Re: 1024x768 Resolution in console?

2004-04-24 Thread Lewis Thompson
On Fri, Apr 23, 2004 at 07:46:05PM -0500, Eric Crist wrote:
 This is for a Compaq Presario 2100 (laptop).  My beef is that my console only 
 takes up a small section of the screen (although X is full screen).  I know 
 some laptops have a 'stretch' capability, but, alas, I was a cheap bastard, 
 and this one does not.

Not sure about your splash... but have you investigated the vidcontrol
VESA_800x600 mode?  This might help a little (looks great on my laptop).

  In your kernel config you will need VESA and SC_PIXEL_MODE.  Then you
should add something to rc.conf's allscreens_flags that sets up every
screen at boot.

  Hope that's some help,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Which version of freebsd..

2004-04-25 Thread Lewis Thompson
On Sun, Apr 25, 2004 at 12:54:56AM +0200, lists wrote:
 Currently were going to reinstall all servers we have from redhat 9 to
 freebsd because redhat 9 is EOL...
 
 But after reading a few mails here that 4.9 is most likely not supported
 for a long time.. what version should we take then?

Looks like 4.10 is in beta so if you're looking for stability it might
be worth hanging on until it hits -RELEASE (or, install 4.9 and then
cvsup).

  Bear in mind 5 is still a technology release and should not be used
for production servers.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: firewall settings and dhcpd

2004-04-25 Thread Lewis Thompson
On Sun, Apr 25, 2004 at 01:33:22PM +0200, Christoph Kukulies wrote:
 I'm getting this in my log/messages:
 
 Apr 25 13:25:42 mybox dhcpd: send_packet: Permission denied
 
 Could it be that a certain firewall setting or something missing
 would be causing this?

Possibly.  It might be worth including some details of your current
firewall settings.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Upgrading a port....

2004-04-25 Thread Lewis Thompson
On Sun, Apr 25, 2004 at 01:03:52PM -0400, Ralph M. Los wrote:
   I currently have Samba 2.2.8a running.  I'd like to get up to
 the 3.0.x.x version, as I've heard there are significant advances in
 that version.  Can someone tell me if I do a 'make install' from the
 /usr/ports/net/samba-devel directory if it'll upgrade my current
 Samba 2.2.8a to 3.x.x.x?  If not, what will happen?  Also, how would I
 go about upgrading in that case?

No, that won't work.  Look at sysutils/portupgrade.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: 3ware Escalade 7506-4LP in PCI-X 66MHz slot?

2004-06-16 Thread Lewis Thompson
On Wed, Jun 16, 2004 at 01:46:23PM +0200, freebsd_daemon wrote:
 I am planing to build a small DB-server and want to use a hot-swap capable
 Raid 5 array of IDE disks for the data. I am going to use FreeBSD 4.10R.
 
 I would like to use a 3ware Escalade 7506-4LP controller which is suppost to
 require a PCI 2.2 compliant 64-bit/66MHz bus slot.
 
 The mainboard I am considering (Tomcat E7210 S5112G2NR) has a PCI-X 66MHz
 slot.
 
 Will the 3ware controller work in that slot?

Not sure if this is any help, but:  The 7-series cards work fine in
regular 32bit PCI slots.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp1fKgU43IK7.pgp
Description: PGP signature


Re: Firefox 0.9 Port

2004-06-17 Thread Lewis Thompson
On Thu, Jun 17, 2004 at 12:36:09PM -0500, Jamie Novak wrote:
 The install was successful, but as soon as I try to run the program, all
 I get is the same message repeating over and over again in my xterm:
 
   *** loading the extensions datasource
 
 The browser never actually starts and that message keeps repeating until
 I ^C out of it.

Try starting it as root then as a regular user.  It's weird.  I had that
but after long enough I got a message about too mamy open files.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgpk8qMEoxXPD.pgp
Description: PGP signature


Python application in rc.d.

2004-06-20 Thread Lewis Thompson
Hi,

I'm trying to create a port for a Python application that I want to
start from local/etc/rc.d.  The command is this:

/usr/bin/su freevo -c /usr/local/bin/freevo -fs start  /dev/null 21

  Unfortunately when I boot up I get a message about Python not being
configured/available at this time.  I'm at work at the moment and I
can't get the message but I wanted to ask now in the hopes that somebody
would have come across this before. If not I'll send another mail with
the full message when I can.

  Does anybody know how to fix this?  Thanks,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp23JOPPnMUQ.pgp
Description: PGP signature


Re: Python application in rc.d.

2004-06-20 Thread Lewis Thompson
On Sun, Jun 20, 2004 at 03:01:54PM -0400, Chuck Swiger wrote:
 Lewis Thompson wrote:
 I'm trying to create a port for a Python application that I want to
 start from local/etc/rc.d.  The command is this:
 
 /usr/bin/su freevo -c /usr/local/bin/freevo -fs start  /dev/null 21
 
   Unfortunately when I boot up I get a message about Python not being
 configured/available at this time.
 
 Does the script set $PATH to include the location where python is?  If you 
 don't list /usr/local/bin explicitly, this may be the problem...

No, PATH doesn't get set but if I run it as /usr/local/bin/freevo.sh start
from a login shell (i.e. after the system has booted) it works fine.  I
might be getting confused but I think this indicates the script is good
and it's a start-up problem.  Is this just wrong?

  Thanks for your reply,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgpDawADzThIX.pgp
Description: PGP signature


Re: Python application in rc.d.

2004-06-20 Thread Lewis Thompson
On Sun, Jun 20, 2004 at 03:56:43PM -0400, Chuck Swiger wrote:
 Lewis Thompson wrote:
 [ ... ]
 Does the script set $PATH to include the location where python is?  If 
 you don't list /usr/local/bin explicitly, this may be the problem...
 
 No, PATH doesn't get set but if I run it as /usr/local/bin/freevo.sh start
 from a login shell (i.e. after the system has booted) it works fine.  I
 might be getting confused but I think this indicates the script is good
 and it's a start-up problem.  Is this just wrong?
 
 No, you should not assume that running the command from an interactive 
 shell is the same environment that a RC startup script or a cron job runs 
 under.

You were correct!  I've added PATH=${PATH}:%%PREFIX%%/bin to the sample
file (where %%PREIFX%% obviously gets mangled).  It works great now.  I
must admit I can see a situation where somebody might install my port in
a weird PREFIX and then it still won't find python (if it's installed in
the default, /usr/local) -- but I really can't see any way to handle
that nicely.

  Thanks for the help, I'm hopefully going to submit this port soon --
I've only been working on it a few months!

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgpGVA7hd3Jlt.pgp
Description: PGP signature


Repeated polling of CD/DVD-ROM.

2004-06-21 Thread Lewis Thompson
Hi,

I have written some code that does some rather nasty stuff to determine
whether or not there is media in the drive.  It is basically this:

open('/dev/dvd', 'rb')
read(1)

  at which point if I get an exception (in Python) I know there is no
media (or it is blank).  If it throws no exception I consider the disc
to be good.

  I know how bad this is (I unfortunately don't understand ioctls and
need this to work quickly in the short term -- I plan on learning more
about this stuff and doing it properly later) but my question is this:

Does the device actually get read /every/ time I do this operation?  (it
gets called every two seconds)  It looks to me that after an initial
probe there are no further accesses, which makes me wonder if further
down some caching is done.  Anybody know what is really going on?

  Thanks,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgpLxndnLePRY.pgp
Description: PGP signature


ezm3 compilation problem.

2003-09-12 Thread Lewis Thompson
Hi,

  I'm trying to compile ezm3 (for cvsup) and I get the following error:

new source - compiling ../src/float/IEEE/LongReal.i3


***
*** runtime error:
***Segmentation violation - possible attempt to dereference NIL

***
*** runtime error:
***Subscript out of range
***file
/usr/home/jdp/ezm3/ezm3/language/modula3/m3compiler/m3bootstrap/Fre
eBSD4/pm3-FreeBSD4/boot-FreeBSD4/m3core/src/runtime/common/RTCollector.m3,
line
 1622
***

  use option @M3stackdump to get a stack trace

It's not being built from an NFS mount and my CFLAGS= -O -pipe.  Any
help would be appreciated.

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Disk problem at install (Signal 11).

2003-09-13 Thread Lewis Thompson
Hi,

I've just come to install FreeBSD 5.1-RELEASE on a new machine.  It's
got four disks in it, but right now I'm only working with one (ad0),
which is a 30GB disk that's been lying about for a bit.  I'm getting:

DEBUG: Scanning disk ad0 for swap partitions
ad0: hard error cmd=read fsbn 0 status=51 error=04
DEBUG: Signal 11 caught!  That's bad!

on the debug console just after I hit okay after defining my slices.
I'm guessing this is a hardware problem (well, the ``hard error'' gives
that away) but does anybody know if this is very serious, or... ?  Can I
work around it, or is the disk for the bin?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: nvidia kernel module ate my modem (!)

2003-09-13 Thread Lewis Thompson
Okay, most importantly.  Hah hah!  I love the topic.

On Sat, Sep 13, 2003 at 10:28:04AM +0100, Richard Dymond wrote:
 Chapter 2: Investigation. Had a fiddle with /etc/rc.conf and
 /boot/loader.conf, and discovered that if I refrain from loading the
 nvidia module at boot time, ppp works fine and dandy.

The only thing that I can think is that the Nvidia card is using a
conflicting IRQ or some other system setting that your modem also
requires.  I can't provide any more guesses than that but it might give
you something to investigate.

  Secondly, have you compiled XFree86 and the Nvidia driver without any
optimizations, etc.?  You never know, this might be the problem.

 Incidentally, I still have the linux kernel module - which nvidia
 seems to require - loaded, so I think we can cross that off the list
 of suspects.

One last thought -- have you tried using the FreeBSD agp module instead
of the Nvidia one, etc.  There are all sorts of combinations that might
just help you out.

  I can fully sympathise too.  I've just got a cute nForce2 board with a
GeForce4 MX and I tried glxgears and the system died.  I'm just about to
recompile XFree86/nvidia_drivers without optimizations.  Damn annoying.
Furthermore the onboard NIC doesn't work.  In fact... the only thing I
like is the sound.  It works!

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Vinum for root.

2003-09-13 Thread Lewis Thompson
Hi,

I'm looking to setup my new FreeBSD 5.1 server with a mirrored vinum
volume.  I've read through the necessary handbook entries but it doesn't
seem to answer my question:

  I'm wanting to do this at install time -- is this possible?  The
``Using Vinum for the Root Filesystem'' chapter doesn't seem to cover
this (as far as I can see).  If it is possible, some hints would be
greatly appreciated.

  I'm booting from a mini ISO and the console is pretty limited (I
couldn't kldload vinum).  Is this right?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Disk problem at install (Signal 11).

2003-09-13 Thread Lewis Thompson
On Sat, Sep 13, 2003 at 06:01:37PM -0700, Kris Kennaway wrote:
 On Sun, Sep 14, 2003 at 12:49:22AM +0100, Lewis Thompson wrote:
  DEBUG: Scanning disk ad0 for swap partitions
  ad0: hard error cmd=read fsbn 0 status=51 error=04
  DEBUG: Signal 11 caught!  That's bad!

 The disk is failing..pitch it.

Bah!  How did I know you'd say that!

  Ho-hum  *CRASH*.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


dd to duplicate a disk.

