FreeBSD 6.2 default bind9, question about customize logging

2007-07-07 Thread Patrick Dung
I am using FreeBSD 6.2 with the default bind (not ports).
By default chroot is used.

When named start or stop, it does have log in /var/log/messages.
But for example, when some do domain transfer successfully, that is not
logged (zone transfer denied is logged).

So I tried to add this part in named.conf (enabled local0.* in
syslog.conf) , but still no luck. Any suggestions?

logging {
channel named-log {
//syslog daemon;
syslog local0;
severity info;
print-category yes;
};
 category default { named-log; };
 category xfer-in { named-log; };
 category xfer-out { named-log; };
 category unmatched { null; };
};

Thanks
Patrick


  

Park yourself in front of a world of choices in alternative vehicles. Visit the 
Yahoo! Auto Green Center.
http://autos.yahoo.com/green_center/ 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Finally Converting From Bind 8 - Bind 9

2007-07-07 Thread Tim Daneliuk

Josh Paetzel wrote:

On Monday 02 July 2007 16:48, Tim Daneliuk wrote:

I am (ever so) slowly moving my domain from FBSD 4.x to 6.2.  I am now
at the point where I need to convert my Bind 8 configuration to Bind 9.
In so doing, I like to finally separate my internal (non-routable) hosts
so that their names never resolve outside the private network, and
expose only the public facing hosts to the world via DNS.  I'd also
like to (finally) associate names with dhcpd-provided addresses
so both forwards  reverses work inside the private network.

Could some kind soul please point me to a good HOWTO on this migration and
reconfiguration?  I am DAGSing as I write this, but so far have not
found what I want.

TIA,


The first part of what you want is easy. 
In named.conf you'll have something like...


acl private-hosts { 192.168.1.0/24; 192.168.2.0/24; };

view internal {
match-clients { private-hosts; };
zone example.org {
type master;
file master/db.internal.example.org;
};
};

view external {
match-clients { any; };
zone example.org {
type master;
file master/db.example.org;
};
};

Now you have two separate zonefiles, one which is consulted when someone from 
192.168.1.0/24 or 192.168.2.0/24 makes a query and one that is consulted when 
anyone else makes a query.


HTH


That helped immensely and made this part of the problem trivial to implement.  
Thanks!

Now I just have to learn how to have dhcpd update named with the latest
lease information...

--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: game advice

2007-07-07 Thread Andriy Babiy
  Another machine has P-III and Matrox 8 Mb. Is
  there anything peaceful but dynamic enough for an older video card?

Many thanks to everybody who provided their opinion and shared their 
experiences!

Andriy
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


An ssh Question

2007-07-07 Thread Tim Daneliuk

I have a machine that is my firewall/gateway to a private network NATing
non-routable addresses. I can ssh at-will from hosts on the private
network to machines out on the net, but when I try to ssh from the
firewall machine to a particular address, it just hangs and eventually
times out. Verbose output is:

  OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004
  debug1: Reading configuration data /etc/ssh/ssh_config
  debug2: ssh_connect: needpriv 0
  debug1: Connecting to xx.com [x.x.x.x] port 22.


What is really baffling is that if I try the exact same thing from, say,
a cygwin session on a host on the private network - this works fine.
So ... it's not a firewall problem as near as I can tell.  It may be
an ssh configuration problem - that is, the FreeBSD ssh client can't do
it, but another client (cygwin) can.

Ideas?
--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


adding password for root

2007-07-07 Thread Zbigniew Szalbot
Hello,

Not sure how it came about but I just realized that my for new FBSD
installation root user is without a password. When I log in remotely and
want to use chpass to add a password for user root I am presented with vi
editor in which I guess I could theoretically insert it. But this process
was always interactive. How should I add a password for user root (remote
login as root is disabled). Do I need to access that box physically and
type it on the console or can I set it remotely?

Thank you!

Zbigniew Szalbot

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: An ssh Question

2007-07-07 Thread Jonathan Chen
On Sat, Jul 07, 2007 at 02:52:21AM -0500, Tim Daneliuk wrote:
 I have a machine that is my firewall/gateway to a private network NATing
 non-routable addresses. I can ssh at-will from hosts on the private
 network to machines out on the net, but when I try to ssh from the
 firewall machine to a particular address, it just hangs and eventually
 times out. Verbose output is:
 
   OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004
   debug1: Reading configuration data /etc/ssh/ssh_config
   debug2: ssh_connect: needpriv 0
   debug1: Connecting to xx.com [x.x.x.x] port 22.
 
 
 What is really baffling is that if I try the exact same thing from, say,
 a cygwin session on a host on the private network - this works fine.
 So ... it's not a firewall problem as near as I can tell.

It sure sounds like a firewall problem to me. Why do you think
otherwise?
-- 
Jonathan Chen [EMAIL PROTECTED]
--
char *p=char *p=%c%s%c;main(){printf(p,34,p,34);};main(){printf(p,34,p,34);}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Safely mount OS X UFS filesystem?

2007-07-07 Thread nawcom
Oh god i apologize for the unacceptable asnwer; i was probably 
half-asleep when i responded previously :-P


yes, theres no support as far as i know for darwin ufs for freebsd, from 
what i understand darwin ufs is gonna be the next filesystem for apple 
to ditch, and for 10.5 they will be using sun's zfs filesystem. theres 
also development going on for zfs support in the freebsd kernel.


the only thing ive done before in a situation like this is to backup the 
data (copy to alt disk) on the ufs, delete the ufs filesystem and 
replace it with hfs+ and restore the backup back onto it - assuming you 
didnt plan for that ufs partition to be bootable or anything. hfs+ is 
supported in freebsd.


I hope that's a more reasonable suggestion - looks like the coffee 
helped :-P

nawcom


Thor Lancelot Simon wrote:

Can I, on a system running FreeBSD 6.2 or -current, safely mount a
UFS filesystem created (and used) on Mac OS 10.4.10?  These filesystems
are UFS1 (at fslevel 3) with big-endian datastructures in the metadata,
4k blocks and 1k fragments, and a few minor oddities in their layout;
they are pretty much exactly the UFS NeXT used on their workstations.

If so, Will such a filesystem be safe to mount under OS X after I use it
on FreeBSD?

I seem to be able to mount these under NetBSD though the snapshot code
complains that inodes 64 and 16384 are not dedicated to snapshots.

