Re: [OpenIndiana-discuss] [discuss] which to use: smb/server or samba

2014-03-27 Thread Christopher Chan

On Friday, March 28, 2014 07:05 AM, Ray Van Dolson wrote:

On Thu, Mar 27, 2014 at 01:06:00PM -0400, Harry Putnam wrote:

Running oi -b 151_a8

I'm having a problem with smb/server in that it falls into
maintenance mode and logs say:

   [...]
   smbd: kernel bind error: Address already in use
   [...]

But before I dig into that problem, and just from laziness, I want to
ask if there is any reason not to just go to samba?

I have seen a few arguments on the openindiana groups, saying that
the smb/server is not really as stable and possibly may not have the
actual thruput for some reasons I did not understand, as samba.

OK, so being a beginner of sorts... and lazy, not really craving to
dig into something I know little or nothing about.  That is, I am not
well versed in any stretch of imagination in these discussions.

I kind of lean to samba since I've run it for years on linux and at
least have some familiarity with it.

What do experienced users say about it?

I have nothing too scientific to add.  smb/server has always *felt*
slower, and it also only does SMB 1.0 (well, at least in NexentaStor
3.1.5, though I believe they're adding SMB 2.x support in 4.0 which
we're looking forward to).  I always kind of wondered why Samba wasn't
used -- seems to be faster, have far more features and of course is
quite mature.  Seems like a lot of redundant effort, though perhaps
there were some good reason (licensing, etc.?)




It is really funny that you heard or felt that smb/server is slower. I 
don't use smb/server and the one time I did, it had the lowest latency 
of all and users felt it was snappy.


I have had problems with both smb/server and samba. The problem I had 
with smb/server seems to have been an edge case (accessible only through 
\\ip.addr and not through \\shortname or \\fqdn; see 
https://www.illumos.org/issues/1087) but other than that it was 
'blazing' fast.


samba has the features I want but the packaged samba gave me no end of 
trouble. The main issue with 3.5.x of samba on illumos was getting a 
long list of detached smbd processes over time that were doing nothing 
but were somehow slowing things down whether by taking up slots or doing 
something else and required a cron job to kill them off. Then there was 
the major winbind bug in the versions below 3.5.12. 
https://www.illumos.org/issues/2172


I am currently running 3.6 and will soon switch over to 4.1 for file 
serving. I have a 4.1 instance acting as an AD DC in production.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Virtualbox, OI 151a8 and vboxflt problem

2014-02-16 Thread Christopher Chan

On Thursday, February 13, 2014 11:22 AM, Geoff Nordli wrote:

On 14-02-12 06:55 PM, Carl Brewer wrote:

On 13/02/2014 12:27 PM, Geoff Nordli wrote:


Hi Carl.

I have a few OI+VBox boxes in production right now and I haven't
experienced any networking failure.  The only part isn't supported is
the crossbow network stack, you need to use the streams version. They
have absolutely been rock solid.


I haven't done anything non-standard with this box, AFAIK. How would 
I know if it was using crossbow?




I don't even think crossbow will install on OI, it fails during install


It won't. And if you trick it, it still won't work. vbox crossbow is 
using calls that do not exist in 151 and were added in 154 or something 
IIRC. Those new calls enable vbox to automatically setup a vnic to use. 
Wish they would also allow for the option of manual configuration for 
illumos based hosts so what we can also use crossbow albeit without 
automatic configuration.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] pulseaudio

2013-09-25 Thread Christopher Chan
Okay so it is standard on Linux but why do we need that piece of broken 
crap from Lennart Poettering after he's had his fun? What next? systemd?


On Wednesday, September 25, 2013 03:13 PM, real-men-dont-cl...@gmx.net 
wrote:

Hello everybody,

did anybody try to compile pulseaudio for OI, so far? It should be possible as 
it is in Oracle Solais 11.1 now.

Oracle supplied the information about the toolchain used to build the desktop 
stuff, but I didn't find the time to look deeper into that.

So, before reinventing the wheel, perhaps somebody did it already?

thx

Carsten

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] oi_151a8 is out

2013-08-12 Thread Christopher Chan

samba is 3.5.21?

There is a threading problem with the entire 3.5.x series that is gone 
in 3.6.x. https://www.illumos.org/issues/2172


Ira Cooper hinted at that too when I got his attention.

I'll stay put with my a7 and my samba 3.6.x build.


On Monday, August 12, 2013 10:28 PM, Dmitry Kozhinov wrote:
Congratulations on the new release! I think someone should update 
openindiana.org front page now.

As always, thank you all who contributed.

Dmitry.


Wot, no-one's mentioned this yet?

http://wiki.openindiana.org/oi/oi_151a_prestable8+Release+Notes

--
Dave Koelmeyer
http://blog.davekoelmeyer.co.nz




___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] iSCSI volume and ZFS

2013-07-24 Thread Christopher Chan

On Wednesday, July 24, 2013 03:18 AM, CJ Keist wrote:
Yes, that would be the case. I'm looking at EMC iSCSI storage unit. So 
it's pretty much the same case that I have with our current OI system 
using Raid controller to present one single volume to create a ZFS 
file system on correct? There is the potential of loosing the entire 
ZFS file system if anything got corrupted during data transfers.




Did you know that one of the points of using ZFS is to do away with 
hardware raid? Especially for raid5,6 and so on. raidz solves the 
write-hole problem that raid5,6 has.


ZFS is used as an iscsi target. Not sure why you want to go the other 
way round. ZFS does not support clustering nor does it have special 
features beyond disk and data management. Why do you have this idea of 
running ZFS over iscsi?






On 7/23/13 12:05 PM, alka wrote:

Understanding correctly:

You are trying to buy a iSCSI array ex like a Dell 3200, 
http://www.dell.com/us/business/p/powervault-iscsi-arrays or similar
with a hardware raid + oldstyle unsecure filesystem on it and share 
this volume via iSCSI as a single disk vdev to OI and format with ZFS??


This is a absolute nogo !
While this will work it is slower than using OI only for all SAN or 
NAS tasks. Main problem is that you have checksum validation
but without any  error repair options. For these a ZFS software raid 
with redundancy is needed.


Better look at a SuperMicro Jbod case with a SuperMicro X9..-F 
mainboard, enough LSI 9207 HBA for all disks and you can do all what 
you want.
If you need iSCSI on it, read about Comstar, the iSCSI target 
solution on Solarish systems




Am 23.07.2013 um 18:42 schrieb CJ Keist:

I'm looking at purchasing a iSCSI disk raid array and using OI to 
mount the iSCSI volume and format with ZFS.  Anyone out there doing 
this? I'd be interested in successes or issues that I should look 
out for.


Thanks

--
C. J. Keist Email: cj.ke...@colostate.edu
Systems Group Manager   Solaris 10 OS (SAI)
Engineering Network ServicesPhone: 970-491-0630
College of Engineering, CSU Fax:   970-491-5569
Ft. Collins, CO 80523-1301

All I want is a chance to prove 'Money can't buy happiness'

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


--


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss






___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OI ZFS and Active Directory Integration

2013-07-15 Thread Christopher Chan

On Tuesday, July 16, 2013 06:12 AM, Alberto Picón Couselo wrote:

Hi, there.

I would like to know if MS Active Directory integration is supported 
in OpenIndiana and which is the best way to provide ZFS filesystem to 
Windows Servers.




user database integration possible with samba or user mapping possible 
with kCIFS. If you do not need users to logon and get a shell, then 
using kCIFS is sufficient.


ZFS can be provided to Windows Servers via samba daemons or kCIFS. The 
question is whether you need kerberos throughout. If you do, samba is 
the way to go. kCIFS only supports ntlmv2 and no kerberos handshake in 
the smb connection.



Is there any master guidelines I can follow?


Oracle's documentation for kCIFS. samba documentation for samba.



Thank you very much in advance,
Best Regards

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] CIFS and openindiana

2013-07-14 Thread Christopher Chan

On Friday, July 12, 2013 09:27 PM, Jim Klimov wrote:

On 2013-07-12 06:28, Christopher Chan wrote:

On Friday, July 12, 2013 11:29 AM, Geoff Nordli wrote:

On 13-07-11 07:25 PM, Jim Klimov wrote:

On a side note, you can always make ZFS snapshots via filesystem
interface mkdir $dataset/.zfs/snapshot/$snapname over both NFS
and CIFS (at least kCIFS) as well as locally, as long as your user
has proper ZFS delegated permissions. Removing is trickier, since
tools insist on only deleting empty directories, and somehow they
fail to delete contents of a read-only snapshot... bummer ;)


That is very cool Jim, I didn't know I could create a snapshot that 
way.



Time to rewrite the scripts. This makes it way easier to manage
snapshots when you have over 2k snapshot per dataset. I've already
resorted to referencing one dataset's snapshots with ls since zfs list
takes forever. Thanks for letting us know about this. zfs just got even
better.


You are both welcome :)
In fact, this trick I used in vboxsvc to create pre-start/post-stop
snapshots of filesystem datasets which hold the VM image/cfg files,
so that it can work seamlessly with local and NFS storage of VMs,
as well as to just detect if a directory is in fact a ZFS dataset.

On a side note, listing is indeed probably faster - for a single
dataset. If you need to iterate (i.e. delete old zfs-auto-snap's
in a tree) then zfs list is still easier to use for me. And the 
removal of snapshots is also AFAIK only doable by zfs destroy

locally on the storage box...


Er...nothing beats for i in `ls .zfs/snapshot/range`; do zfs delete $i 
; done


listing takes seconds. zfs list takes minutes. I have almost a dozen 
datasets each with over 1.5k snapshots.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] CIFS and openindiana

2013-07-11 Thread Christopher Chan

On Friday, July 12, 2013 03:48 AM, James Carlson wrote:

The sole purpose to me is to support a couple of ugly legacy Windoze
systems, and the less time I spend thinking about it, the better.

So if you don't really care about serving CIFS, it wouldn't really
matter to you that they'd come through Samba or anything else?

No, it wouldn't matter.  But lacking the nice ZFS inheritance feature
and being hard to set up would certainly make it less attractive an
answer.  The reason I tried CIFS, lo, many years ago was that it just
worked.  I didn't have to futz with a pile of text files for a feature
that -- even when it works -- is of extremely low importance *TO ME.*


ZFS acl inheritance is supported also by Samba?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] CIFS and openindiana

2013-07-11 Thread Christopher Chan

On Friday, July 12, 2013 11:29 AM, Geoff Nordli wrote:

On 13-07-11 07:25 PM, Jim Klimov wrote:

On 2013-07-12 02:43, Geoff Nordli wrote:
The FSRVP could initiate a snapshot from the windows machine.  Right 
now

the windows machine consumes snapshots via the previous versions from
snapshots initiated on the zfs side.



