingual_Problems.tex;
 Authoring_NumericalResponse.tex;
 Authoring_OptionResponse.tex;
+Authoring_OrganicResponse.tex;
 Authoring_Output_Tags.tex;
 Authoring_Pictures_EPS.tex;
 Authoring_Piecewise_Plot.tex;
 Authoring_RadiobuttonResponse.tex;
+Authoring_RankResponse.tex;
+Authoring_ReactionResponse.tex;
 Authoring_Response_Attributes.tex;
 Authoring_Responseparam_Parameter.tex;
 Authoring_Response_Tag_Intro.tex;
 Authoring_Scripting_Tags.tex;
+Authoring_StringResponse.tex;
 Authoring_Structure_Tags.tex;
 Authoring_Surveys.tex;
 Authoring_WebDAV.tex;
@@ -3324,11 +3454,15 @@ Authoring_WebDAV_Mac_10v10.tex;
 Authoring_WebDAV_Windows_v7.tex;
 Authoring_WebDAV_Linux_Centos.tex;
 Authoring_XML_Intro.tex;
+Author_Change_Privileges.tex;
+Author_Create_Coauthor_List.tex;
 Author_LON-CAPA_Introduction.tex;
 Author_Manual_Title_Page.tex;
 Author_Menu.tex;
 Author_Numerical_and_Formula.tex;
 Author_Remote_Control.tex;
+Author_User_Logs.tex;
+Author_View_Coauthor_List.tex;
 Batch_Creation.tex;
 BridgeTask_About.tex;
 BridgeTask_Conditions.tex;
@@ -3375,6 +3509,7 @@ Content_Page_Overview.tex;
 Contextual_Help.tex;
 Course_Add_Other.tex;
 Course_Add_Student.tex;
+Course_Approve_Selfenroll.tex;
 Course_Automated_Enrollment.tex;
 Course_Broadcast_Message.tex;
 Course_Change_Privileges.tex;
@@ -3396,6 +3531,7 @@ Course_Environment.tex;
 Course_Extending_Due_Dates.tex;
 Course_Face_To_Face_Records.tex;
 Course_Feedback_Addresses.tex;
+Course_Helpdesk_Access.tex;
 Course_Homework_Performance_Overview.tex;
 Course_Manually_Grade_Problem.tex;
 Course_Manual_Title_Page.tex;
@@ -3443,6 +3579,7 @@ Course_Student_Grade_Override.tex;
 Course_Student_Work.tex;
 Course_Toplevel_Seq.tex;
 Course_User_Evaluation.tex;
+Course_User_Logs.tex;
 Course_User_Parameter.tex;
 Course_View_Class_List.tex;
 Create_Course.tex;
@@ -3468,6 +3605,7 @@ Docs_About_Simple_Page.tex;
 Docs_About_Syllabus.tex;
 Docs_Adding_Course_Doc.tex;
 Docs_Adding_External_Resource.tex;
+Docs_Adding_External_Tool.tex;
 Docs_Adding_Folders.tex;
 Docs_Adding_Pages.tex;
 Docs_Adding_Syllabus.tex;
@@ -3497,7 +3635,10 @@ Docs_String_Response.tex;
 Docs_Supplemental.tex;
 Docs_Uploading_From_Harddrive.tex;
 Docs_Verify_Content.tex;
+Docs_Viewing_Course_Doc.tex;
 Docs_Web_Page.tex;
+Domain_Change_Logs.tex;
+Domain_Change_Privileges.tex;
 Domain_Configuration_Auto_Creation.tex;
 Domain_Configuration_Auto_Enrollment.tex;
 Domain_Configuration_Auto_Updates.tex;
@@ -3524,8 +3665,16 @@ Domain_Configuration_User_Modification.t
 Domain_Configuration_User_Sessions.tex;
 Domain_Coordination_Intro.tex;
 Domain_Coordination_Overview.tex;
+Domain_Create_Users.tex;
 Domain_Crontab_Entries.tex;
+Domain_Editing_Custom_Roles.tex;
 Domain_Manual_Title_Page.tex;
+Domain_Role_Approvals.tex;
+Domain_Role_Logs.tex;
+Domain_User_Access_Logs.tex;
+Domain_Username_Approvals.tex;
+Domain_View_Privileges.tex;
+Domain_View_Users_List.tex;
 Due_Date.tex;
 Dynamic_Plot_Overview.tex;
 Edit_Syllabus.tex;
@@ -3699,6 +3848,7 @@ Search_Basic.tex;
 Searching.tex;
 Sending_Email.tex;
 Sequence_Advanced_Editor_Creation.tex;
+Sequence_Advanced_Editor_Links_Conditions.tex;
 Sequence_Definition.tex;
 Sequence_Editor_Selection.tex;
 Sequence_Page_Maps.tex;
@@ -4778,7 +4928,7 @@ loncom/html/adm/daxe/daxe.tar.gz;
 </file>
 
 <file>
-  <source>loncom/html/adm/MathJax/mathjax-MathJax-v2.6.1.zip</source>
+  <source>loncom/html/adm/MathJax/mathjax-MathJax-v2.7.4.zip</source>
   <target dist='default'>home/httpd/html/adm/MathJax</target>
   <categoryname>script</categoryname>
   <description>
@@ -4793,7 +4943,7 @@ commands
   <dependencies>
 loncom/html/adm/MathJax/commands;
 loncom/html/adm/MathJax/VERSION;
-loncom/html/adm/MathJax/mathjax-MathJax-v2.6.1.zip;
+loncom/html/adm/MathJax/mathjax-MathJax-v2.7.4.zip;
   </dependencies>
 </file>
 
@@ -5113,11 +5263,11 @@ Addons for jQuery
   <targetdir dist='default'>home/httpd/html/adm/jQuery/js/</targetdir>
   <categoryname>interface file</categoryname>
   <description>
-jQuery custom distribution of version 1.11.3, UI version 1.11.4
+jQuery custom distribution of version 3.2.1, UI version 1.12.1
   </description>
   <filenames>
-	jquery-1.11.3.min.js;
-	jquery-ui-1.11.4.custom.min.js;
+        jquery-3.2.1.min.js;
+        jquery-ui-1.12.1.custom.min.js;
   </filenames>
 </fileglob>
 
@@ -5127,10 +5277,10 @@ jQuery custom distribution of version 1.
