Re: Tracking base system and kernel updates/vulnerabilities

2008-04-17 Thread Anselm Strauss

On Apr 15, 2008, at 20:28 , Lowell Gilbert wrote:


Anselm Strauss [EMAIL PROTECTED] writes:


is there a tool, like portaudit for the ports tree, to track updates
and/or vulnerabilities for the base system and the kernel? What I'm
looking for is a tool that will check my current installation against
a specific checkout of the CVS source and kernel trees considering a
specific CVS tag and inform me where my system is outdated and
vulnerable. I don't know if this is even possible by just having the
CVS trees ...

For the kernel, is there something like a linear version number in  
the

-STABLE branches? I noticed there's a pX in the kernel version for
release kernels. How do I for example compare the currentness of two
7.0-STABLE kernels if I don't know from what source they were build?


freebsd-update(8)


Yep, that's exactly what I was looking for (must have overlooked it).  
Had some trouble until I noticed it will only work if the running  
kernel has a -RELEASE tag in it's uname, but now I also see how this  
works with the patch version.


I have 2 small questions left:

- Can I somehow determine the version of the base system without  
running uname on the kernel (I could have a release base system but  
run a stable kernel for example)? Sure, I could take the indirect way  
over freebsd-update again, but is there some sort of version  
information stored in the base system?


- Is there some list of all possible components in the base system? So  
far I've seen src, kernel and world. Are there more?


Thanks,
Anselm

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


useradd adduser

2008-04-17 Thread Ruel Luchavez
Hello,

I keep on thinking guys what is the difference between useradd  adduser
command?

Thanks in advance...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: useradd adduser

2008-04-17 Thread Jonathan McKeown
On Thursday 17 April 2008 08:35, Ruel Luchavez wrote:
 Hello,

 I keep on thinking guys what is the difference between useradd  adduser
 command?

Ruel

You really need to start reading the documentation. FreeBSD is about the best 
documented operating system and environment there is, and the Handbook will 
tell you just about everything you need to know.

If you keep coming to freebsd-questions and expecting to be spoon-fed answers 
you've obviously made no effort to look for, people will start to lose 
patience.

The main difference between useradd and adduser is that useradd doesn't exist 
(at least, not on any of the FreeBSD boxes I'm running which range from 4.9 
(hideous legacy cruft) to 6.3).

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: useradd adduser

2008-04-17 Thread Harry Matthiesen Jensen
On Thu, Apr 17, 2008 at 02:35:19PM +0800, Ruel Luchavez wrote:
 Hello,
 
 I keep on thinking guys what is the difference between useradd  adduser
 command?

I think useradd is history now, but I believe it still is present in
Linux. It's not in the -CURRENT FreeBSD.

-- 
Mvh/Brgds Harry
FreeBSD 8.0-CURRENT Compiled at Sun Apr 13 20:42:10 CEST 2008  i386
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tracking base system and kernel updates/vulnerabilities

2008-04-17 Thread Jonathan Chen
On Thu, Apr 17, 2008 at 08:20:00AM +0200, Anselm Strauss wrote:

[...]
 - Can I somehow determine the version of the base system without  
 running uname on the kernel (I could have a release base system but  
 run a stable kernel for example)? Sure, I could take the indirect way  
 over freebsd-update again, but is there some sort of version  
 information stored in the base system?

Not really. Incidentally, running a userland out-of-sync with the
kernel is asking for Bad-Things(tm) to happen.
-- 
Jonathan Chen [EMAIL PROTECTED]
---
One, with God, is always a majority, but many a martyr has been burned
   at the stake while the votes were being counted.  -- Thomas B. Reed
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FTP server behind firewall?

2008-04-17 Thread Julius Huang


On Apr 17, 2008, at 12:59 , Manolis Kiagias wrote:

Gilles wrote:

On Wed, 16 Apr 2008 22:06:24 -0400, Jon Radel [EMAIL PROTECTED] wrote:


What control do you have over the firewall?  One of the cleaner
solutions would be to run an ftp proxy on the firewall, such as that
supplied with pf.  See ftp-proxy(8) or
http://www.openbsd.org/faq/pf/ftp.html



Unfortunately, the router/NAT firewall can be neither replaced nor
tweaked, since it's a modem/router provided by our ISP.

Actually, we don't necessarily need an FTP. Whatever solution to send
files is fine, provided I can add this feature in a VB Classic client
application.



Hi,

May be you can consider using sshd + sftp on Server.
  (Single Port for just about everything, see below)

PSCP or PSFTP (from same as PuTTY) allow send / receive file via  
command line,

  eg. you can issue exec from VB to send files.
  pscp [options] source [source...] [EMAIL PROTECTED]:target
  (PSFTP is prefer over PSCP, but PSCP is simple)

  http://www.putty.nl/download.html

Also, bind sshd on high port will prevent too many port scan and
  the connection is consider to be more secure than ftp.

IMHO, sftp is more easily managed than ftp in the long run (Both  
Server and Client).


ps.
I also use ssh to forward 3389, the M$ Terminal Server (even XP has  
one), no need for PC ANYWHERE.
If you need to solve problem remotely, you don't need to open another  
port (PC ANYWHERE needs 2).


J.





Running an FTP behind a home DSL router is perfectly possible. You  
will just have to open a range of ports on the router itself eg  
25000-25050 and forward them to your ftp server internal IP  
address. Then set the FTP server to only use these ports for  
passive transfers.


For example, I am using ftp/proftpd and have this directive in the  
configuration file:


PassivePorts 25000-25050

You will, of course, need to forward port 21 as well.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7.0 jail and Samba 3

2008-04-17 Thread Nejc Škoberne

Hey again,

I am trying to get latest Samba running under FreeBSD 7.0 jail 
environment. I happen
to have problems with visibility of the Samba server on the network - 
I cannot connect
to it using its NetBIOS name. To be able to run nmbd, I have to use the 
interfaces

parameter in smb.conf like this:

interfaces = 192.168.1.2/24 127.0.0.1

If I don't set this, nmbd fails to run (it says it cannot find 
interfaces). However, if
I try the identical configuration on a non-jailed Samba (on a FreeBSD 
6.2 though) it
runs seamlessly - I can connect to it from another box by running 
smbclient //server/share.


Is there any way to make NetBIOS work for jailed Samba server on FreeBSD 
7.0?


Is there really nobody who could help me out here?

Thanks,
Nejc
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Username groups

2008-04-17 Thread Ruel Luchavez
Hello,

Can you help me on this...
I have a directory in the server this is what is looks like
 drwxrwx--- 12 root plusmate 512 April 13 14:46 plusmate shared
...this directory is shared in my network, and i dont recieve any complain
in any user which can acces to that folder/directory

*My Problem:*
I have a new user, i already add the user in the server using command
adduser and pw to modify it, by the way the name of user is ac06...
when i had a command id -p ac06 this is the reply of the server..
   uid  ac06
   group   plusmate
and which im sure its correct..

BUT, when that user acces(ac06)  the folder (plusmate shared) throug the
windows (windows XP) its always asking for username  password, however it
didn't ask for username  password while the other users getting to that
folder/directory.

Where should be the problem?is there something i forgot configuring in the
server side?

YOUR REPLY IS HIGHLY APPRECIATED
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FTP server behind firewall?

2008-04-17 Thread Mel
On Thursday 17 April 2008 04:32:41 Gilles wrote:

 Actually, we don't necessarily need an FTP. Whatever solution to send
 files is fine, provided I can add this feature in a VB Classic client
 application.

Depends a bit on the max filesize and number of files. You can do a HTTP POST 
request, using a simple upload script (numerous examples of those to be found 
on the web). Of course, the traffic for that is larger since it will be 
base64 encoded. On the plus side, you don't need local user accounts on the 
ftp server, while still having full control over where the files end up.