I see. Well, it is different from what I meant, and a standardized
protocol is good for interop and interface (sometime...) ;)

On a side note, you can always make ZFS snapshots via filesystem
interface mkdir $dataset/.zfs/snapshot/$snapname over both NFS
and CIFS (at least kCIFS) as well as locally, as long as your user
has proper ZFS delegated permissions. Removing is trickier, since
tools insist on only deleting empty directories, and somehow they
fail to delete contents of a read-only snapshot... bummer ;)



That is very cool Jim, I didn't know I could create a snapshot that way.



Time to rewrite the scripts. This makes it way easier to manage 
snapshots when you have over 2k snapshot per dataset. I've already 
resorted to referencing one dataset's snapshots with ls since zfs list 
takes forever. Thanks for letting us know about this. zfs just got even 
better.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-03 Thread Christopher Chan

On Thursday, July 04, 2013 02:59 AM, dormitionsk...@hotmail.com wrote:

On Jul 3, 2013, at 12:02 PM, Roel_D wrote:


Did the Cisco manager do a reboot of the router after you switched servers?
If the router had rather long ARP and DHCP caching then it wouldn't give your 
OI server new addresses after switching AND it would route all traffic still to 
the old MAC addresses.

Thus the network would seem broken, but only because of the old arp-cache and 
DHCP server cache.

If this would be the case then you are hunting for solutions in the complete 
opposite direction. You might have had a working config on day one...

Kind regards,

The out-side

Op 3 jul. 2013 om 17:10 heeft dormitionsk...@hotmail.com 
dormitionsk...@hotmail.com het volgende geschreven:

Well, I would be that Cisco manager -- and everything else here.  And you know what they say 
about us Jack of All Trades.  We're Masters of None.   []:-o  Oops...  It's sad, but 
true...


We may be masters of none but with some documentation we will eventually 
get the work done. :-D




I'm not feeling so great today, so I don't think I'm going to make it down to 
the remote location where all this equipment is.  My eleven year health odyssey 
is telling me I need to take a break from this.  But when I go down there next, 
I'll be sure to reboot it again before I try anything further.



More rest! Healthy food! Sufficient exercise! Why are these things so 
hard to get :-(


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Using OI and zfs from a windows machine

2013-07-03 Thread Christopher Chan

On Thursday, July 04, 2013 02:49 AM, Robbie Crash wrote:


Technically supported.  I personally wouldn't trust ... and your complaint
adds validation to my superstition.

I personally configure samba to not join any windows domain.  Just have
local user accounts inside the samba box.  Manage all the perms with
chown/chmod.  Keep it simple and well within the beaten path.


I always see this bandied about. Following the Oracle documentation on how
to join OI to a domain for the built in CIFS serving has worked for me,
flawlessly on 10 different OI installations.


Good for you. It partially worked for me. Access was only possible via 
\\ip.addr and not \\shortname. The latency using cifs was really good 
compared to samba but alas, access via \\ip.addr is not secured and 
therefore I ran into other problems and had to switch to samba.




Every time I hear about people with issues with it, they're always using
Samba. What benefit does using an additional module have over the built in
CIFS server? Is it just that people want to use smb.conf instead of
managing shares through zfs set sharesmb? The ACLs for ZFS shares give me
as granular permissions as I get on Windows, and there's no mucking about
with manual permissions changes on the OI side after they've been set
initially; changing the permissions from Windows works as it would on a
native Windows share.


Well, I hear, for one, conflicting information on SMB2 support. samba 
3.5 has some smb2 support while 3.6 does support smb2. samba does the 
full kerberos while built-in only does ntlm-v2. Not to mention other 
things that are possible with samba but which may or may not be things 
you want/need so I won't mention them.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-03 Thread Christopher Chan

Hi Peter,

On Thursday, July 04, 2013 10:40 AM, dormitionsk...@hotmail.com wrote:


Off list.

Yeah, we do tend to get things done, but not in a very pretty manner!  LOL

My spine is collapsing upon itself.  Next month will be eleven years of 
continuous nausea, and anywhere from moderate to absolutely excruciating 
abdominal pain.  And in the past five or six months, dizziness and / or vertigo.


Ouch. I only got a few slight bouts of herniated disk due to swinging a 
sledge hammer wrong many years but when your whole spine is affect and 
spinal fluid does not flow properly...I am sorry but I cannot even begin 
to imagine what you are going through. My wife has two disks almost 
reduced to nothing and I cannot even imagine her pain but yours sounds 
worse.




Don't ever use a jack-hammer.  That's what brought my spine crashing down, from 
just one day of use.


Oh. The big unit or the small hand held one? I've used a small one to 
remove tiles but nothing major.




No fun.


Yes, definitely no fun getting a chronic injury.



You sound like you're young though, and probably single -- so if that's the 
case, if you ever decide you'd like to be a monk, we'd love to have you.  Nice 
place in the mountains, clean air and water, good food... and we could sure use 
your computer skills.  No Windows machines, either!



Haha, thank you, but I am married. I am dedicated to יהוה or Jehovah in 
English and I look forward to the day when Isaiah 33:24 will be 
fulfilled and may you be able to see it too.


regards,

Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-03 Thread Christopher Chan

Whoops, yes, I thought it was addressed to Peter. Sorry.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-02 Thread Christopher Chan

On Tuesday, July 02, 2013 09:53 AM, dormitionsk...@hotmail.com wrote:

On Jul 1, 2013, at 6:21 PM, Christopher Chan wrote:


Wait, what do you mean by the gateway ip is the same as your nic address?


What I meant is that the Gateway on line three says 192.168.0.4, and that is 
also the IP address of the nic.




You have no understanding of how ip networking works. 192.168.0.4 is the 
'gateway' for the 192.168.0.0 network. The kernel needs to know which 
interface to use for contacting ip addresses on the 192.168.0.0 subnet.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-02 Thread Christopher Chan

On Wednesday, July 03, 2013 07:45 AM, dormitionsk...@hotmail.com wrote:
I have to call it a day. I appreciate all the help, everyone! I 
appreciate it very much! Thank you. Peter,


You are almost there Peter. There are now two things you can choose 
from. 1) Use a dns caching resolver (like Google's 8.8.8.8 if you don't 
mind giving more info) or 2) setup your own dns caching resolver. 
Whichever you choose, stick that ip in resolv.conf.


Finally, please make sure the nsswitch.conf has an entry for dns on the 
hosts line.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-02 Thread Christopher Chan

On Wednesday, July 03, 2013 08:56 AM, Christopher Chan wrote:

On Tuesday, July 02, 2013 09:53 AM, dormitionsk...@hotmail.com wrote:

On Jul 1, 2013, at 6:21 PM, Christopher Chan wrote:

Wait, what do you mean by the gateway ip is the same as your nic 
address?


What I meant is that the Gateway on line three says 192.168.0.4, and 
that is also the IP address of the nic.





You have no understanding of how ip networking works. 192.168.0.4 is 
the 'gateway' for the 192.168.0.0 network. The kernel needs to know 
which interface to use for contacting ip addresses on the 192.168.0.0 
subnet.



Peter,

My apologies for the curt reply.

regards,

Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana server networking problem.

2013-07-01 Thread Christopher Chan

Wait, what do you mean by the gateway ip is the same as your nic address?

If you cannot ping 8.8.8.8 then you have a routing problem. I don't know 
what kind of setup you have got but I'd usually assign Internet 
addresses directly to the server and not assign private addresses and 
then use network address translation.


We have a modem from the ISP that gives us 5 static IP Addresses.

The last person I spoke to at the ISP's support said she reconfigured the modem so 
it should route all the static IP's to the router.

The 'modem' you speak of sounds more like a router. 5 static ip 
addresses is the correct number of usable ip addresses in an 8 ip subnet 
where two are lost as the network and broadcast address and one will be 
used by the router.


You should ask your ISP for 1) the ip address of the router and 2) ask 
them to set things back to normal on that router - no dhcp, none of this 
weird NAT setup that you are using. You should be the one assigning the 
static Internet addresses to your servers and not playing roulette with 
dhcp.


On Tuesday, July 02, 2013 05:57 AM, dormitionsk...@hotmail.com wrote:

And by I can't see the internet, I cannot ping a known workable host, or 
browse the internet.

HTH
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-25 Thread Christopher Chan

On Wednesday, June 26, 2013 12:15 AM, James Relph wrote:

All the rest is good but that crle line - ugh.

Ignore that, I should have deleted it out.  I was using that while trying to 
sort out the LDFLAGS bit, but it's not necessary.

One thing in terms of the LDFLAGS line actually that you might know (I really 
don't compile stuff this complicated very often!) but I've currently got:

-L/root/samba-4.0.6/bin/shared/private -R/usr/local/samba/lib/private

In there.  The installation copies the contents of the bin/shared/private 
folder in the installation directory to /usr/local/samba/lib/private, so is 
that the correct method, or could I have put -L/usr/local/samba/lib/private 
-R/usr/local/samba/lib/private (ie. would the compiler have been aware that 
that's where those libraries were destined for)?




Okay, now I am tempted. You built samba4 on oi151a7 with gcc?

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-24 Thread Christopher Chan

On Monday, June 24, 2013 06:51 PM, James Relph wrote:

What do you get when you do wbinfo -a user or wbinfo -k user?

Plaintext and Kerberos authentication succeeds, but challenge-response doesn't 
for some reason.  Not sure if that's related?
Depends I guess. I have the same results but things work over here...but 
then I did build a patched version of samba and I don't just run vanilla 
samba like what csw built.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-24 Thread Christopher Chan

On Tuesday, June 25, 2013 08:21 AM, James Relph wrote:


Depends I guess. I have the same results but things work over 
here...but then I did build a patched version of samba and I don't 
just run vanilla samba like what csw built.




I tried the same approach myself but ran into a problem building samba 
as it was complaining about being unable to find ldap_initialize 
(despite openldap being installed).



LDAP_LIBS=-lldap-2.4 -llber-2.4

You may also need to add -I/usr/include/openldap to CFLAGS.
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sun Fire

2013-06-23 Thread Christopher Chan
Wow, just when I was looking for a new box to add too. I already have 
the older 36 drive 4U box but they have managed to double the capacity 
in 4U of space in less than five years and with 3.5 drives too?


