date:20101007

Sasl passthrough authentication

2010-10-07 Thread Indexer

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

I am attempting to setup SASL passthrough authentication on a server. 

I have install and configured saslauthd, and plan to use this with kerberos5

When i attempt to use the command

testsaslauthd -u will...@realm -p supersecretpassword

I get the following in /var/log/messages.

Oct  7 16:37:13 blackrabbit saslauthd[1557]: auth_krb5: k5support_verify_tgt

[r...@blackrabbit ~]# saslauthd -a kerberos5 -d -V
saslauthd[1555] :main: num_procs  : 5
saslauthd[1555] :main: mech_option: NULL
saslauthd[1555] :main: run_path   : /var/run/saslauthd
saslauthd[1555] :main: auth_mech  : kerberos5
saslauthd[1555] :ipc_init: using accept lock file: 
/var/run/saslauthd/mux.accept
saslauthd[1555] :detach_tty  : master pid is: 0
saslauthd[1555] :ipc_init: listening on socket: /var/run/saslauthd/mux
saslauthd[1555] :main: using process model
saslauthd[1555] :have_baby   : forked child: 1556
saslauthd[1556] :get_accept_lock : acquired accept lock
saslauthd[1555] :have_baby   : forked child: 1557
saslauthd[1555] :have_baby   : forked child: 1558
saslauthd[1555] :have_baby   : forked child: 1559
saslauthd[1557] :rel_accept_lock : released accept lock
saslauthd[1558] :get_accept_lock : acquired accept lock
saslauthd[1557] :do_auth : auth failure: [user=will...@realm] 
[service=imap] [realm=] [mech=kerberos5] [reason=saslauthd internal error]

I have looked for help on this, and sadly can only find that i should have a 
host/f...@realm principal in my /etc/krb5.keytab . I have already done this 
however. /etc/hosts also corresponds with this correctly and my servers fqdn is 
listed inside. (host/blackrabbit.re...@realm)

My krb5kdc log shows 

Oct 07 16:39:07 blackrabbit.realm krb5kdc[868](info): AS_REQ (4 etypes {18 17 
16 23}) 127.0.0.1: ISSUE: authtime 1286431747, etypes {rep=16 tkt=16 ses=16}, 
will...@realm for krbtgt/re...@realm

I know that i am missing something obvious, but any help or suggestions would 
be appreciated 

Sincerely

William Brown

pgp.mit.edu



-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
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=lI71
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

postfix installed in base, mailwrapper spins using 100% CPU

2010-10-07 Thread Bruce Cran

Hi,

I installed a new server recently with postfix. I first rebuilt world using 
WITH_SENDMAIL=no and removed the sendmail files using 'make delete-old'. I 
installed postfix in /usr but now mailwrapper doesn't work - it runs using 
100% CPU and never quits. I suspect it might be stuck in a loop trying to run 
the sendmail binary and being redirected back to itself. So 
/etc/mail/mailer.conf contains:

sendmail/usr/sbin/sendmail
send-mail   /usr/sbin/sendmail
mailq   /usr/sbin/sendmail
newaliases  /usr/sbin/sendmail

and /usr/sbin/sendmail is:

lrwxr-xr-x  1 root  wheel  21 Oct  2 09:50 /usr/sbin/sendmail - 
/usr/sbin/mailwrapper

Should it actually be the sendmail binary that postfix installs, and if so I'm 
wondering how it could have ended up being a symlink?

-- 
Bruce Cran
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Like it or not, Theo has a point... freebsd is shipping export-restricted software in the core

2010-10-07 Thread Gonzalo Nemmi


El 07/10/2010 02:18 a.m., Rob Farmer escribió:

On Wed, Oct 6, 2010 at 20:38, Gonzalo Nemmigne...@gmail.com  wrote:


As a lawyer, no matter how much I review your set up, it´s a _fact_ that a
license place in a place like
/usr/src/sys/contrib/dev/acpica/hardware/hwsleep.c, that is to say, lost
amongs a gazillion files: _will_ scape any review.

Furthermore, you can count on legal advise about the thing you tell you
lawyer to review, but if you ignore _what_ you want to get reviewed: you
can´t count on anyone knowing it for you.


I would assume that such a review would involve extracting all the
licenses in the source tree, eliminating the duplicates, and having
those reviewed. I'm saying I don't find the oh I missed that one
argument convincing, because if there is the possibility of missing a
license, then you aren't looking closely enough in the first place.


I would assume you already did that before walking into my office to ask 
me about the set of licenses up for a review ... otherwise, there´s no 
way to me to look close enough where I wasn´t asked to look ...


If you go tell your Dr. you have a simple cof and a runy nose, he won´t 
ask you to go trhough a colonoscopy or a brain tomography ... and, 
_please_, _by_all_means_ don´t count on him finding anything on your 
colon or in your brain in that case.




This license is not just in
src/sys/contrib/dev/acpica/hardware/hwsleep.c - it is in all the files
within the acpica contrib directory, plus the upstream vendor states
that it applies to the entire tarball on their website. You should
reasonably expect that each piece of software (ie directory) within
contrib may be under a different license and needs to be reviewed.


It´s not about what a lawyer or an accountant expects or doesn´t.

