date:20060201

On 2006-01-31 14:56, Eric Schultz [EMAIL PROTECTED] wrote:
Giorgos Keramidas wrote:
On 2006-01-30 13:42, Eric Schultz [EMAIL PROTECTED] wrote:
 sysintall help that a Minimal install is just the base
 system.  But what _functionality_ is provided by a *base
 system*???

 A short `overview' of a sort can be seen with:

 # man 5 rc.conf

 For every daemon, service, or option that you see in that
 manpage, there is also a feature of the base system.

 Good afternoon...

 That's a very interesting idea.  I guess that would cover (excuse my
 un-certainty with the terminology here) the /kernel/ but not the
 /userland/.  For the /userland/ i assume I would still have to man
 every executable - and then some - that I find?

No, many parts of the userland are configured by `rc.conf' options too.

Of course, an exchaustive list of all the binaries in */bin paths is,
uhm, a huge task.  But you can also get an idea by:

$ apropos . | more

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: What functionality is provided by minimal install

2006-02-01 Thread Greg Barniskis


Giorgos Keramidas wrote:

On 2006-01-31 14:56, Eric Schultz [EMAIL PROTECTED] wrote:

Giorgos Keramidas wrote:

On 2006-01-30 13:42, Eric Schultz [EMAIL PROTECTED] wrote:

sysintall help that a Minimal install is just the base
system.  But what _functionality_ is provided by a *base
system*???

A short `overview' of a sort can be seen with:

# man 5 rc.conf

For every daemon, service, or option that you see in that
manpage, there is also a feature of the base system.

Good afternoon...

That's a very interesting idea.  I guess that would cover (excuse my
un-certainty with the terminology here) the /kernel/ but not the
/userland/.  For the /userland/ i assume I would still have to man
every executable - and then some - that I find?


No, many parts of the userland are configured by `rc.conf' options too.

Of course, an exchaustive list of all the binaries in */bin paths is,
uhm, a huge task.  But you can also get an idea by:

$ apropos . | more


Also, the book _The Complete FreeBSD_ has many (all?) of the base 
man pages arranged in a convenient bound printed format. My copy is 
quite few years old though, and I really don't know how current or 
complete the most recent edition may be.


The man pages are also available online in a very, very convenient 
hyperlinked format so you can explore the relatedness of various 
pieces with ease.  http://www.freebsd.org/docs/man.html


You may find the man section indexes online to be the most useful 
for the task of enumerating all functionality.


--
Greg Barniskis, Computer Systems Integrator
South Central Library System (SCLS)
Library Interchange Network (LINK)
gregb at scls.lib.wi.us, (608) 266-6348
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Help: Problems with SSL after upgrade from 4.7 to 4-Stable

2006-02-01 Thread Chris Demers

Greetings Everyone,

Trying this again.

Have a problem that has been nagging me for about two weeks, recently I had to
upgrade one of my mail servers from 4.7 to 4-STABLE.

FreeBSD servername 4.11-STABLE FreeBSD 4.11-STABLE #1: Sat Jan 21 02:40:15 EST
2006

All associated ports on the box were all upgraded also, before the change and
also after, all were recompiled to make sure that they would not have any
problems.  Well, ended up with one problem where openssl from ports keeps core
dumping on anything that depends on it.

But I can run /usr/local/bin/openssl and it seems to run fine. And so does the
base system openssl.  Right now it's been perplexing me, I can't even load
webmin with SSL support without perl dumping core.  Or if I compile apache
with ssl or even if i do and just force it to run without it, works fine but
no ssl.  But as soon as I start it with ssl it core dumps also.  Same happens
with my imap mail server for excrypted pop and imap.  I have been going though
all the librarys in the base system, header files and have many time removed
and reinstalled the ports openssl, after with I rebuilt all associated ports
and the problem still persists.

I have lots of .core files if one is needed to figure this out.  I have even
tried to do back traces on them and it doesn't seem to make any sense.

Of all the years I have been using FreeBSD this is the first time that I have
had a problem like this with openssl core dumping all the time.  Normally I
wouldn't ask for help but tius is not making any sense.  And help or
suggestions would be aprechiated.

I want to try and get this box working 100% on 4-Stable before i do any more
upgrades to 5.4 and then to 6-Stable.  Which I have done on other machines
without pretty well even a hickup.

Thanks in advance,

-- 
Chris Demers
[EMAIL PROTECTED]
www.govital.net


--
Chris Demers
[EMAIL PROTECTED]
www.govital.net
www.govitalhosting.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: PCBSD on Windows

2006-02-01 Thread David Stanford

http://nopurpose.net/images/screenshot.gif

-David

On 1/31/06, David Stanford [EMAIL PROTECTED] wrote:

 For anyone who has been curious about maybe giving PCBSD a run for it's
 money but just haven't had the time (or resources) to do so, here is your
 answer:

 http://www.pcbsd.org/index.php?id=23

 I just installed VMware Player (5 mins.) and ran the PCBSD VMware image
 off it and...done. A fully functional PCBSD environment. This is extremely
 beneficial to anyone forced to use a Microsoft OS. It seems like PCBSD is
 quickly obtaining the just works status.

 -David

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: pkg_add Broken Pipe

Sean Murphy [EMAIL PROTECTED] writes:

 pkg_add -r nessus
 Fetching
 ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.0-release/Latest/nessus.tbz...
  Done.
 Broken pipe
 
 what does this mean?

Hard to say.  
Fetch the package to your local disk and use the -v flag to pkg_add
it.  That will give you more information.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Dell CERC (aac driver) issue after upgrade to 6-STABLE

Chris Knight [EMAIL PROTECTED] writes:

 I just purchased a Dell PowerEdge 1800 to replace my mail server.  It
 has two 3.2 Xeon processors, 2G of ECC memory, and a Dell CERC SATA
 RAID controller with two 160G Maxtor drives in a RAID 1 mirror.  The
 Dell CERC appears to be an Adaptec RAID controller, and it is detected
 by the aac driver.
 
 I donwloaded the ISO for FreeBSD 6.0 i386 and installed it tonight.
 So far, so good.
 
 I rebuilt the RELEASE kernel with SMP options.  So far, so good.
 
 I synced to 6-STABLE, made world, recompiled the SMP kernel.
 
 Now when I reboot I get to the detection of the RAID controller and my
 screen is scrolling with the following errors:
 
 aac0:  COMMAND 0xc6588000 TIMEOUT AFTER 559 SECONDS
 aac0:  COMMAND 0xc6588000 TIMEOUT AFTER 579 SECONDS
 aac0:  COMMAND 0xc6588000 TIMEOUT AFTER 599 SECONDS
 
 Has anyone else encountered this problem?  What do I need to do to fix it?
 
 -Chris
 
 ps.  Manually loading kernel.old at boot works, so I assume it is some
 bit of new driver foo.

Well, the aac driver just (Monday) got its first changes in
RELENG_6 since the 6.0 release.  Some of those changes do involve
keeping track of timeouts.  To help solve the problems, talking
to Scott Long (scottl) would be the way to go.  [To get past the
problems right now, just back your sources out to any time before
Mon Jan 30 17:56:06 2006 UTC.]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Weird behaviour 'umount' on NFS disk

Frank Staals [EMAIL PROTECTED] writes:

 Hey,
 
 Usually I work at my laptop, if I'm at home I can mount some
 directories from my server so I can also access those files and I
 don't have to ftp them. For the mounting I use this script :
 
 [EMAIL PROTECTED] cat /usr/local/bin/nfsmount
 #!/bin/sh
 
 srv=192.168.2.1
 
 if [ $1 = -wlan ]; then
 srv=192.168.5.1
 fi
 
 echo Mounting home/net/var-/mnt/var , home-/mnt/server and
 home/net/server-/mnt/series from $srv
 mount $srv:/home/net/var/ /mnt/var/
 mount $srv:/home/ /mnt/server/
 mount $srv:/home/net/series/ /mnt/series/
 [EMAIL PROTECTED]
 
 The IP adres of my server is 192.168.2.1 when using LAN and it is
 accessable at 192.168.5.1 using WLAN. It is set up allowing mounts
 from my laptop using LAN as well as WLAN. This works perfectly.
 
 For unmounting the three NFS-mounts I use an other script which is
 just three times an 'umount' :
 
 #!/bin/sh
 
 umount /mnt/server
 umount /mnt/series
 umount /mnt/var
 
 df -m
 echo /mnt/server , /mnt/series and /mnt/var unmounted
 
 
 [EMAIL PROTECTED]
 
 Up until a week ago this worked fine. I could mount and unmount the
 directories without any problems. But then a weird error occured. When
 I tried unmounting them. The umount command hangs when trying to
 unmount a disk but when I cancel the umount ( with Ctrl  + c ) df
 shows that the disk is unmounted. It just won't give me a prompt
 again. The same thing happens when I try to unmount them manually. I
 can unmount a disk, but it just stops. To clear things up:
 
 [EMAIL PROTECTED] df  Filesystem   1K-blocks  Used
 Avail Capacity  Mounted on
 /dev/ad0s1a4058062   3450302   28311692%/
 devfs1 10   100%/dev
 /dev/ad0s1d   33524236  23047782  779451675%/home
 192.168.2.1:/home/net/var 75685352  57816262 1181426283%/mnt/var
 192.168.2.1:/home 52195402  29726280 1829349062%
 /mnt/server
 192.168.2.1:/home/net/series 151368706 128022780 1123643092%
 /mnt/series
 [EMAIL PROTECTED] umount /mnt/server/
 ^C
 [EMAIL PROTECTED] df
 Filesystem   1K-blocks  UsedAvail Capacity
 Mounted on
 /dev/ad0s1a4058062   3450302   28311692%/
 devfs1 10   100%/dev
 /dev/ad0s1d   33524236  23047782  779451675%/home
 192.168.2.1:/home/net/var 75685352  57816262 1181426283%/mnt/var
 192.168.2.1:/home/net/series 151368706 128022780 1123643092%
 /mnt/series
 [EMAIL PROTECTED]
 
 This is quite annoying since I can't use my script to unmount the
 disks anymore. I didnt' change anything to my mounts ( /etc/fstab )
 and unmounting a DVD doesn't give any problems. The only thing I can
 see has changed is that at boot the system hangs at:
 
 Mounting NFS file systems:
 NFS access cache time=2
 
 and I have to ctrl + c it to continue booting, this only happend
 before when I hadn't any network connection. But mounting the
 nfs-disks using my script did work.
 
 Anyone an Idea what I can do to fix this ? Running FreeBSD 7.0-Current
 by the way.

Well, try umount -f and trace the process to see where it's hanging.
But this sounds kind of familiar from the -CURRENT list; you really
should keep track of that list if you're going to run -CURRENT.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: uninstall httpd + others to get a base system only

2006-02-01 Thread Igor Robul

On Tue, Jan 31, 2006 at 07:57:59PM -0600, luke wrote:
 all packages installed _should_ be in /var/db/pkg(i think) i'm in windows
 now. so if you pkg_delete /var/db/pkg/* that should clean it all up.
:-)
It will only delete information about packages, not packages self.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: DNS nslint error messages

2006-02-01 Thread Chuck Swiger

Brad Gilmer wrote:
 Chuck and Gorgios,
 
 Thank you very much for your suggestions.

Sure.  At least occasionally, we manage to be helpful.  :-)

[ ... ]
 Chuck, you said,
 The second one (nslint error) recommends adding a line like:
  localhost   IN A 127.0.0.1
 
 ... to your gilmer.org zone, using no . at the end to create a
 localhost.EXAMPLE.COM entry.
 
 But when I make this change to the localhost entry in the
 /etc/namedb/master/gilmer.org file, nslint reports:
 
 nslint: missing a: localhost. - 127.0.0.1

This is the same issue as before; you don't have a localhost zone.

 nslint: missing ptr: localhost.gilmer.org. - 127.0.0.1

This means that you don't have a reverse zone file for 127.in-addr.arpa:

;
; BIND reverse data file for local loopback interface
;

$TTL 864000

@   IN  SOA localhost. root.localhost. (
  1 ; Serial
 604800 ; Refresh
  86400 ; Retry
2419200 ; Expire
 604800 )   ; Default TTL
;
@   NS  localhost.
1.0.0   PTR localhost.


 nslint: 127.0.0.1 in use by localhost.gilmer.org. and localhost.

This means nslint is being too picky, but adding a reverse zone file with a PTR
record might hush it up.

-- 
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Capi 4 BSD with FreeBSD 6

2006-02-01 Thread Matthias Fechner

Hi,

I have a ITK active ISDN with a PCI Interface.
I used the card with FreeBSD 5.4 with the description from:
http://www.shellbang.org/freebsd/introducingc4b.html

How can i use this active ISDN card with FreeBSD6?

Is the driver from Thomas Wintergerst allready implemented in FreeBSD6?

Thx for help!

Best regards,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

LiveCD FreeBSD

2006-02-01 Thread Paul


Dear FreeBSD

Up untill Dec 01 '05  I was a die hard MicroShaft user, too many lockups 
and garbage caused me to search for a new OS. That is when I came up 
with PCLOS. Then I got a web server and it runs FreeBSD. I would like to 
use FreeBSD on my local computer so I can learn it more.


Is there a LiveCD for FreeBSD I looked at the web site for Freebsd but 
was unable to be for sure what is there.


I perfer a LiveCD so I can first run it on my computer before I totally 
convert. Also when and if I convert will I lose all my desktop files?


Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Promise SATAII150 TX2plus ok for 6.0?

2006-02-01 Thread Ville Lundberg

Hi,

being quite fed up with the crappy Sil3512 SATA-controller on my
mainboard (write_dma timeouts, and just when I thought 6.0-release fixed
it, setfeatures set transfer mode semaphore timeout-messages is
filling my screens), I'm looking after good replacements. Browsing the
web and the mailing list archives, Promise cards have been praised. I
could get my hands on a SATAII150 TX2plus, anyone having good/bad
experiences with such a card?

To anyone new reading these lists, stay the heck out of Silicon Image
chips, especially the 3112 and 3512. But anyone hanging out on the
mailing lists for longer knows that already.
  --Ville

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: How does FreeBSD handle devices under /compat/linux?

2006-02-01 Thread Dan Nelson

In the last episode (Feb 01), Joel Hatton said:
 I've gone ahead and installed linux_base-8 on 6.0 RELEASE. What I'd
 like to know is how are devices handled? For example, and this is
 crucial to my application, is it possible for a linux application to
 talk to /dev/st0, and if so how is this accomplished with no
 /compat/linux/dev directory and with devfs in operation?

I'd make a symlink from /compat/linux/dev/st0 to /dev/sa0 . That'll
work if you just want to read/write a tape.  You can't do any fancy
stuff like setting densities or block positioning, since the ioctls are
different between FreeBSD and Linux and I don't see any translation
code for MTIOCTOP in /sys/compat/linux/linux_ioctl.c .

