Re: 9.1 - 9.2 upgrade

2013-10-09 Thread Doug Hardie

On 8 October 2013, at 16:40, Polytropon free...@edvax.de wrote:

 On Tue, 8 Oct 2013 11:20:40 -0700, Doug Hardie wrote:
 I tried downloading the src with:
 
 svn co https://svn0.us-west.FreeBSD.org/base/releng/9.2 /mnt/usr/src
 
 I didn't get Release 9.2. The first entry in UPDATING is:
 
 20130705:
hastctl(8)'s `status' command output changed to terse one-liner 
 format.
Scripts using this should switch to `list' command or be rewritten.
 
 
 There is an entry earlier for Release 9.1. but no entry for Release 9.2.
 
 You could try downloading and extracting the src distribution:
 
 ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/9.2-RELEASE/src.txz

Before I saw this I built from the src obtained via svn.  The system now boots. 
 I still have no idea what was preventing it from booting.  It was something 
between displaying the Beastie menu and waiting for user input.  There had to 
be at least 2 issues as the messages changed after the first attempt to rebuild 
the system.  I tried to chase down the boot code for the first error message 
and it appears to be generated when there is a problem with a directory.  I 
couldn't find any further diagnostic info to identify the directory.  I have 
not yet tried to chase down the second set of messages in the source.

The system now says its 9.2.  UPDATING still looks the same.  Interestingly 
enough, on another system that I updated earlier to 9.2 via freebsd-update, 
UPDATING there is identical to the one on this system.  There is no 9.2 entry.  

Also of note is that most of the ports/packages are still present.  However 
SASL2 vanished without a trace.  Its easily replaced, but why is certainly 
interesting.  I have no ideas at this point.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.1 - 9.2 upgrade

2013-10-08 Thread Doug Hardie

On 5 October 2013, at 05:08, Polytropon free...@edvax.de wrote:

 On Fri, 4 Oct 2013 21:49:18 -0700, Doug Hardie wrote:
 
 On 4 October 2013, at 20:03, Polytropon free...@edvax.de wrote:
 
 On Fri, 4 Oct 2013 19:42:15 -0700, Doug Hardie wrote:
 
 On 4 October 2013, at 19:08, Polytropon free...@edvax.de wrote:
 
 On Fri, 4 Oct 2013 18:58:52 -0700, Doug Hardie wrote:
 The exact sequence was:
 
 Step 1:  freebsd-update from 9.1 to 9.2
 
 Have you verified in /etc/freebsd-update.conf that src
 is definitely part of what should be updated?
 
 System is not bootable - can't verify anything…
 
 Does the system (or better, its enclosure, software-wise)
 allow booting a rescue system or an emergency media, such
 as a FreeBSD v9 live system?
 
 Yes - but there is no one there who can successfully be told
 how to run it.
 
 Not even inserting a USB stick (with the FreeBSD memstick data)
 or a CD?
 
 
 
 We have serious communications issues - they want to use back
 slashes and have no idea what a slash is.
 
 Maybe that is the result of many years of administration on
 Windows PCs. :-)
 
 
 
 Even if you tell them which key to use, they know better and
 use a back slash cause thats what Windoze uses.
 
 Uh... knowing better would disqualify them as maintainers of
 a server installation. The inability to learn (or even to read
 and follow instructions) is a dangerous thing.
 
 
 
 The disk should be in the mail to me now.  I will be able to
 work with it when it arrives.
 
 Okay, that's also a possible alternative. To be honest, that's
 the first time I hear about this procedure. But doable.
 
 
 
 The file /etc/freebsd-update.conf should contain the line
 
 Components src world kernel
 
 if you want to make sure the source is properly updated,
 along with the world and kernel (GENERIC).
 
 As indicated before, I don't think all the source got updated. 
 The kernel showed 9.2 after recompilation.  However UPDATING
 was not updated.  Thats as much as I could check before.
 
 I assume that this could be possible by inconsistently updated
 sources. It would be a good start to remove /usr/src and download
 the sources of the correct version via SVN _or_ freebsd-update
 again. Before the next installation attempt, /usr/obj should be
 removed as well, just to be sure.
 
 
 
 Step 5:  reboot
 
 Attention: Into single-user mode.
 
 Not possible since the system is located over 100 miles away.
 Everything has to be done via remote console.
 
 Does this mean SSH only or do you have a _real_ console
 transmission by which you can access the system _prior_ to
 the OS providing the SSH access? I'm mentioning this because
 the traditional approach requires (few) steps done in the
 single-user mode where no SSH connectivity is provided in
 the normal way…
 
 I have a telnet box that has serial connections to the console
 ports.  That approach has been used without any issues since
 FreeBSD 2.5.  I do disable all ports during the process via an
 reduced rc.conf file.
 
 A serial console should also work, but even though I've been
 using serial consoles (and _real_ serial terminals), one thing
 I'm not sure about: Is it possible to interrupt (!) the boot
 process at an early stage to get to the loader prompt and
 boot into single user mode from there?
 
   Ok
   boot -s
 
 If not, do you have the beastie menu (or whatever it is called
 today) enabled to go to SUM to perform the make installworld step?
 
 Anyway, if you can install everything is required with the disk
 at home, and then send it back to that datacenter (according
 to your characterization, the quotes are deserved), that should
 solve the problems and make sure everything works as intended.

The Thick Plottens…

I received the drives and installed them on a working system.  The failed 
system is structured with a single partition for the system and another for 
swap.  For some unknown reason, the BIOS got left configured to boot the extra 
disk if its powered up.  That turns out to be handy.  I can boot a working 
system with the corrupt drive powered off.

Booting from the corrupt drive yields the normal hardware info followed by the 
Beastie image and immediately by a multitude of lines (repeated many times):

Consoles: internal video/keyboard  serial port
BIOS drive C: is disk0
BIOS drive D: is disk1
BIOS 639kB/1037824kB available memory

FreeBSD/x86 bootstrap loader, Revision 1.1
(d...@zool.lafn.org, Thu Oct  3 04:23:13 PDT 2013)
Can't work out which disk we are booting from.
Guessed BIOS device 0x not found by probes, defaulting to disk0:


I was able to capture these by using a serial console connected to another 
computer.  The lines only appear on the serial console once.  They scroll by on 
the real console many time - all too fast to read anything.  Then after a few 
seconds of that, the screen goes black, and the system reboots.  The cycle then 
repeats…  Pressing any key does nothing.  I even filled the keyboard buffer 
with spaces

Re: 9.1 - 9.2 upgrade

2013-10-08 Thread Doug Hardie

On 8 October 2013, at 06:22, dweimer dwei...@dweimer.net wrote:

 On 10/08/2013 4:27 am, Doug Hardie wrote:
 On 5 October 2013, at 05:08, Polytropon free...@edvax.de wrote:
 On Fri, 4 Oct 2013 21:49:18 -0700, Doug Hardie wrote:
 On 4 October 2013, at 20:03, Polytropon free...@edvax.de wrote:
 On Fri, 4 Oct 2013 19:42:15 -0700, Doug Hardie wrote:
 On 4 October 2013, at 19:08, Polytropon free...@edvax.de wrote:
 On Fri, 4 Oct 2013 18:58:52 -0700, Doug Hardie wrote:
 The exact sequence was:
 Step 1:  freebsd-update from 9.1 to 9.2
 Have you verified in /etc/freebsd-update.conf that src
 is definitely part of what should be updated?
 System is not bootable - can't verify anything…
 Does the system (or better, its enclosure, software-wise)
 allow booting a rescue system or an emergency media, such
 as a FreeBSD v9 live system?
 Yes - but there is no one there who can successfully be told
 how to run it.
 Not even inserting a USB stick (with the FreeBSD memstick data)
 or a CD?
 We have serious communications issues - they want to use back
 slashes and have no idea what a slash is.
 Maybe that is the result of many years of administration on
 Windows PCs. :-)
 Even if you tell them which key to use, they know better and
 use a back slash cause thats what Windoze uses.
 Uh... knowing better would disqualify them as maintainers of
 a server installation. The inability to learn (or even to read
 and follow instructions) is a dangerous thing.
 The disk should be in the mail to me now.  I will be able to
 work with it when it arrives.
 Okay, that's also a possible alternative. To be honest, that's
 the first time I hear about this procedure. But doable.
 The file /etc/freebsd-update.conf should contain the line
   Components src world kernel
 if you want to make sure the source is properly updated,
 along with the world and kernel (GENERIC).
 As indicated before, I don't think all the source got updated.
 The kernel showed 9.2 after recompilation.  However UPDATING
 was not updated.  Thats as much as I could check before.
 I assume that this could be possible by inconsistently updated
 sources. It would be a good start to remove /usr/src and download
 the sources of the correct version via SVN _or_ freebsd-update
 again. Before the next installation attempt, /usr/obj should be
 removed as well, just to be sure.
 Step 5:  reboot
 Attention: Into single-user mode.
 Not possible since the system is located over 100 miles away.
 Everything has to be done via remote console.
 Does this mean SSH only or do you have a _real_ console
 transmission by which you can access the system _prior_ to
 the OS providing the SSH access? I'm mentioning this because
 the traditional approach requires (few) steps done in the
 single-user mode where no SSH connectivity is provided in
 the normal way…
 I have a telnet box that has serial connections to the console
 ports.  That approach has been used without any issues since
 FreeBSD 2.5.  I do disable all ports during the process via an
 reduced rc.conf file.
 A serial console should also work, but even though I've been
 using serial consoles (and _real_ serial terminals), one thing
 I'm not sure about: Is it possible to interrupt (!) the boot
 process at an early stage to get to the loader prompt and
 boot into single user mode from there?
 Ok
 boot -s
 If not, do you have the beastie menu (or whatever it is called
 today) enabled to go to SUM to perform the make installworld step?
 Anyway, if you can install everything is required with the disk
 at home, and then send it back to that datacenter (according
 to your characterization, the quotes are deserved), that should
 solve the problems and make sure everything works as intended.
 The Thick Plottens…
 I received the drives and installed them on a working system.  The
 failed system is structured with a single partition for the system and
 another for swap.  For some unknown reason, the BIOS got left
 configured to boot the extra disk if its powered up.  That turns out
 to be handy.  I can boot a working system with the corrupt drive
 powered off.
 Booting from the corrupt drive yields the normal hardware info
 followed by the Beastie image and immediately by a multitude of lines
 (repeated many times):
 Consoles: internal video/keyboard  serial port
 BIOS drive C: is disk0
 BIOS drive D: is disk1
 BIOS 639kB/1037824kB available memory
 FreeBSD/x86 bootstrap loader, Revision 1.1
 (d...@zool.lafn.org, Thu Oct  3 04:23:13 PDT 2013)
 Can't work out which disk we are booting from.
 Guessed BIOS device 0x not found by probes, defaulting to disk0:
 I was able to capture these by using a serial console connected to
 another computer.  The lines only appear on the serial console once.
 They scroll by on the real console many time - all too fast to read
 anything.  Then after a few seconds of that, the screen goes black,
 and the system reboots.  The cycle then repeats…  Pressing any key
 does nothing.  I even filled

Re: 9.1 - 9.2 upgrade

2013-10-04 Thread Doug Hardie

On 4 October 2013, at 09:22, dweimer dwei...@dweimer.net wrote:

 On 10/04/2013 1:36 am, Doug Hardie wrote:
 On 3 October 2013, at 11:48, Doug Hardie bc...@lafn.org wrote:
 On 3 October 2013, at 10:49, Doug Hardie bc...@lafn.org wrote:
 I just did an upgrade using freebsd-update to 9.2.  This system uses a 
 custom kernel so I am rebuilding everything after the update completed.  
 However, I noticed that /usr/src/UPDATING has not been updated.  The first 
 entry still says:  9.1-RELEASE.  Is this correct?
 Well, it just got worse - The last reboot now fails:  I am using a remote 
 console and it shows:
 -- Press a key on the console to reboot --
 Rebooting...
 Consoles: internal video/keyboard  serial port
 BIOS drive A: is disk0
 BIOS drive C: is disk1
 BIOS 639kB/2087360kB available memory
 FreeBSD/x86 bootstrap loader, Revision 1.1
 (d...@zool.lafn.org, Thu Oct  3 04:23:13 PDT 2013)
 Can't work out which disk we are booting from.
 Guessed BIOS device 0x not found by probes, defaulting to disk0:
 panic: free: guard1 fail @ 0x7f481ed0 from 
 /usr/src/sys/boot/i386/loader/../../common/module.c:1004
 -- Press a key on the console to reboot --
 I can enter a string as it doesn't try to reboot again till the return is 
 entered.  I've tried b disk1, but it still only tries disk0.  The system 
 rebooted fine after the reboot after make kernel.  Mergemaster didn't seem 
 to affect anything dealing with boot.  Don't know what make delete-old does 
 but the descriptions lead me to not believe it could cause this.  This 
 system is on the other side of LA from me so its a major trip timewise.  
 Any ideas how this can be recovered remotely?
 Booting off the live CD didn't find anything obviously wrong.  I
 replaced the kernel with the old one and still the same error.  I am
 having the drive mailed to me and will work with it here.  However, it
 appears a new install is going to be required.  The old sysinstall had
 the capability to skip over the formatting of the disk by just
 entering quit.  It would then just replace the system components and
 leave everything else alone.  I don't see any obvious way to do the
 same thing with bsdinstall.  Is there a way to do that.  I don't want
 to have to completely rebuild the drive, but just replace the system.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 
 Just want to clarify the steps that started this
 
 if I read everything right:
 
 Step 1:  freebsd-update from 9.1 to 9.2
 Step 2:  compile from source ?  Was this world, or just the custom kernel??
 Step 3:  make delete-old
 Step 4:  mergemaster
 Step 5:  reboot
 oops, something went wrong..
 
 If my suspicions are correct, the source was still 9.1 patch 7,  but the 
 system was running 9.2 from the binary update.  This may have caused the make 
 delete-old to delete things it shouldn't have
 
 The very first thing I would do is bring the disk up in another system and 
 make a backup copy of the data.
 
 I have never tried this process, I am basically just taking the steps I use 
 for updating a zfs system using boot environments, and applying them in order 
 to build a new kernel and world to an alternate directory, as a method of 
 recovering the system.
 
 The next step I would take is to then mount the file systems in an alternate 
 location, /mnt for example
 
 make MAKEOBJDIRPREFIX /mnt/usr/obj
 make DESTDIR /mnt
 cd /mnt/usr/src
 rm -r * .svn
 rm -r /usr/obj/*
 svn co https://svn0.us-west.freebsd.org/base/releng/9.2
 make buildwolrd
 make buildkernel
 make installkernel
 make installworld
 make -DBATCH_DELETE_OLD_FILES delete-old
 make -DBATCH_DELETE_OLD_FILES delete-old-libs
 mergemaster -Ui /mnt/usr/src -D /mnt
 
 With some luck the file system will now contain a boot-able FreeBSD install, 
 that will still have all the settings in place, except it will be the generic 
 kernel.  You should then just be able to build and install the custom kernel, 
 from the booted system as you normally would.
 

The exact sequence was:

Step 1:  freebsd-update from 9.1 to 9.2
Step 2:  make buildworld
Step 3:  make build_kernel KERNCONF=LAFN
Step 4:  make install_kernel KERNCONF=LAFN
Step 5:  reboot
Step 6:  mergemaster -p
Step 7:  make installworld
Step 8:  mergemaster -i
Step 9:  make delete-old
Step 10:  reboot
oops, something went wrong..

After step 5, uname -a still showed 9.2 but now it listed the kernel I built 
rather than generic.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.1 - 9.2 upgrade

2013-10-04 Thread Doug Hardie

On 4 October 2013, at 19:08, Polytropon free...@edvax.de wrote:

 On Fri, 4 Oct 2013 18:58:52 -0700, Doug Hardie wrote:
 The exact sequence was:
 
 Step 1:  freebsd-update from 9.1 to 9.2
 
 Have you verified in /etc/freebsd-update.conf that src
 is definitely part of what should be updated?

System is not bootable - can't verify anything…

 
 
 
 Step 2:  make buildworld
 Step 3:  make build_kernel KERNCONF=LAFN
 Step 4:  make install_kernel KERNCONF=LAFN
 
 I assume the correct targets buildkernel and installkernel
 have been used. ;-)
 

Yes

 
 
 Step 5:  reboot
 
 Attention: Into single-user mode.

Not possible since the system is located over 100 miles away.  Everything has 
to be done via remote console.


 
 
 
 Step 6:  mergemaster -p
 Step 7:  make installworld
 Step 8:  mergemaster -i
 Step 9:  make delete-old
 Step 10:  reboot
 
 Into multi-user mode again.
 
 
 
 oops, something went wrong..
 
 After step 5, uname -a still showed 9.2 but now it listed the
 kernel I built rather than generic.
 
 Again, verify your configuration. Compare your steps with the
 comment header of /usr/src/Makefile which illustrates the
 exact procedure; from a (dated) 8-STABLE installation:
 
 1.  `cd /usr/src'   (or to the directory containing your source tree).
 2.  `make buildworld'
 3.  `make buildkernel KERNCONF=YOUR_KERNEL_HERE' (default is GENERIC).
 4.  `make installkernel KERNCONF=YOUR_KERNEL_HERE'   (default is GENERIC).
  [steps 3.  4. can be combined by using the kernel target]
 5.  `reboot'(in single user mode: boot -s from the loader prompt).
 6.  `mergemaster -p'
 7.  `make installworld'
 8.  `make delete-old'
 9.  `mergemaster'(you may wish to use -i, along with -U or -F).
 10.  `reboot'
 11.  `make delete-old-libs' (in case no 3rd party program uses them anymore)
 
 
 -- 
 Polytropon
 Magdeburg, Germany
 Happy FreeBSD user since 4.0
 Andra moi ennepe, Mousa, ...
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.1 - 9.2 upgrade

2013-10-04 Thread Doug Hardie

On 4 October 2013, at 20:03, Polytropon free...@edvax.de wrote:

 On Fri, 4 Oct 2013 19:42:15 -0700, Doug Hardie wrote:
 
 On 4 October 2013, at 19:08, Polytropon free...@edvax.de wrote:
 
 On Fri, 4 Oct 2013 18:58:52 -0700, Doug Hardie wrote:
 The exact sequence was:
 
 Step 1:  freebsd-update from 9.1 to 9.2
 
 Have you verified in /etc/freebsd-update.conf that src
 is definitely part of what should be updated?
 
 System is not bootable - can't verify anything…
 
 Does the system (or better, its enclosure, software-wise)
 allow booting a rescue system or an emergency media, such
 as a FreeBSD v9 live system?

Yes - but there is no one there who can successfully be told how to run it.  We 
have serious communications issues - they want to use back slashes and have no 
idea what a slash is.  Even if you tell them which key to use, they know better 
and use a back slash cause thats what Windoze uses.  The disk should be in the 
mail to me now.  I will be able to work with it when it arrives.

 
 The file /etc/freebsd-update.conf should contain the line
 
   Components src world kernel
 
 if you want to make sure the source is properly updated,
 along with the world and kernel (GENERIC).