This can get tedious if you have multiple small files, or filesizes in the 
order 100M.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: FreeBSD 7.0 jail and Samba 3

2008-04-17 Thread Johan Hendriks


 I am trying to get latest Samba running under FreeBSD 7.0 jail 
 environment. I happen
 to have problems with visibility of the Samba server on the network - 
 I cannot connect
 to it using its NetBIOS name. To be able to run nmbd, I have to use the 
 interfaces
 parameter in smb.conf like this:
 
 interfaces = 192.168.1.2/24 127.0.0.1
 
 If I don't set this, nmbd fails to run (it says it cannot find 
 interfaces). However, if
 I try the identical configuration on a non-jailed Samba (on a FreeBSD 
 6.2 though) it
 runs seamlessly - I can connect to it from another box by running 
 smbclient //server/share.
 
 Is there any way to make NetBIOS work for jailed Samba server on FreeBSD 
 7.0?

Is there really nobody who could help me out here?

Thanks,
Nejc

I think you will need to remove 127.0.0.1

Just use 192.168.1.2/24

There is no 127.0.0.1 on a jailed system

This is the output of ifconfig on my jail server

bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:bb:d1:66:06
inet 192.168.100.200 netmask 0xff00 broadcast 192.168.100.255
inet 192.168.100.201 netmask 0x broadcast 192.168.100.201
inet 192.168.100.202 netmask 0x broadcast 192.168.100.202
inet 192.168.100.203 netmask 0x broadcast 192.168.100.203
inet 192.168.100.204 netmask 0x broadcast 192.168.100.204
media: Ethernet autoselect (100baseTX full-duplex)
status: active
pflog0: flags=0 metric 0 mtu 33204
pfsync0: flags=0 metric 0 mtu 1460
syncpeer: 224.0.0.240 maxupd: 128
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST metric 0 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff00

and here it is from my jailed server

bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:19:bb:d1:66:06
inet 192.168.100.202 netmask 0x broadcast 192.168.100.202
media: Ethernet autoselect (100baseTX full-duplex)
status: active
pflog0: flags=0 metric 0 mtu 33204
pfsync0: flags=0 metric 0 mtu 1460
syncpeer: 224.0.0.240 maxupd: 128
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST metric 0 mtu 16384

as you can see the interface lo0 is there but no ip 127.0.0.1

regards,
Johan Hendriks
Double L Automatisering


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to exec a process in a jail while being on the main host?

2008-04-17 Thread Wojciech Puchar

on the main host (which runs the jail).
How can i run a new process inside the jail with a known JID w/o ssh-ing into 
that jail or doing a lot of strange

manupulations?

I am asking, because i have about 20 jails running and each has a running 
special control daemon which
changes a lot and often. When change occures i need then to enter each jail 
as root, kill the old daemon, start the new one.

This take a lot of time and is really annoying.


man jexec
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Check Out Your Winning.

2008-04-17 Thread David M. Patronis


 
 Yipee, I'm rich!

Unfortunately we'll have to split it with everyone on the list : (
 
I plan to buy a local lottery ticket with my winnings.

Sending From a 700Mhz PIII
David
 
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Avermedia 507 TV

2008-04-17 Thread Da Rock

On Thu, 2008-04-17 at 00:15 +0200, Danny Pansters wrote:
 On Tuesday 15 April 2008 04:36:26 Da Rock wrote:
  On Tue, 2008-04-15 at 01:30 +0200, Danny Pansters wrote:
   On Monday 14 April 2008 12:25:14 Victor M. Blood wrote:
On 14.04.2008, Da Rock wrote:
 On Mon, 2008-04-14 at 11:02 +0400, Victor M. Blood wrote:
 Hi, All.

 Anyone run tuner on phillips chip 7133/7135 on freebsd, I try to use
 saa driver, devices saa0, sau0, cii0 is present in /dev/ , kbtv
 runs, but freeze on begin chanel tunin...

 How to test tuner and drivers works or not.

 I haven't had success yet- but I have an E506AR. Where did you get
 the drivers from? I couldn't get access myself.
   
saa_driver included in kbtv distrib, and can be found in inet, driver
homepage is broken. I-m install it from port kbtv, the nessasary
bsd-patche within distrib tarball
  
   I suspect your tuner (terratec?)  is not amongst the supported ones.
 
  Both are Avermedia actually as posted, and yes they're only marginally
  supported. So far only the analogue works (possibly).
 
 Avermedia is not a type or brand of tuner. They're a HW company that assemble 
 certain cards/sticks from parts such as tuners, decoders etc.
 
 
  That saa driver- I thought there was a problem with the site, but I had
 
 Saa driver is still available from purpe.com, but only from a direct download 
 link (there's no page anymore):
 
 http://download.purpe.com/files/saa-REL_14.tgz
 
  no idea it could be downloaded with kbtv. I thought it was only compiled
  with support for the driver, not the driver itself.
 
 kbtv1 includes it also, for convenience, and because its needed for the saa 
 backend anyway (well, some header).
 
 The saa driver only covers video and audio (I only use shunted audio with 
 kbtv, not real audio capture). Tuner support is all userspace (directly via 
 iic device). The generic tuner support that comes with the driver (as example 
 sort of) seems to indicate that this is for a class of tuners that has three 
 fixed bands and must be set to switch between it (as in Philips reference 
 design). TDA and MKn init require some extra iic babble.
 
 Modern silicon tuners work differently and have quite different registers 
 that 
 need to be set for tuning.

You'll have to excuse me presumption here (I'll normally read all
messages before adding to a thread), but you sound like a very good
source of info here. May I ask you if you can supply some references to
what you're posting here? I'd like to investigate this much further...

Also, I thought I read somewhere that firmware is used in most tuners.
Plus I found the linux drivers use firmware to make this work. Just a
thought.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How can I access video tape under FBSD?

2008-04-17 Thread Da Rock

On Wed, 2008-04-16 at 20:28 +0200, Frank Wißmann wrote:
 Hi, folks!
 I have bought for myself a taperecorder-to-usb-connector, which I wrote 
 in /etc/usbd.conf as following:
 Device  Video tape
 Product 0x2821
 Vendor  0xeb1a
 
 Now I want to move all of my archived video tapes to harddisk/DVD. How 
 can I perform this, that means how can I access my tape recorder, put 
 the files onto HD and view it, meaning what kind of program is capable 
 of doing so? Mplayer would be fine because I have it just installed

A couple of ways to do this- depends on space and quality required. If
you have space and want quality, capture the data raw from the tuner and
then use mencoder to convert to mpeg/divx/whatever(30-40Gb+ 3hr tape).
If space is at a premium, or quality is not as important, then use
ffmpeg and convert on the fly. Need a fairly new cpu, plenty of RAM.

This all very general, but good luck...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cutecom requires sudo to work, but minicom works without - permissions?

2008-04-17 Thread Ruben de Groot
On Tue, Apr 15, 2008 at 09:11:33AM -0500, Derek Ragona typed:
 At 07:39 PM 4/14/2008, Steve Franks wrote:
 I have two terminal programs - cutecom and minicom, both built from
 ports with no tweaks.   Minicom will fire up and hit the serial port
 just fine, but cutecom can't open it except with sudo.  I tried
 tweaking devfs.conf (as well as a straight chmod on /dev/cuad0), and
 it doesn't seem to rectify the problem.  I've also got several linux
 ports that hit usb devices via libusb that won't connect without sudo
 - obviously, I'd like not to have to run user-type apps with sudo on
 my system
 
 Thanks,
 Steve
 
 You may want to try chown the device as well as chmod'ing it.  If this 
 works you will likely need a script to reset these settings on reboot.  You 
 can add a cron job under root to do this @reboot.

