Yet more fiddling with Gandalf as I started to tame (read: convert from American English to British English) the enrollment process. Ended up with a significant set of patches gleaned from all over the place for GNU libgmp.
Spent much of the rest of the afternoon fiddling with, securing, and learning about BIND. Turns out there's a lot of new stuff from BIND4 to BIND8 that I never really bothered to read the documentation for. I now understand, it's quite funky!
Seems I'm rusty on Apache modules. This is bad. Someone asked if we could put an IIS server on the network today too! Not good.