It´s about what _you_, who know your way around your business (only you 
know your code, the licenses it contains and where) a lot better than he 
(who actually only knows his way around his business), ask him to 
review. If you didn´t: don´t count on him jumping at you answering a 
question that was never asked in the first place, regardless of whether 
the license is on every acpica file or any file on the scheduler or on 
the bluetooth, usb or tcp/ip stack or anywhere else ...



Making the license more visible may be a good idea, but doesn't
materially change the situation any.


It does by making it visible and thus telling potential
exporters/re-exporters watch out for this one. Ask your lawyer about it´s
terms and conditions.


What I meant by doesn't materially change the situation any is that
everything exported from the US should be considered under export
restrictions unless proven otherwise. Jung-uk Kim says:

Historically FreeBSD never touched the license header.  However, I am
going to do it next time to avoid confusions.
( http://lists.freebsd.org/pipermail/freebsd-questions/2010-October/222451.html
)

I don't think this makes a bit of difference (it fact it would be
somewhat misleading) since the export restrictions are a valid law and
dropping clauses from the license doesn't change that - are you saying
I'm wrong here?


Im saying what I already said.

Best Regards
Gonzalo Nemmi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Cache Memory in top command

2010-10-07 Thread Scott Bennett

 On Wed, 29 Sep 2010 12:42:30 +0100 Bruce Cran br...@cran.org.uk
wrote:
On Wed, 29 Sep 2010 08:57:09 +0200
Bas Smeelen b.smee...@ose.nl wrote:

  *Cache:* number of clean pages caching data that are available for
 immediate reallocation
 http://www.freebsd.org/cgi/man.cgi?query=topsektion=1
 http://www.freebsd.org/cgi/man.cgi?query=topsektion=1

I believe the Cache value is almost totally unrelated to the
amount of memory used for caching: FreeBSD has a unified buffer cache
so any memory is available for use as cache. Unlike Linux, you can't
look at the line in 'top' to see how much memory is being used for
buffers and cache.

You can find more information about the VM architecture at
http://www.freebsd.org/doc/en/books/arch-handbook/vm.html .

 The top(1) man page is clearly in error, at least on FreeBSD systems.
The descriptions of the Active, Inact, Wired, Cache, Buf, and Free fields
are all wrong inasmuch as the word pages in each should instead be bytes.
For example, top on my system at present shows:

Mem: 1099M Active, 401M Inact, 262M Wired, 88M Cache, 112M Buf, 143M Free

Consider the value given for Wired (i.e., page-fixed pages, which cannot
exceed the number of page frames on the machine, of course.) Now, either
M has some extraordinary definition, or it means mega, though presumably
in the classical computing sense of the power of 2 that is closest to one
million.  My machine has 2 GB of RAM, so it is quite clearly an error to say
that there are 262 megapages (even assuming base pages (4 KB/page on i386
and amd64) and not superpages) on this machine.  Note that 262 megapages
would be 4096 bytes/page * 262 * 1024 * 1024 pages) or 1048 GB, which I
suspect is rather more than FreeBSD kernels currently support, especially
in i386, which is what my system is running.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Cache Memory in top command

2010-10-07 Thread Michel Talon

Bruce Cran said:

The top(1) man page is clearly in error, at least on FreeBSD systems.

Here is an answer to a similar question given by John Dyson the author
of the FreeBSD VM system.
http://groups.google.fr/group/comp.unix.bsd.freebsd.misc/browse_thread/thread/7d3d28b807640847/9c081931470adefb?hl=frq=jdyson+ctive,+Inact,+Wired,+Cache,+Buf#9c081931470adefb

Lowell Gilbert wrote:
Nospam nos...@no-nonsense.org writes:

Here you see what I get to see when I use top (ofcourse it's at one
certain
time...). Why is there so much Inactive memory? Why isn't that
memory Free?
Is this correct, or is there some bad application?

It's correct. There's a slogan that goes free memory is wasted
memory. Alternatively, you could look at inactive memory as being
free if that makes you happier.

The memory stats are gathered, and a semi-layered state of the memory
pages are presented. Inactive memory is quickly reusable, but is deemed
to be statistically inactive. The wasted memory in the system is indeed
the memory marked 'free.' Most of the other memory is used for other (caching)
purposes.

If you look at the latest version of 'top', Active, Inact, Wired and
Cache memory are all memory that contain mostly usable data. Buf is
sort of a subset of Wired, and Free is totally disused. Active memory
is mapped into processes, Inact memory might be mapped into processes,
and might be staged for being paged out. Wired memory is mapped into
the kernel, and Cache memory is unmapped but still retains potentially
interesting data. When a system is moderately heavily used, the Free
memory is actually kept small in amount, and is indeed the 'wasted'
memory in the system.

One time, I wrote some code that estimated the 'free' memory in the
system, and it isn't really very intuitive. Since FreeBSD has VM memory
management, the amount of free real memory is tricky to calculate. The
best thing to believe (if you can depend on paging), is that the system
will try to maintain a proper balance of memory usage.

And elsewhere he says:

Cache are the pages that are available for quick reuse. Inact and
Active are part of the staging algorithm, where Inact is use as a 2nd
chance and staging for cleaning (writing changed data.) Free are also
pages that are available for quick reuse, but have no data, and are
available at interrupt time.

The stats scheme includes some stats associatiated with active pages
also.

Michel TALON

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

78 matches

Mail list logo