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Getting a new server

2006-02-01 Thread Lisa Casey


Hi,

My company (a medium sized ISP) has decided to replace one of our mail 
servers. We need more CPU power, memory, etc. My boss is talking about 
getting 2 good size hard drives with a raid card to mirror these. I was 
planning to install FreeBSD 5.3 (because that's the latest distro I have 
CD's for) unless anyone has a good reason why not.


I'll be installing Sendmail, mimedefang/spamassassin (somewhat CPU 
intensive), bind (for  a caching name server), Qpopper, procmail. We 
currently have 500 - 600 mail accounts on the current server, and plan to 
move these to the new server plus use the new one for growth (I don't know 
how quickly new mail accounts will be added, but say 20 to 50 accounts per 
month.


What would you folks reccomend as far as hardware goes? Hard drive size, CPU 
type,  amount of RAM, etc.?


Thanks for the input.

Lisa Casey

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

x225 serveraid 5i with bios 7.10.18

2006-02-01 Thread Omer Faruk Sen

Hi 

Does anyone successfully booted this system. I have one of this and at 
loader stage it dumps a lot of things to screen and can't boot system. But 
if I remove serveraid 5i card system boots but naturally can't find any hdd. 

I have updated serveraid 5i card's bios to 7.10.18 but it didn't help.. 

I have tried both 5.4 and 6.0 

I have used cd image (serveraid support cd) located 
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-56811 


---
Omer Faruk Sen
http://www.EnderUNIX.ORG
Software Development Team @ Turkey
http://www.Faruk.NET
For Public key: http://www.enderunix.org/ofsen/ofsen.asc
*** 


AcikAcademy published a Turkish TCP/IP Book
Acik Akademi'nin yeni kitabini duydunuz mu?
http://www.acikakademi.com/catalog/tcpip/ 



Life is trouble.. Only Death is not!
 -Alexis Zorba
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: LiveCD FreeBSD

2006-02-01 Thread Jacob S

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 01 Feb 2006 09:17:44 -0600
Paul [EMAIL PROTECTED] wrote:

 Dear FreeBSD
 
 Up untill Dec 01 '05  I was a die hard MicroShaft user, too many
 lockups and garbage caused me to search for a new OS. That is when I
 came up with PCLOS. Then I got a web server and it runs FreeBSD. I
 would like to use FreeBSD on my local computer so I can learn it more.
 
 Is there a LiveCD for FreeBSD I looked at the web site for Freebsd
 but was unable to be for sure what is there.

You might try a google search. The following turned up two useful
results in the first 3 hits for me. I have found FreeSBIE to be a good
one (3rd result on that page).

http://www.google.com/search?hl=enq=freebsd+livecd

 I perfer a LiveCD so I can first run it on my computer before I
 totally convert. Also when and if I convert will I lose all my
 desktop files?

As long as you make a backup of your desktop files, they will still be
around when you switch to another OS. As to whether you will be able to
use them or not, that depends on what type/format the files are.

HTH,
Jacob
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFD4NfykpJ43hY3cTURAkfYAJ0VT4ZQlGjtP8++Z/wzg/hB08wGRwCeI7Rh
GjQHB7ch2PZI/z1U5xIiVXg=
=A7c1
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Openfoam/Paraview - linux-tiff security vulnerabilities

2006-02-01 Thread Mark Lubratt


Hello!

I'm trying to install the OpenFoam port on 6.0 Stable with he current  
ports tree.  During the install, I get the following errors from the  
paraview dependency:


   Verifying install for /usr/local/lib/paraview-2.4/ 
ParaViewConfig.cmake i

n /usr/ports/science/paraview
===  paraview-2.4.2 has known vulnerabilities:
= tiff -- buffer overflow vulnerability.
   Reference: http://www.FreeBSD.org/ports/portaudit/ 
68222076-010b-11da-bc08-00

01020eed82.html
= tiff -- divide-by-zero denial-of-service.
   Reference: http://www.FreeBSD.org/ports/portaudit/ 
b58ff497-6977-11d9-ae49-00

0c41e2cdad.html
= tiff -- directory entry count integer overflow vulnerability.
   Reference: http://www.FreeBSD.org/ports/portaudit/ 
fc7e6a42-6012-11d9-a9e7-00

01020eed82.html
= tiff -- multiple integer overflows.
   Reference: http://www.FreeBSD.org/ports/portaudit/ 
3897a2f8-1d57-11d9-bc4a-00

0c41e2cdad.html
= tiff -- RLE decoder heap overflows.
   Reference: http://www.FreeBSD.org/ports/portaudit/ 
f6680c03-0bd8-11d9-8a8a-00

0c41e2cdad.html
= Please update your ports tree and try again.


I've updated the ports tree multiple times.  I've perused the  
archives and found that all of these vulnerabilities should already  
be fixed (to the best of my understanding).  Portaudit doesn't report  
the current linux-tiff-3.6.1_5 has having these vulnerabilities.   
I've tried deinstalling and reinstalling linux-tiff.  Portversion  
reports that linux-tiff is up to date.


I'm not sure what to do next, or how to get around this error.  Any  
help would be appreciated!


Thanks!
Mark

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Getting a new server

2006-02-01 Thread Kövesdán Gábor


Lisa Casey wrote:


Hi,

My company (a medium sized ISP) has decided to replace one of our mail 
servers. We need more CPU power, memory, etc. My boss is talking about 
getting 2 good size hard drives with a raid card to mirror these. I 
was planning to install FreeBSD 5.3 (because that's the latest distro 
I have CD's for) unless anyone has a good reason why not.


I'll be installing Sendmail, mimedefang/spamassassin (somewhat CPU 
intensive), bind (for  a caching name server), Qpopper, procmail. We 
currently have 500 - 600 mail accounts on the current server, and plan 
to move these to the new server plus use the new one for growth (I 
don't know how quickly new mail accounts will be added, but say 20 to 
50 accounts per month.


I'd suggest using courier-imap or something else instead of qpopper. 
Afaik, qpopper supports only the mailbox format, which is slower and 
less secure than the maildir format used by modern pop3/imap servers. 
Courier-imap has a pop3 and an imap part, both of them have SSL support 
and are easily configurable. Your company migth benefit from running an 
imap server too. It has a bunch of advantages over pop3, so this might 
make your users feel more appreciated.


Regards,

Gabor Kovesdan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Getting a new server

2006-02-01 Thread Chuck Swiger

Lisa Casey wrote:
 My company (a medium sized ISP) has decided to replace one of our mail
 servers. We need more CPU power, memory, etc. My boss is talking about
 getting 2 good size hard drives with a raid card to mirror these. I was
 planning to install FreeBSD 5.3 (because that's the latest distro I have
 CD's for) unless anyone has a good reason why not.

5.4 is out, but you can easily install from your FreeBSD 5.3 CD's and upgrade.
6.0 is also worth taking a look at, if you have time to test it and make sure it
works with the software you want to run.  Most people are wise to be cautious
about adopting a .0 release, but 6.0 is solid.

 I'll be installing Sendmail, mimedefang/spamassassin (somewhat CPU
 intensive), bind (for  a caching name server), Qpopper, procmail. We
 currently have 500 - 600 mail accounts on the current server, and plan
 to move these to the new server plus use the new one for growth (I don't
 know how quickly new mail accounts will be added, but say 20 to 50
 accounts per month.
 
 What would you folks reccomend as far as hardware goes? Hard drive size,
 CPU type,  amount of RAM, etc.?

If you're buying new hardware, pretty much anything has enough CPU to handle the
reader side; the spamfiltering and virus scanning will be more CPU-intensive.
Dual-3GHz Xeon's with 2GB of RAM?  Your normal candidates, Dell, HP, IBM, all
have reasonably similar models (PowerEdge 28x0, HP DL370/380, etc) which will do
just fine for this sort of thing.

If at all possible, it would be nice to seperate your MX box which does SMTP,
virus scanning, and spam-filtering, and have another machine which is a reader
box which runs your IMAP/POP daemons and has the filestorage to handle your
mailboxes.  As to storage:

  100 MB per user * 1000 users == 100 GB of space

If you want to give your users more room, buy more disk, but you should be
looking into RAID-1 or RAID-10 configuration, preferably also using maildir
rather than mbox style mailboxes.

-- 
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

exim-mysql requires ldconfig but doesn't?

2006-02-01 Thread daniel quinn

I admit it.  I really don't get the FreeBSD packaging system.  Sometimes I'll 
create a package without errors, but the package will be empty.  Other times, 
the package is created and comes with requirements that were never built.

At the moment, I'm dealing with the latter.  I created a package for 
exim-mysql with the following command:

  # portupgrade --package --recursive --new exim-mysql

And it *appears* to work.  However, when I rsync the ports tree to another 
machine (including the newly created package in packages/All/) doing the 
following results in an error:

  # PKG_FETCH=/usr/bin/false; \
portupgrade --recursive --use-packages-only --new exim-mysql
  ---  Checking for the latest package of 'mail/exim-mysql'
  ---  Found a package of 
'mail/exim-mysql': /usr/ports/packages/All/exim-mysql-4.60.tbz 
(exim-mysql-4.60)
  ---  Installing 'exim-mysql-4.60' from a package
  ---  Installing misc/ldconfig_compat as dependency required by 
exim-mysql-4.60
  ---  Checking for the latest package of 'misc/ldconfig_compat'
  ---  Fetching the package(s) for 
'ldconfig_compat-1.0_5' (misc/ldconfig_compat)
  ---  Fetching the latest package(s) for 
'ldconfig_compat' (misc/ldconfig_compat)
  ** Could not find the latest version (1.0_5)
  ** No package available: misc/ldconfig_compat
  ---  Installing the new version via the package
  ** Listing the failed packages (*:skipped / !:failed)
  ! misc/ldconfig_compat  (package not found)
  ---  Packages processed: 1 done, 0 ignored, 0 skipped and 1 failed

Apparently, a dependency is missing.  Something called ldconfig.  So I try 
to remove it:

  # pkg_deinstall exim-mysql-4.60
  [Updating the pkgdb format:bdb1_btree in /var/db/pkg ... - 103 packages 
  found (-0 +1) . done]
  Stale dependency: exim-mysql-4.60 -- ldconfig_compat-1.0_5 -- manually run 
  'pkgdb -F' to fix, or specify -O to force.

Now it's complaining about a stale dependency...  A dependency for a package 
that was just installed.  I remove the dependency with pkgdb --fix but that 
doesn't solve the problem because the package was still built wrong.

Reading the contents of /usr/ports/mail/exim/Makefile tells me nothing.  I 
only found out that mysql-server requires this but I'm not sure how to make 
this work properly.

I've built and rebuilt exim-mysql on the main server with no results.  I've 
broken down and installed it manually from ports on the client machine but 
this is not an option.

Please, if someone can rescue me from this insanity, I'd be o-so-greatful.

-- 
do we have to pick sides in the end?
  - ali hossaini, writer
in reaction to growing racial unrest in the United states since 2001/09/11
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: LiveCD FreeBSD

2006-02-01 Thread Duane Whitty


Jacob S wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 01 Feb 2006 09:17:44 -0600
Paul [EMAIL PROTECTED] wrote:



Dear FreeBSD

Up untill Dec 01 '05  I was a die hard MicroShaft user, too many
lockups and garbage caused me to search for a new OS. That is when I
came up with PCLOS. Then I got a web server and it runs FreeBSD. I
would like to use FreeBSD on my local computer so I can learn it more.

Is there a LiveCD for FreeBSD I looked at the web site for Freebsd
but was unable to be for sure what is there.



You might try a google search. The following turned up two useful
results in the first 3 hits for me. I have found FreeSBIE to be a good
one (3rd result on that page).

http://www.google.com/search?hl=enq=freebsd+livecd



I perfer a LiveCD so I can first run it on my computer before I
totally convert. Also when and if I convert will I lose all my
desktop files?



As long as you make a backup of your desktop files, they will still be
around when you switch to another OS. As to whether you will be able to
use them or not, that depends on what type/format the files are.

HTH,
Jacob
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFD4NfykpJ43hY3cTURAkfYAJ0VT4ZQlGjtP8++Z/wzg/hB08wGRwCeI7Rh
GjQHB7ch2PZI/z1U5xIiVXg=
=A7c1
-END PGP SIGNATURE-




I'm running FreeBSD with a dual boot 
config at the moment.  Windows on one 
drive and FreeBSD on another drive.


In past installations I've had Windows 
and FreeBSD sharing a drive.


What I've found convenient is that I am 
able to access my NTFS drives from 
FreeBSD (it would seen read-only however)


FreeBSD as a desktop environment is 
quite useable.  With KDE 3.5 I'm at the 
point where I rarely need to boot into 
Windows anymore.


I can say that if you want to learn an 
OS FreeBSD makes it easier than many 
because it has so much excellent 
documentation.  Installing FreeBSD as 
your desktop OS definitly forces a 
person to learn but as you do you will 
notice it is very flexible.


--Duane Whitty
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: /dev/dsp

2006-02-01 Thread Björn König


Mohsen Pahlevanzadeh schrieb:

Dear all,
I have installed FreeBSD 6.0.But since 5 series,MAKEDEV was removed. 
replace with devfs.

I haven't /dev/dsp
Please help me that i can create it
Yours,Mohsen


Did you load the appropriate driver for your sound chip? Show me 
kldstat and pciconv -lv please.


Björn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

2006-02-01 Thread Robert Huff


martinko writes:

  $ cat /usr/local/etc/javavms

Will someone please confirm that once these

  /usr/local/jdk1.5.0/bin/java # FREEBSD-JDK1.5.0
  /usr/local/jdk1.4.2/bin/java # FREEBSD-JDK1.4.2

are installed one no longer needs this

  /usr/local/linux-sun-jdk1.4.2/bin/java # Linux-Sun-JDK1.4.2.10

?


Robert Huff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Getting a new server

2006-02-01 Thread Lisa Casey


Hi Gabor,



I'd suggest using courier-imap or something else instead of qpopper. 
Afaik, qpopper supports only the mailbox format, which is slower and less 
secure than the maildir format used by modern pop3/imap servers. 
Courier-imap has a pop3 and an imap part, both of them have SSL support 
and are easily configurable. Your company migth benefit from running an 
imap server too. It has a bunch of advantages over pop3, so this might 
make your users feel more appreciated.


I agree you have a pointg here, my main concerns are:

1) I'm used to Sendmail/Qpopper. I'm used to installing these, maintaining 
these and troubleshooting these. I also want changing over the mail server 
to be as seamless as possible for our customers. So I don't really want to 
add a Courier-imap learning curve (for both myself and my customers) right 
on top of things.


2) I also am used to (and kind of like) having all of the mailboxes in one 
location on the system (/var/mail/). How much of a performance hit is there 
in mbox mailboxes vs mdir format mailboxes?


