Re: High load - lost network

2008-11-11 Thread Christer Solskogen
Jeremy Chadwick wrote:

 I'm not really sure anyone will know how to fix this.  Sometimes a BIOS
 upgrade can fix such things, other times motherboard replacements are in
 order.
 

I'll check the BIOS and see if I could do something with it.
If I enable POLLING, could that fix the problem?

-- 
chs

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: High load - lost network

2008-11-11 Thread Christer Solskogen
Jeremy Chadwick wrote:

 Simply put: I don't know.  Based on the polling(4) man page, it might
 improve things for you, but your ATA high interrupt rate problem will
 still exist even if you use polling(4).
 

Okay. Thanks for taking time helping me :)

-- 
chs

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: High load - lost network

2008-11-11 Thread Jeremy Chadwick
On Tue, Nov 11, 2008 at 09:00:18AM +0100, Christer Solskogen wrote:
 Jeremy Chadwick wrote:
 
  I'm not really sure anyone will know how to fix this.  Sometimes a BIOS
  upgrade can fix such things, other times motherboard replacements are in
  order.
  
 
 I'll check the BIOS and see if I could do something with it.
 If I enable POLLING, could that fix the problem?

Simply put: I don't know.  Based on the polling(4) man page, it might
improve things for you, but your ATA high interrupt rate problem will
still exist even if you use polling(4).

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: High load - lost network

2008-11-11 Thread Jos Chrispijn


Uit een eerder bericht (10-11-2008 13:45):

Do anyone have a tips for how to workaround this or is the server just junk?
  
Got this problem a while ago as well. I found out with me it was hub 
related. If I was downloading, my hub was displaying 100Mbit connection 
(I wish it was :-)
Then I sometimes get this nic status of my BSD system as well. I bought 
a 3Com hub and the problem is gone.


regards,
Jos Chrispijn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


X11: 1280x768

2008-11-11 Thread Pieter Donche

On Tue, 11 Nov 2008, Polytropon wrote:


On Tue, 11 Nov 2008 07:47:37 +0100 (CET), Pieter Donche [EMAIL PROTECTED] 
wrote:

I installed KDE and the KDM display manager in FreeBSD.
On my portable I have a non-US keyboard (a european country layout),
in KDE I can set it to the appropriate keyboard layout.
KDM login window is still in US qwerty keyboard, which makes me have
to enter my password with different keystrokes :-) How to set an
appropriate keyboard in KDM?


I don't know, but you can set your keyboard layout generally for X,
so you have this layout everywhere (e. g. when you're running
something different than KDE, as well as in xdm or kdm).

Just change your /etc/X11/xorg.conf to fit your needs, according
to this example:

Section InputDevice
Identifier  Keyboard0
Driver  kbd
Option  XkbModel  pc105
Option  XkbLayout de
Option  AutoRepeat250 30
EndSection


OK, that was it for the keyboard matter. Thx..

Similar question:
my portable is 1280x768 pixels, but KDE comes up in 1024x768, making 
'wide' icons and text :-(

I tried to add in the /etc/X11/xorg.conf in Section Screen for
all entries in Subsection Display (different Depths), a line
Modes 1280x784 ... but this does not help..
In KDE menu / Settings / peripherals / Display / the only choice
for Screen Size remains 1024x768 without alternatives (as before) ...
How to remedy?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Polytropon
On Tue, 11 Nov 2008 10:08:54 +0100 (CET), Pieter Donche [EMAIL PROTECTED] 
wrote:
 OK, that was it for the keyboard matter. Thx..

No problem, it's all standard stuff. :-)



 Similar question:
 my portable is 1280x768 pixels, but KDE comes up in 1024x768, making 
 'wide' icons and text :-(
 I tried to add in the /etc/X11/xorg.conf in Section Screen for
 all entries in Subsection Display (different Depths), a line
 Modes 1280x784 ... but this does not help..
 In KDE menu / Settings / peripherals / Display / the only choice
 for Screen Size remains 1024x768 without alternatives (as before) ...
 How to remedy?

I'd suggest to do something similar like with the keyboard: Put
it explicitely into xorg.conf; I mean, autodetect is all fine, but
in some cases, just crap comes out. :-)

I had a similar problem here: X would only run 1024x768 or 1152x864,
but not 1400x1050 as I would have liked it on a 21 CRT. So I
did this:

First, modify /etc/X11/xorg.conf:

Section Screen
Identifier  Screen0
Device  Card0
Monitor Monitor0
Option  Accel
DefaultDepth24
SubSection  Display
Depth   24
Visual  TrueColor
Modes   1152x864
EndSubSection
EndSection

This starts X in 1152x864. You'll see that there's not the usual
bunch of depths and modes, just the one I want.

Then, I put this into ~/.xinitrc:

xrandr --size 1400x1050 
xrandr --fb 1400x1050 

Put it before any other program starts, and it leads to the desired
screen dimension of 1400x1050.

I'm sure you can play a bit with xrandr from within KDE in order
to adjust the screen dimensions, and when you found it working,
put it into your ~/.xinitrc so it will take effect after login.
But NB that xdm / kdm won't be affected - it will run as xorg.conf
specifies. You can check with xrandr's information options (refer
to man xrandr) and xvidtune.




-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Pieter Donche

Hmm, playing arround in KDE with -xrandr
$ xrandr --size 1280x768
Size 1280x768 not found in available modes
(?? it's in my /etc/X11/xorg.conf ??)
$ xrandr --fb 1280x768
xrandr: screen cannot be larger than 1024x768 (desired size is 1280x786)

my screen has dimensions 260mm x 160 mm
$ xrandr --fbmm 260x160
(of $ xrandr --dpi 125)
does not complain but does not help either..
??

On Tue, 11 Nov 2008, Polytropon wrote:


On Tue, 11 Nov 2008 10:08:54 +0100 (CET), Pieter Donche [EMAIL PROTECTED] 
wrote:

OK, that was it for the keyboard matter. Thx..


No problem, it's all standard stuff. :-)




Similar question:
my portable is 1280x768 pixels, but KDE comes up in 1024x768, making
'wide' icons and text :-(
I tried to add in the /etc/X11/xorg.conf in Section Screen for
all entries in Subsection Display (different Depths), a line
Modes 1280x784 ... but this does not help..
In KDE menu / Settings / peripherals / Display / the only choice
for Screen Size remains 1024x768 without alternatives (as before) ...
How to remedy?


I'd suggest to do something similar like with the keyboard: Put
it explicitely into xorg.conf; I mean, autodetect is all fine, but
in some cases, just crap comes out. :-)

I had a similar problem here: X would only run 1024x768 or 1152x864,
but not 1400x1050 as I would have liked it on a 21 CRT. So I
did this:

First, modify /etc/X11/xorg.conf:

Section Screen
Identifier  Screen0
Device  Card0
Monitor Monitor0
Option  Accel
DefaultDepth24
SubSection  Display
Depth   24
Visual  TrueColor
Modes   1152x864
EndSubSection
EndSection

This starts X in 1152x864. You'll see that there's not the usual
bunch of depths and modes, just the one I want.

Then, I put this into ~/.xinitrc:

xrandr --size 1400x1050 
xrandr --fb 1400x1050 

Put it before any other program starts, and it leads to the desired
screen dimension of 1400x1050.

I'm sure you can play a bit with xrandr from within KDE in order
to adjust the screen dimensions, and when you found it working,
put it into your ~/.xinitrc so it will take effect after login.
But NB that xdm / kdm won't be affected - it will run as xorg.conf
specifies. You can check with xrandr's information options (refer
to man xrandr) and xvidtune.




--
Polytropon

From Magdeburg, Germany

Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Mel
On Tuesday 11 November 2008 11:35:41 Fbsd1 wrote:


  Still getting error msg
  init: getty repeating too quickly on port /dev/ttyv8, sleeping 30 second


You first need to get rid of that. xdm can't open /dev/ttyv8 while getty is 
hammering at it.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Disallowing ssl2

2008-11-11 Thread Mel
On Tuesday 11 November 2008 14:50:56 John Almberg wrote:
 My server got an audit for PCI compliance and was red-flagged for
 allowing SSL2 connections, which they have some problem with. They
 want the server to use SSL3 or TLS:

 Synopsis : The remote service encrypts traffic using a protocol with
 known weaknesses. Description : The remote service accepts
 connections encrypted using SSL 2.0, which reportedly suffers from
 several cryptographic flaws and has been deprecated for several
 years. An attacker may be able to exploit these issues to conduct man-
 in-the-middle attacks or decrypt communications between the affected
 service and clients. See also : http://www.schneier.com/paper-ssl.pdf
 Solution: Consult the application's documentation to disable SSL 2.0
 and use SSL 3.0 or TLS 1.0 instead. See http://support.microsoft.com/
 kb/216482 for instructions on IIS. See http://httpd.apache.org/docs/
 2.0/mod/mod _ssl.html for Apache. Risk Factor: Medium  / CVSS Base
 Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) 

 They want me to do this for https, imaps, and pop3s protocols...

 Before I dig into this, I was wondering, is this even possible? Will
 anything break as a result?

Only corner cases. SSLv2 was quite short-lived. I can't remember client 
implementations that had SSLv2 without TLS/v3, so I looked it up:
http://en.wikipedia.org/wiki/Transport_Layer_Security

The SSL protocol was originally developed by Netscape. Version 1.0 was never 
publicly released; version 2.0 was released in 1994 but contained a number 
of security flaws which ultimately led to the design of SSL version 3.0, 
which was released in 1996 (Rescorla 2001).

So it would break ancient clients, think superspeed 56kB dial-up internet 
ancient.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Server Freezing Solid

2008-11-11 Thread Chris Maness
I am having a new problem.  I have been running FreeBSD for years with
no crashing.  All of a sudden my server starts crashing with no panic
messages.  I am suspecting hardware because there are no messages, but
the CPU temp is fine.

Weird --maybe bad RAM?

Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


128 Bucket Failures?

2008-11-11 Thread Chris Pratt

I have asked this before a couple of years ago but received no
replies. I assumed that's because it's a somewhat obscure question.
I'm still interested and thought I might try again in case someone
new is watching this list who might know.

A vmstat -z on my highest traffic server always shows the failures
as below on 128 Bucket. It also goes to having 0 free rather soon
after the system is restarted and never returns to having more than
1 free in that column and yet always has the highest number of
requests by far. Does this mean anything significant? Is it
something I should tune or even can be tuned?

Here is the output of the vmstat -z with everything chopped out
besides the 128 Bucket line. The machine it's on is an 8 core 8 GB
Tyan and shouldn't really be starved for anything in my way of thinking.

vmstat -z
ITEM SIZE LIMIT  USED  FREE   
REQUESTS  FAILURES


128 Bucket:  1048,0, 2043,0, 
13591,  6511069


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Server Freezing Solid

2008-11-11 Thread Roland Smith
On Tue, Nov 11, 2008 at 06:42:39AM -0800, Chris Maness wrote:
 I am having a new problem.  I have been running FreeBSD for years with
 no crashing.  All of a sudden my server starts crashing with no panic
 messages.  I am suspecting hardware because there are no messages, but
 the CPU temp is fine.
 
 Weird --maybe bad RAM?

Could be. But you can test RAM with e.g. memtest86.

Or it could be a bad component (e.g. a capacitator) somewhere on the
motherboard or in the powersupply. Or a spike or drop in the external power.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp6vW2Jmvoxu.pgp
Description: PGP signature


Re: trouble getting x11 xdm to work

2008-11-11 Thread Lowell Gilbert
Fbsd1 [EMAIL PROTECTED] writes:

 Mel wrote:
 On Tuesday 11 November 2008 11:35:41 Fbsd1 wrote:


 Still getting error msg
 init: getty repeating too quickly on port /dev/ttyv8, sleeping 30 second


 You first need to get rid of that. xdm can't open /dev/ttyv8 while
 getty is hammering at it.

 I turned that off all ready before running xdm from root command line.

Since you're still getting that error message, you obviously didn't
succeed at turning off the getty.  If you're not getting that message
any more, what symptoms *do* you see?

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Server Freezing Solid

2008-11-11 Thread Jeremy Chadwick
On Tue, Nov 11, 2008 at 07:40:47AM -0800, Chris Maness wrote:
 Roland Smith wrote:
 On Tue, Nov 11, 2008 at 06:42:39AM -0800, Chris Maness wrote:
   
 I am having a new problem.  I have been running FreeBSD for years with
 no crashing.  All of a sudden my server starts crashing with no panic
 messages.  I am suspecting hardware because there are no messages, but
 the CPU temp is fine.

 Weird --maybe bad RAM?
 

 Could be. But you can test RAM with e.g. memtest86.

 Or it could be a bad component (e.g. a capacitator) somewhere on the
 motherboard or in the powersupply. Or a spike or drop in the external power.

 Roland
   
 I have swapped the HD back to the old box.  I am up and running again.   
 If it doesn't crash today, I can be certain the ol' grey mare needs to  
 be taken out back and shot.  Dual PIII on a Abit server board c. 2000.

 I hear that the Abit boards have issues with components.

 Anyone recommend a cheap (not necessarily the latest technology) mobo  
 for my server?  I am running a low load SoHo server here at the house.

If you live in the US and would like a server-class Supermicro PDSMi+
board (just the board, although I could throw in some memory if you'd
like), I have a spare which I could give to you for free.  I just
upgraded my home FreeBSD box to an X7SBA, so the older PDSMi+ sits in
its box (I purchased it retail, so it comes with manual, cables, etc.).
These boards retail for about US$240, and work very well with FreeBSD.

