diskless problem: Lookup of /dev for devfs, error: 13
Hi, I'm attempting to run a diskless 8.0 i386 workstation on VMWare, using an OpenSolaris box as a file store. I get PXE, the kernel loads, but when we try to remount the filesystem I get: ... NFS ROOT: XXX.XXX.XXX.XXX:/storage1/vm/netflow Lookup of /dev for devfs, error 13 exec /sbin/init: error 13 exec /sbin/oinit: error 13 exec /sbin/init.bak: error 13 exec /rescue/inet: error 13 exec /stand/sysinstall: error 13 init: not found in path ... At first glance, it would appear that /dev is missing. I've never seen this happen before diskless systems, though, and I can't find any other references to this. I know that other people have PXE-booted FreeBSD on VMWare, however. Anyone have any suggestions on what to check? Thanks, ==ml -- Michael W. Lucasmwlu...@blackhelicopters.org http://www.MichaelWLucas.com/ Latest book: Cisco Routers for the Desperate, 2nd Edition http://www.CiscoRoutersForTheDesperate.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: diskless problem: Lookup of /dev for devfs, error: 13
On Fri, Nov 20, 2009 at 02:20:54AM -0900, Mel Flynn wrote: > On Thu, 19 Nov 2009 16:18:29 -0500, "Michael W. Lucas" > wrote: > > Hi, > > > > I'm attempting to run a diskless 8.0 i386 workstation on VMWare, using > > an OpenSolaris box as a file store. I get PXE, the kernel loads, but > > when we try to remount the filesystem I get: > > > > ... > > NFS ROOT: XXX.XXX.XXX.XXX:/storage1/vm/netflow > > Lookup of /dev for devfs, error 13 > > exec /sbin/init: error 13 > > exec /sbin/oinit: error 13 > > exec /sbin/init.bak: error 13 > > exec /rescue/inet: error 13 > > exec /stand/sysinstall: error 13 > > init: not found in path > > ... > > > > At first glance, it would appear that /dev is missing. > > Actually, at first glance it would appear that the mount doesn't allow > execution. Interesting. (BTW, this is running on a GENERIC kernel, no firewall.) I did a packet capture on the OpenSolaris NFS server, and found that the kernel load and initial boot takes place over NFSv2. When the FreeBSD box tries to remount root, it sends a NFSv3 FSINFO request. The server returns NFS3ERR_STALE. It appears that that error is generated when the permissions to the mount are revoked... but we just mounted it seconds before? It turns out that there's a whole discussion thread on nfsv2 and v3 interoperability with diskless systems. See http://lists.freebsd.org/pipermail/freebsd-hackers/2008-January/022792.html for a sample message. Short answer: it seems that there are interoperability annoyances with diskless systems and assorted NFS servers. NFS mount options in /etc/fstab seem to be ignored, but you can set them in /boot/loader.conf. boot.nfsroot.options="nfsv2" made FreeBSD try a NFSv2 remout, and the system came up. Thanks for pointing out it seems to be a permissions error, I wouldn't have headed down this route without that. ==ml -- Michael W. Lucasmwlu...@blackhelicopters.org http://www.MichaelWLucas.com/ Latest book: Cisco Routers for the Desperate, 2nd Edition http://www.CiscoRoutersForTheDesperate.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
em0 NIC slow on 8.2-p1 amd64?
Hi, I'm running FreeNAS 8.0/amd64, with an 8.2-p1 kernel. When using FTP or SCP, performance maxes out around 30MB/s. This is on a gigabit network, no errors showing. It looks a lot like kern/152828, but it seems that nobody's looking at that. As per suggestions from the archives, I've tried disabling TSO. No change. Anyone else experiencing this, or have any suggestions? At the moment, the boss is complaining that his Windows Home Server is doing better than this machine, and that's a technological direction I really don't want to go in. Thanks, ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: em0 NIC slow on 8.2-p1 amd64?
On Wed, Jul 20, 2011 at 07:12:27PM +0200, Eduardo Morras wrote: > At 18:04 20/07/2011, Michael W. Lucas wrote: > >Hi, > > > >I'm running FreeNAS 8.0/amd64, with an 8.2-p1 kernel. When using FTP > >or SCP, performance maxes out around 30MB/s. This is on a gigabit > >network, no errors showing. > > > >It looks a lot like kern/152828, but it seems that nobody's looking at > >that. > > Don't know about that, but perhaps the nic is not working at full gigabit. > > Can you post the output of ifconfig? > > #ifconfig em0 > It's at gigabit: em0: flags=8843 metric 0 mtu 1500 options=219b ether 00:15:17:31:c8:fe inet xxx media: Ethernet autoselect (1000baseT ) status: active Thanks, ==ml > If it's not connected at 1 gigabit or not full duplex you can force > it with ifconfig. If there are too much errors check the cable. > > >As per suggestions from the archives, I've tried disabling TSO. No > >change. > > > >Anyone else experiencing this, or have any suggestions? At the moment, > >the boss is complaining that his Windows Home Server is doing better > >than this machine, and that's a technological direction I really don't > >want to go in. > > > >Thanks, > >==ml > -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: em0 NIC slow on 8.2-p1 amd64?
On Wed, Jul 20, 2011 at 05:19:47PM -0400, Mike Tancsa wrote: > On 7/20/2011 12:04 PM, Michael W. Lucas wrote: > > Hi, > > > > I'm running FreeNAS 8.0/amd64, with an 8.2-p1 kernel. When using FTP > > or SCP, performance maxes out around 30MB/s. This is on a gigabit > > network, no errors showing. > > what does > sysctl -a dev.em > > show ? > > What kind of switch is the box plugged into ? Can you show the output of > the switch interface showing how its connected e.g. flow control, > duplex, interface counters etc. It's an HP Procurve 3400cl-24g. Port Type | Enabled Mode Flow Ctrl MDI ... 15100/1000T | Yes Auto Disable Auto | Intrusion MDI Flow Bcast Port Type | Alert Enabled Status Mode Mode Ctrl Limit ... 15100/1000T | NoYes Up 1000FDxMDI off 0 Status and Counters - Port Counters for port 15 Name : data5 Link Status : Up Totals (Since boot or last clear) : Bytes Rx: 2,717,700,038 Bytes Tx: 2,179,415,738 Unicast Rx : 162,116,833Unicast Tx : 190,514,323 Bcast/Mcast Rx : 51,058 Bcast/Mcast Tx : 35,257,606 Errors (Since boot or last clear) : FCS Rx : 0 Drops Rx: 0 Alignment Rx: 0 Collisions Tx : 0 Runts Rx: 0 Late Colln Tx : 0 Giants Rx : 0 Excessive Colln : 0 Total Rx Errors : 0 Deferred Tx : 0 Rates (5 minute weighted average) : Total Rx (bps) : 2428792Total Tx (bps) : 5019632 Unicast Rx (Pkts/sec) : 0Unicast Tx (Pkts/sec) : 0 B/Mcast Rx (Pkts/sec) : 0B/Mcast Tx (Pkts/sec) : 1 Utilization Rx : 00.24 %Utilization Tx : 00.50 % dev.em.0.%desc: Intel(R) PRO/1000 Network Connection 7.1.9 dev.em.0.%driver: em dev.em.0.%location: slot=0 function=0 dev.em.0.%pnpinfo: vendor=0x8086 device=0x108b subvendor=0x8086 subdevice=0x class=0x02 dev.em.0.%parent: pci1 dev.em.0.nvm: -1 dev.em.0.debug: -1 dev.em.0.rx_int_delay: 0 dev.em.0.tx_int_delay: 66 dev.em.0.rx_abs_int_delay: 66 dev.em.0.tx_abs_int_delay: 66 dev.em.0.rx_processing_limit: 100 dev.em.0.flow_control: 3 dev.em.0.link_irq: 0 dev.em.0.mbuf_alloc_fail: 0 dev.em.0.cluster_alloc_fail: 0 dev.em.0.dropped: 0 dev.em.0.tx_dma_fail: 0 dev.em.0.rx_overruns: 0 dev.em.0.watchdog_timeouts: 0 dev.em.0.device_control: 1075053128 dev.em.0.rx_control: 67141634 dev.em.0.fc_high_water: 10240 dev.em.0.fc_low_water: 8740 dev.em.0.queue0.txd_head: 338 dev.em.0.queue0.txd_tail: 338 dev.em.0.queue0.tx_irq: 0 dev.em.0.queue0.no_desc_avail: 0 dev.em.0.queue0.rxd_head: 375 dev.em.0.queue0.rxd_tail: 374 dev.em.0.queue0.rx_irq: 0 dev.em.0.mac_stats.excess_coll: 0 dev.em.0.mac_stats.single_coll: 0 dev.em.0.mac_stats.multiple_coll: 0 dev.em.0.mac_stats.late_coll: 0 dev.em.0.mac_stats.collision_count: 0 dev.em.0.mac_stats.symbol_errors: 0 dev.em.0.mac_stats.sequence_errors: 0 dev.em.0.mac_stats.defer_count: 0 dev.em.0.mac_stats.missed_packets: 0 dev.em.0.mac_stats.recv_no_buff: 0 dev.em.0.mac_stats.recv_undersize: 0 dev.em.0.mac_stats.recv_fragmented: 0 dev.em.0.mac_stats.recv_oversize: 0 dev.em.0.mac_stats.recv_jabber: 0 dev.em.0.mac_stats.recv_errs: 0 dev.em.0.mac_stats.crc_errs: 0 dev.em.0.mac_stats.alignment_errs: 0 dev.em.0.mac_stats.coll_ext_errs: 0 dev.em.0.mac_stats.xon_recvd: 0 dev.em.0.mac_stats.xon_txd: 0 dev.em.0.mac_stats.xoff_recvd: 0 dev.em.0.mac_stats.xoff_txd: 0 dev.em.0.mac_stats.total_pkts_recvd: 11708739 dev.em.0.mac_stats.good_pkts_recvd: 11708739 dev.em.0.mac_stats.bcast_pkts_recvd: 2121887 dev.em.0.mac_stats.mcast_pkts_recvd: 57365 dev.em.0.mac_stats.rx_frames_64: 464757 dev.em.0.mac_stats.rx_frames_65_127: 4131944 dev.em.0.mac_stats.rx_frames_128_255: 43756 dev.em.0.mac_stats.rx_frames_256_511: 204667 dev.em.0.mac_stats.rx_frames_512_1023: 492040 dev.em.0.mac_stats.rx_frames_1024_1522: 6371575 dev.em.0.mac_stats.good_octets_recvd: 10457944503 dev.em.0.mac_stats.good_octets_txd: 2875493372 dev.em.0.mac_stats.total_pkts_txd: 7967315 dev.em.0.mac_stats.good_pkts_txd: 7967315 dev.em.0.mac_stats.bcast_pkts_txd: 121 dev.em.0.mac_stats.mcast_pkts_txd: 0 dev.em.0.mac_stats.tx_frames_64: 1739777 dev.em.0.mac_stats.tx_frames_65_127: 3871275 dev.em.0.mac_stats.tx_frames_128_255: 270032 dev.em.0.mac_stats.tx_frames_256_511: 412542 dev.em.0.mac_stats.tx_frames_512_1023: 255864 dev.em.0.mac_stats.tx_frames_1024_1522: 1417825 dev.em.0.mac_stats.tso_txd: 427046 dev.em.0.mac_stats.tso_ctx_fail: 0 dev.em.0.interrupts.asserts: 10716051 dev.em.0.inter
Re: em0 NIC slow on 8.2-p1 amd64?