A more convenient option is putting the user who starts whateven terminal 
program into the dialers group

Ruben

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tracking base system and kernel updates/vulnerabilities

2008-04-17 Thread Robert Huff
Jonathan Chen writes:

  Incidentally, running a userland out-of-sync with the
  kernel is asking for Bad-Things(tm) to happen.

I think of it more like sacrificing a room full of
kindergardeners to your oozing tentacled god Asking for Bad Things
to Happen(tm).


Robert Huff





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Check Out Your Winning.

2008-04-17 Thread Dimitri Yioulos
On Thursday 17 April 2008 10:50 am, David M. Patronis wrote:
  Yipee, I'm rich!

 Unfortunately we'll have to split it with everyone on the list : (

 I plan to buy a local lottery ticket with my winnings.

 Sending From a 700Mhz PIII
 David



David,

You're right, of course.  I'd have to split the winnings with everyone on the 
list.  What I meant to say in the original posy was, Yipee, I'm rich in 
spirit.

You can have my share.  Combined with yours, you now have USD 3.84.  Good luck 
with that lottery ticket!

Dimitri

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Check Out Your Winning.

2008-04-17 Thread Mel

@chat maybe? Or better @/dev/null? Bad enough some spam gets through.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


freebsd-update for patches, make world for upgrades?

2008-04-17 Thread Andreas Pettersson
Does freebsd-update take care of all things mergemaster does?
Or can I use freebsd-update to apply security patches and still use
csup, make world and mergemaster to upgrade to a new release?

-- 
Andreas


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD-EN-08:01.libpthread

2008-04-17 Thread ervin
I get the following error while installing the patch below . any
ideas how to solve?

install: rename: /lib/[EMAIL PROTECTED] to /lib/libpthread.so.2: Operation not 
permitted
*** Error code 71

ciao ev

FreeBSD-EN-08:01.libpthread Errata Notice
 The FreeBSD Project

Topic:  Problems with fork(2) within threaded programs

Category:   core
Module: libpthread
Announced:  2008-04-17
Credits:Julian Elischer, Dan Eischen
Affects:FreeBSD 6.3
Corrected:  2008-02-04 20:05:20 UTC (RELENG_6, 6.3-STABLE)
   2008-04-16 23:59:48 UTC (RELENG_6_3, 6.3-RELEASE-p2)

For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
URL:http://security.freebsd.org/.

I.   Background

POSIX threads are a set of functions that support applications with
requirements for multiple flows of control, called threads, within a
process.  The fork(2) system call is used to create a new process.

II.  Problem Description

The libpthread threading library on FreeBSD 6.3 fails to properly
reinitialize mutexes when a threaded process invokes fork(2).

III. Impact

After the fork(2) system returns, the newly created child process may
freeze in user space for no apparent reason.  This affects any threaded
application that invokes fork(2), most frequently those that call
fork(2) before execve(2) or system(3) to run external programs.

IV.  Workaround

On some systems, using libthr instead of libpthread, via the libmap
configuration file libmap.conf(5), may be an acceptable workaround.

V.   Solution

Perform one of the following:

1) Upgrade your vulnerable system to 6-STABLE or the RELENG_6_3
security branch dated after the correction date.

2) To patch your present system:

The following patch has been verified to apply to FreeBSD 6.3 systems:

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch http://security.FreeBSD.org/patches/EN-08:01/libpthread.patch
# fetch http://security.FreeBSD.org/patches/EN-08:01/libpthread.patch.asc

b) Execute the following commands as root:

# cd /usr/src
# patch  /path/to/patch
# cd /usr/src/lib/libpthread
# make obj  make depend  make  make install

VI.  Correction details

The following list contains the revision numbers of each file that was
corrected in FreeBSD.

Branch   Revision
 Path
- -
RELENG_6
 src/lib/libpthread/sys/lock.c   1.9.2.2
 src/lib/libpthread/thread/thr_kern.c  1.116.2.2
RELENG_6_3
 src/UPDATING 1.416.2.37.2.6
 src/sys/conf/newvers.sh   1.69.2.15.2.5
 src/lib/libpthread/sys/lock.c   1.9.2.1.8.1
 src/lib/libpthread/thread/thr_kern.c  1.116.2.1.6.1
- -

VII. References

The latest revision of this advisory is available at
http://security.FreeBSD.org/advisories/FreeBSD-EN-08:01.libpthread.asc

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQFIBpWeFdaIBMps37IRAg2wAJ9jwXi2ZTaYXBdsU6CzS8dCzsQ5cwCcD2Fu
NCao693yWJo1bJrCrrbG8Ww=
=7mo1
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Username groups

2008-04-17 Thread Derek Ragona

At 05:19 AM 4/17/2008, Ruel Luchavez wrote:

Hello,

Can you help me on this...
I have a directory in the server this is what is looks like
 drwxrwx--- 12 root plusmate 512 April 13 14:46 plusmate shared
...this directory is shared in my network, and i dont recieve any complain
in any user which can acces to that folder/directory

*My Problem:*
I have a new user, i already add the user in the server using command
adduser and pw to modify it, by the way the name of user is ac06...
when i had a command id -p ac06 this is the reply of the server..
   uid  ac06
   group   plusmate
and which im sure its correct..

BUT, when that user acces(ac06)  the folder (plusmate shared) throug the
windows (windows XP) its always asking for username  password, however it
didn't ask for username  password while the other users getting to that
folder/directory.

Where should be the problem?is there something i forgot configuring in the
server side?

YOUR REPLY IS HIGHLY APPRECIATED


Windows sends the username and password used to log into Windows to any 
network shares.  So you need to sync what the user is using to log into 
windows with the network ones you setup.


-Derek

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


MSI-X on FreeBSD 6.3

2008-04-17 Thread Mr Y
i'm having problems enabling MSI-X for my Ethernet driver on 6.3.

my problem is that pci_msix_count(dev) returns 0, as if my device does not
support MSI-X.

where should I publish my device's MSI-X capabilities?

Yony
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Username groups

2008-04-17 Thread Jon Radel
Ruel Luchavez wrote:

 *My Problem:*

Only one?  ;-)

 I have a new user, i already add the user in the server using command
 adduser and pw to modify it, by the way the name of user is ac06...
 when i had a command id -p ac06 this is the reply of the server..
uid  ac06
group   plusmate
 and which im sure its correct..
 
 BUT, when that user acces(ac06)  the folder (plusmate shared) throug the
 windows (windows XP) its always asking for username  password, however it
 didn't ask for username  password while the other users getting to that
 folder/directory.

Assuming you're using Samba for this, you'll need to read up on
authentication in Samba and then figure out which of several options are
configured on your system.  It is not [necessarily] sufficient to add a
FreeBSD user.

--Jon Radel

P.S.  In many circumstances

adduser -G plusmate ac06

instead of

adduser -g plusmater ac06

would give more elegant results.  Other things being equal, it's better
to have all users use their own login group and then add them to
additional groups as appropriate.  There are plenty of legitimate
reasons not to do this, so you're probably best off remaining consistent
with the setup of the existing users.


smime.p7s
Description: S/MIME Cryptographic Signature


Re: ICH7R RAID1 support?

2008-04-17 Thread Kevin Oberman
 From: Tamouh H. [EMAIL PROTECTED]
 Date: Wed, 16 Apr 2008 19:34:55 -0400
 
  
 
  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of 
  Kevin Oberman
  Sent: April 16, 2008 6:03 PM
  To: [EMAIL PROTECTED]
  Subject: ICH7R RAID1 support?
  