Have you tried this Saso? Illumos runs on that board and with the 
onboard SAS controller? Man, I want to look at the insides and see how 
they managed to turn those bays into double disk bays.




On Saturday, June 22, 2013 06:39 PM, Saso Kiselkov wrote:

On 22/06/2013 10:24, Udo Grabowski (IMK) wrote:

I can only recommend the X4540, these are the best workhorses
I've ever seen, and it's a pity that there's no useful successor
for that price/capacity ratio that runs under OI/illumOS.

Yeah, they were too good value for money, so Oracle decided we can't
have 'em. As for successor, there may not any piece in the current
Sun/Oracle hardware lineup that does it, but there are boxes from other
vendors, particularly SuperMicro, that do a very good job of carrying
the torch forward from the X4540. See for instance:
http://www.supermicro.com/products/system/4u/6047/ssg-6047r-e1r72l.cfm
2 Xeon E5-2600 CPUs, up to 512 GB of DRAM, 72x 3.5'' SAS drives,
built-in LSI SAS 2308 controller, etc. Sure it's a bit more work to get
it going, but in the end you get a lot of bang for your buck.

Cheers,



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-23 Thread Christopher Chan

On Monday, June 24, 2013 07:24 AM, James Relph wrote:
Yep, if I setup other PAM bits I can login via (for instance) SSH, and 
netatalk worked pretty much straight away. I'll bring this up on the 
samba lists and see if anyone has any ideas. Samba4 is working pretty 
well, so that might be an option, there's just (ironically) an issue 
with netatalk on that side (but I think the guys at NetAFP are pretty 
confident that they can remedy that quickly). Thanks, James.


Hi James,

What do you get when you do wbinfo -a user or wbinfo -k user?

Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] running VirtualBox headless

2013-06-23 Thread Christopher Chan

On Monday, June 24, 2013 10:24 AM, Jan Owoc wrote:

Hi,

I'm running a home NAS using OI 151a7 server (vs. desktop). I was
thinking of running Ubuntu Server in a virtual machine on OI, ideally
configured to startup/shutdown when OI starts/shuts down. I can
connect a monitor to the machine, but it generally should run
headless.

I found there is a very helpful entry on the wiki [1] describing most
of the steps. Has anyone successfully installed VirtualBox on a
headless OI and have any other tips before I dive in?


I have. Even running two Windows guests on a headless box. They are 
accessible by rdp which is provided by vbox.


To do that I had to monkey with SMF. If you just have one Ubuntu guest, 
you should be fine with whatever VirtualBox provides. Too bad you won't 
be able to use the crossbow driver.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Can't print on Canon USB Printer MP 230 (but yes on MP160)

2013-06-15 Thread Christopher Chan

On Saturday, June 15, 2013 04:41 PM, axelle_apvri...@yahoo.fr wrote:

As for CUPS, I've had limited experience with it; I know that beside
standard (packaged with CUPS) drivers, there are also projects like
foomatic and Gutenprint which provide additional drivers, and CUPS
allows to use them. You might try to see if that helps. However,
the first few google hits discuss that there are no drivers specific
for MP230 as it is a very recent model...



http://support-asia.canon-asia.com/contents/ASIA/EN/0100465901.html

Not sure if it has binary bits but cups drivers are available.


Yes, but those are Linux drivers, not OpenIndiana.


I guess that means it has binary bits.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Can't print on Canon USB Printer MP 230 (but yes on MP160)

2013-06-14 Thread Christopher Chan

On Friday, June 14, 2013 08:20 PM, Jim Klimov wrote:


As for CUPS, I've had limited experience with it; I know that beside
standard (packaged with CUPS) drivers, there are also projects like
foomatic and Gutenprint which provide additional drivers, and CUPS
allows to use them. You might try to see if that helps. However,
the first few google hits discuss that there are no drivers specific
for MP230 as it is a very recent model...



http://support-asia.canon-asia.com/contents/ASIA/EN/0100465901.html

Not sure if it has binary bits but cups drivers are available.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Proposed Samba updates

2013-06-10 Thread Christopher Chan

On Monday, June 10, 2013 03:20 PM, Stefan Müller-Wilken wrote:

Hi Gordon,


In case anyone wonders, updating components in userland
(or any of its derivatives like oi-build or whatever) requires
more than just getting the updated code to build.  Someone
has to test it (assuming you want the distro to keep working).

Who is that someone? What does that mean in concrete? Are there well defined 
tests to pass? Who defines the tests? Is the process documented somewhere? 
Would be great to have transparency here...




I am my own guinea pig. I believe I am one who uses most features of 
samba. winbind to join AD, zfs acls with AD account through winbind. 
However, I have not done printing via winbind so I guess I won't be 
testing that part of the samba toolchain. Oh, I stick winbind on LDAP so 
ldap backend for winbind will be good in my case. I guess I won't be a 
candidate for winbind ad/rid backend.


Then there is the you need to run for a bit before you see other issues 
like the 'stuck' smbd processes. Those don't show up right away.


So Gordon, thanks for all the efforts you've put in on your free time 
and the pointers you have given. I can at least have a running box.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-09 Thread Christopher Chan

On Sunday, June 09, 2013 05:57 PM, ken mays wrote:

Stefan,

Samba 3.5.21 binary package is in the OI hipster repo. Samba 3.6.15 and patches 
are already in the OI-userland git for review.


3.5.x smbd is broken on OI. The later releases sorted out winbind but 
smbd processes still become 'stuck' and a long list of inactive smbd 
processes will build up. That is why I moved on to 3.6.x even though I 
was worried about winbind on 3.6.x. Everything has been working fine for 
me with the 3.6.13 build I am running.




Best to review that work beforehand, then see where things dropped off.

There was a request submitted for help in updating packages in the new hipster 
repo. I have worked on the Popular Packages page on the OI Wiki to help with 
the update effort.

Ken Mays

Sent from Yahoo! Mail on Android

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-09 Thread Christopher Chan

On Sunday, June 09, 2013 05:27 PM, Stefan Müller-Wilken wrote:

Hi all,


Kinda hard when I myself didn't exactly get a great experience on that score.
I've helped out with getting the samba package updated from that horrible
3.5.7/8 release to newer ones both with providing specs and running the builds
myself being my own guinea pig. The result? You still have 3.5.8 in oi151a7.
Okay this is OI.

Keeping the status of the project in mind, isn't this the most important 
subject to discuss? Why does community support not find it's way back into the 
project? Why is help wasted when frequent upgrades to packages are identified 
as crucial for the survival of OI?

If there's any hope for OI, then it is making support as easy as possible. 
Chris, did you ever get an explanation for your Samba upgrade not making it 
into the distribution?



The ticket is in a no longer worked on project called illumos-userland. 
So, no, I have no idea why. With the general breakdown with OI it 
probably won't be down to any particular person.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] hipster repo - WAS::::Re: [UNSUBSCRIBE]

2013-06-09 Thread Christopher Chan

On Monday, June 10, 2013 05:03 AM, Jerry Kemp wrote:

What is the hipsters repo?

Can someone share the information for that.

And is there any chance it has a working copy of VLC?



Or ffmpeg or avidemux.

Is there any distro that is gcc compiled and not sun cc compiled? It'd 
be probably easier to build such stuff on a gcc distro


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Proposed Samba updates

2013-06-09 Thread Christopher Chan

Hi Gordon,

On Monday, June 10, 2013 10:43 AM, Gordon Ross wrote:

On Sun, Jun 9, 2013 at 6:54 PM, Christopher Chan
christopher.c...@bradbury.edu.hk wrote:

Let me first build a 3.6.15 version then.


On Sunday, June 09, 2013 09:40 PM, Stefan Müller-Wilken wrote:

Chris,
the idea of my mail was not to start fingerpointing, but to constructively
work out, how things can be changed for the better. So, if you have a
working upgrade to 3.6.x, maybe Ken can help putting it into the repo?

Cheers
   Stefan


In case anyone wonders, updating components in userland
(or any of its derivatives like oi-build or whatever) requires
more than just getting the updated code to build.  Someone
has to test it (assuming you want the distro to keep working).

I fully admit I have not had much time to contribute to updating
Samba builds in OI, but I did make sure the updates I proposed
included only versions I knew had good test results.

If there is a problem with winbind or stuck smbd proceses
in specific versions, it would help to reference issue tracker
notes detailing the problem and exact versions affected.

https://www.illumos.org/issues/2172 has been updated. The stuck smbd 
processes I have had with all 3.5.x builds whether oi provided or my own 
builds of later releases. 3.5.7/8 have a winbind disaster waiting to 
happen with which I got hit twice. Once in 151a1 and in 151a7.


In any case, I am now running 3.6.13 and I have none of the issues I 
have with 3.5.x.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-08 Thread Christopher Chan
Kinda hard when I myself didn't exactly get a great experience on that score. 
I've helped out with getting the samba package updated from that horrible 
3.5.7/8 release to newer ones both with providing specs and running the builds 
myself being my own guinea pig. The result? You still have 3.5.8 in oi151a7. 
Okay this is OI.

Just how are we to help out with issues within illumos itself? I've had Bayard 
or Gordon look at an issue where kernel cifs was only working with \\ipaddr but 
not with \\shortname but due to my being the only reported case and the problem 
being difficult it got put aside as not worth it. I still the snoops for anyone 
who wants to have a crack at it...

I cannot afford to feed Martin. Nor do I have sparc boxes and I run OI. Just 
what do you propose that any of us can do? I am sorry if I have no solution to 
offer but short of a donation now and then for something I do not use, there is 
not much else and even that won't keep Martin here.

On 8 Jun, 2013, at 5:06 PM, Roel_D openindi...@out-side.nl wrote:

 Gents, the subject was that a highly qualified developer for our shared love 
 was leaving the party. 
 
 Please stop this thread and start saying what we/you can do to get this party 
 together again. 
 
 Kind regards, 
 
 The out-side
 
 Op 8 jun. 2013 om 02:03 heeft Dave McGuire mcgu...@neurotica.com het 
 volgende geschreven:
 
 On 06/07/2013 07:59 PM, Christopher Chan wrote:
  But it is of paramount importance to those running desktops!
  Remember that Linux became popular because it is reliable
  alternative to both Windows and MacOS as a desktop system.
 Excuse me? Linux on the desktop has been and still is a goal. Maybe with
 A goal? It is already there!
 Ubuntu is a passable desktop and I use it. But it does not quite fit in an
 office when compared with Windows or Mac OS X.
  Sure it does.  I see it all the time.  If you disagree, cite examples.
 