Lisa Casey

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

2006-02-01 Thread Panagiotis Astithas


Robert Huff wrote:

martinko writes:


 $ cat /usr/local/etc/javavms


Will someone please confirm that once these


 /usr/local/jdk1.5.0/bin/java # FREEBSD-JDK1.5.0
 /usr/local/jdk1.4.2/bin/java # FREEBSD-JDK1.4.2


are installed one no longer needs this


 /usr/local/linux-sun-jdk1.4.2/bin/java # Linux-Sun-JDK1.4.2.10


?


I don't have it any more. A pkg_delete of the linux jdk removed it.

Cheers,

Panagiotis

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: LiveCD FreeBSD

2006-02-01 Thread Matthew Seaman

Paul wrote:

 Is there a LiveCD for FreeBSD I looked at the web site for Freebsd but
 was unable to be for sure what is there.

Yes.

http://www.freesbie.org/

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

Re: LiveCD FreeBSD

2006-02-01 Thread Vince Hoffman




On Wed, 1 Feb 2006, Duane Whitty wrote:


Jacob S wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 01 Feb 2006 09:17:44 -0600
Paul [EMAIL PROTECTED] wrote:



Dear FreeBSD

Up untill Dec 01 '05  I was a die hard MicroShaft user, too many
lockups and garbage caused me to search for a new OS. That is when I
came up with PCLOS. Then I got a web server and it runs FreeBSD. I
would like to use FreeBSD on my local computer so I can learn it more.

Is there a LiveCD for FreeBSD I looked at the web site for Freebsd
but was unable to be for sure what is there.



Try either http://www.freesbie.org/
or as per an earler post try pcbsd in the free vmware player
(see http://www.pcbsd.org/index.php?id=23)




You might try a google search. The following turned up two useful
results in the first 3 hits for me. I have found FreeSBIE to be a good
one (3rd result on that page).

http://www.google.com/search?hl=enq=freebsd+livecd



I perfer a LiveCD so I can first run it on my computer before I
totally convert. Also when and if I convert will I lose all my
desktop files?



As long as you make a backup of your desktop files, they will still be
around when you switch to another OS. As to whether you will be able to
use them or not, that depends on what type/format the files are.

HTH,
Jacob
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFD4NfykpJ43hY3cTURAkfYAJ0VT4ZQlGjtP8++Z/wzg/hB08wGRwCeI7Rh
GjQHB7ch2PZI/z1U5xIiVXg=
=A7c1
-END PGP SIGNATURE-




I'm running FreeBSD with a dual boot config at the moment.  Windows on one 
drive and FreeBSD on another drive.


In past installations I've had Windows and FreeBSD sharing a drive.

What I've found convenient is that I am able to access my NTFS drives from 
FreeBSD (it would seen read-only however)


FreeBSD as a desktop environment is quite useable.  With KDE 3.5 I'm at the 
point where I rarely need to boot into Windows anymore.


I can say that if you want to learn an OS FreeBSD makes it easier than many 
because it has so much excellent documentation.  Installing FreeBSD as your 
desktop OS definitly forces a person to learn but as you do you will notice 
it is very flexible.


--Duane Whitty
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

Robert Huff [EMAIL PROTECTED] writes:

 martinko writes:
 
   $ cat /usr/local/etc/javavms
 
   Will someone please confirm that once these
 
   /usr/local/jdk1.5.0/bin/java # FREEBSD-JDK1.5.0
   /usr/local/jdk1.4.2/bin/java # FREEBSD-JDK1.4.2
 
   are installed one no longer needs this
 
   /usr/local/linux-sun-jdk1.4.2/bin/java # Linux-Sun-JDK1.4.2.10
 
   ?

Yes.  

In fact, it's no longer needed once they are built, not just
installed.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Upgrading apache form 2.0.x to 2.2.x

2006-02-01 Thread Kövesdán Gábor


Kövesdán Gábor wrote:


Charles Swiger wrote:


On Jan 31, 2006, at 10:06 AM, Kövesdán Gábor wrote:

I've upgradde today, but SSL doesn't work with the old settings. I  
suspect something's wrong with my self-signed certificates. If I  
set SSLEngine On globally, I get this:


[Tue Jan 31 14:11:09 2006] [warn] RSA server certificate is a CA  
certificate (BasicConstraints: CA certificate (BasicConstraints: CA  
== TRUE !?)




Yeah, the RSA cert you use for your CA to sign other certs should 
not  be used as a host cert for SSL.  Generate a new RSA cert, 
generate a  CSR, and use the CA cert to sign your new RSA cert for 
the webserver:



   openssl req -nodes -new -x509 -keyout newreq.pem -out newreq.pem - 
days 365
   openssl x509 -x509toreq -in newreq.pem -signkey newreq.pem -out  
tmp.pem

   openssl ca -policy policy_anything -out newcert.pem -infiles tmp.pem
   #  (newcert.pem contains signed certificate, newreq.pem still  
contains

   #  unsigned certificate and private key)

Thanks, I see the point, but I don't really experienced in generating 
certs. The lines you wrote lead me to the following:


[EMAIL PROTECTED] openssl req -nodes -new -x509 -keyout newreq.pem -out 
newreq.pem -days 365

Generating a 1024 bit RSA private key
.++
..++
writing new private key to 'newreq.pem'
-
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or 
a DN.

There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-
Country Name (2 letter code) [AU]:HU
State or Province Name (full name) [Some-State]:Budapest
Locality Name (eg, city) []:Budapest
Organization Name (eg, company) [Internet Widgits Pty Ltd]:T-Hosting.Hu
Organizational Unit Name (eg, section) []:HTTP Server
Common Name (eg, YOUR name) []:server.t-hosting.hu
Email Address []:[EMAIL PROTECTED]
[EMAIL PROTECTED] openssl x509 -x509toreq -in newreq.pem -signkey 
newreq.pem -out  tmp.pem

Getting request Private Key
Generating certificate request
[EMAIL PROTECTED] openssl ca -policy policy_anything -out newcert.pem 
-infiles tmp.pem

Using configuration from /etc/ssl/openssl.cnf
Error opening CA private key ./demoCA/private/cakey.pem
46641:error:0E06D06C:configuration file routines:NCONF_get_string:no 
value:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/conf/conf_lib.c:329:group=CA_default 
name=unique_subject
46641:error:02001002:system library:fopen:No such file or 
directory:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:276:fopen('./demoCA/private/cakey.pem','r') 

46641:error:20074002:BIO routines:FILE_CTRL:system 
lib:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:278: 


unable to load CA private key
Segmentation fault (core dumped)

Could you tell me what's wrong?

Thanks,

Gabor Kovesdan



Hi again,

since then I've found a howto about certs: 
http://www.debian-administration.org/articles/284

I followed the steps, and now I have three separate files:
1, the ca cert, called cacert.pem
2, the signed cert, called cert.pem
3, the private key, called key.pem

My httpd.conf contains this about SSL configuration:

IfModule mod_ssl.c

NameVirtualHost 217.20.133.7:443
SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect file:/dev/urandom 512

Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl.crl

SSLPassPhraseDialog  builtin

SSLCertificateFile /usr/local/etc/apache22/cert.pem
SSLCertificateKeyFile /usr/local/etc/apache22/key.pem
SSLCACertificateFile /usr/local/etc/apache22/cacert.pem

SSLSessionCache dbm:/var/run/ssl_scache
SSLSessionCacheTimeout  300

SSLMutex  file:/var/run/ssl_mutex

SSLEngine   Off

/IfModule

Now, if I globally set SSLEngine On apache doesn't start and writes 
nothing to the error log. If I only set SSLEngine On is a VirtualHost 
section, I get the same Invalid method in request message.


Does somebody have any idea?

Thanks,

Gabor Kovesdan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Firefox 1.5

2006-02-01 Thread Panagiotis Astithas


Stijn Hoop wrote:

For those interested, paste the inline patch below in

/usr/ports/www/firefox/files/patch-bugzilla305970

And reinstall your firefox. Thanks again, Anish, it certainly seemed to
help me!

--Stijn

--- widget/src/gtk2/nsWindow.cpp.orig   Thu Aug 18 10:11:23 2005
+++ widget/src/gtk2/nsWindow.cppSat Jan 28 18:34:03 2006
@@ -148,9 +148,9 @@
GdkEventVisibility *event);
 static gboolean window_state_event_cb (GtkWidget *widget,
GdkEventWindowState *event);
-static void style_set_cb  (GtkWidget *widget,
-   GtkStyle *previous_style,
-   gpointer data);
+static void theme_changed_cb  (GtkSettings *settings,
+   GParamSpec *pspec,
+   nsWindow *data);
 #ifdef __cplusplus
 extern C {
 #endif /* __cplusplus */
@@ -372,6 +372,10 @@
 mIsDestroyed = PR_TRUE;
 mCreated = PR_FALSE;
 
+g_signal_handlers_disconnect_by_func(gtk_settings_get_default(),

+ 
(gpointer)G_CALLBACK(theme_changed_cb),
+ this);
+
 // ungrab if required
 nsCOMPtrnsIWidget rollupWidget = do_QueryReferent(gRollupWindow);
 if (NS_STATIC_CAST(nsIWidget *, this) == rollupWidget.get()) {
@@ -2434,8 +2438,16 @@
  G_CALLBACK(delete_event_cb), NULL);
 g_signal_connect(G_OBJECT(mShell), window_state_event,
  G_CALLBACK(window_state_event_cb), NULL);
-g_signal_connect(G_OBJECT(mShell), style_set,
- G_CALLBACK(style_set_cb), NULL);
+
+g_signal_connect_after(gtk_settings_get_default(),
+   notify::gtk-theme-name,
+   G_CALLBACK(theme_changed_cb), this);
+g_signal_connect_after(gtk_settings_get_default(),
+   notify::gtk-key-theme-name,
+   G_CALLBACK(theme_changed_cb), this);
+g_signal_connect_after(gtk_settings_get_default(),
+   notify::gtk-font-name,
+   G_CALLBACK(theme_changed_cb), this);
 }
 
 if (mContainer) {

@@ -3916,11 +3928,9 @@
 
 /* static */

 void
-style_set_cb (GtkWidget *widget, GtkStyle *previous_style, gpointer data)
+theme_changed_cb (GtkSettings *settings, GParamSpec *pspec, nsWindow *data)
 {
-nsWindow *window = get_window_for_gtk_widget(widget);
-if (window)
-window-ThemeChanged();
+data-ThemeChanged();
 }
 
 //



This has made firefox a pleasure to use again for me.

Thanks,

Panagiotis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Getting a new server

2006-02-01 Thread Kövesdán Gábor

Hi,

Lisa Casey wrote:

Hi Gabor,

I'd suggest using courier-imap or something else instead of qpopper.
Afaik, qpopper supports only the mailbox format, which is slower and
less secure than the maildir format used by modern pop3/imap servers.
Courier-imap has a pop3 and an imap part, both of them have SSL
support and are easily configurable. Your company migth benefit from
running an imap server too. It has a bunch of advantages over pop3,
so this might make your users feel more appreciated.

I agree you have a pointg here, my main concerns are:

1) I'm used to Sendmail/Qpopper. I'm used to installing these,
maintaining these and troubleshooting these. I also want changing over
the mail server to be as seamless as possible for our customers. So I
don't really want to add a Courier-imap learning curve (for both
myself and my customers) right on top of things.

I see that, but it isn't so hard if you can use MySQL or OpenLDAP, and I
assume you can use MySQL at least. PostgreSQL is okay, of course. The
basic configuration is pretty straightforward. You have to set the basic
options about the behaviour of the imap server, then you have to create
an SQL table or an LDAP directory where you store all the mail account
information. Then you specify to the courier-server which SQL server,
which table, ... to use. That's it. There are a bunch of good howto
documents on the net, and if you use MySQL I can send you a sample
configuration, too. As for your customers, they dont have to learn
anything new about that. Courier-imap has a pop3 part, too, as I said,
so they can still use their mailer program set up. Using courier-imap
means you just more functionality, not less and not different.
As for sendmail, it can handle maildirs, I don't know how to configure,
because I use Postfix, but it can't be so hard.
Here are some howtos if you want to take a look. They use Postfix as an
MTA, but the courier-imap part is useful for you:

http://postfixwiki.org/index.php?title=Virtual_Users_and_Domains_with_Courier-IMAP_and_MySQL
http://www.phparchitecture.com/howto_show.php?id=2
http://workaround.org/articles/ispmail-sarge/
http://www.marlow.dk/site.php/tech/postfix

2) I also am used to (and kind of like) having all of the mailboxes in
one location on the system (/var/mail/). How much of a performance hit
is there in mbox mailboxes vs mdir format mailboxes?

I managed to find a benchmark about this:
http://www.courier-mta.org/mbox-vs-maildir/

Anyway, here's a benchmark about MTAs if you're interested. Postfix does
much faster than sendmail. And much easier configurable, so it is also
easy to learn.

http://www-dt.e-technik.uni-dortmund.de/~ma/postfix/bench2.html

Regards,

Gabor Kovesdan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

NVidia GeForce 6600 problems

2006-02-01 Thread Alejandro Pulver

Hello,

I have recently bought a GeForce 6600 video card, and sometimes (not
very often) I experience the following problem:

A little after starting X11 (for example when I start downloading
e-mails), the screen freezes a few seconds, after that the screen looks
like if widgets (buttons, text, etc.) aren't drawn, and the white
background of Sylpheed-Claws covers the screen. Then I am forced to
switch to the 1st console (Ctrl+Alt+F1), which takes around 30 seconds,
and then kill X11.

I have FreeBSD 5.4 release, Xorg 6.8.2 and nvidia-driver 1.0.8178.

I know this problem is with the driver, because I got this kernel
message:

NVRM: Xid: 8, Channel 
NVRM: Xid: 8, Channel 0020

And the Xorg log has the following:

(WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe75c, 0)
(WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe75c, 0)
Failed to switch consoles (Invalid argument)
(WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe834, 0)
(WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe834, 0)
(WW) NVIDIA(0): WAIT (2, 4, 0x8000, 0xe74c, 0xe844, 0)
(WW) NVIDIA(0): WAIT (1, 4, 0x8000, 0xe74c, 0xe844, 0)
(WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe878, 0)
(WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe878, 0)
(WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe89c, 0)
(WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe89c, 0)
(WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe8ac, 0)
(WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe8ac, 0)
FreeFontPath: FPE /usr/X11R6/lib/X11/fonts/misc/ refcount is 2,
should be 1; fixing.

If more information is needed just ask (and please tell me how to
obtain it).

What can I do? Should I update FreeBSD/Xorg?

Thanks and Best Regards,
Ale
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Proper FreeBSD installation practices

2006-02-01 Thread Alvaro J . Gurdián

I looked at the sysinstall and pkg_add man files and noticed that at  
least in pkg_add it was looking for updates at  
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.0-release/ 
Latest/.  I made my way over to that address and noticed indeed  
bind9-9.3.1 was the newest available, then after some browsing I found  
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/dns/  
where the was a bind9-9.3.2.


So assumed that both pkg_add and sysinstall were looking up the same  
location.