  Can anyone confirm whether support for RAID1 on the ICH7R is 
  in FreeBSD?
  --
  R. Kevin Oberman, Network Engineer
  Energy Sciences Network (ESnet)
  Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
  E-mail: [EMAIL PROTECTED]   Phone: +1 510 486-8634
  Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751
  
 
 Kevin, we tried out a Supermicro server which had ICH7R motherboard and RAID 
 was recognized fine. FreeBSD recognized all the drives as stand alone plus 
 the ar0 onboard controller.
 
 We're able to monitor it using atacontrol status ar0:
 
  atacontrol status ar0
 ar0: ATA RAID1 status: READY
  subdisks:
0 ad4  ONLINE
1 ad6  ONLINE
 
 Controller info:
 
 atapci0: Intel ICH7 UDMA100 controller port 
 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x30a0-0x30af at device 31.1 on pci0
 atapci1: Intel ICH7 SATA300 controller port 
 0x30e8-0x30ef,0x30dc-0x30df,0x30e0-0x30e7,0x30d8-0x30db,0x30b0-0x30bf mem 
 0xe400-0xe7ff irq 19 at device 31.2 on pci0
 

Thanks! This is what I had suspected, but it's good to have
confirmation.

Since the RAID is really software and not hardware, it might work as
well to just use gmirror and not worry about the on-board RAID.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: [EMAIL PROTECTED]   Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751


pgpVo7NU8PYqU.pgp
Description: PGP signature


Re: QEMU networking quirkiness on 7.0

2008-04-17 Thread Jim Stapleton
Sorry for the delayed reply, I didn't see this sent.

On Thursday 10 April 2008 22:01:32 Mario Lobo wrote
 I have a virtual Linux (Fedora 5) and winedows (XP) machines in QEMU and they
 are both network functional. I use qemu-launch because it does everything you
 need to create a virtual machine. Here are my pertinent configs:

 
 1) # rc.conf

 ifconfig_re0=up polling   - no IP here !
 autobridge_interfaces=bridge0
 autobridge_bridge0=tap0 re0 - important even if tap0 does not exist yet
 cloned_interfaces=bridge0
 # the bridge gets the IP
 ifconfig_bridge0=inet 10.10.10.2 netmask 255.255.255.0


To verify, the 10.10.10.2 is the IP that everyone sees my host as on
the network, correct? That's the IP that used to be set on re0?

 2) tell QEMU launch to open a tap device

Open a TUN/TAP interface in the network interface configuration

 3) tap up script to run when invoking the machine(s).

 # qemu-net

 #!/usr/local/bin/bash
 $1 = tap ifac created
 /sbin/ifconfig $1 up
 # test if tap is already added
 TEST=`ifconfig -a | grep -A 6 bridge | grep $1`
 if [ $TEST ==  ]; then
/sbin/ifconfig bridge0 addm $1
 fi
 # add a route to the virtual machine
 /sbin/route add -host 10.10.10.100 -iface bridge0

This is the tun/tap configuration script, the IP on the last line is
the IP I want the guest to look like to the network (i.e.
192.168.1.85)?


Thanks, I'll play with this more when I get home (I don't want to mess
with my machine's network configuration while I've only got network
access).


Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sslexplorer setup - just so the archives have it...

2008-04-17 Thread Kurt Buff
Sigh. Let's try that again - fat-fingered it and sent it before it was ready.

Followed the procedure found in this link:

http://n3ncy.com/UNIX/FreeBSD/SSLExplorer.htm

Installed Java, and it went through setup, connected to my Active
directory just fine. Found a problem with that - I suspect that the
app doesn't like either a very long password, or it doesn't like
spaces in the password, so I shortened it to a 20 character passphrase
- basically a sentence with the spaces removed from it.

Then, when starting the app via /usr/local/etc/rc.d/sslexplorer got
the following error:

usr/libexec/ld-elf.so.1: Shared object libm.so.2 not found, required
 by wrapper

A quick bit of googling indicated that I needed to install compat4x.

 cd /usr/ports/misc/compat4x
 make install
rehash

That takes care of the problem.

Kurt


On Thu, Apr 17, 2008 at 10:05 AM, Kurt Buff [EMAIL PROTECTED] wrote:
 Setting up sslexplorer 1.0.0 RC18 on 6.3-STABLE.

  iNSTALLED
  Got an error:

  usr/libexec/ld-elf.so.1: Shared object libm.so.2 not found, required
  by wrapper

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


usb serial port speed

2008-04-17 Thread Per olof Ljungmark

Hi,
Finally got through to get a Huawei E220 3G modem working, now the 
question is, how can max the speed from the serial (USB) port? The modem 
is theoretically capable of several mbit/s.


7-STABLE

Thanks for any hints,

--per
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


sslexplorer setup - just so the archives have it...

2008-04-17 Thread Kurt Buff
Setting up sslexplorer 1.0.0 RC18 on 6.3-STABLE.

iNSTALLED
Got an error:

usr/libexec/ld-elf.so.1: Shared object libm.so.2 not found, required
by wrapper
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ClamAV 0.93 on FreeBSD 4.11

2008-04-17 Thread Juergen Fiedler

Hello,

I am trying to install ClamAV 0.93 on a FreeBSD 4.11 (i386)
system. I have downloaded and untarred the port, but when I
try to install it, I get an error message indicating that
my gcc can't build executables.
The section of config.log that I believe to be relevant
looks like this:

---
configure:3464: checking for C compiler default output file
name
configure:3491: cc -O -pipe  -I/usr/local/include
 -D_THREAD_SAFE  -L/usr/local/
lib  -lpthread conftest.c  5
/usr/libexec/elf/ld: cannot find -lpthread
configure:3494: $? = 1
configure:3532: result: 
configure: failed program was:
| /* confdefs.h.  */
| #define PACKAGE_NAME clamav
| #define PACKAGE_TARNAME clamav
| #define PACKAGE_VERSION devel
| #define PACKAGE_STRING clamav devel
| #define PACKAGE_BUGREPORT http://bugs.clamav.net/;
| #define PACKAGE PACKAGE_NAME
| #define VERSION 0.93
| /* end confdefs.h.  */
| 
| int
| main ()
| {
| 
|   ;
|   return 0;
| }
configure:3538: error: C compiler cannot create executables
See `config.log' for more details.
---

I am not even sure where to begin doing something about
that. Does anybody know how to deal with that? Is there any
additional information I should supply?

Any input would be greatly appreciated.


Thanks,
 -Juergen
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ClamAV 0.93 on FreeBSD 4.11

2008-04-17 Thread Peter Boosten



Juergen Fiedler wrote:

Hello,

I am trying to install ClamAV 0.93 on a FreeBSD 4.11 (i386)
system. I have downloaded and untarred the port, but when I
try to install it, I get an error message indicating that
my gcc can't build executables.
The section of config.log that I believe to be relevant
looks like this:

/usr/libexec/elf/ld: cannot find -lpthread


You should either upgrade your FreeBSD or build ClamAV without pthread 
support (you won't get the daemon then). I don't think 4.11 supports 
pthreads.


Peter

--
http://www.boosten.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: QEMU networking quirkiness on 7.0

2008-04-17 Thread Mario Lobo
On Thursday 17 April 2008, Jim Stapleton wrote:
 Sorry for the delayed reply, I didn't see this sent.