Link to board:

http://www.supermicro.com/products/motherboard/Xeon3000/3000/PDSMi+.cfm

Let me know.

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: qmail on debian to qmail on freebsd

2008-11-11 Thread Dan
Sollunga S([EMAIL PROTECTED])@2008.11.11 04:32:08 -0800:
 Hi all 
 
 Greetings to all, this is my first time installation of freebsd, i am going 
 to use this installation for my mail server obviously qmail+ldap. I have a 
 bit of fear to go ahead on it, can anyone clarify please?
 
 Previous Qmail installation is on debian 3.x and the installation is based on 
 http://www.shupp.org/toaster/,
 
 Now i want to move to a better hardware and ofcourse updated user friendly 
 and uptodate?OS. here i opted for freebsd and qmail 1.03 along with this i 
 want to meet users addressbook issue, so i thought of going behind ldap and 
 mysql, (guide me if i am wrong). My doubts are earlier?the Mailbox and 
 the?cleartext vpasswd are bit scaring me, so i would like to use mysql in 
 place without?disturbing any of the users?mail addresses, ( i have close to 
 32gb of data's in mailbox's and some mailing list+forwards). also would like 
 to procure password change option securely. How can i make this migration 
 smoothly with the help of freebsd?
 
 please
 

Why would you want Mailbox over Maildir is beyond me. I've used
qmail-ldap from nrg4u.com with excellent results before. Why would
anyone would use a relational database over LDAP for email acct storage
is also beyond me. It just does not make any sense once you realize
LDAP's advantages.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file harvest

2008-11-11 Thread Mel
On Tuesday 11 November 2008 18:10:24 Roland Smith wrote:

 Alternatively, does the web interface provide a means to run a fsck?
 That might be the best solution.

Unless they heavily modified how the filesystem works, you should be looking 
for a way to schedule a command on the next boot, before OS mounts the disks. 
I'm with Roland, sometimes paying extra saves money. This of course, 
depending on the importance of the data you lost, whether it's recreatable at 
all and how many man hours that would take.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Using grep to search a repository

2008-11-11 Thread Aggelidis Nikos
Hi to all the list,

i have a project with a lot of bash scripts in a folder hierarchy.I
haven't wrote the project myself so many times i have to search for
the definition of a function. For this purpose i decided to use grep
{recursively}.
The problem is that the project is an svn repository... so grep
returns results from .svn and it is really messes up the outcome of
grep. I tried bypassing the problem using the `--exclude=file_pattern'
but since its use is for files not directories it doesn't work So
the questions are:

1) Can i bypass certain directories{i.e. '.svn' or 'log/'}, using
grep? {or a combination of tools + grep}

2) Is there any other tool you would use for this job?

thanks in advance for your help,
-nicolas

PS: if it matters i prefer using gnu grep.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [solved] X11: 1280x768

2008-11-11 Thread Pieter Donche
OK, after installing 915resolution, I can use the 1280 pixel width on 
my tiny screen, giving me 25% more usable space..

Thanks Mel!

On Tue, 11 Nov 2008, Mel wrote:


On Tuesday 11 November 2008 14:34:52 Pieter Donche wrote:

On Tue, 11 Nov 2008, Mel wrote:

On Tuesday 11 November 2008 13:28:53 Pieter Donche wrote:

On Tue, 11 Nov 2008, Mel wrote:

On Tuesday 11 November 2008 12:12:06 Pieter Donche wrote:

On the same portable there is also a SUSE Linux 10.1 and WinXP, which
works in 1280x768 (so the hardware can use this resolution)

In /var/log/Xorg.0.log is see many references to 1280x768 for the
'local flat panel' , PanelID returned panel resolution: 1280x768, also
Printing DDC gathered Modelines:
3 lines
(||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers
and a KhZ to end)
follewed y
Mode: 30 (640x480)
   (specifications)
diffenrent Mode sections but 1024x768 at the highest
..
(||) |810(0): Not using mode 1280x768i (no mode of that name)


  ^^^
If this is accurate, you seem to have a trailing letter 'i' in your
xorg.conf that invalidates the mode line.

And you're using an Intel 810 integrated graphics card. Sadly, that
doesn't come with probing tool that I know of that would print the
information the card and monitor exchange about syncrates and display
sizes.

Rule out the typo first though.

I have a vague recollection of this card putting 1024x768 before
1280x768 in the mode list it returns, so that it defaults to 1024x768,
but I'm not sure where or when I read that. Either way, hardcoding the
desired modeline (without typos) in xorg.conf should work.
If there was no typo, please paste your entire xorg.conf into the mail.
We may be missing something obvious.
--
Mel

Problem with today's modular software: they start with the modules
   and never get to the software part.


There was only a typo in my mail, not in xorg.conf..

In included below my xorg.conf file and the Xorg.0.log


Rearranging for clarity:

--
xorg.conf
--


Section Screen
Identifier Screen0
Device Card0
MonitorMonitor0
SubSection Display
Viewport   0 0
Depth 1
Modes 1280x768
EndSubSection


(II) I810(0): Supported Future Video Modes:
(II) I810(0): #0: hsize: 1280  vsize 800  refresh: 60  vid: 129


I was already wondering why a card would report 1280x768, it's not the
standard for that width, 1280x800 is. Try changing the modes to 1280x800.
How the 768 ends up in the detection is probably something for the i810
driver developers to figure out.


Changed to 1280x800, but no help.

The diff between previous Xorg.0.log and the present is:
15c15
 (==) Log file: /var/log/Xorg.0.log, Time: Tue Nov 11 14:18:44 2008
---


(==) Log file: /var/log/Xorg.0.log, Time: Tue Nov 11 13:20:39 2008


2033c2033
 (II) I810(0): Not using mode 1280x800 (no mode of this name)
---


(II) I810(0): Not using mode 1280x768 (no mode of this name)


2122,2124c2122,2124
 (II) I810(0): Allocated 4 kB for HW cursor at 0x000 (0x07b99000)
 (II) I810(0): Allocated 16 kB for HW (ARGB) cursor at 0xfffb000
(0x07b9c000)  (II) I810(0): Allocated 4 kB for Overlay registers at
0xfffa000 (0x07b9a000). ---


(II) I810(0): Allocated 4 kB for HW cursor at 0x000 (0x0779)
(II) I810(0): Allocated 16 kB for HW (ARGB) cursor at 0xfffb000
(0x07794000) (II) I810(0): Allocated 4 kB for Overlay registers at
0xfffa000 (0x07791000).


not pretty much, execept that it neither accepts 1280x800

On that portable WinXP lets me choose between 1280x768, 1024x768, 800x600
and SuSE Linux 10.1 between exactly the same, plus 640x480...


I think this accurately describes your problem:
http://mandrivaonadellx1.50webs.com/display.htm
--
Mel

Problem with today's modular software: they start with the modules
   and never get to the software part.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Disallowing ssl2

2008-11-11 Thread John Almberg

On Nov 11, 2008, at 8:50 AM, John Almberg wrote:

My server got an audit for PCI compliance and was red-flagged for  
allowing SSL2 connections, which they have some problem with. They  
want the server to use SSL3 or TLS:


Synopsis : The remote service encrypts traffic using a protocol  
with known weaknesses. Description : The remote service accepts  
connections encrypted using SSL 2.0, which reportedly suffers from  
several cryptographic flaws and has been deprecated for several  
years. An attacker may be able to exploit these issues to conduct  
man-in-the-middle attacks or decrypt communications between the  
affected service and clients. See also : http://www.schneier.com/ 
paper-ssl.pdf Solution: Consult the application's documentation to  
disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. See http:// 
support.microsoft.com/kb/216482 for instructions on IIS. See http:// 
httpd.apache.org/docs/2.0/mod/mod _ssl.html for Apache. Risk  
Factor: Medium  / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/ 
B:N) 


They want me to do this for https, imaps, and pop3s protocols...

Before I dig into this, I was wondering, is this even possible?  
Will anything break as a result?




Answering my own question (always the best way! :-)

I've figured out how to do this on Apache... Replaced the default  
SSLCipherSuite directive with the following:


SSLCipherSuite TLSv1:!ADH:!EXP:!NULL:!MD5:!LOW:+HIGH:+MEDIUM

This seems to work, although I guess all those Netscape 4 users are  
going to have to shop else where...


On to IMAPS and POP3S...

-- John

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problem With FreeBSD 7.0 installation on soekris

2008-11-11 Thread Denis Beltramo
Hello,

I have a problem with installation of FreeBSD 7.0 on soekris.
I use pxeboot.
The installation go up but when arrive loader logo, the loader don't
go, i don't see the logo and isntallation stop.the prompt is
blocked.
Do you have suggestion?

thanks.

-- 
Denis Beltramo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Gautham Ganapathy
On Tue, Nov 11, 2008 at 6:13 PM, Mel
[EMAIL PROTECTED] wrote:
 On Tuesday 11 November 2008 13:28:53 Pieter Donche wrote:
 On Tue, 11 Nov 2008, Mel wrote:
  On Tuesday 11 November 2008 12:12:06 Pieter Donche wrote:
  On the same portable there is also a SUSE Linux 10.1 and WinXP, which
  works in 1280x768 (so the hardware can use this resolution)
 
  In /var/log/Xorg.0.log is see many references to 1280x768 for the 'local
  flat panel' , PanelID returned panel resolution: 1280x768, also
  Printing DDC gathered Modelines:
  3 lines
  (||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers and
  a KhZ to end)
  follewed y
  Mode: 30 (640x480)
 (specifications)
  diffenrent Mode sections but 1024x768 at the highest
  ..
  (||) |810(0): Not using mode 1280x768i (no mode of that name)
 
^^^
  If this is accurate, you seem to have a trailing letter 'i' in your
  xorg.conf that invalidates the mode line.
 
  And you're using an Intel 810 integrated graphics card. Sadly, that
  doesn't come with probing tool that I know of that would print the
  information the card and monitor exchange about syncrates and display
  sizes.
 
  Rule out the typo first though.
 
  I have a vague recollection of this card putting 1024x768 before 1280x768
  in the mode list it returns, so that it defaults to 1024x768, but I'm not
  sure where or when I read that. Either way, hardcoding the desired
  modeline (without typos) in xorg.conf should work.
  If there was no typo, please paste your entire xorg.conf into the mail.
  We may be missing something obvious.
  --
  Mel
 
  Problem with today's modular software: they start with the modules
 and never get to the software part.

 There was only a typo in my mail, not in xorg.conf..

 In included below my xorg.conf file and the Xorg.0.log

 Rearranging for clarity:

 --
 xorg.conf
 --


 Section Screen
   Identifier Screen0
   Device Card0
   MonitorMonitor0
   SubSection Display
   Viewport   0 0
   Depth 1
   Modes 1280x768
   EndSubSection


 (II) I810(0): Supported Future Video Modes:
 (II) I810(0): #0: hsize: 1280  vsize 800  refresh: 60  vid: 129

 I was already wondering why a card would report 1280x768, it's not the
 standard for that width, 1280x800 is. Try changing the modes to 1280x800. How
 the 768 ends up in the detection is probably something for the i810 driver
 developers to figure out.
 --
 Mel

 Problem with today's modular software: they start with the modules
and never get to the software part.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


I used to get a somewhat similar problem on my laptop which has a
resolution of 1440x900. It was initially setup through xorgconfig as
1024x768 with the nv driver, but the fonts looked extremely blurred.
When I manually set the resolution to 1440x900, X gave an error that
there were no available modes to match this resolution. Finally, I had
to switch to the nvidia binary driver (after removing freebsd amd64
and installing i386) , which accepted this resolution.

Perhaps, there is a more specific driver for that chipset than the i810 driver?



-- 
Gautham Ganapathy
http://lisphacker.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Jeremy Chadwick
On Tue, Nov 11, 2008 at 08:25:51PM +0100, Pieter Donche wrote:
 If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
 happens. On the same laptop in the SuSE 10.1 partition, the same USB
 stick appears in Konqueror under Storage Media  and is ready to use)
 In FreeBSD, Konqueror shows nothing under Storage Media.
 Is this normal?

What shows up in your kernel message log (outside of X, usually on the
first virtual console) when you insert the stick?  It should show a
umass device being added, then a daX device being added.

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Polytropon
On Tue, 11 Nov 2008 12:27:55 +0100, Mel [EMAIL PROTECTED] wrote:
 I have a vague recollection of this card putting 1024x768 before 1280x768 in 
 the mode list it returns, so that it defaults to 1024x768, but I'm not sure 
 where or when I read that. Either way, hardcoding the desired modeline 
 (without typos) in xorg.conf should work.

There's an additional means of force to explicitely request
a certain mode: 

Option  PreferredMode 1280x768

I think it should be placed into the section Monitor. maybe
this helps, but it can also block the machine (I had this).



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD and USBmemorystick

2008-11-11 Thread Pieter Donche

If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
happens. On the same laptop in the SuSE 10.1 partition, the same USB
stick appears in Konqueror under Storage Media  and is ready to use)
In FreeBSD, Konqueror shows nothing under Storage Media.
Is this normal?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mtree

2008-11-11 Thread Dan Nelson
In the last episode (Nov 10), Garcia, Tony said:
 Another developer received approval to test mtree for our project. 
 He has since left and no one knows anything about this application. 
 We are looking at mtree as a way to provide auditing of machines for
 permissions, ownership and date changes as well as performing cksum
 on each file.  Is there any way you can point me to documentation
 that gives me a high and low level of what mtree can do.  I've tried
 compiling the version that was downloaded, but it fails because it
 needs other files which are not present (like .h files).
 