  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: adding password for root

2007-07-07 Thread Zbigniew Szalbot
Hello,

On Sat, 7 Jul 2007 10:48:52 +0200, Zbigniew Szalbot
[EMAIL PROTECTED] wrote:
 Hello,
 
 Not sure how it came about but I just realized that my for new FBSD
 installation root user is without a password. When I log in remotely and
 want to use chpass to add a password for user root I am presented with vi
 editor in which I guess I could theoretically insert it. But this process
 was always interactive. How should I add a password for user root (remote
 login as root is disabled). Do I need to access that box physically and
 type it on the console or can I set it remotely?

Stupid me. Instead of waiting for your advice I went ahead and entered a
password in the vi editor, then saved. Unfortunately, this password is not
accepted when I su. Is there any hope for me other than reinstallting the
whole system?

Thank you!

-- 
Zbigniew Szalbot

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


NTFS-3G: mount at boot

2007-07-07 Thread Jan Sebosik

Hi all

how to mount NTFS partitions in Read/write mode with ntfs-3g at boot ?

When I insert record inside /etc/fstab, it says that mount-ntfs-3g 
doesn`t exist.


Best regards
---

Jan Sebosik, Slovakia
[EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


GCC 4.2.1: Replacing builtin compiler

2007-07-07 Thread Jan Sebosik

Hi

how safe is it to compile FreeBSD-world without builtin GCC, and replace 
it with GCC 4.2.1 from ports ?


Should I recompile world and kernel after installing new GCC with it ?

Best regards

--
Jan Sebosik, Slovakia
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: adding password for root

2007-07-07 Thread Yuri Pankov
On Sat, Jul 07, 2007 at 11:15:41AM +0200, Zbigniew Szalbot wrote:
 Hello,
 
 On Sat, 7 Jul 2007 10:48:52 +0200, Zbigniew Szalbot
 [EMAIL PROTECTED] wrote:
  Hello,
  
  Not sure how it came about but I just realized that my for new FBSD
  installation root user is without a password. When I log in remotely and
  want to use chpass to add a password for user root I am presented with vi
  editor in which I guess I could theoretically insert it. But this process
  was always interactive. How should I add a password for user root (remote
  login as root is disabled). Do I need to access that box physically and
  type it on the console or can I set it remotely?
 
 Stupid me. Instead of waiting for your advice I went ahead and entered a
 password in the vi editor, then saved. Unfortunately, this password is not
 accepted when I su. Is there any hope for me other than reinstallting the
 whole system?
 
 Thank you!
 
 -- 
 Zbigniew Szalbot
 

You'll need physical access. Boot into single user mode, and you shall
be able to change password with `passwd`. Don't forget to `mount -a`.


HTH,
Yuri


pgpKDJ4JqcoIW.pgp
Description: PGP signature


Re: GCC 4.2.1: Replacing builtin compiler

2007-07-07 Thread [LoN]Kamikaze
Jan Sebosik wrote:
 Hi
 
 how safe is it to compile FreeBSD-world without builtin GCC, and replace
 it with GCC 4.2.1 from ports ?
 
 Should I recompile world and kernel after installing new GCC with it ?
 
 Best regards
 

GCC from ports links against the GNU libs, unlike GCC in base, which links to
the FreeBSD libs. So it's not as trivial as you seem to think.

You might try to use GCC from the FreeBSD-CURRENT branch.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: adding password for root

2007-07-07 Thread Zbigniew Szalbot


On Sat, 7 Jul 2007 13:26:30 +0400, Yuri Pankov [EMAIL PROTECTED]
wrote:
 On Sat, Jul 07, 2007 at 11:15:41AM +0200, Zbigniew Szalbot wrote:
 Hello,
 
 On Sat, 7 Jul 2007 10:48:52 +0200, Zbigniew Szalbot
 [EMAIL PROTECTED] wrote:
  Hello,
  
  Not sure how it came about but I just realized that my for new FBSD
  installation root user is without a password. When I log in remotely
 and
  want to use chpass to add a password for user root I am presented with
 vi
  editor in which I guess I could theoretically insert it. But this
 process
  was always interactive. How should I add a password for user root
 (remote
  login as root is disabled). Do I need to access that box physically
 and
  type it on the console or can I set it remotely?
 
 Stupid me. Instead of waiting for your advice I went ahead and entered a
 password in the vi editor, then saved. Unfortunately, this password is
 not
 accepted when I su. Is there any hope for me other than reinstallting
 the
 whole system?
 
 Thank you!
 

-- 
Zbigniew Szalbot

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: adding password for root

2007-07-07 Thread Zbigniew Szalbot
I am sorry for a previous post - I clicked the wrong button and it got
sent.

Just wanted to say that changing root password by booting in single user
mode, issuing mount -a and then passwd worked great! Thank you!

Zbigniew Szalbot

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


disable PCI interrupt sharing in 6.1?

2007-07-07 Thread Zhang Weiwu
Dear list

I have one PCMCIA slot unusable in 6.1 but is fine in 4.7 (when OLDCARD
is being used). I am just guessing perhaps this has something to do with
interrupt sharing. I cannot find in man page of 'pccard' enough
information on how to tweak any option, looks there is no option for
pccard(4).

Is there a way to disable interrupt sharing for PCI devices? As far as I
know the whole concept of NEWCARD is to address the issue of PCI cards,
however I only have ISA cards and 16-bit card bridge and NEWCARD didn't
solve any of my problem (because I had no problem) but probably created
more.

Best Regards
-- 
Zhang Weiwu
Real Softservice
http://www.realss.com
+86 592 2091112

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: one server with two ip address

2007-07-07 Thread Eric Crist


On Jul 6, 2007, at 7:21 PMJul 6, 2007, Daniel A. A. wrote:


Ray wrote:

Hello all,
I have a production server with two network interfaces.  The  
primary interface is up and running. (DHCP from the local Telco)  
The second interface is installed, but not yet active. It will run  
on a local network only. Can I do something as simple as ifconfig   
nfe1 192.168.0.100
to give myself access to the internal network? As this is a  
production server, I don't want to just play with it too much.   
Thanks,

Ray

You'd have to
ifconfig nfe1 192.168.0.100 netmask ###.###.###.###
But don't worry - If you mistype, or make some other error (Like  
forgetting to specify the gateway for the connection), nothing  
happens. You'll just get an error printed to stdout and the netif  
will remain untouched.




You can shorten that command using CIDR notation as well:

ifconfig nfe1 192.168.0.100/24

Eric Crist
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Safely mount OS X UFS filesystem?