As indicated before, I don't think all the source got updated.  The kernel 
showed 9.2 after recompilation.  However UPDATING was not updated.  Thats as 
much as I could check before.

 
 
 
 Step 5:  reboot
 
 Attention: Into single-user mode.
 
 Not possible since the system is located over 100 miles away.
 Everything has to be done via remote console.
 
 Does this mean SSH only or do you have a _real_ console
 transmission by which you can access the system _prior_ to
 the OS providing the SSH access? I'm mentioning this because
 the traditional approach requires (few) steps done in the
 single-user mode where no SSH connectivity is provided in
 the normal way…

I have a telnet box that has serial connections to the console ports.  That 
approach has been used without any issues since FreeBSD 2.5.  I do disable all 
ports during the process via an reduced rc.conf file.

 
 
 
 
 
 -- 
 Polytropon
 Magdeburg, Germany
 Happy FreeBSD user since 4.0
 Andra moi ennepe, Mousa, ...
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


9.1 - 9.2 upgrade

2013-10-03 Thread Doug Hardie
I just did an upgrade using freebsd-update to 9.2.  This system uses a custom 
kernel so I am rebuilding everything after the update completed.  However, I 
noticed that /usr/src/UPDATING has not been updated.  The first entry still 
says:  9.1-RELEASE.  Is this correct?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.1 - 9.2 upgrade

2013-10-03 Thread Doug Hardie

On 3 October 2013, at 10:49, Doug Hardie bc...@lafn.org wrote:

 I just did an upgrade using freebsd-update to 9.2.  This system uses a custom 
 kernel so I am rebuilding everything after the update completed.  However, I 
 noticed that /usr/src/UPDATING has not been updated.  The first entry still 
 says:  9.1-RELEASE.  Is this correct?

Well, it just got worse - The last reboot now fails:  I am using a remote 
console and it shows:

-- Press a key on the console to reboot --
Rebooting...
Consoles: internal video/keyboard  serial port  
BIOS drive A: is disk0
BIOS drive C: is disk1
BIOS 639kB/2087360kB available memory

FreeBSD/x86 bootstrap loader, Revision 1.1
(d...@zool.lafn.org, Thu Oct  3 04:23:13 PDT 2013)
Can't work out which disk we are booting from.
Guessed BIOS device 0x not found by probes, defaulting to disk0:

panic: free: guard1 fail @ 0x7f481ed0 from 
/usr/src/sys/boot/i386/loader/../../common/module.c:1004
-- Press a key on the console to reboot --


I can enter a string as it doesn't try to reboot again till the return is 
entered.  I've tried b disk1, but it still only tries disk0.  The system 
rebooted fine after the reboot after make kernel.  Mergemaster didn't seem to 
affect anything dealing with boot.  Don't know what make delete-old does but 
the descriptions lead me to not believe it could cause this.  This system is on 
the other side of LA from me so its a major trip timewise.  Any ideas how this 
can be recovered remotely?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.1 - 9.2 upgrade

2013-10-03 Thread Doug Hardie

On 3 October 2013, at 11:58, dweimer dwei...@dweimer.net wrote:

 On 10/03/2013 1:48 pm, Doug Hardie wrote:
 On 3 October 2013, at 10:49, Doug Hardie bc...@lafn.org wrote:
 I just did an upgrade using freebsd-update to 9.2.  This system uses a 
 custom kernel so I am rebuilding everything after the update completed.  
 However, I noticed that /usr/src/UPDATING has not been updated.  The first 
 entry still says:  9.1-RELEASE.  Is this correct?
 Well, it just got worse - The last reboot now fails:  I am using a
 remote console and it shows:
 -- Press a key on the console to reboot --
 Rebooting...
 Consoles: internal video/keyboard  serial port
 BIOS drive A: is disk0
 BIOS drive C: is disk1
 BIOS 639kB/2087360kB available memory
 FreeBSD/x86 bootstrap loader, Revision 1.1
 (d...@zool.lafn.org, Thu Oct  3 04:23:13 PDT 2013)
 Can't work out which disk we are booting from.
 Guessed BIOS device 0x not found by probes, defaulting to disk0:
 panic: free: guard1 fail @ 0x7f481ed0 from
 /usr/src/sys/boot/i386/loader/../../common/module.c:1004
 -- Press a key on the console to reboot --
 I can enter a string as it doesn't try to reboot again till the return
 is entered.  I've tried b disk1, but it still only tries disk0.  The
 system rebooted fine after the reboot after make kernel.  Mergemaster
 didn't seem to affect anything dealing with boot.  Don't know what
 make delete-old does but the descriptions lead me to not believe it
 could cause this.  This system is on the other side of LA from me so
 its a major trip timewise.  Any ideas how this can be recovered
 remotely?
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 
 I wonder if your source update didn't correctly download, mine starts with:
 
 Updating Information for FreeBSD current users
 ...[snip]...
 Items affecting the ports and packages system can be found in
 /usr/ports/UPDATING.  Please read that file before running portupgrade.
 
 20130705:
hastctl(8)'s `status' command output changed to terse one-liner format.
Scripts using this should switch to `list' command or be rewritten.
 
 20130618:
Fix a bug that allowed a tracing process (e.g. gdb) to write
 ...[snip]...
 20121218:
With the addition of auditdistd(8), a new auditdistd user is now
depended on during installworld.  mergemaster -p can be used to add
the user prior to installworld, as documented in the handbook.
 
 20121205:
9.1-RELEASE.
 ...[snip]...
 
 I haven't a clue how to fix your non booting system short of booting off a 
 FreeBSD disc, going to live CD, mounting the filesystems in a temp location 
 and doing a buildworld/kernel over again with correct source tree.

I have been using freebsd-update for quite awhile now and this is the first 
time it has failed.  However, I am not convinced the kernel is bad.  It never 
gets to the point of trying to load the kernel.  Something has failed in the 
bootstrap process itself and I have not figured out what is the right thing to 
enter at that prompt.  Being on-site is not a viable alternative…


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Throughput test with iperf...

2013-09-29 Thread Doug Hardie
On 28 September 2013, at 23:38, takCoder tak.offic...@gmail.com wrote:

 hi again..
 
 would any of you please at least explain it to me what may cause iperf
 server ending up with Segmentation fault (core dumped) message right at
 the beginning of setting second connection in my bi-directional throughput
 test, using -r flag??
 
 i used these commands on client and server on two freebsd machines which
 are connected straight with one cat5e cable:
 
 iperf -s -i 1
 iperf -c X.Y.Z.T -t 60 -r
 
 just getting more confused.. :(

Are you using iperf or iperf2.  Iperf has a few problems.  Iperf2 is more 
stable.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Throughput test with iperf...

2013-09-29 Thread Doug Hardie

On 29 September 2013, at 01:20, takCoder tak.offic...@gmail.com wrote:

 thanks for your reply.. :)
 
 i think it's iperf.. i installed /usr/ports/benchmarks/iperf port.
 where can i find iperf2? my machines are both FreeBsds but i can't find 
 iperf2 in my ports collection.. 

Bad memory - its iperf3.  There is no port at this time.  You find it at:

http://code.google.com/p/iperf/


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


fusefs-libs compile error

2013-09-25 Thread Doug Sampson

While trying to upgrade from 2.9.3 of fusefs-libs:


root@squid:/usr/ports/sysutils/fusefs-libs# make install clean

===  Building package for fusefs-libs-2.9.3_1
Creating package /usr/ports/packages/All/fusefs-libs-2.9.3_1.tbz
Registering depends: libiconv-1.14_1.
Creating bzip'd tar ball in '/usr/ports/packages/All/fusefs-libs-2.9.3_1.tbz'
tar:  share/doc/fusefs/libs/how-fuse-works: Cannot stat: No such file or 
directory
tar:  share/doc/fusefs/libs/kernel.txt: Cannot stat: No such file or directory
tar: Error exit delayed from previous errors.
pkg_create: make_dist: tar command failed with code 256
*** [do-package] Error code 1

Stop in /usr/ports/sysutils/fusefs-libs.
*** [install] Error code 1

Stop in /usr/ports/sysutils/fusefs-libs.
root@squid:/usr/ports/sysutils/fusefs-libs#



What's up with this?

~Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Since SquirrelMail Looks Like It Will Never Be Supported Again...

2013-09-02 Thread doug

On Sat, 31 Aug 2013, Reko Turja wrote:


-Original Message- From: Frank Leonhardt

FWIW I'm using Dovecote 1 or 2 for the IMAP. In particular, Dovecot 1 with 
Squirrelmail has been really hammered, but has never broken. I sometimes 
get time-outs copying thousands of emails in one hit, but that's fair 
enough and nothing has ever been lost. Could the server be the problem in 
your case? I found the standard imapd did weird things for a lot of 
clients, and making the switch after many years of trying to blame the 
client software was a really good decision.


Running Cyrus here for ages, it might be a bit of pain to set up, but it's 
been a really bulletproof and zero maintenance solution. The problems 
cannot be replicated on any other client, only Squirrel has those problems 
with mail not showing up.


-Reko


We run postfix/cyrus mail servers. My experience with messages not showing up 
happens with Outlook (versions 2003, 2007, and 2013), squirrelmail, and mac 
mail. In all cases reported, the user can find messages either by sorting by 
date or by searching on some matching criteria. We put this in our FAQ. I have 
not noticed this issue with a server using sendmail/dovecot.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Finding exactly which commands, and in which order, rc is running at startup

2013-08-23 Thread Doug Hardie

On 22 August 2013, at 13:07, Paul Hoffman phoff...@proper.com wrote:

 Greetings again. After doing a freebsd-update, my system is starting up 
 differently than it was before. I want to figure out why before I come here 
 and say it's broken.
 
 Is there a way to say show me all of the commands you are running during 
 startup? It would be grand if I could say tell me what you would do next 
 time (dry run), but what did you do last time is OK too.

You can add:

rc_debug=YES

to /etc/rc.conf and that might give you what you need.  According to the man 
page it will produces copious output to the terminal and syslog(3)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: dig

2013-08-22 Thread Doug Hardie

On 21 August 2013, at 18:14, Colin House co...@restecp.com wrote:

 On 22/08/2013 9:34 AM, Doug Hardie wrote:
 There appears to be a problem with dig and the +trace option in 9.2.  I 
 believe its also in 9.1.  The command:
 
 dig freebsd.org +trace
 
 Only yields a dumb response.  No useful information is provided.  Running 
 the same command on FreeBSD 7.2 yields a complete trace with lots of useful 
 information.
 
 Have you tested against another NS?  I ran into a similar problem when 
 setting up unbound as a local recursor recently on a 9.1-STABLE (r251985) box.
 
 dig +trace domain would return (next to) nothing.  dig +trace domain 
 @8.8.8.8 worked as expected.
 
 I found it was the access-control configuration of unbound.  Changing my 
 access-control: ::1 allow to access-control: ::1 allow_snoop restored the 
 +trace functionality.
 
 I'm not sure how this translates with bind.. Perhaps the defaults have 
 changed between the versions that you're running (if you're running the base 
 versions on 7.2 and 9.1) or your recursive server isn't allowing it on 9.2?  
 Fwiw, in unbound, allow allows recursive lookups, allow_snoop allows both 
 recursive and non-recursive lookups.


After a bunch of testing, I have determined that the problem is the routers.  
If I use my local DNS servers or remote ones, then it works on all three 
systems.  Three different routers block it somehow.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: dig

2013-08-21 Thread Doug Hardie

On 21 August 2013, at 17:02, Doug Hardie bc...@lafn.org wrote:

 
 On 21 August 2013, at 16:46, Frank Leonhardt fra...@fjl.co.uk wrote:
 
 On 22/08/2013 00:34, Doug Hardie wrote:
 There appears to be a problem with dig and the +trace option in 9.2.  I 
 believe its also in 9.1.  The command:
 
 dig freebsd.org +trace
 
 Only yields a dumb response.  No useful information is provided.  Running 
 the same command on FreeBSD 7.2 yields a complete trace with lots of useful 
 information.
 ___
 
 
 Works for me on 9.0 and 9.1 (and 8.2, 7.1, 7.0)
 
 Is there something wrong with your local bind configuration?
 
 Regards, Frank.
 
 No.  The 7.2 config is identical to the 9.1 and there is no bind running on 
 the 9.2.
 
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 9.2

2013-08-15 Thread Doug Hardie

On 15 August 2013, at 06:37, ajtiM lum...@gmail.com wrote:

 
 How will be ATI supported in FreeBSD 9.2, please? I like bluetooth mouse. Is 
 it supported?
 
 I try Linux Mint and it works perfect. I am downloading live CD for NetBSD 
 (jibbed) and I will see how is works but I like to install FreeBSD (not 
 double boot, just FreeBSD).
 

See:  http://docs.freebsd.org/cgi/mid.cgi?28915479-B712-4ED0-A041-B75F2F59FECA

Thats not a complete answer as I don't use any of the user interface stuff.  
However, it will give a starting point for you.  I have updated my two newest 
minis to run 9.2 (latest candidate).


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: OT: rsync on Mac OSX

2013-07-12 Thread Doug Hardie

On 12 July 2013, at 10:49, Chris Maness ch...@chrismaness.com wrote:

 On Tue, Jul 2, 2013 at 3:11 PM, Chris Maness ch...@chrismaness.com wrote:
 
 
 
 
 
 Since you are going to wait anyway, why don't you try peeking at some of
 the file checksums while this is running?
 
 MacOS X comes with a shasum utility which implements SHA-256 checksums,
 so you should be able to look at a few random samples of these files,
 e.g. by running on the source disk:
 
shasum -a 256 source_directory/file/path/to/some/file.ext
 
shasum -a 256 copied_directory/file/path/to/some/file.ext
 
 If these are the same, then the applications look elsewhere, e.g. in the
 'hidden' .DS_Store stuff some MacOS directories contain.
 
 But if the checksums are different, well, then there's your problem.
 
 
 
 Checksums are the same.  All other files still work however the HUGE
 rendered Final Cut Pro output, so I guess it is something in .DS_Store.
 Last time I just gave up and recopied everything by a simple cut and paste
 and that solved the problem.  I made a small change on the project today,
 and I don't want to have to copy the WHOLE thing again just for a small
 delta.  I already synced the directories, but the new rendered files are
 still un-openable in any application even though the checksums match.
 Really weird.  However, the project will still open and work on FCP.  Just
 the 12Gb rendered movie files will not play on anything even FCP.  If I
 delete .DS_Store will the system regenerate it with the appropriate file
 associations?
 
 I know this is a little off topic, but Mac OSX is based on BSD.  You guys
 are also the smartest around :D

Rsync on the Mac only opens and copies the data forks.  It does not copy the 
resource forks.  There are still a few applications that use resource forks.  
Likewise the checksum apps work on the data forks only.

There is a utility that is a modified rsync that does handle resource forks.  I 
no longer remember what its name is.  Its been a number of years since I last 
used it.  I normally rsync from FreeBSD systems to Mac systems.  I use Minis as 
off-site backups.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Boot Loader Issue

2013-06-23 Thread Doug Hardie
I had to convert a system from GPT to MBR.  All went fine till I tried to 
reboot the system.  It gets to mountroot and dies trying to mount from 
ufs:/dev/ada0p2.  That won't work.  If I enter ufs:/dev/ada0s1a then the system 
boots fine and runs.  I need to alter mountroot so it tries the right 
partition/slice.  How do I do that?  I couldn't find anything in the handbook 
on that.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Boot Loader Issue

2013-06-23 Thread Doug Hardie

On 23 June 2013, at 20:39, Warren Block wbl...@wonkity.com wrote:

 On Sun, 23 Jun 2013, Doug Hardie wrote:
 
 I had to convert a system from GPT to MBR.  All went fine till I tried to 
 reboot the system.  It gets to mountroot and dies trying to mount from 
 ufs:/dev/ada0p2.  That won't work.
 
 The loader should be getting that information from /etc/fstab.  Have the 
 entries there been changed?

That was the problem.  The system used GPT before and I can't believe I forgot 
to update fstab.  That was a really dumb mistake.  Thanks very much.

 
 If I enter ufs:/dev/ada0s1a then the system boots fine and runs.  I need to 
 alter mountroot so it tries the right partition/slice.  How do I do that?  I 
 couldn't find anything in the handbook on that.
 
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/boot-blocks.html 
 has some information.
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: System Calls that do DNS

2013-06-06 Thread Doug Hardie

On 3 June 2013, at 22:21, Doug Hardie bc...@lafn.org wrote:

 
 On 3 June 2013, at 20:39, staticsafe m...@staticsafe.ca wrote:
 
 On Mon, Jun 03, 2013 at 07:57:07PM -0700, Doug Hardie wrote:
 I have an unusual situation.  A program is doing a DNS lookup and often the 
 IP address has no reverse DNS entries.  As a result the program hangs for 
 several timeouts.  The call is not being made directly in its code, but is 
 occurring in a system call.  There are no specific calls to DNS, its 
 something else doing it.  I have been trying to track down which system 
 call is doing it, but without success so far.  I have tried syslog calls 
 around each of the system calls I thought might be the culprit, but my 
 guessing is not very good.  How can I identify the system call that is 
 calling DNS?  If I can find it, I hopefully can find another way to do 
 whatever it does that does not involve a reverse DNS lookup.
 
 
 
 Use truss:
 http://www.freebsd.org/cgi/man.cgi?query=truss
 
 The truss utility traces the system calls called by the specified
 process or program.
 -- 
 staticsafe
 O ascii ribbon campaign - stop html mail - www.asciiribbon.org
 Please don't top post - http://goo.gl/YrmAb
 Don't CC me! I'm subscribed to whatever list I just posted on.
 
 
 Unfortunately truss does not show anything more than ktrace.  I know what is 
 going out on the internet connection.  Its a plain old reverse DNS request.  
 The question is what library module (probably not a system call now that I 
 think about it) is making that request.  Interestingly enough, adding the IP 
 address with a dummy name in /etc/hosts causes the reverse request to succeed 
 and there are no time delays.  So whatever module it is, is not using bind.  
 Bind doesn't check the hosts files as far as I can tell.
 ___

After considering all the advice I received, the method I found that worked was 
to start the process and when it entered the reverse DNS timeout, quickly find 
the process ID and do a gdb on that process.  Then a where command showed the 
entire stack which included all the module calls.  I had to rebuild the process 
with debugging first.

The IPv6 API when getting the client information will also do a reverse DNS 
lookup unless you specifically tell it not to do so.  Changing that eliminated 
the lookup and the timeouts.

Thanks to all.

-- Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can sasl/sendmail Report IP Of Failed Access?

2013-06-04 Thread Doug Hardie

On 4 June 2013, at 08:47, Tim Daneliuk tun...@tundraware.com wrote:

 I am seeing login dictionary attacks on a FreeBSD mail server being
 reported.  Is there a way to determine the IPs that are doing this
 so they can be blocked at the firewall?   auth.log only
 notes the attempted user name, not the IP of origin.
 -- 
 

I wrote some code to find the appropriate maillog entries which do include the 
IP addresses.  It automagically adds the IP addresses to the pf blackhole table 
if certain criteria is met.  The criteria is changeable.  If you would like a 
copy, let me know.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: System Calls that do DNS

2013-06-04 Thread Doug Hardie

On 4 June 2013, at 22:19, Enno Davids e...@metva.com wrote:

 See if whois can tell you who owns the block the IP is in. That may give
 you some insight into what is asking for the reverse.