 Central domain management including assigning desktop profiles is not
 available. Nothing that works on the level of Powerpoint or Keynote.
 
 A.  Well you *may* have a point there; I don't work in environments
 that are that large.  But I have done large *datacenter* (not desktop)
 environments, and rdist works wonders for centralized administration in that
 environment.  Since everything is based on nice sane config files, that
 borders on the trivial.
 
 The first would have been possible with winbind and KDE 3.5 but that's no
 longer available.
 
 Nor has it made major in-roads in the home.
  It has here.  You need to get out more. ;)
 
 The whole of Hong Kong suffers from this.
 
 Time to move.
 
 Linux is popular because it was and is a cheap, reliable alternative to
 super expensive Unix and Windows
 Linux is not cheap: it's free! And yes it is reliable. And that should
 be the goal of Illumos etc.
 A.S.
 It is most assuredly not free. Unless you happen to have a really good 
 Linux
 jack of all trades admin and also a really good lot of users. Just because
 you do not have to purchase licenses does not mean it is free.
  That's a popular straw man, but it just doesn't bear out in real life.
 Linux boxes (or OS X for that matter) just do not require the degree of 
 user
 support that Windows boxes do.  They don't require the constant reloading,
 reformatting, de-virusing, etc etc.  Nobody that I've moved to Linux or OS 
 X
 has ever needed any support of any kind past about the second day of use.
 
 Well, I was forced to learn to do Windows administration because that's
 working env of my school.
 
 Wow, it's SERIOUSLY time to move.
 
 I have never had to do constant reloading,
 reformatting or de-virusing. So in my case, this is a strawman. A complete
 reinstall just takes a couple of hours too and I can mass reinstall if I 
 have
 to for that is what I do when I get a whole new batch of desktops.
 
 If you've figured out how to make Windows machines reliable, you'll have
 been the first, and I suspect Microsoft will hire you immediately.  THEN you
 could get out of Hong Kong! ;)
 
-Dave
 
 -- 
 Dave McGuire, AK4HZ
 New Kensington, PA
 
 ___
 OpenIndiana-discuss mailing list
 OpenIndiana-discuss@openindiana.org
 http://openindiana.org/mailman/listinfo/openindiana-discuss
 
 ___
 OpenIndiana-discuss mailing list
 OpenIndiana-discuss@openindiana.org
 http://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana, OpenSXCE and the rest...

2013-06-08 Thread Christopher Chan
Let me also state for the record that I never said OpenSXCE did not run on AMD 
platforms and that I am sorry if I don't have sparc and I run OI gave that 
impression.

I am simply running production OI boxes on AMD boxes (and yes x64 is from AMD) 
and not about to switch to any other distro. If I do manage to get another 
physical server then I will see what options I have then.

Sent from my school iPad

On 9 Jun, 2013, at 12:16 AM, Andreas Wacknitz a.wackn...@gmx.de wrote:

 Hi all,
 
 I have just subscribed to this list, but I was lurking it for some time now.
 First, let me state something on behalf of Martin:
 
OpenSXCE supports both, SPARC and x86!
 
 So, if you want to run a Solaris successor on older or newer SPARC's you 
 should have
 a look at it (personally I intend to install it on my Blade 2000 as soon as 
 if I got a replacement for my defective hard disk) because
 there is no free alternative (to my knowledge).
 
 Furthermore I see OpenSXCE (x86) as a valuable alternative to OpenIndiana. 
 For me the most obvious difference between them is
 the package management system used. I personally prefer the old style 
 packages just because I am more familiar with it
 and find the new pkg system too slow. OpenIndiana is on my hard disk at the 
 moment and will probably stay until OpenSXCE
 matured a little bit. I am watching both developments and hope that they will 
 mature over the time and grow communities!
 
 Alas both, OpenIndiana and OpenSXCE don't support the graphics card (Sun 
 NVS-280) in my Ultra 24. I have tried to
 install an old NVidia graphics driver on OpenIndiana but the installation 
 script fails removing the old NVDAgraphics package.
 I haven't invested that much time yet, maybe I will be able successfully 
 install that old package someday.
 
 Second,
 unlike stated by some people here I think that there might be some interest 
 in having a desktop OpenSolaris successor (be it OpenIndiana
 and/or OpenSXCE or something else).
 And IMO there is also some value for the commercial OpenSolaris successors: 
 The desktop might be the door opener for the server
 environment. At least in smaller businesses I've already experienced it. And 
 let me say here that I am a little bit surprised that there
 is still no USB 3 support in Illumos! Even servers will get these sooner or 
 later…
 
 Nevertheless, for me is OpenIndiana/OpenSXCE a secure complement to the 
 existing desktops. I personally use Windows and Mac OSX,
 but find the directions both are taking not so promising…
 
 
 Regards,
 Andreas
 ___
 OpenIndiana-discuss mailing list
 OpenIndiana-discuss@openindiana.org
 http://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-08 Thread Christopher Chan


Sent from my iPad

On 8 Jun, 2013, at 8:03 AM, Dave McGuire mcgu...@neurotica.com wrote:

 On 06/07/2013 07:59 PM, Christopher Chan wrote:
   But it is of paramount importance to those running desktops!
   Remember that Linux became popular because it is reliable
   alternative to both Windows and MacOS as a desktop system.
 Excuse me? Linux on the desktop has been and still is a goal. Maybe with
 A goal? It is already there!
 Ubuntu is a passable desktop and I use it. But it does not quite fit in an
 office when compared with Windows or Mac OS X.
   Sure it does.  I see it all the time.  If you disagree, cite examples.
 
 Central domain management including assigning desktop profiles is not
 available. Nothing that works on the level of Powerpoint or Keynote.
 
  A.  Well you *may* have a point there; I don't work in environments
 that are that large.  But I have done large *datacenter* (not desktop)
 environments, and rdist works wonders for centralized administration in that
 environment.  Since everything is based on nice sane config files, that
 borders on the trivial.

Yeah, me too. Scores of servers that can be reinstalled for upgrading in a 
couple of hours with kickstart with Fedora and fully automated at that (step 
aside Debian Debian-install does not have the ability to configure and setup 
striped mirrors) but hey I only need to handle a few system user accounts, not 
hard at all.

It is a far cry from doing hundreds on desktops with over 800 users and a dozen 
desktop profiles. KDE3.5 would have made it much less painful with kiosktool 
but that got dropped with no replacement and GNOME has no similar tool that I 
know of even now.

 
 The first would have been possible with winbind and KDE 3.5 but that's no
 longer available.
 
 Nor has it made major in-roads in the home.
   It has here.  You need to get out more. ;)
 
 The whole of Hong Kong suffers from this.
 
  Time to move.

As much as I personally hate Hong Kong's environment I was born here and 
therefore have no where else to go and besides there is no other place that is 
as relatively safe as Hong Kong. You walk around at midnight and not fear 
assault.


 
 Linux is popular because it was and is a cheap, reliable alternative to
 super expensive Unix and Windows
 Linux is not cheap: it's free! And yes it is reliable. And that should
 be the goal of Illumos etc.
 A.S.
 It is most assuredly not free. Unless you happen to have a really good 
 Linux
 jack of all trades admin and also a really good lot of users. Just because
 you do not have to purchase licenses does not mean it is free.
   That's a popular straw man, but it just doesn't bear out in real life.
 Linux boxes (or OS X for that matter) just do not require the degree of user
 support that Windows boxes do.  They don't require the constant reloading,
 reformatting, de-virusing, etc etc.  Nobody that I've moved to Linux or OS X
 has ever needed any support of any kind past about the second day of use.
 
 Well, I was forced to learn to do Windows administration because that's
 working env of my school.
 
  Wow, it's SERIOUSLY time to move.
 
 I have never had to do constant reloading,
 reformatting or de-virusing. So in my case, this is a strawman. A complete
 reinstall just takes a couple of hours too and I can mass reinstall if I have
 to for that is what I do when I get a whole new batch of desktops.
 
  If you've figured out how to make Windows machines reliable, you'll have
 been the first, and I suspect Microsoft will hire you immediately.  THEN you
 could get out of Hong Kong! ;)
 

Haha. Well, I don't have colleagues that go looking for smut on this primary 
school's computers. The reason that I have to do any reinstall aside from 
summer upgrades was Microsoft office problems so I really want to be able to 
got off that train not become a part of it.

 -Dave
 
 -- 
 Dave McGuire, AK4HZ
 New Kensington, PA
 
 ___
 OpenIndiana-discuss mailing list
 OpenIndiana-discuss@openindiana.org
 http://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-07 Thread Christopher Chan


If your purpose is to provide a distribution with an up to date 
illumos at its core and the
applications everybody expects on desk/lap-tops easily installable, 
then I consider your
work as a really important and I would be ready helping you to live of 
it.
But make it possible to easily install all available applications, 
whether provided by openindiana,
opencsw or yourself directly. One of the missing ones seems to be 
asterisk, by the way.



asterisk?

Now that things seem to be more in the direction of gcc, you'll get 
asterisk eventually. The main problem with getting asterisk on Solaris 
was that its code made a lot of use of gcc'isms that Sun Studio CC does 
not handle.


Do you need hardware support or just asterisk itself with sip support?

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-07 Thread Christopher Chan

On Saturday, June 08, 2013 02:54 AM, Apostolos Syropoulos wrote:

  But it is of paramount importance to those running desktops!
  Remember that Linux became popular because it is reliable
  alternative to both Windows and MacOS as a desktop system.

Excuse me? Linux on the desktop has been and still is a goal. Maybe with

A goal? It is already there!


Ubuntu is a passable desktop and I use it. But it does not quite fit in 
an office when compared with Windows or Mac OS X. Nor has it made major 
in-roads in the home.





Valve making Steam on Linux a reality this might take things a bit
closer in terms of home desktops but business desktops is still a pipe
dream.


What's a business desktop? In many countries companies have abandoned

windows for Linux desktops.




Good for them. I too was going roll out Ubuntu desktops but then 9.04 
happened and with it the ability to centrally manage desktop environments.



Linux is popular because it was and is a cheap, reliable alternative to
super expensive Unix and Windows

Linux is not cheap: it's free! And yes it is reliable. And that should
be the goal of Illumos etc.
A.S.