   <targetdir dist='default'>home/httpd/html/adm/jQuery/css/smoothness/</targetdir>
   <categoryname>interface file</categoryname>
   <description>
-jQuery custom distribution of version 1.11.3, UI version 1.11.4 -- stylesheets
+jQuery custom distribution of version 3.2.1, UI version 1.12.1 -- stylesheets
   </description>
   <filenames>
-	jquery-ui-1.11.4.custom.css;
+	jquery-ui-1.12.1.custom.min.css;
   </filenames>
 </fileglob>
 
@@ -5140,7 +5290,7 @@ jQuery custom distribution of version 1.
   <targetdir dist='default'>home/httpd/html/adm/jQuery/css/smoothness/images/</targetdir>
   <categoryname>interface file</categoryname>
   <description>
-jQuery custom distribution of version 1.11.3, UI version 1.11.4 -- images for css.
+jQuery custom distribution of version 3.2.1, UI version 1.12.1 -- images for css.
   </description>
   <filenames>
   	ui-bg_flat_0_aaaaaa_40x100.png;
@@ -6607,6 +6757,16 @@ by the URL-related pattern syntax:
 <status>works/unverified</status>
 </file>
 <file>
+<source>loncom/auth/lonslotcheck.pm</source>
+<target dist='default'>home/httpd/lib/perl/Apache/lonslotcheck.pm</target>
+<categoryname>handler</categoryname>
+<description>Checks if access to a non-gradable external tool uses slots. 
+Disable subsequent PerlHandlers if a slot is in use, and slot status does
+not currently allow access.
+</description>
+<status>works/unverified</status>
+</file>
+<file>
   <source>loncom/auth/publiccheck.pm</source>
   <target dist='default'>home/httpd/lib/perl/Apache/publiccheck.pm</target>
   <categoryname>handler</categoryname>
@@ -6746,6 +6906,17 @@ loncom/build/pod2html.sh ../auth/lonrole
 </dependencies>
 </file>
 <file>
+<source>loncom/interface/lontiny.pm</source>
+<target dist='default'>home/httpd/lib/perl/Apache/lontiny.pm</target>
+<categoryname>handler</categoryname>
+<description>
+Extract domain, courseID, and symb from a shortened URL and and switch role 
+to a role in designated course.  If the user has multiple active roles in a 
+course, and one is a Coordinator role, that role will be selected, otherwise
+a list of available roles will be displayed for the user to select one.
+</description>
+</file>
+<file>
 <source>loncom/interface/lonsource.pm</source>
 <target dist='default'>home/httpd/lib/perl/Apache/lonsource.pm</target>
 <categoryname>handler</categoryname>
@@ -6880,7 +7051,7 @@ Domain information serving.