Its ATT.  Its probably at least a state's worth of DSL addresses.  I am 
physically at one of them for a couple more days.  After that I have no way to 
test this.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


System Calls that do DNS

2013-06-03 Thread Doug Hardie
I have an unusual situation.  A program is doing a DNS lookup and often the IP 
address has no reverse DNS entries.  As a result the program hangs for several 
timeouts.  The call is not being made directly in its code, but is occurring in 
a system call.  There are no specific calls to DNS, its something else doing 
it.  I have been trying to track down which system call is doing it, but 
without success so far.  I have tried syslog calls around each of the system 
calls I thought might be the culprit, but my guessing is not very good.  How 
can I identify the system call that is calling DNS?  If I can find it, I 
hopefully can find another way to do whatever it does that does not involve a 
reverse DNS lookup.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: System Calls that do DNS

2013-06-03 Thread Doug Hardie

On 3 June 2013, at 20:39, staticsafe m...@staticsafe.ca wrote:

 On Mon, Jun 03, 2013 at 07:57:07PM -0700, Doug Hardie wrote:
 I have an unusual situation.  A program is doing a DNS lookup and often the 
 IP address has no reverse DNS entries.  As a result the program hangs for 
 several timeouts.  The call is not being made directly in its code, but is 
 occurring in a system call.  There are no specific calls to DNS, its 
 something else doing it.  I have been trying to track down which system call 
 is doing it, but without success so far.  I have tried syslog calls around 
 each of the system calls I thought might be the culprit, but my guessing is 
 not very good.  How can I identify the system call that is calling DNS?  If 
 I can find it, I hopefully can find another way to do whatever it does that 
 does not involve a reverse DNS lookup.
 
 
 
 Use truss:
 http://www.freebsd.org/cgi/man.cgi?query=truss
 
 The truss utility traces the system calls called by the specified
 process or program.
 -- 
 staticsafe
 O ascii ribbon campaign - stop html mail - www.asciiribbon.org
 Please don't top post - http://goo.gl/YrmAb
 Don't CC me! I'm subscribed to whatever list I just posted on.
 

Unfortunately truss does not show anything more than ktrace.  I know what is 
going out on the internet connection.  Its a plain old reverse DNS request.  
The question is what library module (probably not a system call now that I 
think about it) is making that request.  Interestingly enough, adding the IP 
address with a dummy name in /etc/hosts causes the reverse request to succeed 
and there are no time delays.  So whatever module it is, is not using bind.  
Bind doesn't check the hosts files as far as I can tell.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


question installing 9.1

2013-05-06 Thread doug
I installed 9.1-release amd 64 from the DVD. I intended to leave the obligatory 
windows 7. I shrunk the primary windows partition and installed FreeBSD. I never 
got an option to install the multi-partition boot record. Rather the install 
overwrote the MBR with a boot record to boot FreeBSD. While I appreciate the 
irony is there a way to make that option appear or is the only solution to 
rewrite it after the fact?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: question installing 9.1

2013-05-06 Thread doug



On Mon, 6 May 2013, doug wrote:

I installed 9.1-release amd 64 from the DVD. I intended to leave the 
obligatory windows 7. I shrunk the primary windows partition and installed 
FreeBSD. I never got an option to install the multi-partition boot record. 
Rather the install overwrote the MBR with a boot record to boot FreeBSD. 
While I appreciate the irony is there a way to make that option appear or is 
the only solution to rewrite it after the fact?


boot0cfg -B /dev/ada0 (ada or what ever your disk dev is)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


freebsd-update question

2013-05-04 Thread doug
I had an 8.2 system that I wanted to take to 8.4. First I tried upgrade to 8.4, 
getting (in essence) can't do that. So I upgraded 8.2 which worked giving the 
end-of-life warning. But seemed work. I then did an upgrade to 8.3 with:


   freebsd-update -r 8.3-RELEASE upgrade

The first part, downloading the diffs and inspecting the system seemed ok. The 
install seemed ok up to the point it wanted to edit files. It wanted to edit 
freebsd.submit.cf and sendmail.cf neither of which had local changes and then it 
started wanting to delete all the files in /etc. I aborted the process when it 
got to rc.conf. The message was something like, deleting file hosts.allow no 
longer in 8.3. Happily aborting the process left the system unchanged.


Aside from, what could I have done wrong? My question is should we be able to 
trust freebsd-update on expired systems if it says a mirror exists and then sets 
about doing its thing? Can this happen in the normal process of removing update 
'cruft' from the mirrors?


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Kernel Modules Documentation?

2013-05-01 Thread doug



On Wed, 1 May 2013, Mehmet Erol Sanliturk wrote:


On Wed, May 1, 2013 at 12:14 PM, Walter Hurry walterhu...@gmail.com wrote:


On Tue, 30 Apr 2013 10:07:13 -0400, ill...@gmail.com wrote:


On 30 April 2013 09:39, Walter Hurry walterhu...@gmail.com wrote:


FreeBSD 9.1 on amd64.

I have a list of about 220 kernel modules and would like to find out
what they do, or are for (none has a man page). I suspect that many of
them are drivers for particular devices.

Is there any resource or documentation available?


fxr.watson.org is a kernel source cross ref
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox is so slow

2013-04-29 Thread doug

On Mon, 29 Apr 2013, Robert Huff wrote:



David Demelier writes:


 On my machine : intel i3 540, 2G of RAM and FreeBSD 9.1 it takes
 around 12 secondes to start. Is it so long for you too?


Additional data point:
System:

FreeBSD 10.0-CURRENT #0 r248938: Sun Mar 31 06:24:42 EDT 2013  amd64

Hardware:

AMD Phenom, 4 cores @ 3 Ghz, 8mbytes RAM

With the load (as reported by top) at around 6, Firefox 20 also
takes ~12 seconds.
On the other hand ... once I open a browser I work within it,
until it's no longer needed (or it crashes :-( ).  Opening a new
window/tab in SeaMonkey is so fast I can barely see it happen.


I have a $300 HP desktop. No Flash, Java. Firefox starts immediately (1 sec) 
would need a stopwatch to be more accurate. the specs:


  firefox-9.0.1,1
  xorg 7.5.1
  -
  9.0-RELEASE FreeBSD
  CPU: AMD E-350 Processor (1600.03-MHz K8-class CPU)
  real memory  = 2147483648 (2048 MB)
  avail memory = 1638866944 (1562 MB)
  FreeBSD/SMP: 1 package(s) x 2 core(s)

Slow bandwide, DNS, website can add to things. I use our website as Home and 
have the cheapest Comcast cable service. FreeBSD was compiled, firefox and xorg 
from 9.0 packages.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrading from 7.4 to 9.1

2013-04-27 Thread doug

On Sat, 27 Apr 2013, b...@todoo.biz wrote:


Hi,

I wanted to know if you would consider updating from 7.4 to 9.1 directly ?

Has anyone tried that with success ?

I plan to use the freebsd-update method.

Thanks for your feedback.

G.B.


If you are not a developer (I am not), I think the short answer don't do it. I 
think the issue is leaving stuff behind that might hurt. Eventually would be 
much worse than immediate problems, especially for a remote server.


My experience with freebsd-update has been if a mirror has the diff, then it 
will work. That said, I have never skipped a version. Earlier threads on this 
topic suggest its better to go to 8.0-rel then to the latest 8.x then to 9.


For me I used CD/DVD even though it meant a drive. I would not be too suprised 
if freebsd-update balked at skipping 8. If you are physically with the system, 
it will not take too much time to try it. The process of a minimal install from 
CD then freebsd-update is not very long. If you are running Xorg, it is the only 
way IMO.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sendmail 8.14.5/8.14.5 on fbsd-9.1R (EC2)

2013-04-27 Thread doug


On Sat, 27 Apr 2013, Matthew Seaman wrote:


On 26/04/2013 16:51, jflowers wrote:

All I want to do is have the MTA listen on 127.0.0.1 port 1025 and have no
sendmail process listen on the server interface.  That's being done by assp
which proxies messages to 127.0.0.1:1025.  Unfortunately, I haven't been able
to figure out how to turn off the default.  Sockstat shows:

root sendmail   1672  4  tcp4   *:25  *:*
root sendmail   1672  5  tcp6   *:25  *:*
root sendmail   1672  6  tcp4   127.0.0.1:1025*:*
root sendmail   1672  7  tcp4   111.222.333.444:587   *:*

The relevant mc entries are:

DAEMON_OPTIONS(`Name=IPv4, Family=inet')
DAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')
DAEMON_OPTIONS(`Port=1025, Addr=127.0.0.1, Name=MTA')
VIRTUSER_DOMAIN_FILE(`/etc/mail/virtual-domains')
FEATURE(`no_default_msa')
DAEMON_OPTIONS(`Port=587, Addr= 111.222.333.444, Name=MSA, M=E')

The MSA isn't strictly necessary now but I thought might have a future use.

So, what am I missing?  How do I turn *:25 off so that when assp goes down (as
it frequently does) I'm not running an open relay (all user/domain validation
is done in assp).

Any pointers in the right direction appreciated.


You pretty much already have the answer already.  Add 'Addr=127.0.0.1'
or 'Addr=::1' clauses to your first two DAEMON_OPTIONS lines.  That will
limit sendmail to listening on port 25 only on the loopback interface.

Or indeed, remove those two lines entirely to leave sendmail only
listening on port 587.  This should not prevent sendmail from sending
outgoing messages, but will prevent any incoming.


If sendmail is listening on port 587, it will relay for any valid sender who can 
reach that port.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


mouse in alpine

2013-04-25 Thread doug

on (.1 I built alpine with:

=== The following configuration options are available for alpine-2.00_3:
 THREADS=on: Compile with thread support
 MOUSE=on: Enable mouse support for xterm
 NLS=off: National Language Support
 ISPELL=on: Use ispell instead of aspell as default speller
 NOSPELL=off: Use no default speller (overrides both)
 PICO=on: Build and install pico, the default editor
 IPV6=off: Add support for IPv6
 LDAP=off: Add support for LDAP
 PASSFILE=off: Support for a stored password file (DANGEROUS)
 CONS25=off: Add a patch to support color for default console
 QUOTA=off: Add a patch for disk quota checking on IMAP
 MAILDIR=on: Add a patch for maildir support

mouse in xterm works fine but not in pine. My mentor has Xorg installed, so his 
system is not useful as a pattern to follow. I have an older version working. 
That system has some X libs installed. I have .ssh/config and all that stuff 
configured. At least on 7.4 alpine seems to require some further support. 
Hopefully someone can tell me what I am missing.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: mouse in alpine

2013-04-25 Thread doug

On Thu, 25 Apr 2013, doug wrote:


on (.1 I built alpine with:

=== The following configuration options are available for alpine-2.00_3:
THREADS=on: Compile with thread support
MOUSE=on: Enable mouse support for xterm
NLS=off: National Language Support
ISPELL=on: Use ispell instead of aspell as default speller
NOSPELL=off: Use no default speller (overrides both)
PICO=on: Build and install pico, the default editor
IPV6=off: Add support for IPv6
LDAP=off: Add support for LDAP
PASSFILE=off: Support for a stored password file (DANGEROUS)
CONS25=off: Add a patch to support color for default console
QUOTA=off: Add a patch for disk quota checking on IMAP
MAILDIR=on: Add a patch for maildir support

mouse in xterm works fine but not in pine. My mentor has Xorg installed, so
his system is not useful as a pattern to follow. I have an older version
working. That system has some X libs installed. I have .ssh/config and all
that stuff configured. At least on 7.4 alpine seems to require some further
support. Hopefully someone can tell me what I am missing.


Not sure what happend to this post but I solved my own problem.

1) .ssh/config must have a Host statement. Both 'Host *.*' and 'Host IP' work
2) setenv DISPLAY IP:0 to .cshrc


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


State of Packages

2013-04-04 Thread doug

Its seems certain that pkg_add is not [going to] be[ing] restored.

Index of ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/9.1-RELEASE/

NameSizeLast Modified
File:MANIFEST   1 KB12/04/12 10:10:00
File:base.txz   58452 KB12/04/12 10:09:00
File:doc.txz1410 KB 12/04/12 10:10:00
File:games.txz  1092 KB 12/04/12 10:10:00
File:kernel.txz 56686 KB12/04/12 10:10:00
File:lib32.txz  9516 KB 12/04/12 10:10:00
File:ports.txz  85867 KB12/04/12 10:10:00
File:src.txz94190 KB12/04/12 10:10:00

This pretty much invalidates 5.4 of the handbook.

My questions: Does/will pkgng work? Are 9.1 packages on the ISO images? I am in 
the progess of answering that one for myself but had some time on my hands 
during the download :)


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: State of Packages

2013-04-04 Thread doug

On Thu, 4 Apr 2013, Mark Blackman wrote:


On 4 Apr 2013, at 21:21, Bryan Drewery bdrew...@freebsd.org wrote:


On 4/4/2013 1:57 PM, d...@safeport.com wrote:

Its seems certain that pkg_add is not [going to] be[ing] restored.


Progress is being made on providing pkg_add and pkgng packages again.
They will come back.



For those who might be interested in an interim solution, we've set up
an unofficial but public pkgng format repository at

http://mirror.exonetric.net/pub/pkgng

To use these packages, just set your PACKAGESITE variable in
/usr/local/etc/pkg.conf like so,

PACKAGESITE  : http://mirror.exonetric.net/pub/pkgng/${ABI}/latest

These have FreeBSD 8, 9 and 10, i386 and amd64 kernel pkgng format packages
for the whole ports tree, build failures notwithstanding.

You'll have to explicitly make the decision to trust or not these
builds, of course, but all are welcome to use them until the official
ones are available.


Thank you

_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: gpart

2013-03-31 Thread Doug Hardie

On 31 March 2013, at 18:28, Grant Peel gp...@thenetnow.com wrote:

 Hi all,
 
 
 
 I am in the midst of setting up the framework for new servers using FreeBSD
 9.1. I used the bsdinstall and Manual`` option when setting up the disk
 geometry using GPT - graphical setup.
 
 
 
 The idea will be to eventually dump the 4 file systems, (/, /usr /var and
 /home) and restore them on other servers when the time comes.
 
 
 
 I am reading everything there is about GPT at this point as I have never
 used it before. It seems gpart is the tool to use.
 
 
 
 I have done several test runs setting the drive geometry using this as a
 guide:
 
 
 
 http://www.wonkity.com/~wblock/docs/html/disksetup.html
 
 
 
 Which worked well. But as yet I do not have dumps to test with.
 
 
 
 I was wondering in anyone sees any issues creating the drive geometry using
 this method, with the intent of restoring dumped filesystems to to,
 including the root filesystem.
 
 
 
 I am yet to use 9.1 to do so, so any tips would be appreciated.

I just finished doing exactly that.  Worked fine.  I installed 9.1 on a drive 
and it had boot problems.  Apparently the drive was previously a part of a raid 
and graid would get involved during boot and wait and wait and wait.  To get 
rid of that, I formatted another drive using gpart and then used dump-restore 
to move the data from the first drive to the second.  The new drive is now the 
master drive for the system.  The original drive has been returned to a spare 
drive pool. The new drive boots fine and just works.  I did a complete zero of 
the drive before starting the partitioning though as I have no way of knowing 
if that drive was previously in a raid array.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Client Authentication

2013-03-24 Thread Doug Hardie

On 24 March 2013, at 01:03, CeDeROM cede...@tlen.pl wrote:

 Why don't you just use PKI for authentication (you can generate your
 own certificates)? You can easily upload keys/certificated to client
 machines (PC, Android, Apple, ...). That should work :-)
 

Thats exactly what I have been testing.  Its easy in concept, but there are 
issues in the details.  Once the certificate is loaded in a Mac and the 
password entered, its available for anyone to use thereafter.  You actually 
have to remove the certificate from the keychain to disable it.  Not a great 
approach for shared computers.  Most users will not know how to remove it 
properly.  I don't know about PCs yet though.  In addition there are possible 
issues with mail clients.  I have not tried them yet.  It all depends if they 
can handle p12 format certificates.  Pem format certificates must have the 
private key in plain format which renders them completely insecure.

Then there still is the issue about Safari (at least) not handling the no 
certificate case properly.

-- Doug

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Client Authentication

2013-03-24 Thread Doug Hardie

On 23 March 2013, at 22:59, Mehmet Erol Sanliturk m.e.sanlit...@gmail.com 
wrote:

 The following steps may be another idea :
 
 Assume that you supply to your users a small login program prepared for them 
 specifically ( since you are using SSH )  :
 
 Compile that program for each user with a special identifier for him/her  and 
 ship this program to your user and require that the login will be performed 
 by this program  . This program will send a very long code to your system 
 with user password which is only known to you and to your user .  Since 
 external users will not know this code , they will not be able to login into 
 their accounts by using only password .
 
 This will also easily identify fake login trials : It is very obvious that to 
 estimate a very long code will require a large number of tries : If code 
 fails , it means that login trial is from a fake user .
 If password fails , it may be allowed a fixed number of trials ( The banks 
 are allowing only TWO failed passwords , on third , a new attempt can be made 
 after 24 hours , in Turkey ) .
 
 This program may also additionally send computer signature to your system 
 which is previously send to you on subscription computed by a program 
 prepared by you .
 
 If the user changes  / or uses a different computer , he/she should supply a 
 signature of the computer .  
 
 Here , important point is that , always you should verify that you are 
 communicating the real user , not a faked user in behalf of the real user .
 
 For the stolen program/codes , prepare a new program and ship to the user .

Thats an interesting approach but becomes difficult to use when traveling as 
you have no idea what computer you will be able to use today until you get to 
it.  Then you might have only a few minutes access to it before moving on.

 
 Another idea may be the following :
 
 Assume the user computer is NOT captured by a criminal bandit .
 
 On subscription , send to the user a square bar code printed on a card like 
 credit card having a very long code specifically prepared for the user .
 On login , the user will show this card to the camera of the computer and 
 will be transmitted to your system . In your system , it will be decoded , 
 and it will be used to identify the user with his/her password .
 
 If this application is used , it may not be necessary to send the users a 
 special login program prepared for each of them .
 

This idea shows a lot of promise.  I have to figure out how to tie it into 
mail, web etc.  There is libqrencode for creating the QR images.  I am 
downloading it now.  

-- Doug

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Client Authentication

2013-03-24 Thread Doug Hardie

On 24 March 2013, at 01:10, Waitman Gobble gobble...@gmail.com wrote:

 
 
 You might consider disabling external smtp auth service and using ssh tunnel 
 to server to connect to mail. Also provide web based convenience service. 

I am not convinced that a ssh tunnel is going to be easy for my users.  We do 
provide a web based mail client, but I wouldn't describe it as convenient.  I 
find it a pain in the neck, but so many users requested it that we provide it.  
It is password authenticated but so slow it will never be attacked with 
password guessing.