2007-07-07 Thread Eric Crist


On Jul 6, 2007, at 9:37 PMJul 6, 2007, Thor Lancelot Simon wrote:


Can I, on a system running FreeBSD 6.2 or -current, safely mount a
UFS filesystem created (and used) on Mac OS 10.4.10?  These  
filesystems
are UFS1 (at fslevel 3) with big-endian datastructures in the  
metadata,

4k blocks and 1k fragments, and a few minor oddities in their layout;
they are pretty much exactly the UFS NeXT used on their workstations.

If so, Will such a filesystem be safe to mount under OS X after I  
use it

on FreeBSD?

I seem to be able to mount these under NetBSD though the snapshot code
complains that inodes 64 and 16384 are not dedicated to snapshots.



I've mounted OS X formatted UFS file systems just fine for quite some  
time.  I haven't been able to mount FreeBSD formatted UFS  
filesystems, however.


Eric Crist
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: one server with two ip address

2007-07-07 Thread Daniel A. A.

Eric Crist wrote:


On Jul 6, 2007, at 7:21 PMJul 6, 2007, Daniel A. A. wrote:


Ray wrote:

Hello all,
I have a production server with two network interfaces.  The primary 
interface is up and running. (DHCP from the local Telco) The second 
interface is installed, but not yet active. It will run on a local 
network only. Can I do something as simple as ifconfig  nfe1 
192.168.0.100
to give myself access to the internal network? As this is a 
production server, I don't want to just play with it too much.  Thanks,

Ray

You'd have to
ifconfig nfe1 192.168.0.100 netmask ###.###.###.###
But don't worry - If you mistype, or make some other error (Like 
forgetting to specify the gateway for the connection), nothing 
happens. You'll just get an error printed to stdout and the netif 
will remain untouched.




You can shorten that command using CIDR notation as well:

ifconfig nfe1 192.168.0.100/24

Eric Crist


Showoff :P
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: An ssh Question

2007-07-07 Thread Simon Chang


  OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004
  debug1: Reading configuration data /etc/ssh/ssh_config
  debug2: ssh_connect: needpriv 0
  debug1: Connecting to xx.com [x.x.x.x] port 22.


What is really baffling is that if I try the exact same thing from, say,
a cygwin session on a host on the private network - this works fine.
So ... it's not a firewall problem as near as I can tell.  It may be
an ssh configuration problem - that is, the FreeBSD ssh client can't do
it, but another client (cygwin) can.


It would be helpful if you include your firewall ruleset, plus
sshd_config.  It's possible that one or more is misconfigured, but we
would have no way of knowing without your telling us about them.

SC
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: game advice

2007-07-07 Thread Momchil Ivanov
On Friday 06 July 2007 11:49:51 Peter Boosten wrote:
 Momchil Ivanov wrote:
  You can try the mame emulator (it is in ports). There were a lot of games
  for 8 bit consoles when I was about 8 years old :) and believe me, they
  were and still are amaizing. There is no such experience as playing the
  whole night Tanks with a friend getting to the last level or so.

 True: they don't make them like they used to :-)

21th century :) everything is 3D with surround sound now, no beeps, even the 
controls are different now. Have you tried the new Wii console? You have 
wireless remotes with built in speakers (they vibrate too) and you just have 
to move your hand around or turn the remote. Boxing with these remotes is 
fun :) though they don`t work with distances greater that 2.5-3 meters, which 
is a but unpleasant when 4 people are playing tennis ( there is just not 
enough free space for 4 people moving hands around in these 3 meters in front 
of the tv).
Though computer games are fun, consoles still rock!

-- 
PGP KeyID: 0x3118168B
Keyserver: pgp.mit.edu
Key fingerprint BB50 2983 0714 36DC D02E  158A E03D 56DA 3118 168B
  


pgpBC4Dxm9gYF.pgp
Description: PGP signature


Re: game advice

2007-07-07 Thread Modulok

On 7/7/07, Momchil Ivanov [EMAIL PROTECTED] wrote:

On Friday 06 July 2007 11:49:51 Peter Boosten wrote:
 Momchil Ivanov wrote:
  You can try the mame emulator (it is in ports). There were a lot of
games
  for 8 bit consoles when I was about 8 years old :) and believe me, they
  were and still are amaizing. There is no such experience as playing the
  whole night Tanks with a friend getting to the last level or so.

 True: they don't make them like they used to :-)

21th century :) everything is 3D with surround sound now, no beeps, even the
controls are different now. Have you tried the new Wii console? You have
wireless remotes with built in speakers (they vibrate too) and you just have
to move your hand around or turn the remote. Boxing with these remotes
is
fun :) though they don`t work with distances greater that 2.5-3 meters,
which
is a but unpleasant when 4 people are playing tennis ( there is just not
enough free space for 4 people moving hands around in these 3 meters in
front
of the tv).
Though computer games are fun, consoles still rock!

--
PGP KeyID: 0x3118168B
Keyserver: pgp.mit.edu
Key fingerprint BB50 2983 0714 36DC D02E  158A E03D 56DA 3118 168B


Off topic:

The wii remote references an array of infrared sources, typically
emitted from the supplied sensor bar. However, any two point sources
of infrared light can be substituted. For example, one could ignite
two candles and place them on either side of the television. Common
household candles emit in the infrared spectrum and thus can be used
as reference points by the infrared sensor in the controller. Due to
the fact that they are significantly brighter than those in the
supplied sensor bar, one should be able to use the controller from a
significant distance. Be careful not to burn your house down. You can
probably find some nice infrared emitting diodes at Radio Shack and
hook them up to an AC/DC converter instead.

Be safe. Experiment. Have fun.
-Modulok-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: bge NIC not supporting 1000baseTX

2007-07-07 Thread Ted Mittelstaedt

This is similar to PR  kern/107850  maybe it should be added to it.

Ted

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Martin Hepworth
 Sent: Thursday, July 05, 2007 11:13 AM
 To: Tek Bahadur Limbu
 Cc: freebsd-questions@freebsd.org
 Subject: Re: bge NIC not supporting 1000baseTX


 HI

 is the other end auto-negotiating properly? What happens if you force 1000
 full at BOTH ends?

 --
 martin

 On 7/5/07, Tek Bahadur Limbu [EMAIL PROTECTED] wrote:
 
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  Hi all,
 
  I have a problem with my bge0 (BCM5750A1 NetXtreme) NIC card which is
  integrated in my Dell 600SC machine.  This machine is running on
  FreeBSD-6.2 (i386).
 