It is most assuredly not free. Unless you happen to have a really good 
Linux jack of all trades admin and also a really good lot of users. Just 
because you do not have to purchase licenses does not mean it is free.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] WD reds any good for ZFS RAIDZ pools?

2013-06-07 Thread Christopher Chan

On Saturday, June 08, 2013 05:23 AM, Paul B. Henson wrote:


For these large drives, raidz2 is recommended, as the likelihood of a 
second drive failure during a rebuild starts to get pretty high.




What's wrong with striped mirrors? raidz2 does not like random i/o. I 
happen to run raidz2 and regret it now.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [UNSUBSCRIBE]

2013-06-07 Thread Christopher Chan

On Saturday, June 08, 2013 07:40 AM, Dave McGuire wrote:

On 06/07/2013 07:36 PM, Christopher Chan wrote:

   But it is of paramount importance to those running desktops!
   Remember that Linux became popular because it is reliable
   alternative to both Windows and MacOS as a desktop system.

Excuse me? Linux on the desktop has been and still is a goal. Maybe with

A goal? It is already there!

Ubuntu is a passable desktop and I use it. But it does not quite fit in an
office when compared with Windows or Mac OS X.

   Sure it does.  I see it all the time.  If you disagree, cite examples.


Central domain management including assigning desktop profiles is not 
available. Nothing that works on the level of Powerpoint or Keynote.


The first would have been possible with winbind and KDE 3.5 but that's 
no longer available.



Nor has it made major in-roads in the home.

   It has here.  You need to get out more. ;)


The whole of Hong Kong suffers from this.




Linux is popular because it was and is a cheap, reliable alternative to
super expensive Unix and Windows

Linux is not cheap: it's free! And yes it is reliable. And that should
be the goal of Illumos etc.
A.S.

It is most assuredly not free. Unless you happen to have a really good Linux
jack of all trades admin and also a really good lot of users. Just because
you do not have to purchase licenses does not mean it is free.

   That's a popular straw man, but it just doesn't bear out in real life.
Linux boxes (or OS X for that matter) just do not require the degree of user
support that Windows boxes do.  They don't require the constant reloading,
reformatting, de-virusing, etc etc.  Nobody that I've moved to Linux or OS X
has ever needed any support of any kind past about the second day of use.




Well, I was forced to learn to do Windows administration because that's 
working env of my school. I have never had to do constant reloading, 
reformatting or de-virusing. So in my case, this is a strawman. A 
complete reinstall just takes a couple of hours too and I can mass 
reinstall if I have to for that is what I do when I get a whole new 
batch of desktops.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] ZFS read speed(iSCSI)

2013-06-05 Thread Christopher Chan

On Thursday, June 06, 2013 06:52 AM, Heinrich van Riel wrote:

Any pointers around iSCSI performance focused on read speed? Did not find
much.

I have 2 x rz2 of 10x 3TB NL-SAS each in the pool. The OI server has 4
interfaces configured to the switch in LACP, mtu=9000. The switch (jumbo
enabled) shows all interfaces are active in the port channel. How can I can
verify it on the OI side? dladm shows that it is active mode

The Hyper-v systems has 2 interfaces in LACP and all show as active and
windows indicate 2Gbps, never go over 54% util.

When I copy to an iSCSI disk from a local disk, it copies at around 200MB/s
and thats fine. When I copy from the iSCSI disk to the local disk I get no
more that 80-90MB/s and that is after messing around with the TCP/IP
setting on Windows. Before the changes it was 47MB/s max. (copy from the
local disk to the local disk I get 107MB/s so that is not the issue)
VMware 5.0 will not get more than that either.


I may be wrong but I don't think a single connection will be split over 
two interfaces in LACP to achieve higher throughput. If you have 
concurrent connections then perhaps you may see more throughput.




Even when I do a zfs send/recv is seems that reads are slower. I assume
this is the expected behavior.


zfs has to seek all over the place to find the snapshots which slows 
things down.



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenSXCE: To live or to die

2013-06-04 Thread Christopher Chan
Yes, I think he has been banned or something. He twittered to that 
effect if you check. The details for donating should be on the iso or 
something.


On Wednesday, June 05, 2013 05:55 AM, Jonathan Adams wrote:

I get the impression, from another thread, that he might not be getting
messages from these lists, or be able to reply to them directly.


On 4 June 2013 17:57, Roel_D openindi...@out-side.nl wrote:


Martin, were are the payment details?

Bank-account, paypal or else?

Kind regards,

The out-side

Op 3 jun. 2013 om 23:26 heeft Martin Bochnig mar...@martux.org het
volgende geschreven:


   1. *Martin Bochnig* @*MartinBochnig* 

https://twitter.com/MartinBochnig

   2h https://twitter.com/MartinBochnig/status/341657908557271040

   FREETARDS
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341657908557271040
2.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341657870779170816

   This is ALL I got since January when the 550 $ came from individual
   private donors, summed together. And that all is ever EVER got s. 2009
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341657870779170816
3.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341657081092395010

   Although I even integrated a donation link: On May 8th 5EUR and 50$ and
   65$ Yesterday 30EUR. And some kind soul sent me another 50EUR in May
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341657081092395010
4.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341655528495267840

   Let them eat cake!!!
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341655528495267840
5.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341655384353812480

   Olga is 1500 kilometers away and I have no money to visit her, not to
   speak live with her. Cake! How does that taste??
  * Collapse *
   https://twitter.com/MartinBochnig/status/341655384353812480
  -  *Reply* https://twitter.com/martinbochnig#
  -  *Retweet* https://twitter.com/martinbochnig#
  -  *Favorite* https://twitter.com/martinbochnig#
  -

   1:39 PM - 3 Jun 13 ·
Detailshttps://twitter.com/MartinBochnig/status/341655384353812480
 6.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341655292628586496

   Some cake pls., only have dry old bread w/o anything here. I needed to
   switch off my fridge to save electricity. No joke.
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341655292628586496
7.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341655187796148225

   Folks pay for every SHIT. Even if they go to the Restaurant toilet. Why
   not for somebody like me who has donated much of his LIFE 
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341655187796148225
8.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341655102173626368

   BECAUSE SORRY BUT I ALSO NEED TO EAT
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341655102173626368
9.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341655013409574915

   I did enough in advance. Now its their turn. If they refuse, then
   OpenSXCE may stay binary only and fill the SPARC niche in a

commercially.

  *  Expand  *
   https://twitter.com/MartinBochnig/status/341655013409574915
10.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341654750053400576

   If Illumos likes us, they should be willing to do at least SOMEthing.
  *  Expand  *
   https://twitter.com/MartinBochnig/status/341654750053400576
11.   [image: Martin Bochnig] *Martin Bochnig* @*MartinBochnig*
   https://twitter.com/MartinBochnig
2hhttps://twitter.com/MartinBochnig/status/341654715823685632

   How to build stuff or packages? As long as no sponsor helps us, maybe I
   never release ANY src.
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



Re: [OpenIndiana-discuss] samba with zfs acls and shadow copies

2013-05-28 Thread Christopher Chan

On Wednesday, May 29, 2013 01:09 AM, Martin Walter wrote:

On Mon, May 27, 2013 at 02:43:41PM +0100, Bayard G. Bell wrote:

Was filed as an illumos site issue, where it stayed for much of that
time. Generally speaking, just filing bugs and not asking for guidance
on what debug would be useful or providing a minimum reproducible
problem will tend to generate an issue that can't be progressed.

I asked for hints. And the problem was reproducable. But I am not an
oi-expert and nobody told me to do these or those tests. So I switched
to samba. Now the server is in production and I can not use it for tests.
But apparently other people have no such problem with sun-cifs.
Or they use all samba? ;-)


samba here. I got a problem that was apparently unique to me and 
something similar to the below:


https://www.illumos.org/issues/1087

Except that in my case my problem was that access was only possible via 
\\ipaddr and would not work with \\shortname left alone \\fqdn. Things 
were fast and all but Windows security hates \\ipaddr and in the end I 
had to switch back to samba.


I did get attention from someone who took a look at snoops he asked me 
to get but in the end it could not be pinned down and I was the only 
case. I've forgotten who as this was in Dec 2011/Jan 2012 but it was 
likely Bayard or Gordon.


The next one is about samba itself. I've helped out with building and 
testing newer versions of samba with Gordon Ross when I had major issues 
with 3.5.4 and 3.5.7 but in the end we still have the same faulty 
versions in oi151a7 and I have since just overwritten the samba bits 
with my own 3.6.13 build.


https://www.illumos.org/issues/2172

samba works and it works with kerberos. sun-cifs does not.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] samba with zfs acls and shadow copies

2013-05-22 Thread Christopher Chan

On Thursday, May 23, 2013 01:33 AM, alka wrote:

Why not using Solaris CIFS server?

It has a much better Windows integration than SAMBA
(Windows SID instead of Unix UID, Windows like ACL, previous version, AD 
support,
shares are manageable via Windows computer management).
It is also mostly faster and easier to handle.
I'll give you these when it actually works. You can Windows like ACL and 
AD support with samba too. These are not exclusive to CIFS server.




Only problems I am aware:
- you cannot share regular folders (ZFS filesystems only)
- you cannot use the same credidentials for other services like netatalk 
(supports uid/sid only)
- some special settings like veto are missing
- SMB3 support only in SAMBA (I do not care about)

SAMBA lacks these features even in Linux, why do you expect them in OI ?
What do you mean samba lacks these features even in Linux? You can use 
the same credentials for other services like netatalk, radius, squid and 
more with winbind and you definitely can share any directory you wish.




But current packages is a must have.

I really hope, that the reboot OI effort has success.
I moved nearly completely to OmniOS but miss the desktop environment
- even a server needs usability -
I am sorry but I fail to see how a desktop environment helps on a 
server. I have never run a desktop on any server whether Linux or 
OpenSolaris/OpenIndiana.




There is a reason why many people use Apple or Windows server.
It is not a technical item but usability.
Well it is funny that 1) Apple has decidedly exited the server market 
both with dropping Xserve and the switch to OS X Server app and 2) 
Windows now has a command line only option.





Am 22.05.2013 um 17:50 schrieb Martin Walter:


Hi,

please include a new samba version (e.g. 3.6.15) into oi151a8.
Best with support for zfs acls and shadow copies.
We need it urgently for our fileservers.