 
 It might be interesting to encrypt mail to the user's cloud service that 
 operates in a gpg zone. I think this operation could be mostly transparent to 
 the user, so kids and granpamas can use it without concern.

This one I don't understand.  Can you provide pointers to this type of service?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Client Authentication

2013-03-24 Thread Doug Hardie

On 24 March 2013, at 01:22, Polytropon free...@edvax.de wrote:

 
 Wouldn't there be a possibility to combine key _and_ password?
 The key shouldn't have to be removed, but it should only work
 with a password (which again is kept individual to each user).
 The process has to be made more uncomfortable to be secure,
 i. e., the password should _not_ be stored, instead it _has_
 to be entered every time the secure connection is to be used.
 If a different user gets his hands on a running session (in
 terms of user-separation or profiles on a particular machine),
 he won't be able to do anything with mail as he does not know
 the password, and the password will not be automatically
 provided for the sake of being less complicated.
 
 I don't know your particular end user machine settings, so this
 is just a broad suggestion. Many things in this idea depend on
 what software the client systems use, and how this software
 actually deals with security-related settings and procedures.

The p12 format certificate includes the key and both are encrypted.  This seems 
like the best distribution format.  From what I have read most browsers can 
handle this distribution format since it is used in smart cards.  However, on 
Safari, at least, when you import the certificate you have to enter the 
encryption key for the certificate and key.  Then those are stored in the 
keychain (without any additional reference to that encryption key).  They than 
can be used by anyone on that machine.  It kind of defeats all the effort for 
security up to that point.

DoD addresses this issue by somehow making the certificate not be imported into 
the keychain, but retained on the smart card only.  Pulling the card from the 
reader eliminates any future use of it.  Thats what I would like to achieve.

-- Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Client Authentication

2013-03-23 Thread Doug Hardie
I am not sure this is the best place to ask this, but I didn't see any other 
maillists that seemed more appropriate.

Basically, my outgoing mail server is being systematically attacked to try 
passwords looking for one that works.  When they do find one, we get inundated 
by spam sent through that account throughout the world.  The situation is such 
that most of our users are older and their computer is a hand-me-down so they 
can talk to their grandchildren.  Passwords are a great inconvenience for them 
and create numerous problems with remembering them even when they are simple.  
Unfortunately, most of them are quite easy to guess.

Telling users to use more appropriate passwords is a complete waste of my time. 
 Its never going to make any changes as they probably would not remember any 
other password (or where they wrote down the password).  This situation 
requires a technical solution.

I have been investigating the use of client authentication through SSL.  DoD 
uses this approach by having the certificates on an ID card and a card reader 
on each computer.  We don't have the money to use that approach no could we 
every get our users to spring for that.  I was hoping to figure out a way to 
put the certificate on a flash drive or CD that the user would carry.  The 
approach we use has to also work for iPads, smart phones etc that do not have 
an interface for a card reader.

At this time, I have successfully configured a test for openssl client 
authentication using a client certificate.  There are a few issues remaining.  
DoD uses a p12 format for their certificates.  Many browsers support that 
format.  It encrypts the certificate and private key so they are not easily 
obtained from the smart card.  Openssl's s_client uses pem certificates and the 
key has to be included in the certificate file.  While that is easily 
transported on CD or flash drive, the private key is in the clear on the 
device.  Thats not really viable.

S_client works properly without a certificate when the certificate check in the 
server is set to not fail if a certificate is not provided.  This is needed 
because we will never get all our users to use this approach at home.  They 
will still want to use passwords.  Since the certificate request is made before 
the connection information is available, there is no easy way to request it 
only when needed.  I have only been able to test with the Safari browser and it 
does not handle the no certificate case properly.  I believe it is dropping the 
connection when the user does not select a certificate.  I still have to test 
the other browsers.

There is an interesting aspect of openssl that the certificate it uses for 
normal SSL authentication is not used for client authentication.  There are 
another completely different set of calls that have to be made to set the 
certificate/key for use in validating the client certificates.  Much of this is 
only documented in existing code.

With Safari you have to import the client's certificate into the keychain.  
Then it works fine.  Unfortunately, it doesn't go away when you are done with 
it.  Unlike the smart card which, when removed, removes the certificate, the 
Safari certificate can continue to be used by anyone afterwards.  Hence, its 
not all that useful for authentication.  One approach I have heard about, but 
not investigated yet is to place the keychain on the removable device.  That 
would make it go away.  However, that approach would not work with any other 
browser or mail program.

Any ideas/suggestions on this will be appreciated.  Thanks,

-- Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Using bsdinstall to create MBR

2013-03-12 Thread Doug Hardie
I am trying to use bsdinstall to create a MBR partitioned disk.  I can set the 
partition type to MBR fine.  However, when trying to add in slices I can't 
figure out what to enter for the parameters.  Everything I have tried gives an 
error message.  I wanted one for / and one for swap.  How do I create the two 
slices?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using bsdinstall to create MBR

2013-03-12 Thread Doug Hardie

On 12 March 2013, at 18:50, Warren Block wbl...@wonkity.com wrote:

 On Tue, 12 Mar 2013, Doug Hardie wrote:
 
 I am trying to use bsdinstall to create a MBR partitioned disk.  I can set 
 the partition type to MBR fine.  However, when trying to add in slices I 
 can't figure out what to enter for the parameters. Everything I have tried 
 gives an error message.  I wanted one for / and one for swap.  How do I 
 create the two slices?
 
 http://forums.freebsd.org/showpost.php?p=149210postcount=13
 

Thank you .  That shows the correct procedure.  I never would have guessed 
that.  It works just fine.  This needs to be included in the handbook.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: vlan routing

2013-03-10 Thread doug

On Sun, 10 Mar 2013, ??? ??? wrote:


2013/3/10  d...@safeport.com:

I am trying set this up. First I munged the IP addresses. Not to worry if I
hit yours. I did the following commands:

   ifconfig vlan0 create
   ifconfig vlan0 vlan 95 vlandev fxp0
   ifconfig vlan0 inet 134.217.128.117 netmask 255.255.255.0
   ifconfig fxp0 add 134.217.128.117 netmask 255.255.255.0
   route add -inet 134.217.128.117 134.217.128.1

ifconfig shows:

fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=8VLAN_MTU
ether 00:d0:b7:56:cf:ab
inet 45.22.17.3 netmask 0xfc00 broadcast 45.22.19.255
inet 45.22.17.17 netmask 0x broadcast 45.22.17.17
inet 134.217.128.117 netmask 0xff00 broadcast 134.217.128.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:09:5b:60:e4:1f
media: Ethernet autoselect (none)
status: no carrier
vlan0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
ether 00:d0:b7:56:cf:ab
inet 134.217.128.117 netmask 0xff00 broadcast 134.217.128.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
vlan: 95 parent interface: fxp0

Needless to say it does not work. The switch is programmed correctly (I am
told). My questions are (1) it seems like the option got applied to the
wrong interface; (2) what did I miss??

I also tried booting the system with IP of 134.217.128.117 but I did not get
the rc.conf macros correctly. I do know I can not route through the switch
without going the vlan commands.

_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


I guess you shouldn't put the same IP address on two interfaces (vlan
and fxp0), you need to decide wherther you need tagged or untagged
vlan frames there and, depending on this decision put the IP address
on VLAN interface (tagged variant) or fxp0 (untagged one).

If i understand your task correctly, then this line is faulty from
your configuration:

   ifconfig fxp0 add 134.217.128.117 netmask 255.255.255.0

You don't need it.


   route add -inet 134.217.128.117 134.217.128.1

This is smth absoulutely wrong:)

Basically, if you only need a vlan interface that could be used for
routing, you need these commands only:

ifconfig vlan95 create
ifconfig vlan95 inet 134.217.128.117/24 vlan 95 vlandev fxp0

and in /etc/rc.conf you should put such strings:

cloned_interfaces=vlan95
ifconfig_vlan95=inet 134.217.128.117/24 vlan 95 vlandev fxp0

for the interface to be created on reboot.
Hope this helps.


Thanks I will try

_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


vlan routing

2013-03-09 Thread doug
I am trying set this up. First I munged the IP addresses. Not to worry if I hit 
yours. I did the following commands:


   ifconfig vlan0 create
   ifconfig vlan0 vlan 95 vlandev fxp0
   ifconfig vlan0 inet 134.217.128.117 netmask 255.255.255.0
   ifconfig fxp0 add 134.217.128.117 netmask 255.255.255.0
   route add -inet 134.217.128.117 134.217.128.1

ifconfig shows:

fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=8VLAN_MTU
ether 00:d0:b7:56:cf:ab
inet 45.22.17.3 netmask 0xfc00 broadcast 45.22.19.255
inet 45.22.17.17 netmask 0x broadcast 45.22.17.17
inet 134.217.128.117 netmask 0xff00 broadcast 134.217.128.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:09:5b:60:e4:1f
media: Ethernet autoselect (none)
status: no carrier
vlan0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
ether 00:d0:b7:56:cf:ab
inet 134.217.128.117 netmask 0xff00 broadcast 134.217.128.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
vlan: 95 parent interface: fxp0

Needless to say it does not work. The switch is programmed correctly (I am 
told). My questions are (1) it seems like the option got applied to the wrong 
interface; (2) what did I miss??


I also tried booting the system with IP of 134.217.128.117 but I did not get the 
rc.conf macros correctly. I do know I can not route through the switch without 
going the vlan commands.


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What is your favorite board for a micro system?

2013-03-08 Thread Doug Hardie

On 8 March 2013, at 15:53, Erik Nørgaard norga...@locolomo.org wrote:

 Hi!
 
 What is your favorite mini/micro/nano/pico-itx platform for home projects?
 
 I currently run a home server on an Intel mini-itx board but was looking 
 around for something fun to play with with the following specs:
 
 - mini-itx or smaller, low profile
 - fanless
 - low power 12V external PSU
 - 1 LAN, preferably 2
 - 2 USB2/3
 - Flash bootable, but with option for hdd boot
 - GPIO would be fun
 - hdmi out would be nice
 
 I have tried VIA boards but found they were flacky...
 
 Any suggestion regarding ARM vs Intel based?

Look at the Mac Mini.  Only has one LAN though.  It does have a fan but I have 
never had it come on.  Runs 9.1 (amd or i386) although booting is currently a 
challenge.  I am working on that.  It does require 120 VAC though.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Booting from an aribrary disk in ZFS RAIDZ on 8.x

2013-03-07 Thread Doug Poland
On Thu, Mar 07, 2013 at 03:11:29PM +1030, Shane Ambler wrote:
 On 06/03/2013 14:54, Doug Poland wrote:
 On Wed, Mar 06, 2013 at 01:26:07PM +1030, Shane Ambler wrote:
 On 06/03/2013 05:14, Doug Poland wrote:
 
 I have 6 disks in a RAIDZ configuration.  All disks were sliced the
 same with gpart (da(n)p1,p2,p3) with bootcode written to index 1,
 swap on index 2 and freebsd-zfs on index 3.
 
 Given this configuration, I should be able to boot from any of the
 6 disks in the RAIDZ.  If this is a true statement, how do I make
 that happen from the loader prompt?
 
 You don't boot from an individual disk you boot from a zpool - all
 disks are linked together making one zpool disk.
 
 Something has to pick a physical device from which to boot, does it
 not?.  All the HP Smart Array 6i controller knows is I have 6 RAID 0
 disks to present to the OS.
 
 I meant to add if the bootcode is installed on each disk then pointing
 the bios to any individual disk as the primary boot device will lead
 to the boot process loading the zpool. Installing it on each disk
 gives the redundancy to match the raid in the zpool. If you only have
 one disk with bootcode and it is the one that needs replacing then you
 can't boot. Then having 100 disks in a pool with bootcode would be
 overkill, but the consistency may be easier to maintain.
 
So in my case, the HP SmartArray doesn't allow me to choose an
individual boot disk.  So it's up to the controller to keep trying to
boot from the next configured disk.  I believe I'm going to craft a
test to prove this out.

 I've had issues with this RAID controller in the past where it won't
 present the new disk to the OS.  I've had to reboot, go into the
 RAID config and tell it it's a single RAID 0 device (stupid, I
 know).
 
 When you think about it, as a raid controller it shouldn't make
 assumptions as to how to use the new disk, should it add it to an
 existing raid set, replace a missing drive or show it as a new single
 drive? Being able to specify per socket as permanently jbod could be
 useful feature though.
 
One would think.  I've been testing this on a similarly configured
machine and the controller eventually presents a new drive to the OS.
It takes a couple of minutes, but appears to work on this test box.

 The roll of /boot/zfs/zpool.cache is a mystery to me.  I belive it
 somehow tells ZFS what devices are in use.  What if a disk goes
 offline or is removed?
 
 
 As I understand it the zpool.cache contains the zpools mounted by the
 system. After reboot it then re-imports each zpool in the cache. I
 believe a recent commit enabled the vfs.root.mountfrom zpool to be
 imported even if there was no cache available.
 
 From what I have heard and seen the data about the zpool it belongs to
 and the role the disk plays in the zpool is stored on each disk and
 duplicated at the beginning and end of the disk. In my early
 experiments after starting clean even after gparting and zeroing out
 the start of the disks, zpool still says it belongs to a pool.
 
If that's the case, I wonder about the wisdom of re-using a drive from
my test configuration?  My plan has been to prove this out on test and
use the same disk from test and insert it into production.  One would
think ZFS is smart enough to recognize a different drive has been
inserted, even if it has the same gpart structure and came from a pool
with the same name.

Thanks for your help.

-- 
Regards,
Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Booting from an aribrary disk in ZFS RAIDZ on 8.x

2013-03-05 Thread Doug Poland
Hello,

I'm running ZFS filesystem ver 3, storage pool ver 14, on 8-STABLE
amd64. The kernel build is rather dated from around Feb 2010.

I have 6 disks in a RAIDZ configuration.  All disks were sliced
the same with gpart (da(n)p1,p2,p3) with bootcode written to index 1,
swap on index 2 and freebsd-zfs on index 3.

Given this configuration, I should be able to boot from any of the 6
disks in the RAIDZ.  If this is a true statement, how do I make that
happen from the loader prompt?

At the loader prompt when I type show, I get the following relevant
variables:

currdev=zfs0
loaddev=disk1a:
vfs.root.mountfrom=zfs:rpool

A peek at man loader(1) shows me two interesting variables:
root_disk_unit
rootdev

If disk0 is the legacy floppy device, presumably disk1a: maps to da0.
What variable do I set to signify boot from what I know as:

da0p1 == gpt/boot0 
da0p2 == gpt/swap0 
da0p3 == gpt/disk0
...
snip
...
da5p1 == gpt/boot5 
da5p2 == gpt/swap5 
da5p3 == gpt/disk5

Thanks very much in advance.  BTW, is it bad form to cross-post to
forums.freebsd.org?

-- 
Regards,
Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: rm -R

2013-03-02 Thread doug



On Sat, 2 Mar 2013, David Tilbrook wrote:


Wjy are we syill having this conversation?
The problem (and its solution) have been
raised for at least 39 years.

To specify a file, directory, device, whatever,
whose leaf name begins with a `-', name it using
a leading `./' as in:

 whatever ./-S

That will work for all programs, even those that
do not support -- to terminate flags.

Furthermore it will support glob patterns.

Now was that so difficult?

-- dt


Also find dir -type [df] -name string | xargs command

find is pretty good about finding names with special characters and they get 
passed though xargs ok. This does not work with names with spaces of course. 
Also pretty easy to test at each step to make sure you are doing want you 
intend.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fat Fingered An 'rm -rf' of Important Files

2013-02-28 Thread Doug Hardie

On 28 February 2013, at 01:02, Polytropon free...@edvax.de wrote:

 On Wed, 27 Feb 2013 21:08:58 -0600, Joseph A. Nagy, Jr wrote:
 Okay, I know I should pay more attention to what I'm doing, and having 
 separate partitions isn't an excuse for regular backups. If we can skip 
 the finger wagging on that part I'd appreciate it.
 
 I've experienced similar and different moments of unintended
 successful rm, so I won't mention missing backups. ;-)
 
 
 
 Is there any way to retrieve any of them?
 
 Yes, but it's not easy. Prepare to go on a journey though
 file system documentation, trial  error.
 
 Obviously we're talking about a USB stick, so no TB amount
 of data has to be processed. First of all: Do _not_ alter
 the USB stick in any way. No matter what you do, it can
 always get worse.
 
 
 
 I've not wrote any data to 
 either partition since the accidental deletion.
 
 Very good.
 
 You can first make a copy of the file system (the whole
 stick) and use that: It will be faster to access and if
 you do something wrong, the original data (which we can
 assume is still there) won't be affected:
 
   # dd if=/dev/da0 of=stick.dd
 
 Now let me introduce you to the list of helpful programs
 in case you've done something ultimately stupid which I
 have already repeated several times on this mailing list.
 I'm sure you can find some program that will help you.
 See my individual notes regarding your specific situation.
 
 I will refactor text from a previous message.
 
 A worst-case tool to recover data (not file names, but file
 content) is testdisk; in ports: sysutils/testdisk. It's also
 on some diagnostics and recovery CDs like UBCD.
 
 You can also try this:
 
   # fetch -rR device
 
 Also recoverdisk could be useful.
 
 The ports collection contains further programs that might be
 worth investigating; just in case they haven't been mentioned
 yet:
 
   ddrescue
   dd_rescue   - use this to make an image of the stick!
   magicrescue
   testdisk- restores content
   recoverjpeg
   foremost
   photorec
 
 Then also
 
   ffs2recov
   scan_ffs
 
 should be mentioned.
 
 And finally, the cure to everything is found in The Sleuth Kit
 (in ports: tsk):
 
   fls
   dls
   ils
   autopsy
 
 Keep in mind: Read the manpages before using the programs. It's
 very important to do so. You need to know what you're dealing
 with, or you'll probably fail. There is no magical tetroplyrodon
 to click ^Z and get everything back. :-)
 
 Proprietary (and expensive) tools like R-Studio or UFS Explorer
 can still be considered worth a try. Their trial versions are for
 free. UFS Explorer even works using wine (I've tried it).
 
 Note:
 
 I've dealt with a comparable problem some months ago when
 a Windows PC has repaired a FAT file system on a USB
 stick, with the excellent result of all data being gone.
 I could restore everything except the original file names
 (which I wrote a script to conclude them from file metadata
 and content).
 
 So it should be possible.

I see this issue way too often.  The above information should be put in the 
Handbook.  It would be nice to have it fleshed out more, but if nothing else, 
the above would be helpful to others who run into similar issues.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: jail and networking

2013-02-21 Thread doug

On Thu, 21 Feb 2013, Shane Ambler wrote:

It's been a while since I experimented with jails but I'm pretty sure it is 
the reason I changed my sshd_config


When you start sshd on the base system by default it binds against 0.0.0.0 
and :: which is every ip4 and ip6 address configured on the base system, 
which includes the aliased ip's for your jails. This is represented by the 
*:22 from sockstat. When you start the jail it can't start sshd because the 
base already has that address/port in use.