 I'd appreciate any help you can provide.  The google returns are far
 too numerous to make heads or tails from.  I also have checked the
 freebsd info but I can't find any documentation.  Thank you.

Manpage: http://www.freebsd.org/cgi/man.cgi?query=mtree

Here's a blog entry that explains how to use it as a file verification
tool:

http://blogs.techrepublic.com.com/security/?p=283
Use mtree for filesystem integrity auditing

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Polytropon
On Tue, 11 Nov 2008 19:48:51 +0800, Fbsd1 [EMAIL PROTECTED] wrote:
 Startx works ok so not xorg problem. Next question is are the xdm 
 configuration files suppose to work as delivered by the port install AS IS?
 As a default config demo?

Ha - xdm configuration files memory flash ahead! :-)

Go check them. They are located in /usr/local/lib/X11/xdm. I have
two modified files:

lrwxr-xr-x  1 root  wheel  23 Mar 18  2008 Xresources@ - 
/etc/X11/xdm/Xresources
lrwxr-xr-x  1 root  wheel  23 Mar 18  2008 xdm-config@ - 
/etc/X11/xdm/xdm-config

(It's in /etc for custom lazyness, but you can make changes to the
files in the original xdm directory if you want.)

But I think you didn't change these files, so everything should still
be the standard settings... so I need to say, this would not
be the source of the problem...

If I just knew how I solved the problem you're describing... I
really had this once, and I think the solution was very simple,
allthough it wasn't obvious, and maybe had nothing to do with X...

After all, the obervation indicate that X isn't started
correctly for xdm, but what surprises me is that X is started
correctly from a regular user's account...

Mysterious...
VEB Mysteron Merkwürdigkeitenwerk Karl-Marx-Stadt... :-)



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Pieter Donche

On Tue, 11 Nov 2008, Jeremy Chadwick wrote:


On Tue, Nov 11, 2008 at 08:25:51PM +0100, Pieter Donche wrote:

If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
happens. On the same laptop in the SuSE 10.1 partition, the same USB
stick appears in Konqueror under Storage Media  and is ready to use)
In FreeBSD, Konqueror shows nothing under Storage Media.
Is this normal?


What shows up in your kernel message log (outside of X, usually on the
first virtual console) when you insert the stick?  It should show a
umass device being added, then a daX device being added.


There are indeed messages:
umass0: M-SysT5 Dell Memory Key, class ...  on uhub4
da0: at umass-sim0 ...
..
da0: 60 Mb   (OK, it is a 64 Mb key)
GEOM_LABEL: Label for provider da0s1 is msdosfs/USB MEMORY

also when unplugging, some messages

$ ls -la /dev/da0s1 
shows only the character device line



--
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Mel
On Tuesday 11 November 2008 20:25:51 Pieter Donche wrote:
 If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
 happens. On the same laptop in the SuSE 10.1 partition, the same USB
 stick appears in Konqueror under Storage Media  and is ready to use)
 In FreeBSD, Konqueror shows nothing under Storage Media.
 Is this normal?

This requires HAL-support with KDE and the KDE MEdia Manager enabled in the 
system services. It's fragile to get working and often requires extensive 
knowledge of HAL, dbus and policykit. This is where PC-BSD can be seen as 
SuSE for linux, as it has configured all these things to work out of the box, 
that normally a FreeBSD system administrator would set up.

Alternatively, one can use the desktopbsd-tools from the ports to add some GUI 
system tray apps, among which a removable media manager.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread matt donovan
On Tue, Nov 11, 2008 at 2:29 PM, Jeremy Chadwick [EMAIL PROTECTED] wrote:

 On Tue, Nov 11, 2008 at 08:25:51PM +0100, Pieter Donche wrote:
  If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
  happens. On the same laptop in the SuSE 10.1 partition, the same USB
  stick appears in Konqueror under Storage Media  and is ready to use)
  In FreeBSD, Konqueror shows nothing under Storage Media.
  Is this normal?

 What shows up in your kernel message log (outside of X, usually on the
 first virtual console) when you insert the stick?  It should show a
 umass device being added, then a daX device being added.

 --
 | Jeremy Chadwickjdc at parodius.com |
 | Parodius Networking   http://www.parodius.com/ |
 | UNIX Systems Administrator  Mountain View, CA, USA |
 | Making life hard for others since 1977.  PGP: 4BD6C0CB |

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]


yes that is normal, think Pieter is talking about Hal being enabled for
konqueror
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: root /etc/csh

2008-11-11 Thread Jerry McAllister
On Mon, Nov 10, 2008 at 04:13:54PM -0800, Jim Pazarena wrote:

 Glen Barber wrote:
 On Mon, Nov 10, 2008 at 4:46 PM, Pieter Donche [EMAIL PROTECTED] 
 wrote:
 FreeBSD 7.0 comes with the user root with start up shell /bin/csh
 As normal user I use bash (/usr/local/bin/bash installed)
 I would prefer to have bash also when working as root (su).
 
 It is never recommended to change root's default shell to something
 outside of the base install.
 
 The main reason is, for example, if you update your non-base shell
 (via ports), and it breaks, you can no longer log in as root.  If you
 decide you still want to have a non-base shell for your root user,
 keep root's shell default, and enable your toor user.
 
 isn't the main reason because other shells may reside on a filesystem
 which isn't necessarily mounted in maintenance/single user mode? Or, 
 libraries
 for the same?

Probably is the main reason, though another is that some things
may be written assuming a particular shell.  Not a good practice,
but happens.

jerry

 -- 
 Jim Pazarena  [EMAIL PROTECTED]
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file harvest

2008-11-11 Thread Roland Smith
On Tue, Nov 11, 2008 at 10:59:58AM -0500, Jean-Paul Natola wrote:
 Since I cannot ssh into the snap,  can I mount it to my BSD box and run some
 of those utilities?
 
It seems that SnapOS uses a modified UFS. See 
http://www.dtidata.com/resourcecenter/category/file-systems-explained/snap-server-file-systems/

I quote: 

SNAP Appliance used a proprietary Unix File System (UFS) handler in
 order to run there Network Attached Storage (NAS) product. This
 particular OS ran a Berkley Software Distribution (BSD) flavor of
 UFS. Although there are many similarities to the original file system,
 there are also enough changes to make file recovery extremely
 difficult.

So you could try putting it in a FreeBSD box, use dd to make an image of
the whole disk, and experiment on that image. But maybe you should
contact dtidata. They seem to know a lot about this appliance.

Alternatively, does the web interface provide a means to run a fsck?
That might be the best solution.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpRPqEFG5c0i.pgp
Description: PGP signature


Re: Using grep to search a repository

2008-11-11 Thread Frédéric Perrin
Le Mardi 11 à 19:36, Mel a écrit :
 On Tuesday 11 November 2008 19:17:28 Aggelidis Nikos wrote:
 Hi to all the list,

 i have a project with a lot of bash scripts in a folder hierarchy.I
 haven't wrote the project myself so many times i have to search for
 the definition of a function. For this purpose i decided to use grep
 {recursively}.
 The problem is that the project is an svn repository... so grep
 returns results from .svn and it is really messes up the outcome of
 grep. I tried bypassing the problem using the `--exclude=file_pattern'
 but since its use is for files not directories it doesn't work So
 the questions are:

 1) Can i bypass certain directories{i.e. '.svn' or 'log/'}, using
 grep? {or a combination of tools + grep}

 man find(1), specifically -path and -exec arguments. Example:

 find . -type f \( \! -path '*/.svn/*' -a \! -path '*/log/*' \) \
   -exec grep foo {} +

FWIW, when doing a similar search, the command built by emacs is (a
longer version of) the following :

find . \( -path \*/.svn -o -path \*/log \) -prune -o -type f \( -name
\*.sh\* \) -exec grep -i -nH -e pattern {} /dev/null \;

Isn't -path .svn -prune more efficient than ! -path .svn? I mean,
with the second one, won't find also descend into .svn folders, only to
find that all files have a path containing .svn?

-- 
Fred
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Using grep to search a repository

2008-11-11 Thread Mel
On Tuesday 11 November 2008 19:17:28 Aggelidis Nikos wrote:
 Hi to all the list,

 i have a project with a lot of bash scripts in a folder hierarchy.I
 haven't wrote the project myself so many times i have to search for
 the definition of a function. For this purpose i decided to use grep
 {recursively}.
 The problem is that the project is an svn repository... so grep
 returns results from .svn and it is really messes up the outcome of
 grep. I tried bypassing the problem using the `--exclude=file_pattern'
 but since its use is for files not directories it doesn't work So
 the questions are:

 1) Can i bypass certain directories{i.e. '.svn' or 'log/'}, using
 grep? {or a combination of tools + grep}

man find(1), specifically -path and -exec arguments. Example:

find . -type f \( \! -path '*/.svn/*' -a \! -path '*/log/*' \) \
-exec grep foo {} +

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Question on creating a video server

2008-11-11 Thread Bob McConnell
-Original Message-
On Behalf Of Drew Tomlinson
 Ted Mittelstaedt wrote:
 Hi All,

   OK, I'm just asking for opinions here on some application
 software.

   Like most people we have a nice big 21 TV set that will be
 obsolete in Feb.  I have been thinking about replacing this with a
 big screen TV set but the prices on them are still way, way
 way out of my budget (I just can't see spending $500 for
 a TV set, sorry)
...
   Has anyone done this with FreeBSD and open source
 software, and has recommendations on what hardware to get
 and what software works with it?
 
 I've read the thread and have to vote for a Linux install and MythTV.

 It will do everything you require rather well.  I started down the
FBSD 
 path for a PVR and quickly ran into trouble back in 2006.  From what I

 understand, it hasn't gotten much better due to the driver issues.  
 Anyway, next I tried building MythTV on Fedora Core as it seemed to be
a 
 popular platform and Jerrod Wilson had a nice guide.  Being from the 
 FBSD world where the ports system worked so well, I quickly found
myself 
 in rpm hell, especially when Fedora Core didn't support my SCSI card

 at the time.  I found a nice home with Gentoo Linux as it's portage 
 system is much like ports.

This is strange. Time-Warner cable has already told us we don't need to
replace any of our TV sets. They will continue to work just fine. Since
there are no over the air channels available in our area, we aren't
affected by the switch to digital. But then we've always known that
Ithaca (NY) is centrally isolated. B-)

I would suggest taking a look at Mythdora (Myth TV on Fedora) I have
been using it for nearly a year now, with a Hauppauge PVR-350 card. The
CPU is an Intel dual core with 2G RAM and a 250 GB SATA drive. If you
want automatic scheduling, it does require a paid subscription to one of
the online schedule services. I don't use that, so I don't recall the
name right now.

It automatically records programs while you view them. This is so the
pause, rewind and slow motion features will work. Recorded and viewed
programs are stored as MP4 files, taking about 2.2 GB per hour. It will
automatically delete recorded files after 24 hours, or not, your choice
when you schedule the recording. vlc works very well for playback.

I have also set up samba on it, so I can read and write files over my
home network. Yes, I can set up and monitor it remotely. It installed
Apache and a handful of web pages with full access to the scheduler.
There is also an option for an IR remote control. The PVR-350 can output
to a standard analog TV if you don't like the smaller computer display.
There is a separate antenna input for FM radio. I haven't played with
that one.

My only significant complaint is that it requires MySQL. I would prefer
PostgreSQL, since that is less proprietary and one of the systems I deal
with at work.

Bob McConnell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Question on creating a video server

2008-11-11 Thread Dieter
[ This discussion is probably better suited for -multimedia@
than -questions@ ]

 I can pick up really high quality, large, old-style video monitors
 from a computer surplus place near here for next to nothing.

If these were for workstations rather than pee-cees, they might be
composite sync or sync-on-green, and some video cards do not support
them.  :-(

Some video cards have s-video out.

There are boxes available that convert VGA to NTSC.  I don't
know how well they work.

Note that decoding high definition video needs a lot of cpu if
you are decoding in the cpu.  Having Xv and XvMC offloads some
of the work to the video card.  I'm not aware of FreeBSD having
support for these.  :-(  If it does, someone please let us know.
OpenBSD 4.4 has a openchrome driver which claims Xv and XvMC.
http://www.openbsd.org/cgi-bin/man.cgi?query=openchromesektion=4

Note that *recording* digital TV takes vary little cpu, and isn't
a problem for modern disks.  It is decoding for playback that is
the problem.  Recording analog TV requires encoding, which requires
a lot of cpu, or a hardware encoder.  Digital TV is encoded at
the TV station.

If you have a DV camcorder you can convert the OTA mpeg2ts to DV
format with ffmpeg, then ship it to the camcorder with firewire
and the camcorder will convert it to NTSC and drive your TV.

There are Ethernet-to-TV boxes.  These have problems/limitations,
so do your research and make sure it does everything you want
and isn't buggy.  If someone knows of one that works well with BSD
and does a good job with freeze/slow/fast effects, I'd like to hear
about it.

If there are other methods of getting video from a BSD box to a TV,
someone please let us know.

 I'd like to setup a PC and put a HDTV tuner card in it for
 over-the-air HDTV broadcasts, and use that as a TV.

Couple of advantages to this method: computer tuners tend to provide
more info which can be useful when debugging reception problems,
and computer tuners give you recording capability like a VCR.