  For some reasons, the bge0 NIC interface does not seem  to support
  1000baseTX settings.
 
  When the NIC card is set at either 10/100 baseTX,  the bge0 interface
  shows an active state.  However, when I type the following command:
 
  ifconfig bge0 media 1000baseTX
 
  the status of the bge0 NIC card shows: no carrier
 
  Does that mean that this bge0 NIC card does not support speeds of
  1000baseTX or do I have to tweak some kernel or sysctl settings?
 
  Thanking you
 
 
  - --
 
 
  With best regards and good wishes,
 
  Yours sincerely,
 
  Tek Bahadur Limbu
 
  (TAG/TDG Group)
  Jwl Systems Department
 
  Worldlink Communications Pvt. Ltd.
 
  Jawalakhel, Nepal
 
  http://www.wlink.com.np
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v1.4.2.2 (FreeBSD)
 
  iD8DBQFGjPQvVrOl+eVhOvYRAtEsAKCni1JJ/mBLLOnSroIajz6vO+gwTACdE22N
  W2fd6dj7OunY/1r5PaZkLMs=
  =HGVA
  -END PGP SIGNATURE-
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
  [EMAIL PROTECTED]
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


passwd file and user accounts

2007-07-07 Thread Lisa Casey

Hi,

This is probably a stupid question, but I'll ask it anyway...

I have a Red Hat Linux system I need to get rid of. It is currently doing 
e-mail for approximately 700 users and is also doing radius authentication. 
I have setup a new FreeBSD computer to take it's place. I have everything 
setup now on the FreeBSD computer except for the user accounts and 
mailboxes. The mailboxes aren't a problem, I've used tar to move mailboxes 
before.


I suppose I cannot simply copy /etc/passwd, /etc/group and /home from the 
Redhat computer to the FreeBSD computer due to the password hash in 
/etc/passwd. Am I correct on this?  Would it be possible to copy /etc/passwd 
then (before the new system goes live) reset all the passwords with the 
passwd command? That might be easier than adding in close to 700 accounts 
using adduser.  Does anyone  have a better idea of how I might go about 
doing this?


Thanks,

Lisa Casey



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: gimpshop howto start?

2007-07-07 Thread Philipp Ost

David Southwell wrote:
I posted this to the gimp mailing list but the list seems to have a v. low 
activity and few postings. There is no reply so far. So hopefully there is 
someone here who can point me in the right direction.


This type of question rather belongs to [EMAIL PROTECTED] I've CC'd that list.


1. How do I get to start gimpshop? The docs seem to have detailed 
documentation but although I have searched much head scratching -- I seem 
unable to find anything that tells me how to get the gimpshop interface 
running :-( 


You mean how to start up the program itself? Open an xterm (or aterm, 
eterm or...) and type 'gimpshop' at the prompt...



2. I found that gimp will itself will open *.jpg but does not open raw files - 
In my case in need to be able to open canon raw files *.cr2 and would also 
like to be able to open photoshop *.psd files. 


Gimp can open and save *.psd files. Gimp can open several types of raw 
files, but I don't know if *.cr2 is supported.




# pkg_info |grep gimp

[...]

gimpshop-2.2.11_5   GIMP fork resembling Adobe Photoshop

   
-- Gimpshop is an autonomous application (see above).


HTH,
Philipp
--
www.familie-ost.info/~pj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Adding a new command

2007-07-07 Thread Lisa Casey

Hi,

Once I get this new system going I promise I'll quit pestering you folks 
:-)


Got another question. This should be simple to answer. I've done this before 
but can't seem to replicate it this morning. I have a few scripts my 
employees use to do things such as add a new radius user, restart the radius 
server and tail the radius log file. The most simple one is radlog.  The 
file radlog contains the line:

tail -f  /var/log/radius.log

I need to be able to type radlog from anywhere on the system and have it 
work.


I put the file radlog in /bin   (/bin and  /sbin are all in my shell's 
path). Ownership is root/wheel  permissions are 555 (I've tried 700 and 
777 - these don't need write access though). But when I type radlog I get 
command not found. I can type ./bin/radlog and it works but I don't want 
that. I thought if the file was in my path and if it was executable just 
typing the name of the file from anywhere would work but evidently I'm 
overlooking something. What?


Thanks,

Lisa Casey

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: game advice

2007-07-07 Thread Peter Boosten


Momchil Ivanov wrote:
 On Friday 06 July 2007 11:49:51 Peter Boosten wrote:
 Momchil Ivanov wrote:
 You can try the mame emulator (it is in ports). There were a lot of games
 for 8 bit consoles when I was about 8 years old :) and believe me, they
 were and still are amaizing. There is no such experience as playing the
 whole night Tanks with a friend getting to the last level or so.
 True: they don't make them like they used to :-)
 
 Though computer games are fun, consoles still rock!
 

I guess you've never tried the very addictive nethack, then?

It's not a game for an 8-year old, btw, but that one really rocks...

Peter
-- 
http://www.boosten.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Adding a new command

2007-07-07 Thread Peter Boosten

Lisa Casey wrote:
 Hi,
 
 Once I get this new system going I promise I'll quit pestering you folks
 :-)
 
 Got another question. This should be simple to answer. I've done this
 before but can't seem to replicate it this morning. I have a few scripts
 my employees use to do things such as add a new radius user, restart the
 radius server and tail the radius log file. The most simple one is
 radlog.  The file radlog contains the line:
 tail -f  /var/log/radius.log
 
 I need to be able to type radlog from anywhere on the system and have it
 work.
 
 I put the file radlog in /bin   (/bin and  /sbin are all in my shell's
 path). Ownership is root/wheel  permissions are 555 (I've tried 700 and
 777 - these don't need write access though). But when I type radlog I
 get command not found. I can type ./bin/radlog and it works but I don't
 want that. I thought if the file was in my path and if it was executable
 just typing the name of the file from anywhere would work but evidently
 I'm overlooking something. What?
 

try typing 'rehash' first (without the quotes).

It's more obvious to put local scripts in /usr/local/bin, IMHO.

Hope this helps.