2003-09-14 Thread Lewis Thompson
Hi,

I'm trying to setup a vinum mirrored root fs.  I've not got very far
(although I have some excellent help once I get past this stage ;) --
I'm trying to duplicate my disk.

  Right now I have /dev/ad0s1(n) and I'd like an exactly copy of that
slice on /dev/ad2s1.  I've been trying to use dd (which I know very
little about):

dd if=/dev/ad0s1 of=/dev/ad2s1

I don't know if that's the right way to go about it or not, but I get
the error ``dd: /dev/ad2s1: Operation not permitted'', which leads me to
believe I've messed something up.  I'm in single user when trying to do
this and the /dev/ad0s1(n) partitions are mounted.

  Any tips would be greatly appreciated.  Thanks,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: OpenOffice

2003-09-14 Thread Lewis Thompson
On Sun, Sep 14, 2003 at 02:06:38PM -0400, Todd Stephens wrote:
 I am installing this from ports.  Considering everything else that is 
 getting installed along with it (gcc 3.2.3 among others), how long 
 should I expect this to take?  Anyone have any experience with this?  
 Running a K6-2 500Mhz (FBSD 4.8)

I installed it on a 533MHz Celeron and it took about 24 hours.  Give or
take.  Make sure you have lots of disk space for it.  Oh, and I think it
was 4.7-RELEASE I used, so not gcc3.

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Odd vmware / vnconfig (?) configuration.

2003-09-14 Thread Lewis Thompson
Hi,

This is quite a complicated setup, I think.

  I've got a single 80GB disk in my machine, which currently has Windows
XP and FreeBSD installed.  Since I only use WinXP from time-to-time I
would like to be able to boot it from VMware3 WS (which is installed and
working).

  FreeBSD is /dev/ad0s1 and WinXP is /dev/ad0s2.

  VMWare doesn't seem to like having the raw disk /dev/ad0 used.  I'm
guessing this is because I'm using that for FreeBSD at the same time.
Therefore -- I wanted to know if it was possible to maybe provide a sort
of symlink to /dev/ad0s2 that can be read as a file.  I thought maybe
vnconfig was the way to do this.

  If there are any VMWare xperts -- could it be possible that this
``file'' could be used as a raw disk?  Anything to do this would be very
helpful as I'm totally stuck.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


vinum root fs.

2003-09-15 Thread Lewis Thompson
Hi,

I've been trying to setup vinum as my root fs for a couple of days (with
some excellent help :).  However, I want to have /, swap, /usr and /var
mirrored.

  As I understand it I'm supposed to use something like this (/ shown
only):

drive vinumdrive0 device /dev/ad0s1h
drive vinumdrive0 device /dev/ad2s1h
volume root
plex name root.p0 org concat
plex name root.p1 org concat
sd name root.p0.s0 drive vinumdrive0 root.p0 len 524288s
sd name root.p1.s0 drive vinumdrive1 root.p1 len 524288s

  The problem here is that I don't have an ad0s1h (this was provided to
me in an example).  I thought maybe I could use ``drive vinumdrive0
device /dev/ad0s1'' instead, but that won't work either.

  Can anybody give me any hinters on how to achieve this?  Thanks very
much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


vinum root fs.

2003-09-15 Thread Lewis Thompson
[ apologies if this is a duplicate -- I think something went wrong
sending ]

Hi,

I've been trying to setup vinum as my root fs for a couple of days (with
some excellent help :).  However, I want to have /, swap, /usr and /var
mirrored.

  As I understand it I'm supposed to use something like this (/ shown
only):

drive vinumdrive0 device /dev/ad0s1h
drive vinumdrive0 device /dev/ad2s1h
volume root
plex name root.p0 org concat
plex name root.p1 org concat
sd name root.p0.s0 drive vinumdrive0 root.p0 len 524288s
sd name root.p1.s0 drive vinumdrive1 root.p1 len 524288s

  The problem here is that I don't have an ad0s1h (this was provided to
me in an example).  I thought maybe I could use ``drive vinumdrive0
device /dev/ad0s1'' instead, but that won't work either.

  Can anybody give me any hinters on how to achieve this?  Thanks very
much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


``Invalid partition table'' with two FreeBSD slices.

2003-09-16 Thread Lewis Thompson
Hi,

I've tried to add a second slice to my disk and now the system won't
boot.  I get ``Invalid partition table'' just after the POST.  I can't
quite understand why, because before I did this I had ad0s1, which
booted fine.  After that there was lots of free space.

  I added ad0s2 from a bootable mini CD -- I made it use all the
available space at the end of the disk.  I wrote the partition table and
selected to install the standard bootcode (not the boot0cfg-style one).
I didn't write any bsdlabel stuff.

  Any ideas?  I'm quite confused.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Large vinum volume -- only showing as the size of one subdisk.

2003-09-17 Thread Lewis Thompson
Hi,

I'm trying to set up a large concatenated vinum volume.  I want a volume
called ``data'' that is ~200GB in size.  Each subdisk is ~100GB (the
same size).

  However, when I mount it it only shows up as ~100GB.  Here is vinum
list (edited to show the relevant details):

purple# vinum list
2 drives:
D vinum0State: up   /dev/ad0s1h A: 2/14998 MB (0%)
D vinum1State: up   /dev/ad2s1h A: 2/14998 MB (0%)

10 volumes:
V data  State: up   Plexes:   1 Size:199 GB

9 plexes:
P data.p0 C State: up   Subdisks: 2 Size:199 GB

10 subdisks:
S data.p0.s0State: up   D: vinum0   Size: 99 GB
S data.p0.s1State: up   D: vinum1   Size: 99 GB

vinum printconfig:

purple# vinum printconfig
# Vinum configuration of purple.lewiz.org, saved at Wed Sep 17 18:50:55 2003
drive vinum0 device /dev/ad0s1h
drive vinum1 device /dev/ad2s1h
volume data
plex name data.p0 org concat vol data
sd name data.p0.s0 drive vinum0 plex data.p0 len 209386563s driveoffset 30720848s 
plexoffset 0s
sd name data.p0.s1 drive vinum1 plex data.p0 len 209386563s driveoffset 30720848s 
plexoffset 0s

  I'm hoping I've gotten the config right.  Also, I tried (while the
volume was not mounted) newfs /dev/vinum/data and I received:

purple# newfs /dev/vinum/data
newfs: wtfs: 512 bytes at sector 418773125: Inappropriate ioctl for device

  This looks like I've messed the config up at a guess.  I really don't
know.  Any help would be greatly appreciated.

-lewiz.

P.S.
  newfs -v doesn't exist?

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Large vinum volume -- only showing as the size of one subdisk.

2003-09-17 Thread Lewis Thompson
On Thu, Sep 18, 2003 at 06:50:58AM +0930, Greg 'groggy' Lehey wrote:
 On Wednesday, 17 September 2003 at 18:53:55 +0100, Lewis Thompson wrote:
I'm hoping I've gotten the config right.  Also, I tried (while the
  volume was not mounted) newfs /dev/vinum/data and I received:
 
  purple# newfs /dev/vinum/data
  newfs: wtfs: 512 bytes at sector 418773125: Inappropriate ioctl for device
 
 That's puzzling.  I've never seen this before.  What version of
 FreeBSD are you using?  Try:
 
   ktrace -i newfs /dev/vinum/data
 
 This will create a file ktrace.out.  Look at it with:
 
   kdump | less
 
 Look for the message in the output (it'll be there) and show the ioctl
 call immediately before (if it's there).  Also check if there's any
 message in dmesg output or /var/log/messages.  Otherwise I have
 alternative tricks up my sleeve.

Gah!  I didn't think.  I just got annoyed and redid the vinum stuff.  It
does work (quite beautifully) now, after one or two minor hitches.
Sorry, I can't provide much feedback for you -- other than it was
probably me that messed it up in the first place.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


unionfs and permissions.

2003-09-18 Thread Lewis Thompson
Hi,

I'm struggling to setup a ``base'' jail that I can base other jails on.
I did some reading about unionfs (the man page was quite helpful,
especially the bit about the slippery dog ;) and decided this was for
me.  I am aware it's not supported (it's already panicked my machine
twice (or more) for which I have sent reports -- they were pretty
specific to what I was doing though) fully but there seems little other
way.

  I ran into troubles when I found that the permissions of the ``base''
were not maintained.  This is somewhat annoying as stuff like
mailqueues, etc. just don't work.  I know I can change them from the
upper-level jail, but I don't want to have to do this.

  Does anybody know of a ``base'' jail solution?  Is it with unionfs?
Do permissions work?  I must confess I didn't really understand nullfs
so I don't know if that is my friend (although it looks like it is not).

  Any help on this would be much appreciated.  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


weird natd issue (maybe reinjection trouble?)

2003-09-30 Thread Lewis Thompson
# please cc me!  I've just got to university and can't get all my mail
# right now.  It'd really help a lot.  Thanks!

Hi,

I'm having trouble with natd on a dual-homed host.  I've done my best to
troubleshoot the problem but I'm no networking expert and I'm hoping
it's something I've overlooked.

  I have two machines -- clientmachine (also
black.lewiz.org/192.168.0.12) and natdmachine (also
purple.lewiz.org/192.168.0.1, lh014.halls.umist.ac.uk/130.88.163.14).
natdmachine can access the Internet fine -- I can use the web, ping,
etc.  However, when it comes to natting the connection I stumble across
problems.

  First of all ICMP ping works and I get replies.  Some nat stuff is
going on and seemingly working.  However, if I try and access the web
(through a proxy at UMIST) the trouble starts.  It seems to me that the
following is happening (the ``evidence'' from tcpdump and natd is shown
below):

clientmachine attempts to access site through proxy.  The default route
is to natdmachine.  This arrives at natdmachine and gets passed through
natd, which then duly sends out the packet to the proxy.  Fine.  The
response from the proxy comes back, goes through natd (which realises
where the packet is bound) and then... well, nothing.  It's very much as
though natd doesn't spit the packet back out.  I have searched for
reinjection problems but afaik this is not it (please tell me I'm
wrong!)

  I've not included the log outputs for an ICMP ping but it basically
shows:

22:43:20.207183 black.lewiz.org  216.239.37.99: icmp: echo request
22:43:20.288565 216.239.37.99  black.lewiz.org: icmp: echo reply

on natdmachine's local interface (sis0).  With an attempt to access the
proxy all I get is the equivalent of a request but no response (despite
it being processed by natd).