For tuners, first decide if you want PCI card, PCIe card, Ethernet,
Firewire, USB.  Then see what you can find a BSD driver for.
Ethernet doesn't need a special device driver, assuming you have Ethernet.
Not sure about Firewire tuners.  For PCI cards, there are FreeBSD drivers
by John-Mark Gurney and Jason Harmening.  Anish Mistry was/is working on a
USB driver, I don't know what the current status is.

Most computer tuners are PCI, but newer computers come with fewer and
fewer PCI slots.  They are even building mainboards with zero PCI slots
(PCIe only).  So Ethernet, Firewire and USB tuners have an advantage
of not needing a PCI slot.  They will even work with laptops.  And
you can have several tuners for those times when they schedule 4-5
good shows all at the same time (rare but it happens).

Beware that the very small tuners without the tin can RF tuner
are likely to have more reception problems than a tuner with a
proper tin can RF tuner.

ATSC reception does not degrade gracefully like NTSC.  And there isn't
enough safety factor.  So get the best antennas you can find, and
good quality well shielded coax.  Having more than one make/model of
tuner can be helpful.  For UHF you might need to try both an 8-bay and
a yagi antenna.  (The don't make 8-bay for VHF, they would be way too
large.)

Software: mplayer, xine, ffmpeg, and so on.  Jason Harmening's cx88
driver comes with an app for recording.  You can schedule recordings
with at(1).  If you like the giant bloatware approach there is myth.

 We also have a ton of DVD's and I'd like to rip these to video files
 and put them on the PC.

Then you will need a ton of disk space.  If you like to archive
TV shows you will need a ton of disk space.

} Why not just get a digital converter and keep using your nice TV?

Pro: these supposedly have the newest and best demodulator chips
which should mean better reception, but don't count on it.  There
is more to these things than just the demod chip.

Cons: if you want to record, you'd have to kludge something up.
If your TV suffers from dot-crawl, you'll want s-video rather than
composite or RF, and CECBs with s-video are rare.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Using grep to search a repository

2008-11-11 Thread Mel
On Tuesday 11 November 2008 20:56:41 Frédéric Perrin wrote:
 Le Mardi 11 à 19:36, Mel a écrit :
  On Tuesday 11 November 2008 19:17:28 Aggelidis Nikos wrote:
  Hi to all the list,
 
  i have a project with a lot of bash scripts in a folder hierarchy.I
  haven't wrote the project myself so many times i have to search for
  the definition of a function. For this purpose i decided to use grep
  {recursively}.
  The problem is that the project is an svn repository... so grep
  returns results from .svn and it is really messes up the outcome of
  grep. I tried bypassing the problem using the `--exclude=file_pattern'
  but since its use is for files not directories it doesn't work So
  the questions are:
 
  1) Can i bypass certain directories{i.e. '.svn' or 'log/'}, using
  grep? {or a combination of tools + grep}
 
  man find(1), specifically -path and -exec arguments. Example:
 
  find . -type f \( \! -path '*/.svn/*' -a \! -path '*/log/*' \) \
  -exec grep foo {} +

 FWIW, when doing a similar search, the command built by emacs is (a
 longer version of) the following :

 find . \( -path \*/.svn -o -path \*/log \) -prune -o -type f \( -name
 \*.sh\* \) -exec grep -i -nH -e pattern {} /dev/null \;

 Isn't -path .svn -prune more efficient than ! -path .svn? I mean,
 with the second one, won't find also descend into .svn folders, only to
 find that all files have a path containing .svn?

Yes, you are correct. It's merely habit that I use ! -path vs -prune.

Tip:
The microseconds you win by using prune are insignificant to the minutes you 
add by ending with a semicolon, rather then a + sign.
With a semi-colon, a fork is done for each positive match. With a plus sign 
matches are bundled till the max command length is met.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Mel
On Tuesday 11 November 2008 12:12:06 Pieter Donche wrote:
 On the same portable there is also a SUSE Linux 10.1 and WinXP, which works
 in 1280x768 (so the hardware can use this resolution)

 In /var/log/Xorg.0.log is see many references to 1280x768 for the 'local
 flat panel' , PanelID returned panel resolution: 1280x768, also
 Printing DDC gathered Modelines:
 3 lines
 (||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers and
 a KhZ to end)
 follewed y
 Mode: 30 (640x480)
(specifications)
 diffenrent Mode sections but 1024x768 at the highest
 ..
 (||) |810(0): Not using mode 1280x768i (no mode of that name)
   ^^^
If this is accurate, you seem to have a trailing letter 'i' in your xorg.conf 
that invalidates the mode line.

And you're using an Intel 810 integrated graphics card. Sadly, that doesn't 
come with probing tool that I know of that would print the information the 
card and monitor exchange about syncrates and display sizes.

Rule out the typo first though.

I have a vague recollection of this card putting 1024x768 before 1280x768 in 
the mode list it returns, so that it defaults to 1024x768, but I'm not sure 
where or when I read that. Either way, hardcoding the desired modeline 
(without typos) in xorg.conf should work.
If there was no typo, please paste your entire xorg.conf into the mail. We may 
be missing something obvious.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Mel
On Tuesday 11 November 2008 14:34:52 Pieter Donche wrote:
 On Tue, 11 Nov 2008, Mel wrote:
  On Tuesday 11 November 2008 13:28:53 Pieter Donche wrote:
  On Tue, 11 Nov 2008, Mel wrote:
  On Tuesday 11 November 2008 12:12:06 Pieter Donche wrote:
  On the same portable there is also a SUSE Linux 10.1 and WinXP, which
  works in 1280x768 (so the hardware can use this resolution)
 
  In /var/log/Xorg.0.log is see many references to 1280x768 for the
  'local flat panel' , PanelID returned panel resolution: 1280x768, also
  Printing DDC gathered Modelines:
  3 lines
  (||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers
  and a KhZ to end)
  follewed y
  Mode: 30 (640x480)
 (specifications)
  diffenrent Mode sections but 1024x768 at the highest
  ..
  (||) |810(0): Not using mode 1280x768i (no mode of that name)
 
^^^
  If this is accurate, you seem to have a trailing letter 'i' in your
  xorg.conf that invalidates the mode line.
 
  And you're using an Intel 810 integrated graphics card. Sadly, that
  doesn't come with probing tool that I know of that would print the
  information the card and monitor exchange about syncrates and display
  sizes.
 
  Rule out the typo first though.
 
  I have a vague recollection of this card putting 1024x768 before
  1280x768 in the mode list it returns, so that it defaults to 1024x768,
  but I'm not sure where or when I read that. Either way, hardcoding the
  desired modeline (without typos) in xorg.conf should work.
  If there was no typo, please paste your entire xorg.conf into the mail.
  We may be missing something obvious.
  --
  Mel
 
  Problem with today's modular software: they start with the modules
 and never get to the software part.
 
  There was only a typo in my mail, not in xorg.conf..
 
  In included below my xorg.conf file and the Xorg.0.log
 
  Rearranging for clarity:
  --
  xorg.conf
  --
 
 
  Section Screen
 Identifier Screen0
 Device Card0
 MonitorMonitor0
 SubSection Display
 Viewport   0 0
 Depth 1
 Modes 1280x768
 EndSubSection
 
 
  (II) I810(0): Supported Future Video Modes:
  (II) I810(0): #0: hsize: 1280  vsize 800  refresh: 60  vid: 129
 
  I was already wondering why a card would report 1280x768, it's not the
  standard for that width, 1280x800 is. Try changing the modes to 1280x800.
  How the 768 ends up in the detection is probably something for the i810
  driver developers to figure out.

 Changed to 1280x800, but no help.

 The diff between previous Xorg.0.log and the present is:
 15c15
  (==) Log file: /var/log/Xorg.0.log, Time: Tue Nov 11 14:18:44 2008
 ---

  (==) Log file: /var/log/Xorg.0.log, Time: Tue Nov 11 13:20:39 2008

 2033c2033
  (II) I810(0): Not using mode 1280x800 (no mode of this name)
 ---

  (II) I810(0): Not using mode 1280x768 (no mode of this name)

 2122,2124c2122,2124
  (II) I810(0): Allocated 4 kB for HW cursor at 0x000 (0x07b99000)
  (II) I810(0): Allocated 16 kB for HW (ARGB) cursor at 0xfffb000
 (0x07b9c000)  (II) I810(0): Allocated 4 kB for Overlay registers at
 0xfffa000 (0x07b9a000). ---

  (II) I810(0): Allocated 4 kB for HW cursor at 0x000 (0x0779)
  (II) I810(0): Allocated 16 kB for HW (ARGB) cursor at 0xfffb000
  (0x07794000) (II) I810(0): Allocated 4 kB for Overlay registers at
  0xfffa000 (0x07791000).

 not pretty much, execept that it neither accepts 1280x800

 On that portable WinXP lets me choose between 1280x768, 1024x768, 800x600
 and SuSE Linux 10.1 between exactly the same, plus 640x480...

I think this accurately describes your problem:
http://mandrivaonadellx1.50webs.com/display.htm
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Disallowing ssl2

2008-11-11 Thread Matthew Seaman

-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

John Almberg wrote:
| My server got an audit for PCI compliance and was red-flagged for
| allowing SSL2 connections, which they have some problem with. They want
| the server to use SSL3 or TLS:
|
| Synopsis : The remote service encrypts traffic using a protocol with
| known weaknesses. Description : The remote service accepts connections
| encrypted using SSL 2.0, which reportedly suffers from several
| cryptographic flaws and has been deprecated for several years. An
| attacker may be able to exploit these issues to conduct
| man-in-the-middle attacks or decrypt communications between the affected
| service and clients. See also : http://www.schneier.com/paper-ssl.pdf
| Solution: Consult the application's documentation to disable SSL 2.0 and
| use SSL 3.0 or TLS 1.0 instead. See
| http://support.microsoft.com/kb/216482 for instructions on IIS. See
| http://httpd.apache.org/docs/2.0/mod/mod _ssl.html for Apache. Risk
| Factor: Medium  / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) 
|
| They want me to do this for https, imaps, and pop3s protocols...
|
| Before I dig into this, I was wondering, is this even possible? Will
| anything break as a result?

It's certainly possible to insist on SSLv3 or TLSv1 for SSL connections,
and nothing[*] will break.  The client and server will negotiate to find a
mutually acceptable cipher and protocol level at the point of making the
connection.

For apache2 the magic wording is:

~SSLProtocol all -SSLv2

Note that this is conceptually distinct from choosing the cipher to use --
many of the SSLv2 ciphers are also available under SSLv3, but there's a
structural  problem SSLv2 which means a cipher perfectly acceptable under
v3 can be broken under v2.

Even so, there are a bunch of pretty useless ciphers our there,  Anything
with a key length less than about 40bits is essentially trivially
crackable nowadays using a desktop PC.  56bit is crackable to someone with
the resources of the NSA.  To control the ciphers Apache allows, use
something like:

~   SSLCipherSuite RSA:!EXP:!NULL:-SSLv2:+HIGH:+MEDIUM:-LOW

This can combine choosing the protocol level with choosing the allowable
ciphers into one handy string, if you include the appropriate terms, and
if done that way means you don't also need the 'SSLProtocol' item above.

Most applications that use openssl to provide crypto will let you enter
a string like that somewhere.  You can see what Ciphers a cipher-spec
equates to by eg.:

% openssl ciphers -ssl3  -v 'RSA:\!EXP:\!NULL:-SSLv2:+HIGH:+MEDIUM:-LOW'
CAMELLIA256-SHA SSLv3 Kx=RSA  Au=RSA  Enc=Camellia(256) Mac=SHA1
CAMELLIA128-SHA SSLv3 Kx=RSA  Au=RSA  Enc=Camellia(128) Mac=SHA1
AES256-SHA  SSLv3 Kx=RSA  Au=RSA  Enc=AES(256)  Mac=SHA1
AES128-SHA  SSLv3 Kx=RSA  Au=RSA  Enc=AES(128)  Mac=SHA1
DES-CBC3-SHASSLv3 Kx=RSA  Au=RSA  Enc=3DES(168) Mac=SHA1
RC4-SHA SSLv3 Kx=RSA  Au=RSA  Enc=RC4(128)  Mac=SHA1
RC4-MD5 SSLv3 Kx=RSA  Au=RSA  Enc=RC4(128)  Mac=MD5

This setting is known to work well with recent versions of  Firefox and
IE.  The ciphers(1) man page will give you the gory details.

Exactly how and where you specify the Cipher string depends on the
software you're using.  So, for example, adding the fillowing to
imapd.conf will achieve the required effect with Cyrus IMAPd:

tls_cipher_list:  RSA:!EXP:!NULL:-SSLv2:+HIGH:+MEDIUM:-LOW

Cheers,

Matthew

[*] Probably.

- --
Dr Matthew J Seaman MA, D.Phil.   Flat 3
~  7 Priory Courtyard
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
~  Kent, CT11 9PW, UK
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEAREDAAYFAkkZm2EACgkQ3jDkPpsZ+VZcUACfX3ftpuP5Y73KJR0EFTPunmXi
s3QAnjT7+P6+ns9gT+/ayk+UWyMbfvcO
=d1iO
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


qmail on debian to qmail on freebsd

2008-11-11 Thread Sollunga S
Hi all 

Greetings to all, this is my first time installation of freebsd, i am going to 
use this installation for my mail server obviously qmail+ldap. I have a bit of 
fear to go ahead on it, can anyone clarify please?