 <file>
 <source>loncom/mime.types</source>
 <target dist='default'>etc/httpd/conf/mime.types</target>
-<target dist='sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/apache2/mime.types</target>
+<target dist='sles10 sles11 sles12 sles15 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16 ubuntu18'>etc/apache2/mime.types</target>
 <categoryname>www static conf</categoryname>
 <description>Expanded mime.types</description>
 </file>
@@ -7585,7 +7756,14 @@ compiles/tth.so.i386.perl.5.20;
 compiles/tth.so.x86_64.perl.5.20;
 compiles/tth.so.i386.perl.5.22;
 compiles/tth.so.x86_64.perl.5.22;
+compiles/tth.so.i386.perl.5.24;
+compiles/tth.so.x86_64.perl.5.24;
+compiles/tth.so.i386.perl.5.26;
+compiles/tth.so.x86_64.perl.5.26;
+compiles/tth.so.i386.perl.5.28;
+compiles/tth.so.x86_64.perl.5.28;
 compiles/tth.so.x86_64.sles12;
+compiles/tth.so.x86_64.sles15;
 compiles/tth.so.i386.debian5;
 compiles/tth.so.x86_64.debian5;
 </dependencies>
@@ -8151,6 +8329,7 @@ emblem-photos.png;
 emblem-readonly.png;
 emblem-system.png;
 extres.png;
+exttool.png;
 folder-new.png;
 folder-new-22x22.png;
 format-justify-fill.png;
@@ -8198,6 +8377,7 @@ scoreupfrm.png;
 selfenrl-queue.png;
 selfenrl-queue-22x22.png;
 sequence.png;
+shorturls.png;
 simple.png;
 simpprob.png;
 start-here.png;
@@ -8464,15 +8644,24 @@ file that allows setuid password privile
 <source>loncom/init.d/loncontrol</source>
 <target dist='default'>etc/rc.d/init.d/loncontrol</target>
 <target dist='suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/init.d/loncontrol</target>
+<target dist='fedora26 fedora27 fedora28 fedora29 sles15 ubuntu18'>home/httpd/perl/loncontrol</target>
 <categoryname>root script</categoryname>
 <description>
 Controls the launching/halting of lonc, lond, and lonsql processes.
 </description>
 </file>
+<file>
+<source>loncom/init.d/loncontrol.service</source>
+<target dist="fedora26 fedora27 fedora28 fedora29 sles15 ubuntu18">etc/systemd/system/loncontrol.service</target>
+<categoryname>root script</categoryname>
+<description>
+Controls the launching/halting of lon-capa daemons by loncontrol
+</description>
+</file>
 <link>
-<linkto dist='default'>etc/rc.d/init.d/loncontrol</linkto>
+<linkto dist='fedora1 fedora2 fedora3 fedora4 fedora5 fedora6 fedora7 fedora8 fedora9 fedora10 fedora11 fedora12 fedora13 fedora14 fedora15 fedora16 fedora17 fedora18 fedora19 fedora20 fedora21 fedora22 fedora23 fedora24 fedora25 rhes4 rhes5 rhes6 rhes7 scientific5 scientific6 scientific7 centos5 centos6 centos7'>etc/rc.d/init.d/loncontrol</linkto>
 <linkto dist='suse9.2 suse9.3 sles9 sles10 sles11 sles12 suse10.1 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 debian5 debian6 ubuntu6 ubuntu8 ubuntu10 ubuntu12 ubuntu14 ubuntu16'>etc/init.d/loncontrol</linkto>
-<target dist='default'>
+<target dist='fedora1 fedora2 fedora3 fedora4 fedora5 fedora6 fedora7 fedora8 fedora9 fedora10 fedora11 fedora12 fedora13 fedora14 fedora15 fedora16 fedora17 fedora18 fedora19 fedora20 fedora21 fedora22 fedora23 fedora24 fedora25 rhes4 rhes5 rhes6 rhes7 scientific5 scientific6 scientific7 centos5 centos6 centos7'>
 etc/rc.d/rc0.d/K05loncontrol;
 etc/rc.d/rc1.d/K05loncontrol;
 etc/rc.d/rc2.d/K05loncontrol;
@@ -8503,7 +8692,6 @@ etc/rc6.d/K05loncontrol
 symbolic links to /etc/rc.d/init.d/loncontrol (redhat/fedora) or /etc/init.d/loncontrol (suse/debian) for run-levels
 </description>
 </link>
-
 <file dist="suse9.2 suse9.3 suse10.2 suse10.3 suse11.1 suse11.2 suse11.3 suse11.4 suse12.1 suse12.2 suse12.3 suse13.1 suse13.2 sles9 sles10 sles11 sles12">
   <source>loncom/init.d/loncontrol</source>
   <target>etc/rc.d/</target>
@@ -8517,7 +8705,17 @@ symbolic links to /etc/rc.d/init.d/lonco
 loncom/init.d/loncontrol
   </dependencies>
 </file>
-
+<file dist="fedora26 fedora27 fedora28 fedora29 sles15 ubuntu18">
+<source>loncom/init.d/loncontrol.service</source>
+<target>etc/systemd/system/loncontrol.service</target>
+<description>
+Controls the launching/halting of lon-capa daemons by loncontrol
+</description>
+  <installscript>
+-c '/usr/bin/systemctl enable loncontrol.service'
+  </installscript>
+  <dependencies>loncom/init.d/loncontrol.service</dependencies>
+</file>
 <file>
   <source>doc/latex/utf8.def</source>
   <target dist='default'>usr/local/loncapa/doc/utf8.def</target>
@@ -8814,6 +9012,7 @@ escape.pl;
 excise_from_db.pl;
 getties.pl;
 login_count.pl;
+memcached_dump.pl;
 modify_config_files.pl;
 move_construction_spaces.pl;
 parse_scantron.pl;