Peter
-- 
http://www.boosten.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: An ssh Question

2007-07-07 Thread Tim Daneliuk

Jonathan Chen wrote:

On Sat, Jul 07, 2007 at 02:52:21AM -0500, Tim Daneliuk wrote:

I have a machine that is my firewall/gateway to a private network NATing
non-routable addresses. I can ssh at-will from hosts on the private
network to machines out on the net, but when I try to ssh from the
firewall machine to a particular address, it just hangs and eventually
times out. Verbose output is:

  OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004
  debug1: Reading configuration data /etc/ssh/ssh_config
  debug2: ssh_connect: needpriv 0
  debug1: Connecting to xx.com [x.x.x.x] port 22.


What is really baffling is that if I try the exact same thing from, say,
a cygwin session on a host on the private network - this works fine.
So ... it's not a firewall problem as near as I can tell.


It sure sounds like a firewall problem to me. Why do you think
otherwise?


Because machines *behind* the firewall can get out to the machine
in question, but the firewall machine itself cannot...



--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: An ssh Question

2007-07-07 Thread Tim Daneliuk

Simon Chang wrote:


  OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004
  debug1: Reading configuration data /etc/ssh/ssh_config
  debug2: ssh_connect: needpriv 0
  debug1: Connecting to xx.com [x.x.x.x] port 22.


What is really baffling is that if I try the exact same thing from, say,
a cygwin session on a host on the private network - this works fine.
So ... it's not a firewall problem as near as I can tell.  It may be
an ssh configuration problem - that is, the FreeBSD ssh client can't do
it, but another client (cygwin) can.


It would be helpful if you include your firewall ruleset, plus
sshd_config.  It's possible that one or more is misconfigured, but we
would have no way of knowing without your telling us about them.

SC


I have opened up the firewall entirely just to test, and this does
not solve the problem:

00100  162  18088 divert 8668 ip from any to any via fxp0
001000  0 allow ip from any to any via lo0
002000  0 deny ip from any to 127.0.0.0/8
003000  0 deny ip from 127.0.0.0/8 to any
65000  206  21586 allow ip from any to any
65535 3872 652732 deny ip from any to any



The ssh config is untouched and has only comments in it:

#   $OpenBSD: ssh_config,v 1.22 2006/05/29 12:56:33 dtucker Exp $
#   $FreeBSD: src/crypto/openssh/ssh_config,v 1.27.2.4 2006/11/11 00:51:28 
des Exp $

# This is the ssh client system-wide configuration file.  See
# ssh_config(5) for more information.  This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.

# Configuration data is parsed as follows:
#  1. command line options
#  2. user-specific file
#  3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.

# Site-wide defaults for some commonly used options.  For a comprehensive
# list of available options, their meanings and defaults, please see the
# ssh_config(5) man page.

# Host *
#   ForwardAgent no
#   ForwardX11 no
#   RhostsRSAAuthentication no
#   RSAAuthentication yes
#   PasswordAuthentication yes
#   HostbasedAuthentication no
#   GSSAPIAuthentication no
#   GSSAPIDelegateCredentials no
#   BatchMode no
#   CheckHostIP no
#   AddressFamily any
#   ConnectTimeout 0
#   StrictHostKeyChecking ask
#   IdentityFile ~/.ssh/identity
#   IdentityFile ~/.ssh/id_rsa
#   IdentityFile ~/.ssh/id_dsa
#   Port 22
#   Protocol 2,1
#   Cipher 3des
#   Ciphers 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
#   EscapeChar ~
#   Tunnel no
#   TunnelDevice any:any
#   PermitLocalCommand no
#   VersionAddendum FreeBSD-20061110


--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: passwd file and user accounts

2007-07-07 Thread Eduardo Viruena Silva

On Sat, 7 Jul 2007, Lisa Casey wrote:


Hi,

This is probably a stupid question, but I'll ask it anyway...

I have a Red Hat Linux system I need to get rid of. It is currently doing 
e-mail for approximately 700 users and is also doing radius authentication. I 
have setup a new FreeBSD computer to take it's place. I have everything setup 
now on the FreeBSD computer except for the user accounts and mailboxes. The 
mailboxes aren't a problem, I've used tar to move mailboxes before.


I suppose I cannot simply copy /etc/passwd, /etc/group and /home from the 
Redhat computer to the FreeBSD computer due to the password hash in 
/etc/passwd. Am I correct on this?  Would it be possible to copy /etc/passwd 
then (before the new system goes live) reset all the passwords with the 
passwd command? That might be easier than adding in close to 700 accounts 
using adduser.  Does anyone  have a better idea of how I might go about doing 
this?


Yes, you are right, you cannot simply copy the password files.

FreeBSD and RedHat passwords files have different formats,
and they also have different User IDs for the system users.

Your real problem is to merge RedHat's /etc/passwd and /etc/shadow
in order to create your /etc/master.passwd in FreeBSD and then
you have to create your hash db from this file.

In RedHat for instance, you have:

/etc/passwd:  daemon:x:2:2:daemon:/sbin:/sbin/nologin
/etc/shadow:  daemon:*:11688:0:9:7:::

Meaning:
/etc/passwd:  UserName:x:UserID:GroupID:RealName:HomeDir:Shell
/etc/shadow:  UserName:CryptedPassword:...

In FreeBSD's master.passwd, you have:

daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin

UserName:CryptedPassword:UserId:GroupId:UserName:LogClass:0:0:RealName:HomeDir:Shell

As you can see, daemon has different UIDs.

I believe RedHat also uses MD5 for coding passwords but I do not know it
for sure.  So, take ONLY the entries of YOUR USERS and merge them in the
FreeBSD's format and leave the list in a file.

Once you have done this, use 'vipw' to edit your master.passwd, include 
your file of your users, and save it.  This program will create your hash

table and will update the password files.

Good luck.

  Eduardo





Thanks,

Lisa Casey


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: passwd file and user accounts

2007-07-07 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Lisa Casey wrote:
 Hi,
 
 This is probably a stupid question, but I'll ask it anyway...
 
 I have a Red Hat Linux system I need to get rid of. It is currently
 doing e-mail for approximately 700 users and is also doing radius
 authentication. I have setup a new FreeBSD computer to take it's place.
 I have everything setup now on the FreeBSD computer except for the user
 accounts and mailboxes. The mailboxes aren't a problem, I've used tar to
 move mailboxes before.
 
 I suppose I cannot simply copy /etc/passwd, /etc/group and /home from
 the Redhat computer to the FreeBSD computer due to the password hash in
 /etc/passwd. Am I correct on this?  Would it be possible to copy
 /etc/passwd then (before the new system goes live) reset all the
 passwords with the passwd command? That might be easier than adding in
 close to 700 accounts using adduser.  Does anyone  have a better idea of
 how I might go about doing this?