Previous Qmail installation is on debian 3.x and the installation is based on 
http://www.shupp.org/toaster/,

Now i want to move to a better hardware and ofcourse updated user friendly and 
uptodate OS. here i opted for freebsd and qmail 1.03 along with this i want to 
meet users addressbook issue, so i thought of going behind ldap and mysql, 
(guide me if i am wrong). My doubts are earlier the Mailbox and the cleartext 
vpasswd are bit scaring me, so i would like to use mysql in place 
without disturbing any of the users mail addresses, ( i have close to 32gb of 
data's in mailbox's and some mailing list+forwards). also would like to procure 
password change option securely. How can i make this migration smoothly with 
the help of freebsd?

please



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Mel
On Tuesday 11 November 2008 13:28:53 Pieter Donche wrote:
 On Tue, 11 Nov 2008, Mel wrote:
  On Tuesday 11 November 2008 12:12:06 Pieter Donche wrote:
  On the same portable there is also a SUSE Linux 10.1 and WinXP, which
  works in 1280x768 (so the hardware can use this resolution)
 
  In /var/log/Xorg.0.log is see many references to 1280x768 for the 'local
  flat panel' , PanelID returned panel resolution: 1280x768, also
  Printing DDC gathered Modelines:
  3 lines
  (||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers and
  a KhZ to end)
  follewed y
  Mode: 30 (640x480)
 (specifications)
  diffenrent Mode sections but 1024x768 at the highest
  ..
  (||) |810(0): Not using mode 1280x768i (no mode of that name)
 
^^^
  If this is accurate, you seem to have a trailing letter 'i' in your
  xorg.conf that invalidates the mode line.
 
  And you're using an Intel 810 integrated graphics card. Sadly, that
  doesn't come with probing tool that I know of that would print the
  information the card and monitor exchange about syncrates and display
  sizes.
 
  Rule out the typo first though.
 
  I have a vague recollection of this card putting 1024x768 before 1280x768
  in the mode list it returns, so that it defaults to 1024x768, but I'm not
  sure where or when I read that. Either way, hardcoding the desired
  modeline (without typos) in xorg.conf should work.
  If there was no typo, please paste your entire xorg.conf into the mail.
  We may be missing something obvious.
  --
  Mel
 
  Problem with today's modular software: they start with the modules
 and never get to the software part.

 There was only a typo in my mail, not in xorg.conf..

 In included below my xorg.conf file and the Xorg.0.log

Rearranging for clarity:

 --
 xorg.conf
 --


 Section Screen
   Identifier Screen0
   Device Card0
   MonitorMonitor0
   SubSection Display
   Viewport   0 0
   Depth 1
   Modes 1280x768
   EndSubSection


 (II) I810(0): Supported Future Video Modes:
 (II) I810(0): #0: hsize: 1280  vsize 800  refresh: 60  vid: 129

I was already wondering why a card would report 1280x768, it's not the 
standard for that width, 1280x800 is. Try changing the modes to 1280x800. How 
the 768 ends up in the detection is probably something for the i810 driver 
developers to figure out.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: file harvest

2008-11-11 Thread Jean-Paul Natola
Since I cannot ssh into the snap,  can I mount it to my BSD box and run some
of those utilities?

-Original Message-
From: Polytropon [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, November 11, 2008 12:29 AM
To: Jean-Paul Natola
Cc: FreeBSD Questions
Subject: Re: file harvest

On Mon, 10 Nov 2008 12:53:38 -0500, Jean-Paul Natola
[EMAIL PROTECTED] wrote:
 Question is how can I, if it all possible, do a harvest of my own?

Hah, you're asking the right one, man. :-)

There are many good tools available from the ports, some of them can
even be used for diagnostics and recovery on UFS file systems. The
most famous one is The Sleuth Kit, another useful tool is magicrescue.

Try and see if they are helpful to you. Good luck!



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Fbsd1
Next question is are the xdm 
configuration files suppose to work as delivered by the port install AS IS?

As a default config demo?


Yes. When I said 'range', I did mean range. Not 2 possibilities. Missing 
libraries, tainted environment, typos, tied up resources, tight security 
settings, existing pid file, xdm not being xdm but an aliased command or 
shell script sooner up in the path - that's just from the top of my head.





I installed xorg as a package. Then installed xfce package. Made no 
config changes to xorg or the xdm config files. At this point i suspect 
the port of xorg as not being configured correctly. That the default xdm 
config files have statement error causing xdm not to function.


So the big question is has anybody installed the release 7.1 package 
version of xorg and was able to get xdm to function without any config 
file changes?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Pieter Donche

On the same portable there is also a SUSE Linux 10.1 and WinXP, which works
in 1280x768 (so the hardware can use this resolution)

In /var/log/Xorg.0.log is see many references to 1280x768 for the 'local
flat panel' , PanelID returned panel resolution: 1280x768, also
Printing DDC gathered Modelines:
3 lines
(||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers and
a KhZ to end)
follewed y
Mode: 30 (640x480)
  (specifications)
diffenrent Mode sections but 1024x768 at the highest
..
(||) |810(0): Not using mode 1280x768i (no mode of that name)
(--) |810(0): Virtual size is 1024x768 (pitch 1024)
(**) |810(0):  Built-in mode 1024x768
(**) |810(0): Display dimensions: (260,160) mm
(**) |810(0): DPI set to (100,121)

Why isnt' the 1289x768 recognized???

On Tue, 11 Nov 2008, Mel wrote:


On Tuesday 11 November 2008 11:16:14 Pieter Donche wrote:

Hmm, playing arround in KDE with -xrandr
$ xrandr --size 1280x768
Size 1280x768 not found in available modes
(?? it's in my /etc/X11/xorg.conf ??)


Just because you put a modeline in the xorg config, does not mean the
videodriver, monitor or card itself, supports that mode.
Inspect /var/log/Xorg.0.log, specifically the supported modes detection,lines
like:
(--) NVIDIA(0): Interlaced video modes are supported on this GPU
(--) NVIDIA(0): Connected display device(s) on GeForce Go 7600 at PCI:1:0:0:
(--) NVIDIA(0): Seiko (DFP-0)
(--) NVIDIA(0): Seiko (DFP-0): 330.0 MHz maximum pixel clock
(--) NVIDIA(0): Seiko (DFP-0): Internal Dual Link LVDS
(II) NVIDIA(0): Assigned Display Device: DFP-0
(II) NVIDIA(0): Validated modes:
(II) NVIDIA(0): 1440x900
(II) NVIDIA(0): 1024x768
(II) NVIDIA(0): 800x600
(II) NVIDIA(0): 640x480

It's also helpful to know the make and model of your graphics card, and which
driver you're using for it.

--
Mel

Problem with today's modular software: they start with the modules
   and never get to the software part.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Upgrade base openssh

2008-11-11 Thread Matiss
Hi, 
Is there a way to just upgrade base openssh without breaking a lot of
things? I have an old 5.4 stable box, and I would like to get openssh
up to date, since it is running sshd service, and it is not possible
to allow it only from defined ips.
Or I just have to eat it and upgrade the whole system? :)
Cheers,
Matiss
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Disallowing ssl2

2008-11-11 Thread John Almberg
My server got an audit for PCI compliance and was red-flagged for  
allowing SSL2 connections, which they have some problem with. They  
want the server to use SSL3 or TLS:


Synopsis : The remote service encrypts traffic using a protocol with  
known weaknesses. Description : The remote service accepts  
connections encrypted using SSL 2.0, which reportedly suffers from  
several cryptographic flaws and has been deprecated for several  
years. An attacker may be able to exploit these issues to conduct man- 
in-the-middle attacks or decrypt communications between the affected  
service and clients. See also : http://www.schneier.com/paper-ssl.pdf  
Solution: Consult the application's documentation to disable SSL 2.0  
and use SSL 3.0 or TLS 1.0 instead. See http://support.microsoft.com/ 
kb/216482 for instructions on IIS. See http://httpd.apache.org/docs/ 
2.0/mod/mod _ssl.html for Apache. Risk Factor: Medium  / CVSS Base  
Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) 


They want me to do this for https, imaps, and pop3s protocols...

Before I dig into this, I was wondering, is this even possible? Will  
anything break as a result?


-- John

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Upgrade base openssh

2008-11-11 Thread Mel
On Tuesday 11 November 2008 13:38:11 Matiss wrote:
 Hi,
 Is there a way to just upgrade base openssh without breaking a lot of
 things? I have an old 5.4 stable box, and I would like to get openssh
 up to date, since it is running sshd service, and it is not possible
 to allow it only from defined ips.
 Or I just have to eat it and upgrade the whole system? :)

That's not a bad idea in itself, since the longer you wait, the harder the 
upgrade track becomes, but in the meantime, you can use 
security/openssh-portable port. From it's pkg-message:

To enable this port, add openssh_enable=YES in your rc.conf. To
prevent conflict with openssh in the base system add sshd_enable=NO
in your rc.conf.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Server Freezing Solid

2008-11-11 Thread Chris Maness

Roland Smith wrote:

On Tue, Nov 11, 2008 at 06:42:39AM -0800, Chris Maness wrote:
  

I am having a new problem.  I have been running FreeBSD for years with
no crashing.  All of a sudden my server starts crashing with no panic
messages.  I am suspecting hardware because there are no messages, but
the CPU temp is fine.

Weird --maybe bad RAM?



Could be. But you can test RAM with e.g. memtest86.

Or it could be a bad component (e.g. a capacitator) somewhere on the
motherboard or in the powersupply. Or a spike or drop in the external power.

Roland
  
I have swapped the HD back to the old box.  I am up and running again.  
If it doesn't crash today, I can be certain the ol' grey mare needs to 
be taken out back and shot.  Dual PIII on a Abit server board c. 2000.


I hear that the Abit boards have issues with components.

Anyone recommend a cheap (not necessarily the latest technology) mobo 
for my server?  I am running a low load SoHo server here at the house.


Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Fbsd1

Mel wrote:

On Tuesday 11 November 2008 00:56:29 Fbsd1 wrote:

Polytropon wrote:

On Mon, 10 Nov 2008 22:21:38 +0800, Fbsd1 [EMAIL PROTECTED] wrote:

Also created the .xsessions file in the users home directory.

The file is ~/.xsession, without an s at the end. I assume
that csh is your login shell. Put these in your ~/.xsession:


#!/bin/csh
source ~/.cshrc
exec ~/.xinitrc

This sources your individual user setting from .cshrc and the
executes .xinitrc (trivial, isn't it?) to control how the startuo
of your xsession will go.

Make sure both files (.xinitrc and .xsession) are +x attribute.


Keep getting this console error message hundreds of times

init: getty repeating too quickly on port /dev/ttyv8, sleeping 30 second

Hey, I saw this one... but I'm not sure how I solved it. Is your
/etc/hosts and hostname set correctly? I think it was something
like this, something I would never had put in any combination
with X...


By the way, in order to try if xdm is working correctly it can be
started directly by the command xdm anytime.

I had ~/.xsession spelled correctly in the directory. Just typo error in
email. Changed the contents of ~/.xsession as you posted. Still no joy.
/etc/hosts file is correct.

Running release 7.0. When i enter xdm on command line of root nothing
happens. ps ax command shows no xdm running.

Still getting error msg
init: getty repeating too quickly on port /dev/ttyv8, sleeping 30 second


That's why. xdm can't get the display. Set on to off in /etc/ttys for ttyv8, 
kill -HUP 1 and if the message does not stop, reboot the machine. Then start 
by running xdm from the command line (as root) and 
inspect /var/log/Xorg.0.log if no screen comes up.





I all ready did that (run xdm from the command line) getting no 
/var/log/xdm.log. Inspecting Xorg.0.log shows nothing related to xdm.


When issuing the xdm command from root and then doing (ps ax command) I 
do not see xdm listed.


What am i to see happen from running xdm from the root command line?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Polytropon
I found something strange:

On Tue, 11 Nov 2008 13:28:53 +0100 (CET), Pieter Donche [EMAIL PROTECTED] 
wrote:
 --
 xorg.conf
 --
 [...]
 Section Screen
   Identifier Screen0
   Device Card0
   MonitorMonitor0
   SubSection Display
   Viewport   0 0
   Depth 1
   Modes 1280x768
   EndSubSection
   SubSection Display
   Viewport   0 0
   Depth 4
   Modes 1280x768
   EndSubSection
   SubSection Display
   Viewport   0 0
   Depth 8
   Modes 1280x768
   EndSubSection
   SubSection Display
   Viewport   0 0
   Depth 15
   Modes 1280x768
   EndSubSection
   SubSection Display
   Viewport   0 0
   Depth 16
   Modes 1280x768
   EndSubSection
   SubSection Display
   Viewport   0 0
   Depth 24
   Modes 1280x768
   EndSubSection
 EndSection

You have many depth entries (why not just one with the depth you
want to use?), but the setting DefaultDepth seems to be missing.

Section Screen
Identifier  Screen0
Device  Card0
Monitor Monitor0
Option  Accel
DefaultDepth24
SubSection  Display
Depth   24
Modes   1280x768
EndSubSection
EndSection

How about trimming your section down (as above), just to eliminate
possible causes for the problem?

From the log file, there are minor warnings that don't matter.
The rest seems to look completely okay... no reason why the
selected mode should not get set.



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: High load - lost network

2008-11-11 Thread Christer Solskogen
Christer Solskogen wrote:
 I have a server with a em interface. Whenever the server has a high load
 (compiling world for instance) the network connectivity is lost.
 

The solution was to disable the onboard network card, and insert a pci-x
card instead.

-- 
chs

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


freebsd7 - restore from super-block backup not working?