On Wed, Jul 20, 2011 at 09:32:27PM +0200, Eduardo Morras wrote: > At 21:16 20/07/2011, Michael W. Lucas wrote: > > >It's at gigabit: > > > >em0: flags=8843 metric 0 mtu 1500 > > > >options=219b > >ether 00:15:17:31:c8:fe > >inet xxx > >media: Ethernet autoselect (1000baseT ) > >status: active > > All seems to be ok, try a netstat -I em0 -d (it's a capital 'i') to > get statistics. If too much packets are dropped recheck cables. > > Other options: > > a) 30 MB/s looks very strange, do you have pf or similar with a filter rule? > b) Have you checked your disk i/o performance? > c) If you generate the data dinamically, may be your producer app is > the problem. > > About the em specific problem under 8.2 you cite, others can guide > better than me. > > HTH No obvious errors on netstat: netstat -I em0 -d NameMtu Network Address Ipkts Ierrs IdropOpkts Oerrs Coll Drop em01500 00:15:17:31:c8:fe 11709782 0 0 6855755 0 00 em01500 139.171.199.0 data5-vm 9546994 - - 7584135 - -- PF is running, but disabling it makes no difference in throughput. Disk is mostly idle... not saying it can't be disk, mind you, but local disk-to-disk copies go much more quickly. I'm testing by copying an ISO. And as far as me knowing "many more things," well, if I knew what the problem was, I wouldn't be begging for help like any other user. :-) Thanks, ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: em0 NIC slow on 8.2-p1 amd64?
On Thu, Jul 21, 2011 at 05:01:57PM +0200, Eduardo Morras wrote: > > Have you tried other protocols? Http, rsync... It maybe a problem at > client side, some ftp clients can set a maximun ftp transfer, like > filezilla, winscp, FTP and NFSv3 both have similar results. ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: em0 NIC slow on 8.2-p1 amd64?
On Fri, Jul 22, 2011 at 02:06:23PM -0400, Mike Tancsa wrote: > On 7/22/2011 1:50 PM, Eduardo Morras wrote: > > At 17:12 21/07/2011, Michael W. Lucas wrote: > >> On Thu, Jul 21, 2011 at 05:01:57PM +0200, Eduardo Morras wrote: > >> > > >> > Have you tried other protocols? Http, rsync... It maybe a problem at > >> > client side, some ftp clients can set a maximun ftp transfer, like > >> > filezilla, winscp, > >> > >> FTP and NFSv3 both have similar results. > >> > >> ==ml > > > > Perhaps you have reached the maximum disk speed. Sorry not more ideas, > > but it doesn't look like a nic problem. Put the file in cache before > > sending it. If it's faster the problem is a bottleneck on hard disk or > > sata/ata/usb bus. > > What if you do a fetch -o /dev/null {http|ftp}://remotesite/file > > and see what speeds you get. That would get rid of the disk as an io issue Good idea. fetch -o /dev/null ftp://xxx/ftp/FreeBSD-9.0-CURRENT-201011-amd64-dvd1.iso /dev/null 100% of 1027 MB 29 MBps 00m00s Basically the same. I don't think it's disk. There's kern/152828 claiming a performance regression with em under 8.2, but I'm not sure if that is applicable to my system. I'd upgrade the kernel to test, but I'm not brave enough to downgrade the kernel to 8.0 for comparison. (I've never had good luck running an old kernel on a new userland.) ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: em0 NIC slow on 8.2-p1 amd64?
On Fri, Jul 22, 2011 at 03:46:06PM -0400, Mike Tancsa wrote: > On 7/22/2011 3:08 PM, Michael W. Lucas wrote: > > > > Basically the same. I don't think it's disk. > > Are you able to saturate the ethernet ? Try something like > > > /usr/src/tools/tools/netrate/netblast/netblast > > on the local ethernet and see if you can generate and receive a full > gigabit on the wire Very helpful, thank you. Copied ifstat and netblast from an 8.0 box to the freenas box, and started firing traffic at a machine on the local network. ./netblast x.x.x.x 500 250 10 start: 1311364875.158297086 finish:1311364885.158882731 send calls:1826947 send errors: 11 approx send rate: 182693 approx error rate: 0 ifstat -b -i em0 shows: 17.84 214390.1 3.65 419155.4 4.12 418916.4 3.65 419466.2 410.14 417715.7 5.06 418383.2 3120.18 410983.4 em0 Kbps in Kbps out 3.65 412871.2 3.65 416097.9 3.65 416431.1 5.65 195233.8 So no, I'm not saturating this network. Not even close. I have a machine with a 100Mbs vr0 that can spit out twice that much. ==ml > # ./netblast 10.11.11.243 500 250 10 > > start: 1311363559.619619931 > finish:1311363569.619418229 > send calls:5210086 > send errors: 1249890 > approx send rate: 396019 > approx error rate: 0 > > > ./netblast 10.11.11.241 500 300 10 > > start: 1311346264.584043978 > finish:1311346274.583848423 > send calls:7417664 > send errors: 4214676 > approx send rate: 320298 > approx error rate: 0 > > > When the sender if an igb nic, I am able to push out 955Mb to the em0 > nic acting as a sink. The other way around, 855Mb > The em nic is > > em1@pci0:5:0:0: class=0x02 card=0x34ec8086 chip=0x10d38086 rev=0x00 > hdr=0x00 > vendor = 'Intel Corporation' > device = 'Intel 82574L Gigabit Ethernet Controller (82574L)' > class = network > subclass = ethernet > bar [10] = type Memory, range 32, base 0xb250, size 131072, > enabled > bar [18] = type I/O Port, range 32, base 0x1000, size 32, enabled > bar [1c] = type Memory, range 32, base 0xb252, size 16384, enabled > cap 01[c8] = powerspec 2 supports D0 D3 current D0 > cap 05[d0] = MSI supports 1 message, 64 bit > cap 10[e0] = PCI-Express 1 endpoint max data 128(256) link x1(x1) > cap 11[a0] = MSI-X supports 5 messages in map 0x1c enabled > ecap 0001[100] = AER 1 0 fatal 0 non-fatal 1 corrected > ecap 0003[140] = Serial 1 001517ed36e4 > > em1: port 0x1000-0x101f mem > 0xb250-0xb251,0xb252-0xb2523fff irq 16 at device 0.0 on pci5 > em1: Using MSIX interrupts with 3 vectors > em1: [ITHREAD] > em1: [ITHREAD] > em1: [ITHREAD] > em1: Ethernet address: 00:15:17:ed:36:e4 > > > > ifstat -b shows > > # ifstat -b -i igb0 >igb0 > Kbps in Kbps out > 0.00 0.00 > 0.00 0.00 > 578794.0 0.00 > 855298.0 0.00 > 855365.9 0.00 > 855316.6 0.00 > 855335.2 0.00 > 855346.5 0.00 > 855358.6 0.00 > 855368.7 0.00 > 855356.6 0.00 > 727163.6 0.00 > 0.00 0.00 > > thats the em equipped machine generating the traffic > > > ---Mike > > > > > > > > > There's kern/152828 claiming a performance regression with em under > > 8.2, but I'm not sure if that is applicable to my system. I'd upgrade > > the kernel to test, but I'm not brave enough to downgrade the kernel > > to 8.0 for comparison. (I've never had good luck running an old kernel > > on a new userland.) > > > > ==ml > > > > > -- > --- > Mike Tancsa, tel +1 519 651 3400 > Sentex Communications, m...@sentex.net > Providing Internet services since 1994 www.sentex.net > Cambridge, Ontario Canada http://www.tancsa.com/ -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: em0 NIC slow on 8.2-p1 amd64?