Not a stupid question at all, and you are quite right: you can't
just copy /etc/passwd and /etc/group from the Redhat box.  /home
you can, pretty much, but see below about the necessity to renumber
some accounts, and also be aware that if any of your users have
locally installed Linux executables or scripts that claim to be run
by /bin/sh when they really need /usr/local/bin/bash then they will
have problems.

You're going to run into a number of problems shifting your user
accounts over:

   i) System level accounts.  On FreeBSD these are all the accounts
with UID or GID below 1000, plus the 'nobody' account.  See
/usr/src/etc/master.passwd and /usr/src/etc/group for the list of
what is required by the base system, and see /usr/ports/{UIDs,GIDs}
for the numbers reserved by the ports system.  On Redhat, the
boundary between system and user accounts is UID 500.

Thus to port your passwd and group database from Redhat to FreeBSD
you will need to discard the UIDs and GIDs below 500, substituting
the equivalent stuff from the default master.passwd and group files.
Also you will almost certainly have to renumber accounts where the
UID/GID is between 500 and 1000.  That means running chown(1) on the
files owned by those accounts.  A find command like the following
is often useful:

find /home -user ${olduid} -print0 | xargs -0 chown -h ${newuid}

  ii) Password hashes.  On Redhat there are two parallel files
/etc/passwd and /etc/shadow.  It's /etc/shadow which contains the
password hashes.  On FreeBSD the /etc/passwd file is generated from
/etc/master.passwd by stripping out certain of the columns and
replacing the password hashes from column 2 with asterisks. The
master.passwd(5) man page has all the details.  You can just cut and
paste the password hashes from column 2 of /etc/shadow into column 2
of /etc/master.passwd.  See crypt(3) for more information.

If your Redhat system is fairly old and still uses the traditional
style DES password hashes you can copy them just the same and they
will still work in FreeBSD, but you should force your users to
update their passwords when they next log in.  DES password hashes
are almost trivially crackable nowadays.  You can force a password
update for an account by setting the 7th column of
/etc/master.passwd to the current Unix time (ie. the output of
'date +%s')

The other columns of /etc/shadow are all about when passwords were
last changed and when they will expire. Those columns have
equivalents in FreeBSD's master.passwd but the data formats are
different and you can't just copy from one to the other.  However,
unless you specifically use password ageing you can probably just
ignore those fields.

Note that a password hash of '!!' is special on Redhat.  It means
'account is locked and cannot be logged into' (including by means
that do not involve passwords at all, like SSH key based
authentication.)  The equivalent under FreeBSD is *LOCKED*.  It's
also quite common for Linux to use /bin/false to mean 'no
interactive  shell' -- which also works under FreeBSD, but there it
is more usual to use /usr/sbin/nologin

 iii) Shells -- these are almost always found in /bin under Redhat,
whereas under FreeBSD some (sh, csh, tcsh) are in /bin but bash, zsh
etc. or any other shell installed from ports, will be found in
/usr/local/bin.

Remember that on FreeBSD you never edit /etc/passwd directly.
Instead, edit /etc/master.passwd and then run pwd_mkdb to generate
/etc/passwd from /etc/master.passwd and rebuild the pwd.db hashed
lookup files. Using vipw(8) will automate that for you, and lock the
password file correctly against several people all trying to update
it at once, which would usually result in a corrupted password file.
 You can also use 'mergemaster -p' to ensure you have all the
necessary system level accounts in place: something that is rather
important as the system won't boot up entirely successfully without.

See also pw(8) and adduser(8) for a couple of programmatic
interfaces  for dealing with 

Re: Lost SSH X1 Forwarding with Xorg 7.2

2007-07-07 Thread Norbert Papke
On July 5, 2007, Olivier Nicole wrote:
 A nice *feature* that I just noticed, I apologize if it has been
 mentionned earlier.

 xorg 7.2 tends to install all the components in /usr/loca insteal of
 the traditional /usr/X11R6.

 But sshd is still expecting xauth to be in /usr/X11R6/bin/xauth; so
 sshd_config has to be modified to reflect the fact that xauth new path
 is /usr/local/bin/xauth.

 So the default /etc/ssh/sshd_config should be adapted to reflect this
 change...

The default location in /usr/X11R6/bin/xauth should still work with the 
symlink in place.

However, I had a similar problem to yours.  Having tracked 7.2 for some time, 
I had X11BASE=${LOCALBASE} in /etc/make.conf.  When building sshd, 
LOCALBASE is not defined and X11BASE ends up being the empty string.  This 
then caused XAUTH_PATH to be set to /bin/xauth which, of course, does not 
exist.  Removing the statement from /etc/make.conf fixed this -- it isn't 
required anymore.

Cheers.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cannot log in via console, cannot su(1), only as root

2007-07-07 Thread martinko

hello list,

i was updating sw configuration of my old computer and towards the end i 
noticed i couldn't log in on local console other than root.  i tried 
remote ssh using public keys which worked but i found out su(1) to any 
user except root does not work either.  i've no idea how i could 
possibly manage to break my system like this and unfortunately i need 
to fix it by tomorrow.  therefore i would really appreciate your prompt 
hints as what to check etc.


many thanks in advance !!

martin

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


gnome logout problem

2007-07-07 Thread Manolis Kiagias
I am really confused about this one, and don't know where to start.
I have gnome 2.18.3 compiled from ports (also gnome power tools and
gnome fifth toe)
Today, for the first time I used the lock screen option in the System
menu to leave my desktop unattended for a few minutes.
I then entered my password, and it would not accept it! This was not a
problem with caps lock or alternate keyboard layout (tried it several
times). I had to kill the X server with CTRL+ALT+BACKSPACE

Restarting with startx from the command line as usual, now I have a
problem with the logout option. Simply selecting logout from the menu
shows the usual dialog (switch user, cancel, logout) but pressing the
logout button, it remains recessed and nothing happens. If I wait long
enough (maybe about a minute) it finally logs me off.
The console messages just after the timeout occurs:

Window manager warning: CurrentTime used to choose focus window; focus
window may not be correct.
Window manager warning: Got a request to focus the no_focus_window with
a timestamp of 0.  This shouldn't happen!