2008-11-11 Thread John
Hello

After a crash, when I try to mount the (USB-connected) disk, I get this
error:

# fsck /dev/da0
** /dev/da0
Cannot find file system superblock
ioctl (GCINFO): Inappropriate ioctl for device
fsck_ufs: /dev/da0: can't read disk label

So I did a newfs -N to see the superblocks. I really don't want to lose
the data on here if I can help it:

# newfs -N /dev/da0
/dev/da0: 239372.4MB (490234752 sectors) block size 16384, fragment size
2048
using 1303 cylinder groups of 183.77MB, 11761 blks, 23552 inodes.
super-block backups (for fsck -b #) at:
 160, 376512, 752864, 1129216, 1505568, 1881920, 2258272, 2634624,
3010976, 3387328, 3763680, 4140032, 4516384, 4892736, 5269088,
 5645440, 6021792, 6398144, 6774496, 7150848, 7527200, 7903552, 8279904,
8656256, 9032608, 9408960, 9785312, 10161664, 10538016,
 10914368, 11290720, 11667072, 12043424, 12419776, 12796128, 13172480,
13548832, 13925184, 14301536, 14677888, 15054240, 15430592,
 15806944, 16183296, 16559648, 16936000, 17312352, 17688704, 18065056,
18441408, 18817760, 19194112, 19570464, 19946816, 20323168,

[loads more]

I know that fsck doesn't see -b, so, using fsck_ufs:

fsck_ufs -b 160 /dev/da0
Alternate super block location: 160
** /dev/da0
160 is not a file system superblock

# fsck_ufs -b 376512 /dev/da0
Alternate super block location: 376512
** /dev/da0
376512 is not a file system superblock

# fsck_ufs -b 752864 /dev/da0
Alternate super block location: 752864
** /dev/da0
752864 is not a file system superblock

# fsck_ufs -b 1129216 /dev/da0
Alternate super block location: 1129216
** /dev/da0
1129216 is not a file system superblock

# fsck_ufs -b 1505568 /dev/da0
Alternate super block location: 1505568
** /dev/da0
1505568 is not a file system superblock

# fsck_ufs -b 1881920 /dev/da0
Alternate super block location: 1881920
** /dev/da0
1881920 is not a file system superblock

...so 3 questions really:

1. is there a way to tell which ones are really superblock backups?
There are thousands.

2. if they're not superblock backups, then why does newfs -N say they are?

3. is the disk just hosed?

thanks
-- 
John
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Mel
On Tuesday 11 November 2008 12:48:51 Fbsd1 wrote:
 Mel wrote:
  On Tuesday 11 November 2008 12:09:01 Fbsd1 wrote:
  Mel wrote:
  On Tuesday 11 November 2008 11:35:41 Fbsd1 wrote:
  Still getting error msg
  init: getty repeating too quickly on port /dev/ttyv8, sleeping 30
  second
 
  You first need to get rid of that. xdm can't open /dev/ttyv8 while
  getty is hammering at it.
 
  I turned that off all ready before running xdm from root command line.
 
  What does xdm -debug 1 turn up? You said nothing related to xdm
  in /var/log/Xorg.0.log, but it would still be helpful to see the last
  lines of the file, so we know why X quit. And since Xorg.0.log isn't
  timestamped, check if the last modification time of the file corresponds
  with the last time you ran the command. This will determine if xdm
  actually gets to the stage of starting the X server or gives up sooner.
  You may also want to set the -error option (see man xdm) and check if
  anything useful is written there.
  With current information, the possible causes range from errors in a
  configuration file xdm reads on start up to X display problems.

 Startx works ok so not xorg problem.

And you know this why? This may come as a surprise, but startx does different 
things then xdm. Even having a DISPLAY environment variable set to a 
non-existing resource, would stop X from starting.

 Next question is are the xdm 
 configuration files suppose to work as delivered by the port install AS IS?
 As a default config demo?

Yes. When I said 'range', I did mean range. Not 2 possibilities. Missing 
libraries, tainted environment, typos, tied up resources, tight security 
settings, existing pid file, xdm not being xdm but an aliased command or 
shell script sooner up in the path - that's just from the top of my head.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Fbsd1

Mel wrote:

On Tuesday 11 November 2008 12:09:01 Fbsd1 wrote:

Mel wrote:

On Tuesday 11 November 2008 11:35:41 Fbsd1 wrote:

Still getting error msg
init: getty repeating too quickly on port /dev/ttyv8, sleeping 30
second

You first need to get rid of that. xdm can't open /dev/ttyv8 while getty
is hammering at it.

I turned that off all ready before running xdm from root command line.


What does xdm -debug 1 turn up? You said nothing related to xdm 
in /var/log/Xorg.0.log, but it would still be helpful to see the last lines 
of the file, so we know why X quit. And since Xorg.0.log isn't timestamped, 
check if the last modification time of the file corresponds with the last 
time you ran the command. This will determine if xdm actually gets to the 
stage of starting the X server or gives up sooner.
You may also want to set the -error option (see man xdm) and check if anything 
useful is written there.
With current information, the possible causes range from errors in a 
configuration file xdm reads on start up to X display problems.




Startx works ok so not xorg problem. Next question is are the xdm 
configuration files suppose to work as delivered by the port install AS IS?

As a default config demo?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Mel
On Tuesday 11 November 2008 12:09:01 Fbsd1 wrote:
 Mel wrote:
  On Tuesday 11 November 2008 11:35:41 Fbsd1 wrote:
  Still getting error msg
  init: getty repeating too quickly on port /dev/ttyv8, sleeping 30
  second
 
  You first need to get rid of that. xdm can't open /dev/ttyv8 while getty
  is hammering at it.

 I turned that off all ready before running xdm from root command line.

What does xdm -debug 1 turn up? You said nothing related to xdm 
in /var/log/Xorg.0.log, but it would still be helpful to see the last lines 
of the file, so we know why X quit. And since Xorg.0.log isn't timestamped, 
check if the last modification time of the file corresponds with the last 
time you ran the command. This will determine if xdm actually gets to the 
stage of starting the X server or gives up sooner.
You may also want to set the -error option (see man xdm) and check if anything 
useful is written there.
With current information, the possible causes range from errors in a 
configuration file xdm reads on start up to X display problems.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Strange messages by fetchmail: Server certificate verification error

2008-11-11 Thread David Kelly
On Mon, Nov 10, 2008 at 10:52:41PM -0800, Jeremy Chadwick wrote:
 On Tue, Nov 11, 2008 at 07:18:31AM +0100, Polytropon wrote:
 
 Secondly, this is a very, very common question on the fetchmail-users
 public mailing list (not at freebsd.org).  Google returns hundreds of
 results for unable to get local issuer fetchmail.

Perhaps now but it wasn't as common a couple of weeks ago when it bit
me.

 These messages mean that the POP3+SSL or IMAP+SSL server's SSL certs
 cannot be verified by fetchmail.  What you see are warnings, not
 errors, which is why fetching mail works regardless.  It's recommended
 you fix the warnings.

Yes, they were warnings that TLS failed and that it fell back to
unencrypted plain password.  :-(   Run fetchmail -v and see precisely
what the failure was and the solution.

 fetchmail-6.3.8_7, and a couple earlier versions (I would have to check
 to see when it was added), include security/ca_root_nss as a dependency.

I already had that but still had the problem.

 That port includes a list of common public CAs which certificates (on
 the server) can be verified against.

Running fetchmail -v I saw that I needed Equifax Secure Global
eBusiness CA-1 which was apparently lacking from ca_root_nss.
Downloaded from Equifax (Safari on MacOS was happy with their cert) and
added them myself to /usr/local/certs. Some instructions said one must
run some sort of indexing utility against the certs. I found the utility
somewhere practically hidden and tried it. Generated files unlike
anything I had previously. Deleted extra and everything works anyway.

-- 
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Pieter Donche

On Tue, 11 Nov 2008, Mel wrote:


On Tuesday 11 November 2008 13:28:53 Pieter Donche wrote:

On Tue, 11 Nov 2008, Mel wrote:

On Tuesday 11 November 2008 12:12:06 Pieter Donche wrote:

On the same portable there is also a SUSE Linux 10.1 and WinXP, which
works in 1280x768 (so the hardware can use this resolution)

In /var/log/Xorg.0.log is see many references to 1280x768 for the 'local
flat panel' , PanelID returned panel resolution: 1280x768, also
Printing DDC gathered Modelines:
3 lines
(||) 1810(0): Modeline 1280x768x0.0  (followed by varying numbers and
a KhZ to end)
follewed y
Mode: 30 (640x480)
   (specifications)
diffenrent Mode sections but 1024x768 at the highest
..
(||) |810(0): Not using mode 1280x768i (no mode of that name)


  ^^^
If this is accurate, you seem to have a trailing letter 'i' in your
xorg.conf that invalidates the mode line.

And you're using an Intel 810 integrated graphics card. Sadly, that
doesn't come with probing tool that I know of that would print the
information the card and monitor exchange about syncrates and display
sizes.

Rule out the typo first though.

I have a vague recollection of this card putting 1024x768 before 1280x768
in the mode list it returns, so that it defaults to 1024x768, but I'm not
sure where or when I read that. Either way, hardcoding the desired
modeline (without typos) in xorg.conf should work.
If there was no typo, please paste your entire xorg.conf into the mail.
We may be missing something obvious.
--
Mel

Problem with today's modular software: they start with the modules
   and never get to the software part.


There was only a typo in my mail, not in xorg.conf..

In included below my xorg.conf file and the Xorg.0.log


Rearranging for clarity:


--
xorg.conf
--




Section Screen
Identifier Screen0
Device Card0
MonitorMonitor0
SubSection Display
Viewport   0 0
Depth 1
Modes 1280x768
EndSubSection




(II) I810(0): Supported Future Video Modes:
(II) I810(0): #0: hsize: 1280  vsize 800  refresh: 60  vid: 129


I was already wondering why a card would report 1280x768, it's not the
standard for that width, 1280x800 is. Try changing the modes to 1280x800. How
the 768 ends up in the detection is probably something for the i810 driver
developers to figure out.


Changed to 1280x800, but no help.

The diff between previous Xorg.0.log and the present is:
15c15
 (==) Log file: /var/log/Xorg.0.log, Time: Tue Nov 11 14:18:44 2008
---

(==) Log file: /var/log/Xorg.0.log, Time: Tue Nov 11 13:20:39 2008

2033c2033
 (II) I810(0): Not using mode 1280x800 (no mode of this name)
---

(II) I810(0): Not using mode 1280x768 (no mode of this name)

2122,2124c2122,2124
 (II) I810(0): Allocated 4 kB for HW cursor at 0x000 (0x07b99000)
 (II) I810(0): Allocated 16 kB for HW (ARGB) cursor at 0xfffb000 (0x07b9c000)
 (II) I810(0): Allocated 4 kB for Overlay registers at 0xfffa000 (0x07b9a000).
---

(II) I810(0): Allocated 4 kB for HW cursor at 0x000 (0x0779)
(II) I810(0): Allocated 16 kB for HW (ARGB) cursor at 0xfffb000 (0x07794000)
(II) I810(0): Allocated 4 kB for Overlay registers at 0xfffa000 (0x07791000).


not pretty much, execept that it neither accepts 1280x800

On that portable WinXP lets me choose between 1280x768, 1024x768, 800x600
and SuSE Linux 10.1 between exactly the same, plus 640x480...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X11: 1280x768

2008-11-11 Thread Mel
On Tuesday 11 November 2008 11:16:14 Pieter Donche wrote:
 Hmm, playing arround in KDE with -xrandr
 $ xrandr --size 1280x768
 Size 1280x768 not found in available modes
 (?? it's in my /etc/X11/xorg.conf ??)

Just because you put a modeline in the xorg config, does not mean the 
videodriver, monitor or card itself, supports that mode.
Inspect /var/log/Xorg.0.log, specifically the supported modes detection,lines 
like:
(--) NVIDIA(0): Interlaced video modes are supported on this GPU
(--) NVIDIA(0): Connected display device(s) on GeForce Go 7600 at PCI:1:0:0:
(--) NVIDIA(0): Seiko (DFP-0)
(--) NVIDIA(0): Seiko (DFP-0): 330.0 MHz maximum pixel clock
(--) NVIDIA(0): Seiko (DFP-0): Internal Dual Link LVDS
(II) NVIDIA(0): Assigned Display Device: DFP-0
(II) NVIDIA(0): Validated modes:
(II) NVIDIA(0): 1440x900
(II) NVIDIA(0): 1024x768
(II) NVIDIA(0): 800x600
(II) NVIDIA(0): 640x480

It's also helpful to know the make and model of your graphics card, and which 
driver you're using for it.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Pieter Donche

I installed (pkg_ad -r) desktopbsd-tools
following instructions from 
http://desktopbsd.net/wiki/doku.php?id=doc:desktopbsd_tools_in_freebsd

I did:
# chgrp wheel /dev/da0
# chmod g+w /dev/da0s1
(I believe USB key is /dev/da0)
# chgrp wheel /dev/ad0
# chmod g+w /dev/ad0s1
(anyway, did that too)
# sysctl vfs.usermount=1
# chmod 1775 /media
# ls -la / | grep media
drwxrwxr-t root wheel /media
# sysctl vfs.usermount=1

started 
$ /usr/local/bin/dbsd-traymounter

inserted an USB memory key
In Konqueror still nothing to see in /media

what's wrong??