On Fri, Jul 22, 2011 at 04:15:11PM -0400, Mike Tancsa wrote: > On 7/22/2011 4:10 PM, Michael W. Lucas wrote: > > > > > > 3.65 419155.4 > > Thats 400Mb/s no ? Whats the CPU in this thing ? Also your NIC version > was 7.1.9. RELENG_8 has 7.2.3. Can you try that version if possible ? I sit corrected, decimal point error. My apologies, long day here. For the CPU, 400Mbs isn't bad. CPU: Intel(R) Celeron(R) CPU 420 @ 1.60GHz (1600.01-MHz K8-class CPU) Origin = "GenuineIntel" Id = 0x10661 Family = 6 Model = 16 Stepping = 1 Features=0xafebfbff Features2=0xe31d AMD Features=0x20100800 AMD Features2=0x1 TSC: P-state invariant My ~30MB/s from applications is roughly 240Mb/s. Will applications such as NFS cut bandwith usage that much? I'll try the newer driver. > > So no, I'm not saturating this network. Not even close. I have a > > machine with a 100Mbs vr0 that can spit out twice that much. > > How could FastE nics do 800Mb/s ? Same decimal point error. It's clearly time for me go home. Thanks, ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
PAM confusion
Hi, I'm attempting to hook security/pam_ssh_agent_auth into sudo, and have learned that PAM doesn't work the way I thought it did. I'm running FreeBSD-9/i386, with sudo 1.7.2.6. My goal is that sudo pass all auth requests back to the users' SSH agent. Sudo should never use passwords for authentication. If the user doesn't have an SSH agent, or if the SSH agent breaks somehow, the sudo request is denied. With my current config, sudo requests are accepted without a password even if the users' environment has no $SSH_AUTH_SOCK. I'm obviously doing something wrong. Here's my pam.d/sudo. I removed password settings and required the pam_ssh_agent_auth library. --- #auth include system authrequired/usr/local/lib/pam_ssh_agent_auth.so file=~/.ssh/authorized\ _keys # account account include system # session # XXX: pam_lastlog (used in system) causes users to appear as though # they are no longer logged in in system logs. session requiredpam_permit.so # password #password include system --- Any suggestions what I'm doing wrong? Thanks, ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: PAM confusion
On Mon, Dec 12, 2011 at 03:34:28PM -0600, Reid Linnemann wrote: > On Thu, Dec 8, 2011 at 10:45 AM, Michael W. Lucas > wrote: > > Hi, > > > > I'm attempting to hook security/pam_ssh_agent_auth into sudo, and have > > learned that PAM doesn't work the way I thought it did. > > > > I'm running FreeBSD-9/i386, with sudo 1.7.2.6. > > > > My goal is that sudo pass all auth requests back to the users' SSH > > agent. ?Sudo should never use passwords for authentication. If the > > user doesn't have an SSH agent, or if the SSH agent breaks somehow, > > the sudo request is denied. > > > > With my current config, sudo requests are accepted without a password > > even if the users' environment has no $SSH_AUTH_SOCK. I'm obviously > > doing something wrong. > > > > Here's my pam.d/sudo. I removed password settings and required the > > pam_ssh_agent_auth library. > > > > --- > > #auth ? ? ? ? ? include ? ? ? ? system > > auth ? ? ? ? ? ?required ? ? ? ?/usr/local/lib/pam_ssh_agent_auth.so > > file=~/.ssh/authorized\ > > _keys > > > > # account > > account ? ? ? ? include ? ? ? ? system > > > > # session > > # XXX: pam_lastlog (used in system) causes users to appear as though > > # they are no longer logged in in system logs. > > session ? ? ? ? required ? ? ? ?pam_permit.so > > > > # password > > #password ? ? ? include ? ? ? ? system > > --- > > > > Any suggestions what I'm doing wrong? > > > > Thanks, > > ==ml > > > > -- > > Michael W. Lucas > > http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ > > Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ > > mwlu...@blackhelicopters.org, Twitter @mwlauthor > > Make sure your sudoers file has > > Defaults env_keep += "SSH_AUTH_SOCK" > > Also, make sure your matching rule for your user doesn't have NOPASSWD > set. It seems that since you've already authenticated to the system, > sudo still knows the user and/or group credentials without the pam > module's help - all it does is authenticate the public and private > keys. If you have NOPASSWD, sudo doesn't even think it needs to refer > to the authentication mechanism because according to sudoers it needs > no password for the user issuing the request. Hi, Thanks for answering! Turns out my problem was that sudo caches the last time the user authenticated. For future reference, I blogged how to set this up at http://blather.michaelwlucas.com/archives/1106 ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlu...@blackhelicopters.org, Twitter @mwlauthor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
pkgng problem
Hi, I'm sure someone has had this before, but I can't find any reference to it. # pkg upgrade Updating repository catalogue digests.txz 100% 997KB 997.1KB/s 997.1KB/s 00:00 packagesite.txz 100% 5530KB 1.8MB/s 3.2MB/s 00:03 pkg: Invalid manifest format: mapping values are not allowed in this context Incremental update completed, 0 packages processed: 0 packages updated, 0 removed and 22568 added. pkg: No digest falling back on legacy catalog format packagesite repository catalogue is up-to-date, no need to fetch fresh copy Nothing to do This is from a machine freshly converted to pkgng. Any suggestions? Thanks, ==ml -- Michael W. Lucas - mwlu...@michaelwlucas.com, Twitter @mwlauthor http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code "ILUVMICHAEL" gets you 30% off & helps me. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: pkgng problem
Thanks, Matt. # pkg -vv | sed -ne '/Repositories/,$p' Repositories: packagesite: url: http://pkg-test.freebsd.org/pkg-test-freebsd:9:x86:32/latest key: enabled: yes mirror_type: SRV Also: # pkg -v 1.1.4 ==ml -- Michael W. Lucas - mwlu...@michaelwlucas.com, Twitter @mwlauthor http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code "ILUVMICHAEL" gets you 30% off & helps me. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: pkgng problem
Matt, Another data point on this: Machines converted to pkgng a couple weeks ago can install new packages just fine despite showing the same error. And it looks like they download the new repo information: # pkg install sysrc Updating repository catalogue digests.txz 100% 997KB 997.1KB/s 997.1KB/s 00:00 packagesite.txz 100% 5530KB 1.4MB/s 1.9MB/s 00:04 pkg: Invalid manifest format: mapping values are not allowed in this contex Incremental update completed, 0 packages processed: 8292 packages updated, 1115 removed and 129 added. pkg: No digest falling back on legacy catalog format packagesite repository catalogue is up-to-date, no need to fetch fresh copy The following 1 packages will be installed: Installing sysrc: 5.2 The installation will require 39 kB more space 15 kB to be downloaded Proceed with installing packages [y/N]: y sysrc-5.2.txz 100% 16KB 15.8KB/s 15.8KB/s 00:00 Checking integrity... done [1/1] Installing sysrc-5.2... done Machines upgraded to pkgng this week, using the same script as I used a couple weeks ago, cannot install packages. # pkg install sysrc Updating repository catalogue digests.txz 100% 997KB 997.1KB/s 997.1KB/s 00:00 packagesite.txz 100% 5530KB 2.7MB/s 1.5MB/s 00:02 pkg: Invalid manifest format: mapping values are not allowed in this context Incremental update completed, 0 packages processed: 0 packages updated, 0 removed and 22568 added. pkg: No digest falling back on legacy catalog format packagesite repository catalogue is up-to-date, no need to fetch fresh copy pkg: No packages matching 'sysrc' has been found in the repositories Not sure if this supports the "bad repo" theory, but it's interesting. Thanks, ==ml -- Michael W. Lucas - mwlu...@michaelwlucas.com, Twitter @mwlauthor http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code "ILUVMICHAEL" gets you 30% off & helps me. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: pkgng problem
On Fri, Aug 16, 2013 at 11:23:41AM -0700, Adrian Chadd wrote: >Have you done a "pkg update" first, just in case you needed to pull in a >pkgng update? Yep, tried that. ==ml -- Michael W. Lucas - mwlu...@michaelwlucas.com, Twitter @mwlauthor http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code "ILUVMICHAEL" gets you 30% off & helps me. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: pkgng problem
For the archives: I left the problem alone for a few days, with no changes on my side. Came back Monday. Tried again. Everything worked on the affected machines. ==ml -- Michael W. Lucas - mwlu...@michaelwlucas.com, Twitter @mwlauthor http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e coupon code "ILUVMICHAEL" gets you 30% off & helps me. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
replacement for Acrobat Professional?
Hi folks, I've been handed a whole bunch of PDFs and asked to make my comments directly in them. I'm sure there's something in ports that can do that, but my search hasn't turned up anything. (Of course, I really have no idea what I'm looking for, which hampers the search. :-) Any suggestions on a replacement for or equivalent to Acrobat Pro? I'm on a -current box running i386. Thanks for any pointers, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: replacement for Acrobat Professional?
On Tue, Jan 10, 2006 at 10:18:35PM +, Ceri Davies wrote: > > On 9 Jan 2006, at 19:53, Michael W. Lucas wrote: > > > > >Hi folks, > > > >I've been handed a whole bunch of PDFs and asked to make my comments > >directly in them. I'm sure there's something in ports that can do > >that, but my search hasn't turned up anything. (Of course, I really > >have no idea what I'm looking for, which hampers the search. :-) > > A printer and a red biro out of the question? It's worked for me for twenty years now. Emailing them back to five or six people so they can make further comments is the hard part. :-) ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: replacement for Acrobat Professional?
On Tue, Jan 10, 2006 at 11:59:35PM -0600, Kevin Kinsey wrote: > >It looks as if people have missed the point that you want to edit > >PDFs. If you find a good solution, will you post it, please? Absolutely. Actually, I'll be posting my results for posterity anyway. > Well, I think Denny had it pretty well when he said: > "http://www.freebsdsoftware.org/print/flpsed.html"; > > #grep -i PDF /usr/ports/print/flpsed/pkg-descr > Using pdftops, which is part of xpdf one can convert PDF documents to >* Import and export PDF. Therefore it can be used as a PDF editor. This looks like the best option to me. I missed this in my search. :-( I never thought I'd say this, but we have too *much* software available... ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: replacement for Acrobat Professional?
On Tue, Jan 10, 2006 at 11:59:35PM -0600, Kevin Kinsey wrote: > It's up to Michael, though, to tell us how well it works, I suppose. No > package in packages-6-current/Latest, so I'm building from src, and > headed for bed before it gets done I imagine. So, for posterity... I'd rate pdftops and flpsed as 95% of the way there for this audience. Some small things don't work, particularly "layered" elements. Some parts of the manuscript I was given were highlighted, for example. In the original the highlighting is transparent, while the pdftops/flpsed combination the highlighting obliterates the underlying text. There are other, very minor variations. That last 5% might not be critical for most people; I would certainly use it for preparing personal documents, or even documents within my company. But OpenOffice's PDF export is far easier for preparing PDFs in general. for this application, pdftops/flpsed is not acceptable. When you dump a PDF directly to a web press and produce a book from it, tiny variations in page placement or layout will result in a really useless print run. But from the various tools people have suggested and that I've tried last night and this morning, it's as good as we have. Thanks for all the help, I'll do this the old-fashioned way. ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: replacement for Acrobat Professional?