Thanks and best regards,
Martin

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

--


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sonicle XStreamOS repo and XStream Desktop in progress

2013-05-19 Thread Christopher Chan

On Sunday, May 19, 2013 06:19 PM, Sriram Narayanan wrote:

There are devs working on it as per recent mails.



Hi Sriram,

How goes Belenix?

cheers,

Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Ubuntu 13.04 cifs error

2013-05-14 Thread Christopher Chan
Sounds like samba package on Ubuntu has now gone with setting minimum 
auth level to ntlmv2 or kerberos.


IIRC, cifs/server supports ntlmv2 so maybe the latter.

On Wednesday, May 15, 2013 04:14 AM, Lucas Van Tol wrote:

One of my users had to change mount options after updating his Linux system 
recently.
I think he mainly added '-o sec=ntlm'.
This is for an AD connected system running the built-in cifs service, it may 
behave differently on other systems?

-Lucas Van Tol


From: dormitionsk...@hotmail.com
Date: Tue, 14 May 2013 14:03:56 -0600
To: openindiana-discuss@openindiana.org
Subject: Re: [OpenIndiana-discuss] Ubuntu 13.04 cifs error

On May 14, 2013, at 1:02 PM, Michelle Knight wrote:


Hi Folks,

I updated my Ubuntu client to 13.04 and trying to map a CiFS share from
my OI server, I get an IO error, no matter what I do.

I asked on the Ubuntu forum and got this back...

---
It's unfortunate that the error is reported as an I/O error. It's not
really. it's a mount error. See the part in red Code:

mount error(5): Input/output error
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

This may be do to incompatibility in the Solaris version of CIFS. They
roll their own (It's not Samba at all). Try a more basic mount command.
---

Can anyone offer any insight in to the issue please?

Many thanks,

Michelle.


Unless there is a reason why you are using Solaris' built in CIFS sharing, 
perhaps you might want to try the old traditional Samba on your OI box.

Here's a little quick-start:

http://wiki.openindiana.org/oi/Samba

HTH



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


[OpenIndiana-discuss] *****SPAM***** Re: Anyone using OpenIndiana in production?

2013-03-26 Thread Christopher Chan
Spam detection software, running on the system portal.local, has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
christopher.c...@bradbury.edu.hk for details.

Content preview:  Hi Gerry, I use OI as a samba file server. Data wise, I have
   had zero issues with OI. File serving wise, I have had my share of fist 
shaking.
   Currently samba is kind of unmaintained. The repository has an old and 
problematic
   version of samba (3.5.7) although I have been involved in reporting issues
   with that version and also testing patches for the build tree for newer 
versions.
   In the end, I have had to 'roll my own' by installing from source over the
   package binaries. The package system does not give you the flexibility of
   rolling your own packages unless you start your own consolidation or pretty
   much fork your own. [...] 

Content analysis details:   (7.6 points, 5.0 required)

 pts rule name  description
 -- --
 0.7 SPF_SOFTFAIL   SPF: sender does not match SPF record (softfail)
 0.1 RDNS_NONE  Delivered to trusted network by a host with no rDNS
 6.8 AWLAWL: From: address is in the auto white-list


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [SPAM?] Re: [SPAM?] Re: [SPAM?] Re: using LSI 2308-IT onboard supermicro X9DRD-7LN4F-JBOD, openindiana not loading drivers? (OpenIndiana-discuss Digest, Vol 29, Issue 43)

2013-03-07 Thread Christopher Chan

On Tuesday, March 05, 2013 03:02 PM, Christopher Chan wrote:

On Tuesday, March 05, 2013 12:56 PM, Geoff Nordli wrote:


Yes, it has been running for about a year now without a problem. They 
probably only have 3-4 active calls, but still if there were any 
issues with the network, even one call would trigger complaints.


I would try the 82545EM driver on Windows to see how that works.



Ah, I guess I will have to try that yes.



Nope, swapping over to 82545RM still leads to the same problem of random 
invisibility where pinging either way just won't work for a while. Any 
pointers on what to gather for the vbox folks to look at?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [SPAM?] Re: using LSI 2308-IT onboard supermicro X9DRD-7LN4F-JBOD, openindiana not loading drivers? (OpenIndiana-discuss Digest, Vol 29, Issue 43)

2013-03-04 Thread Christopher Chan

On Tuesday, March 05, 2013 01:22 AM, Geoff Nordli wrote:

On 13-03-03 04:43 PM, Christopher Chan wrote:
If Vbox did try to install the crossbow driver, he should have 
noticed it fail to load as there are three kernel calls that that 
driver expects to find but will be unable to find.


In any case, the vbox streams driver is problematic and cuts off the 
network from time to time. That's why I tried to force the 
installation of the crossbow driver only to find out that they are 
depending on three new vnic_{create|delete|modify} calls that illumos 
does not have.


I have a few all-in-one OI+VBox servers running and I am not seeing 
network issues.  One is running oi_151a3+Vbox 4.1.22.


What makes you believe there are problems with the streams driver?


The fact that you ping a host from any other host without problems but 
the guest for some reason at that moment just cannot. Then later on, it 
is able while all others have been able for the entire time. I have two 
Windows guests with bridged adapters. If did seem that this only started 
when the second guest was added.




I did get some weirdness with the virtio driver and linux guests. I 
have standardized on the 82545EM card for linux guests.


Is the weirdness the same as the above? Because, that is what I use, the 
virtio driver for the guests.




It would be really nice to be able to use the crossbow driver. 
Managing the process of creating a vnic and then having to match the 
mac address is kind of a pain.




It is just three new kernel functions in a vnic_mgmt.h header IIRC. I 
have been trying to find out how dladm creates vnics to find out what 
the internal calls are but I have not hit anything with a cursory search 
and I have not had time to do a more thorough search.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [SPAM?] Re: [SPAM?] Re: using LSI 2308-IT onboard supermicro X9DRD-7LN4F-JBOD, openindiana not loading drivers? (OpenIndiana-discuss Digest, Vol 29, Issue 43)

2013-03-04 Thread Christopher Chan

On Tuesday, March 05, 2013 09:21 AM, Geoff Nordli wrote:

On 13-03-04 03:01 PM, Christopher Chan wrote:

On Tuesday, March 05, 2013 01:22 AM, Geoff Nordli wrote:

On 13-03-03 04:43 PM, Christopher Chan wrote:
If Vbox did try to install the crossbow driver, he should have 
noticed it fail to load as there are three kernel calls that that 
driver expects to find but will be unable to find.


In any case, the vbox streams driver is problematic and cuts off 
the network from time to time. That's why I tried to force the 
installation of the crossbow driver only to find out that they are 
depending on three new vnic_{create|delete|modify} calls that 
illumos does not have.


I have a few all-in-one OI+VBox servers running and I am not seeing 
network issues.  One is running oi_151a3+Vbox 4.1.22.


What makes you believe there are problems with the streams driver?


The fact that you ping a host from any other host without problems 
but the guest for some reason at that moment just cannot. Then later 
on, it is able while all others have been able for the entire time. I 
have two Windows guests with bridged adapters. If did seem that this 
only started when the second guest was added.


Did you create a vnic for each guest, and assign the same mac address 
on the vbox Ethernet adapter that is on the vnic?

Oh yes.
oliverbrad0  inetaggr01000   8:0:27:e2:8f:6a fixed   11
r2brad0  bradaggr01000   8:0:27:92:e8:15 fixed   11

Adapter slot=0 enabled=true MACAddress=080027E28F6A cable=true 
speed=0 type=virtio
Adapter slot=0 enabled=true MACAddress=08002792E815 cable=true 
speed=0 type=virtio








I did get some weirdness with the virtio driver and linux guests. I 
have standardized on the 82545EM card for linux guests.


Is the weirdness the same as the above? Because, that is what I use, 
the virtio driver for the guests.


No, it wasn't intermittent on/off.   From what I remember I would need 
to do a restart of the VM to recover.  Though that may have been fixed 
now, but I just go with what works.


another note, one of the VMs is a PBX running Asterisk, which would be 
very sensitive to networking issues.


Well, my guests are all windows...and I am feeling it because one of 
them is the AD controller.


The streams driver performs well enough for you for Asterisk and other 
stuff?






It would be really nice to be able to use the crossbow driver. 
Managing the process of creating a vnic and then having to match the 
mac address is kind of a pain.




It is just three new kernel functions in a vnic_mgmt.h header IIRC. I 
have been trying to find out how dladm creates vnics to find out what 
the internal calls are but I have not hit anything with a cursory 
search and I have not had time to do a more thorough search.



If you find the time,that would be awesome!!



Yeah, time to get a build box.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] [SPAM?] Re: [SPAM?] Re: [SPAM?] Re: using LSI 2308-IT onboard supermicro X9DRD-7LN4F-JBOD, openindiana not loading drivers? (OpenIndiana-discuss Digest, Vol 29, Issue 43)

2013-03-04 Thread Christopher Chan

On Tuesday, March 05, 2013 12:56 PM, Geoff Nordli wrote:


Yes, it has been running for about a year now without a problem. They 
probably only have 3-4 active calls, but still if there were any 
issues with the network, even one call would trigger complaints.


I would try the 82545EM driver on Windows to see how that works.



Ah, I guess I will have to try that yes.

Thanks,

Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] using LSI 2308-IT onboard supermicro X9DRD-7LN4F-JBOD, openindiana not loading drivers? (OpenIndiana-discuss Digest, Vol 29, Issue 43)

2013-03-03 Thread Christopher Chan
If Vbox did try to install the crossbow driver, he should have noticed 
it fail to load as there are three kernel calls that that driver expects 
to find but will be unable to find.


In any case, the vbox streams driver is problematic and cuts off the 
network from time to time. That's why I tried to force the installation 
of the crossbow driver only to find out that they are depending on three 
new vnic_{create|delete|modify} calls that illumos does not have.


On Saturday, March 02, 2013 04:39 AM, Jim Klimov wrote:

On 2013-03-01 20:00, Heinrich van Riel wrote:

I tried both 4.2.6  4.2.8, I did not create the file in /etc.
So that would explain that problem.