On Tuesday 11 November 2008 20:25:51 Pieter Donche wrote:

If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
happens. On the same laptop in the SuSE 10.1 partition, the same USB
stick appears in Konqueror under Storage Media  and is ready to use)
In FreeBSD, Konqueror shows nothing under Storage Media.
Is this normal?


This requires HAL-support with KDE and the KDE MEdia Manager enabled in the
system services. It's fragile to get working and often requires extensive
knowledge of HAL, dbus and policykit. This is where PC-BSD can be seen as
SuSE for linux, as it has configured all these things to work out of the box,
that normally a FreeBSD system administrator would set up.

Alternatively, one can use the desktopbsd-tools from the ports to add some GUI
system tray apps, among which a removable media manager.

--
Mel

Problem with today's modular software: they start with the modules
   and never get to the software part.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


xauth failure when tunneling over ssh

2008-11-11 Thread Elliot Isaacson
Hi,

I've set up X11Forwarding on several linux servers before, but I've 
just wasted a day trying (unsuccessfully) to figure out why I can't 
get it working on freebsd (7.0-RELEASE GENERIC).

I have not changed the defaults in the sshd_config file.

One the client computer:

$ xhost +

$ ssh -Y 192.ip.of.server
Warning: No xauth data; using fake authentication data for X11 
forwarding.

/usr/local/bin/xauth:  creating new authority 
file /home/xxx/.Xauthority
/usr/local/bin/xauth: (stdin):1:  bad display name unix:10.0 
in remove command
/usr/local/bin/xauth: (stdin):2:  bad display name unix:10.0 
in add command

[xxx@ ~] kcalc
X11 connection rejected because of wrong authentication.
kcalc: Fatal IO error: client killed

[xxx@ ~] ls -a .Xauth*
no results

Now, when I go to the server and login directly, and do a startx, 
the x server starts fine, but there's still no .Xauthority file in 
the home directory. I find that odd.

This also looks strange to me:

[xxx@ ~] ps -aux | grep X
root1470  0.0  2.7 65456 13668  v0  S 4:01PM   0:01.24 
X :0 -auth /home/xxx/.serverauth.1451 (Xorg)

[xxx@ ~] ls -a /home/xxx/.serverauth*
no results

How could it authenticate with a non-existent file?

Any pointers in the right direction would be greatly appreciated.

Thanks,
Elliot



  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Fbsd1

Mel wrote:

On Tuesday 11 November 2008 11:35:41 Fbsd1 wrote:



Still getting error msg
init: getty repeating too quickly on port /dev/ttyv8, sleeping 30 second



You first need to get rid of that. xdm can't open /dev/ttyv8 while getty is 
hammering at it.



I turned that off all ready before running xdm from root command line.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Disallowing ssl2

2008-11-11 Thread John Almberg
It's certainly possible to insist on SSLv3 or TLSv1 for SSL  
connections,
and nothing[*] will break.  The client and server will negotiate to  
find a
mutually acceptable cipher and protocol level at the point of  
making the

connection.


This seems to be less painful than I was anticipating... Besides  
apache, I had to figure out how to boost the security on IMAP and POP  
3 connections. I'm using Courier, so this was pretty simple... just  
added the following to the imap and pop ssl config files:


TLS_CIPHER_LIST=HIGH:MEDIUM:!SSLv2:!LOW:!EXP:!aNULL:@STRENGTH

I'm going to resubmit the server... hopefully it will pass this time.

But I wonder why the defaults for Apache and Courier are to accept  
SSL 2, if it is so problematical?


-- John

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Glen Barber
On Tue, Nov 11, 2008 at 5:31 PM, Pieter Donche [EMAIL PROTECTED] wrote:
 I installed (pkg_ad -r) desktopbsd-tools
 following instructions from
 http://desktopbsd.net/wiki/doku.php?id=doc:desktopbsd_tools_in_freebsd
 I did:
 # chgrp wheel /dev/da0
 # chmod g+w /dev/da0s1
 (I believe USB key is /dev/da0)
 # chgrp wheel /dev/ad0
 # chmod g+w /dev/ad0s1
 (anyway, did that too)
 # sysctl vfs.usermount=1
 # chmod 1775 /media
 # ls -la / | grep media
 drwxrwxr-t root wheel /media
 # sysctl vfs.usermount=1

 started $ /usr/local/bin/dbsd-traymounter
 inserted an USB memory key
 In Konqueror still nothing to see in /media

 what's wrong??


Have you edited '/etc/devfs.conf' and '/etc/devfs.rules' ?

-- 
Glen Barber

If you have any trouble sounding condescending, find a Unix user to
show you how it's done.
 --Scott Adams
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Gonzalo Nemmi
On Tuesday 11 November 2008 5:39:02 pm Pieter Donche wrote:
 On Tue, 11 Nov 2008, Jeremy Chadwick wrote:
  On Tue, Nov 11, 2008 at 08:25:51PM +0100, Pieter Donche wrote:
  If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
  happens. On the same laptop in the SuSE 10.1 partition, the same USB
  stick appears in Konqueror under Storage Media  and is ready to use)
  In FreeBSD, Konqueror shows nothing under Storage Media.
  Is this normal?
 
  What shows up in your kernel message log (outside of X, usually on the
  first virtual console) when you insert the stick?  It should show a
  umass device being added, then a daX device being added.

 There are indeed messages:
 umass0: M-SysT5 Dell Memory Key, class ...  on uhub4
 da0: at umass-sim0 ...
 ..
 da0: 60 Mb   (OK, it is a 64 Mb key)
 GEOM_LABEL: Label for provider da0s1 is msdosfs/USB MEMORY

 also when unplugging, some messages

 $ ls -la /dev/da0s1
 shows only the character device line


OK then .. let's get it to work.

1) Open /etc/devfs.rules and add the following lines:
[system=10]
add path 'da*' mode 0666

(Edit that line to suit your needs)

2) Open /etc/rc.conf and add the following line
devfs_system_ruleset=system

(Edit that line to suit your needs)

3) Create a mountpoint for your pendrive
mkdir -p ~/mnt/pen

(Edit that line to suit your needs)

4) Open /etc/fstab and add a line like this one

/dev/da0s1  /home/your_user_name/mnt/pen msdosfs rw,noauto   0   0

(Edit that line to suit your needs)

Reboot

Done ...

Now you can create a Link to device on your KDE desktop and make it point to 
your /dev/da0s1. Insert your pendrive and click on your newly 
created pendrive device link.

Remember to umount it before unplug it

Otherwise .. get ready to wrestle hal/dbus and policykit ...

Regards
-- 
Blessings
Gonzalo Nemmi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Roland Smith
On Tue, Nov 11, 2008 at 09:04:13PM -0200, Gonzalo Nemmi wrote:
 On Tuesday 11 November 2008 5:39:02 pm Pieter Donche wrote:
  On Tue, 11 Nov 2008, Jeremy Chadwick wrote:
   On Tue, Nov 11, 2008 at 08:25:51PM +0100, Pieter Donche wrote:
   If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
   happens. On the same laptop in the SuSE 10.1 partition, the same USB
   stick appears in Konqueror under Storage Media  and is ready to use)
   In FreeBSD, Konqueror shows nothing under Storage Media.
   Is this normal?
  
   What shows up in your kernel message log (outside of X, usually on the
   first virtual console) when you insert the stick?  It should show a
   umass device being added, then a daX device being added.
 
  There are indeed messages:
  umass0: M-SysT5 Dell Memory Key, class ...  on uhub4
  da0: at umass-sim0 ...
  ..
  da0: 60 Mb   (OK, it is a 64 Mb key)
  GEOM_LABEL: Label for provider da0s1 is msdosfs/USB MEMORY

It's better to use this device, since it won't change when you plug in
an extra USB stick/drive.

  also when unplugging, some messages
 
  $ ls -la /dev/da0s1
  shows only the character device line
 
 
 OK then .. let's get it to work.
 
 1) Open /etc/devfs.rules and add the following lines:
 [system=10]
 add path 'da*' mode 0666
add path 'msdosfs/*' mode 0666

I prefer 'mode 0660 group usb' in principle, but that is personal.

 (Edit that line to suit your needs)
 
 2) Open /etc/rc.conf and add the following line
 devfs_system_ruleset=system
 
 (Edit that line to suit your needs)
 
 3) Create a mountpoint for your pendrive
 mkdir -p ~/mnt/pen
 
 (Edit that line to suit your needs)
 
 4) Open /etc/fstab and add a line like this one
 
 /dev/da0s1  /home/your_user_name/mnt/pen msdosfs rw,noauto   0   0
/dev/msdosfs/USB\ MEMORY  /home/your_user_name/mnt/pen msdosfs rw,noauto 0 0

 (Edit that line to suit your needs)
 
 Reboot
 
 Done ...

I prefer to have a script do the mounting, so I can add some sane flags
to mount_msdosfs that you cannot put in options/fstab AFAICT, like 
'-m 644 -M 755 -l -o noatime -o sync -o noexec -o nosuid'.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpRFRZdCvxbV.pgp
Description: PGP signature


Tomcat Debugging (OT most likely)

2008-11-11 Thread Paul Procacci

Hey all,

This question is probably best suited for tomcat-users, but being this 
is an a FBSD machine I'd figure I'd ask here first.  I have a client 
running apache w/ tomcat serving thousands of requests per second.  It 
works, but with one caveat, pages load extremely slowly.  When I first 
saw the request, I figured this client was running into some kind of 
resource bottleneck, but that's where my problems started.  I'm unable 
to find any resource that is being starved.  I turn to `the mighty list` 
for guidance.


This particular machine is running FreeBSD 6.2.  It has a bce network 
card that currently connected to a GigE switch with a 10G uplink.  Even 
with all this available bandwidth, this client's application *currently* 
is not doing any more than 50Mb/sec.  ::  Rule out network congestion.


Moving along to the system ram :: 2 Gigs are in the machine, with very 
little usage:

Mem: 724M Active, 874M Inact, 338M Wired, 64M Cache, 112M Buf, 4944K Free

A dual core cpu is in the machine, again with very little usage:
CPU states:  8.6% user,  0.0% nice,  3.9% system,  2.8% interrupt, 84.7% 
idle


Disk throughput is negligable at this time (50KB/sec :: 3tps).

I did start off mentioning this machine uses tomcat...so let me 
continue.  We've setup the java process to use libthr via libmap.conf:

#
cat /etc/libmap.conf
[java]
libpthread.so.2 libthr.so.2
libpthread.so libthr.so
#

And added the following to rc.conf::
###
tomcat55_java_opts=-XX:MaxPermSize=512m -Xmx512M
###

Apache Configuration:
###
MaxClients 1024
###

Tomcat Configuration:
###
maxThreads=1200
###


So onto my question...the slowness being encountered.  My initial 
thought was the slowness was due to quite possibly the cpu being 
hammered by numerous requests.  After checking however that's not the 
case, then I looked at the networking equipment with my networking team, 
that's ok too.  (I think) That leaves a) thread contention somewhere  b) 
apache misconfiguration and c) tomcat configuration.


Both myself and 2 other admins have looked over the apache configuration 
and tomcat configuration and we believe that side of things is probably 
ok.  That's leaves weird contention in the kernel or userland mutexes or 
something along those lines.


Here is our current connection count on the external interface ::

sockstat -4cp 80 | wc -l
997


Here is our connection count on localhost (from apache to tomcat process 
and vica versa) ::


sockstat -4cp 8009  | wc -l
   1679



And finally.top output:

last pid: 57747;  load averages:  0.79,  1.12,  
0.87
up 153+17:56:53 18:36:57

#--snip --
 PID USERNAME   PRI NICE   SIZERES STATE  C   TIME   WCPU COMMAND
57460 www 960  1385M   432M ucond  0   2:44  2.88% java
57460 www 960  1385M   432M ucond  0   2:44  2.73% java
57460 www 960  1385M   432M select 0   2:44  0.15% java
57460 www 960  1385M   432M select 1   2:44  0.15% java
#--snip--

The above lines repeat up to the number of threads we have.  `states` 
are in ucond and select.



Hopefully I hven't bored anyoneyet, and would appreciate any 
guildance.  Maybe good tools for debugged kernel threads, or a simple 
slap in the face will do nicely.


Thanks in advance,
Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to use nspluginwrapper

2008-11-11 Thread Eduardo Cerejo
It's been a while since I used this and decided to use it again because gnash 
looks like is getting harder to use and becoming very buggy.

I've installed linu-flashplugin and now I want to installed the plugin using 
nspluginwrapper and I've trying to install it like this:

nspluginwrapper -i /usr/local/lib/npapi/linux-flashplugin/libflashplayer.so

but it doesn't install it, what is the right way of doing it?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to use nspluginwrapper

2008-11-11 Thread Glen Barber
On Tue, Nov 11, 2008 at 6:44 PM, Eduardo Cerejo [EMAIL PROTECTED] wrote:
 It's been a while since I used this and decided to use it again because gnash 
 looks like is getting harder to use and becoming very buggy.

 I've installed linu-flashplugin and now I want to installed the plugin using 
 nspluginwrapper and I've trying to install it like this:

 nspluginwrapper -i /usr/local/lib/npapi/linux-flashplugin/libflashplayer.so

 but it doesn't install it, what is the right way of doing it?
 ___

`nspluginwrapper -a -v -i' has always worked for me.

-- 
Glen Barber

If you have any trouble sounding condescending, find a Unix user to
show you how it's done.
 --Scott Adams
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: High load - lost network

2008-11-11 Thread Dan
Jos Chrispijn([EMAIL PROTECTED])@2008.11.11 09:37:47 +0100:

 Uit een eerder bericht (10-11-2008 13:45):
 Do anyone have a tips for how to workaround this or is the server just junk?
   