On Thu, Jan 12, 2006 at 09:43:55AM +1030, Greg 'groggy' Lehey wrote: > *sigh* Yet Another Undocumented Program. "README" is 92 lines long, > half of which deals with installation issues. I'll look later. It has a minimal GUI with some usable stuff for what I wanted. > > But OpenOffice's PDF export is far easier for > > preparing PDFs in general. > > And ghostscript is even easier. If, say, you're the sort of guy who writes entire books in troff/mdoc/etc. :-) From what I know of how you work, I imagine that flpsed would not be very helpful. > I'd need convincing that any PDF editor is the correct way to prepare > documents; there are much more precise tools available for that. Agreed, completely and absolutely. > I > thought your original requirement was to mark up existing PDFs, and it > still sounds like a good idea for that. That is the requirement: they send me the final PDFs with the page layouts all done, and their comments in the margins. I go through and make my comments direct in the document, and then they have someone go through and rearrange according to my comments on their comments, strip out everyone's comments, and send it to the printer. Scary? Yes. Terrifying, actually. But more and more web presses speak PDF. It could be worse; they *could* speak only MS .doc... And hey, I imagine that *you* of all people would understand dealing with publishers and printers. :-) ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur pgpG4biz0UKuY.pgp Description: PGP signature
filling up UDP socket buffers like mad
Hi, Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. I'm having trouble with DNS, DHCP, and syslogd locking up, and I think I've found what they all share in common. During the lockups, the box starts dropping UDP due to full socket buffers. I have a dumb little script to capture the rate of drops over 5 seconds, and it's about 45 a second. 168725 dropped due to full socket buffers 168958 dropped due to full socket buffers Right now, named and syslogd are in cron to restart every 15 minutes. Once they restart, everything works fine. Immediately after the reload, the UDP drops cease. The script reveals no change in the number of drops... for a few minutes. I've turned kern.ipc.maxsockbuf to increase the number of UDP buffers, which Google tells me is correct. Mind you, I'd previously tuned it to 8388608. I've now doubled that again, to 16777216. I really don't want to just keep doubling this resource when something happens. The best thing to do here is to identify what's using all these sockets, but I'm stumped on how to do that. My bowels tell me it's syslogd, because that's the program that is most resistant to restarting, but that's a pretty crappy reason. Any thoughts? Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: filling up UDP socket buffers like mad
On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote: > On Mar 24, 2006, at 4:17 PM, Michael W. Lucas wrote: > >Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. > > > >I'm having trouble with DNS, DHCP, and syslogd locking up, and I think > >I've found what they all share in common. > > > >During the lockups, the box starts dropping UDP due to full socket > >buffers. I have a dumb little script to capture the rate of drops > >over 5 seconds, and it's about 45 a second. > > > >168725 dropped due to full socket buffers > >168958 dropped due to full socket buffers > > There is generally a cause behind the socket buffers filling up, > whether that is some form of livelock due to an OS problem or a > misconfiguration with a firewall/dummynet setup. You could look at > the output of "netstat -a(n)" for insight as to where the packets are > being queued up, but "netstat -s" would be useful to show to us as well. Thanks. I think you've shown me how to find the problem: # netstat -na ... udp4 0 0 127.0.0.1.57058127.0.0.1.53 udp4 0 0 127.0.0.1.61259127.0.0.1.53 udp4 0 0 127.0.0.1.54240127.0.0.1.53 udp4 0 0 127.0.0.1.52997127.0.0.1.53 udp4 0 0 *.67 *.* udp4 43414 0 *.514 *.* udp4 0 0 *.49661*.* ... We have no firewall on this machine; it's buried behind three layers of firewall. I've tried running syslogd in debug mode, but not found anything particularly useful yet. Syslogd is now set to restart every 15 minutes, and run in debug mode, so hopefully the next time this happens I'll have the debugging output. The problem happens even within fifteen minutes, but because of my timeouts nobody notices. I'm attaching the output of netstat -na and netstat -s for general informative purposes; if anyone has any further suggestions, I'm all ears. Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address(state) tcp4 96 0 10.184.1.11.53 10.184.1.8.49838 ESTABLISHED tcp4 104 0 10.184.1.11.53 10.184.1.8.61719 ESTABLISHED tcp4 0 0 127.0.0.1.6011 *.*LISTEN tcp4 0 48 10.184.1.11.22 10.184.184.108.52392 ESTABLISHED tcp4 0 0 127.0.0.1.6010 *.*LISTEN tcp4 0 0 10.184.1.11.22 10.184.184.108.64567 ESTABLISHED tcp4 0 0 *.199 *.*LISTEN tcp4 0 0 *.80 *.*LISTEN tcp4 0 0 127.0.0.1.25 *.*LISTEN tcp4 0 0 *.22 *.*LISTEN tcp4 0 0 127.0.0.1.953 *.*LISTEN tcp4 0 0 127.0.0.1.53 *.*LISTEN tcp4 0 0 10.184.3.248.53*.*LISTEN tcp4 0 0 10.184.1.11.53 *.*LISTEN udp4 0 0 127.0.0.1.59578127.0.0.1.53 udp4 0 0 127.0.0.1.57058127.0.0.1.53 udp4 0 0 127.0.0.1.61259127.0.0.1.53 udp4 0 0 127.0.0.1.54240127.0.0.1.53 udp4 0 0 127.0.0.1.52997127.0.0.1.53 udp4 0 0 *.67 *.* udp4 43414 0 *.514 *.* udp4 0 0 *.49661*.* udp4 0 0 *.52767*.* udp4 0 0 *.63357*.* udp4 0 0 127.0.0.1.58915127.0.0.1.5680 udp4 0 0 127.0.0.1.62275127.0.0.1.5679 udp4 0 0 127.0.0.1.57431127.0.0.1.5678 udp4 0 0 *.63077*.* udp4 0 0 *.161 *.* udp4 0 0 *.57589*.* udp4 0 0 *.5681 *.* udp4 0 0 127.0.0.1.5680 *.* udp4 0 0 127.0.0.1.5679 *.* udp4 0 0 127.0.0.1.5678 *.* udp4
Re: filling up UDP socket buffers like mad
On Mon, Mar 27, 2006 at 10:22:18AM -0500, Chuck Swiger wrote: > Michael W. Lucas wrote: > > On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote: > [ ... ] > > udp4 43414 0 *.514 *.* > > udp4 0 0 *.49661*.* > > ... > > > > We have no firewall on this machine; it's buried behind three layers > > of firewall. > > Heh. :-) Well, it's pretty clear that the syslog traffic isn't being drained > by the syslog daemon properly. I've seen syslogd get stuck like that if it > was > forwarding logs to another host specified by name and not IP, and it was > having > problems resolving it. This *is* the loghost other hosts are forwarding their logs to. So, I'm pretty sure that's not it. :-) ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: filling up UDP socket buffers like mad
On Mon, Mar 27, 2006 at 04:29:31PM +0100, Freminlins wrote: > Michael, > > On 3/27/06, Michael W. Lucas <[EMAIL PROTECTED]> wrote: > > > > # netstat -na > > udp4 43414 0 *.514 *.* > > > That's a big queue. Yep. Mine is bigger than yours. :-) > I'm attaching the output of netstat -na and netstat -s for general > > informative purposes; if anyone has any further suggestions, I'm all > > ears. > Try running syslogd with -n. Trying now, thanks! I'm also going to drop a line on hackers@, see if anyone over there is interested in syslogd problems. Thanks to everyone for the help. ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Maximum uptime 497 days?
Hi, This tickles something in the back of my memory. You aren't by chance talking about remote uptime detection, Netcraft-style, are you? IIRC, that rolls over to 0 at 497 days. But actual system uptime is unaffected. ==ml On Mon, Jun 28, 2004 at 12:39:30PM +0900, Rob wrote: > > Hi, > > By accident I happen to come across this remarkable limit of > uptime registration for FreeBSD systems. After 497 days, the > timer jumps to zero again. > > 497 days is less than a 1.5 years ! > > Has this been fixed in newer versions of FreeBSD (stable and/or > current) ? Or is there a hardware limitation (CPU?) that does > not allow this? > > Just wondering. > > Regards, > Rob. > > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "[EMAIL PROTECTED]" -- Michael Lucas [EMAIL PROTECTED], [EMAIL PROTECTED] "I'm sorry, but 'Social Darwinism' is no excuse for killing all of your co-workers." -- Ivan Brunetti http://www.BlackHelicopters.org/~mwlucas/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Maximum uptime 497 days?