In /etc/ssh/sshd_config comment out the ListenAddress 0.0.0.0 and 
ListenAddress :: then add ListenAddress 10.0.0.3


service sshd restart

start your jail and try again

The jail config is fine as the jail only sees the one ip address assigned to 
it.


This is what fixed the problem. From the jail man page, ... The following 
frequently deployed services must have their individual configuration files 
modified to limit the application to listening to a specific IP address  It 
then specifically mentions ssh and send mail.


The system I looked at runs seven jails fine without my having made that change. 
I am not sure why I am getting away with this, but I also thank you


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: jail and networking

2013-02-20 Thread doug


On Wed, 20 Feb 2013, Jeff Tipton wrote:


On 02/20/2013 20:59, Teske, Devin wrote:

On Wed, 20 Feb 2013, Bernt Hansson wrote:


On 2013-02-20 19:07, Jeff Tipton wrote:

On 02/20/2013 19:42, Bernt Hansson wrote:

On 2013-02-20 17:23, Teske, Devin wrote:

On Wed, 20 Feb 2013, Bernt Hansson wrote:


Hello list!

I dont seem to get net working in a test jail.

These I've tried;

ftp, fetch, telnet

They time out.

Ssh sort of work.

32bit# ssh 10.0.0.3
ssh_askpass: exec(/usr/local/bin/ssh-askpass): No such file or
directory
Host key verification failed.

jail is 8.3-STABLE i386 GENERIC

host is FreeBSD 8.3-STABLE amd64 GENERIC

I'm sure you want more info so just tell me what info.

Commonly the problem is that you are jexec'd into the jail and I
find that tools like ssh, ftp, telnet, etc. don't work when you're in
the jail via jexec but instead what works way better is if you ssh
into the jail (via the jail'd ssh process of course).

Does that seem to be the case in your situation?

If you mean this sshd  IsJ0:00,00 /usr/sbin/sshd

Then no.

%ssh 10.0.0.10 ssh: connect to host 10.0.0.10 port 22: Operation timed
out

I did have an alias on the host to the jail's ip.
Tried to restart the jail it went fine, but now I can't jexec in to
the jail.

testbox# jexec 1 tcsh
jexec: jail_attach(1): Invalid argument

Sooo... I'm kind of out of ideas.

What does jls command say? If you have restarted your jail, it's ID
most likely has changed.

The ID did change, didn't know about that, thank you.

But still, sshd isn't running in the jail

32bit# ps ax
PID  TT  STAT  TIME COMMAND
   2385  ??  IsJ0:00,00 sendmail: Queue runner@00:30:00 for
/var/spool/clientmqueue (sendmail)
   2391  ??  SsJ0:00,00 /usr/sbin/cron -s
   2464   0  SJ 0:00,01 tcsh
   2482   0  R+J0:00,00 ps ax

testbox# ps ax | grep J
   2385  ??  IsJ0:00,00 sendmail: Queue runner@00:30:00 for
/var/spool/clientmqueue (sendmail)
   2391  ??  SsJ0:00,00 /usr/sbin/cron -s
   2488   0  S+ 0:00,00 grep J

testbox is the host.

A stab in the dark, but...

Did you add sshd_enable=YES to the jail's rc.conf(5)?

Or, from within the jail, what does

service sshd status

say?


Or from the host: sockstat | grep :22. You should see something like

  root sshd   2016  3  tcp4   192.168.17.15:22   *:*

for each jail
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: jail and networking

2013-02-20 Thread doug

On Wed, 20 Feb 2013, Bernt Hansson wrote:


2013-02-20 22:17, doug skrev:


On Wed, 20 Feb 2013, Jeff Tipton wrote:


On 02/20/2013 20:59, Teske, Devin wrote:

On Wed, 20 Feb 2013, Bernt Hansson wrote:


On 2013-02-20 19:07, Jeff Tipton wrote:

On 02/20/2013 19:42, Bernt Hansson wrote:

On 2013-02-20 17:23, Teske, Devin wrote:

On Wed, 20 Feb 2013, Bernt Hansson wrote:


Hello list!

I dont seem to get net working in a test jail.

These I've tried;

ftp, fetch, telnet

They time out.

Ssh sort of work.

32bit# ssh 10.0.0.3
ssh_askpass: exec(/usr/local/bin/ssh-askpass): No such file or
directory
Host key verification failed.

jail is 8.3-STABLE i386 GENERIC

host is FreeBSD 8.3-STABLE amd64 GENERIC

I'm sure you want more info so just tell me what info.

Commonly the problem is that you are jexec'd into the jail and I
find that tools like ssh, ftp, telnet, etc. don't work when
you're in
the jail via jexec but instead what works way better is if you ssh
into the jail (via the jail'd ssh process of course).

Does that seem to be the case in your situation?

If you mean this sshd  IsJ0:00,00 /usr/sbin/sshd

Then no.

%ssh 10.0.0.10 ssh: connect to host 10.0.0.10 port 22: Operation
timed
out

I did have an alias on the host to the jail's ip.
Tried to restart the jail it went fine, but now I can't jexec in to
the jail.

testbox# jexec 1 tcsh
jexec: jail_attach(1): Invalid argument

Sooo... I'm kind of out of ideas.

What does jls command say? If you have restarted your jail, it's ID
most likely has changed.

The ID did change, didn't know about that, thank you.

But still, sshd isn't running in the jail

32bit# ps ax
PID  TT  STAT  TIME COMMAND
   2385  ??  IsJ0:00,00 sendmail: Queue runner@00:30:00 for
/var/spool/clientmqueue (sendmail)
   2391  ??  SsJ0:00,00 /usr/sbin/cron -s
   2464   0  SJ 0:00,01 tcsh
   2482   0  R+J0:00,00 ps ax

testbox# ps ax | grep J
   2385  ??  IsJ0:00,00 sendmail: Queue runner@00:30:00 for
/var/spool/clientmqueue (sendmail)
   2391  ??  SsJ0:00,00 /usr/sbin/cron -s
   2488   0  S+ 0:00,00 grep J

testbox is the host.



Or from the host: sockstat | grep :22. You should see something like

   root sshd   2016  3  tcp4   192.168.17.15:22   *:*

for each jail


testbox# sockstat | grep :22

berntsshd   3541  3  tcp4   10.0.0.3:22   80.x.x.x:25605
root sshd   3539  3  tcp4   10.0.0.3:22   80.x.x.x:25605
root sshd   1296  3  tcp6   *:22  *:*
root sshd   1296  4  tcp4   *:22  *:*

The jail has ip 10.0.0.10. There is only one jail.



I could not see anything you are doing wrong, so here are the relevant parts of 
a host/jail we use for testing. I got all this by following the jail man page 
and/or hacking things that are working. Ihope this helps. This is all on an 8.2 
system.



Host config

rc.conf
-
hostname=bcr.boltsys.com
ifconfig_em0=DHCP
sshd_enable=YES
 :
#jail base settings
inetd_flags=-wW -a 10.1.10.110
rpcbind_enable=NO

# Jail general settings
ifconfig_em0_alias0=inet 10.1.10.111 netmask 255.255.255.255
jail_set_hostname_allow=NO
jail_enable=YES
jail_interface=em0
jail_devfs_enable=YES
jail_procfs_enable=YES

jail_list=webmail
jail_webmail_rootdir=/usr/home/webmail
jail_webmail_hostname=webmail.boltsys.com
jail_webmail_ip=10.1.10.111

ifconfig (host)

inet 10.1.10.111 netmask 0x broadcast 10.1.10.111
inet 10.1.10.110 netmask 0xff00 broadcast 10.1.10.255


Jail config

rc.conf
-
network_interfaces=
hostname=webmail.boltsys.com
sshd_enable=YES
sendmail_enable=NO
sendmail_outbound_enable=YES
inetd_flags=-wW -a 10.1.10.111
inetd_enable=NO
rpcbind_enable=NO


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Unusual TCP/IP Packet Size

2013-02-08 Thread Doug Hardie
Monitoring a tcpdump between two systems, a FreeBSD 9.1 system has the 
following interface:

msk0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500

options=c011bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,TSO4,VLAN_HWTSO,LINKSTATE
ether 00:11:2f:2a:c7:03
inet 10.0.1.199 netmask 0xff00 broadcast 10.0.1.255
inet6 fe80::211:2fff:fe2a:c703%msk0 prefixlen 64 scopeid 0x1 
nd6 options=29PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL
media: Ethernet autoselect (100baseTX 
full-duplex,flowcontrol,rxpause,txpause)
status: active


It sent the following packet:  (data content abbreviated)

02:14:42.081617 IP 10.0.1.199.443  10.0.1.2.61258: Flags [P.], seq 930:4876, 
ack 846, win 1040, options [nop,nop,TS val 401838072 ecr 920110183], length 3946
0x:  4500 0f9e ea89 4000 4006 2a08 0a00 01c7  E.@.@.*.
0x0010:  0a00 0102 01bb ef4a ece1 680b ae37 1bbc  ...J..h..7..
0x0020:  8018 0410 3407  0101 080a 17f3 8ff8  4...…….


The indicated packet length is 3946 and the load of data shown is that size.  
The MTU on both interfaces is 1500.  The receiving system received 3 packets.  
There is a router and switch between them.  One of them fragmented that packet. 
This is part of a SSL/TLS exchange and one side or the other is hanging on this 
and just dropping the connection.  I suspect the packet size is the issue.  
ssldump complains about the packet too and stops monitoring.  Could this 
possibly be related to the hardware checksums?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Booting Problem

2013-01-30 Thread Doug Hardie

On 29 January 2013, at 20:25, d...@safeport.com wrote:

 
 On Tue, 29 Jan 2013, Doug Hardie wrote:
 
 On 29 January 2013, at 07:18, Mario Lobo wrote:
 
 On Mon, 28 Jan 2013 15:16:14 -0800
 Doug Hardie bc...@lafn.org wrote:
 
 I have a relatively old machine that I am trying to boot 9.1 on.  The
 bios will not boot from USB stick.  I am using an external CD drive.
 It starts the boot process fine and gets to the Bootstrap loader
 message with revision 1.1.  Then it puts out the machine, date, time
 the CD was created and starts the spinner.  It spins around about 2
 times and stops.  The system continues to read from the drive for
 another couple minutes.  Then everything stops.  Nothing more happens.
 
 The CD is good.  I can boot it just fine using the same external
 drive on another machine.  While I could remove the drive and
 temporarily mount in in the working machine and build it there, I
 would like to find a way to successfully boot from CD.  This will
 become a remote machine and taking it apart later is not a viable
 option.
 
 What is the system you are using? What external devices does it have built-in 
 support for? In the absence of any data - how about trying an external hard 
 drive?

9.1 release - Generic.  Basically the disk1.  Don't have an extra external 
drive.

 
 Why not remove the hard drive, use another system to put FreeBSD on the 
 drive, and put it back. From that point on you should be able to use the 
 network to upgrade.

I have done that before and it does work.  However,  with the various changes 
to the system, the root partition I had previously built that way for 8.2 is 
just not large enough for 9.1.  Also, I wanted to go to a single partition (the 
9.1 default).  Probably freebsd-update will take me through major releases 
after this, but I was hoping for a better solution so I could avoid having to 
transport the machine a long way twice to be able to update it.


 
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Booting Problem

2013-01-30 Thread Doug Hardie

On 30 January 2013, at 05:16, Fbsd8 wrote:

 Doug Hardie wrote:
 On 29 January 2013, at 07:18, Mario Lobo wrote:
 On Mon, 28 Jan 2013 15:16:14 -0800
 Doug Hardie bc...@lafn.org wrote:
 
 I have a relatively old machine that I am trying to boot 9.1 on.  The
 bios will not boot from USB stick.  I am using an external CD drive.
 It starts the boot process fine and gets to the Bootstrap loader
 message with revision 1.1.  Then it puts out the machine, date, time
 the CD was created and starts the spinner.  It spins around about 2
 times and stops.  The system continues to read from the drive for
 another couple minutes.  Then everything stops.  Nothing more happens.
 
 The CD is good.  I can boot it just fine using the same external
 drive on another machine.  While I could remove the drive and
 temporarily mount in in the working machine and build it there, I
 would like to find a way to successfully boot from CD.  This will
 become a remote machine and taking it apart later is not a viable
 option. ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions To
 unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org
 Can you boot a different OS (Win, Ububtu, gparted, etc ...) from the
 same drive on the same machine?
 Not so far.  The drive works fine on other systems.
 
 
 You said in your orginal post The bios will not boot from USB stick.
 I see no reason why you would think your PC would BOOT from any USB attached 
 devices.
 
 Since you have another PC that does boot off of usb cd drive, swap hard 
 drives and use that pc to load FreeBSD to the hard drive. This method will 
 work for you.

Yes that works now.  But starting this weekend it will be about 100 miles away. 
 That no longer will be practical.

 
 
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Booting Problem

2013-01-30 Thread doug



On Wed, 30 Jan 2013, Doug Hardie wrote:



On 30 January 2013, at 05:16, Fbsd8 wrote:


Doug Hardie wrote:

On 29 January 2013, at 07:18, Mario Lobo wrote:

On Mon, 28 Jan 2013 15:16:14 -0800
Doug Hardie bc...@lafn.org wrote:


I have a relatively old machine that I am trying to boot 9.1 on.  The
bios will not boot from USB stick.  I am using an external CD drive.
It starts the boot process fine and gets to the Bootstrap loader
message with revision 1.1.  Then it puts out the machine, date, time
the CD was created and starts the spinner.  It spins around about 2
times and stops.  The system continues to read from the drive for
another couple minutes.  Then everything stops.  Nothing more happens.

The CD is good.  I can boot it just fine using the same external
drive on another machine.  While I could remove the drive and
temporarily mount in in the working machine and build it there, I
would like to find a way to successfully boot from CD.  This will
become a remote machine and taking it apart later is not a viable
option. ___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions To
unsubscribe, send any mail to
freebsd-questions-unsubscr...@freebsd.org

Can you boot a different OS (Win, Ububtu, gparted, etc ...) from the
same drive on the same machine?

Not so far.  The drive works fine on other systems.



You said in your orginal post The bios will not boot from USB stick.
I see no reason why you would think your PC would BOOT from any USB attached 
devices.

Since you have another PC that does boot off of usb cd drive, swap hard 
drives and use that pc to load FreeBSD to the hard drive. This method will 
work for you.


Yes that works now.  But starting this weekend it will be about 100 miles 
away.  That no longer will be practical.


The CD will not be of much help then either. The problem started with the root 
partition being too small. Just repartition to make sure that does not come up 
for a while. While you have you hands of the machine you should see if you can 
figure out if it can do a pixe boot. You should also see if you can arrange for 
a serial console into the system.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Booting Problem

2013-01-29 Thread Doug Hardie

On 29 January 2013, at 07:18, Mario Lobo wrote:

 On Mon, 28 Jan 2013 15:16:14 -0800
 Doug Hardie bc...@lafn.org wrote:
 
 I have a relatively old machine that I am trying to boot 9.1 on.  The
 bios will not boot from USB stick.  I am using an external CD drive.
 It starts the boot process fine and gets to the Bootstrap loader
 message with revision 1.1.  Then it puts out the machine, date, time
 the CD was created and starts the spinner.  It spins around about 2
 times and stops.  The system continues to read from the drive for
 another couple minutes.  Then everything stops.  Nothing more happens.
 
 The CD is good.  I can boot it just fine using the same external
 drive on another machine.  While I could remove the drive and
 temporarily mount in in the working machine and build it there, I
 would like to find a way to successfully boot from CD.  This will
 become a remote machine and taking it apart later is not a viable
 option. ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions To
 unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org
 
 Can you boot a different OS (Win, Ububtu, gparted, etc ...) from the
 same drive on the same machine?

Not so far.  The drive works fine on other systems.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Booting Problem

2013-01-29 Thread doug


On Tue, 29 Jan 2013, Doug Hardie wrote:


On 29 January 2013, at 07:18, Mario Lobo wrote:


On Mon, 28 Jan 2013 15:16:14 -0800
Doug Hardie bc...@lafn.org wrote:


I have a relatively old machine that I am trying to boot 9.1 on.  The
bios will not boot from USB stick.  I am using an external CD drive.
It starts the boot process fine and gets to the Bootstrap loader
message with revision 1.1.  Then it puts out the machine, date, time
the CD was created and starts the spinner.  It spins around about 2
times and stops.  The system continues to read from the drive for
another couple minutes.  Then everything stops.  Nothing more happens.

The CD is good.  I can boot it just fine using the same external
drive on another machine.  While I could remove the drive and
temporarily mount in in the working machine and build it there, I
would like to find a way to successfully boot from CD.  This will
become a remote machine and taking it apart later is not a viable
option.


What is the system you are using? What external devices does it have built-in 
support for? In the absence of any data - how about trying an external hard 
drive?


Why not remove the hard drive, use another system to put FreeBSD on the drive, 
and put it back. From that point on you should be able to use the network to 
upgrade.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Booting Problem

2013-01-28 Thread Doug Hardie
I have a relatively old machine that I am trying to boot 9.1 on.  The bios will 
not boot from USB stick.  I am using an external CD drive.  It starts the boot 
process fine and gets to the Bootstrap loader message with revision 1.1.  Then 
it puts out the machine, date, time the CD was created and starts the spinner.  
It spins around about 2 times and stops.  The system continues to read from the 
drive for another couple minutes.  Then everything stops.  Nothing more happens.

The CD is good.  I can boot it just fine using the same external drive on 
another machine.  While I could remove the drive and temporarily mount in in 
the working machine and build it there, I would like to find a way to 
successfully boot from CD.  This will become a remote machine and taking it 
apart later is not a viable option.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


SOLVED: Problem upgrading to 9.1-Release

2013-01-05 Thread Doug Hardie
I found the problem.  Somehow /usr/obj was not successfully exported and hence 
was completely empty.  There must have been some error message in that process 
that I missed.  Anyway, correcting that problem so that /usr/obj was available 
fixed the problem.