 On Thursday 10 April 2008 22:01:32 Mario Lobo wrote

  I have a virtual Linux (Fedora 5) and winedows (XP) machines in QEMU and
  they are both network functional. I use qemu-launch because it does
  everything you need to create a virtual machine. Here are my pertinent
  configs:
 
  
  1) # rc.conf
 
  ifconfig_re0=up polling   - no IP here !
  autobridge_interfaces=bridge0
  autobridge_bridge0=tap0 re0 - important even if tap0 does not
  exist yet cloned_interfaces=bridge0
  # the bridge gets the IP
  ifconfig_bridge0=inet 10.10.10.2 netmask 255.255.255.0

 To verify, the 10.10.10.2 is the IP that everyone sees my host as on
 the network, correct? That's the IP that used to be set on re0?

exactly !


  2) tell QEMU launch to open a tap device

 Open a TUN/TAP interface in the network interface configuration

yes


  3) tap up script to run when invoking the machine(s).
 
  # qemu-net
 
  #!/usr/local/bin/bash
  $1 = tap ifac created
  /sbin/ifconfig $1 up
  # test if tap is already added
  TEST=`ifconfig -a | grep -A 6 bridge | grep $1`
  if [ $TEST ==  ]; then
 /sbin/ifconfig bridge0 addm $1
  fi
  # add a route to the virtual machine
  /sbin/route add -host 10.10.10.100 -iface bridge0

 This is the tun/tap configuration script, the IP on the last line is
 the IP I want the guest to look like to the network (i.e.
 192.168.1.85)?

correct ! You will configure the guest's network interface with this IP.



 Thanks, I'll play with this more when I get home (I don't want to mess
 with my machine's network configuration while I've only got network
 access).


This worked so fine fine for me that I left the bridge as my main interface 
for good. Even if QEMU is not up.  It works just as well as re0 itself.


 Thanks,
 -Jim Stapleton
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

You're welcome !

-- 
Mario Lobo
Segurança de Redes - Desenvolvimento e Análise
IPAD - Instituto de Pesquisa e Apoio ao Desenvolvimento Tecnológico e 
Científico


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Xfce and shutting down...

2008-04-17 Thread Peter Harrison
Tuesday, 15 April 2008 at 22:53:55 +0100, Peter Harrison said:
 I upgraded my ports a week or so ago (after the Gnome 2.20 upgrade if that 
 helps).
 
 I'm running Xfce on both 7.0 and 6.3. Before the upgrade, I could use the 
 Xfce opanel shutdown button to poweroff the system (with the appropriate 
 entry in sudoers).
 
 Following the upgrade, I simply get returned to the login screen, with the 
 following message repeated twice in /var/log/messages:
 
 console-kit-daemon[839]: GLib-CRITICAL: g_hash_table_destroy: assertion 
 `hash_table != NULL' failed
 
 Can anyone shed any light on what's changed to prevent Xfce from being able 
 to shut the system down? (Note, I can still poweroff by su-ing to root and 
 running 'shutdown -p now').
 
 Can anyone shed any light?
 
 Thanks for your help.


Answering my own question, but for the sake of the archives...

It seems that xfsm-shutdown-helper no longer uses sudo to gain the necessary 
privileges to shut the system down - instead it uses hal  policykit.

Unfortunately this changeover doesn't seem to be documented anywhere - either 
for freebsd or xfce. However, give the user the appropriate permissions in 
/usr/local/etc/PolicyKit/PolicyKit.conf (see the man page for details) and it 
all starts working again.



Peter Harrison



 
 
 Peter Harrison.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


usb serial port speed

2008-04-17 Thread Robert Huff
Per olof Ljungmark writes:

  Finally got through to get a Huawei E220 3G modem working, now
  the question is, how can max the speed from the serial (USB)
  port? The modem is theoretically capable of several mbit/s.

With the right driver, the USB stack is capable of the full 480
mbits/second.
(In theory, anyway; I've never been able get mine anywhere near
that.)


Robert Huff


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Openldap server install failure - openldap client conflict

2008-04-17 Thread David Robillard
 On Wed, 2008-04-16 at 10:37 -0400, David Robillard wrote:
   I'm trying to install OpenLDAP as a server to attempt to try it out
   for our network. The problem is the openldap client is already installed
   for other apps as php, apache, asterisk, etc. So my question is: is it
   possible to uninstall the client? Will the server include the client
   required for these other apps?
 
  You can always remove the old client and install the new version. You
  simply need to shutdown the services which depend on the client before
  you remove the old one and install the new one. Then start the
  services again. Of course you should do this on a test machine and
  make sure all your applications work as expected with the new client
  (i.e. don't do this on your production machine AND backup before you
  do!).
 
  For what it's worth, I've removed and installed the OpenLDAP client
  from a few machines and never had any problems with Apache nor with
  PHP. But I did have a problem with sudo(8). If you use sudo (you
  probably should IMHO) and it was compiled with LDAP support, then the
  minute you remove the old OpenLDAP client, sudo will be broken. It's
  easy to work around this by using su(1) and switch to root. Of course,
  make sure you know the root password and that you're part of the wheel
  group before you do this.
 
  Here's how I proceed to update the OpenLDAP client. I use SASL also,
  but it's not mandatory. Notice that I run a first make(1) without
  options. This will help reduce the time required between the `make
  deinstall` and `make install clean`.
 
  cd /usr/ports/net/openldap24-sasl-client
  sudo make
  sudo /all/your/ldap/dependent/applications/rc.d/scripts stop
  sudo make deinstall
  sudo make install clean
  sudo /all/your/ldap/dependent/applications/rc.d/scripts start
 
  Also, on a side note, I would suggest adding a few lines to
  make.conf(5) so that all your applications will require the same
  OpenLDAP versions (and the same Berkeley DB too). That change did help
  me quite a lot. The downside of this is that if you have many hosts,
  you may have to edit quite a few make.conf(5) files when either
  OpenLDAP or BDB changes versions. Using rsync, rdist
 
  WANT_OPENLDAP_VER= 24
  WITH_BDB_VER= 46
 
  Good luck with OpenLDAP. Should you need help with it, SASL and
  Kerberos integration, feel free to contact me.

 I did just get it worked out, but those other apps were worrying me (see
 last post). At least I know where to look now...

Indeed. I've never used Asterisk myself so you'll have to test it. I'd
be surprised if a change in the LDAP client breaks anything, but you
never know. Better test it first on a non-production system.

 I am very interested in kerberos integration if you could provide some
 hints. I looked into before for another reason and set it aside in the
 too hard basket for a while... I posted back to the list to help others
 if they're interested too.

I've successfully integrated OpenLDAP with SASL and Kerberos along
with nss_ldap, pam_ldap, sudo and ssh on FreeBSD. I agree with you
that it's not very easy to find good documentation on this subject on
the web. So I'll try to post my own setup online in case it can help
anyone.

But before I do, I still need to clean up my notes :) I'd also like to
publish documentation on these items:

- Setup the OpenLDAP replication with a Kerberos user.
- Describe a backup and recovery plan.
- Configure Apache to use mod_auth_kerb to achieve Single Sign-On.
- Describe how to replace NIS with OpenLDAP.
- Configure the OpenLDAP/Kerberos setup in HA using Open Source tools.
- Test some web based applications to manage the OpenLDAP accounts (so
that I can give the user management to a junior admin or first level
support teams)

So unless you really need my docs right away, I would suggest waiting
a bit for me to clean the whole thing. I'd like to have all that up
and running around the first week of May.

 One thing, I installed the lam webapp for administration (and I did also
 try this manually too) but when I'm asked for a password I have no idea
 what password its looking for (I do feel rather stupid!).

Hummm, I've never used LAM before. But my (wild) guess would be that
it's looking for your rootdn user's password. Or any other user in
which you've granted full read/write access in your OpenLDAP acls.