On Tue, Jun 29, 2004 at 12:40:53AM +0900, Rob wrote: > Michael W. Lucas wrote: > >Hi, > > > >This tickles something in the back of my memory. > > > >You aren't by chance talking about remote uptime detection, > >Netcraft-style, are you? > > > >IIRC, that rolls over to 0 at 497 days. But actual system uptime is > >unaffected. > > Yes, I read it first time on a Netcraft's webpage, then googled and found > other reports as well. So this 497 limitation is only for Netscaft's way > of measuring up-time? > > Rob. Yep. It's a counter that rolls over in the TCP stack. ==ml -- Michael Lucas [EMAIL PROTECTED], [EMAIL PROTECTED] "I'm sorry, but 'Social Darwinism' is no excuse for killing all of your co-workers." -- Ivan Brunetti http://www.BlackHelicopters.org/~mwlucas/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
mimedefang, perl, and amd64 trouble
Hi, (copying wes@, the mimedefang maintainer, just because it might possibly be his headache.) I have a brand-new, freshly-cvsupped 7.0 amd64 box as a mail server. Perl seems to be having troubles; when I fire up mimedefang, it can't load some dependencies. Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Starting slave 0 (pid 1747) ( 1 running): Bringing slaves up to minSlaves (2) Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Slave 0 stderr: Can't load '/ usr/local/lib/perl5/5.8.8/mach/auto/Sys/Hostname/Hostname.so' for module Sys::Hostname: / usr/local/lib/perl5/5.8.8/mach/auto/Sys/Hostname/Hostname.so: mmap of entire address spac e failed: Cannot allocate memory at /usr/local/lib/perl5/5.8.8/mach/XSLoader.pm line 70. at /usr/local/lib/perl5/5.8.8/mach/Sys/Hostname.pm line 23 Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Slave 0 stderr: Can't load '/ usr/local/lib/perl5/5.8.8/mach/auto/File/Glob/Glob.so' for module File::Glob: /usr/local/ lib/perl5/5.8.8/mach/auto/File/Glob/Glob.so: mmap of entire address space failed: Cannot allocate memory at /usr/local/lib/perl5/5.8.8/mach/XSLoader.pm line 70. at /usr/local/li b/perl5/5.8.8/mach/File/Glob.pm line 96 Compilation failed in require at /usr/local/bin/m imedefang.pl line 3197. BEGIN failed--compilation aborted at /usr/local/bin/mimedefang.pl line 3197. Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Reap: slave 0 (pid 1747) exit ed normally with status 255 (SLAVE DIED UNEXPECTEDLY) Has anyone seen anything like this on FreeBSD before? I know that Wine has had some mmap problems, but I imagine a Perl failure would be big news here... Any ideas or suggestions appreciated. ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
pfspamd greylisting stuttering at everything
Hi, I hear greylisting is wonderful, and yet it's being unkind to me. Any help would be appreciated. According to spamd(8), addresses that are not in the spamd table should not be stuttered at when spamd(8) is running in greylisting mode; rather they should just get a 451 and watch for more incoming connections. I'm set up just like the man page, but every incoming connection is being stuttered at. This plays havoc with incoming legit mail, of course, and I've been forced to fall back on older antispam tools. spamd is running as: spamd -v -G7:4:864 -r451 My pf.conf is just: --- int="vr0" my_address="198.22.63.8" table persist table persist table persist file "/usr/local/etc/spamd/whitelist" no rdr on {lo0} from any to any rdr pass inet proto tcp from to $my_address port smtp -> $my_address port smtp rdr pass inet proto tcp from to any port smtp -> 127.0.0.1 port 8025 rdr pass inet proto tcp from ! to any port smtp -> 127.0.0.1 port 8025 pass in on $int proto tcp from any to $int port 22 flags S/SA keep state --- (OK, the last rule should not be necessary, but I'm being careful.) My spamd.conf is very textbook: -- all:\ :spamhaus:spews1:china:korea:whitelist: spamhaus:\ :black:\ :msg="SPAM. Your address %A is in the Spamhaus Block List\n\ See http://www.spamhaus.org/sbl and\ http://www.abuse.net/sbl.phtml?IP=%A for more details":\ :method=http:\ :file=www.openbsd.org/spamd/SBL.cidr.gz: spews1:\ :black:\ :msg="SPAM. Your address %A is in the spews level 1 database\n\ See http://www.spews.org/ask.cgi?x=%A for more details":\ :method=http:\ :file=www.openbsd.org/spamd/spews_list_level1.txt.gz: spews2:\ :black:\ :msg="SPAM. Your address %A is in the spews level 2 database\n\ See http://www.spews.org/ask.cgi?x=%A for more details":\ :method=http:\ :file=www.openbsd.org/spamd/spews_list_level2.txt.gz: china:\ :black:\ :msg="SPAM. Your address %A appears to be from China\n\ See http://www.okean.com/asianspamblocks.html for more details":\ :method=http:\ :file=www.openbsd.org/spamd/chinacidr.txt.gz: korea:\ :black:\ :msg="SPAM. Your address %A appears to be from Korea\n\ See http://www.okean.com/asianspamblocks.html for more details":\ :method=http:\ :file=www.openbsd.org/spamd/koreacidr.txt.gz: whitelist:\ :white:\ :file=/usr/local/etc/spamd/whitelist: relaydb-black:\ :black:\ :msg="SPAM. Your address %A is in my relaydb list.":\ :method=exec:\ :file=relaydb -4lb: relaydb-white:\ :white:\ :method=exec:\ :file=relaydb -4lw: --- I'm missing something obvious, I'm sure... something so obvious that everyone else has caught it. Any suggestions? Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: pfspamd greylisting stuttering at everything
On Mon, Oct 23, 2006 at 08:20:32AM +0200, Peter N. M. Hansteen wrote: > > I'm set up just like the man page, but every incoming connection is > > being stuttered at. This plays havoc with incoming legit mail, of > > course, and I've been forced to fall back on older antispam tools. > > Are you sure you are actually seeing stuttering, not just the > greylisting database getting (slowly) initialized? [sorry for the delay answering, I needed to spend some quality time with my mailserver to answer this thoroughly.] Well, if I manually telnet to port 25 from any machine, I get about one character a second. And I get taunted. I don't think that's the innocuous 451 error mentioned in the manual. > You should expect a 'silent period' while the machines which are > trying to send you mail prove their good intentions to your > greylister. The point of greylisting, after all, is to force > correspondents to retry 'within a reasonable time'. The lower > threshold for 'reasonable' is set with the first of the -G arguments > to spamd. The other factor is how long the correspondent takes to > actually retry, which depends on a number of other factors you really > can't influence much, such as the size of that server's outgoing > queue. I've let it run for three hours this morning. Before starting pfspamd today, I checked my spamdb. spamdb listed 12 entries. After 3 hours, spamdb listed the same 12 entries. My spamd logs to /var/log/spam, which has many interesting entries in it: Oct 26 11:18:31 bewilderbeast spamd[731]: (GREY) 216.136.204.119: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Oct 26 11:18:40 bewilderbeast spamd[731]: 204.127.192.84: connected (12/1) Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: From: Leila Wood <[EMAIL PROTECTED]> Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: To: [EMAIL PROTECTED] Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Subject: caustic assent Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: This is a multi-part message in MIME format. Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: --060605040706020008040508 Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Content-Type: text/html; charset=ISO-8859-1 Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Content-Transfer-Encoding: 7bit Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Oct 26 11:19:13 bewilderbeast spamd[731]: 204.152.190.11: disconnected after 390 seconds. Oct 26 11:19:15 bewilderbeast spamd[731]: 12.130.136.42: disconnected after 390 seconds. Oct 26 11:19:34 bewilderbeast spamd[731]: 89.110.7.178: disconnected after 390 seconds. Oct 26 11:19:48 bewilderbeast spamd[731]: 200.52.66.237: connected (10/1) So, bad stuff is making it there. Good stuff is as well, though. I sent an email from work to test the setup: bewilderbeast~;grep gkn /var/log/spamd Oct 26 11:33:59 bewilderbeast spamd[4622]: (GREY) 194.76.60.27: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Oct 26 11:35:42 bewilderbeast spamd[4622]: 194.76.60.27: From: "Michael Lucas \(DL\)" <[EMAIL PROTECTED]> Oct 26 11:35:42 bewilderbeast spamd[4622]: 194.76.60.27: Body: [EMAIL PROTECTED] Oct 26 11:41:50 bewilderbeast spamd[4622]: (GREY) 194.76.60.27: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Oct 26 11:43:33 bewilderbeast spamd[4622]: 194.76.60.27: From: "Michael Lucas \(DL\)" <[EMAIL PROTECTED]> Oct 26 11:43:33 bewilderbeast spamd[4622]: 194.76.60.27: Body: [EMAIL PROTECTED] Ten minute delay between the first and last attempt. I'm running spamd as below: pfspamd_flags="-v -G7:4:864 -r451" This tells me that after seven minutes, the next attempt should be graylisted and handed to my mail server. bewilderbeast~;grep gkn /var/log/maillog bewilderbeast~; Nothing. bewilderbeast~;spamdb | grep gkn bewilderbeast~; Nothing again. > I would give the initial database buildup a few hours at least. If > you're impatient and you have a few addresses which you consider > 'known good', you could whitelist them using > > # spamdb -a nnn.nnn.nnn.nnn I'd rather avoid whitelisting manually, except perhaps my home IP, until I know greylisting works on its own. > see spamdb(8) for details. I suppose that man page could do with a > bit more text. All of spamd could use some documentation, but that'll happen. ;-) > PS My favorite quote about spamd and greylisting at the moment is this > recent message to openbsd-misc: > http://marc.theaimsgroup.com/?l=open
Is the last sector of a partition free?