What could possibly happen? I tried on another user account, same
problem. Any ideas?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Adding a new command

2007-07-07 Thread Derek Ragona

At 11:35 AM 7/7/2007, Lisa Casey wrote:

Hi,

Once I get this new system going I promise I'll quit pestering you folks :-)

Got another question. This should be simple to answer. I've done this 
before but can't seem to replicate it this morning. I have a few scripts 
my employees use to do things such as add a new radius user, restart the 
radius server and tail the radius log file. The most simple one is 
radlog.  The file radlog contains the line:

tail -f  /var/log/radius.log

I need to be able to type radlog from anywhere on the system and have it work.

I put the file radlog in /bin   (/bin and  /sbin are all in my shell's 
path). Ownership is root/wheel  permissions are 555 (I've tried 700 and 
777 - these don't need write access though). But when I type radlog I get 
command not found. I can type ./bin/radlog and it works but I don't want 
that. I thought if the file was in my path and if it was executable just 
typing the name of the file from anywhere would work but evidently I'm 
overlooking something. What?


Thanks,

Lisa Casey


Try testing with a new login session.  It is likely your shell is caching 
the commands in your paths.


You can easily test after logging in and try the which command:
which radlog

On the permissions, you would do well to setup a special group to execute 
the commands making it easier for users to execute them without being 
root.  If your new utilities are working with log files be sure the log 
files are readable by this group as well.


As previously mentioned added user commands are customarily placed in 
/usr/local/bin doing so will aid any new sysadmin looking for them.



-Derek

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: parental control with squid and dansguardian

2007-07-07 Thread Jeffrey Goldberg

On Jul 6, 2007, at 2:33 PM, RW wrote:

If this box is not the gateway, there is no point in doing anything
about this because they can simply turn-off proxying and go direct to
the internet.


However, on your gateway you can specify that only the proxy box is  
allowed to connect to the web.  That is block all outbound traffic  
to  ports 80 and 443 unless they come from the machine running squid.


-j



--
Jeffrey Goldberghttp://www.goldmark.org/jeff/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: An ssh Question

2007-07-07 Thread Tim Daneliuk

Tim Daneliuk wrote:

Simon Chang wrote:





Nevermind - it was total pilot error on my part involving being up way
too late and not using my noggin' ... sorry to disturb... carry on ;)



--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: parental control with squid and dansguardian

2007-07-07 Thread Steve Bertrand
Jeffrey Goldberg wrote:
 On Jul 6, 2007, at 2:33 PM, RW wrote:
 If this box is not the gateway, there is no point in doing anything
 about this because they can simply turn-off proxying and go direct to
 the internet.
 
 However, on your gateway you can specify that only the proxy box is
 allowed to connect to the web.  That is block all outbound traffic to 
 ports 80 and 443 unless they come from the machine running squid.

This is of course granted that the gateway has a strict firewall rule
set that allows minimal, known destination ports and by default would
block external, free proxies (and anything else) that run on unusual
ports (eg: 50001) as someone else suggested.

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Adding a new command

2007-07-07 Thread Jeffrey Goldberg

On Jul 7, 2007, at 11:42 AM, Peter Boosten wrote:


It's more obvious to put local scripts in /usr/local/bin, IMHO.


Let me add to this (as someone who recently moved from linux to  
FreeBSD).  Unlike Linux, FreeBSD isn't just a kernel, but a complete  
operating system.  So the things in /bin and /usr/bin are as fully  
part of FreeBSD as the kernel itself, while on Linux distributions,  
those things are bundled with Linux as part of a distribution.


So this is one reason why it is best to put tools like you describe in

  /usr/local/sbin

Cheers,

-j


--
Jeffrey Goldberghttp://www.goldmark.org/jeff/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Adding a new command

2007-07-07 Thread Garrett Cooper

Derek Ragona wrote:

At 11:35 AM 7/7/2007, Lisa Casey wrote:

Hi,

Once I get this new system going I promise I'll quit pestering you 
folks :-)


Got another question. This should be simple to answer. I've done this 
before but can't seem to replicate it this morning. I have a few 
scripts my employees use to do things such as add a new radius user, 
restart the radius server and tail the radius log file. The most 
simple one is radlog.  The file radlog contains the line:

tail -f  /var/log/radius.log

I need to be able to type radlog from anywhere on the system and have 
it work.


I put the file radlog in /bin   (/bin and  /sbin are all in my 
shell's path). Ownership is root/wheel  permissions are 555 (I've 
tried 700 and 777 - these don't need write access though). But when I 
type radlog I get command not found. I can type ./bin/radlog and it 
works but I don't want that. I thought if the file was in my path and 
if it was executable just typing the name of the file from anywhere 
would work but evidently I'm overlooking something. What?


Thanks,

Lisa Casey


Try testing with a new login session.  It is likely your shell is 
caching the commands in your paths.

Use rehash in tcsh to find newly added commands.

export or setenv your new PATH though, and try the new command out first.

-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: An ssh Question

2007-07-07 Thread Jonathan Chen
On Sat, Jul 07, 2007 at 11:59:28AM -0500, Tim Daneliuk wrote:
 Jonathan Chen wrote:
 On Sat, Jul 07, 2007 at 02:52:21AM -0500, Tim Daneliuk wrote:
 I have a machine that is my firewall/gateway to a private network NATing
 non-routable addresses. I can ssh at-will from hosts on the private
 network to machines out on the net, but when I try to ssh from the
 firewall machine to a particular address, it just hangs and eventually
 times out. Verbose output is:
 
   OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004
   debug1: Reading configuration data /etc/ssh/ssh_config
   debug2: ssh_connect: needpriv 0
   debug1: Connecting to xx.com [x.x.x.x] port 22.
 
 
 What is really baffling is that if I try the exact same thing from, say,
 a cygwin session on a host on the private network - this works fine.
 So ... it's not a firewall problem as near as I can tell.
 
 It sure sounds like a firewall problem to me. Why do you think
 otherwise?
 
 Because machines *behind* the firewall can get out to the machine
 in question, but the firewall machine itself cannot...

So, the question is:

Is firewall configured so that the firewall host is allowed to
outgoing ssh connections to the 'Net or the internal network?