On 4 January 2013, at 15:38, Doug Hardie wrote:

 I have upgraded my development system to 9.1 without any problems.  This 
 system maintains kernel source and I build a new kernel with a couple extra 
 options there.  The other systems mount /usr/src and /usr/obj from it and do 
 the install.  The first one to be upgraded had no problem with make 
 installkernel.  Rebooted and ran mergemaster -p just fine.  However make 
 installworld dies within a couple seconds with the following error:
 
 install -o root -g wheel -m 444   libc_pic.a /usr/lib
 gencat be_BY.UTF-8.cat /usr/src/lib/libc/nls/be_BY.UTF-8.msg
 gencat: No such file or directory
 *** [be_BY.UTF-8.cat] Error code 1
 
 /usr/bin/gencat exists.  However, ktrace of the make shows:
 
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/legacy/usr/sbin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/legacy/usr/bin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/legacy/usr/games/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/usr/sbin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/usr/bin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/usr/games/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /tmp/install.CuIzLuBX/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  write(0x2,0x28c48c00,0x6)
  3347 make GIO   fd 2 wrote 6 bytes
   gencat
 
 Obviously its not in any of those places.  How can I fix this?
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Problem upgrading to 9.1-Release

2013-01-04 Thread Doug Hardie
I have upgraded my development system to 9.1 without any problems.  This system 
maintains kernel source and I build a new kernel with a couple extra options 
there.  The other systems mount /usr/src and /usr/obj from it and do the 
install.  The first one to be upgraded had no problem with make installkernel.  
Rebooted and ran mergemaster -p just fine.  However make installworld dies 
within a couple seconds with the following error:

install -o root -g wheel -m 444   libc_pic.a /usr/lib
gencat be_BY.UTF-8.cat /usr/src/lib/libc/nls/be_BY.UTF-8.msg
gencat: No such file or directory
*** [be_BY.UTF-8.cat] Error code 1

/usr/bin/gencat exists.  However, ktrace of the make shows:

  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/legacy/usr/sbin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/legacy/usr/bin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/legacy/usr/games/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/usr/sbin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/usr/bin/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /usr/obj/usr/src/tmp/usr/games/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  execve(0xbfbfd1c8,0x28c35f14,0x28421180)
  3347 make NAMI  /tmp/install.CuIzLuBX/gencat
  3347 make RET   execve -1 errno 2 No such file or directory
  3347 make CALL  write(0x2,0x28c48c00,0x6)
  3347 make GIO   fd 2 wrote 6 bytes
   gencat

Obviously its not in any of those places.  How can I fix this?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


pkg_add and 9.1 Release

2013-01-01 Thread doug
Is this command being phased out? pkg_add -r uses a default environment of 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.1-release/Latest/


This path does not exist on ftp.freebsd.org.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: pkg_add and 9.1 Release

2013-01-01 Thread doug

On Wed, 2 Jan 2013, Matthew Seaman wrote:


On 02/01/2013 05:20, doug wrote:

Is this command being phased out? pkg_add -r uses a default environment
of
ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.1-release/Latest/


In fact, yes, pkg_add and the other pkg_tools commands are being phased
out in favour of pkgng.  However it is early days yet, and the problem
you're seeing has nothing to do with that process.  pkgng won't become
the default in 9.x until the next release: until then the status quo
ante persists.


This path does not exist on ftp.freebsd.org.


Quite so.  It's because of this:

http://www.freebsd.org/news/2012-compromise.html

As a consequence, large parts of the package building infrastructure are
quarantined, pending reinstallation.  Also there is a lot of work going
into revising the software used to build the packages with security
enhancements in mind.  So there simply aren't packages available yet to
go with 9.1-RELEASE.


Ah yes, thank you Matthew. I had forgotten about that. I guess the 9.1RC3 
packages were removed for the same reason.



_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Anyone using squid and pf?

2012-11-27 Thread Doug Sampson
[...]

 Rules from pf.conf
 
 
 # macros
 ext_if=xl0
 int_if=bge0
 
 tcp_services={ 22, 993, 5910:5917 }
 tcp_priv_services={ 389, 443 }
 proxy_services = { 21, 80 }
 icmp_types={ echoreq unreach squench timex }
 internal_net = 172.18.0.0/16
 proxy = 172.18.0.1
 proxyport=8021
   ^
No whitespace here

 
 # tables
 table goodguys persist
 table sshguard persist
 
 # options
 set block-policy return # ports are closed but can be seen
 set loginterface $ext_if
 
 set skip on lo0
 
 # scrub
 scrub in
 
 rdr pass proto tcp from any to any port ftp - 127.0.0.1 port 8021
 
 # redirect www trafic to proxy
 rdr on $int_if inet proto tcp from $internal_net to any port
 $proxy_services - $proxy port 8080
   ^
Whitespace here. Maybe that's the issue here?

 # ext_if IP address could be dynamic, hence ($ext_if)
 nat on $ext_if from !($ext_if) to any - ($ext_if)

[...]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: I Guess I Don't Understand NFS As Well As I Thought

2012-11-24 Thread Doug Hardie

On 24 November 2012, at 12:32, Tim Daneliuk wrote:

 Can someone kindly explain what is going on here:
 
 Machine A:  FreeBSD - was running 8, just upgraded to 9.1-PRE
(I don't recall seeing the behavior described below
 in V8, but then, I don't think I ever tried it).
 
 Machine B:  Linux Mint Desktop
 
 - Machine A acts as an NFS server for Machine B.
 
 - Machine A exports a particular directory like this:
 
   /usr/foo  -maproot=myid -network ...
 
 
 - /usr/foo/bar is owned by root on Machine A and has files therein
  owned as root:root with permissions of 600.
 
 - If I access /usr/foo/bar/file1 from Machine B, I cannot read it
  but - and this is the part I don't get - I CAN *rename* it.
 
 What's going on?  Since /foo/bar/ is owned by root and everything
 in it is 600 root:root, I would not expect a remote access to allow
 things like renaming.  Clearly I am missing something here, but I
 don't get it.

What are the permissions on the directory /usr/foo/bar?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: I Guess I Don't Understand NFS As Well As I Thought

2012-11-24 Thread Doug Hardie

On 24 November 2012, at 14:37, Tim Daneliuk wrote:

 On 11/24/2012 03:25 PM, Doug Hardie wrote:
 
 On 24 November 2012, at 12:32, Tim Daneliuk wrote:
 
 Can someone kindly explain what is going on here:
 
 Machine A:  FreeBSD - was running 8, just upgraded to 9.1-PRE
(I don't recall seeing the behavior described below
 in V8, but then, I don't think I ever tried it).
 
 Machine B:  Linux Mint Desktop
 
 - Machine A acts as an NFS server for Machine B.
 
 - Machine A exports a particular directory like this:
 
   /usr/foo  -maproot=myid -network ...
 
 
 - /usr/foo/bar is owned by root on Machine A and has files therein
  owned as root:root with permissions of 600.
 
 - If I access /usr/foo/bar/file1 from Machine B, I cannot read it
  but - and this is the part I don't get - I CAN *rename* it.
 
 What's going on?  Since /foo/bar/ is owned by root and everything
 in it is 600 root:root, I would not expect a remote access to allow
 things like renaming.  Clearly I am missing something here, but I
 don't get it.
 
 What are the permissions on the directory /usr/foo/bar?
 
 775
 
 
 Let me correct something.  The files in that directory are
 owned by root:wheel (not root:root - I got my *nixes
 confused), but they definitely have 600 perms.
 
 On Machine A, user 'myid' is IN the wheel group but I still
 don't see how he's getting permission to rename the file.\

Renaming a file does not change the file itself.  It updates the directory.  
Any user in group wheel has the authority to write to the directory (e.g., 
change a file's name).  The directory permissions are rwx for group wheel.  You 
can either try a user on machine B who is not in group wheel or change the 
directory permissions to 755 on /usr/foo/bar.  Then it would work as you expect.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is FreeBSD 9 Production Ready?

2012-11-24 Thread Doug Hardie

On 24 November 2012, at 16:36, Tim Daneliuk wrote:

 On 11/24/2012 05:58 PM, Erich Dollansky wrote:
 Hi,
 
 On Sat, 24 Nov 2012 10:38:35 -0600
 Tim Daneliuk tun...@tundraware.com wrote:
 
 I am currently running FBSD 8.3-STABLE on a production server that
 provides http, dns, smtp, and so on for a small domain.  This is not
 a high arrival rate environment but it does need to be rock solid
 (which FBSD 4-8 have been).
 
 why would you like to break a running system?
 
 That's exactly what I don't want to do.
 
 
 I am contemplating moving to the FBSD 9 family.  Is this branch ready
 
 I would stay with 8.x until the end of its support and move only then
 to a new branch. It could be then 9.x or 10.y. I would then - but only
 then - prefer the 10.y branch.
 
 I retired my 7.4 only because of lightning strike this spring.
 
 Robustness is my main goal here. Any change which brings only the risk
 is avoided.
 
 I used to take this approach.  However, I discovered the pain of fixing
 a configuration that jumped several major releases was way higher than
 tracking them each as they became stable.  I did the 9.1-PRE upgrade today
 and - once the new system was compiled and ready to be installed - had
 only very minor conversion issues.
 
 In my case, the most painful part of conversion is the mail infrastructure.  
 The
 server in question is the domain's mail server and it has a LOT of moving
 parts with custom configurations: sendmail, greylisting, mailscanner, spam
 assassin, mailman, SASL ...   That is pretty much always what breaks.  Doing
 smaller leaps tends to make this more tractable to control.

I am in a similar situation.  Reliability is more important than anything else. 
 I run similar mail configurations on one server, although I use different 
machines for incoming and outgoing mail.  Jumps across versions have been more 
difficult.  I have kept records of the steps I used for each upgrade and theose 
help me prepare for the next one.  I am in the middle of jumping from 7.2 to 
9.1.  One machine is completely converted and working just fine.  I had 
reliability problems with 9.0.  It kept rebooting or crashing every few days.  
I am on 9.1-RC2 at the moment and its been up and working for 34 days now.  I 
will upgrade it to 9.1 when its released.  This one had to be upgraded early 
because it was new hardware.  The old machine completely died.  I have another 
server also running 9.1-RC2 but it is not moved into production yet.  It is 
primarily a news server and has a large news cache that has to be moved.  I am 
waiting for 9.1 for that.

On some of my test machines I have found that 9.1 is the first release to 
support the built-in wireless NICs.  The service command is really helpful.  
I frequently can't remember which service is in etc and which in 
/usr/local/etc.  

The largest problem I encountered in the upgrade was the disk structure.  My 
disks were setup when using FreeBSD 3.5/3.7.  As a result, the root partition 
is way too small today.  I was able to shoe horn 7.2 in by deleting the kernel 
symbol files while they were being installed.  9.0/9.1 just didn't fit at all.  
Restructuring the disks is a time consuming job and fairly error prone in 
getting everything back that is needed to run production.  There is also the 
issue that the default formatting uses SU+J which is not compatible with dump 
live filesystems.  Now I am going to have to find the time to bring the systems 
down to remove journaling with no one on-site who has a clue what they are 
doing.

I currently have 9.1-RCx running on 5 systems and have not had any stability 
issues with it.  One system is in production but the others are lightly used.  
One of them is a 200 MHz machine with either 32 Meg or 64 Meg memory.  It seems 
to be faster then when it ran 8.2 but I haven't actually done any measurements.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: WARNING: FreeBSD 9.0-RELEASE is approaching its End-of-Life date.

2012-11-15 Thread Doug Hardie

On 15 November 2012, at 14:46, Matthias Petermann wrote:

 Hi,
 
 On Thu, 15 Nov 2012 14:35:52 -0800
 Michael Sierchio ku...@tenebras.com wrote:
 
 http://www.freebsd.org/security/
 
 Scroll down about halfway.  9.0 is a regular release, EOL is January 31, 
 2013.
 
 Alternate releases are extended releases, so 9.1 will have a 2 year
 support span.
 
 Thanks for the clearification. One technical thing: is it possible, to upgrade
 from FreeBSD 9.0 to 9.1 with the freebsd-update utility? 

Yes.  I have done that from 9.0 to 9.1-RC1 and later RC2.  It takes longer than 
you would like, but works just fine.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: WARNING: FreeBSD 9.0-RELEASE is approaching its End-of-Life date.

2012-11-15 Thread Doug Hardie

On 15 November 2012, at 17:04, Randal L. Schwartz wrote:

 Andreas == Andreas Rudisch cyb.@gmx.net writes:
 
 Andreas On Thu, 15 Nov 2012 23:46:53 +0100
 Andreas Matthias Petermann matth...@d2ux.net wrote:
 
 Thanks for the clearification. One technical thing: is it possible, to 
 upgrade
 from FreeBSD 9.0 to 9.1 with the freebsd-update utility? 
 
 Andreas Yes, it is.
 
 Can I go from 8.3 directly to 9.1, or should I stop over at 9.0 first?

For me that was not possible.  My disks were partitioned and labeled when 
FreeBSD 4.7 was new.  The size of the root partition was now too small for 9.0. 
 I had to do a complete install and reformat of the drives to get to 9.0.  My 
root partition was a bit small for 7.x as I had to delete the symbol files to 
make it fit.  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


pkg_add and 9.1RC3

2012-11-12 Thread doug

Doing pkg_add in the normal way:

pkg_add -r diffuse
Error: Unable to get 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.1-release/Latest/diffuse.tbz: 
File unavailable (e.g., file not found, no access)


To make it work:

setenv PACKAGESITE 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9-stable/devel/
pkg_add -r diffuse-0.4.6_2

Is this just the way it is, or is there some magic to make it somewhat less 
tedious?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 9.1 and SU+J

2012-11-04 Thread Doug Hardie

On 4 November 2012, at 07:04, Bas Smeelen wrote:

 On 11/04/2012 03:00 PM, Bas Smeelen wrote:
 On 11/04/2012 02:11 PM, RW wrote:
 On Sun, 04 Nov 2012 11:44:28 +0100
 Bas Smeelen wrote:
 
 On 11/03/2012 07:30 PM, Herbert J. Skuhra wrote:
 On 03.11.2012 13:48, Doug Hardie wrote:
 
 I didn't notice that journaling is on by default and now dump is
 failing.  The only way I can see to disable journaling requires
 that the file system be dismounted, or read-only.  This is a
 remote machine and journaling is on root.  Is there any other way
 that would not require me to make a long trip out to the site?
 
 I guess I was a little off here, it actually worked for / also
 See further below for the whole story
 This was all done remote with ssh
 
 $ mount
 /dev/da0p2 on / (ufs, local, soft-updates)
 devfs on /dev (devfs, local, multilabel)
 /dev/da0p3 on /tmp (ufs, local, soft-updates)
 /dev/da0p4 on /var (ufs, local, soft-updates)
 /dev/da0p5 on /usr (ufs, local, soft-updates)
 $ su
 Password:
 root@osebart:/usr/home/Freebee # rm /.sujournal
 root@osebart:/usr/home/Freebee # rm /var/.sujournal
 root@osebart:/usr/home/Freebee # rm /tmp/.sujournal
 root@osebart:/usr/home/Freebee # rm /usr/.sujournal
 root@osebart:/usr/home/Freebee # uname -a
 FreeBSD osebart.ose.nl 9.1-RC2 FreeBSD 9.1-RC2 #0 r241106: Mon Oct 1 
 18:26:44 UTC 2012 
 r...@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64

I can't get that to work on i386.  Here is /etc/rc.d/fsck:

fi

echo Ready for tunefs
/sbin/tunefs -j disable /dev/da0p2
}

load_rc_config $name
run_rc_command $1




reboot computer and here is the output from messages:




Nov  4 14:07:19 Router kernel: Ready for tunefs
Nov  4 14:07:19 Router kernel: Clearing journal flags from inode 4
Nov  4 14:07:19 Router kernel: tunefs: soft updates journaling cleared but soft 
updates still set.
Nov  4 14:07:19 Router kernel: tunefs: remove .sujournal to reclaim space
Nov  4 14:07:19 Router kernel: Mounting local file systems:.



and the output from mount:

Router# mount
/dev/da0p2 on / (ufs, local, journaled soft-updates)
devfs on /dev (devfs, local, multilabel)



Journaled is still on after 2 reboots.

Router# uname -a
FreeBSD Router 9.1-RC2 FreeBSD 9.1-RC2 #0 r241133: Tue Oct  2 17:11:45 UTC 2012 
r...@obrian.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

-- Doug

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


help with gpart

2012-10-31 Thread doug
I am trying to put FreeBSD on an HP laptop. The use up all the partitions to I 
deleted the least useful one, shrunk the windows partition and tried to add 
freeBSD.


gpart show:

=   63  625142385  ada0  MBR  (298G)
 63   1985- free -  (992k)
   2048 407552 1  ntfs  [active]  (199M)
 409600  311951360 2  ntfs  (148G)
  312360960 33- free -  (16k)
  312360993  283115448 4  freebsd  (135G)
  595476441 577575- free -  (282M)
  596054016   28880896 3  ntfs  (13G)
  624934912 207536- free -  (101M)

I do not have any flexibility as to where #4 is. I would like to use the 
9.0 installer from this point but it wants to add BSD partitions to the 282M 
space.


I am not sure after much man-ing and google-ing what gpart commands are 
required. I guess I could use sysinstall at this point but learning gpart seems 
like a good thing. I assume I need to do something like:


   gpart add set -a active -i 4 ada04  (not sure geom is correct)
   gpart bootcode -b /boot/boot0 ada04

and then add the mounts. I would like

   /
   swap
   /var 10g
   /usr 20g
   /home (the rest)

but am somewhat lost about the syntax and geom values. thanks for any help

_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


send-pr Submission Times

2012-10-13 Thread Doug Hardie
I sent a PR using send-pr earlier today.  However, after having sent it and 
received a line that said it was submitted, I realized I didn't include my 
email address.  Somehow I completely overlooked that. I have been waiting for 
it to show up in the on-line indexes, but it hasn't so far.  How long does that 
process normally take?  I am wondering if it was just dropped because of the 
lack of the email address.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


SATA Controllers

2012-10-09 Thread Doug Hardie
Looking through the list of SATA Controllers available at Best Buy, I don't 
find any of them listed on the 9.0 hardware page.  I need a couple cheap ones 
(for non-production systems).  Does anyone have recommendations?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


freebsd-update

2012-10-05 Thread Doug Hardie
I am using freebsd-update to update a system running a generic kernel.  I ran 
into an interesting situation where after it has downloaded the updates it 
enters a configuration phase where it shows updated config files with the old 
and new.  You can hit return to enter vi and clean up the file.  After that you 
get to a selection of files where you only get the question does this look 
reasonable?  Your options are Y or N.  Y makes the changes and N just 
terminates the entire update forcing you to start over again from the 
beginning.  Why can't you correct issues with those config files?  Why bother 
to even ask if there is only one possible response 
(Y)?___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


apcupsd 3.4.10 fails to install

2012-09-21 Thread Doug Sampson
Hello-

I'm having troubling installing apcupsd 3.4.10 on a FreeBSD 9.0 machine. This 
is what I get:

aries# pwd
/usr/ports/sysutils/apcupsd
aries# make install clean
===  Building for apcupsd-3.14.10
src
src/lib
src/drivers
src/drivers/apcsmart
src/drivers/dumb
src/drivers/net
src/drivers/pcnet
src/drivers/usb
src/drivers/usb/generic
src/libusbhid
  LDsrc/apcupsd
/usr/ports/sysutils/apcupsd/work/apcupsd-3.14.10/src/lib/libapc.a(astring.o): 
In function `astring::assign(char const*, int)':
astring.cpp:(.text+0xbb): undefined reference to `operator new[](unsigned int)'
/usr/ports/sysutils/apcupsd/work/apcupsd-3.14.10/src/lib/libapc.a(astring.o): 
In function `astring::realloc(unsigned int)':
astring.cpp:(.text+0x23c): undefined reference to `operator new[](unsigned int)'
/usr/ports/sysutils/apcupsd/work/apcupsd-3.14.10/src/lib/libapc.a(astring.o): 
In function `astring::vformat(char const*, char*)':
astring.cpp:(.text+0x4a5): undefined reference to `operator new[](unsigned int)'
gmake[2]: *** [apcupsd] Error 1
gmake[1]: *** [all] Error 2
gmake: *** [src_DIR] Error 2
*** Error code 1