Hi, How can I tell if the last sector on a partition is used by the file system? I'm sure there's an easy way, but can't figure it out. (I have a couple file systems I'm considering switching over to gjournal, but would like to know if it'll work before I schedule downtime.) Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Coming Soon: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
xorg resolution on new laptop
Hi folks, I've scoured Google seeking wisdom, and found nothing except hordes of Linux users whining about this same problem. FreeBSD users don't seem to have this issue, except for me. Finally I have no choice but to throw myself on your tender mercies. I've been going nuts trying to get 1440x900 resolution on my new Toshiba P105. Any help anyone could offer would be greatly appreciated. Xorg assures me that the 945GM video card is supported by the i810 driver, provided I use the 915resolution program to set the resolution before starting X. I run: /usr/local/bin/915resolution 3c 1440 900 to add the resolution 1440x900 to the video BIOS. 915resolution -l now shows me: ... Mode 3c : 1440x900, 8 bits/pixel ... Mode 4d : 1440x900, 16 bits/pixel ... Mode 5c : 1440x900, 32 bits/pixel .. So, in theory 1440x900 should be available to the card. startx fails without a config file, so I let it create one and tweaked in based on gossip, rumour, and innuendo I've uncovered in three days of Web searching. I get something that looks *about* like 1200x768, but it's a far cry from 1440x900. pciconf -lv tells me: ... [EMAIL PROTECTED]:2:0: class=0x03 card=0xff311179 chip=0x27a28086 rev=0x03 hdr=0x00 vendor = 'Intel Corporation' device = 'Mobile Integrated Graphics Controller' class = display subclass = VGA [EMAIL PROTECTED]:2:1: class=0x038000 card=0xff311179 chip=0x27a68086 rev=0x03 hdr=0x00 vendor = 'Intel Corporation' device = 'Mobile Integrated Graphics Controller' class = display ... Here's relevant stuff trimmed from my xorg.conf. -- Section "Module" Load "extmod" Load "glx" Load "dri" Load "dbe" Load "record" Load "xtrap" Load "type1" Load "freetype" Load "i2c" Load "bitmap" Load "int10" EndSection ... Section "Monitor" #DisplaySize 370 230 # mm Identifier "Monitor0" VendorName "LPL" ModelName"0" EndSection Section "Device" ### Available Driver options are:- ### Values: : integer, : float, : "True"/"False", ### : "String", : " Hz/kHz/MHz" ### [arg]: arg optional #Option "NoAccel" # [] #Option "SWcursor" # [] #Option "ColorKey" # #Option "CacheLines"# #Option "Dac6Bit" # [] #Option "DRI" # [] #Option "NoDDC" # [] #Option "ShowCache" # [] #Option "XvMCSurfaces" # #Option "PageFlip" # [] Identifier "Card0" Driver "i810" VendorName "Intel Corporation" BoardName "Mobile Integrated Graphics Controller" BusID "PCI:0:2:0" EndSection Section "Screen" Identifier "Screen0" Device "Card0" Monitor"Monitor0" DefaultDepth 24 SubSection "Display" Viewport 0 0 Depth 1 Modes "1440x900" EndSubSection SubSection "Display" Viewport 0 0 Depth 4 EndSubSection SubSection "Display" Viewport 0 0 Depth 8 Modes "1440x900" EndSubSection SubSection "Display" Viewport 0 0 Depth 15 Modes "1440x900" EndSubSection SubSection "Display" Viewport 0 0 Depth 16 Modes "1440x900" EndSubSection SubSection "Display" Viewport 0 0 Depth 24 Modes "1440x900" EndSubSection EndSection Any ideas, anyone? Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: xorg resolution on new laptop
On Tue, Apr 03, 2007 at 09:29:12AM +0100, Vince wrote: > I have this working, however i cant remember my method for working it out. Thanks for the answer, but this doesn't work for me. Comments below. > I use > /usr/local/bin/915resolution 4d 1440 900 16 > (in an rc script /usr/local/etc/rc.d/915res ) You just overwrote a different mode than I did, no biggie. I copied yours. > my xorg.conf (relevant bits) > Section "Device" > > Identifier "Card0" > Driver "i810" > VendorName "Intel Corporation" > BoardName "Mobile Integrated Graphics Controller" > BusID "PCI:0:2:0" > Option "DRI" "true" Interesting point: I copied this entry, and Xorg.0.log shows that DRI should be enabled: (II) I810(0): [DRI] installation complete (II) I810(0): direct rendering: Enabled glxinfo says I don't have DRI, however: glxinfo name of display: :0.0 Unrecognized deviceID 27a2 display: :0 screen: 0 direct rendering: No Still searching, but thanks for info. At least I know it *can* work on FreeBSD... > EndSection > > Section "Screen" > Identifier "Screen0" > Device "Card0" > Monitor"Monitor0" > DefaultDepth 24 > Subsection "Display" > Depth 24 > Modes "1440x900" "1024x768" "800x600" > ViewPort0 0 > EndSubsection > EndSection > > > > I'm not certain why this works since I'm setting the mode to 1440x900 > in 16bits but it does. > (from xdpyinfo) > screen #0: > print screen:no > dimensions:1440x900 pixels (302x191 millimeters) > resolution:121x120 dots per inch > depths (7):24, 1, 4, 8, 15, 16, 32 > root window id:0x5d > depth of root window:24 planes > number of colormaps:minimum 1, maximum 1 > > > Vince > > > Michael W. Lucas wrote: > > Hi folks, > > > > I've scoured Google seeking wisdom, and found nothing except hordes of > > Linux users whining about this same problem. FreeBSD users don't seem > > to have this issue, except for me. Finally I have no choice but to > > throw myself on your tender mercies. > > > > I've been going nuts trying to get 1440x900 resolution on my new > > Toshiba P105. Any help anyone could offer would be greatly > > appreciated. Xorg assures me that the 945GM video card is supported > > by the i810 driver, provided I use the 915resolution program to set > > the resolution before starting X. I run: > > > > /usr/local/bin/915resolution 3c 1440 900 > > > > to add the resolution 1440x900 to the video BIOS. 915resolution -l > > now shows me: > > > > ... > > Mode 3c : 1440x900, 8 bits/pixel > > ... > > Mode 4d : 1440x900, 16 bits/pixel > > ... > > Mode 5c : 1440x900, 32 bits/pixel > > .. > > > > So, in theory 1440x900 should be available to the card. > > > > startx fails without a config file, so I let it create one and tweaked > > in based on gossip, rumour, and innuendo I've uncovered in three days > > of Web searching. I get something that looks *about* like 1200x768, > > but it's a far cry from 1440x900. > > > > pciconf -lv tells me: > > > > ... > > [EMAIL PROTECTED]:2:0: class=0x03 card=0xff311179 chip=0x27a28086 > > rev=0x03 hdr=0x00 > > vendor = 'Intel Corporation' > > device = 'Mobile Integrated Graphics Controller' > > class = display > > subclass = VGA > > [EMAIL PROTECTED]:2:1: class=0x038000 card=0xff311179 chip=0x27a68086 > > rev=0x03 hdr=0x00 > > vendor = 'Intel Corporation' > > device = 'Mobile Integrated Graphics Controller' > > class = display > > ... > > > > Here's relevant stuff trimmed from my xorg.conf. > > > > -- > > > > Section "Module" > > Load "extmod" > > Load "glx" > > Load "dri" > > Load "dbe" > > Load "record" > > Load "xtrap" > > Load "type1" > > Load "freetype" > > Load "i2c" > > Load "bitmap" > > Load "int10" > > EndSection > > > > ... > > > > Section "Monitor"
Re: xorg resolution on new laptop
> I'm not certain why this works since I'm setting the mode to 1440x900 > in 16bits but it does. > (from xdpyinfo) > screen #0: > print screen:no > dimensions:1440x900 pixels (302x191 millimeters) > resolution:121x120 dots per inch > depths (7):24, 1, 4, 8, 15, 16, 32 > root window id:0x5d > depth of root window:24 planes > number of colormaps:minimum 1, maximum 1 I missed the bit about xdpyinfo, never seen that program before. I have: screen #0: print screen:no dimensions:1440x900 pixels (373x231 millimeters) resolution:98x99 dots per inch depths (7):24, 1, 4, 8, 15, 16, 32 root window id:0x4c depth of root window:24 planes number of colormaps:minimum 1, maximum 1 The difference is in the "resolution" entry: Vince has 121x120, I have 98x99. My text is all quite large, my icons larger. What I really need to do is learn about X. All of the docs I've found have been for older versions or consist only of occult references to a particular users' edge case. It seems nobody's written a book about xorg. (Don't ask me to, I don't know enough to even write the proposal! :-) Does anyone have a recommendation for a decent user tutorial for X troubleshooting? I don't mean "run startx", I mean "this is the log file and this is what the various entries mean" sort of troubleshooting. Thanks, ==ml > Michael W. Lucas wrote: > > Hi folks, > > > > I've scoured Google seeking wisdom, and found nothing except hordes of > > Linux users whining about this same problem. FreeBSD users don't seem > > to have this issue, except for me. Finally I have no choice but to > > throw myself on your tender mercies. > > > > I've been going nuts trying to get 1440x900 resolution on my new > > Toshiba P105. Any help anyone could offer would be greatly > > appreciated. Xorg assures me that the 945GM video card is supported > > by the i810 driver, provided I use the 915resolution program to set > > the resolution before starting X. I run: > > > > /usr/local/bin/915resolution 3c 1440 900 > > > > to add the resolution 1440x900 to the video BIOS. 915resolution -l > > now shows me: > > > > ... > > Mode 3c : 1440x900, 8 bits/pixel > > ... > > Mode 4d : 1440x900, 16 bits/pixel > > ... > > Mode 5c : 1440x900, 32 bits/pixel > > .. > > > > So, in theory 1440x900 should be available to the card. > > > > startx fails without a config file, so I let it create one and tweaked > > in based on gossip, rumour, and innuendo I've uncovered in three days > > of Web searching. I get something that looks *about* like 1200x768, > > but it's a far cry from 1440x900. > > > > pciconf -lv tells me: > > > > ... > > [EMAIL PROTECTED]:2:0: class=0x03 card=0xff311179 chip=0x27a28086 > > rev=0x03 hdr=0x00 > > vendor = 'Intel Corporation' > > device = 'Mobile Integrated Graphics Controller' > > class = display > > subclass = VGA > > [EMAIL PROTECTED]:2:1: class=0x038000 card=0xff311179 chip=0x27a68086 > > rev=0x03 hdr=0x00 > > vendor = 'Intel Corporation' > > device = 'Mobile Integrated Graphics Controller' > > class = display > > ... > > > > Here's relevant stuff trimmed from my xorg.conf. > > > > -- > > > > Section "Module" > > Load "extmod" > > Load "glx" > > Load "dri" > > Load "dbe" > > Load "record" > > Load "xtrap" > > Load "type1" > > Load "freetype" > > Load "i2c" > > Load "bitmap" > > Load "int10" > > EndSection > > > > ... > > > > Section "Monitor" > > #DisplaySize 370 230 # mm > > Identifier "Monitor0" > > VendorName "LPL" > > ModelName"0" > > EndSection > > > > Section "Device" > > ### Available Driver options are:- > > ### Values: : integer, : float, : "True"/"False", > > ### : "String", : " Hz/kHz/MHz" > > ### [arg]: arg optional > > #Option "NoAccel" # [] > > #Option "SWcursor" # [] > > #Optio
USB key device nodes