I tried to tell sysinstall to search a different location:
sysinstall  
_ftpPath=ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6- 
stable/dns/ mediaSetFTP configPackages


But it just ignored my input and used the same ftp address as it had  
before.


However with pkg_add I had a little further, after setting the  
environment variable PACKAGEROOT to  
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/dns/ I  
was able to type, pkg_add -r bind9-9.3.2,  and successfully install.   
Or at least so I thought.


To make sure, I went to /var/db/pkg and saw bind9-9.3.2 listed.

Unfortunately when I tried named -v, it replied: version  
9.3.1what?  How?


By now now I am terrible confused.

What is the difference between
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.0-release/ 
Latest/

and
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable

I thought release was the newest version of stable, and therefore these  
two directories should point to the same info.  Or at least, will they  
merge some time in the future?


Also, I believe I actually installed bind9-9.3.2, if so where is it?   
If not, how can I?


There must be some logical aspect of FreeBSD that I do not understand,  
because installing a package or a port has never been so hard.


Having to set environment variables every time I want to get the newest  
version of a program should not be the standard way to operate, I am  
sure it isn't.



Thanks.



On Jan 31, 2006, at 6:22 PM, Kevin Kinsey wrote:


Alvaro J. Gurdián wrote:

I used sysinstall to look for it: the chose  
configure-packages-ftp-main site-package selection-DNS

in there I saw several versions of BIND but 9.3.1 was the newest.

What am I doing wrong?  I chose FTP to try to get the most up to date  
infowhat happened?


I see 9.3.2 on Fresh ports, why not thru sysinstall?



sysinstall looks for pre-compiled packages; I don't know if packages
have been built that include this version of BIND; someone else  
probably

does, or can take time to investigate.

However, even more telling on this issue:  sysinstall uses a
$RELEASENAME variable (correct name??) to look specifically
for packages that match the version of FreeBSD that you have installed.
This means that if you have installed 6.0-RELEASE, your version of
sysinstall is looking for the packages that were created at the time
that 6.0-RELEASE was compiled, back in the fall.  Most likely, at that
time, the lastest BIND was 9.3.1.  You can use some obscure part
of sysinstall to set this variable to ANY and perhaps get a newer
list of packages.

It may also be possible to get a later package simply with:

   $pkg_add -r bind9

If you have the ports tree installed AND up to date, then:

  $cd /usr/ports/dns/bind9
  $make install clean

will absolutely get you the latest version of the port.

For more help on installing ports/packages, see handbook chapter 4.

For more help on the latest and greatest, see The Cutting Edge,
handbook chapter 20.

Best of luck with FreeBSD!

Kevin Kinsey

top-posting comment snipped  ;-)

--
In 1869 the waffle iron was invented for people who had wrinkled
waffles.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: NVidia GeForce 6600 problems

2006-02-01 Thread Alejandro Pulver

On Wed, 1 Feb 2006 15:06:21 -0300
Alejandro Pulver [EMAIL PROTECTED] wrote:

 Hello,
 
 I have recently bought a GeForce 6600 video card, and sometimes (not
 very often) I experience the following problem:
 
 A little after starting X11 (for example when I start downloading
 e-mails), the screen freezes a few seconds, after that the screen
 looks like if widgets (buttons, text, etc.) aren't drawn, and the
 white background of Sylpheed-Claws covers the screen. Then I am
 forced to switch to the 1st console (Ctrl+Alt+F1), which takes around
 30 seconds, and then kill X11.
 
 I have FreeBSD 5.4 release, Xorg 6.8.2 and nvidia-driver 1.0.8178.
 
 I know this problem is with the driver, because I got this kernel
 message:
 
 NVRM: Xid: 8, Channel 
 NVRM: Xid: 8, Channel 0020
 
 And the Xorg log has the following:
 
 (WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe75c, 0)
 (WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe75c, 0)
 Failed to switch consoles (Invalid argument)
 (WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe834, 0)
 (WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe834, 0)
 (WW) NVIDIA(0): WAIT (2, 4, 0x8000, 0xe74c, 0xe844, 0)
 (WW) NVIDIA(0): WAIT (1, 4, 0x8000, 0xe74c, 0xe844, 0)
 (WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe878, 0)
 (WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe878, 0)
 (WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe89c, 0)
 (WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe89c, 0)
 (WW) NVIDIA(0): WAIT (2, 6, 0x8000, 0xe74c, 0xe8ac, 0)
 (WW) NVIDIA(0): WAIT (1, 6, 0x8000, 0xe74c, 0xe8ac, 0)
 FreeFontPath: FPE /usr/X11R6/lib/X11/fonts/misc/ refcount is 2,
 should be 1; fixing.
 
 If more information is needed just ask (and please tell me how to
 obtain it).
 
 What can I do? Should I update FreeBSD/Xorg?
 
 Thanks and Best Regards,
 Ale

I forgot to post the kernel module output when detecting the device:

nvidia0: GeForce 6600 mem
0xcd00-0xcdff,0xb000-0xbfff,0xce00-0xceff irq
16 at device 0.0 on pci1
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Removing Matlab

2006-02-01 Thread ross

I had matlab installed on my computer but I'm no longer in need of it. As  
it's the only peice of software I have that isn't installed from either  
the ports or the packages, I'm sort of at a loss on how to uninstall it  
properly. It takes up too much room in my /usr partition for me to just  
ignore.


I followed the instuctions found in the handbook for the original  
installation. Can anybody help me make sure that I remove all it properly  
and that I remove it all?


--
What time is it?

Dodgeball Time!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Proper FreeBSD installation practices

2006-02-01 Thread Kevin Kinsey


Alvaro J. Gurdián wrote:


I looked at the sysinstall and pkg_add man files and noticed
that at  least in pkg_add it was looking for updates at
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.0-release/ 
Latest/.

I made my way over to that address and noticed indeed  bind9-9.3.1
was the newest available, then after some browsing I found 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/dns/ 
where the was a bind9-9.3.2.


So assumed that both pkg_add and sysinstall were looking up
the same  location.

I tried to tell sysinstall to search a different location:
sysinstall  
_ftpPath=ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6- 
stable/dns/ mediaSetFTP configPackages


But it just ignored my input and used the same ftp address as it had  
before.


However with pkg_add I had a little further, after setting the 
environment variable PACKAGEROOT to 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/dns/ I 
was able to type, pkg_add -r bind9-9.3.2,  and successfully install.  
Or at least so I thought.


To make sure, I went to /var/db/pkg and saw bind9-9.3.2 listed.

Unfortunately when I tried named -v, it replied: version  
9.3.1what?  How?


By now now I am terrible confused.



Keep in mind that FreeBSD has a base system which includes BIND.  It is
likely that your search path has /usr/sbin listed prior to 
/usr/local/sbin ...
this is the default. Here is proof from my machine, your is probably 
similar:



[1009] Wed 01.Feb.2006 13:38:41
[EMAIL PROTECTED]
# echo $PATH
/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin

So, when you issue `named -v`, you are really saying `/usr/sbin/named 
-v`, and
the base system named is answering correctly.  Try 
`/usr/local/sbin/named -v`,

and see if you get the response you expect.



What is the difference between
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.0-release/ 
Latest/

and
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable

I thought release was the newest version of stable, and therefore
these  two directories should point to the same info.  Or at least,
will they  merge some time in the future?



RELEASE is the last officially RELEASED version of -STABLE, but
-STABLE continues in development, therefore, at any given time
except the exact moment that a RELEASE is tagged, -STABLE is
newer.  -STABLE and RELEASE will never again merge; if you will,
RELEASE emerged from -STABLE as of the date of the RELEASE
and is only supported with security fixes and major bug fixes (if any)
for a specified period of time.  -STABLE will continue on until such
time as FreeBSD 7 becomes STABLE ...

... have I made it difficult enough yet??

As far as ports/packages go, the STABLE ports/packages would
be newer than those in 6.0-RELEASE, because 6.0-RELEASE was
tagged and the packages built in November.



Also, I believe I actually installed bind9-9.3.2, if so where is it?  
If not, how can I?




As I said above, it's under /usr/local/sbin.  You can set

  named_program = /usr/local/sbin/named

in /etc/rc.conf, and the system should use the port instead
of the base system named.  See /etc/defaults/rc.conf for more
info.


There must be some logical aspect of FreeBSD that I do not
understand,  because installing a package or a port has never been so 
hard.




Well, the trick is that you installed a port which is a duplicate of
base system functionality, and haven't yet told FreeBSD that you
prefer something other than the base system's named(8).


Having to set environment variables every time I want to get
the newest  version of a program should not be the standard
way to operate, I am  sure it isn't.



You are quite right.  Keeping the ports tree (/usr/ports) up to
date using cvsup is something of a standard way to operate.
This, in conjuction with portupgrade or portmanager, helps
keep packages/ports current.  See handbook chapter 20
for other tips on the Cutting Edge.



Thanks.


You're welcome.

Kevin D. Kinsey

--
Tart words make no friends; a spoonful of honey
will catch more flies than a gallon of vinegar.
-- Ben Franklin


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Getting a new server

2006-02-01 Thread lars

Chuck Swiger [EMAIL PROTECTED] wrote:
 If you're buying new hardware, pretty much anything has enough CPU to handle 
 the
 reader side; the spamfiltering and virus scanning will be more CPU-intensive.
 Dual-3GHz Xeon's with 2GB of RAM?  Your normal candidates, Dell, HP, IBM, all
 have reasonably similar models (PowerEdge 28x0, HP DL370/380, etc) which will 
 do just fine for this sort of thing.
I'd go for an Opteron system, they have a lot more (3-4 times) 
I/O than Xeon systems and they're cooler.

But some companies, like HP, make it hard to get an Opteron
system, for reasons unclear to me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

2006-02-01 Thread Nikolas Britton

On 01 Feb 2006 12:10:01 -0500, Lowell Gilbert
[EMAIL PROTECTED] wrote:
 Robert Huff [EMAIL PROTECTED] writes:

  martinko writes:
 
$ cat /usr/local/etc/javavms
 
Will someone please confirm that once these
 
/usr/local/jdk1.5.0/bin/java # FREEBSD-JDK1.5.0
/usr/local/jdk1.4.2/bin/java # FREEBSD-JDK1.4.2
 
are installed one no longer needs this
 
/usr/local/linux-sun-jdk1.4.2/bin/java # Linux-Sun-JDK1.4.2.10
 
?

 Yes.

 In fact, it's no longer needed once they are built, not just
 installed.

So what your saying is that once you have a native jdk built and
installed (say 1.4.2) you can compile the native jdk15 port with the
native jdk14 port and not need the linux jdk14 port?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

2006-02-01 Thread Robert Huff


Nikolas Britton writes:

  So what your saying is that once you have a native jdk built and
  installed (say 1.4.2) you can compile the native jdk15 port with
  the native jdk14 port and not need the linux jdk14 port?

Yes.


Robert Huff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Playing streaming music

2006-02-01 Thread JD Arnold


Now that I have my sound card working, I was wondering if there is a
port to play streaming music from my favorite college radio station?
The live streams from http://www.wzbc.com send me PLS files, which
I understand to be WinAmp playlist files.  Is there a FreeBSD app
that can play this streaming format?

I installed XMMS, but I'm not really sure if there is a plugin for
these files.

--
Jonathan Arnold (mailto:[EMAIL PROTECTED])
Daemon Dancing in the Dark, a FreeBSD weblog:
http://freebsd.amazingdev.com/blog/

UNIX is user-friendly. It's just a bit picky about who its friends are.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Playing streaming music

2006-02-01 Thread Andreas Rudisch

On Wed, 01 Feb 2006 22:12:41 +0100, JD Arnold [EMAIL PROTECTED]  
wrote:



Now that I have my sound card working, I was wondering if there is a
port to play streaming music from my favorite college radio station?
The live streams from http://www.wzbc.com send me PLS files, which
I understand to be WinAmp playlist files.  Is there a FreeBSD app
that can play this streaming format?

I installed XMMS, but I'm not really sure if there is a plugin for
these files.


PLS-files are usually only normal text files containing a playlist of
music files or URLs to media streams. All you need to do is open the
PLS-file and write down the URL. mplayer, vlc or xmms should all be able
to play the music stream.

Andreas
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: uninstall httpd + others to get a base system only

2006-02-01 Thread Tom Grove


Igor Robul wrote:


On Tue, Jan 31, 2006 at 07:57:59PM -0600, luke wrote:
 


all packages installed _should_ be in /var/db/pkg(i think) i'm in windows
now. so if you pkg_delete /var/db/pkg/* that should clean it all up.
   


:-)
It will only delete information about packages, not packages self.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


 

No, that will delete the packages.  To delete a package you would run 
pkg_delete package_name so, to delete all of your package the above 
command would work correctly.


-Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java without Motif/X?

2006-02-01 Thread Micah


Nick Triantos wrote:

Greetings,

Has anyone successfully gotten Java (1.4 or 1.5) running on FreeBSD 
without Motif/X?  I'd like to run a gui-less Java app on my server, and 
would strongly prefer to not install all of X + Motif, and all its 
potential security issues, just to get Java running.


Thanks in advance,
-Nick


Since Java includes GUI support, there's no official or easy way of 
getting Java without X.  You could always try installing everything, 
then deinstalling X and seeing what happens.


HTH,
Micah
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Playing streaming music

2006-02-01 Thread Mark Kane

Andreas Rudisch wrote:
 On Wed, 01 Feb 2006 22:12:41 +0100, JD Arnold [EMAIL PROTECTED]
 wrote:
 
 Now that I have my sound card working, I was wondering if there is a
 port to play streaming music from my favorite college radio station?
 The live streams from http://www.wzbc.com send me PLS files, which
 I understand to be WinAmp playlist files.  Is there a FreeBSD app
 that can play this streaming format?

 I installed XMMS, but I'm not really sure if there is a plugin for
 these files.
 
 PLS-files are usually only normal text files containing a playlist of
 music files or URLs to media streams. All you need to do is open the
 PLS-file and write down the URL. mplayer, vlc or xmms should all be able
 to play the music stream.
 
 Andreas

If you want to use pls files with XMMS, download them first to a
directory with fetch/wget or your browser, then in the lower left corner
of XMMS, click the + FILE button and browse to the pls file.
Unfortunately with XMMS you can't just put the pls file into Add URL
like in Winamp.

If you have VLC, you can go to File - Open Network Stream and paste
the pls directly into that. If you want to use mplayer, do as Andreas
said and open the pls file and write down the URL and port...then
mplayer should have no problem playing that.

-Mark

-- 
GnuPG Public Key:
http://www.mkproductions.org/mk_pubkey.asc

Internet Radio:
Party107 (Trance/Electronic) - http://www.party107.com
Rock 101.9 The Edge (Rock) - http://www.rock1019.net

IRC:
MIXXnet IRC Network - irc.mixxnet.net (Nick: MIXX941)



signature.asc
Description: OpenPGP digital signature

)()()()( named

2006-02-01 Thread Paul Schmehl


It's time to take on the uneviable task of trying to get named to work.