  *ANY IDEAS AT ALL* would be greatly appreciated!  I'm really stuck
here and I'm no routing/natting genius.  If it's something simple I'm
sorry (but glad).  I can provide any details required.  Thanks very
much,

# logs.  all snipped as i saw appropriate.  if you want more verbosity,
# just ask!

clientmachine# tcpdump -i rl0  (rl0 is clientmachine's only if (internal))
22:33:05.514351 black.lewiz.org.49205  kevin.umist.ac.uk.3128: S 4110987312:411
0987312(0) win 65535 mss 1460,nop,wscale 1,nop,nop,timestamp 1658030 0 (DF)

natdmachine# tcpdump -i sis0  (sis0 is internal if)
22:33:06.391596 black.lewiz.org.49205  kevin.umist.ac.uk.3128: S 4110987312:411
0987312(0) win 65535 mss 1460,nop,wscale 1,nop,nop,timestamp 1658650 0 (DF)

natdmachine# /sbin/natd -n rl0 -v  (rl0 is internet/external if)
Out [TCP]  [TCP] 192.168.0.12:49205 - 130.88.96.65:3128 aliased to
   [TCP] 130.88.163.14:49205 - 130.88.96.65:3128
In  [TCP]  [TCP] 130.88.96.65:3128 - 130.88.163.14:49205 aliased to
   [TCP] 130.88.96.65:3128 - 192.168.0.12:49205

natdmachine# tcpdump -i rl0  (rl0 is internet/external if)
22:33:06.391813 lh014.halls.umist.ac.uk.49205  kevin.umist.ac.uk.3128: S 411098
7312:4110987312(0) win 65535 mss 1460,nop,wscale 1,nop,nop,timestamp 1658650 0
 (DF)
22:33:06.392139 kevin.umist.ac.uk.3128  lh014.halls.umist.ac.uk.49205: S 355908
4666:3559084666(0) ack 4110987313 win 5792 mss 1460,nop,nop,timestamp 944903651
 1658030,nop,wscale 0 (DF)
# no response from lh014 here
22:33:06.878969 kevin.umist.ac.uk.3128  lh014.halls.umist.ac.uk.49204: S 351740
0283:3517400283(0) ack 3127196455 win 5792 mss 1460,nop,nop,timestamp 944903700
 1654158,nop,wscale 0 (DF)

-lewiz.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Crash under disk writes (vinum?)

2003-10-09 Thread Lewis Thompson
Hi,

I'm running 5.1-RELEASE (latest patch version) on a machine with a
couple of disks set up in a concatenated vinum-type config.

  Periodically if I do some ``heavy'' writes to the concatenated disk it
causes the system to panic and reboot.  I'm not sure it's because of
vinum, but my guess is that it is -- on the same two disks is a mirrored
volume which has no write problems.

  My questions are first) has anybody else heard of this?  Any solutions
or ideas? and secondly) how can I effectively go about debugging this?
This is a headless machine and it reboots often before I realise, so I
can't see the diagnostic messages.  With some debugging symbols in the
kernel can I provide useful stuff for somebody to look at?

  Will my vinum config be useful for helping resolve this issue?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Jail FS questions.

2003-10-09 Thread Lewis Thompson
On Thu, Oct 09, 2003 at 05:00:02PM -0400, Kenny Freeman wrote:
Content-Description: signed data
 I've got a 120GB drive in that system, so for me I don't really have a
 problem with space.

Yeah, same here, but the way I figure it is it's surely better to
conserve the disk space if at all possible ;)

 jails, for example:
 
 /secure/files/mail - mail spools
 
 would be shared using: (/etc/crontab entries)
 
 none /secure/files/mail
 /secure/internal/smtp/postfix/server/var/spool/mail
 rw,noexec,nosuid,nodev 0 0 none /secure/files/mail
 /secure/internal/imap/courier/server/var/spool/mail
 rw,noexec,nosuid,nodev 0 0
 
 haven't really got these up and running yet (ie. I don't really know
 if postfix + courier both work inside a jail).

I can confirm they both do ;)  I assume you mean Courier-IMAP and not
the Courier MTA.  It sucks.  Postfix or Exim are much better ;)

 Anyway, nullfs is great for remounting
 parts of the file system.

Yeah, right now I'm using NFS mounts, which is a bit ugly, to say the
least.  Since I had troubles with union I steered clear of nullfs, since
the same ``slippery dog'' warning exists ;)

  Thanks very much for sharing your ideas, eventually somebody will
write a jail HOWTO that covers all of the different methods of achieving
these things... I hope ;)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Jail FS questions.

2003-10-09 Thread Lewis Thompson
On Thu, Oct 09, 2003 at 09:17:12PM -0300, Marc G. Fournier wrote:
 On Fri, 10 Oct 2003, Lewis Thompson wrote:
 
   Anyway, nullfs is great for remounting
   parts of the file system.
 
  Yeah, right now I'm using NFS mounts, which is a bit ugly, to say the
  least.  Since I had troubles with union I steered clear of nullfs, since
  the same ``slippery dog'' warning exists ;)
 
 pluto# df -t union | wc -l
   65
 
 What kind of troubles?

Just causing system reboots.  Randomly.

  Also, for some reason it doesn't seem to propogate permissions, which
is annoying for using them as the bases for jails.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Jail FS questions.

2003-10-09 Thread Lewis Thompson
On Thu, Oct 09, 2003 at 09:31:05PM -0300, Marc G. Fournier wrote:
 On Fri, 10 Oct 2003, Lewis Thompson wrote:
  Just causing system reboots.  Randomly.
 
Also, for some reason it doesn't seem to propogate permissions, which
  is annoying for using them as the bases for jails.
 
 system reboots: what version of OS?

5.1-RELEASE, latest patches.  I think this might be the problem.  I'm
having vinum issues too.

 permissions: do you have a way I can test this?

If I use unionfs as the ``base'' for the jail then every directory seems
to be automagically owned by the person that mounted it (i.e. root).
This causes me problems for stuff like mailspool, etc.  I think this is
the way unionfs works though, not an issue I am personally having.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


burncd ``only wrote -1...'' coasting discs.

2003-10-19 Thread Lewis Thompson
Hi,

I'm trying to use burncd to write an ISO to a blank disc.  The discs are
all fine, etc. and this is a new DVD drive (writes DVDs and CDs), so I'm
guessing that is the problem.

  A simple output is as follows:

[EMAIL PROTECTED] /mnt/packages/unix/isos/hurd  sudo burncd -s max -f
/dev/acd0 data disc1.iso fixate
next writeable LBA 0
writing from file disc1.iso size 646272 KB
written this track 832 KB (0%) total 832 KB
only wrote -1 of 32768 bytes: Device busy

fixating CD, please wait..
[EMAIL PROTECTED] /mnt/packages/unix/isos/hurd 

  This leaves me a bit annoyed but with a shiny new mat for my glass.
Problem is I have quite a collection now and I'll have to start handing
them out to my friends soon.

  I'm wondering if it's because the drive doesn't have BurnProof (or
similar)?  It's a fairly hi-spec machine (XP2800) and the CPU usage at
the time was around 4%.

  Any ideas?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: burncd ``only wrote -1...'' coasting discs.

2003-10-20 Thread Lewis Thompson
On Mon, Oct 20, 2003 at 09:26:28AM -0400, Lowell Gilbert wrote:
 Lewis Thompson [EMAIL PROTECTED] writes:
 
  I'm trying to use burncd to write an ISO to a blank disc.  The discs are
  all fine, etc. and this is a new DVD drive (writes DVDs and CDs), so I'm
  guessing that is the problem.
 
 By itself, it shouldn't be.  If you're running 5.x, that's another
 story.

In true me style I am and as ever I always forget to add some relevant
detail to all posts, so this is it.  I'm using 5.1-RELEASE-p8.

  Could you point me (or just tell me ;) in the direction of where I can
find out about this problem?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Complicated ipfw/ipf forwarding.

2003-10-28 Thread Lewis Thompson
Hi,

I have a public IP address and a couple of machines sitting behind a
FreeBSD router doing NAT.  I'm using ipnat and ipf right now (although I
used to use natd/ipfw so I don't mind switching -- I started using
ipf/ipnat because of an odd problem with 5.1-RELEASE but I'm switching
back to 4.9 now) and wondered if it was possible to do forwarding based
on DNS.

  For example Apache is clever enough to support virtual hosts based on
the address requested.  Is there any way at all to do this for
forwarding on the router?  For example if I had three CNAMES for the
same IP red, pink and blue.  Could I have red.foo.bar forwarded to
192.168.0.2, pink.foo.bar forwarded to 192.168.0.3 and say blue.foo.bar
go to the local machine (i.e. the router)?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Complicated ipfw/ipf forwarding.

2003-10-28 Thread 'Lewis Thompson'
On Tue, Oct 28, 2003 at 09:39:23AM -0500, Jason Lavigne wrote:
  Could I have red.foo.bar forwarded to 192.168.0.2, pink.foo.bar
 forwarded to 192.168.0.3 and say blue.foo.bar go to the local machine
 
 wouldn't you use DNS (bind) for this? 

How?  I only have one external IP address (say 1.2.3.4) but behind the
NAT machine I have many.  However, I have a.foo.com, b.foo.com and
c.foo.com.  I want some IP forwarding software to rewrite the
destination address from 1.2.3.4 based on the CNAME entry (in the same
way Apache can do).

  Does that make any more sense?  Or am I missing the point?  Thanks a
lot,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: 4.9-RELEASE jails and named

2003-11-06 Thread Lewis Thompson
On Thu, Nov 06, 2003 at 06:46:51PM -0600, Chris wrote:
 At least pings from the outside world can get to the host server
 but once at the host server, how do I get that traffic routed to the
 correct jail/website (local IP address)?

By the sounds of it you have one external IP address but three jails
(each running on a 192.168.x.x address).  If you want to be able to
forward requests for different domains to internal jails based on the
hostname, this is not possible.

  The only way to do this is (that I know of) is to use a single Apache
server with Virtual hosts.  Otherwise, you will need to obtain at least
two more external IP addresses.  Of course, you could also run the web
servers on different ports...

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


sftp mount?

2003-11-07 Thread Lewis Thompson
Hi,

I'm wondering if there might be any way to mount an sftp ``filesystem''?
At my university everything is firewalled and the only way I can
transfer files to/from my account is to use sftp -- but that gets quite
painful after a while.

  I was wondering if anybody knew a way I might achieve what could
essentially be described as mounting an sftp ``export''?  Maybe I could
specify an argument that sets the logical root?

  So:

mount_sftp --root=/home/lewiz foo.bar.com /remote_home

would provide /home/lewiz on foo.bar.com at /remote_host?  Is this
possible in any way at all?  Or can anybody suggest any other way I
might achieve something similar?  Bear in mind I am actually restricted
to sftp/ssh.

  Thanks very much!

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: sftp mount?

2003-11-07 Thread Lewis Thompson
On Fri, Nov 07, 2003 at 05:56:43PM +0300, Odhiambo Washington wrote:
 * Lewis Thompson [EMAIL PROTECTED] [20031107 17:28]: wrote:
  At my university everything is firewalled and the only way I can
  transfer files to/from my account is to use sftp -- but that gets quite
  painful after a while.
 
 What do you mean by quite painful? sftp should be very easy to use

Yeah, it is fairly easy to use but it's still annoying to be doing it.
In reality what I want is to edit the remote files directly.  I don't
want to be copying back/forth.  It can't really be automated either,
since I'm not doing the same task over and over.

 Basically you have to ask the folks administering your systems if they
 allow NFS and I doubt it already.

No, they don't.  Pretty much the only thing allowed is ssh/sftp.

  Or can anybody suggest any other way I might achieve something similar?
  Bear in mind I am actually restricted to sftp/ssh.
 
 Forget your ideas. Tell us what it is that you want to be doing.

I want my remote home directory (available just by ssh) to be
transparently available from a local directory :P

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: sftp mount?

2003-11-07 Thread Lewis Thompson
On Sat, Nov 08, 2003 at 11:22:57AM +1030, Malcolm Kay wrote:
 On Sat, 8 Nov 2003 01:31, Lewis Thompson wrote:
  Yeah, it is fairly easy to use but it's still annoying to be doing it.
  In reality what I want is to edit the remote files directly.  I don't
  want to be copying back/forth.  It can't really be automated either,
  since I'm not doing the same task over and over.
 
 Am I missing something? To edit the remote files *directly*, login
 via ssh and edit. 

Hehe.  I'm hacking java stuff and I have no X11 forwarding (well, I
actually do but it's horrendously slow ;).