Hi, This strikes me as odd. I have a 1GB USB pocketknife that doesn't give me the right device nodes until after I try to mount it. The mount attempt seems to create the proper device nodes. The USB drive shows up on insertion like so: Apr 14 19:09:41 stretchlimo kernel: umass0: on uhub4 Apr 14 19:09:41 stretchlimo root: Unknown USB device: vendor 0x1370 product 0x2168 bus uhub4 Apr 14 19:09:41 stretchlimo kernel: da1 at umass-sim0 bus 0 target 0 lun 0 Apr 14 19:09:41 stretchlimo kernel: da1: Removable Direct Access SCSI-2 device Apr 14 19:09:41 stretchlimo kernel: da1: 40.000MB/s transfers Apr 14 19:09:41 stretchlimo kernel: da1: Attempt to query device size failed: UNIT ATTENTION, Not ready to ready change, Disklabel tells me that it has a single DOS partition on it: # fdisk /dev/da1 *** Working on device /dev/da1 *** parameters extracted from in-core disklabel are: cylinders=998 heads=64 sectors/track=32 (2048 blks/cyl) parameters to be used for BIOS calculations are: cylinders=998 heads=64 sectors/track=32 (2048 blks/cyl) Media sector size is 512 Warning: BIOS sector numbering starts with sector 1 Information from DOS bootblock is: The data for partition 1 is: sysid 6 (0x06),(Primary 'big' DOS (>= 32MB)) start 32, size 2043871 (997 Meg), flag 80 (active) beg: cyl 0/ head 1/ sector 1; end: cyl 996/ head 63/ sector 32 The data for partition 2 is: The data for partition 3 is: The data for partition 4 is: But the only device node I get upon insertion is: # ls /dev/da* /dev/da1 # I try to mount it, and immediately check the device nodes: # mount_msdosfs /dev/da1 /media mount_msdosfs: /dev/da1: : Invalid argument # ls /dev/da* /dev/da1/dev/da1s1 # Of course, at this point I can mount_msdosfs /dev/da1s1. Is this behavior normal? I'm trying to configure devd to automount a USB device, but the lack of a proper device node appearing the first time around kiboshes that. This is a 7.x i386 system. Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: USB key device nodes
On Sun, Apr 15, 2007 at 02:00:00PM +0400, Boris Samorodov wrote: > This is almost a FAQ. You may do here: > > # true > /dev/da1 > > ...and than look at /dev/da1* Now that I know the answer, it's easy to find in Google. Many times. I'll get it in the FAQ. Thanks for the answer! ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
if_lagg(4) and rc.conf
Hi, I'm trying to configure a lagg(4) interface out of rc.conf. FreeBSD doesn't want to initialize the interface at boot. I'm obviously missing some little thing. I'm successfully loading if_lagg into the kernel, so that's not the problem. I can configure the interface at the command line if I do a "ifconfig lagg0 create" and then enter the configuration, but there doesn't seem to be a rc.conf flag to tell the system to create an interface? Here's my rc.conf for these interfaces: ifconfig_em3="up" ifconfig_em7="up" ifconfig_lagg0="laggproto lacp laggport em3 laggport em7 10.184.1.19 netmask 0x" Any suggestions? Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Coming Soon: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: if_lagg(4) and rc.conf
On Tue, Jul 03, 2007 at 03:10:05PM -0400, John Nielsen wrote: > On Tuesday 03 July 2007 02:35:16 pm Michael W. Lucas wrote: > > I'm trying to configure a lagg(4) interface out of rc.conf. FreeBSD > > doesn't want to initialize the interface at boot. I'm obviously > > missing some little thing. I'm successfully loading if_lagg into the > > kernel, so that's not the problem. > > > > I can configure the interface at the command line if I do a "ifconfig > > lagg0 create" and then enter the configuration, but there doesn't seem > > to be a rc.conf flag to tell the system to create an interface? > > > > Here's my rc.conf for these interfaces: > > > > ifconfig_em3="up" > > ifconfig_em7="up" > > ifconfig_lagg0="laggproto lacp laggport em3 laggport em7 10.184.1.19 > > netmask 0x" > > I haven't played with if_lagg yet, but you should be able to use the > cloned_interfaces knob in /etc/rc.conf to create the interface. e.g.: > > cloned_interfaces="lagg0" > ifconfig_em3="up" > ifconfig_em7="up" > ifconfig_lagg0="laggproto lacp laggport em3 laggport em7 10.184.1.19 \ > netmask 0x" > > if_lagg(4) mentions this briefly (at the end before the examples) This last bit, of course, was the key to the whole thing. I don't know how many times I looked at the man page without seeing that. Thanks for pointing it out. ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Coming Soon: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
timekeeping on jail servers
Hi, Been searching around without results: Has anyone come up with a decent way to do timekeeping on a jail server? ntpd(8) binds to all addresses, and I'd rather not do a ntpdate out of cron. Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: timekeeping on jail servers
On Tue, Dec 18, 2007 at 11:02:12AM -0500, Bill Moran wrote: > In response to "Michael W. Lucas" <[EMAIL PROTECTED]>: > > > Hi, > > > > Been searching around without results: > > > > Has anyone come up with a decent way to do timekeeping on a jail > > server? ntpd(8) binds to all addresses, and I'd rather not do a > > ntpdate out of cron. > > I'm not entirely sure I comprehend where you're having trouble, Michael, > but we use openntpd on all our systems, specifically because you can > tell it what addresses to bind to. That would be you don't have my problem. Openntpd will solve my problem. Thanks for all the pointers, including the dozen or so private ones! ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Portmaster error or actual bug?
Hi, Not sure if this is a bug, but it sure looks like one to me. I run: # portmaster -o lang/expect-devel expect-5.43.0_3 expecting to replace Expect 5.43 with the version in expect-devel (5.44). Instead, it reinstalls expect-5.43. Am I doing something wrong? Or is this an actual bug in portmaster? Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Portmaster error or actual bug?
On Tue, Feb 26, 2008 at 02:52:49PM -0500, Randy Pratt wrote: > On Tue, 26 Feb 2008 13:08:59 -0500 > "Michael W. Lucas" <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > Not sure if this is a bug, but it sure looks like one to me. > > > > I run: > > > > # portmaster -o lang/expect-devel expect-5.43.0_3 > > > > expecting to replace Expect 5.43 with the version in expect-devel > > (5.44). Instead, it reinstalls expect-5.43. > > > > Am I doing something wrong? Or is this an actual bug in portmaster? > > > > I think this has been reported and Doug Barton has a patch for it > already: > > http://docs.freebsd.org/cgi/mid.cgi?47BF5119.206 > > I don't think its been committed yet though. Aha! Yes, that's my problem. We'll give Doug a few days to commit his patch, I suppose. ;-) ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
"disklabel: Class not found" when editing USB disk
Hi, I'm following Ceri's instructions for getting FreeBSD on a flash drive. My laptop is a Feb 1 -current, I'm installing FreeBSD 7.1, and the instructions are for 6.1, so we have all kinds of things that could be going wrong. The USB boots with the error: F1 FreeBSD F6 PXE Boot: F1 Not ufs Not ufs No /boot/loader When I investigated the flash's disklabel, I saw: 8 partitions: #size offsetfstype [fsize bsize bps/cpg] a: 4000106 16unused0 0 c: 40001220unused0 0 # "raw" part, don't edit I newfs'd this flash drive and put data on it. The obvious thing to do is set the disklabel for partition a to 4.2BSD. Even if I have to reinstall the data, no big deal. So, run bsdlabel -e /dev/da0s1 and change the disklabel to: #size offsetfstype [fsize bsize bps/cpg] a: 4000106 164.2BSD0 0 c: 40001220unused0 0 # "raw" part, don't edit Then I get the error: bsdlabel: Class not found re-edit the label? [y]: The same error appears if I try to edit the disklabel off-disk and restore (-R). Google tells me that this error is not uncommon, but the only solutions I saw (loading geom_mbr and setting kern.geom.debugflags=16) did not help. Anyone have any suggestions? Or, can anyone tell me I'm running down the wrong path? Thanks, ==ml -- Michael W. Lucasmwlu...@blackhelicopters.org, mwlu...@freebsd.org http://www.BlackHelicopters.org/~mwlucas/ Latest book: Cisco Routers for the Desperate, 2nd Edition http://www.CiscoRoutersForTheDesperate.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
play a music CD backwards?
No, I'm not looking for satanic messages. :-) I have a music CD that was pressed from a master tape run backwards (Throbbing Gristle's "2nd Annual Report", if anyone cares). It would be nice to hear it forwards. Can someone suggest a way to hear a CD backwards? Sadly, none of the standard CD players have this option. I'd happily rip this to MP3 if I could find a MP3 player with a "play backwards" option. ==ml -- Michael Lucas [EMAIL PROTECTED], [EMAIL PROTECTED] Today's chance of throwing it all away to start a goat farm: 44.3% http://www.BlackHelicopters.org/~mwlucas/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
net4801, nanobsd, & -current
f enabling this! # Note that 'bpf' is required for DHCP. device bpf # Berkeley packet filter # USB support #device uhci# UHCI PCI->USB interface #device ohci# OHCI PCI->USB interface #device ehci# EHCI PCI->USB interface (USB 2.0) device usb # USB Bus (required) #device udbp# USB Double Bulk Pipe devices device ugen# Generic device uhid# "Human Interface Devices" device ukbd# Keyboard #device ulpt# Printer device umass # Disks/Mass storage - Requires scbus and da #device ums # Mouse #device ural# Ralink Technology RT2500USB wireless NICs #device rum # Ralink Technology RT2501USB wireless NICs #device zyd # ZyDAS zb1211/zb1211b wireless NICs #device urio# Diamond Rio 500 MP3 player #device uscanner# Scanners # USB Serial devices device ucom# Generic com ttys device uark# Technologies ARK3116 based serial adapters device ubsa# Belkin F5U103 and compatible serial adapters device ubser # BWCT console serial adapters device uftdi # For FTDI usb serial adapters device uipaq # Some WinCE based devices device uplcom # Prolific PL-2303 serial adapters device uslcom # SI Labs CP2101/CP2102 serial adapters device uvisor # Visor and Palm devices device uvscom # USB serial support for DDI pocket's PHS # USB Ethernet, requires miibus #device aue # ADMtek USB Ethernet #device axe # ASIX Electronics USB Ethernet #device cdce# Generic USB over Ethernet #device cue # CATC USB Ethernet #device kue # Kawasaki LSI USB Ethernet #device rue # RealTek RTL8150 USB Ethernet #device udav# Davicom DM9601E USB # FireWire support #device firewire# FireWire bus code #device sbp # SCSI over FireWire (Requires scbus and da) #device fwe # Ethernet over FireWire (non-standard!) #device fwip# IP over FireWire (RFC 2734,3146) #device dcons # Dumb console driver #device dcons_crom # Configuration ROM for dcons -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons." ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Proper startup of ng_fec?