What firewall software is being used?
-- 
Jonathan Chen [EMAIL PROTECTED]
--
 Power corrupts, Absolute Power is pretty neat
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cannot log in via console, cannot su(1), only as root

2007-07-07 Thread martinko

martinko wrote:

hello list,

i was updating sw configuration of my old computer and towards the end i 
noticed i couldn't log in on local console other than root.  i tried 
remote ssh using public keys which worked but i found out su(1) to any 
user except root does not work either.  i've no idea how i could 
possibly manage to break my system like this and unfortunately i need 
to fix it by tomorrow.  therefore i would really appreciate your prompt 
hints as what to check etc.




some more details follow ...

upgrade from 6.0-R to 6.2-R
everything went ok ..
i was doing changes in /etc based on my other computer settings
i was working via ssh(1), therefore i haven't noticed when logging on 
console stopped working.


what works:
log in via ssh(1) using public/private keys
log in on local console as root
su(1) to root

what doesn't work:
log in via ssh(1) using password
log in on local console as a normal user
su(1) to a normal user (it even doesn't ask for password a throws sorry)

besides, as root i'm able to change passwords via passwd(1), but it 
doesn't help and a normal user cannot change their own password (old 
password check would fail).


i ran vipw(8) and it doesn't seem to me there's something wrong with my 
files.


any hints pls ??

m.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: NTFS-3G: mount at boot

2007-07-07 Thread Novembre

I have the same problem. A little search got me to
http://forum.ntfs-3g.org/viewtopic.php?t=292 where a solution is posted. It
seems that using /etc/fstab to mount the NTFS partition at boot time is not
working since the mount command is being executed before the 'fuse' kernel
module is loaded. However, on my 6.2-RELEASE machine, I see the following
message when booting:

--
Starting file system checks:
/dev/ad0s2a: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s2d: FILE SYSTEM CLEAN; SKIPPING CHECKS
Mounting local file systems:mount: exec mount_ntfs-3g not found in
/sbin:/usr/sbin: No such file or directory
.
.
.
Starting fusefs.
fude4bsd: version 0.3.0, FUSE ABI 7.8
.
.
.
Mounting late file systems:mount: exec mount_ntfs-3g not found in
/sbin:/usr/sbin: No such file or directory
--

I'm assuming that this late mount (the last line above) is being done
after loading the 'fuse' kernel module, so the OS should be able to mount
the file system now, but it can't! It's looking for mount_ntfs-3g and that
file does not exist.
My /etc/fstab looks like this: /dev/ad0s1   /mnt/windows
ntfs-3g   rw   0   0
I also used the /etc/fstab entry suggested in NTFS-3G's own website (
http://www.ntfs-3g.org/ - scroll down to the end of the page), where
defaults is being used instead of rw, but that gave me this error:

--
swapon: adding /dev/ad0s2b as swap device
fstab: /etc/fstab:6: Inappropriate file type or format
Starting file system checks:
/dev/ad0s2a: FILE SYSTEM CLEAN; SKIPPING CHECKS
fstab: /etc/fstab:6: Inappropriate file type or format
fstab: /etc/fstab:6: Inappropriate file type or format
/dev/ad0s2d: FILE SYSTEM CLEAN; SKIPPING CHECKS
Mounting local file systems:fstab: /etc/fstab:6: Inappropriate file type or
format
Mounting NFS file systems:fstab: /etc/fstab:6: Inappropriate file type or
format
fstab: /etc/fstab:6: Inappropriate file type or format
fstab: /etc/fstab:6: Inappropriate file type or format
fstab: /etc/fstab:6: Inappropriate file type or format
fstab: /etc/fstab:6: Inappropriate file type or format
.
.
.
Starting fusefs.
fude4bsd: version 0.3.0, FUSE ABI 7.8
.
.
.
Mounting late file systems:fstab: /etc/fstab:6: Inappropriate file type or
format
--

Any ideas as to what's going on here?

Thanks a lot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Correct way to use dump to backup a Samba share

2007-07-07 Thread L Goodwin
I have a Samba share on a software RAID 1 array (using
gmirror) that I need to backup. I want to create a
shell script that does a level 0 backup every time to
(alternately) one of two USB drives. I plan to have
only ONE USB drive connected at a time. 

I want the script to mount the drive, perform the
backup, then unmount the drive so that it is ready for
someone who knows zip about computers to safely remove
and take offsite. 

Here are the steps I have for the script.
Is this all I need to do? Do I need any error handling
logic? THANKS!

# Mount the backup drive:
mount /dev/usb0

# Create the backup:
/sbin/dump -0u -f /dev/usb0 /sambavol

# Unmount the backup drive:
umount /dev/usb0


  

Shape Yahoo! in your own image.  Join our Network Research Panel today!   
http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Enabling A Serial Port On 6.2

2007-07-07 Thread Tim Daneliuk

System is FreeBSD 6.2-STABLE.

I've added this to /etc/ttys:

  ttyd0   /usr/libexec/getty dial.115200unknown on insecure

And this to gettytabs:

  dial.115200:\
:np:to#30:hw:sp#115200:pp=/etc/ppp/pppserv

But when I 'kill -HUP 1' no getty process on ttyd0 shows up in the ps listing.

dmesg | grep sio yields:

  ioapic0 Version 2.0 irqs 0-23 on motherboard
  acpi_hpet0: High Precision Event Timer iomem 0xfed0-0xfed003ff on acpi0
  usb0: USB revision 1.0
  usb1: USB revision 1.0
  usb2: USB revision 1.0
  usb3: USB revision 1.0
  usb4: EHCI version 1.0
  usb4: USB revision 2.0
  sio0: 16550A-compatible COM port port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
  sio0: type 16550A
  sio1: configured irq 3 not in bitmap of probed irqs 0
  sio1: port may not be enabled

Looking into /dev, I see:

  crw---  1 root  wheel  -   0,  50 Jul  7 14:46 /dev/ttyd0
  crw---  1 root  wheel  -   0,  51 Jul  7 14:46 /dev/ttyd0.init
  crw---  1 root  wheel  -   0,  52 Jul  7 14:46 /dev/ttyd0.lock


This all used to work swell under 4.x, so what am I missing.  I've got a modem
connected to the port in question and I've tried resetting it and re-initing.
No luck.

Ideas? (And TIA)
--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


The FreeBSD Diary: 2007-06-17 - 2007-07-07

2007-07-07 Thread Dan Langille
The FreeBSD Diary contains a large number of practical 
examples and how-to guides.  This message is posted weekly
to freebsd-questions@freebsd.org with the aim of letting people
know what's available on the website.  Before you post a question
here it might be a good idea to first search the mailing list 
archives http://www.freebsd.org/search/search.html#mailinglists 
and/or The FreeBSD Diary http://www.freebsddiary.org/. 


-- 
Dan Langille
BSDCan - http://www.BSDCan.org/ - BSD Conference

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]