  Thanks,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Network timeout.

2004-01-14 Thread Lewis Thompson
Hi,

I'm having problems with my network connection timing out during large
transfers.

  It's connected to a 10Mbit hub so it's not topping out at the card's
maximum throughput.

  Originally I had a Realtek 8139 card but yesterday I dumped that in
favour of a Netgear FA311 (sis chipset) and this seemed to solve all
timeout problems of sustained transfers (saturating the connection for a
sustained period of time).

  However, I've just had a couple more timeouts in the last few hours.
Obviously I was never sure it was the NIC in the first place but I can't
ignore the fact I had a good 20GB transferred without problem yesterday
(as opposed to usually around 1GB before the card dies).

  Data is being uploaded to a Samba server, which reports no errors in
the log (and I have no problems uploading a 100Mbit from inside my
network).  The server is running 4.9-RELEASE and the drive the data is
going to is a vinum volume (in case that has any bearing).

  I'm using ipnat to forward port 139 to inside a jail.  Finally, my IP
is assigned by a DHCP server -- the lease length is 24h but my IP is
static (for the last four months, anyway ;).

  Any suggestions for the best way to go about tracking the problem
down?  If anybody needs any more details just ask and I'll do my best to
provide.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Big troubles running FreeBSD on a Shuttle nForce2

2004-01-20 Thread Lewis Thompson
On Tue, Jan 20, 2004 at 09:08:53PM +, anubis wrote:
 On Tue, 20 Jan 2004 02:26 am, Raphael Dinge wrote:
  I've installed a long ago FreeBSD 5.1 on my mother's computer which
  is a shuttle with nvidia nforce2 motherboard.  The computer crashes
  for reasons I can't explain.  Since 5.2 was out, I installed it, and
  the problems are still consistent.

 There are a number of issues with this kind of machine and they arent
 limited to freebsd.  We have a number of these machines running windas
 at work.  1 works perfectly and the others are a bit flakey.  We had a
 long look at this problem  and what it comes down to is these machines
 have shared memory for the video.  They are very fussy about what kind
 of ram they use.  This is why when you start using the video heavily
 there is problems.

 Our good machine used good ram and the other funky ones use
 unsupported ram.

 There are 2 possible solutions.  One solution is to look at the nvidia
 site and only use the ram they suggest for igp boards.  Second
 solution is put in a seperate video card.

I am using a stick of Crucial 256MB DDR266 PC2100 RAM.  I picked it up a
few months ago from www.ebuyer.com for £29.99.

  I have no problems with this, so it might be worth checking out.

  What I'd suggest is swap the RAM from your Shuttle to your Mum's
Shuttle and see how you get on.  If they switch around you can really be
sure it is the RAM.

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Wrong pixmaps directory (port problem).

2004-01-20 Thread Lewis Thompson
Hi,

I'm trying to create a port and everything is working fine, except that
the pixmaps get installed in /usr/X11R6/share/pixmaps/app instead of
/usr/X11R6/share/gnome/pixmaps/app.

  Apart from these pixmaps there is just the application binary itself.

  Can anybody suggest how I can get it to install the pixmaps in the
correct location?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Apache2 mod_auth_ldap (FreeBSD-specific problem?)

2004-02-06 Thread Lewis Thompson
Hi,

I've got a working Apache2 server that I've just recompiled to support
mod_auth_ldap.

  The ldap stuff all works great (I'm using it via Samba).  However,
when I set up LDAP for authentication in my .htaccess file:

AuthLDAPURL ldap://yellow.lewiz.org/ou=People,dc=lewiz,dc=org?uid
require user lewiz

  and try and authenticate I get the following in my Apache error log:

[notice] child pid 99543 exit signal Segmentation fault (11)

  I've done some Googling and this appears to often be associated with
mod_php4 and mod_auth_ldap being compiled against different LDAP SDKs.
To my knowledge this is not the case (I would love some help determining
for certain if this is correct) -- I only have OpenLDAP21.

  So, as it appears to not be the common problem I wonder whether it
might be FreeBSD-specific.  Has anybody else run into this?  Solutions?
Suggestions?  Any help would be greatly appreciated :)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


X11 forwarding (with ``screen'' option)?

2004-02-07 Thread Lewis Thompson
Hi,

I'm experimenting with X11 forwarding and I have it working so I can ssh
to my server and fire up an application just great.  This is forwarded
to my laptop and works fine.

  However, I want to run something that is mostly going on in the
background (non-interactive) but my Internet link is never perfect.

  Is there any such thing as screen for X applications?  Would vnc work
for just one application, or would it create unnecessary overhead?  Any
other suggestions?

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: X11 forwarding (with ``screen'' option)?

2004-02-08 Thread Lewis Thompson
On Sat, Feb 07, 2004 at 02:43:05PM -0800, Kris Kennaway wrote:
 On Sat, Feb 07, 2004 at 12:16:00PM +, Lewis Thompson wrote:
Is there any such thing as screen for X applications?

 There's xmove, but it's a bit buggy.  It's a great idea though, I wish
 someone would make it work better.

This is great!  I spent quite a while figuring out how to get it to work
(there isn't a great deal available on the Internet, which is a real
pity).  When I asked for a screen for X I really didn't quite expect
that is exactly what I'd get.

  I think I might try and figure out how this works in detail and have a
go at hacking together a HOWTO or brief tutorial.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


xmove over SSH.

2004-02-08 Thread Lewis Thompson
Hi,

At Kris Kennaway's suggestion I have been trying out xmove, which allows
me to suspend an X app, move it between X displays, etc.

  I've got this working great on one machine (actually a jail), where my
sshd_config has:

X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost no

  I start xmove and it prints:

Implementing MIT-MAGIC-COOKIE-1 user authentication
XMove 2.0 ready.

  However.  On another machine (not a jail), which the same sshd_config,
except with X11UseLocalhost yes, I only get this message:

XMove 2.0 ready.

i.e. it doesn't seem to read my MIT magic cookie.

  I checked this by changing the X11UseLocalhost to no on the
problematic machine and xmove then reads the cookie.  However, with this
setting I am unable to get any display forwarded, even something simple
like xclock without any xmove.

  Any suggestions how I might fix this one?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Shell script containing passwords.

2004-02-09 Thread Lewis Thompson
Hi,

I'm trying to write a script to use with the Apache auth plugin
mod_auth_any.  I have the whole setup working, bar the script that does
the authentication.

  I am worried that because the script must be read/writeable by the
Apache user (www) that anybody that can write a PHP script on my machine
can read the auth script and read the passwords that would be contained
within -- those to my MySQL server.

  Is there any way I can have a script that is not readable by a user,
while still allowing that user to execute it?  Maybe through using a
wrapper of some sort?  I do not have UFS2 so I cannot use ACLs.

  Any suggestions for this as I'm stumped.  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 10:12:09AM -0500, Lowell Gilbert wrote:
 Lewis Thompson [EMAIL PROTECTED] writes:
 
I am worried that because the script must be read/writeable by the
  Apache user (www) that anybody that can write a PHP script on my machine
  can read the auth script and read the passwords that would be contained
  within -- those to my MySQL server.
 
 Why would the script be readable or writeable by any user?  
 It only needs to be executable, right?

Well, since it's an interpreted script (it's some standalone PHP) in
order to execute it, the user must be able to read it.  Since the script
holds passwds that means that any user with the ability to run it can
get the passwds (in my case to access my MySQL server).

  This is a ``flaw'' with the way Apache works because everything Apache
executes must be +rw for the Apache user (www).  As a result any person
able to write PHP code (all of my users) can read anything that the
Apache user can, because mod_php executes as the Apache user.

  There are security features in PHP (safe_mode) but these conflict with
a large number of PHP scripts.  I'm trying to work it out this way now
but it's a lot of hassle.

  Thanks for your response,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 03:56:08PM +, Peter Risdon wrote:
 Lewis Thompson wrote:
  I am worried that because the script must be read/writeable by the
 Apache user (www) that anybody that can write a PHP script on my machine
 can read the auth script and read the passwords that would be contained
 within -- those to my MySQL server.

 All you can do really is store the passwords themselves in an include 
 file that you put in the most secure place possible, preferably not in 
 webspace. But I imagine you have this covered.

Yeah, but this is really security through obscurity, not something I'm
keen on ;)

  Is there any way I can have a script that is not readable by a user,
 while still allowing that user to execute it?  Maybe through using a
 wrapper of some sort?  I do not have UFS2 so I cannot use ACLs.
  
 
 Not that I know of, but have you considered compiling apache with 
 suexec? Assuming your other users have seperate logins, this might work. 
 You can have apache execute scripts as the appropriate user, not www. 
 That way, a 700 permission should prevent other users from reading your 
 scripts.

I read some stuff about this.  I got the impression it required using
PHP as a CGI, instead of mod_php.  Am I wrong in thinking this?  The
overhead of using PHP as CGI is a little too high because the server is
already pretty stretched...

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 05:52:17PM +0100, Robert Barten wrote:
 No need for safe_mode, set
 php_admin_value open_basedir /www/dir/to/user/
 in your vhost config, add if desired /tmp/phpupload/:/tmp/phpsession/

Yes, I've looked at this.  However, I want to use userdir=public_html
for serving PHP from people's public_html dir in their home dir.

  This doesn't seem compatible with open_basedir
(open_basedir=/home/*/public_html doesn't work) and I can't find any
other way to do it.

  Thanks a lot,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Shell script containing passwords.

2004-02-10 Thread Lewis Thompson
On Tue, Feb 10, 2004 at 09:41:22AM -0600, Eric F Crist wrote:
 Check the syntax for the .htaccess files in the httpd.conf file.  This
 is a file that must be non-readable by regular users via php, but
 apache has a filter written within the httpd.conf file to disallow
 access.  I know it's about 3/4 of the way down the page.

Am I correct in assuming you mean set this sort of security up for the
files I wish to protect?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: framebuffer fro freebsd

2004-02-22 Thread Lewis Thompson
On Sat, Feb 21, 2004 at 04:58:53PM -0500, Lowell Gilbert wrote:
 Rahul Sawarkar [EMAIL PROTECTED] writes:
  is there a framebuffer port for freebsd?
i want to run my console in 1024x768.
 
 Why would you want a framebuffer for that?
 Do you have frame grabber hardware or something?
 
 If all you want is a 1024x768 video mode driving the 
 text console, vidcontrol(1) can do that, but I don't
 understand the connection to a frame buffer...

Is it just me or does vidcontrol look ugly when compared to Linux's
console framebuffer that allows high-resolution console displays?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Growing RAID5 (using RAID0).

2004-02-26 Thread Lewis Thompson
Hi,

I've been thinking about this and I'm wondering if it is possible to do
something like the following:

  I have an existing RAID5 volume, comprised of just 3 120GB disks.
However, I've just bought three more 250GB disks that I also want to
RAID5.

  I would still like a single volume, comprising the size of the two
RAID5 volumes.  Could this be possible through the use of RAID0?

i.e. can I create a RAID0 volume from two RAID5 volumes?

  I understand this might sound a little odd but if it works it would be
the ideal solution for me.  I would also be interested in hearing how
other people might have overcome this problem of growing a large RAID5
volume.

  Thanks a lot,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Network File System (Coda, AFS) question.

2004-03-01 Thread Lewis Thompson
Hi,

I'm interested in setting up a distributed file system across two 5.2.1
machines.