Hi, I'm looking at using ng_fec to implement "adapter teaming" -- it appears that Cisco switches swallow it more easily than ng_one2many. Is there a proper way to configure a Netgraph interface at boot? A search for ngctl in /etc/rc.d/* only leads to the Bluetooth startup. It appears that I need to write a custom rc.d script to have a ng_one2many interface appear and start early in the boot sequence. Anyone have a better way? Thanks, ==ml -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
ng_fec headaches
pcib3 pcib4: at device 4.0 on pci0 pci4: on pcib4 pcib5: at device 5.0 on pci0 pci5: on pcib5 pcib6: at device 0.0 on pci5 pci6: on pcib6 em0: port 0xecc0-0xecff mem 0xfe6e-0xfe6f irq 64 at device 7.0 on pci6 em0: Ethernet address: 00:13:72:64:cc:9d pcib7: at device 0.2 on pci5 pci7: on pcib7 em1: port 0xdcc0-0xdcff mem 0xfe4e-0xfe4f irq 65 at device 8.0 on pci7 em1: Ethernet address: 00:13:72:64:cc:9e pcib8: at device 6.0 on pci0 pci8: on pcib8 pcib9: at device 0.0 on pci8 pci9: on pcib9 em2: port 0xccc0-0xccff mem 0xfe1e-0xfe1f irq 106 at device 4.0 on pci9 em2: Ethernet address: 00:04:23:ce:45:d6 em3: port 0xcc80-0xccbf mem 0xfe1c-0xfe1d irq 107 at device 4.1 on pci9 em3: Ethernet address: 00:04:23:ce:45:d7 pcib10: at device 0.2 on pci8 pci10: on pcib10 em4: port 0xbcc0-0xbcff mem 0xfdfe-0xfdff,0xfdf8-0xfdfb irq 96 at device 2.0 on pci10 em4: Ethernet address: 00:04:23:c2:91:02 em5: port 0xbc80-0xbcbf mem 0xfdfc-0xfdfd,0xfdf4-0xfdf7 irq 97 at device 2.1 on pci10 em5: Ethernet address: 00:04:23:c2:91:03 em6: port 0xbc40-0xbc7f mem 0xfdf2-0xfdf3 irq 101 at device 3.0 on pci10 em6: Ethernet address: 00:04:23:ce:4c:2a em7: port 0xbc00-0xbc3f mem 0xfdf0-0xfdf1 irq 102 at device 3.1 on pci10 em7: Ethernet address: 00:04:23:ce:4c:2b uhci0: port 0x9ce0-0x9cff irq 16 at device 29.0 on pci0 uhci0: [GIANT-LOCKED] usb0: on uhci0 usb0: USB revision 1.0 uhub0: on usb0 uhub0: 2 ports with 2 removable, self powered uhci1: port 0x9cc0-0x9cdf irq 19 at device 29.1 on pci0 uhci1: [GIANT-LOCKED] usb1: on uhci1 usb1: USB revision 1.0 uhub1: on usb1 uhub1: 2 ports with 2 removable, self powered uhci2: port 0x9ca0-0x9cbf irq 18 at device 29.2 on pci0 uhci2: [GIANT-LOCKED] usb2: on uhci2 usb2: USB revision 1.0 uhub2: on usb2 uhub2: 2 ports with 2 removable, self powered ehci0: mem 0xfeb0-0xfeb003ff irq 23 at device 29.7 on pci0 ehci0: [GIANT-LOCKED] usb3: EHCI version 1.0 usb3: companion controllers, 2 ports each: usb0 usb1 usb2 usb3: on ehci0 usb3: USB revision 2.0 uhub3: on usb3 uhub3: 6 ports with 6 removable, self powered uhub4: on uhub3 uhub4: multiple transaction translators uhub4: 2 ports with 2 removable, self powered pcib11: at device 30.0 on pci0 pci11: on pcib11 vgapci0: port 0xac00-0xacff mem 0xf000-0xf7ff,0xfdcf-0xfdcf irq 18 at device 13.0 on pci11 isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.1 on pci0 ata0: on atapci0 ata1: on atapci0 acpi_hpet0: iomem 0xfed0-0xfed003ff on acpi0 Timecounter "HPET" frequency 14318180 Hz quality 2000 fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FAST] atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: flags 0x1 irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model IntelliMouse Explorer, device ID 4 sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio0: [FAST] orm0: at iomem 0xc-0xcafff,0xec000-0xe on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: at port 0x3c0-0x3df iomem 0xa-0xb on isa0 Timecounters tick every 1.000 msec acd0: CDROM at ata0-master UDMA33 amr0: delete logical drives supported by controller amrd0: on amr0 amrd0: 1430400MB (2929459200 sectors) RAID 5 (optimal) SMP: AP CPU #1 Launched! Trying to mount root from ufs:/dev/amrd0s1a -- Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED] http://www.BlackHelicopters.org/~mwlucas/ Latest book: PGP & GPG -- http://www.pgpandgpg.com "The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
PDF storage software recommendations?
Hi, I have to store a bunch of PDFs of orders. I'd like to be able to "tag" these by customer, date, and a couple of other characteristics, and then search and/or sort by these tags. I'm certain that we have something in ports that will do this, but danged if I can find a good candidate. While I'm sure I could build a database/PHP app that would work, surely someone's already done this? Any recommendations? Thanks, ==ml -- Michael W. Lucasmwlu...@blackhelicopters.org http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ New book: Network Flow Analysis pre-order now! http://www.networkflowanalysis.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: PDF storage software recommendations?
On Thu, Jun 17, 2010 at 01:12:13PM -0400, Greg Larkin wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Michael W. Lucas wrote: > > Hi, > > > > I have to store a bunch of PDFs of orders. I'd like to be able to > > "tag" these by customer, date, and a couple of other characteristics, > > and then search and/or sort by these tags. > > > > I'm certain that we have something in ports that will do this, but > > danged if I can find a good candidate. While I'm sure I could build a > > database/PHP app that would work, surely someone's already done this? > > Any recommendations? > > > > Thanks, > > ==ml > > > > Hi Michael, > > I maintain print/pdftk, and you can edit document metadata with it. The > "updateinfo" subcommand should do what you want. I found this page > describing that and some other functions of the tool: > http://scottnesbitt.net/ubuntublog/?p=269. That looks like a fabulous tool, actually. I've wanted that functionality for years. But it's not quite what I want. We get orders for services via PDF. We need to keep them, and call them up months or years later. We'd need to find things like "all of the PDFs for Customer X" or "all of the PDFs for circuit ID such-and-such." Surely other people have had this problem, for generic documents/files if not PDFs in particular... ==ml -- Michael W. Lucasmwlu...@blackhelicopters.org http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ New book: Network Flow Analysis pre-order now! http://www.networkflowanalysis.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
apache22 build problem: cgi disabled
Hi, I'm running a July 26 -current/amd64, both ports and userland, and it seems that the newest apache22 doesn't build a lot of modules, such as mod_cgi, mod_cache, etc. /var/db/ports/apache22/options includes (among other things): WITH_CGI=true make.conf defines only perl and sendmail.mc. The port's config.log shows: $ ./configure --prefix=/usr/local --enable-layout=FreeBSD --with-perl=/usr/local/bin/perl5.8.9 --with-port=80 --with-expat=/usr/local --with-iconv=/usr/local --enable-http --with-pcre=/usr/local --with-apr=/usr/local/bin/apr-1-config --with-apr-util=/usr/local/bin/apu-1-config --disable-authn-file --disable-authn-default --disable-authz-host --disable-authz-groupfile --disable-authz-user --disable-authz-default --disable-auth-basic --disable-charset-lite --disable-include --disable-log-config --disable-env --disable-setenvif --disable-mime --disable-status --disable-autoindex --disable-asis --disable-cgid --disable-cgi --disable-negotiation --disable-dir --disable-imagemap --disable-actions --disable-userdir --disable-alias --disable-filter --disable-proxy --disable-proxy-connect --disable-proxy-ftp --disable-proxy-http --disable-proxy-ajp --disable-proxy-balancer --disable-proxy-scgi --disable-reqtimeout --enable-so --enable-mods-shared=auth_basic auth_digest authn_file authn_dbm authn_anon authn_default authn_alias authz_host authz_groupfile authz_user authz_dbm authz_owner authz_default disk_cache file_cache dav dav_fs actions alias asis autoindex cern_meta charset_lite deflate dir dumpio env expires headers imagemap include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias version reqtimeout proxy_connect ssl --with-dbm=sdbm --with-ssl=/usr --disable-ipv6 --with-devrandom --with-mpm=prefork --prefix=/usr/local --mandir=/usr/local/man --infodir=/usr/local/info/ --build=amd64-portbld-freebsd9.0 There's a --disable-cgi in there, but no cgi listed after --enable-mods. So, my FreeBSD options are set to enable CGI, but they aren't making it down to the Apache build process. Am I doing something daft here, or should I file a PR? Thanks, ==ml -- Michael W. Lucasmwlu...@blackhelicopters.org http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ New book available: Network Flow Analysis http://www.networkflowanalysis.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"