Stop in /usr/ports/sysutils/apcupsd.
*** Error code 1

Stop in /usr/ports/sysutils/apcupsd.
aries#


This system was compiled from svn sources. The ARIES kernel conf is as follows:

aries# less /usr/src/sys/i386/conf/ARIES
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the config(5) manual page,
# and/or the handbook section on Kernel Configuration Files:
#
#
http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
 ..snip.. 
#
# $FreeBSD: releng/9.0/sys/i386/conf/GENERIC 227305 2011-11-07 13:40:54Z marius 
$

include GENERIC
nocpu   I486_CPU
nocpu   I586_CPU
ident   ARIES

options KVA_PAGES=512   # increase system memory usage from 1GB to 2GB 
for ZFS usage

nodeviceeisa
nodevicefdc 


Contents of make.conf:

aries# less /etc/make.conf
# added by DSS 2/23/09
#.if $(.CURDIR:M*/sysutils/bacula-client) || \
#$(.CURDIR:M*/sysutils/bacula-client)
#CONFIGURE_ARGS+=--enable-static-fd
#.endif

WITHOUT_X11=yes
# added by use.perl 2012-09-21 10:18:17
PERL_VERSION=5.14.2

~Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: apcupsd 3.4.10 fails to install

2012-09-21 Thread Doug Sampson
 I'm having troubling installing apcupsd 3.4.10 on a FreeBSD 9.0 machine.
 This is what I get:
 
 aries# pwd
 /usr/ports/sysutils/apcupsd
 aries# make install clean
 ===  Building for apcupsd-3.14.10
 src
 src/lib
 src/drivers
 src/drivers/apcsmart
 src/drivers/dumb
 src/drivers/net
 src/drivers/pcnet
 src/drivers/usb
 src/drivers/usb/generic
 src/libusbhid
   LDsrc/apcupsd
 /usr/ports/sysutils/apcupsd/work/apcupsd-
 3.14.10/src/lib/libapc.a(astring.o): In function `astring::assign(char
 const*, int)':
 astring.cpp:(.text+0xbb): undefined reference to `operator new[](unsigned
 int)'
 /usr/ports/sysutils/apcupsd/work/apcupsd-
 3.14.10/src/lib/libapc.a(astring.o): In function
 `astring::realloc(unsigned int)':
 astring.cpp:(.text+0x23c): undefined reference to `operator new[](unsigned
 int)'
 /usr/ports/sysutils/apcupsd/work/apcupsd-
 3.14.10/src/lib/libapc.a(astring.o): In function `astring::vformat(char
 const*, char*)':
 astring.cpp:(.text+0x4a5): undefined reference to `operator new[](unsigned
 int)'
 gmake[2]: *** [apcupsd] Error 1
 gmake[1]: *** [all] Error 2
 gmake: *** [src_DIR] Error 2
 *** Error code 1
 
 Stop in /usr/ports/sysutils/apcupsd.
 *** Error code 1
 
 Stop in /usr/ports/sysutils/apcupsd.
 aries#
 
 
 This system was compiled from svn sources. The ARIES kernel conf is as
 follows:
 
 aries# less /usr/src/sys/i386/conf/ARIES
 #
 # GENERIC -- Generic kernel configuration file for FreeBSD/i386
 #
 # For more information on this file, please read the config(5) manual
 page,
 # and/or the handbook section on Kernel Configuration Files:
 #
 #http://www.FreeBSD.org/doc/en_US.ISO8859-
 1/books/handbook/kernelconfig-config.html
 #
  ..snip.. 
 #
 # $FreeBSD: releng/9.0/sys/i386/conf/GENERIC 227305 2011-11-07 13:40:54Z
 marius $
 
 include GENERIC
 nocpu   I486_CPU
 nocpu   I586_CPU
 ident   ARIES
 
 options KVA_PAGES=512   # increase system memory usage from 1GB to
 2GB for ZFS usage
 
 nodeviceeisa
 nodevicefdc
 
 
 Contents of make.conf:
 
 aries# less /etc/make.conf
 # added by DSS 2/23/09
 #.if $(.CURDIR:M*/sysutils/bacula-client) || \
 #$(.CURDIR:M*/sysutils/bacula-client)
 #CONFIGURE_ARGS+=--enable-static-fd
 #.endif
 
 WITHOUT_X11=yes
 # added by use.perl 2012-09-21 10:18:17
 PERL_VERSION=5.14.2
 

I played around with the selecting/deselecting config options and got apcupsd 
to install. Previously I had the following options selected:

aries# make showconfig
=== The following configuration options are available for apcupsd-3.14.10:
 APCSMART_DRV=on: Compile APC SmartUPS serial driver
 APCDUMB_DRV=on: Compile dumb UPS driver
 CLIENT_ONLY=off: Only NIS client (no network server or drivers)
 CGI=off: Compile with CGI programms to show status
 PCNET_DRV=on: Compile PowerChute Network Shutdown driver
 USB=on: Compile with USB Support driver
 SNMP_DRV=on: Compile with SNMP driver
 SNMP_DRV_OLD=off: Compile with old SNMP driver
 TCP_WRAPPERS=on: Compile with TCP_WRAPPERS support
 TEST_DRV=off: Compile TEST driver
 GAPCMON=off: Build GTK GUI front-end
=== Use 'make config' to modify these settings
aries#

The install with the above options failed. Next I ran make with the following 
options:

aries# make showconfig
=== The following configuration options are available for apcupsd-3.14.10:
 APCSMART_DRV=on: Compile APC SmartUPS serial driver
 APCDUMB_DRV=off: Compile dumb UPS driver
 CLIENT_ONLY=off: Only NIS client (no network server or drivers)
 CGI=off: Compile with CGI programms to show status
 PCNET_DRV=on: Compile PowerChute Network Shutdown driver
 USB=off: Compile with USB Support driver
 SNMP_DRV=off: Compile with SNMP driver
 SNMP_DRV_OLD=off: Compile with old SNMP driver
 TCP_WRAPPERS=on: Compile with TCP_WRAPPERS support
 TEST_DRV=off: Compile TEST driver
 GAPCMON=off: Build GTK GUI front-end
=== Use 'make config' to modify these settings
aries#

This time make succeeded and I was able to install.

What appears to be missing from my kernel file? Since the UPS is a SmartUPS 
450SC, I really do not need the USB option. Nor do I need the APCDUMB_DRV 
option. This leaves the SNMP_DRV as a potential culprit. Does the kernel need 
to be compiled with SNMP?

I was able to install apcupsd on other FreeBSD machines. The only difference is 
that these other machines are running the RELEASE version kernel instead of a 
compiled kernel.

~Doug
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: What replaces csup?

2012-09-20 Thread Doug Sampson
  I also find portsnap slower than either
  csup or svn.
 
 That surprises me. Once the initial download and extract is done, I find
 portsnap fetch update to be miles faster than csup. However, each to
 his own, I suppose.

+1
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

RE: NFSv4 ACL permissions setting

2012-09-05 Thread Doug Sampson
 Wiadomość napisana przez Doug Sampson w dniu 31 sie 2012, o godz. 01:42:
 
 [..]
 
  group:DSP-production:rwxpDdaARWcCos:fd:allow   
 -
  group:DSP-production:rwxpDdaARWcCos:fd:allow   
 -
 
 This itself looks like a bug in setfacl(1).  I'll look into it.
 However...
 
 [..]
 
  #!/bin/sh
  # run this script where you wish to effect the changes
  # reset perms to default
  find . -type d -print0 | xargs -0 setfacl -b *
 
 Why the asterisk?  Also, using -m with NFSv4 ACLs is not a very good
 idea - it's supposed to work, but with NFSv4 ACLs the ordering does
 matter,
 and -m simply modifies the ACL entry in place, while the effect of the
 entry might depend e.g. on deny entries before it.  Use -a instead.
 

Forgive me- I am not particularly strong when it comes to shell scripting. I 
will modify so that the -a parameter is used instead of -m when setting new 
entries.

What would you use in place of the asterisk when you want to apply the setfacl 
-b command to either all files or all directories? The period?

~Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: NFSv4 ACL permissions setting

2012-09-05 Thread Doug Sampson
  #!/bin/sh
  # run this script where you wish to effect the changes
  # reset perms to default
  find . -type d -print0 | xargs -0 setfacl -b *
 
  Why the asterisk?  Also, using -m with NFSv4 ACLs is not a very good
  idea - it's supposed to work, but with NFSv4 ACLs the ordering does
  matter,
  and -m simply modifies the ACL entry in place, while the effect of
 the
  entry might depend e.g. on deny entries before it.  Use -a instead.
 
 
  Forgive me- I am not particularly strong when it comes to shell
 scripting. I will modify so that the -a parameter is used instead of -m
 when setting new entries.
 
 Ok.  It's simply a matter of replacing '-m' with '-a0'.
 

I did not realize that one could add a numeral to the -a parameter to 
indicate the desired order. I just did a 'man setfacl' and indeed it is 
described as such. Good to know!

Is there a preferred way of ordering? I.e. owner@ at line 0 followed by group@ 
at line 1 followed by everyone@ at line 2 then followed by the two groups 
described in my original mail (e.g. dsp-production  dsp-marketing)? Or is that 
totally dependent on how I want to structure the permissions so that the 
desired effect is achieved? For example like this:

dougs@dorado:/data# getfacl ADS-New/
# file: ADS-New/
# owner: root
# group: DSP-production
group:DSP-production:rwxpDdaARWcCos:fd:allow
group:DSP-marketing:rwxpDdaARWcCos:fd:allow
owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
 everyone@:--a-R-c--s:--:allow
dougs@dorado:/data#

where anyone who is a member of the dsp-production group will ALWAYS have 
full_set permissions simply because that is indicated at line 0 and thus meets 
the test of line 0? Processing stops at line 0 as long as the user is a member 
of that group, right?

Does a user who does not belong to any of the groups indicated above and isn't 
an owner have the ability to modify the directory? I assume that would be the 
everyone@ group...

 Btw, the bug in setfacl(1) command has been fixed in HEAD and will
 be merged into STABLE in a month from now.

What exactly was the bug? Did I uncover it inadvertently?

  What would you use in place of the asterisk when you want to apply the
 setfacl -b command to either all files or all directories? The period?
 
 Directories:
 
 find . -type d -print0 | xargs -0 setfacl -b
 
 Files:
 
 find . -type f -print0 | xargs -0 setfacl -b
 
 The whole point of xargs here is to take the list of files it gets from
 find
 and turn it into a series of arguments for setfacl.  So, in the example
 above,
 the actual invocation of setfacl would read setfacl -b first-file second-
 file
 etc.  With the asterisk, it would be setfacl -b * first-file second-
 file;
 this means setfacl would modify not only the files passed by find, but
 also
 all the files in the current directory.

Ah, interesting.

I'm going to test the changes to the scripts. Thanks for the feedback.


~Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.0 support for RealTek NIC - re0 driver

2012-08-31 Thread doug

On Fri, 31 Aug 2012, lokada...@gmx.de wrote:


On 08/29/12 18:14, d...@safeport.com wrote:

This card is on a Dell Inspiron. It works perfectly on 8.x. Dmesg on 8.2
reports it as:

  re0: RealTek 8101E/8102E/8102EL/8103E PCIe 10/100baseTX

pciconf:

re0@pci0:4:0:0: class=0x02 card=0x04341028 chip=0x813610ec rev=0x02 
hdr=0x00

vendor = 'Realtek Semiconductor'
device = 'Realtek 10/100/1000 PCI-E NIC Family all in one NDIS 
Driver v5.728.0604.2009 06/04/2009 (Rtl8023)'

class  = network
subclass   = ethernet

On 9.0 I got it to work once or twice out of a couple of dozen tries.

9.0 dmesg reports:

  re0: RealTek 8139C+/8169/8169S/8110S PCI ...

The release docs imply the card is supported. I did not see a PR. Anyone 
else with similiar issues?

Is the MAC changing?
Give dmesg some message about it?


Not currently in the same city as my Dell. I installed 8.2 to make sure I did 
not have a hardware issue. I will [re]install 9.0 Sunday and report back.


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


NFSv4 ACL permissions setting

2012-08-30 Thread Doug Sampson
Hello all-

I've set up ZFS on a FreeBSD 9.0 64-bit server recently. One of the things I've 
had to learn relates to NFSv4 ACLs. I've developed two scripts to reset 
permissions- one for files and the other for folders. I've run into an issue 
with executing a script to set permissions on a bunch of folders.

The root filesystem is /data. There are a bunch of subfolders followed by more 
subfolders. Allow me to demonstrate as follows:

dougs@dorado:/# getfacl ./data
# file: ./data
# owner: root
# group: DSP-production
group:DSP-production:rwxpDdaARWcCos:fd:allow
group:DSP-marketing:rwxpDdaARWcCos:fd:allow
owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
 everyone@:r-x---a-R-c--s:--:allow
dougs@dorado:/# cd data
dougs@dorado:/data# ll
total 45
drwxrwx---+  5 root  DSP-production 5 Aug 28 10:27 ADS-New
drwxrwx---+ 60 root  DSP-production   118 Aug 27 14:17 ADS-OLD
   [ .. snip .. ]
drwxrwx---+ 12 root  DSP-production12 Aug 27 14:16 WorkinProgress
dougs@dorado:/data# getfacl ./ADS-New/
# file: ./ADS-New/
# owner: root
# group: DSP-production
group:DSP-production:rwxpDdaARWcCos:fd:allow
group:DSP-marketing:rwxpDdaARWcCos:fd:allow
owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
 everyone@:--a-R-c--s:--:allow
dougs@dorado:/data# cd ./ADS-New/
dougs@dorado:/data/ADS-New# ll
total 9
drwxrwx---+  5 root  nobody   7 Aug 27 14:20 Artworks
drwxrwx---+  4 root  nobody   4 Jul 17 12:12 ForDSP
drwxrwx---+ 78 root  nobody  78 Jul 23 13:17 ForMarketing
dougs@dorado:/data/ADS-New# /root/bin/reset-perms-prod-mkt-dirs.sh
dougs@dorado:/data/ADS-New# getfacl ./Artworks/
# file: ./Artworks/
# owner: root
# group: nobody
group:DSP-production:rwxpDdaARWcCos:fd:allow   -
group:DSP-production:rwxpDdaARWcCos:fd:allow   -
group:DSP-marketing:rwxpDdaARWcCos:fd:allow
owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
 everyone@:--a-R-c--s:--:allow
dougs@dorado:/data/ADS-New# cd Artworks/
dougs@dorado:/data/ADS-New/Artworks# ll
total 4234
drwxrwx---+ 2 root nobody2 Jul 17 12:08 Ask JoeS
drwxrwx---+ 2 root nobody   10 Jul 17 12:12 Cool -  AD
d-w-rwx---+ 2 DSP-alfredo  nobody2 Aug 27 14:20 Jaye Additional 
Art
-rwxrwx---+ 1 root DSP-production  3770445 Mar 11  2010 
comingsoonIntNepal.pdf
-rwxrwx---+ 1 root DSP-production   415338 Mar 11  2010 previewcopy.pdf
dougs@dorado:/data/ADS-New/Artworks# cd Ask\ JoeS/
dougs@dorado:/data/ADS-New/Artworks/Ask JoeS# cd ..
dougs@dorado:/data/ADS-New/Artworks# getfacl Ask\ JoeS/
# file: Ask JoeS/
# owner: root
# group: nobody
group:DSP-production:rwxpDdaARWcCos:fd:allow   -
group:DSP-marketing:rwxpDdaARWcCos:fd:allow
owner@:rwxpDdaARWcCos:fd:allow
group@:rwxpDdaARWcCos:fd:allow
 everyone@:--a-R-c--s:--:allow
dougs@dorado:/data/ADS-New/Artworks#

As you can see, the ADS-New folder where I executed the script shows duplicate 
entries of the DSP-production group whereas the Ask Joe subfolder underneath 
the ADS-New folder shows only one DSP-production group. If I run this script on 
the ADS-OLD folder, I see the same effect- only the first level of subfolders 
get duplicate DSP-production entries while the rest of the subfolders only 
contain one entry of the DSP-production group. Why is this happening?

The contents of the /root/bin/reset-perms-prod-mkt-dirs.sh is as follows:

#!/bin/sh
# run this script where you wish to effect the changes
# reset perms to default
find . -type d -print0 | xargs -0 setfacl -b *
# apply perms to files
find . -type d -print0 | xargs -0 setfacl -m group@:full_set:fd:allow *
find . -type d -print0 | xargs -0 setfacl -m owner@:full_set:fd:allow *
find . -type d -print0 | xargs -0 setfacl -m g:dsp-marketing:full_set:fd:allow *
find . -type d -print0 | xargs -0 setfacl -m g:dsp-production:full_set:fd:allow 
*

Um? Am I missing something?

~Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


9.0 support for RealTek NIC - re0 driver

2012-08-29 Thread doug

This card is on a Dell Inspiron. It works perfectly on 8.x. Dmesg on 8.2
reports it as:

  re0: RealTek 8101E/8102E/8102EL/8103E PCIe 10/100baseTX

pciconf:

re0@pci0:4:0:0: class=0x02 card=0x04341028 chip=0x813610ec rev=0x02 hdr=0x00
vendor = 'Realtek Semiconductor'
device = 'Realtek 10/100/1000 PCI-E NIC Family all in one NDIS Driver 
v5.728.0604.2009 06/04/2009 (Rtl8023)'
class  = network
subclass   = ethernet

On 9.0 I got it to work once or twice out of a couple of dozen tries.

9.0 dmesg reports:

  re0: RealTek 8139C+/8169/8169S/8110S PCI ...

The release docs imply the card is supported. I did not see a PR. Anyone else 
with similiar issues?



_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: sendmail local-host-names questions

2012-08-29 Thread doug



On Wed, 29 Aug 2012, Gary Aitken wrote:


Can anyone explain what's going on or point me to a better place to ask?
It's now fixed but I'd like to understand why sendmail doesn't like a domain
specified with a trailing dot, since I thought that was how one specified a
fully qualified domain name.


The definitive source is /usr/src/contrib/sendmail/cf/README


Also...  I can't find anything about how to put a comment in the
local-host-names file.  I took a guess and used # as in the .mc file,
and it doesn't seem to cause errors; but neither does ';' or '%' so I'm
guessing the lines are just being skipped because they don't parse properly.
I'd like to know whether comments are allowed or not; and if so,
what the proper syntax is.


I am not sure which table you are commenting but I think some of the tables like 
virtusertable do not allow comments at the end of the line. Lines starting with 
a '#' are fine in any table. Again the README is you source



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


iso image question

2012-08-26 Thread doug
I have a CD that was burned (but not labeled so well). Is is possible to tell if 
this is an i386 or amd64 image?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


freebsd-update

2012-08-26 Thread doug
In doing an update from 8.3 -- 9.0 I messed up the merge on /etc/ttys. This has 
interesting consequences BTW. Are there any docs on how to do this?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update

2012-08-26 Thread doug

On Sun, 26 Aug 2012, Walter Hurry wrote:


On Sun, 26 Aug 2012 14:24:34 -0400, doug wrote:


In doing an update from 8.3 -- 9.0 I messed up the merge on /etc/ttys.
This has interesting consequences BTW. Are there any docs on how to do
this?