I'm running FreeBSD 5.4 SECURITY.  I've installed the bind9 port.

When I try to start named using the rc.d script (/etc/rc.d/named start), I 
get this:


Feb  1 05:30:00 stovebolt named[13084]: stopping command channel on 
127.0.0.1#953

Feb  1 05:30:00 stovebolt named[13084]: exiting
Feb  1 05:30:01 stovebolt named[4841]: starting BIND 9.3.2
Feb  1 05:30:02 stovebolt named[4841]: command channel listening on 
127.0.0.1#953
Feb  1 05:30:02 stovebolt named[4841]: 127.0.0:1: no TTL specified; using 
SOA MINTTL instead

Feb  1 05:30:02 stovebolt named[4841]: running
Feb  1 16:28:43 stovebolt named[26670]: starting BIND 9.3.2 -u bind -t 
/var/named
Feb  1 16:28:43 stovebolt named[26670]: /usr/local/etc/named.conf:57: 
couldn't find key 'rndc-key' for use with command channel 127.0.0.1#953
Feb  1 16:28:43 stovebolt named[26670]: command channel listening on 
127.0.0.1#953
Feb  1 16:28:43 stovebolt named[26670]: couldn't open pid file 'named.pid': 
File exists

Feb  1 16:28:43 stovebolt named[26670]: exiting (due to early fatal error)

(So naturally bind doesn't start up automagically on reboot.  And yes, I 
have named_enable=yes in rc.conf:

named_enable=YES
named_config=/usr/local/etc/named.conf
named_program=/usr/local/sbin/named
)

When I try to start named using rndc, I get this:

rndc start
rndc: connect failed: connection refused

Yet, when I start named from the cli, with user root, it works fine:

named -c /usr/local/etc/named.conf -u root

Feb  1 16:31:12 stovebolt named[26784]: starting BIND 9.3.1 -c 
/usr/local/etc/named.conf -u root
Feb  1 16:31:12 stovebolt named[26784]: command channel listening on 
127.0.0.1#953
Feb  1 16:31:12 stovebolt named[26784]: 127.0.0:1: no TTL specified; using 
SOA MINTTL instead

Feb  1 16:31:12 stovebolt named[26784]: running

And it's listening on the command channel, localhost:953 (and port 53 of 
course).


Once named is running, I can use rndc to generate stats, query logs, 
reconfig, flush, halt, stop, etc.  But I *cannot* run rndc start.  I get 
the connection refused error.




I'm about ready to write my own startup script, but if anyone experienced 
with this has any suggestions, I'm all ears.  (Yes, I've run rndc-confgen 
and put the info in the rndc.conf file and in the named.conf file.)


I haven't done a ton of googling, so if you don't know the answer of the 
top of your head, don't bother doing my research for me.  I'm just 
wondering if someone will recognize my braindeadness immediately and put me 
out of my misery.


Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/ir/security/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

How I can compile math/atlas quicker?

2006-02-01 Thread cblasius


Hello !

Thank you very much for previous help ! :-) Thank you.

I have a problem. I compile /usr/ports/math/atlas and it compiling 3 
full days and it is still compiling (processor AMD 1.6 GHz). How long 
the atlas will be compile? How I can make it in shorter time? I want to 
use octave and scilab, but first I must to have atlas (as dependency).


Is it possible to turn off all the test in atlas? How I can do that? Or 
what else I must to do?  Could someone help me?

It is horrible to wait so long (for the one package atlas)!

Thanks in advance!
Best regards,
cblasius

I'm sorry for my English.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

4-STABLE server crashing

2006-02-01 Thread Andrea Venturoli


Hello.

As per subject, a 4.11 server of mine started crashing quite often; I 
upgraded it to 4-STABLE just in case, but this didn't solve.


I'm attaching three backtraces; can someone give me any hint?
I'm oviously willing to provide any further needed info.

I also checked to see whether the hardware is ok and I think it is, 
although I might obviously be wrong.


 bye  Thanks
av.



1)


IdlePTD at physical address 0x00303000
initial pcb at physical address 0x00275500
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x56e5895d
fault code  = supervisor read, page not present
instruction pointer = 0x8:0xc0168bd2
stack pointer   = 0x10:0xcf79ef88
frame pointer   = 0x10:0xcf79ef9c
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process = 1820 (clamscan)
interrupt mask  = net tty bio cam
trap number = 12
panic: page fault

syncing disks... 89 89 89 89 89 89 89

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x56e5895d
fault code  = supervisor read, page not present
instruction pointer = 0x8:0xc0168bd2
stack pointer   = 0x10:0xcf79ecac
frame pointer   = 0x10:0xcf79ecc0
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process = 1820 (clamscan)
interrupt mask  = net tty bio cam
trap number = 12
panic: page fault
Uptime: 9h10m24s
mly0: flushing cache...done



(kgdb) bt
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0xc0162b87 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:316
#2  0xc0162fac in poweroff_wait (junk=0xc02502ac, howto=-1071317585) at 
/usr/src/sys/kern/kern_shutdown.c:595
#3  0xc021a9de in trap_fatal (frame=0xcf79ec6c, eva=1457883485) at 
/usr/src/sys/i386/i386/trap.c:974
#4  0xc021a6b1 in trap_pfault (frame=0xcf79ec6c, usermode=0, 
eva=1457883485) at /usr/src/sys/i386/i386/trap.c:867
#5  0xc021a29b in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, 
tf_edi = 4194304, tf_esi = -967207208, tf_ebp = -814093120, tf_isp = 
-814093160, tf_ebx = 2,
  tf_edx = 3302393, tf_ecx = 1457883477, tf_eax = -968020448, 
tf_trapno = 12, tf_err = 0, tf_eip = -1072264238, tf_cs = 8, tf_eflags = 
66054, tf_esp = -872433440,

  tf_ss = -967207208}) at /usr/src/sys/i386/i386/trap.c:466
#6  0xc0168bd2 in softclock () at /usr/src/sys/kern/kern_timeout.c:102
#7  0xc020dce3 in doreti_swi ()
#8  0xc015d1a9 in acquire (lkp=0xc65996d8, extflags=33554464, 
wanted=1536) at /usr/src/sys/kern/kern_lock.c:147
#9  0xc015d410 in lockmgr (lkp=0xc65996d8, flags=33620002, 
interlkp=0xc0288424, p=0xcbffb8e0) at /usr/src/sys/kern/kern_lock.c:355
#10 0xc018ac23 in getblk (vp=0xcf26eec0, blkno=5696, size=4096, 
slpflag=0, slptimeo=0) at /usr/src/sys/sys/buf.h:305
#11 0xc01dcfb6 in ffs_sbupdate (mp=0xc1295600, waitfor=2) at 
/usr/src/sys/ufs/ffs/ffs_vfsops.c:1291
#12 0xc01dcbc5 in ffs_sync (mp=0xc1295000, waitfor=2, cred=0xc0a3e800, 
p=0xc0288680) at /usr/src/sys/ufs/ffs/ffs_vfsops.c:1052
#13 0xc0193a7b in sync (p=0xc0288680, uap=0x0) at 
/usr/src/sys/kern/vfs_syscalls.c:583

#14 0xc01629f4 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:262
#15 0xc0162fac in poweroff_wait (junk=0xc02502ac, howto=-1071317585) at 
/usr/src/sys/kern/kern_shutdown.c:595
#16 0xc021a9de in trap_fatal (frame=0xcf79ef48, eva=1457883485) at 
/usr/src/sys/i386/i386/trap.c:974
#17 0xc021a6b1 in trap_pfault (frame=0xcf79ef48, usermode=0, 
eva=1457883485) at /usr/src/sys/i386/i386/trap.c:867
#18 0xc021a29b in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, 
tf_edi = 4194304, tf_esi = 139654304, tf_ebp = -814092388, tf_isp = 
-814092428, tf_ebx = 2,
  tf_edx = 3294201, tf_ecx = 1457883477, tf_eax = -968020448, 
tf_trapno = 12, tf_err = 0, tf_eip = -1072264238, tf_cs = 8, tf_eflags = 
66054, tf_esp = 671833012,

  tf_ss = 139654304}) at /usr/src/sys/i386/i386/trap.c:466
#19 0xc0168bd2 in softclock () at /usr/src/sys/kern/kern_timeout.c:102
#20 0xc020dce3 in doreti_swi ()
#21 0x2807809e in ?? ()
#22 0x28080acd in ?? ()
#23 0x280811dc in ?? ()
#24 0x280812eb in ?? ()
#25 0x2807f997 in ?? ()
#26 0x2808049e in ?? ()
#27 0x28081033 in ?? ()
#28 0x2808129e in ?? ()
#29 0x804e63f in ?? ()
#30 0x804d90e in ?? ()
#31 0x804f253 in ?? ()
#32 0x804f21b in ?? ()
#33 0x804f21b in ?? ()
#34 0x804f21b in ?? ()
#35 0x804f21b in ?? ()
#36 0x804e5d2 in ?? ()
#37 0x804d260 in ?? ()
#38 0x804bbd9 in ?? ()
#39 0x804c318 in ?? ()
#40 0x80499f6 in ?? ()



2)

IdlePTD at physical address 0x00303000
initial pcb at physical address 0x00275500
panicstr: vm_page_insert: already inserted
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault

Re: )()()()( named

2006-02-01 Thread Daniel

On 2/2/06, Paul Schmehl [EMAIL PROTECTED] wrote:
 It's time to take on the uneviable task of trying to get named to work.

 I'm running FreeBSD 5.4 SECURITY.  I've installed the bind9 port.

 When I try to start named using the rc.d script (/etc/rc.d/named start), I
 get this:

 Feb  1 05:30:00 stovebolt named[13084]: stopping command channel on
 127.0.0.1#953
 Feb  1 05:30:00 stovebolt named[13084]: exiting
 Feb  1 05:30:01 stovebolt named[4841]: starting BIND 9.3.2
 Feb  1 05:30:02 stovebolt named[4841]: command channel listening on
 127.0.0.1#953
 Feb  1 05:30:02 stovebolt named[4841]: 127.0.0:1: no TTL specified; using
 SOA MINTTL instead
 Feb  1 05:30:02 stovebolt named[4841]: running
 Feb  1 16:28:43 stovebolt named[26670]: starting BIND 9.3.2 -u bind -t
 /var/named
The biggest difference between running as root and the startup script
are the command line arguments given in either case.

Script flags: -u bind -t /var/named
CLI flags: -c /usr/local/etc/named.conf -u root

The man page will show you that the -t flag indicates you want named
to chroot (recommended practice). It also is running as bind and not
root.

Check out /var/named and your named config file. You will probably
find that /var/named/named.pid is not writable by the user bind.

You may also find that the named config isn't specifying a full path
to be used within the chroot directory (/var/named).

Below is the config for my named that runs chrooted.
directory   /;
pid-file/named.pid;
dump-file   /dump/named_dump.db;
statistics-file /stats/named.stats;

Yours may look something like:
directory   /var/named/;
pid-file/var/named/named.pid;
dump-file   /var/named/dump/named_dump.db;
statistics-file /etc/named/stats/named.stats;

The paths in named.conf need to be relative to the chroot, not the base.

 Feb  1 16:28:43 stovebolt named[26670]: /usr/local/etc/named.conf:57:
 couldn't find key 'rndc-key' for use with command channel 127.0.0.1#953
 Feb  1 16:28:43 stovebolt named[26670]: command channel listening on
 127.0.0.1#953
 Feb  1 16:28:43 stovebolt named[26670]: couldn't open pid file 'named.pid':
 File exists
 Feb  1 16:28:43 stovebolt named[26670]: exiting (due to early fatal error)

 (So naturally bind doesn't start up automagically on reboot.  And yes, I
 have named_enable=yes in rc.conf:
 named_enable=YES
 named_config=/usr/local/etc/named.conf
 named_program=/usr/local/sbin/named
 )

 When I try to start named using rndc, I get this:

 rndc start
 rndc: connect failed: connection refused

rndc does not have a command start

restart is also not yet implemented.

rndc communicates to the rndc port bind opens, if this port isn't open
rndc doesn't work. rndc is only good for generating stats, reloading
zones/configs, dumps, etc... but NOT starting named (it can stop it
tho).

 Yet, when I start named from the cli, with user root, it works fine:

 named -c /usr/local/etc/named.conf -u root

 Feb  1 16:31:12 stovebolt named[26784]: starting BIND 9.3.1 -c
 /usr/local/etc/named.conf -u root
 Feb  1 16:31:12 stovebolt named[26784]: command channel listening on
 127.0.0.1#953
 Feb  1 16:31:12 stovebolt named[26784]: 127.0.0:1: no TTL specified; using
 SOA MINTTL instead
 Feb  1 16:31:12 stovebolt named[26784]: running

 And it's listening on the command channel, localhost:953 (and port 53 of
 course).

 Once named is running, I can use rndc to generate stats, query logs,
 reconfig, flush, halt, stop, etc.  But I *cannot* run rndc start.  I get
 the connection refused error.

 

 I'm about ready to write my own startup script, but if anyone experienced
 with this has any suggestions, I'm all ears.  (Yes, I've run rndc-confgen
 and put the info in the rndc.conf file and in the named.conf file.)

 I haven't done a ton of googling, so if you don't know the answer of the
 top of your head, don't bother doing my research for me.  I'm just
 wondering if someone will recognize my braindeadness immediately and put me
 out of my misery.

Do some reading, you'll find all the answers in the man pages and
administrative reference manual on the isc bind website.

Writing your own startup scripts is unnecessary, especially for
something that already has one (or in this case, maybe two, /etc/rc.d
and /usr/local/etc/rc.d)

 Paul Schmehl ([EMAIL PROTECTED])
 Adjunct Information Security Officer
 University of Texas at Dallas
 AVIEN Founding Member
 http://www.utdallas.edu/ir/security/
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Upgrading FreeBSD 5.4 to 6.0 via CVS

2006-02-01 Thread Warren Liddell

Could someone please point me to a website or such that entails the 
best way to do the above please.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

On Tue, 31 Jan 2006 11:41:35 +0200, Giorgos Keramidas
[EMAIL PROTECTED] said:
  Giorgos,
 
  Thanks very much for replying! I wasn't aware of this environment
  variable (even though I spent quite a while on this problem). Using
  CVSUMASK certainly works when working on the server machine!
 
  We are currently using a pserver installation, with developers using
  windows machines. We need a way to achieve the same effect with a user on
  a windows machine doing an import. Do you have any idea how this can be
  done? Thank you!
 
 I'm not sure.  I know that the setting of CVSUMASK on the server machine
 works if you use SSH tunneling though.  If it's not too much trouble, you
 can set up SSH-based authentication instead of :pserver: and make sure
 the
 .bashrc or .cshrc of the developers on the server machine sets CVSUMASK
 correctly.
 