  I wanted this to work such that the two machines had /different/ data
but through the use of some software they can be ``mounted'' to provide
a single large volume (almost the same way that the RAID0 works).  First
of all I'm not sure that this is possible -- I'm having a little trouble
understanding some of the Coda terminology.  If somebody could
confirm/refute this I'd be interested.

  Secondly does anybody know which is my best bet (in general --
regardless of network concat support)?  AFS ports seem to be nonexistent
(bar a client) while Coda has a version 6 port (but no documentation
newer than 2000 that I can see).

  If Coda is not able to do what I want -- does anybody know another way
to do this?  Thanks a lot,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


vmware3 -CURRENT.

2004-03-05 Thread Lewis Thompson
Hi,

I've just CVSupped to -CURRENT in an attempt to learn more about FreeBSD
development in general.

  However, vmware3 no longer works.  I get errors about vmnet1 not
existing, yet I have the appropriate entries in /compat/linux/dev.
However, I /do/ have a vmnet4097 when I run ifconfig.

  I notice that ls -ld /compat/linux/dev/vmnet1 shows:

crw-r--r--  1 root  wheel  149, 0x0081 Mar  5 12:49 /compat/linux/dev/vmnet1

while ls -ld /dev/vmnet1 shows:

crw---  1 root  wheel  226, 0x0011 Mar  5 12:01 /dev/vmnet1

  I searched on the mailing lists and eventually found an old PR
(http://www.freebsd.org/cgi/query-pr.cgi?pr=48608) that seems as though
it might be relevant.

  Any suggestions?  Or am I being optimistic in thinking vmware3 will
run on -CURRENT?

-lewiz.

P.S.
I rebuilt all of the necessary packages after the upgrade.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Growing RAID5 (using RAID0).

2004-03-05 Thread Lewis Thompson
On Fri, Mar 05, 2004 at 11:28:17PM +1100, Tony Frank wrote:
 On Thu, Feb 26, 2004 at 02:15:14PM +, Lewis Thompson wrote:
  i.e. can I create a RAID0 volume from two RAID5 volumes?

I understand this might sound a little odd but if it works it would be
  the ideal solution for me.  I would also be interested in hearing how
  other people might have overcome this problem of growing a large RAID5
  volume.
 
 As you didnt post anything about your implementation I can only guess.
 If you are using hardware raid5 for each disk set and it cannot do raid0 
 on top you could look at using software raid0 to join the two hardware
 sets. Eg vinum can do raid0 in software over raid5 in hardware.
  
 If you are doing this purely in software it will depend on what software
 you use.  If using vinum I believe you can only mirror across two (or more)
 raid5 plexes, so probably not what you want to do.

Yes.  I forgot to specify but this was going to be purely software RAID.
I've recently had a little trouble buying a hardware ATA raid card (I
was shipped an incorrect model and lost out about GBP 100!) so until
then I'm software only.

  I looked at (I think) raidframe (?) and this /appeared/ to support
this functionality but I wasn't sure if it was something Vinum was also
able to do.  It seems you have clarified this for me.

  Thanks a lot!

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: cdroast

2004-03-07 Thread Lewis Thompson
On Sat, Mar 06, 2004 at 08:09:47PM -0800, Brian Henning wrote:
 how can i make it so cd roast burns files with plus
 signs in it. for example
 /usr/ports/distfiles/gtk+-1.2.10.tar.gz

This should probably be aimed at the xcdroast people since it seems very
specific.

  I'm not really sure but is there any way you can quote the funny
characters?  As I recall you can't but if you dig about you might find a
way... maybe?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: mounting

2004-03-08 Thread Lewis Thompson
On Mon, Mar 08, 2004 at 03:11:14AM -0700, RYAN vAN GINNEKEN wrote:
[snip]
 Also i have the same problems with my nfs mounts if a machine goes
 down somewhere now of my other machines will reboot.

Have you tried mounting with the -s option?  Check the man page for
soft.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Installation - More user friendly

2004-03-08 Thread Lewis Thompson
On Sun, Mar 07, 2004 at 11:28:03PM -0500, JJB wrote:
 Right at the beginning of sysinstall should be warning  about what
 to set PC bios options to, like plugNplay off, power management off,
 boot time virus check disabled, PCI irq assignments set to auto, OS
 type set to non-windows, ect. Give then option to cancel sysinstall
 to set bios.

Or, alternatively, we could just put a URL to the documentation...

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Installation - More user friendly

2004-03-08 Thread Lewis Thompson
On Mon, Mar 08, 2004 at 09:53:15AM -0500, Jerry McAllister wrote:
  
  On Sun, Mar 07, 2004 at 11:28:03PM -0500, JJB wrote:
   Right at the beginning of sysinstall should be warning  about what
   to set PC bios options to, like plugNplay off, power management
   off, boot time virus check disabled, PCI irq assignments set to
   auto, OS type set to non-windows, ect. Give then option to cancel
   sysinstall to set bios.
  
  Or, alternatively, we could just put a URL to the documentation...
 
 That works if it can read locally, can sysinstall handle html?  If it
 must go out to the net, can it do that?Probably not at that stage.
 Many of us can not afford to have an extra machine around to read
 online documentation while doing an install.  The install is on the
 only machine we have.

I was making the point that few people read the documentation /before/
they pop the CD in the drive.

  If a lot of people (I'm not saying this is you, at all) bothered to do
this it really would save them a lot of hassle.  As for PnP, IRQ
assignments, etc. -- these would /all/ be sorted /before/ the disc was
booted from.

  Your idea is quite nice though -- the Handbook could easily be
converted to plaintext and fired up on a virtual terminal.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Data recovery.

2004-03-14 Thread Lewis Thompson
Hi,

I've just had a disk (pretty much) fail on me.

  I'd been suspect of it for some time now, but finally confirmed it
with a reinstall to 5.2.1 when GEOM started removing it for me ;)  Some
more tests with smartmontools (http://smartmontools.sourceforge.net/)
indicate read failures at the same position on the disk.

  This problem is made worse by the fact that this is a 100GB disk, part
of a Vinum RAID-0 array (together with two more 120GB disks).

  I have managed to get my hands on a 123GB disk for backing up the data
to to.  I know I am going to have to use dd for this, but this is
something I've never done before (short of a quick flirt with floppy
images, etc.)

  Since GEOM has previously removed the volume when it hit the bad area
I need to know if I can disable this to recover as much data as possible
(some is better than none).  If this requires installing 4 then that's
how I'll have to do it.

  Basically I would like to ask -questions if anybody has any advice
(other than ``you should have made backups'' -- I was in the process of
buying a 3Ware RAID card for this purpose ;) as to how I should go about
this.  Anything at all... I'm pretty desperate at this point!

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Vinum, replaced disk -- fsck error.

2004-03-15 Thread Lewis Thompson
Hi,

I had a failed disk in my RAID-0 Vinum array.  This was a physical disk
problem and in an attempt to recover as much data as possible I dd'ed it
to another disk (dd if=ad3 of=ad1 bs=8192 conv=noerror).

  This has mostly gone fine (bar the I/O errors that were to be
expected) and I can actually start vinum and mount the RAID-0 array with
no trouble (Vinum reports no errors I can see).  I don't really know how
I can test the integrity of files from the replaced disk...

  I attempted to fsck the volume before I mounted it but I first had to
restore the superblock for the volume (tunefs -A /dev/vinum/data), which
worked fine.  However (and this is my real problem), fsck_ufs
/dev/vinum/data gives the following message:

** /dev/vinum/data
cannot alloc 4316869296 bytes for inphead

* FILE SYSTEM STILL DIRTY *

  Searching about doesn't reveal much of any use -- Google Groups has a
few of these errors for Solaris, so I assume it to be a fairly
``generic'' UFS error (?)

  Any suggestions what I can do now?  I am expecting corruption on my
array but I thought some corruption was better than nothing at all.  Am
I way off thinking that I can do this?

  I've not included many specific details here because I don't know if
they are relevant.  Just ask if I've missed anything and I'll provide it
right away.  Thanks a lot,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Vinum, replaced disk -- fsck error.

2004-03-15 Thread Lewis Thompson
On Tue, Mar 16, 2004 at 02:00:00AM +, Lewis Thompson wrote:
   This has mostly gone fine (bar the I/O errors that were to be
 expected) and I can actually start vinum and mount the RAID-0 array with
 no trouble (Vinum reports no errors I can see).  I don't really know how
 I can test the integrity of files from the replaced disk...

I've just noticed as I was playing some files from my disk that gstat
shows *no* activity for ad3 (the replaced disk).  Obviously all is not
working as I believed.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Vinum, replaced disk -- fsck error.

2004-03-16 Thread Lewis Thompson
On Tue, Mar 16, 2004 at 07:13:25PM +0800, Greg Lehey wrote:
 On Tuesday, 16 March 2004 at  2:00:00 +, Lewis Thompson wrote:
  I had a failed disk in my RAID-0 Vinum array.  This was a physical disk
  problem and in an attempt to recover as much data as possible I dd'ed it
  to another disk (dd if=ad3 of=ad1 bs=8192 conv=noerror).
 
 This may or may not work, depending on details you haven't reported.

I can't think of anything else.  Originally I ran dd without the
conv=noerror and it stopped at around 25GB (the disk is a 100GB).  The
destination disk is 123GB but to my knowledge that is acceptable for dd.

  During the process a number (maybe eight to ten) I/O errors were
reported.  Previously I believe reading data from these areas on the
disk caused Vinum to lose the disk (under 4-STABLE), I presume this was
by design, or unavoidable.  Under 5.2.1-p1 GEOM removed the disk
totally.  The dd was done using the rescue disk from 4.9-RELEASE (to
avoid GEOM).

  I can actually start vinum and mount the RAID-0 array with no
  trouble (Vinum reports no errors I can see).

Since I wrote this I posted a reply stating that whatever files I try
and open (mostly my personal video collection), gstat reports no
activity from ad3 -- the replaced disk.  A lot of the indexes from the
AVIs are dead.

  I don't really know how I can test the integrity of files from the
  replaced disk...
 
 A good start would be to read the documentation at
 http://www.vinumvm.org/.

Unresolved bugs, 27 Feb 2000. -- this doesn't seem to have applied.
When I started vinum (I previously ran dumpconfig) with create -f
myconfig my data plex (comprised 2*120GB and the replaced 100GB) was
listed as up.

  At this point I tried the fsck with an error about invalid
superblocks, so I restored those on /dev/vinum/data with tunefs -A.
fsck then failed with the ``cannot alloc 4316869296 bytes for inphead''
error.

  I've read the replacing a failed Vinum drive a couple of times now but
I still don't quite understand it.  Does this apply to RAID-0?  Surely I
can't revive a concatenated array?  I assume this must only apply to
RAID-1 and RAID-5 (and maybe some of the others in between I know
nothing about).

  Reading more about debugging vinum I found this oddity (maybe it
isn't, since it's actually before the config):

[EMAIL PROTECTED] root state upvinumdrive0: -- ad1.config
---
[EMAIL PROTECTED] root state upvinumdrive1: -- ad2.config

  diff on ad2.config and ad3.config instead gives:

[EMAIL PROTECTED] root state upvinumdrive1: -- ad2.config
---
 IN VINOpurple.lewiz.orgvinumdrive2?;[EMAIL PROTECTED] root state up
^-- ad3.config

  There are a few extra chars different after the vinumdrive line, from
those in ad1 and ad2.  This probably isn't anything?