 This was something I was going to try to solve next time I get back to this
 project- it was late at night and I had only just got it installed and
 running. It says in the install guide that it will ask for the secret
 once you add a ldif file, so I assumed it would set it then- I was
 wrong...

Well, the first password you setup is the rootdn's password. You
generate the Salted-SHA1 hashed password with slappasswd(8C). Simply
copy the ouput of `slappasswd -v` into your
/usr/local/etc/openldap/slapd.conf file. That's in the rootpw
configuration such as this:

# Specify the rootdn's passwd. See slappasswd(8).
rootpw  

Re: X Screensaver

2008-04-17 Thread Frank Shute
On Wed, Apr 16, 2008 at 12:27:03PM -0400, Fred Schnittke wrote:

 Hi:
 
 I've installed FreeBSD 7.0, just a standard install with X. I load XDM
 via /usr/local/etc/rc.d/x.sh, which states:
 
 /usr/local/bin/xset s off
 /usr/local/bin/xdm
 
 But I can't get the screensaver to disable. After about 10 minutes of
 sitting at the XDM Login Prompt, the screen goes blank.
 
 Can anyone tell me definately, how to disable the X screen saver for
 good, for all users?
 
 
 Regards,
 

Try adding:

/usr/local/bin/xset -dpms

in your users ~/.Xsession

If you've got a load of users. Then put it at the end of:

/usr/local/share/examples/xdm/Xsession

and put it somewhere else and point your xdm config at it.

HTH.

-- 

 Frank 


 Contact info: http://www.shute.org.uk/misc/contact.html 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ClamAV 0.93 on FreeBSD 4.11

2008-04-17 Thread Chuck Swiger

Hi, Juergen--

On Apr 17, 2008, at 9:49 AM, Juergen Fiedler wrote:

I am trying to install ClamAV 0.93 on a FreeBSD 4.11 (i386)
system. I have downloaded and untarred the port, but when I
try to install it, I get an error message indicating that
my gcc can't build executables.


This diff to the FreeBSD port Makefile was discussed on the ClamAV- 
users mailing list:


--- Makefile.orig   Wed Apr 16 10:59:51 2008
+++ MakefileWed Apr 16 11:37:41 2008
@@ -108,7 +108,7 @@
 .if ${OSVERSION} = 601000
 PTHREAD_LIBS=  -lthr
 .else
-PTHREAD_LIBS=  -lpthread
+PTHREAD_LIBS=  -pthread
 .endif

 .if defined(WITH_ARC)

...and it seems to work fine for 4.11:


+++ Started at Wed Apr 16 14:20:06 2008
clamd daemon 0.93 (OS: freebsd4.11, ARCH: i386, CPU: i386)


Regards,
--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ClamAV 0.93 on FreeBSD 4.11

2008-04-17 Thread Juergen Fiedler
On Thu, 17 Apr 2008 12:14:24 -0700
 Chuck Swiger [EMAIL PROTECTED] wrote:
 Hi, Juergen--
 
 On Apr 17, 2008, at 9:49 AM, Juergen Fiedler wrote:
  I am trying to install ClamAV 0.93 on a FreeBSD 4.11
 (i386)
  system. I have downloaded and untarred the port, but
 when I
  try to install it, I get an error message indicating
 that
  my gcc can't build executables.
 
 This diff to the FreeBSD port Makefile was discussed on
 the ClamAV- users mailing list:
[...]
 Regards,
 -- 
 -Chuck

It compiles now, but clamd doesn't work properly: It
starts, but doesn't respond to anything. clamdscan just
sits around forever trying to communicate with clamd, and
when I switch to TCP sockets, I can telnet to port 3310 but
even a simple PING remains unanswered indefinitely.

Maybe it's really time for 7.0.


Thanks,
 -Juergen
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ClamAV 0.93 on FreeBSD 4.11

2008-04-17 Thread Gerard
On Thu, 17 Apr 2008 16:34:16 -0400
Juergen Fiedler [EMAIL PROTECTED] wrote:

[snip]

 Maybe it's really time for 7.0.

I would think so. At the very least, there are no doubt several
security fixes in place now that were/are not readily available for 4.x
versions. Besides, it will give you an opportunity to discard useless
crud that has no doubt been accumulating on your system.

-- 
Gerard
[EMAIL PROTECTED]

Regards,   /\_/\  All dogs go to heaven.
[EMAIL PROTECTED]   (0 0)  http://www.alphaque.com/
+==oOO--(_)--OOo==+
| for a in past present future; do|
|   for b in clients employers associates relatives neighbors pets; do|
|   echo The opinions here in no way reflect the opinions of my $a $b.  |
| done; done  |
+=+



signature.asc
Description: PGP signature


Re: FreeBSD-EN-08:01.libpthread

2008-04-17 Thread Mel
On Thursday 17 April 2008 14:59:10 ervin wrote:
 I get the following error while installing the patch below . any
 ideas how to solve?

 install: rename: /lib/[EMAIL PROTECTED] to /lib/libpthread.so.2: Operation not
 permitted *** Error code 71

Most likely, chflags noschg /lib/libpthread.so.2 then make install. If that 
doesn't work, report back with your kern.securelevel and whether /lib is 
mounted read only or not.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ClamAV 0.93 on FreeBSD 4.11

2008-04-17 Thread Chuck Swiger

On Apr 17, 2008, at 1:34 PM, Juergen Fiedler wrote:

It compiles now, but clamd doesn't work properly: It
starts, but doesn't respond to anything. clamdscan just
sits around forever trying to communicate with clamd, and
when I switch to TCP sockets, I can telnet to port 3310 but
even a simple PING remains unanswered indefinitely.


Hmm, you seem to be right about that.  I have a low-volume mailserver  
which failed over to using clamscan rather than going through the  
daemon.  For my circumstances, this is OK, but it's not ideal.


Using gdb attach suggests the clamd is stuck waiting for accept() to  
return:


(gdb) bt
#0  0x281af05c in __sys_accept () from /usr/lib/libc_r.so.4
#1  0x281a4960 in _accept () from /usr/lib/libc_r.so.4
#2  0x281a4a12 in accept () from /usr/lib/libc_r.so.4
#3  0x804f8db in acceptloop_th ()
#4  0x804dd46 in main ()
#5  0x804a47e in _start ()

--
-Chuck


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD-EN-08:01.libpthread

2008-04-17 Thread ervin
thx  :-) ... that did the trick / the keyword was security level which
I had at 2 /

On 17/04/2008, Mel [EMAIL PROTECTED] wrote:
 On Thursday 17 April 2008 14:59:10 ervin wrote:
   I get the following error while installing the patch below . any
   ideas how to solve?
  
   install: rename: /lib/[EMAIL PROTECTED] to /lib/libpthread.so.2: Operation 
 not
   permitted *** Error code 71


 Most likely, chflags noschg /lib/libpthread.so.2 then make install. If that
  doesn't work, report back with your kern.securelevel and whether /lib is
  mounted read only or not.


  --
  Mel

  Problem with today's modular software: they start with the modules
 and never get to the software part.



-- 


mvh/best regards  ervin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: usb serial port speed

2008-04-17 Thread Per olof Ljungmark

Robert Huff wrote:

Per olof Ljungmark writes:


 Finally got through to get a Huawei E220 3G modem working, now
 the question is, how can max the speed from the serial (USB)
 port? The modem is theoretically capable of several mbit/s.


With the right driver, the USB stack is capable of the full 480
mbits/second.
(In theory, anyway; I've never been able get mine anywhere near
that.)


I've cranked ubsa.c to 921600 and that seems to work, I'll try to take 
it further tomorrow. We'll see.