 SSH-tunneled CVS is what the FreeBSD project uses in the official CVS
 repository, so I guess this setup works as expected :)

Giorgos,

Thanks again for taking the time to reply. I have tried using SSH in
the past, and got stuck setting up the public key login (that's 
why we're using pserver).

I spent a few hours yesterday trying to get SSH going again. I can
login with SSH from the windows machine using Putty, but only when
I use password authentication. In order to use cvs with ssh (using
the plink program in Putty), we must use public key authentication.

We are getting a 'Key Refused' error when trying to use public key
authentication. I have tried doing several things including editing
the /etc/ssh/sshd_config file:

PubkeyAuthentication yes 
AuthorizedKeysFile  .ssh/authorized_keys

We also had to make these changes in order to get password based 
ssh to work:

UsePAM no
PermitRootLogin yes 

We also tried putting the public key into various files:
.ssh/authorized_keys
.ssh/authorized_keys2
.ssh2/authorized_keys
.ssh2/authorized_keys2

(and made sure they are not group/world writable. The keys are 
SSH2 DSA 1024 bits)

I tried looking in the /var/log/auth.log file, and what I'm seeing
is:

Feb  2 10:19:26 mail1 sshd2[15343]: connection from xxx.xx.xxx.x 
Feb  2 10:19:26 mail1 sshd2[15344]: WARNING: DNS lookup failed for
xxx.xx.xxx.\
x. 
Feb  2 10:19:29 mail1 sshd2[15344]: Local disconnected: Connection
closed. 
Feb  2 10:19:29 mail1 sshd2[15344]: connection lost: 'Connection
closed.' 

(I set LogLevel DEBUG3 in sshd_config. I don't think the DNS
error is relevant, because password based ssh is working. But
I could wrong. What do you think?)

Do you have any idea where I can look to find out why the key is
being refused? Are there any other logfiles other than auth.log
that could give a clue to what's going wrong? Thanks!

Regards,

DB
-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - A fast, anti-spam email service.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

2006-02-01 Thread Nikolas Britton

On 2/1/06, Robert Huff [EMAIL PROTECTED] wrote:

 Nikolas Britton writes:

   So what your saying is that once you have a native jdk built and
   installed (say 1.4.2) you can compile the native jdk15 port with
   the native jdk14 port and not need the linux jdk14 port?

 Yes.



Ok, Cool. So Is it automatic? Lets say the jdk15 port was updated to
the yet to be released patchset 3, will portupgrade know what to do?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: 4-STABLE server crashing

2006-02-01 Thread Kris Kennaway

On Thu, Feb 02, 2006 at 12:00:37AM +0100, Andrea Venturoli wrote:
 Hello.
 
 As per subject, a 4.11 server of mine started crashing quite often; I 
 upgraded it to 4-STABLE just in case, but this didn't solve.
 
 I'm attaching three backtraces; can someone give me any hint?
 I'm oviously willing to provide any further needed info.
 
 I also checked to see whether the hardware is ok and I think it is, 
 although I might obviously be wrong.

If it suddenly started for no reason, it's almost certainly failing
hardware.

Anyway, you'll find it difficult to get anyone to help with 4.11
panics, even if non hardware-related.  You should make plans to
upgrade to 6.x.

Kris


pgpG8DrcbGDDD.pgp
Description: PGP signature

using webmin to control a server

2006-02-01 Thread Dave


Hello,
   I'm wanting to use webmin to control aspects of a server. I've got it 
installed and now i'm trying to get it to allow me to change user quotas via 
webmin. I believe this is possible, yet i'm not seeing it. Is there 
something special i need to do to webmin to pull this off?

Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

On 2006-02-02 10:30, david bryce [EMAIL PROTECTED] wrote:
On Tue, 31 Jan 2006 11:41:35 +0200, Giorgos Keramidas
[EMAIL PROTECTED] said:
 We are currently using a pserver installation, with developers using
 windows machines. We need a way to achieve the same effect with a user on
 a windows machine doing an import. Do you have any idea how this can be
 done? Thank you!

 I'm not sure.  I know that the setting of CVSUMASK on the server machine
 works if you use SSH tunneling though.  If it's not too much trouble, you
 can set up SSH-based authentication instead of :pserver: and make sure
 the
 .bashrc or .cshrc of the developers on the server machine sets CVSUMASK
 correctly.

 SSH-tunneled CVS is what the FreeBSD project uses in the official CVS
 repository, so I guess this setup works as expected :)

 Giorgos,

 Thanks again for taking the time to reply. I have tried using SSH in
 the past, and got stuck setting up the public key login (that's
 why we're using pserver).

 I spent a few hours yesterday trying to get SSH going again. I can
 login with SSH from the windows machine using Putty, but only when
 I use password authentication. In order to use cvs with ssh (using
 the plink program in Putty), we must use public key authentication.

Unfortunately, I can't help with the Windows side.  I'm only using UNIX
machines as clients, so Putty is something new to me :-(

Perhaps someone else on freebsd-questions can help with Putty?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java Virtual Machine

2006-02-01 Thread Robert Huff


Nikolas Britton writes:

 So what your saying is that once you have a native jdk built and
 installed (say 1.4.2) you can compile the native jdk15 port with
 the native jdk14 port and not need the linux jdk14 port?
  
   Yes.
  
  Ok, Cool. So Is it automatic?

No.
1) There are conceivable reasons why one might want to have all
three installed.
2) Automatic removal of anything is often not a good idea.
It is especially hazardous across what - as far as I can tell - are
functionally three separate lines of software (which just happen to
overlap functionally).  Upgrading from, say, 1.4.2pN to 1.4.2pN+1
is usually* safe.  1.4.2 to 1.5 is not.


Robert Huff



* - Usually.  Note that p7-p8 broke something (details in the java@
archives within the last two weeks); the responsible people are on
the case.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Getting a new server

2006-02-01 Thread Charles Swiger


On Feb 1, 2006, at 2:55 PM, lars wrote:

Chuck Swiger [EMAIL PROTECTED] wrote:
If you're buying new hardware, pretty much anything has enough CPU  
to handle the
reader side; the spamfiltering and virus scanning will be more CPU- 
intensive.
Dual-3GHz Xeon's with 2GB of RAM?  Your normal candidates, Dell,  
HP, IBM, all
have reasonably similar models (PowerEdge 28x0, HP DL370/380, etc)  
which will do just fine for this sort of thing.

I'd go for an Opteron system, they have a lot more (3-4 times)
I/O than Xeon systems and they're cooler.


Yes, this is entirely reasonable advice; the Opteron platform is a  
good choice as well.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

2006-02-01 Thread albi

On Thu, 2 Feb 2006 01:48:37 +0200
Giorgos Keramidas [EMAIL PROTECTED] wrote:

  I spent a few hours yesterday trying to get SSH going again. I can
  login with SSH from the windows machine using Putty, but only when
  I use password authentication. In order to use cvs with ssh (using
  the plink program in Putty), we must use public key authentication.
 
 Unfortunately, I can't help with the Windows side.  I'm only using
 UNIX machines as clients, so Putty is something new to me :-(

erhm.. cd /usr/ports/security/putty;make install :-)

-- 
grtjs, albi
gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc | gpg --import
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

php package issues - duplicate name

2006-02-01 Thread Bob Ababurko

I am having issues when I install packages relating to php.  For 
instance, I just installed the php4-pear package and when I do an 
apachctl configtest, I get this output:


PHP Warning:  Function registration failed - duplicate name - preg_match 
in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
preg_match_all in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
preg_replace in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
preg_replace_callback in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - preg_split 
in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - preg_quote 
in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - preg_grep 
in Unknown on line 0
PHP Warning:  pcre:  Unable to register functions, unable to load in 
Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_parser_create in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_parser_create_ns in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_object in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_element_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_character_data_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_processing_instruction_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_default_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_unparsed_entity_decl_handler in Unknownon line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_notation_decl_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_external_entity_ref_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_start_namespace_decl_handler in Unknownon line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_set_end_namespace_decl_handler in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - xml_parse 
in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_parse_into_struct in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_get_error_code in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_error_string in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_get_current_line_number in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_get_current_column_number in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_get_current_byte_index in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_parser_free in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_parser_set_option in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
xml_parser_get_option in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
utf8_encode in Unknown on line 0
PHP Warning:  Function registration failed - duplicate name - 
utf8_decode in Unknown on line 0
PHP Warning:  xml:  Unable to register functions, unable to load in 
Unknown on line 0


This is running on 5.4 Release

It seems that everything that I install that is php related(from 
package), I get this same messages.  I believe that this has to do with 
me reinstalling the php4 package and forcing it.  If this the case what 
could be wrong with my pnp.ini?


Any thoughts will help

Regards,
Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

2006-02-01 Thread Daniel A.

Try one or more of the following things:
- Use puttygen to import your private key, and then export as .ppk
- Load your key.ppk into pageant, and let it manage your private key(s)
- Log in using your private key from the server (ie. login to the
server with your password, and then from the shell ssh
[EMAIL PROTECTED]).

Please inform me of your results.

On 2/2/06, david bryce [EMAIL PROTECTED] wrote:
 On Tue, 31 Jan 2006 11:41:35 +0200, Giorgos Keramidas
 [EMAIL PROTECTED] said:
   Giorgos,
  
   Thanks very much for replying! I wasn't aware of this environment
   variable (even though I spent quite a while on this problem). Using
   CVSUMASK certainly works when working on the server machine!
  
   We are currently using a pserver installation, with developers using
   windows machines. We need a way to achieve the same effect with a user on
   a windows machine doing an import. Do you have any idea how this can be
   done? Thank you!
 
  I'm not sure.  I know that the setting of CVSUMASK on the server machine
  works if you use SSH tunneling though.  If it's not too much trouble, you
  can set up SSH-based authentication instead of :pserver: and make sure
  the
  .bashrc or .cshrc of the developers on the server machine sets CVSUMASK
  correctly.
 
  SSH-tunneled CVS is what the FreeBSD project uses in the official CVS
  repository, so I guess this setup works as expected :)

 Giorgos,

 Thanks again for taking the time to reply. I have tried using SSH in
 the past, and got stuck setting up the public key login (that's
 why we're using pserver).

 I spent a few hours yesterday trying to get SSH going again. I can
 login with SSH from the windows machine using Putty, but only when
 I use password authentication. In order to use cvs with ssh (using
 the plink program in Putty), we must use public key authentication.

 We are getting a 'Key Refused' error when trying to use public key
 authentication. I have tried doing several things including editing
 the /etc/ssh/sshd_config file:

 PubkeyAuthentication yes
 AuthorizedKeysFile  .ssh/authorized_keys

 We also had to make these changes in order to get password based
 ssh to work:

 UsePAM no
 PermitRootLogin yes

 We also tried putting the public key into various files:
 .ssh/authorized_keys
 .ssh/authorized_keys2
 .ssh2/authorized_keys
 .ssh2/authorized_keys2

 (and made sure they are not group/world writable. The keys are
 SSH2 DSA 1024 bits)

 I tried looking in the /var/log/auth.log file, and what I'm seeing
 is:

 Feb  2 10:19:26 mail1 sshd2[15343]: connection from xxx.xx.xxx.x
 Feb  2 10:19:26 mail1 sshd2[15344]: WARNING: DNS lookup failed for
 xxx.xx.xxx.\
 x.
 Feb  2 10:19:29 mail1 sshd2[15344]: Local disconnected: Connection
 closed.
 Feb  2 10:19:29 mail1 sshd2[15344]: connection lost: 'Connection
 closed.'

 (I set LogLevel DEBUG3 in sshd_config. I don't think the DNS
 error is relevant, because password based ssh is working. But
 I could wrong. What do you think?)

 Do you have any idea where I can look to find out why the key is
 being refused? Are there any other logfiles other than auth.log
 that could give a clue to what's going wrong? Thanks!

 Regards,

 DB
 --
   david bryce
   [EMAIL PROTECTED]

 --
 http://www.fastmail.fm - A fast, anti-spam email service.

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))


On Thu, 2 Feb 2006 01:48:37 +0200, Giorgos Keramidas
  Giorgos,
 
  Thanks again for taking the time to reply. I have tried using SSH in
  the past, and got stuck setting up the public key login (that's
  why we're using pserver).
 
  I spent a few hours yesterday trying to get SSH going again. I can
  login with SSH from the windows machine using Putty, but only when
  I use password authentication. In order to use cvs with ssh (using
  the plink program in Putty), we must use public key authentication.
 
 Unfortunately, I can't help with the Windows side.  I'm only using UNIX
 machines as clients, so Putty is something new to me :-(
 
 Perhaps someone else on freebsd-questions can help with Putty?
 

Thanks, Giorgos!

What about on the freebsd server side? Are there any logfiles I can
look at on the server? Thanks!

Regards,

DB
-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - mmm... Fastmail...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

On Thu, 2 Feb 2006 01:04:19 +0100, Daniel A. [EMAIL PROTECTED] said:
  Thanks again for taking the time to reply. I have tried using SSH in
  the past, and got stuck setting up the public key login (that's
  why we're using pserver).
 
  I spent a few hours yesterday trying to get SSH going again. I can
  login with SSH from the windows machine using Putty, but only when
  I use password authentication. In order to use cvs with ssh (using
  the plink program in Putty), we must use public key authentication.
 
  We are getting a 'Key Refused' error when trying to use public key
  authentication. I have tried doing several things including editing
  the /etc/ssh/sshd_config file:

 Try one or more of the following things:
 - Use puttygen to import your private key, and then export as .ppk
 - Load your key.ppk into pageant, and let it manage your private key(s)
 - Log in using your private key from the server (ie. login to the
 server with your password, and then from the shell ssh
 [EMAIL PROTECTED]).
 
 Please inform me of your results.

Daniel,

Thank you for taking the time to reply.

We are currently using pageant to manage the private key. However,
the keys we are using are generated with puttygen (not from the
server). The public key was then copied to the authorized_keys
file on the server. Would you recommend generating the keys on
the server? Do you have an idea where are some instructions 
about how to generate the keys on the server? Thanks!

Regards,

DB

-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - The way an email service should be

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

On 2006-02-02 11:27, david bryce [EMAIL PROTECTED] wrote:
On Thu, 2 Feb 2006 01:48:37 +0200, Giorgos Keramidas
 I have tried using SSH in the past, and got stuck setting up the
 public key login (that's why we're using pserver).

 I spent a few hours yesterday trying to get SSH going again. I can
 login with SSH from the windows machine using Putty, but only when
 I use password authentication. In order to use cvs with ssh (using
 the plink program in Putty), we must use public key authentication.

 Unfortunately, I can't help with the Windows side.  I'm only using UNIX
 machines as clients, so Putty is something new to me :-(

 Perhaps someone else on freebsd-questions can help with Putty?

 What about on the freebsd server side? Are there any logfiles I can
 look at on the server? Thanks!