Not necessarily (if Christopher is right, and I don't remember needing
it either), but worth a try if you ever return to this idea (the notice
didn't appear in the Wiki out of the blue, right? ;) )

Just in case, you'd know to try this installation at a moment when a
downtime is acceptable, perhaps having shut down or frozen critical
services like a database (to avoid dirty shutdowns and long repairs),
and making a backup BE. Since you do expect a problem, better be ready ;)

Good luck,
//Jim


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Problem with SMB Server:

2013-02-21 Thread Christopher Chan

On Thursday, February 21, 2013 10:32 PM, Armin Maier wrote:
Hello, i set up a openindiana 151a7 server with zfs and Active 
Directory authentication. I can share zfs filesystems to windows 
server and set permissions to Active Directory users, no problem. The 
only issue is i can only access the server over the short name 
\\server\share, using the FQDN Name \\server.domain.de\share 
Windows gives the following error:

(I am using the svc:/network/smb/server service not samba!!)

\\server.domain.de is not accessible. You might not have permission to 
use this network
resource. Contact the administrator of this server to find out if you 
have access permissions.

Teh account is not authorized to log in from this station.

I found the following the following entry on illumos.org:
https://www.illumos.org/issues/1087

Is there a workarround for this issue or does someone know when it 
should be fixed?


Do you need it to work over \\fqdn?

At least you can access it over \\shortname.

When I switched from samba to cifs over a year ago, I could only get 
\\ip working for some reason. It was extremely painful to have to swap 
from samba to cifs because a buggy samba was packaged and no updates 
forthcoming only to see wonderful instantaneous response but only over 
unsecured \\ip which led to a host of other problems.


On the matter of samba, one needs to run 3.6.9 if one still has Windows 
2000 Servers around or 3.6.12 if everything is at least Windows 2003 
Server versions. 3.5.x has issues with threading or something as no 
matter what version I tried whether 3.5.14 or 3.5.21, it would build a 
huge number of threads/child processes that were 'owned' by init.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Any document for Samba and LDAP integration

2013-01-23 Thread Christopher Chan

On Wednesday, January 23, 2013 04:41 PM, Jim Klimov wrote:

On 2013-01-23 06:41, Christopher Chan wrote:

On Wednesday, January 23, 2013 10:39 AM, Robbie Crash wrote:

How full featured of a DC are we talking about in terms of Microsoft AD
compatibility?



Nil unless someone builds a samba4 package.


I believe, older Samba's support a limited DC of older (contemporary)
Windows - namely, keeping track of computer, user and group accounts.
Probably, if coupled with an LDAP/DBMS backend common to a DHCP service,
this can be a full-enough solution for many shops.
Which is not AD and therefore the answer is still nil. Older samba 
supports NT domains but that, as you know, is not AD.




Samba4, AFAIK, as a main feature, adds support for storage of group
policies which are important for centralized domain management, and
thus can replace Win2003/2008 domains. And probably adds support for
newer protocols, encryption methods, etc. as applicable.


samba4 can be a complete replacement for a Windows AD DC. That's more 
than just supporting group policies, it is tying directory services, 
kerberos and dns management all together in a manner that Windows 
clients and servers expect.




Also, old and new Samba can be a DC backing up the native MS AD DC,
which may be a step in migration strategy also.


Wrong. Please make sure you know what you are talking about before you 
make assertions. Only samba4 can be a replication partner to a native MS 
AD DC. samba3 has no such ability but samba3 daemons will be necessary 
to provide SMB2/CIFS and printing services but none of the AD functions.




But I disclaim that I know of this from aside, thought of implementing
this stuff in a LAN but never got around to it so far.


Well, I have a production samba3 file server tied into a Windows AD so 
perhaps I am in a better position than you to say what can or cannot be 
done with old/new samba versions.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] AMCC/3Ware 9550SX-8LP

2013-01-23 Thread Christopher Chan
On Thursday, January 24, 2013 07:59 AM, Edward Ned Harvey (openindiana) 
wrote:

From: Bentley, Dain [mailto:dbent...@nas.edu]

I have perused the lists and saw this might be support with OpenSolaris.  It's
not listed on the HCL on the Openindiana wiki but like I said, some
OpenSolaris threads talk about this controller being supported:
http://osdir.com/ml/os.solaris.opensolaris.help/2006-07/msg00022.html

Has anyone used these controllers and had any luck or no luck as it were?

Well, I have 2 systems with 9650SE cards in them ...  Not the same as yours, but pretty 
close...  I spent a rather long time figuring out how to make it work, because 3Ware was 
originally planning to support it on opensolaris, but they basically tanked it.  They 
wrote the driver, but never got the installer quite working before pulling the plug.  I 
found a forum somewhere, where some guy posted, I'm one of the developers on that 
driver, and blah blah, we never got it working, but you can use it if you're willing to 
manually do the following...  And those instructions worked.




3ware did? I thought the tw driver only came out after it got bought by LSI?

Until then, Areca was the only game in town but who uses hardware raid 
anymore now that we have ZFS?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Any document for Samba and LDAP integration

2013-01-22 Thread Christopher Chan

On Wednesday, January 23, 2013 10:39 AM, Robbie Crash wrote:

How full featured of a DC are we talking about in terms of Microsoft AD
compatibility?



Nil unless someone builds a samba4 package.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Linux software-raid with two Comstar iSCSI volumes

2012-11-16 Thread Christopher Chan

On Friday, November 16, 2012 07:05 PM, Florian wrote:

Hi,

I don't know where is your problem? You don't know our network 
infrastructure.
It is not so easy to have two redundant switches, no it is even not 
possible.


It would be nice, if we can have two redundant switches, but this was 
not my question!


Sorry, if my first answer was rude to you, but understand me. You made 
the first answer to my question and it did not help!! Your answer had 
nothing to do with my question!


Okay, I get it, you don't care about potential problems, no problem.

I hope you have a good switch that can do wire speed and not 30-40 MiB 
only (D-Link any one?) and some can only do the whole 1gb when jumbo 
frames is enabled.


You just have to try it out yourself and run some speed tests because we 
can theorize until the cows come home but only a real practical test 
will give you the answer. Like you said, we don't know your network 
infrastucture, we don't know your OI server disk setup and we don't know 
what hardware you have.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Linux software-raid with two Comstar iSCSI volumes

2012-11-15 Thread Christopher Chan

On Thursday, November 15, 2012 08:23 PM, Florian wrote:

Am 15.11.2012 13:15, schrieb Jorge Palma:

raid1 at the OS level, but SPOF on network level.


This is no Problem, I change a switch in 5 minutes, but the Server 
takes much longer.

This was not my question! Thanks for the not helping help!!!


Wow, you can change a switch in 5 mins? Nice that you have them 
replacement switches preconfigured and ready to roll. But it would good 
if you did some testing and pull the cable on the network switch out and 
see what happens to your md device. Nevermind the having a switch ready 
to replace in 5 minutes but for some reason not used.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Linux software-raid with two Comstar iSCSI volumes

2012-11-15 Thread Christopher Chan

On Friday, November 16, 2012 11:36 AM, Alex Smith (K4RNT) wrote:

If the targets are mirrored via ZFS and COMSTAR, why would the Linux host
require RAID? If it's using iSCSI anyway, wouldn't the Linux volume
management just needlessly redundantize the data, that ZFS is mirroring
already?

Or do I not understand your problem, or how ZFS works?

My apologies if I'm talking out of my *EEE-HAW* ! ;)


OP seems to have taken significant steps to not have SPOF (two OI 
servers serving up targets) and so friendly chap points out what would 
be an omission to not having an SPOF but gets a retort for pointing out 
what seems to be a significant omission if the premise to remove all 
SPOF is true.


I don't really know what the case is but I just thought that friendly 
chap deserved more than a rude retort.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Gnome and the future

2012-10-31 Thread Christopher Chan

webmin?

Ick. Swapping a desktop gui for a web gui...still get a gui.

So just offshore the gui problem eh?

On Thursday, November 01, 2012 06:55 AM, Roel_D wrote:

A GUI is only needed when you want to use the gui

I see more benefit in better webmin-support for zfs, mysql and other 
serversoftware.

Kind regards,

The out-side




___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Gnome and the future

2012-10-31 Thread Christopher Chan



On Thursday, November 01, 2012 03:01 AM, Ben Taylor wrote:

On Wed, Oct 31, 2012 at 11:25 AM, openbabelopenba...@gmail.com  wrote:

I am of a commercial view. I am interested in the most popular desktop and
most developed environment which is accepted by the current or potential
user base.It would not be the correct choice
going with a project which either peters out or is not accepted by
commercial users as this would waste development time and resource too?

As an Enterprise system the commercial view should prevail?

My suggestion, as someone who spent an inordinate amount of time porting KDE 4.x
to Solaris 10, go with something simple and easy.

Once there's a working DE, folks can then choose to work/port other
more complex DE's.




What has the least dependencies? XFCE? KDE 3.5? Or forget DE and just 
get a window manager like WindowMaker?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] RAID Controler.

2012-10-16 Thread Christopher Chan

On Saturday, October 13, 2012 09:10 PM, Jim Klimov wrote:

2012-10-13 11:27, Roel_D wrote:

Yes! That is the card i own too.
I have tried to install it with solaris 10 but no driver existed. 
Maybe today for OI


There is a driver tw provided by the vendor.
A couple of months ago Edward Ned harvey posted a procedure
to add his driver (3ware 9650SE) during LiveCD installation:

Result:
http://permalink.gmane.org/gmane.os.openindiana.general/9047

Thread:
http://comments.gmane.org/gmane.os.openindiana.general/9043


No way, 3ware has Solaris drivers now?

There goes Areca, so long.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Automatic reboots

2012-10-16 Thread Christopher Chan
Er...SATA was designed to be hot swappable from the start? There is no 
such thing as a non-hot swappable SATA hd. If you meant you can have 4 
sata hard disks that are inconvenient to hot swap, then that is fine. 
You can however get four disk bay cages that facilitate hot swapping by 
allowing you to just pull the disk out from the front while taking 3 5 
1/4 bays in the case.


On Sunday, October 14, 2012 09:16 PM, Roel_D wrote:

As far as my knowledge goes, you can have 4 non-hotswapable sata HD's and there 
is an expansionoption for 2 more.


Kind regards,

The out-side

Op 14 okt. 2012 om 13:26 heeft Jim Klimov jimkli...@cos.ru het volgende 
geschreven:


2012-10-14 14:11, Michelle Knight wrote:

On Sun, 14 Oct 2012 11:18:52 +0200 Roel_D openindi...@out-side.nl wrote:


HP N40L
Runs every OI version out of the box.
Although it has a ventilator



On the tech sheet it is one data port short and max internal storage is
4 x 2tb drives.