 Got this problem a while ago as well. I found out with me it was hub  
 related. If I was downloading, my hub was displaying 100Mbit connection  
 (I wish it was :-)
 Then I sometimes get this nic status of my BSD system as well. I bought  
 a 3Com hub and the problem is gone.

Must have been one of those cisco that they bought from a different
company, then relabeled (forget which). Man was that a POS.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and USBmemorystick

2008-11-11 Thread Gonzalo Nemmi
On Tuesday 11 November 2008 9:17:36 pm Roland Smith wrote:
 On Tue, Nov 11, 2008 at 09:04:13PM -0200, Gonzalo Nemmi wrote:
  On Tuesday 11 November 2008 5:39:02 pm Pieter Donche wrote:
   On Tue, 11 Nov 2008, Jeremy Chadwick wrote:
On Tue, Nov 11, 2008 at 08:25:51PM +0100, Pieter Donche wrote:
If I insert a USB memory stick in my laptop with FreeBSD 7.0 nothing
happens. On the same laptop in the SuSE 10.1 partition, the same USB
stick appears in Konqueror under Storage Media  and is ready to use)
In FreeBSD, Konqueror shows nothing under Storage Media.
Is this normal?
   
What shows up in your kernel message log (outside of X, usually on
the first virtual console) when you insert the stick?  It should show
a umass device being added, then a daX device being added.
  
   There are indeed messages:
   umass0: M-SysT5 Dell Memory Key, class ...  on uhub4
   da0: at umass-sim0 ...
   ..
   da0: 60 Mb   (OK, it is a 64 Mb key)
   GEOM_LABEL: Label for provider da0s1 is msdosfs/USB MEMORY

 It's better to use this device, since it won't change when you plug in
 an extra USB stick/drive.

   also when unplugging, some messages
  
   $ ls -la /dev/da0s1
   shows only the character device line
 
  OK then .. let's get it to work.
 
  1) Open /etc/devfs.rules and add the following lines:
  [system=10]
  add path 'da*' mode 0666

 add path 'msdosfs/*' mode 0666

 I prefer 'mode 0660 group usb' in principle, but that is personal.

Sure thing. But it adds an extra layer of complexity (I mean, he would have to 
be a member of the usb group or even create it if it doesn't exist) and I 
just wanted to be raw simple and to the core.

Now thanks to you reply, Pieter has more info on how to get around this :)

  (Edit that line to suit your needs)
 
  2) Open /etc/rc.conf and add the following line
  devfs_system_ruleset=system
 
  (Edit that line to suit your needs)
 
  3) Create a mountpoint for your pendrive
  mkdir -p ~/mnt/pen
 
  (Edit that line to suit your needs)
 
  4) Open /etc/fstab and add a line like this one
 
  /dev/da0s1  /home/your_user_name/mnt/pen msdosfs rw,noauto   0   0

 /dev/msdosfs/USB\ MEMORY  /home/your_user_name/mnt/pen msdosfs rw,noauto 0
 0

  (Edit that line to suit your needs)
 
  Reboot
 
  Done ...

 I prefer to have a script do the mounting, so I can add some sane flags
 to mount_msdosfs that you cannot put in options/fstab AFAICT, like
 '-m 644 -M 755 -l -o noatime -o sync -o noexec -o nosuid'.

 Roland

There you go Pieter ... a simple example (mine) and a more in-depth one 
(Roland's) on how to get your pendrive to work :)

Thanks for improving on my simple example Roland =D

Regards
-- 
Blessings
Gonzalo Nemmi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Karsten Rothemund
On Tue, Nov 11, 2008 at 11:01:44AM -0500, Lowell Gilbert wrote:
 Fbsd1 [EMAIL PROTECTED] writes:
 
Hello,

sorry, but I didn't follow the whole thread.

  Mel wrote:
  You first need to get rid of that. xdm can't open /dev/ttyv8 while
  getty is hammering at it.
 
  I turned that off all ready before running xdm from root command line.
 

in /etc/ttys I think, right? By default (in my /etc/ttys) on ttyv8 there
is an xdm-Daemon configured I think:

ttyv6   /usr/libexec/getty Pc cons25  on  secure
ttyv7   /usr/libexec/getty Pc cons25  on  secure
#ttyv8  /usr/local/bin/xdm -nodaemon  xterm   off secure
ttyv8   /usr/local/bin/xdm -nodaemon  xterm   on  secure

(I changed it to on because I want to start xdm at boot). 


 Since you're still getting that error message, you obviously didn't
 succeed at turning off the getty.  If you're not getting that message
 any more, what symptoms *do* you see?
 
Is there a getty (or something else) configured in your /etc/ttys?

Ciao,

Karsten

-- 

Karsten Rothemund [EMAIL PROTECTED] /\
PGP-Key: 0x7019CAA5   \ /
Fingerprint: E752 C759 B9B2 2057 E42F  \  ASCII Ribbon Campaign
 50EE 47AC A7CE 7019 CAA5 / \ Against HTML Mail and News


pgpTRsGz9L0Ds.pgp
Description: PGP signature


FreeBSD Mpd5 PPTP Connection

2008-11-11 Thread Marcel Grandemange
Does anybody know where I can find help for setting this up.

 

Mailing list or similar, do not think it belongs under this list.

 

 

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tomcat Debugging (OT most likely)

2008-11-11 Thread Paul Procacci

Paul Procacci wrote:

Hey all,

This question is probably best suited for tomcat-users, but being this 
is an a FBSD machine I'd figure I'd ask here first.  I have a client 
running apache w/ tomcat serving thousands of requests per second.  It 
works, but with one caveat, pages load extremely slowly.  When I first 
saw the request, I figured this client was running into some kind of 
resource bottleneck, but that's where my problems started.  I'm unable 
to find any resource that is being starved.  I turn to `the mighty 
list` for guidance.


This particular machine is running FreeBSD 6.2.  It has a bce network 
card that currently connected to a GigE switch with a 10G uplink.  
Even with all this available bandwidth, this client's application 
*currently* is not doing any more than 50Mb/sec.  ::  Rule out network 
congestion.


Moving along to the system ram :: 2 Gigs are in the machine, with very 
little usage:

Mem: 724M Active, 874M Inact, 338M Wired, 64M Cache, 112M Buf, 4944K Free

A dual core cpu is in the machine, again with very little usage:
CPU states:  8.6% user,  0.0% nice,  3.9% system,  2.8% interrupt, 
84.7% idle


Disk throughput is negligable at this time (50KB/sec :: 3tps).

I did start off mentioning this machine uses tomcat...so let me 
continue.  We've setup the java process to use libthr via libmap.conf:

#
cat /etc/libmap.conf
[java]
libpthread.so.2 libthr.so.2
libpthread.so libthr.so
#

And added the following to rc.conf::
###
tomcat55_java_opts=-XX:MaxPermSize=512m -Xmx512M
###

Apache Configuration:
###
MaxClients 1024
###

Tomcat Configuration:
###
maxThreads=1200
###


So onto my question...the slowness being encountered.  My initial 
thought was the slowness was due to quite possibly the cpu being 
hammered by numerous requests.  After checking however that's not the 
case, then I looked at the networking equipment with my networking 
team, that's ok too.  (I think) That leaves a) thread contention 
somewhere  b) apache misconfiguration and c) tomcat configuration.


Both myself and 2 other admins have looked over the apache 
configuration and tomcat configuration and we believe that side of 
things is probably ok.  That's leaves weird contention in the kernel 
or userland mutexes or something along those lines.


Here is our current connection count on the external interface ::

sockstat -4cp 80 | wc -l
997


Here is our connection count on localhost (from apache to tomcat 
process and vica versa) ::


sockstat -4cp 8009  | wc -l
   1679



And finally.top output:

last pid: 57747;  load averages:  0.79,  1.12,  
0.87
up 153+17:56:53 18:36:57

#--snip --
 PID USERNAME   PRI NICE   SIZERES STATE  C   TIME   WCPU COMMAND
57460 www 960  1385M   432M ucond  0   2:44  2.88% java
57460 www 960  1385M   432M ucond  0   2:44  2.73% java
57460 www 960  1385M   432M select 0   2:44  0.15% java
57460 www 960  1385M   432M select 1   2:44  0.15% java
#--snip--

The above lines repeat up to the number of threads we have.  `states` 
are in ucond and select.



Hopefully I hven't bored anyoneyet, and would appreciate any 
guildance.  Maybe good tools for debugged kernel threads, or a simple 
slap in the face will do nicely.


Thanks in advance,
Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]



List,

Apologies, but I sever my head in shame as I have found the problem.   
In one word:  KeepAlives.


Thanks!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: xauth failure when tunneling over ssh

2008-11-11 Thread Pollywog

On Tuesday 11 November 2008 21:27:38 Elliot Isaacson wrote:
 Hi,

 I've set up X11Forwarding on several linux servers before, but I've
 just wasted a day trying (unsuccessfully) to figure out why I can't
 get it working on freebsd (7.0-RELEASE GENERIC).

 I have not changed the defaults in the sshd_config file.

 One the client computer:

 $ xhost +

 $ ssh -Y 192.ip.of.server
 Warning: No xauth data; using fake authentication data for X11
 forwarding.

 /usr/local/bin/xauth:  creating new authority
 file /home/xxx/.Xauthority
 /usr/local/bin/xauth: (stdin):1:  bad display name unix:10.0
 in remove command
 /usr/local/bin/xauth: (stdin):2:  bad display name unix:10.0
 in add command

 [xxx@ ~] kcalc
 X11 connection rejected because of wrong authentication.
 kcalc: Fatal IO error: client killed

 [xxx@ ~] ls -a .Xauth*
 no results

 Now, when I go to the server and login directly, and do a startx,
 the x server starts fine, but there's still no .Xauthority file in
 the home directory. I find that odd.

 This also looks strange to me:

 [xxx@ ~] ps -aux | grep X
 root1470  0.0  2.7 65456 13668  v0  S 4:01PM   0:01.24
 X :0 -auth /home/xxx/.serverauth.1451 (Xorg)

 [xxx@ ~] ls -a /home/xxx/.serverauth*
 no results

 How could it authenticate with a non-existent file?

 Any pointers in the right direction would be greatly appreciated.

I had the same problem when trying to SSH to the FreeBSD machines from Linux.
If I remember correctly, I had to make a change to ssh_config on the Linux side 
to get things to work:

Host *
  XAuthLocation /usr/bin/xauth

It might also help if you would post sshd_config on the FreeBSD side.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Invalid address running apps using wine-1.1.8,1

2008-11-11 Thread Sam Fourman Jr.
On Mon, Nov 10, 2008 at 9:37 AM, Chris Whitehouse [EMAIL PROTECTED] wrote:
 Eduardo Cerejo wrote:

 Hi,

 I'm getting an Invalid address error trying to run Windows apps
 under WINE.  wineconsole cmd works OK though, and so does winefile.
 The error seems to only occur with apps that aren't supplied with
 WINE, eg.

World of Warcraft does not work either, I used portupgrade -ar
this is happening on a FreeBSD RELENG_7 install as well as 8 -current

Sam Fourman Jr.
Fourman Networks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: trouble getting x11 xdm to work

2008-11-11 Thread Fbsd1


My /etc/ttys looks like this

 ttyv6   /usr/libexec/getty Pc cons25  on  secure
 ttyv7   /usr/libexec/getty Pc cons25  on  secure
 #ttyv8  /usr/local/bin/xdm -nodaemon  xterm   off secure
 #ttyv8   /usr/local/bin/xdm -nodaemon  xterm   on  secure

The init: getty repeating too quickly on port /dev/ttyv8 msg has stopped.

When I start xdm from root command line nothing happens. NO error log 
msgs, nothing. F1 thru F12 just issue the freebsd console logon prompt.



My understanding is when /etc/ttys contains this statement

ttyv8   /usr/local/bin/xdm -nodaemon  xterm   on  secure

followed by a kill -HUP 1 command to reread tyys file the following 
should happen.


F1 thru F8 virtual consoles work as normal (ie: freebsd console logon 
prompt). F9 thru F12 virtual consoles will show the xdm logon screen.


To make xdm the system default logon method have to add xdm_enable=YES 
to /etc/rc.conf and reboot. Then only the xdm logon screen will be seen 
on all virtual consoles F1 thru F12. A ctrl+alt+backspace key sequence 
is the only way to force a return to the freebsd console logon prompt 
for the Fx virtual console being used.


Is this the correct interpretation of how xdm is designed to function??

I can not find in man xdm or xorg website or handbook an explanation of 
how it's suppose work.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: root /etc/csh

2008-11-11 Thread Polytropon
On Tue, 11 Nov 2008 10:13:02 -0500, Jerry McAllister [EMAIL PROTECTED] wrote:
 Probably is the main reason, though another is that some things
 may be written assuming a particular shell.  Not a good practice,
 but happens.

Especially in Linux, it's common to prefix scripts with #!/bin/bash
which won't work in FreeBSD, because it's #/usr/local/bin/bash there.
Linux has no problem running #!/bin/sh scripts because there's a
symlink /bin/sh - /bin/bash.

My advice for maximum interoperability and compatibility between Linux
and UNIX: If you're not using any bash specific techniques in your
scripts, start them with #!/bin/sh instead of #!/bin/bash.

The sh shell is the UNIX standard scripting shell, while Linux's
one is bash.


-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]