Here's mine. Note: I changed ttyv8 from off to on as I am using xdm.

console noneunknown off secure
#
ttyv0   /usr/libexec/getty Pc xterm   on  secure
# Virtual terminals
ttyv1   /usr/libexec/getty Pc xterm   on  secure
ttyv2   /usr/libexec/getty Pc xterm   on  secure
ttyv3   /usr/libexec/getty Pc xterm   on  secure
ttyv4   /usr/libexec/getty Pc xterm   on  secure
ttyv5   /usr/libexec/getty Pc xterm   on  secure
ttyv6   /usr/libexec/getty Pc xterm   on  secure
ttyv7   /usr/libexec/getty Pc xterm   on  secure
ttyv8   /usr/local/bin/xdm -nodaemon  xterm   on  secure
# Serial terminals
# The 'dialup' keyword identifies dialin lines to login, fingerd etc.
ttyu0   /usr/libexec/getty std.9600   dialup  off secure
ttyu1   /usr/libexec/getty std.9600   dialup  off secure
ttyu2   /usr/libexec/getty std.9600   dialup  off secure
ttyu3   /usr/libexec/getty std.9600   dialup  off secure
# Dumb console
dcons   /usr/libexec/getty std.9600   vt100   off secure
(END)


So with something like:

[the beginning of my file]
 current version
PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin
HOME=/var/log
===
PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin

8.0-RELEASE

[the rest of my file]

just delete the stuff after === ??
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


freebsd-update question.

2012-08-23 Thread doug
I wanted to see if I could get an 8.1 system updated to 9.0 (mostly) with 
freebsd-update. I did this with a source update to RELENG_8_3 and then did the 
standard stuff to get to 9.0


perl and xdm both gave errors that libutil.so.9 was missing. scanning google and 
questions suggested this module was removed. Also in some basic way the ports 
make scripts view the system as an 8.X system as make index gives 'Generating 
INDEX-8 - please wait..


Can this be repaired? Building from source is out of the question for this 
system.


_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update question.

2012-08-23 Thread doug

On Thu, 23 Aug 2012, Polytropon wrote:


On Thu, 23 Aug 2012 11:36:51 -0400 (EDT), d...@safeport.com wrote:

I wanted to see if I could get an 8.1 system updated to 9.0 (mostly) with
freebsd-update. I did this with a source update to RELENG_8_3 and then did the
standard stuff to get to 9.0

perl and xdm both gave errors that libutil.so.9 was missing. scanning google and
questions suggested this module was removed. Also in some basic way the ports
make scripts view the system as an 8.X system as make index gives 'Generating
INDEX-8 - please wait..

Can this be repaired? Building from source is out of the question for this
system.


After a major version update (8.x - 9.x) you should reinstall
_all_ ports. See man portmaster (EXAMPLES section) for suggestions
on how to do this.

If you want to avoid it. you can install the compat8x port on
your system. Unaltered (!) installs from 8.x should continue
running. But as soon as you're introducing new software, trouble
may occur. In that case, a clean install of your applications
should be the better way. (Note that you can do this either by
source or by packages, just as you prefer.)

The described problem with libutil can be avoided when working
with the compat8x port. There are more such ports for older
versions that allow running binaries compiled for those OS
versions (API/ABI remapping).


After seeing if xorg and twm would just work, I did remove all packages with 
pkg_delete. That did not clear out all of /usr/local. When pkg_add of perl 
failed, I just built that. pkg_add of xorg worked. pkg_add of xdm got an error 
something along the line of unliking lib/X11/auth... so I deleted that dir and 
did pkg_add again. This installed but xdm fails on execution with libutil.so.9 
missing.


monhegan:~ uname -a
FreeBSD monhegan.boltsys.com 9.0-RELEASE-p3 FreeBSD 9.0-RELEASE-p3 #0:
  Tue Jun 12 01:47:53 UTC 2012
  r...@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  i386

But make index thinks (I think) this is an 8.x system. pkg_add did add from 
...lastest..9.0 for xorg and xdm. AFAIK there are no 8.x components.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Building a FreeBSD desktop.

2012-08-21 Thread doug



On Mon, 20 Aug 2012, James D. Parra wrote:


I was looking to build a desktop to learn FreeBSD and was wondering if there
is a list of parts to build one or to just look at the hardware
comparability list? I just don't want to order wrong parts.


If don't want to make the full commitment to building a desktop, a good way to 
learn about FreeBSD is to install within a virtual machine. Either VMWare or 
VirtualBox will serve you well.

If you have a system you want to try you can also check out 
http://laptop.bsdgroup.de/freebsd/index.html.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: libxul

2012-08-19 Thread doug

On Sun, 19 Aug 2012, ajtiM wrote:


On Saturday 18 August 2012 21:16:09 Antonio Olivares wrote:

On Sat, Aug 18, 2012 at 6:25 PM, ajtiM lum...@gmail.com wrote:

Hi!

There are vulnerabilities in libxul-1.9.2 very long time and looks like
nothing is better. Are there a new libxul version somewhere to download,
please?



portaudit -Fda
auditfile.tbz 100% of   79 kB  316 kBps
New database installed.
Database created: Sat Aug 18 18:15:04 CDT 2012
Affected package: libxul-1.9.2.28_1
Type of problem: mozilla -- multiple vulnerabilities.
Reference: http://portaudit.FreeBSD.org/dbf338d0-dce5-11e1-
b655-14dae9ebcf89.html

Affected package: libxul-1.9.2.28_1
Type of problem: mozilla -- multiple vulnerabilities.
Reference: http://portaudit.FreeBSD.org/bfecf7c1-
af47-11e1-9580-4061862b8c22.html

Affected package: libxul-1.9.2.28_1
Type of problem: mozilla -- multiple vulnerabilities.
Reference:
http://portaudit.FreeBSD.org/380e8c56-8e32-11e1-9580-4061862b8c22.html

3 problem(s) in your installed packages found.

You are advised to update or deinstall the affected package(s)
immediately. Mitja

http://jpgmag.com/people/lumiwa
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
freebsd-questions-unsubscr...@freebsd.org


I was wanting to ask this question for a long time, but you have
beaten me to it :)  I was going to ask specifically if firefox does
depend on libxul that it is necessary?  Otherwise, why do we have to
see this every time we update our ports?  I have seen that there's a
configuration option for libxul so that it can install, but using
portmaster the option is not the same or not present?

Anyone want to take a shot at explaining this never ending libxul-* saga?

Regards,


Antonio


I think Firefox doesn't depend but I installled VLC player and VLC Mozilla
plugins needs libxul. I used beforeMplayer and Gecko plgins which need libxul
too and because that I switched to VLC because I thought that I am free of
libxul but no.
Mitja


I have:

   FreeBSD 9.0-RELEASE #0
   thunderbird-9.0
   xfce-4.8
   xdm-1.1.11
   xorg-7.5.1

with no libxul. You can find the 'offending' port by either using pkg_tree or
pkg_info -rRx libxul.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how to speed up port make??

2012-07-26 Thread Doug Hardie

On 25 July 2012, at 23:04, Ryan Noll wrote:

 Hello,
 
 On Jul 25, 2012 7:34 PM, Chad Perrin per...@apotheon.com wrote:
 You kids have got it easy.  I used to have to compile by hand with a pair
 of tweezers, bar copper wire, a magnifying glass, and a potato with two
 pieces of metal stuck in it as a power source.
 
 Ha-ha... Ah those were the days..., but does anyone remember the old way
 of building the kernel in the 2.2.8 days? I was just getting started doing
 the basic system setup/admin things in those days. Back then (1998 or so) I
 did not have access to broadband, so I did not even update the sources back
 then, but I knew that it was a good idea to remove devices from the GENERIC
 kernel that I did not have--thanks to the book by Greg Lehey. (Even though
 the version of The Complete FreeBSD I bought is so out of date I cannot
 bring myself to throw it away--it was my guide back in those days.)
 
 Does anyone else remember The Complete FreeBSD?

Its sitting in my bookshelf. Its pretty worn out though.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: IPv6 getaddrinfo(3C)

2012-07-12 Thread Doug Hardie

On 12 July 2012, at 07:24, Matthias Apitz wrote:

 
 Hello,
 
 I'm playing around with IPv6 code on a FreeBSD 9 system and can't get
 getaddrinfo(3C) to do what it should do as stated in its man page:
 accept an IPv6 and IPv4 IP addr, it only works with the IPv6 form:
 
 $ ./a.out ::1
 host: ::1
 read: SSH-2.0-OpenSSH_5.6p1 FreeBSD-2010
 $ ./a.out 127.0.0.1
 host: 127.0.0.1
 ssh: getaddrinfo failed code 8: hostname nor servname provided, or not known
 $ telnet 127.0.0.1 22
 Trying 127.0.0.1...
 Connected to localhost.
 Escape character is '^]'.
 SSH-2.0-OpenSSH_5.6p1 FreeBSD-2010
 
 the used C-code is attached below; what I'm doing wrong in the code?
 
 Thanks
 
   matthias
 
 /* IPv6 client code using getaddrinfo */
 
 #include stdlib.h
 #include sys/types.h
 #include sys/socket.h
 #include netinet/in.h
 #include stdio.h
 #include netdb.h
 #include string.h
 
 
 main(argc, argv)  /* client side */
   int argc;
   char   *argv[];
 {
 
   struct addrinfo req, *ans;
   int code, s, n;
   char buf[1024];
 
   memset(req, 0, sizeof(req));
   req.ai_flags = AI_ADDRCONFIG|AI_NUMERICHOST;
   req.ai_family = AF_INET6;   /* Same as AF_INET6. */
   req.ai_socktype = SOCK_STREAM;
 
   /* */
   /* Use default protocol (in this case tcp) */
   /* */
 
   req.ai_protocol = 0;
 
   printf(host: %s\n, argv[1]);
   if ((code = getaddrinfo(argv[1], ssh, req, ans)) != 0) {
   fprintf(stderr, ssh: getaddrinfo failed code %d: %s\n, code, 
 gai_strerror(code));
   exit(1);
   }


   /* */
   /* ans must contain at least one addrinfo, use */
   /* the first.  */
   /* */ 
   
   s = socket(ans-ai_family, ans-ai_socktype, ans-ai_protocol);
   if (s  0) {
   perror(ssh: socket);
   exit(3);
   }
 
   /* Connect does the bind for us */
   
   if (connect(s, ans-ai_addr, ans-ai_addrlen)  0) {
   perror(ssh: connect);
   exit(5);
   }
 
   n = read(s, buf, 1024);
   printf (read: %s, buf);
   
   /* */
   /* Free answers after use */
   /* */ 
   freeaddrinfo(ans);
 
   exit(0);
 }
 
  

I won't claim to be an expert on this, but I have used getaddrinfo successfully 
in servers.  The only thing I see that might be an issue is the use of zero for 
ai_protocol.  The comment in the man page implies that value is for servers and 
not clients.  I suspect you have to set the specific protocol you want.  You 
haven't included AI_PASSIVE so I suspect its expecting you to use the address 
to contact a server.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 9.0 hang

2012-07-03 Thread Doug Hardie

On 2 July 2012, at 22:59, Wojciech Puchar wrote:

 
 I have no ATM interfaces so it shouldn't be loading to my way of thinking.
 
 so check while this module is loading at all, no matter if it's unsuccessull. 
 FreeBSD is not random place like windows, everything
 must have a reason.
 

True it must, but I have no idea why if_en would try to be loaded or even how 
to figure that out.  There is nothing in the logs.  My understanding is that 
you would have to have an interface that requires the en driver.  pciconf 
doesn't show any.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 9.0 hang

2012-07-02 Thread Doug Hardie

On 2 July 2012, at 08:50, Wojciech Puchar wrote:

 
 link_eif symbol atm_event undefined
 KLD if_en.ko: depends on utopia - not available or version mismatch.

Those were the last 2 lines on the console before the hang.  There is nothing 
at all in messages about this.  I suspect the system was not totally hung, just 
the etnernet interfaces (2 different ones) as I could still ping both 
interfaces successfully.  However, no attempt to access any service worked.

 
 I haven't found anything relevant on those through Google.  if_en.ko os 
 present as is utopia.ko.  I don't understand why the kernel would try to 
 load if_en as I don't have any of those devices.  There are em0 and dc0 
 ethernet interfaces.  This is almost a generic kernel.  The config file 
 contains:
 Was that line printed just before hangup?
 
 Do you actually tried to load ATM interface driver. If no - check why it 
 loads at all.

I have no ATM interfaces so it shouldn't be loading to my way of thinking.
 
 Check what is last in your logfile.

Nothing.
 
 Check if any addon drivers you use (fuse.ko, vboxdrv.ko) was compiled with 
 the same kernel sources that you compiled kernel.

kldstat -v shows:

 21 0xc5b36000 4000 fdescfs.ko (/boot/kernel/fdescfs.ko)
Contains modules:
Id Name
493 fdescfs
 31 0xc5c8f000 3000 pflog.ko (/boot/kernel/pflog.ko)
Contains modules:
Id Name
495 pflog
 41 0xc5c92000 34000pf.ko (/boot/kernel/pf.ko)
Contains modules:
Id Name
494 pf


if_en is not listed as compiled into the kernel.

The kernel and userland were built shortly after an install from memstick image 
using the procedure in UPDATING:

To rebuild everything and install it on the current system.
---
# Note: sometimes if you are running current you gotta do more than
# is listed here if you are upgrading from a really old current.

make sure you have good level 0 dumps
make buildworld
make kernel KERNCONF=YOUR_KERNEL_HERE
[1]
reboot in single user [3]
mergemaster -p  [5]
make installworld
mergemaster -i  [4]
make delete-old [6]
reboot


After that the ports and application software were installed.  Basically the 
only services that run on this system are nagios and mrtg.  It is used only as 
a monitoring system for my production server and for testing new software.  It 
has only been used for monitoring since the upgrade.  I can't do any 
development work till I get the production servers upgraded from 8.2 to 9.0.


 
 If this doesn't help then recompile your kernel with
 
 makeoptions   DEBUG=-O0 -g
 optionsINCLUDE_CONFIG_FILE
 optionsDEADLKRES
 optionsKDB
 optionsDDB
 optionsINVARIANTS
 optionsINVARIANT_SUPPORT
 optionsWITNESS
 optionsWITNESS_SKIPSPIN
 optionsDIAGNOSTIC
 
 make sure that dump device is active
 
 dumpon=/dev/dumpdevicename
 
 and reboot with that kernel.
 
 At next crash you will get full dump with all symbols and all data where it 
 crashes.

When this repeats I will do that.  Thanks for the help.

-- Doug

 
 
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD 9.0 hang

2012-06-29 Thread Doug Hardie
I have a 9.0 p3 system that is in production for about a week and it just plain 
hung this morning.  The console had the last two messages as:

link_eif symbol atm_event undefined
KLD if_en.ko: depends on utopia - not available or version mismatch.

I haven't found anything relevant on those through Google.  if_en.ko os present 
as is utopia.ko.  I don't understand why the kernel would try to load if_en as 
I don't have any of those devices.  There are em0 and dc0 ethernet interfaces.  
This is almost a generic kernel.  The config file contains:

include GENERIC

ident   LAFN

nocpu   i486_CPU
nocpu   i586_CPU

options QUOTA
#device  atapicam
options ALTQ# Enable ALTQ.
options ALTQ_CBQ# Build the ``Class Based Queuing'' discipline.
options ALTQ_NOPCC  # Required for SMP build


I couldn't find any relevant log messages that would indicate why this module 
was trying to be loaded. However, even so, I would think it should load ok.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Problem with freebsd-update

2012-06-20 Thread Doug Hardie
I tried to update an amd64 FreeBSD 9.0 p0 system via freebsd-update tonight.  
It fetched everything fine.  However, the install just hung after about 10 
minutes.  The 2 sh processes are basically doing nothing.  Not consuming any 
processor time and not doing any I/O.  I killed it and tried another install.  
Same thing.  Tried a rollback.  Same thing.  The system still runs mostly.  Top 
takes about 5 minutes before it produces any output.  It shows basically 
nothing running.  I really don't want to reinstall again as the system has a 
lot of files customized including many ports.  Is there any way to recover this?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Problem with spamlogd

2012-06-17 Thread Doug Hardie
I am using spamd on several systems and started encountering a problem awhile 
ago with FreeBSD 7.2 servers, but let it go since I am in the process of 
upgrading the servers.  However, I now am encountering the same issue on 
FreeBSD 9.0 with spamlogd.  It never reads pflog0.  pflogd reads the entries 
just fine.  I set up syslog to log all the spamlogd messages and when spamlogd 
is started it gives:

spamlogd: Listening on pflog0 for all interfaces. 

lsof shows that it is connected to bpf0 as is pflogd.  However, pflogd shows an 
offset into the file that appears to be the end of the file.  spamlogd shows an 
offset of 0.  It is periodically reading the file as shown by ktrace but always 
getting back a 0 size return.  spamd itself is working just fine.  However, the 
expiration times are not being updated so white entries are timed out way too 
often.  spamlogd used to update them.  The rc.conf entries are:

obspamd_enable=YES
obspamd_flags=-G 2:1:1728
obspamd_setup_flags=
obspamd_grey=YES
obspamlogd_enable=YES
obspamlogd_flags=-W 1728


These were established a few years ago and worked up till short while ago.  I 
don't recall any changes I made to anything, but…

Looking through the spamlogd source it appears to be building a filter for the 
pcap routines with:

ip and port 25 and action pass and tcp[13]0x12=0x2

Using that filter on pflog yields no output.  I believe the pass item requires 
there to be some logging of the pass actions and those are not appearing in the 
pflog or in the pfctl counts for those rules.  I suspect that is the problem.  
The pf.conf is: (mail server is on this machine)

ext_if=em0

table blackhole persist file /etc/blackhole
table spamd persist
table spamd-white persist
table spamd-white-local persist file /etc/mail/whitelist


no rdr on { lo0, lo1 } from any to any

no rdr on { lo0, lo1 } from any to any
MAILHOSTS = {zool.lafn.org 10.0.1.10}

rdr pass log on $ext_if inet proto tcp from spamd-white-local to port smtp - 
127.0.0.1 port smtp
rdr pass log on $ext_if inet proto tcp from spamd-white to port smtp - 
127.0.0.1 port smtp
rdr pass log on $ext_if inet proto tcp to $MAILHOSTS port smtp - 127.0.0.1 
port spamd


pass in on lo0

pass in log on $ext_if inet proto tcp to 127.0.0.1 port smtp
pass out log on $ext_if inet proto tcp from 127.0.0.1 to any port smtp

block in quick log on $ext_if from blackhole to any

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


  1   2   3   4   5   6   7   8   9   10   >