/var/log/auth.log and /var/log/messages are the ones I'd look at.  But I
didn't notice anything interesting in the auth.log snippet you posted.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))


On Feb 1, 2006, at 4:33 PM, david bryce wrote:

On Thu, 2 Feb 2006 01:04:19 +0100, Daniel A. [EMAIL PROTECTED]  
said:

Thanks again for taking the time to reply. I have tried using SSH in
the past, and got stuck setting up the public key login (that's
why we're using pserver).

I spent a few hours yesterday trying to get SSH going again. I can
login with SSH from the windows machine using Putty, but only when
I use password authentication. In order to use cvs with ssh (using
the plink program in Putty), we must use public key authentication.

We are getting a 'Key Refused' error when trying to use public key
authentication. I have tried doing several things including editing
the /etc/ssh/sshd_config file:


Try one or more of the following things:
- Use puttygen to import your private key, and then export as .ppk
- Load your key.ppk into pageant, and let it manage your private  
key(s)

- Log in using your private key from the server (ie. login to the
server with your password, and then from the shell ssh
[EMAIL PROTECTED]).

Please inform me of your results.


Daniel,

Thank you for taking the time to reply.

We are currently using pageant to manage the private key. However,
the keys we are using are generated with puttygen (not from the
server). The public key was then copied to the authorized_keys
file on the server. Would you recommend generating the keys on
the server? Do you have an idea where are some instructions
about how to generate the keys on the server? Thanks!

Regards,

DB

--
  david bryce
  [EMAIL PROTECTED]

--
http://www.fastmail.fm - The way an email service should be


	Can you login using any key in the authorized_keys file? Also,  
what's the umask for authorized keys (ls -l .ssh/authorized_keys)?

-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

2006-02-01 Thread Will Maier

On Thu, Feb 02, 2006 at 11:27:54AM +1100, david bryce wrote:
 What about on the freebsd server side? Are there any logfiles I can
 look at on the server? Thanks!

I often find it more useful to temporarily run a second sshd on an
alternate port, with stderr directed to the console and sshd in
no-detach and debug mode. Try the following:

$ sshd -d -d -d -e -D -p 222

Then watch the output as you try to connect on that port

$ sshd myhost -p 222

If you'd like, you can redirect the output to a file, too, but I
find that screen(1)'s scrollback usually is enough for me.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

marked as broken

2006-02-01 Thread Bob Ababurko

I am running 5.4 release and have come across a port that has been 
marked as broken.  The port is  pear-Archive_Tar-1.3.1 and I am 
wondering what I can do to get past this short of updating my  whole 
ports treewhich I am afraid of doing since this is a production 
machineand because I dont have much experience doing it either.


===  pear-Archive_Tar-1.3.1 is marked as broken: Incomplete pkg-plist.


When I try to install the package, it seems that the dependencies within 
the package are looking for a version of Apache that is off by an 
update...1.3.33 vs 1.3.34!


Not sure what would be the best way to handle thismy brain is a mess 
today and im looking for the easiest method of getting this done...of 
which I am not choosing the correct ways today, so any help would be 
appreciated.


thanks,
Bob

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

On 2006-02-02 00:57, albi [EMAIL PROTECTED] wrote:
On Thu, 2 Feb 2006 01:48:37 +0200
Giorgos Keramidas [EMAIL PROTECTED] wrote:
 I spent a few hours yesterday trying to get SSH going again. I can
 login with SSH from the windows machine using Putty, but only when
 I use password authentication. In order to use cvs with ssh (using
 the plink program in Putty), we must use public key authentication.

 Unfortunately, I can't help with the Windows side.  I'm only using
 UNIX machines as clients, so Putty is something new to me :-(

 erhm.. cd /usr/ports/security/putty;make install :-)

Heh!  Well, fancy that...  That's one of the side-effects of having an
SSH client in the base-system, I guess.  Thanks to DES, I never needed
Putty on FreeBSD so far :)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

2006-02-01 Thread Micah


david bryce wrote:

On Thu, 2 Feb 2006 01:04:19 +0100, Daniel A. [EMAIL PROTECTED] said:

Thanks again for taking the time to reply. I have tried using SSH in
the past, and got stuck setting up the public key login (that's
why we're using pserver).

I spent a few hours yesterday trying to get SSH going again. I can
login with SSH from the windows machine using Putty, but only when
I use password authentication. In order to use cvs with ssh (using
the plink program in Putty), we must use public key authentication.

We are getting a 'Key Refused' error when trying to use public key
authentication. I have tried doing several things including editing
the /etc/ssh/sshd_config file:

Try one or more of the following things:
- Use puttygen to import your private key, and then export as .ppk
- Load your key.ppk into pageant, and let it manage your private key(s)
- Log in using your private key from the server (ie. login to the
server with your password, and then from the shell ssh
[EMAIL PROTECTED]).

Please inform me of your results.


Daniel,

Thank you for taking the time to reply.

We are currently using pageant to manage the private key. However,
the keys we are using are generated with puttygen (not from the
server). The public key was then copied to the authorized_keys
file on the server. Would you recommend generating the keys on
the server? Do you have an idea where are some instructions 
about how to generate the keys on the server? Thanks!


Regards,

DB



Out of curiosity did you use save public key or copy and paste out of 
the public key for pasting in openssh authorized_keys file box?  If I 
remember correctly, the save public key does not produce an openssh 
compatible public key.  Doing the copy and paste routine should work.


HTH,
Micah
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))



On Feb 1, 2006, at 4:54 PM, Giorgos Keramidas wrote:


On 2006-02-02 00:57, albi [EMAIL PROTECTED] wrote:

On Thu, 2 Feb 2006 01:48:37 +0200
Giorgos Keramidas [EMAIL PROTECTED] wrote:

I spent a few hours yesterday trying to get SSH going again. I can
login with SSH from the windows machine using Putty, but only when
I use password authentication. In order to use cvs with ssh (using
the plink program in Putty), we must use public key authentication.


Unfortunately, I can't help with the Windows side.  I'm only using
UNIX machines as clients, so Putty is something new to me :-(


erhm.. cd /usr/ports/security/putty;make install :-)


Heh!  Well, fancy that...  That's one of the side-effects of having an
SSH client in the base-system, I guess.  Thanks to DES, I never needed
Putty on FreeBSD so far :)


Putty's just a nice lightweight GUI ssh client for Windows that was  
ported to Unix sometime in the past 2 years.

-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: marked as broken


On Feb 1, 2006, at 4:50 PM, Bob Ababurko wrote:

I am running 5.4 release and have come across a port that has been  
marked as broken.  The port is  pear-Archive_Tar-1.3.1 and I am  
wondering what I can do to get past this short of updating my   
whole ports treewhich I am afraid of doing since this is a  
production machineand because I dont have much experience doing  
it either.


===  pear-Archive_Tar-1.3.1 is marked as broken: Incomplete pkg- 
plist.



When I try to install the package, it seems that the dependencies  
within the package are looking for a version of Apache that is off  
by an update...1.3.33 vs 1.3.34!


Not sure what would be the best way to handle thismy brain is a  
mess today and im looking for the easiest method of getting this  
done...of which I am not choosing the correct ways today, so any  
help would be appreciated.


thanks,
Bob


Maybe you can just try forcing the install to see if it works?
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: marked as broken

2006-02-01 Thread Kris Kennaway


On Wed, Feb 01, 2006 at 04:50:37PM -0800, Bob Ababurko wrote:
 I am running 5.4 release and have come across a port that has been 
 marked as broken.  The port is  pear-Archive_Tar-1.3.1 and I am 
 wondering what I can do to get past this short of updating my  whole 
 ports treewhich I am afraid of doing since this is a production 
 machineand because I dont have much experience doing it either.
 
 ===  pear-Archive_Tar-1.3.1 is marked as broken: Incomplete pkg-plist.

It means that if you were to install this port, it would not clean
itself up properly when you removed it again later.  If you don't care
about this, you can set the TRYBROKEN variable.

Kris


pgpXsWyTXbypq.pgp
Description: PGP signature

Re: Unable to compile mysql50-server

2006-02-01 Thread Roger Merritt

Yesterday I ran portinstall to install the mysql-server, left the job going 
overnight, and as expected had to reboot this morning. I noticed that 
portinstall did some configuring (which I had forgotten to do when I ran 
make the previous times), and I didn't want to waste anything that had 
gotten compiled, so rather than run portinstall again I went back to the 
mysql50-server directory and ran make, since the configuration files were 
already there. This time I got:

[EMAIL PROTECTED]:/usr/ports/databases/mysql50-server# make
===  Building for mysql-server-5.0.18
make  all-recursive
Making all in include
make  all-am
Making all in Docs
Making all in strings
Making all in mysys
Making all in dbug
Making all in extra
make  all-recursive
Making all in regex
Making all in bdb
cd build_unix  make all
Making all in innobase
make  all-recursive
Making all in os
Making all in ut
Making all in btr
Making all in buf
Making all in data
Making all in dict
Making all in dyn
Making all in eval
Making all in fil
Making all in fsp
Making all in fut
Making all in ha
Making all in ibuf
Making all in include
Making all in lock
Making all in log
Making all in mach
Making all in mem
Making all in mtr
Making all in page
Making all in pars
Making all in que
Making all in read
Making all in rem
Making all in row
Making all in srv
Making all in sync
Making all in thr
Making all in trx
Making all in usr
Making all in myisam
Making all in myisammrg
Making all in heap
Making all in vio
Making all in sql
make  all-recursive
Making all in share
if c++ 
-DMYSQL_SERVER  -DDEFAULT_MYSQL_HOME=\/usr/local\ 
-DDATADIR=\/var/db/mysql\  -DSHAREDIR=\/usr/local/share/mysql\ 
-DHAVE_CONFIG_H -I. -I. -I.. -I../bdb/build_unix 
-I../innobase/include   -I../include -I../include  -I../regex 
-I.-DDBUG_OFF -O -pipe -fconserve-space -O 
-pipe   -felide-constructors -fno-rtti 
-fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
-DMYSQLD_NET_RETRY_COUNT=100 -MT sql_derived.o -MD -MP -MF 
.deps/sql_derived.Tpo -c -o sql_derived.o sql_derived.cc;  then mv -f 
.deps/sql_derived.Tpo .deps/sql_derived.Po; else rm -f 
.deps/sql_derived.Tpo; exit 1; fi


After a couple of minutes my console started filling up with messages:
swap-pager: indefinite wait buffer: bufobj: 0, blkno: xx, size: 4096, 
or sometimes 8192. The blkno varies from 27852 to38249.



--
Roger


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Interrupt storm?!

	This is a new error I've seen from FreeBSD. Was displayed on ttyv0  
right after I started playing some music on the a remote machine from  
the disk shared via NFS:


Interrupt storm detected on irq11: ahc0; throttling interrupt source
ahc0: PCI error Interrupt at seqaddr = 0x9
ach0: Data Parity Error Detected during address or write data phase

Any ideas what this means?
	ahc0 is the dev name for my adaptec scsi card. I also had some  
issues just a little earlier with RAM and the slot on the motherboard  
I was using (turns out the slot is bad and not the RAM), but this is  
sure a weird error.

Thanks!
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Interrupt storm?!

2006-02-01 Thread Chuck Swiger

Garrett Cooper wrote:
[ ... ]
 Interrupt storm detected on irq11: ahc0; throttling interrupt source
 ahc0: PCI error Interrupt at seqaddr = 0x9
 ach0: Data Parity Error Detected during address or write data phase
 
 Any ideas what this means?
 ahc0 is the dev name for my adaptec scsi card. I also had some
 issues just a little earlier with RAM and the slot on the motherboard I
 was using (turns out the slot is bad and not the RAM), but this is sure
 a weird error.

Taking a look at vmstat -i, and trying to avoid interrupt sharing with other
devices if possible might help.  (If you can, try turning off the USB controller
in your BIOS, since that commonly shares an IRQ with other devices.)

If you're seeing a RAM slot going bad, it's also quite possible that your
motherboard is simply corrupting data and needs to be replaced.  Check cooling,
check power supply...

-- 
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: )()()()( named

2006-02-01 Thread Paul Schmehl


--On February 2, 2006 7:04:06 AM +0800 Daniel [EMAIL PROTECTED] wrote:


The biggest difference between running as root and the startup script
are the command line arguments given in either case.

Script flags: -u bind -t /var/named
CLI flags: -c /usr/local/etc/named.conf -u root

Yes, I know.  I'm starting the daemon as root because it can't write to the 
pidfile when it's started as bind.



The man page will show you that the -t flag indicates you want named
to chroot (recommended practice). It also is running as bind and not
root.


Yes, I know that as well.


Check out /var/named and your named config file. You will probably
find that /var/named/named.pid is not writable by the user bind.


It's writeable as bind.

ls -lsa /var/named/
total 19
2 drwxr-xr-x   5 root  wheel   512 Feb  1 20:30 .
2 drwxr-xr-x  20 root  wheel   512 Jan 27 17:42 ..
2 -rw-r--r--   1 bind  bind212 Feb  1 20:15 127.0.0
1 dr-xr-xr-x   4 root  wheel   512 Feb  1 20:33 dev
2 drwxr-xr-x   3 root  wheel   512 Feb  1 20:11 etc
2 -rw-r--r--   1 bind  bind580 Feb  1 20:14 friendshipforest.zone
2 -r--r--r--   1 bind  bind   1511 Feb  1 20:14 named.ca
2 -rw-r--r--   1 bind  bind  6 Feb  1 20:20 named.pid
2 -rw-r--r--   1 bind  bind516 Feb  1 20:14 stovebolt.zone
2 drwxr-xr-x   6 root  wheel   512 Feb  1 20:11 var

I removed /var/named and let the script recreate it.  Now it can't find 
named.conf



You may also find that the named config isn't specifying a full path
to be used within the chroot directory (/var/named).


options {
   directory /var/named;
   allow-transfer{
   none;
   };
   allow-query{
   any;
   };
   allow-recursion{
   local-info;
   };
   listen-on{
   127.0.0.1;
   66.221.101.248;
   };
   version nice try;
   auth-nxdomain yes;
#   pid-file named.pid;
   blackhole{
   bogusnet;
   };
   query-source address * port 53;
};


Below is the config for my named that runs chrooted.
directory   /;
pid-file/named.pid;
dump-file   /dump/named_dump.db;
statistics-file /stats/named.stats;

Yours may look something like:
directory   /var/named/;
pid-file/var/named/named.pid;
dump-file   /var/named/dump/named_dump.db;
statistics-file /etc/named/stats/named.stats;

And where do the zone files go?  Where does the rndc.key file go?  Where 
does the named.conf file go?



The paths in named.conf need to be relative to the chroot, not the base.

I'm not sure what you mean here.  The chroot directory is /var/named.  The 
directory specified in named.conf is /var/named.  To what are you referring 
when you say the paths?


When I try to start named using rndc, I get this:

rndc start
rndc: connect failed: connection refused


rndc does not have a command start


Missed that.


restart is also not yet implemented.


Knew that.