  I've stopped short of compiling vinum with debugging options (this was
under kernel panics, which I'm not having).  I'll go ahead and do this
though if it can provide any more info.

  There is nothing of any value in /var/log/vinum_history (but I've
cp'd it to http://www2.cs.man.ac.uk/~thompsl3/vinum_history just in
case).  If you look at this file you can see I messed with create -f a
lot.  This was because the old disk didn't seem to like storing the
on-disk configuration.  The new disk seems to do this.

  worked fine.  However (and this is my real problem), fsck_ufs
  /dev/vinum/data gives the following message:
 
  ** /dev/vinum/data
  cannot alloc 4316869296 bytes for inphead
 
  * FILE SYSTEM STILL DIRTY *
 
 Possibly there are log messages that go with this message.  It
 indicates to me that there's something seriously wrong in some data
 structure, and that fsck is asking for a ridiculous amount of memory
 as a result.

No errors appear in any of the files in /var/log (I checked them all,
just in case).

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


gif tunnel problem.

2004-03-17 Thread Lewis Thompson
Hi,

This is the first time I've looked at gif tunnels and I'm only trying to
do something simple (by that I mean no IPsec, etc.)

  Diagrams are always useful for this, so here goes:

   (int)  (ext) (ext)   (int)
xl0 192.168.0.1   xl1 a.b.c.d   - 'net - sis0 w.x.y.z rl0 192.168.1.1
192.168.0.x/24   192.168.1.x/24

  That's a pretty poor diagram, sorry.  Basically HostA has is the
default router for 192.168.0.0/24 with in 192.168.0.1 and external ip
a.b.c.d.  HostB is the same for 192.168.1.0/24 with external ip w.x.y.z.

  I want to set up an unencrypted tunnel between the two subnets using
gif.  So far on HostA I have:

ifconfig gif0 create
ifconfig gif0 tunnel a.b.c.d w.x.y.z
ifconfig gif0 192.168.0.1 192.168.1.1

and on HostB:

ifconfig gif0 create
ifconfig gif0 tunnel w.x.y.z a.b.c.d
ifconfig gif0 192.168.1.1 192.168.0.1

  I got these from the IPsec chapter in the handbook.  It states at this
point I should be able to ping 192.168.1.1 from HostA.  This does not
work.

  I see the echo in gif0 (using tcpdump) but it never seems to exit the
gif tunnel and hit xl1.  The same is true for HostB.

netstat -rn on HostA shows:
192.168.1.1192.168.0.1UH  0 3183   gif0

with an equivalent entry on HostB.

  What am I doing wrong?  I've tried to follow the chapter as best I can
but it has been little help.  Anybody able to point out the error in my
ways?

  Thanks a lot,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


gif tunnel problem.

2004-03-17 Thread Lewis Thompson
Hi,

This is the first time I've looked at gif tunnels and I'm only trying to
do something simple (by that I mean no IPsec, etc.)

  Diagrams are always useful for this, so here goes:

   (int)  (ext) (ext)   (int)
xl0 192.168.0.1   xl1 a.b.c.d   - 'net - sis0 w.x.y.z rl0 192.168.1.1
192.168.0.x/24   192.168.1.x/24

  That's a pretty poor diagram, sorry.  Basically HostA has is the
default router for 192.168.0.0/24 with in 192.168.0.1 and external ip
a.b.c.d.  HostB is the same for 192.168.1.0/24 with external ip w.x.y.z.

  I want to set up an unencrypted tunnel between the two subnets using
gif.  So far on HostA I have:

ifconfig gif0 create
ifconfig gif0 tunnel a.b.c.d w.x.y.z
ifconfig gif0 192.168.0.1 192.168.1.1

and on HostB:

ifconfig gif0 create
ifconfig gif0 tunnel w.x.y.z a.b.c.d
ifconfig gif0 192.168.1.1 192.168.0.1

  I got these from the IPsec chapter in the handbook.  It states at this
point I should be able to ping 192.168.1.1 from HostA.  This does not
work.

  I see the echo in gif0 (using tcpdump) but it never seems to exit the
gif tunnel and hit xl1.  The same is true for HostB.

netstat -rn on HostA shows:
192.168.1.1192.168.0.1UH  0 3183   gif0

with an equivalent entry on HostB.

  What am I doing wrong?  I've tried to follow the chapter as best I can
but it has been little help.  Anybody able to point out the error in my
ways?

  Thanks a lot,

-lewiz.

P.S.
Sorry if this is a duplicate -- it's been a few hours since I originally
posted it and I haven't received it yet... must be my MTA ;)

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Vinum, replaced disk -- fsck error.

2004-03-18 Thread Lewis Thompson
On Thu, Mar 18, 2004 at 01:26:02PM +1030, Greg 'groggy' Lehey wrote:
 On Tuesday, 16 March 2004 at 17:25:26 +, Lewis Thompson wrote:
  I can't think of anything else.  Originally I ran dd without the
  conv=noerror and it stopped at around 25GB (the disk is a 100GB).  The
  destination disk is 123GB but to my knowledge that is acceptable for dd.
 
During the process a number (maybe eight to ten) I/O errors were
  reported. 
 
 But not to me.

I've included more detailed errors neared to the end of this email :)

 I was really thinking of What to do if you have problems with Vinum
 at http://www.vinumvm.org/vinum/how-to-debug.html.

Okay, I did actually do my best to follow this but maybe got
sidetracked.  I'm just going to bullet point these now so I don't miss
any of them out.

* Problems: ``dd'' cloned disk ``does not work'' (i.e. gstat shows no
  activity on the cloned disk during reading of files).  Also see
  previous emails.

* Version: FreeBSD 5.2.1-p1.

* Changes to system: Originally vinum ran on 4.9-STABLE.  This worked
  but had periodic ``disk crashes'' (i.e. vinum states disk as offline).
  I don't think this is the problem as the same behaviour happens with
  5.2.1-p1 using the original dodgy disk (only GEOM removes it instead
  of vinum).

* Vinum list (excuse lack of wrapping).  vinumdrive2/ad3 is the cloned
  disk.  The failed volume is data (I don't think you need the others
  but I'll leave them, just in case ;):

vinum - list
3 drives:
D vinumdrive2   State: up   /dev/ad3s1h A: 0/95558 MB (0%)
D vinumdrive1   State: up   /dev/ad2s1h A: 0/117246 MB (0%)
D vinumdrive0   State: up   /dev/ad1s1h A: 0/117246 MB (0%)

5 volumes:
V root  State: up   Plexes:   2 Size:255 MB
V swap  State: up   Plexes:   2 Size:459 MB
V var   State: up   Plexes:   2 Size:256 MB
V usr   State: up   Plexes:   2 Size: 12 GB
V data  State: up   Plexes:   1 Size:295 GB

9 plexes:
P root.p0 C State: up   Subdisks: 1 Size:255 MB
P root.p1 C State: up   Subdisks: 1 Size:255 MB
P swap.p0 C State: up   Subdisks: 1 Size:459 MB
P swap.p1 C State: up   Subdisks: 1 Size:459 MB
P var.p0  C State: up   Subdisks: 1 Size:256 MB
P var.p1  C State: up   Subdisks: 1 Size:256 MB
P usr.p0  C State: up   Subdisks: 1 Size: 12 GB
P usr.p1  C State: up   Subdisks: 1 Size: 12 GB
P data.p0 C State: up   Subdisks: 3 Size:295 GB

11 subdisks:
S root.p0.s0State: up   D: vinumdrive0  Size:255 MB
S root.p1.s0State: up   D: vinumdrive1  Size:255 MB
S swap.p0.s0State: up   D: vinumdrive0  Size:459 MB
S swap.p1.s0State: up   D: vinumdrive1  Size:459 MB
S var.p0.s0 State: up   D: vinumdrive0  Size:256 MB
S var.p1.s0 State: up   D: vinumdrive1  Size:256 MB
S usr.p0.s0 State: up   D: vinumdrive0  Size: 12 GB
S usr.p1.s0 State: up   D: vinumdrive1  Size: 12 GB
S data.p0.s0State: up   D: vinumdrive0  Size:100 GB
S data.p0.s1State: up   D: vinumdrive1  Size:100 GB
S data.p0.s2State: up   D: vinumdrive2  Size: 93 GB

* Vinum history.  I mounted the volume (which was not unmounted properly
  -- fsck took place first) and watched a few films.  Eventually I
  stumbled across one that didn't even start.
  I am certain vinum isn't reading anything from ad3 -- gstat during
  fsck showed *NO* activity on ad3/vinumdrive2:

19 Mar 2004 02:46:38.668561 *** vinum started ***
19 Mar 2004 02:46:39.266076 list 
19 Mar 2004 02:56:23.538633 *** vinum started ***

* /var/log/messages extract.  I originally started vinum a long while
  before, I included this entry too (excuse wrapping):

Mar 17 23:33:57 amnesia kernel: vinum: loaded
Mar 17 23:34:00 amnesia kernel: vinum: reading configuration from /dev/ad1s1h
Mar 17 23:34:00 amnesia kernel: vinum: updating configuration from /dev/ad2s1h
Mar 17 23:34:00 amnesia kernel: vinum: updating configuration from /dev/ad3s1h
Mar 19 02:49:26 amnesia kernel: WARNING: /mnt/data was not properly dismounted
Mar 19 02:52:15 amnesia kernel: vinum: null rqg

  This seems a little odd to me -- previously I had not had a null rqg
error.  I think maybe I didn't test it enough.  Since these are mostly
avi files I can tell if they are broken on not by seeing if they have an
index -- last time they all played but many without indexes.  Nothing
has changed since then; maybe I wasn't being thorough enough?

* Crash dump

Re: Vinum, replaced disk -- fsck error.

2004-03-19 Thread Lewis Thompson
On Sat, Mar 20, 2004 at 08:57:38AM +1030, Greg 'groggy' Lehey wrote:
 On Friday, 19 March 2004 at  3:03:34 +, Lewis Thompson wrote:
  In a reply to my original question you stated that ``dd if=ad3 of=ad1
  bs=8192 conv=noerror'' ``may or may not work, depending on details you
  haven't reported.''  Do these detailed errors help at all?
 
 A little.  They tell me that the drive is flaky.  I'd expect to see
 the error messages in /var/log/messages, though.

Right.  I've just written a full-blown reply to this message but on the
very last thing I did some looking into dd.  After some searching I
found somebody that said:

``One must specify conv=noerror,sync when copying raw disks with bad
sectors to ensure dd stays synchronized''

  I'm feeling sheepish now.  I've only used conv=noerror.  This would
probably explain something (i.e. I can read the config from the disk
because it's synched at the beginning).

  I'm going to re-dd the disk on Monday (I'm away for the weekend).
I'll tell you how I get on then.

  Thanks again for all the help,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Top posting

2004-03-19 Thread Lewis Thompson
On Fri, Mar 19, 2004 at 05:24:59PM -0600, Tillman Hodgson wrote:
 On Fri, Mar 19, 2004 at 05:35:06PM -0500, Al Johnson wrote:
 My standard response to top-posting:
 
  A: Because it reverses the logical flow of conversation.
  Q: Why is putting a reply at the top of the message frowned upon?
  A: Top-posting.
  Q: What is the most annoying thing on usenet and in e-mail?

.siht ekil I  .doog si sihT

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Vinum, replaced disk -- fsck error.

2004-03-20 Thread Lewis Thompson
On Sat, Mar 20, 2004 at 11:14:23AM +1030, Greg 'groggy' Lehey wrote:
 I still don't understand why you're using dd.