--per
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD-EN-08:01.libpthread

2008-04-17 Thread ervin
Mel,

thx  :-) ... that did the trick / the keyword was security level which
I had at 2 /

ervin

On 17/04/2008, Mel [EMAIL PROTECTED] wrote:
 On Thursday 17 April 2008 14:59:10 ervin wrote:
   I get the following error while installing the patch below . any
   ideas how to solve?
  
   install: rename: /lib/[EMAIL PROTECTED] to /lib/libpthread.so.2: Operation 
 not
   permitted *** Error code 71


 Most likely, chflags noschg /lib/libpthread.so.2 then make install. If that
  doesn't work, report back with your kern.securelevel and whether /lib is
  mounted read only or not.


  --
  Mel

  Problem with today's modular software: they start with the modules
 and never get to the software part.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Avermedia 507 TV

2008-04-17 Thread Danny Pansters
On Thursday 17 April 2008 13:31:50 Da Rock wrote:

snip

 You'll have to excuse me presumption here (I'll normally read all
 messages before adding to a thread), but you sound like a very good
 source of info here. May I ask you if you can supply some references to
 what you're posting here? I'd like to investigate this much further...

Principal source I used for the current tuner support with saa:

FQ1200MK3 application note from Philips (google).

The bandswitch commands for the different types come from the original saa 
example code (which I found didn't work properly for mk3 tuners until I added 
more initialization). Also, in the kbtv2 tarball, in drivers/saa/saa.h there 
are quite extensive comments.

There are plenty (semi-)technical datasheets you can find online, but 
documents such as application notes seem to be hard to get by.

There are two things, with tuners and any other hardware chip or component 
really: one is you need to understand how they work and what certain 
words/lingo mean (an electrical circuit schema can in principle be enough), 
two is there will always be a certain specific way (registers) to pass and 
retrieve and possibly convert the data you send/receive from the programmable 
parts of the circuity, even if two tuner types essentially use the exact same 
physics.

Contrary to popular belief, the problem with HW support in OSS is the latter 
more often than the former I think. That's not to say that the first isn't a 
hurdle. ATM I find myself studying PLLs more closely with the expectation 
that eventually I can understand a specific configuration more easily and 
possibly guess to some extend how HW registers are organized. I'd like to 
reorganize the tuner support that's now in the saa backend so that this 
becomes one type/class while adding other types, such as the newer silicon 
tuners (microtune, xceive, fujitsu).

I have some pdfs I could send you but there's no one definitive guide to a 
very broad area like this. And I wouldn't say that I have a broad enough view 
here to act as a trusty guide frankly.

If you're mostly interested in (digital) video I can recommend Video 
demystified by Keith Jack. Pretty hard core but stuffed with all sorts of 
useful info.

 Also, I thought I read somewhere that firmware is used in most tuners.
 Plus I found the linux drivers use firmware to make this work. Just a
 thought.

Well firmware can and is used for more than tuner support, also for example 
for a/v decoding (not to be confused with mpeg encoding) with the cxm driver, 
i.e. hauppauge PVR-150, i.e. pvrxxx). Tuning is just one thing that could be 
in a firmware. There's a firmware kernel module, used with cxm, that can load 
firmware. Essentially firmware is a blob that runs in your kernel.

So, if not needed, I prefer to avoid it, especially with saa, because the a/v 
stuff is all OSS and BSD licensed and it works alright.

There's another thing which may be confused with firmware, and that's eeprom. 
Tuners tend to have an eeprom that can be read to identify itself (eeproms 
don't execute code), and while they may be useful for identifying tuners 
they're also often busted or produce nonsense or disinformation. If you don't 
need to depend on an eeprom, I'd say avoid it.

All IMHO of course -- I'm just self-taught here. I once wanted to just make a 
nice tv viewer for bktr. Then I got an avermedia card for 20 euro... then 
stole a webcam (lately it has been stolen back though, but it lasted long 
enough to support it in kbtv), and honestly bought a pvr150 card :) And then 
there's this eyeTV hybrid stick and I haven't even started on getting that to 
work. It looks at me ... support me, support me. Creepy little thing.


HTH,

Dan

[ I don't mind discussing more specific things, except for creepy little 
things that whisper support me, but off list then please ]


 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Username groups

2008-04-17 Thread Ruel Luchavez
hey, the username to windows and in my freebsd server is just the same.. I
allready change it many times but still the problem still not solve



On Thu, Apr 17, 2008 at 9:33 PM, Derek Ragona 
[EMAIL PROTECTED] wrote:

  At 05:19 AM 4/17/2008, Ruel Luchavez wrote:

 Hello,

 Can you help me on this...
 I have a directory in the server this is what is looks like
  drwxrwx--- 12 root plusmate 512 April 13 14:46 plusmate shared
 ...this directory is shared in my network, and i dont recieve any complain
 in any user which can acces to that folder/directory

 *My Problem:*
 I have a new user, i already add the user in the server using command
 adduser and pw to modify it, by the way the name of user is ac06...
 when i had a command id -p ac06 this is the reply of the server..
uid  ac06
group   plusmate
 and which im sure its correct..

 BUT, when that user acces(ac06)  the folder (plusmate shared) throug the
 windows (windows XP) its always asking for username  password, however it
 didn't ask for username  password while the other users getting to that
 folder/directory.

 Where should be the problem?is there something i forgot configuring in the
 server side?

 YOUR REPLY IS HIGHLY APPRECIATED


 Windows sends the username and password used to log into Windows to any
 network shares.  So you need to sync what the user is using to log into
 windows with the network ones you setup.

 -Derek

 --
 This message has been scanned for viruses and
 dangerous content by *MailScanner* http://www.mailscanner.info/, and is
 believed to be clean.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


New to FreeBSD issues with multicast DNS.

2008-04-17 Thread Joe Dunn
Hi All,

I'm new to FreeBSD, but I am running into an issue I can't seem to solve
after a few days.

I have a FreeBSD 7.0 amd64 set up. I installed mt-daapd/avahi from ports.
For some reason, I can see the share on the fileserver but not on the
network. Its like everything just stops when it get to the em0 (interface
plugged into the switch).

I can browse multicast dns locally as seen below

[EMAIL PROTECTED] /usr/ports]# avahi-browse _daap._tcp
+ em0 IPv4 freebsd _daap._tcp local

My network card has mulitcast

em0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500

I did add a mulitcast route

route add -net 224.0.0.0 -iface em0

I have since taken it off since it didn't do anything

And when i tcpdump and check the dump I see mulitcast broadcasts being sent
out

20:42:00.085459 IP freebsd.mdns  224.0.0.251.mdns: 0 [2a] PTR (QM)?
_daap._tcp.local. (96)

Both mt-daapd/avahi are running.

When i browse on my network from my macbookpro I never see the daapd share

mbp:~ jdunn$ mDNS -B _daap._tcp
Browsing for _daap._tcp
Talking to DNS SD Daemon at Mach port 4099


If i have itunes running on either of my macs it shows up during this
request.

Does anyone have any ideas as to what I could have messed up?

Thanks for any help

Joe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Username groups

2008-04-17 Thread Ruel Luchavez
Thanks Jon..I finnally solve it, the problem appears on the Samba..

Cheers
best regards...



On Thu, Apr 17, 2008 at 10:00 PM, Jon Radel [EMAIL PROTECTED] wrote:

 Ruel Luchavez wrote:

  *My Problem:*

 Only one?  ;-)

  I have a new user, i already add the user in the server using command
  adduser and pw to modify it, by the way the name of user is ac06...
  when i had a command id -p ac06 this is the reply of the server..
 uid  ac06
 group   plusmate
  and which im sure its correct..
 
  BUT, when that user acces(ac06)  the folder (plusmate shared) throug the
  windows (windows XP) its always asking for username  password, however
 it
  didn't ask for username  password while the other users getting to that
  folder/directory.