Writing your own startup scripts is unnecessary, especially for
something that already has one (or in this case, maybe two, /etc/rc.d
and /usr/local/etc/rc.d)

Except for one niggling problem.  It doesn't work.  Due to my ignorance, 
I'm sure, but it doesn't' work.


Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))


On Thu, 2 Feb 2006 02:38:29 +0200, Giorgos Keramidas
[EMAIL PROTECTED] said:
 On 2006-02-02 11:27, david bryce [EMAIL PROTECTED] wrote:
 On Thu, 2 Feb 2006 01:48:37 +0200, Giorgos Keramidas
  I have tried using SSH in the past, and got stuck setting up the
  public key login (that's why we're using pserver).
 
  I spent a few hours yesterday trying to get SSH going again. I can
  login with SSH from the windows machine using Putty, but only when
  I use password authentication. In order to use cvs with ssh (using
  the plink program in Putty), we must use public key authentication.
 
  Unfortunately, I can't help with the Windows side.  I'm only using UNIX
  machines as clients, so Putty is something new to me :-(
 
  Perhaps someone else on freebsd-questions can help with Putty?
 
  What about on the freebsd server side? Are there any logfiles I can
  look at on the server? Thanks!
 
 /var/log/auth.log and /var/log/messages are the ones I'd look at.  But I
 didn't notice anything interesting in the auth.log snippet you posted.
 

Thanks, Giorgos! /var/log/messages didn't have anything in it either.
You'd think there'd be a way to force sshd to write to the log why
it rejected a private key. Thank you!

Regards.

DB
-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - Access all of your messages and folders
  wherever you are

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))


On Wed, 01 Feb 2006 16:59:53 -0800, Micah [EMAIL PROTECTED] said:
 david bryce wrote:
  We are currently using pageant to manage the private key. However,
  the keys we are using are generated with puttygen (not from the
  server). The public key was then copied to the authorized_keys
  file on the server. Would you recommend generating the keys on
  the server? Do you have an idea where are some instructions
  about how to generate the keys on the server? Thanks!
 
  Regards,
 
  DB
 

 Out of curiosity did you use save public key or copy and paste out of
 the public key for pasting in openssh authorized_keys file box?  If I
 remember correctly, the save public key does not produce an openssh
 compatible public key.  Doing the copy and paste routine should work.

 HTH,
 Micah

Thanks, Micah! I did use copy and paste out of the public key memo
box.

Regards,

DB
-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - Send your email first class

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Attention: Garrett Cooper (Was: SSH with Public Key Authentication)

  Daniel,
 
  Thank you for taking the time to reply.
 
  We are currently using pageant to manage the private key. However,
  the keys we are using are generated with puttygen (not from the
  server). The public key was then copied to the authorized_keys
  file on the server. Would you recommend generating the keys on
  the server? Do you have an idea where are some instructions
  about how to generate the keys on the server? Thanks!
 
   Can you login using any key in the authorized_keys file? Also,  
 what's the umask for authorized keys (ls -l .ssh/authorized_keys)?
 -Garrett

Thanks for replying, Garrett!

There is only one key in the authorized_keys file (the one I'm 
trying to use), and I cannot login with it. The umask is:

-rw-r--r--  1 root  cvs  601 Feb  1 16:08 authorized_keys
-rw-r--r--  1 root  cvs  601 Feb  2 10:27 authorized_keys2
-rw-r--r--  1 root  cvs   13 Feb  1 17:10 known_hosts

Thanks!

Regards,

DB
-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - I mean, what is it about a decent email service?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Compaq Integrated SmartArray Quantum DLT4000

2006-02-01 Thread RA Cohen

Hi All,

I'm running several Compaq Proliant DL360 servers, all with FBSD
6.0-RELEASE.

One of these has an internal Quantum DLT 4000 (that's how the
BIOS identifies it) tape drive. I need to use it, but can find
no evidence of this hardware in the dmesg output. I've googled
around and really all I can locate are references to CAM, the
aacp driver compiled in the kernel, and device.hints. Can
someone put this all together for me? I'm not a newbie, have
compiled many kernels and worlds, and have been a FBSD user for
several years.

Here is the dmesg output for this machine, which contains the
above DLT Tape Drive connected to its embedded controller. The
machine also has the standard SmartArray 3200 controller which
is managing RAID drive volumes.

The system sees the integrated controller and uses ida0 to id
it, but does not see the tape drive.

Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992,
1993, 1994
The Regents of the University of California. All rights
reserved.
FreeBSD 6.0-RELEASE-p1 #0: Sun Jan  8 21:35:42 EST 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENSMP60
Timecounter i8254 frequency 1193182 Hz quality 0
CPU: Intel Pentium III (996.85-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0x686  Stepping = 6
 
Features=0x383fbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real memory  = 1342160896 (1279 MB)
avail memory = 1305382912 (1244 MB)
MPTable: COMPAQ   PROLIANT
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  1
 cpu1 (AP): APIC ID:  0
ioapic0: Changing APIC ID to 8
ioapic0: Assuming intbase of 0
ioapic0 Version 1.1 irqs 0-34 on motherboard
npx0: [FAST]
npx0: math processor on motherboard
npx0: INT 16 interface
cpu0 on motherboard
cpu1 on motherboard
pcib0: ServerWorks NB6635 3.0LE host to PCI bridge pcibus 0 on
motherboard
pci0: PCI bus on pcib0
ida0: Compaq Integrated Array controller port 0x2000-0x20ff
mem 0xc500-0xc5ff,0xc400-0xc4ff irq 10 at device
1.0 on pci0
ida0: [GIANT-LOCKED]
ida0: drives=0 firm_rev=1.42
fxp0: Intel 82559 Pro/100 Ethernet port 0x2400-0x243f mem
0xc3fff000-0xc3ff,0xc3e0-0xc3ef irq 11 at device 2.0
on pci0
miibus0: MII bus on fxp0
inphy0: i82555 10/100 media interface on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: Ethernet address: 00:02:a5:29:3a:de
pci0: display, VGA at device 3.0 (no driver attached)
pci0: base peripheral at device 4.0 (no driver attached)
pcib1: PCI-PCI bridge at device 5.0 on pci0
pci1: PCI bus on pcib1
ida1: Compaq Smart Array 3200 controller port 0x3000-0x30ff
mem 0xc6dfff00-0xc6df irq 15 at device 0.0 on pci1
ida1: [GIANT-LOCKED]
ida1: drives=2 firm_rev=3.08
idad0: Compaq Logical Drive on ida1
idad0: 17363MB (35561280 sectors), blocksize=512
idad1: Compaq Logical Drive on ida1
idad1: 52091MB (106683840 sectors), blocksize=512
isab0: PCI-ISA bridge at device 15.0 on pci0
isa0: ISA bus on isab0
atapci0: ServerWorks ROSB4 UDMA33 controller port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x2c00-0x2c0f at device 15.1
on pci0
ata0: ATA channel 0 on atapci0
ata1: ATA channel 1 on atapci0
pcib3: ServerWorks NB6635 3.0LE host to PCI bridge pcibus 3 on
motherboard
pci3: PCI bus on pcib3
fxp1: Intel 82559 Pro/100 Ethernet port 0x4000-0x403f mem
0xc6fff000-0xc6ff,0xc6e0-0xc6ef irq 5 at device 3.0
on pci3
miibus1: MII bus on fxp1
inphy1: i82555 10/100 media interface on miibus1
inphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp1: Ethernet address: 00:50:8b:bb:dd:95
eisa0: EISA bus on motherboard
mainboard0: CPQ0690 (System Board) on eisa0 slot 0
pmtimer0 on isa0
orm0: ISA Option ROMs at iomem
0xc-0xc7fff,0xc8000-0xcbfff,0xcc000-0xc,0xd-0xd17ff,0xe8000-0xedfff,0xee000-0xe
on isa0
atkbdc0: Keyboard controller (i8042) at port 0x60,0x64 on isa0
atkbd0: AT Keyboard irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: PS/2 Mouse irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model IntelliMouse, device ID 3
fdc0: Enhanced floppy controller at port 0x3f0-0x3f5,0x3f7 irq
6 drq 2 on isa0
fdc0: [FAST]
fd0: 1440-KB 3.5 drive on fdc0 drive 0
ppc0: Parallel port at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: Parallel port bus on ppc0
plip0: PLIP network interface on ppbus0
lpt0: Printer on ppbus0
lpt0: Interrupt-driven port
ppi0: Parallel I/O on ppbus0
sc0: System console at flags 0x100 on isa0
sc0: VGA 16 virtual consoles, flags=0x300
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
vga0: Generic ISA VGA at port 0x3c0-0x3df iomem
0xa-0xb on isa0
Timecounters tick every 1.000 msec
acd0: CDROM Compaq CRD-8402B/1.03 at ata0-master PIO4
SMP: AP CPU #1 Launched!
Trying to mount root from ufs:/dev/idad0s1a

Thanks in advance,
Roy


__
Do You Yahoo!?

SSH with Public Key Authentication


  What about on the freebsd server side? Are there any logfiles I can
  look at on the server? Thanks!
 
 I often find it more useful to temporarily run a second sshd on an
 alternate port, with stderr directed to the console and sshd in
 no-detach and debug mode. Try the following:
 
 $ sshd -d -d -d -e -D -p 222
 
 Then watch the output as you try to connect on that port
 
 $ sshd myhost -p 222
 
 If you'd like, you can redirect the output to a file, too, but I
 find that screen(1)'s scrollback usually is enough for me.
 
 -- 
 
 o--{ Will Maier }--o
 | jabber:..wcmaier at jabber.ccc.de | email:..wcmaier at ml1.net
 |
 | \.wcmaier at cae.wisc.edu | \..wcmaier at cae.wisc.edu
 |
 *--[ BSD Unix: Live Free or Die ]--*

Thanks, Will! I think we're finally getting somewhere! The 
output from this:

debug2: read_server_config: filename /etc/ssh/sshd_config
debug1: sshd version OpenSSH_3.8.1p1 FreeBSD-20040419
Could not load host key: /etc/ssh/ssh_host_dsa_key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.

Then I tried doing a 
/usr/local/bin/ssh-keygen -t dsa /etc/ssh/ssh_host_dsa_key.
Is this the right way to do it?

Probably not, because then I got:

debug2: read_server_config: filename /etc/ssh/sshd_config
debug1: sshd version OpenSSH_3.8.1p1 FreeBSD-20040419
debug3: Not a RSA1 key file /etc/ssh/ssh_host_dsa_key.
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type unknown
Could not load host key: /etc/ssh/ssh_host_dsa_key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.

Doing a 
/usr/local/bin/ssh-keygen -t rsa /etc/ssh/ssh_host_dsa_key
didn't seem to make much difference.

Any ideas what to try next? Thank you!

Regards,

DB
-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - Email service worth paying for. Try it for free

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Attention: Garrett Cooper (Was: SSH with Public Key Authentication)

2006-02-01 Thread Clayton Scott Kern

on 02-02-2006, david bryce wrote:
   Daniel,
  
   Thank you for taking the time to reply.
  
   We are currently using pageant to manage the private key. However,
   the keys we are using are generated with puttygen (not from the
   server). The public key was then copied to the authorized_keys
   file on the server. Would you recommend generating the keys on
   the server? Do you have an idea where are some instructions
   about how to generate the keys on the server? Thanks!
  
  Can you login using any key in the authorized_keys file? Also,  
  what's the umask for authorized keys (ls -l .ssh/authorized_keys)?
  -Garrett
 
 Thanks for replying, Garrett!
 
 There is only one key in the authorized_keys file (the one I'm 
 trying to use), and I cannot login with it. The umask is:
 
 -rw-r--r--  1 root  cvs  601 Feb  1 16:08 authorized_keys
 -rw-r--r--  1 root  cvs  601 Feb  2 10:27 authorized_keys2
 -rw-r--r--  1 root  cvs   13 Feb  1 17:10 known_hosts
 
 Thanks!
 
 Regards,
 
 DB
 -- 
   david bryce
   [EMAIL PROTECTED]
 
 -- 

What's the permissions for the .ssh directory.  I had problems in the
past if it's not 700.  There was an entry in /var/log/messages or its
equivalent, stating as such.

This would come up on new systems, because I usually had to create the
.ssh directory and the umask would cause it to have 755.

-- 
Clayton Scott Kern
[EMAIL PROTECTED]The software stated it required
UNIX System Administrator  Microsoft Windows 2000 or higher,
FreeBSD, Linux, Solaris   so I installed FreeBSD.
HP-UX
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: /dev/dsp

2006-02-01 Thread joe


hi,

try

$ su
# kldload snd_driver

and you could see /dev/dsp.

--
joe

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Compaq Integrated SmartArray Quantum DLT4000

2006-02-01 Thread [EMAIL PROTECTED]

On 2/1/06, RA Cohen [EMAIL PROTECTED] wrote:
 Hi All,

 I'm running several Compaq Proliant DL360 servers, all with FBSD
 6.0-RELEASE.

 One of these has an internal Quantum DLT 4000 (that's how the
 BIOS identifies it) tape drive. I need to use it, but can find
 no evidence of this hardware in the dmesg output.
. . .
 The system sees the integrated controller and uses ida0 to id
 it, but does not see the tape drive.


If it's anything like my old proliant, the tape drive
is on ncr0 or ncr1 (or sym[01] any of which are the
on-board scsi controllers), which do not appear to probe
on your system.  If your tape drive is cabled to
ida0 or ida1, you'll probably need to resort to the
array controller firmware or CD, depending, and
set it up from there.


--
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Attention: Garrett Cooper (Was: SSH with Public Key Authentication)


On Wed, 1 Feb 2006 23:24:47 -0500, Clayton Scott Kern
 
 What's the permissions for the .ssh directory.  I had problems in the
 past if it's not 700.  There was an entry in /var/log/messages or its
 equivalent, stating as such.
 
 This would come up on new systems, because I usually had to create the
 .ssh directory and the umask would cause it to have 755.
 
 -- 
 Clayton Scott Kern
 [EMAIL PROTECTED]The software stated it required
 UNIX System Administrator  Microsoft Windows 2000 or higher,
 FreeBSD, Linux, Solaris   so I installed FreeBSD.
 HP-UX


Thanks, Clayton!

It looks like someone has installed the ssh2 package on this machine
(using pkg_add -r ssh2). So this is not a standard freebsd ssh
installation. In fact, testing on another box with freebsd 6, I
can connect with Putty using public key authentication. Does
anyone know how to get the standard ssh to work on this machine
without upsetting things too much? It is currently running a
mail server and cvs, so I'm ginger about doing anything radical
on it. Doing a ps -ax shows that it's sshd2 that is running, and
not sshd. But the binaries ARE there for sshd. Except the 
hostkey doesn't seem to be there. Could fixing this be as simple 
as creating a hostkey for sshd as well, and running it on a 
different port than sshd2 is running on?

Thank you!

Regards,

DB

-- 
  david bryce
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - And now for something completely different

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))