To create as near-perfect copy of the disk as possible?

  I want to work on the failing disk as little as possible in case I
cause further damage.  Since the RAID0 volume is around 300GB I don't
have anywhere that I could cp all of that data so I saw the best
alternative as dd'ing the disk.

  Can you suggest another method I might use to achieve what I want?

  Thanks,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: problem with su

2004-03-20 Thread Lewis Thompson
On Sat, Mar 20, 2004 at 07:41:53PM +0200, Eric Yellin wrote:
 When I su -m and login as root, all I get in the prompt is a % sign. My
 normal user shell is tcsh and the prompt looks like this:
 [EMAIL PROTECTED]/home/eric(29): but this is not kept when I su -m.
 How can I change this?

Look in /root/.cshrc -- I generally just comment out the PROMPT line.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: I messed up my system, please help. library missing

2004-03-20 Thread Lewis Thompson
On Sat, Mar 20, 2004 at 01:46:14PM -0500, Shaun T. Erickson wrote:
 How do I get the old version reinstalled, and have the new version as 
 well, for things that need it?

Take a look at portupgrade.  You can find it in sysutils/portupgrade.
Once it's installed portupgrade expat should do the job.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Vinum

2004-03-20 Thread Lewis Thompson
Hi,

I might be lying to you with my answers.  I'm hoping Greg Lehey or some
other Vinum hacker will point anything I get wrong out though :)

On Sat, Mar 20, 2004 at 01:23:53PM -0800, Evan Sayer wrote:
 I have a question about how vinum effects access to file systems.  When 
 i have a vinum volume on a drive which contains the file system /usr, 
 which is being mirrored to another volume on another drive, are the 
 contents of  /usr encompassed in the volume (like a partition) or is 

/usr is generally partition e on the slice (at least it is on my
machine).  This means you can set up two Vinum drives using, for
example, ad0s1e.  That way you will be able to mount either disk.

  However, that's not really useful.  You really want to be mounting
/dev/vinum/usr (if that's what you called your volume).  This way Vinum
will handle the synchronization for you.

 If i do this will i be able to access all the files on the first hard
 drive as though it was just a regular partition.

Yes.  Same for the second disk.  You really want to mount /dev/vinum/usr
as I mentioned above.

 Do i need subdisks and plexes just to mirror the file systems' data?

Yes.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: making the partition larger

2004-03-21 Thread Lewis Thompson
On Sun, Mar 21, 2004 at 12:52:47PM +0300, CBuH. wrote:
 I have it  of size X. And have 4 partitions marked, plus free unmarked
 10Gb on that /dev/ad0. Want to make FreeBSD's partition bigger on
 those 10Gbs.

It depends on where the free space is.  If you mean growing the FreeBSD
slice (which is BSD language for a DOS partition) then I don't think you
can.

  However, if it is unallocated space in the slice take a look at the
growfs man page.  You'll probably need to use bsdlabel/disklabel to edit
your slice partition table.

  Searching for bsdlabel and growfs will probably help too.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Vinum, replaced disk -- fsck error.

2004-03-23 Thread Lewis Thompson
On Sat, Mar 20, 2004 at 12:23:11AM +, Lewis Thompson wrote:
 On Sat, Mar 20, 2004 at 08:57:38AM +1030, Greg 'groggy' Lehey wrote:
  On Friday, 19 March 2004 at  3:03:34 +, Lewis Thompson wrote:
   In a reply to my original question you stated that ``dd if=ad3 of=ad1
   bs=8192 conv=noerror'' ``may or may not work, depending on details you
   haven't reported.''  Do these detailed errors help at all?
  
  A little.  They tell me that the drive is flaky.  I'd expect to see
  the error messages in /var/log/messages, though.
 
 Right.  I've just written a full-blown reply to this message but on the
 very last thing I did some looking into dd.  After some searching I
 found somebody that said:
 
 ``One must specify conv=noerror,sync when copying raw disks with bad
 sectors to ensure dd stays synchronized''

I re-dd'd my disk yesterday using conv=noerror,sync and everything seems
to work as planned.

  Vinum starts straight away and I have not managed to re-create the
null fqg message.  If I come across any problems I'll post them here.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


natd + DUMMYNET ordering.

2004-03-24 Thread Lewis Thompson
Hi,

I'm trying to set up some traffic shaping using IPFW2 and DUMMYNET.  I
also use natd and I'm a little stumped as to where to put my pipes so
that they will work as I expect.

ipfw add pipe 1 all from 192.168.0.4 to any via xl1
ipfw add divert natd all from any to any via xl1
ipfw add pipe 1 all from 192.168.0.4 to any via xl1
ipfw pipe 1 config bw 100KB/s
ipfw add pass all from any to any

What I want is to able to shape traffic (incoming and outgoing) based on
the internal destination/source.

  Hence I've put pipe 1 before natd so traffic going out will be
matched.  The same rule is repeated after natd so incoming traffic will
be matched.

  However, this plain doesn't work and I'm a little stumped.  Can
anybody point out how to get this sort of stuff working right?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


natd + DUMMYNET ordering.

2004-03-24 Thread Lewis Thompson
Hi,

I'm trying to set up some traffic shaping using IPFW2 and DUMMYNET.  I
also use natd and I'm a little stumped as to where to put my pipes so
that they will work as I expect.

ipfw add pipe 1 all from 192.168.0.4 to any via xl1
ipfw add divert natd all from any to any via xl1
ipfw add pipe 1 all from 192.168.0.4 to any via xl1
ipfw pipe 1 config bw 100KB/s
ipfw add pass all from any to any

What I want is to able to shape traffic (incoming and outgoing) based on
the internal destination/source.

  Hence I've put pipe 1 before natd so traffic going out will be
matched.  The same rule is repeated after natd so incoming traffic will
be matched.

  However, this plain doesn't work and I'm a little stumped.  Can
anybody point out how to get this sort of stuff working right?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Sample server for Cyrus SASL

2004-03-26 Thread Lewis Thompson
On Fri, Mar 26, 2004 at 07:38:42AM -0500, WebTent Support wrote:
 I have Cyrus SASL 2.1.18 installed from ports on 5.2.1. Does it place
 the source somewhere? How can I test with the sample-server and
 sample-client?

I don't think it gets installed.  Look in the work directory.  server
and client under sample.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: hard disk recover

2004-03-28 Thread Lewis Thompson
On Sun, Mar 28, 2004 at 04:25:56PM -0700, [EMAIL PROTECTED] wrote:
 # dd if=/dev/ad1s1a bs=64k
 dd: /dev/ad1s1a: Input/output error

Try:

dd if=/dev/ad1s1a of=? conv=noerror,sync bs=64k

  I recently ``recovered'' a disk from this error.  The sync is
critical, trust me ;)  (check the man page for what it does)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Anti-virus

2004-03-30 Thread Lewis Thompson
On Mon, Mar 29, 2004 at 08:52:23PM -0600, Earl Larsen wrote:
 I was wondering what is a good, free ;) anti virus program for FreeBSD.

Depending what you mean by free... maybe try security/f-prot.  It's free
for non-commercial use.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Ordering of dummynet and natd.

2004-03-30 Thread Lewis Thompson
Hi,

Can anybody help me out with ipfw rules to do dummynet shaping before
packets hit natd for translation.

  192.168.0.4 should be able to upload at just 100KB/s.  The default
gateway and natd is done on 192.168.0.1 where I have the following
rules:

pipe 1 ip from 192.168.0.4 to any via xl1
divert 8668 ip from any to any via xl1
allow ip from any to any

pipe 1 just limits the bandwidth to 10KB/s.  pipe 1 is before divert
because if I put it after then natd has already translated the address
so I cannot shape the bandwidth as I want.

  Am I wrong in thinking I can use pipes like this?

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: troubles with jdk-1.4.2p6_4

2004-03-30 Thread Lewis Thompson
On Tue, Mar 30, 2004 at 09:35:58AM -0500, Lowell Gilbert wrote:
 Nikita S. Sychevsky [EMAIL PROTECTED] writes:
 
  I can't build jdk-1.4.2p6_4 from the ports collection on jdk-1.4.2p6_4
  system. Can anybody help please?
 
 Looks like a known problem; it's failing on the test cluster as well.  

You can't build java in a directory with the sticky bit.  Try and set
your WRKDIRPREFIX somewhere else.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: A night with threads and gdb

2004-04-01 Thread Lewis Thompson
On Tue, Mar 30, 2004 at 05:42:41PM +0100, Andrea Venturoli wrote:
 To make it clear: with nss_ldap enabled, everything that accessed the
 user database would crash: so ls -l,
 id and so on (but not, e.g., ls without -l).

I spoke to nectar@ about this.  CVSup to that latest OpenLDAP21 and then
recompile :)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: console screensaver in X

2004-04-06 Thread Lewis Thompson
On Wed, Apr 07, 2004 at 07:27:09AM +1000, sAndri Kok wrote:
 I'm interested in using FreeBSD's daemon logo screensaver in X. Is that 
 possible? If it is, how do I do it? any man that I can read? Thx heaps =)

That's the one where the Beastie bounces about the screen, right?

  Best bet is probably to go install xscreensaver from ports and then
find the hack that does a bouncing image... I'm fairly sure there is
one...

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


[OT] Porting help / cdio.h.

2004-04-08 Thread Lewis Thompson
Hi,

I'm attempting to port some software (MythTV) to FreeBSD.  My knowledge
of this is fairly limited and I'm wondering how to convert from
linux/cdrom.h to sys/cdio.h.

  I see I can determine the capabilities of the drive quite easily.
However, what I want is to (for example) lock/unlock the tray.  The
CDDOLOCK define is merely a Boolean value that tells me the drive's
capability.  Can anybody please tell me how I go about actually locking
the tray?

  Thanks very much and sorry this is a little off-topic,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: very long boot sshd

2004-04-08 Thread Lewis Thompson
On Thu, Apr 08, 2004 at 09:17:14AM +0200, RazorOnFreeBSD wrote:
 Do you think I need to change my hardrive already ? It is just one year
 . :(

Good news is that it's probably still under warranty :)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Sil0680 causes panic on 5.2.1-p5.

2004-04-22 Thread Lewis Thompson
Hi,

I've just bought a Silicon Image Sil 0680 RAID controller.  I will only
be using it as an IDE controller (i.e. without any RAID functionality).

  This causes a panic on 5.2.1-p5 (GENERIC):

atapci1: SiL 0680 UDMA 133 controller
port 0xcc00-0xcc0f,0xd000-0xd003,0xd400-0xd407, 0xd800-0xd803,
0xdc00-0xdc07 mem 0xcfffbf00-0xcfffbfff irq 5 at device 9.0 on pic0
atapci1: [MPSAFE]

Fatal trap 12: page fault while in kernel mode
cpuid = 0, apic id = 00

fault virtual address = 0xd12f8000
fault code = supervisor write, page not present
instruction pointer = 0x8:0xc04d2627
stack pointer = 0x10:0xc219a0
frame pointer = 0x10:0xc219ac
code segment = base 0x0, limit 0xf, type = 0x1b
 = DPL 0, pres1, def32 1, grain 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 0 (swapper)
trap number = 12
cpuid = 0;

  As you can see I just wrote this down and typed it up (so there may be
errors!).  If somebody needs meaningful numbers please ask me and I will
go over and double-check everything.