 Assuming you're using Samba for this, you'll need to read up on
 authentication in Samba and then figure out which of several options are
 configured on your system.  It is not [necessarily] sufficient to add a
 FreeBSD user.

 --Jon Radel

 P.S.  In many circumstances

 adduser -G plusmate ac06

 instead of

 adduser -g plusmater ac06

 would give more elegant results.  Other things being equal, it's better
 to have all users use their own login group and then add them to
 additional groups as appropriate.  There are plenty of legitimate
 reasons not to do this, so you're probably best off remaining consistent
 with the setup of the existing users.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Username groups

2008-04-17 Thread Jeff Dickens



Ruel Luchavez wrote:

Hello,

Can you help me on this...
I have a directory in the server this is what is looks like
 drwxrwx--- 12 root plusmate 512 April 13 14:46 plusmate shared
...this directory is shared in my network, and i dont recieve any complain
in any user which can acces to that folder/directory

*My Problem:*
I have a new user, i already add the user in the server using command
adduser and pw to modify it, by the way the name of user is ac06...
when i had a command id -p ac06 this is the reply of the server..
   uid  ac06
   group   plusmate
and which im sure its correct..

BUT, when that user acces(ac06)  the folder (plusmate shared) throug the
windows (windows XP) its always asking for username  password, however it
didn't ask for username  password while the other users getting to that
folder/directory.

Where should be the problem?is there something i forgot configuring in the
server side?

YOUR REPLY IS HIGHLY APPRECIATED
  
  

Perhaps you need to do :

   smbpasswd -a username

?

Depends on the setup.  I gather someone else installed this system.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Support for Stallion Serial Controllers in FreeBSD 7

2008-04-17 Thread Matthew Smith

Hi

From some reading I have been doing including here:
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/console-server/setting-up-server.html

...I have been given to understand that FreeBSD supports Stallion 
multiport serial cards, provided that I enable it in the kernel.


However, the link in the document above to stl comes up with nothing, I 
can find no other references doing a site search and doing:


grep -r -i stallion *

...in /usr/src/sys, nothing comes up.  Admittedly, I did run this on a 
Sparc64 machine so maybe it's missing from there, but am puzzled as to 
why I can only find that one reference on the entire site, and that 
includes searching the general and hardware list archives.


Is this support now incorporated into something else?  I know that 
nothing comes up in dmesg, although as I said before, this is a Sparc64 
machine which maybe lacks those kernel components.


Cheers

M


--
Matthew Smith
Smiffytech - Technology Consulting  Web Application Development
Business: http://www.smiffytech.com/
Personal: http://www.smiffysplace.com/
LinkedIn: http://www.linkedin.com/in/smiffy
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


gmirror disk fail questions...

2008-04-17 Thread Gary Newcombe

Hi all,

Yesterday, after users complaining of strange things happening in their
accounting package, I rebooted the server only to find that it never
came back up. gmirror was complaining about ad6 in the raid and the
server had hung bringing the mirror up (this has happened twice now).

uname -a
FreeBSD mesh.lhshoses.com.au 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Thu
Jan 18 22:55:39 EST 2007
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/MESH  i386

After a hard reboot, provider ad4 was available, ad6 timed out and the
server booted.

dmesg

ad4: 76324MB WDC WD800JD-23LSA0 07.01D07 at ata2-master SATA150
ad6: 76324MB WDC WD800JD-23LSA0 07.01D07 at ata3-master SATA150
GEOM_MIRROR: Device gm0 created (id=3803006992).
GEOM_MIRROR: Device gm0: provider ad4 detected.
Root mount waiting for: GMIRROR
Root mount waiting for: GMIRROR
Root mount waiting for: GMIRROR
Root mount waiting for: GMIRROR
GEOM_MIRROR: Force device gm0 start due to timeout.
GEOM_MIRROR: Device gm0: provider ad4 activated.
GEOM_MIRROR: Device gm0: provider mirror/gm0 launched.
Trying to mount root from ufs:/dev/mirror/gm0s1a


# gmirror status

[mesh:/var/log]# gmirror status
  NameStatus  Components
mirror/gm0  DEGRADED  ad4


looking in /dev/ however, we have

crw-r-  1 root  operator0,  83 17 Apr 13:58 ad4
crw-r-  1 root  operator0,  91 17 Apr 13:58 ad4s1
crw-r-  1 root  operator0,  84 17 Apr 13:58 ad6
crw-r-  1 root  operator0,  92 17 Apr 13:58 ad6a
crw-r-  1 root  operator0,  99 17 Apr 13:58 ad6as1
crw-r-  1 root  operator0,  93 17 Apr 13:58 ad6b
crw-r-  1 root  operator0,  94 17 Apr 13:58 ad6c
crw-r-  1 root  operator0, 100 17 Apr 13:58 ad6cs1
crw-r-  1 root  operator0,  95 17 Apr 13:58 ad6d
crw-r-  1 root  operator0,  96 17 Apr 13:58 ad6e
crw-r-  1 root  operator0,  97 17 Apr 13:58 ad6f
crw-r-  1 root  operator0,  98 17 Apr 13:58 ad6s1
crw-r-  1 root  operator0, 101 17 Apr 13:58 ad6s1a
crw-r-  1 root  operator0, 102 17 Apr 13:58 ad6s1b
crw-r-  1 root  operator0, 103 17 Apr 13:58 ad6s1c
crw-r-  1 root  operator0, 104 17 Apr 13:58 ad6s1d
crw-r-  1 root  operator0, 105 17 Apr 13:58 ad6s1e
crw-r-  1 root  operator0, 106 17 Apr 13:58 ad6s1f

I am guessing that a failing disk is responsible for the data
corruption, but I have no errors in /var/log/messages or console.log.
On every boot, the mirror is marked clean ad there's no warnings about
a disk failing anywhere? Where should I be looking for or what should I
be doing to get any warnings?

Also, how-come if ad4 is the working disk, ad4's slices seem to be
labelled as ad6. What's going on here? To me, ad6 appears to have
correct labelling for the mirror from ad6s1a-f

How can I test for sure whether the disk is damaged or dying, or
whether this is just a temporary glitch in the mirror? This is the
first time I've had a gmirror raid give me problems.

Assuming ad6 has been deactivated/disconnected, I was thinking of
trying:

gmirror activate gm0 ad6
gmirror rebuild gm0 ad6

Is this safe?

I haven't tried pulling either disk from the server as I am remote from
the site.

Cheers, Gary.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Support for Stallion Serial Controllers in FreeBSD 7

2008-04-17 Thread Dan Nelson
In the last episode (Apr 18), Matthew Smith said:
 From some reading I have been doing including here:
 http://www.freebsd.org/doc/en_US.ISO8859-1/articles/console-server/setting-up-server.html
 
 ...I have been given to understand that FreeBSD supports Stallion multiport 
 serial cards, provided that I enable it in the kernel.
 
 However, the link in the document above to stl comes up with nothing,
 I can find no other references doing a site search and doing:
 
 grep -r -i stallion *

Support for those cards was for i386-only, and was removed in 2004
along with a bunch of other drivers when the APIs they were using were
removed.  The last release that had the drivers was 5.2.1.

http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/i386/isa/Attic/stallion.c

 revision 1.62
 date: 2004/03/14 06:48:35;  author: imp;  state: dead;  lines: +1 -1

 stl and stli use the old COMPAT_ISA api.  slt also uses the really old
 COMPAT_PCI api.  This API is going away, so this driver is going away
 also.

 If users are interested in updating this, please contact the author
 since he has some preliminary work to move this to newer APIs.


-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]