  I have tried the obvious things -- removing other PCI devices, etc.  I
was unable to disable the onboard IDE controller because this card
doesn't seem to support booting.

  The twist is this:  there is no panic if I boot 4.9-rc4 (disk1,
install) or 5.1-RELEASE (disk1, install).  It is specific to 5.2.1-p5
(or at least between 5.1-R and this).

  I verified this with a GENERIC kernel (compiled by me) and a custom
kernel (unneeded devices removed and some firewall stuff added).


  Please ask for any details -- I've not included a dmesg since it would
be of the machine without the card plugged in.  I can provide anything
(but I've not used kernel debugging before).


  Any help with this would be much appreciated,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Missing Port

2004-04-22 Thread Lewis Thompson
On Thu, Apr 22, 2004 at 03:24:03PM -0700, [EMAIL PROTECTED] wrote:
 I am tring to install mrtg on my test FreeBSD 5.1 box.  I change into my
 /usr/ports/net/mrtg directory and find that there is only a README.html 
 How can I get this port back?  I tried to cvsup it with ports-all but the
 files are not there.  What would be a quick solution to get the files? 
 Without downloading the ports.tar.gz file and extracting it

If it's supposed to be there, try CVSweb http://cvsweb.freebsd.org/ and
you can create a specific tarball to download.

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgp0.pgp
Description: PGP signature


Re: Is it possible to read BIOS setting?

2003-07-24 Thread Lewis Thompson
On Thu, Jul 24, 2003 at 04:26:47PM -0500, Pranav A. Desai wrote:
 If the hard disk fails (or becomes un-bootable) I would change the BIOS
 setting to boot from second disk or maybe from cdrom, repair or reimage
 the hard disk and reboot the box.

I might be wrong here (and haven't been following the thread) but
couldn't you just set the BIOS boot order to be: hdd0, hdd1, etc.

  That way, you could disable hdd0 from booting (I've done it loads of
times by mistake when messing with fdisk, so I'm sure you can do it on
purpose ;) and issue a reboot command.  hdd0 won't boot, so hdd1 will be
used instead.  At which point you run home and fix everything ;)

  Best wishes,

-lewiz.

-- 
Who's on first?

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Sharing among jails

2003-07-26 Thread Lewis Thompson
On Sat, Jul 26, 2003 at 11:29:06AM -0700, User KATRINA wrote:
 I was wondering if there's a way I can share my main /usr/ports directory
 with the jails I'm running.   I thought this would save me a LOT of space.

I just NFS export /usr/ports and then mount it either inside the jail,
or on the host system.

  Best wishes,

-lewiz.

-- 
NEWS FLASH!!
Today the East German pole-vault champion became the West
German pole-vault champion.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Kerberos / sshd

2003-07-27 Thread Lewis Thompson
Hi,

  I'm trying to get sshd to authenticate users via Kerberos.  I want to
do this using a forwardable ticket (I get this by doing kinit -f).  I
have the necessary host/[EMAIL PROTECTED] and rcmd/[EMAIL PROTECTED] entries in the
krb5.keytab file in /etc.

  I have defined the following (non-standard) options in my sshd_config:

RSAAuthentication no
PubkeyAuthentication no
PasswordAuthentication no
ChallengeResponseAuthentication no
KerberosAuthentication yes
KerberosOrLocalPasswd no
KerberosTicketCleanup yes

  However, when I try and log-in I am prompted with a password prompt,
where my Kerberos principle password is rejected (this is correct, I
think, since all ChallResponse and PassAuth are disabled).  However, I
notice the KerberosTgtPassing option, which looks like it does the
ticket passing magic-stuff, but it applies only to AFS.  Is this
correct?  Can I not have ticket forwarding for authentication?

  Thanks very much,

-lewiz.

-- 
Earth is a beta site.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Kerberos / sshd

2003-07-27 Thread Lewis Thompson
On Sun, Jul 27, 2003 at 05:09:14PM +0100, Lewis Thompson wrote:
   I'm trying to get sshd to authenticate users via Kerberos.  I want to
 do this using a forwardable ticket (I get this by doing kinit -f).  I
 have the necessary host/[EMAIL PROTECTED] and rcmd/[EMAIL PROTECTED] entries in the
 krb5.keytab file in /etc.

I've realised what the problem was.  In order to use Kerberos support
with OpenSSH (sshd) I can't use SSH2.  sshing in like this:

ssh -1 server

works fine, doing all authentication with Kerberos tickets.

  Sorry for bothering people.

  Does anybody know why this isn't more readily documented?

-lewiz.

-- 
Intolerance is the last defense of the insecure.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Java Installation

2003-07-31 Thread Lewis Thompson
On Mon, Jul 28, 2003 at 08:10:45AM -0400, Adam wrote:
 There are many females that use this list regularly.

There are?  I never recall seeing any names but now that you've told me,
I'll be on the lookout!  grin

  Best wishes,

-lewiz.

-- 
WARNING TO ALL PERSONNEL:

Firings will continue until morale improves.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: samba authentication problems

2003-08-10 Thread Lewis Thompson
On Thu, Aug 07, 2003 at 11:11:58AM -0700, John DeStefano wrote:
 I'm using 2.2.8a.  I've now done a 'make install' after 'make
 deinstall' twice, with the same results both times, so I can only
 assume the installation is autodetecting openldap, as you suspected
 above.

I've had a look at the Makefile and it doesn't look like it auto
detects.  I really can't understand why it'd do this.  If you're
desperate to get it to work, you could just edit the Makefile and remove
the code enclosed within:

.if defined(WITH_LDAP)

and

.endif

and that'll sort the problem.  I can't stress enough that this isn't the
way to do it and you should maybe consider tracking down why it's not
compiling as expected.

  An alternate solution might just be to use samba-devel, which is
currently beta but I understand it's already very stable and usable.  If
it's production though, I'd still be wary of this route.

  Best wishes,

-lewiz.

P.S.
  Sorry for slow reply; I've been away for the day :)

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: samba authentication problems

2003-08-12 Thread Lewis Thompson
On Thu, Aug 07, 2003 at 06:49:49AM -0700, John DeStefano wrote:
 AFAIK, I have not enabled ldap authentication.  But how do I 
 confirm?

Well.  If it's 2.2.8a then it's defined at compile time (i.e., you
specify you want it, or it autodetects if openldap is installed).  Otoh,
if it's samba-devel (3.0.0b2) then you can modify the behaviour with the
passdb backend smb.conf setting.

  Chances are it's 2.2.8a and you'll need to recompile, unless you
/want/ to use LDAP.

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Jail FS questions.

2003-08-14 Thread Lewis Thompson
Hi,

  I currently have a bunch of jails running on my FreeBSD box.  I've
done this by making installworld a number of times, each time with a
different DESTDIR (say /jail1, /jail2, /jail3).  Clearly this is using a
significant amount of space on the machine.

  I've been reading about unionfs and nullfs (well, more skim reading
really; I'm not FS guru, which is why I'm asking here) and one of these
sounds like it could be the idea solution.  At first glance I'd say that
unionfs would be the way to go.

  My question about unionfs:  if I use this as a base dir for all of my
jails and decide to ``upgrade'' the base system will it actually work?
I mean, when I start installing stuff through the ports does it ever
modify the base system in any way?  If it does, then surely a base
system upgrade will appear to leave the old ports-created files (because
the upper layer changes override the lower unionfs fs).

  Secondly, I don't really understand nullfs.  Would this be a
``better'' solution than using unionfs?  Maybe it isn't even a solution,
but if it is, a pointer to some useful articles would be great (aside
man mount_nullfs; I've read that but don't fully understand).

  Thanks very much!

-lewiz.

-- 
Natives who beat drums to drive off evil spirits are objects of
scorn to smart Americans who blow horns to break up traffic jams.
-- Mary Ellen Kelly

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: samba authentication problems

2003-08-14 Thread Lewis Thompson
On Mon, Aug 11, 2003 at 08:42:58AM -0700, John DeStefano wrote:
 [gandalf] ~# smbclient -L gandalf -U linuxbox
 added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
 can't determine netmask for 192.168.1.1

Did you specifically specify the interfaces to bind to in the smb.conf?

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Cups / Mozilla printing issues.

2003-08-18 Thread Lewis Thompson
Hi,

  I'm not sure if this isn't a bit off-topic but I hope somebody might
know the answer anyway.  I'm running 5.1-R and I've cups-lpr (and all
the other necessary stuff installed).  When I print from
mozilla-firebird (mozilla-gtk2 it uses, afaik) it does actually work but
it's printing is in what appears to be Courier New or some other
fixed-width font, instead of the font displayed on the page.  I know I
can print TT-fonts because I've printed stuff from AbiWord2 without
issues.  Furthermore the text is all ``squished''.  Any hints for
sorting this behaviour would be greatly appreciated.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Cups / Mozilla printing issues.

2003-08-18 Thread Lewis Thompson
Hi,

  I'm not sure if this isn't a bit off-topic but I hope somebody might
know the answer anyway.  I'm running 5.1-R and I've cups-lpr (and all
the other necessary stuff installed).  When I print from
mozilla-firebird (mozilla-gtk2 it uses, afaik) it does actually work but
it's printing is in what appears to be Courier New or some other
fixed-width font, instead of the font displayed on the page.  I know I
can print TT-fonts because I've printed stuff from AbiWord2 without
issues.  Furthermore the text is all ``squished''.  Any hints for
sorting this behaviour would be greatly appreciated.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Cups / Mozilla printing issues.

2003-08-18 Thread Lewis Thompson
Hi,

  I'm not sure if this isn't a bit off-topic but I hope somebody might
know the answer anyway.  I'm running 5.1-R and I've cups-lpr (and all
the other necessary stuff installed).  When I print from
mozilla-firebird (mozilla-gtk2 it uses, afaik) it does actually work but
it's printing is in what appears to be Courier New or some other
fixed-width font, instead of the font displayed on the page.  I know I
can print TT-fonts because I've printed stuff from AbiWord2 without
issues.  Furthermore the text is all ``squished''.  Any hints for
sorting this behaviour would be greatly appreciated.

  Thanks very much,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: mouse with scroll....

2003-08-18 Thread Lewis Thompson
On Sun, Aug 17, 2003 at 03:31:40AM +0400, Denis wrote:
   Does anybody know how in freebsd use mouse with 3 button and one
   scroll?

There's a section in the FreeBSD Handbook that covers this.  There was a
also a thread recently on this mailing list concerning moused not
working with scrolling.  If you follow the tutorial and try it first
without using moused (i.e. by having the physical device (say psm0) in
your XF86Config file).  If that works you could try and get it to go
with moused -- it doesn't work for me though.  Also, ignore pretty much
all of the imwheel stuff -- that's now mostly built into XFree86-4,
afaik.

  Best wishes,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


Re: Cups / Mozilla printing issues.

2003-08-18 Thread Lewis Thompson
On Tue, Aug 19, 2003 at 07:40:26AM +0900, Rob Lahaye wrote:
 A few weeks ago, there was a troublesome version of ghostscript-gnu
 in the ports, which corrupted my output as you describe (I have
 an HP laser printer). I think it was version 7.07_1; I had to downgrade
 to 7.05 for getting rid of the problem.

Thanks, I did try this but it didn't seem to help :(  I'm sure it's some
Mozilla-specific issue I just can't find out what!

  Thanks for your help,

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jab:[EMAIL PROTECTED] | url:http://lewiz.net |-


pgp0.pgp
Description: PGP signature


  1   2   >