Most people on the list have tweaked theirs, either by flashing
another BIOS which allows generic uses for ODD SATA port, or
adding an LSI controller with internal and/or external ports
and IT firmware, often not using mobo ports at all. Some tweaks
replace the CD bay with a 4x2.5 or even a 6*2.5(7.5mm) tray
and use the smaller disks for rpools and caches.

It also has ECC RAM which is a very good thing (esp. with ZFS),
though seems limited to its 8Gb.

I hope other list members who have actual practice with these
can elaborate more; I don't think HDD size is really limited
(especially if you use another HBA).

HTH,
//Jim

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] KVM and Xen support in OpenIndiana

2012-10-16 Thread Christopher Chan

On Monday, October 15, 2012 10:10 PM, Bob Friesenhahn wrote:

On Mon, 15 Oct 2012, Jonathan Adams wrote:


We have Linux and Windows 2008 R2 servers running at different sites
in KVM machines and it works a treat (if you have all the passthrough
stuff on Intel chips turned on)


Is OpenIndiana's KVM usable for running a desktop OS like Windows 7 
with use of the Windows GUI console (keyboard, mouse, video)? From a 
desktop usability standpoint, how would it compare with VirtualBox?
3D support from guest additions on Vbox. Not sure that the vmgl stuff 
will work on OI for KVM.


From my experience VirtualBox provides and excellent guest desktop 
experience (even works great for Netflix video streaming with Windows 
7 guest) but that CPU and filesystem performance may suffer.


Try using iscsi for virtualbox disks. That should make filesystem 
performance sing.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Automatic reboots

2012-10-16 Thread Christopher Chan
Well, the existence of eSata should have been sufficient to point to 
sata's builtin hot swap capabilities but ah well.


On Tuesday, October 16, 2012 10:44 PM, Alex Smith (K4RNT) wrote:

He may not be aware of the hot-swap capabilities, he may be going by
the fact that they aren't in a backplane type cage, but even on their
own, SATA and SAS is designed to be hot-swappable.

On Tue, Oct 16, 2012 at 10:40 AM, Christopher Chan
christopher.c...@bradbury.edu.hk wrote:

Er...SATA was designed to be hot swappable from the start? There is no such
thing as a non-hot swappable SATA hd. If you meant you can have 4 sata hard
disks that are inconvenient to hot swap, then that is fine. You can however
get four disk bay cages that facilitate hot swapping by allowing you to just
pull the disk out from the front while taking 3 5 1/4 bays in the case.






___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Automatic reboots

2012-10-16 Thread Christopher Chan

On Wednesday, October 17, 2012 03:32 AM, Andrej Javoršek wrote:

Hello!
Also my impression was that not all SATA controllers suport/tolerate hot
swap and simply puling disk out can damage disk and/or controller!?


Maybe first generation fake SataI 1.5gbps speed controllers or lack of 
driver support.


It certainly was present for sil3124



Regards
Andrej

On Tue, Oct 16, 2012 at 9:26 PM, Roel_D openindi...@out-side.nl wrote:


Hmz, i was just typing what is written on the harddiskcages:
non-hotswappable

But to be onnest, i didn't know every SATA disk was hotswappable.

Kind regards,

The out-side

Op 16 okt. 2012 om 16:50 heeft Christopher Chan 
christopher.c...@bradbury.edu.hk het volgende geschreven:


Well, the existence of eSata should have been sufficient to point to

sata's builtin hot swap capabilities but ah well.

On Tuesday, October 16, 2012 10:44 PM, Alex Smith (K4RNT) wrote:

He may not be aware of the hot-swap capabilities, he may be going by
the fact that they aren't in a backplane type cage, but even on their
own, SATA and SAS is designed to be hot-swappable.

On Tue, Oct 16, 2012 at 10:40 AM, Christopher Chan
christopher.c...@bradbury.edu.hk wrote:

Er...SATA was designed to be hot swappable from the start? There is no

such

thing as a non-hot swappable SATA hd. If you meant you can have 4 sata

hard

disks that are inconvenient to hot swap, then that is fine. You can

however

get four disk bay cages that facilitate hot swapping by allowing you

to just

pull the disk out from the front while taking 3 5 1/4 bays in the case.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Replacing both disks in a mirror set

2012-10-08 Thread Christopher Chan

Happy you got your stuff back.


On Tuesday, October 09, 2012 11:30 AM, Martin Bochnig wrote:

Ok, to stay correct:

First via rsync or /usr/sbin/tar cEf or cpio for the most important files.
Then I try, if piping zfs send still works.

IT ALL DOESN'T MATTER TO ME.
My DATA MAY BE RESCUED in a few hours )))

)))

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


[OpenIndiana-discuss] Switching from oi-experimental back to openindiana

2012-10-02 Thread Christopher Chan
Is that possible? :-D

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-26 Thread Christopher Chan

On 26/04/12 12:17 AM, Gary Gendel wrote:


That isn't what spamdyke is trying to accomplish here. This checks to
see if the sender is trying to spoof the MTA. What spamdyke is trying to
do is to blacklist emails based upon the ip address embedded in the
sending domain name. For example:

If I get mail from 208.1.48.3 and it's reverse domain lookup resolves to
customer.208.001_48.3.sample.com and sample.com is on my list it is
blocked.



Again, it's available with the following configuration parameter:

   check_reverse_client_hostname_access type:table

Table should have key sample.com and RHS = REJECT, blah

Table details:

http://www.postfix.org/access.5.html



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-26 Thread Christopher Chan

On Thursday, April 26, 2012 08:30 PM, Gary Gendel wrote:

On 4/26/12 5:01 AM, Christopher Chan wrote:

On 26/04/12 12:17 AM, Gary Gendel wrote:


That isn't what spamdyke is trying to accomplish here. This checks to
see if the sender is trying to spoof the MTA. What spamdyke is 
trying to

do is to blacklist emails based upon the ip address embedded in the
sending domain name. For example:

If I get mail from 208.1.48.3 and it's reverse domain lookup 
resolves to

customer.208.001_48.3.sample.com and sample.com is on my list it is
blocked.



Again, it's available with the following configuration parameter:

   check_reverse_client_hostname_access type:table

Table should have key sample.com and RHS = REJECT, blah

Table details:

http://www.postfix.org/access.5.html

Chris, I'm still unclear on how to do this.  How could you write a 
regular express to check to see if the connecting ip address is buried 
in the reverse dns lookup.


In my example, spamdyke would reject customer.208.001_48.3.sample.com, 
but customer.108.001_48.3.sample.com would not be rejected because it 
doesn't match the ip address of the sending MTA.  This prevents 
rejecting reverse dns names with strings of arbitrary numbers in them.


Gary,

I am sorry, but things are a bit unclear here. Is it don't block 
misconfigured clients but do block clients with proper rdns in this domain?


What do you mean by customer.108.001_48.3.sample.com would not be 
rejected because it doesn't match the ip address of the sending MTA? 
That customer.108.001_48.3.sample.com A would not map back to the ip of 
server whose PTR record points to customer.108.001_48.3.sample.com?


Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-25 Thread Christopher Chan

On 24/04/12 09:30 PM, Gary Gendel wrote:


The pipeline architecture of qmail has been instrumental at making
third-party additions incredibly simple. You can easily plug in special
debugging modules, and even tee off things so you can test new modules
in parallel with real operations. Before spamdyke was available, I had
developed a number of homebrew modules for spam analysis and control.
That said, qmail isn't 100% sendmail compatible, so occasionally I ran
into issues with unhandled sendmail options (until patched). I don't
know whether postfix suffers from the same issue yet.


postfix will be fine with sendmail options. postfix also support milters 
and you can use something like mimedefang to do the same although you 
will have write from scratch or go hunting.




Since my Qmail based system does not inherently support IPV6 and would
require significant patching I'm committed to move to Postfix before
this becomes necessary. However, Postfix configuration is far more
complex if you are someone that likes to understand the purpose of each
option and it's impact to other options. I will also miss the simplicity
of making a split-horizon caching DNS service via dnscache/tinydns when
I need to go to IPV6 which is an important piece of any email system in
a private networked LAN.


postfix configuration is only complex because it offers more than qmail. 
If someone were to look at your setup, it would be complex for them too 
in the beginning.


djbdns has a ipv6 patch available. Unless you need dnssec, i don't see 
why one needs to move off djbdns. But qmail or any patched ones is 
another story. Just the need to stop qmail-send to do any queue 
management is reason enough not to use qmail for incoming.




Gary

On 4/24/12 8:44 AM, låzaro wrote:

anyway... postfix is the better today :D

I saw using Qmail long time ago, I like it, but is obsolete

Also, I have my compiled Qmail and configured just as personal email
museum

Thread name: Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?
Mail number: 17
Date: Tue, Apr 24, 2012
In reply to: Christopher Chanchristopher.c...@bradbury.edu.hk

On Monday, April 23, 2012 08:44 PM, låzaro wrote:

in Qmail, the security is patch-maked in postfix is by-design-maked

NO, that is not accurate. security where it means anti-spam, DJB
did not bother because as far as he is concerned, the way things
are, things are just broken. Too bad his idea of how email should
work never took off. So any anti-spam features are provided by
THIRD-PARTIES. It is not 'patch-maked'. There is zero anti-spam.

As for postfix, 'by-design-maked' just means Wietse put in the time
to develop postfix unlike DJB who stopped in 1998.


for example, smtp auth, SASL, TLS and soon. Also postfix is more
modular. You can use it with someSQL LDAP and all thats cute things.

There is a qmail fork that does both sql and ldap too. postfix is
only better because its developer continued to work on the code and
keep up with the times and he built a good reputation while at it.

No qmail fork has ever managed that because of DJB's stand on
licensing but now that qmail is public domain, maybe in the future
one of these forks might.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-25 Thread Christopher Chan

On 24/04/12 09:08 PM, Jonathan Adams wrote:

Dovecot's take on Qmail (and other MTA's http://wiki.dovecot.org/MTA )
which states qmail is an obsolete and unmaintained server. Its POP3
part can be taken over by Dovecot. Qmail started off boasting about
speed and security in the mid-1990s, but has lots of unfixed bugs
(this document includes patches where known), among them security bugs
that remain unfixed, and the security guarantee (500 USD) denied. If
you really intend to continue using it, read Dave Sill's Life with
qmail which contains instructions to work around some of qmail's
security issues. 



DJB coughed up the goods for the dnscache security hole. The qmail-smtpd 
one is rather contrived (read: only 'demonstrated' in a very particular 
setup with a particular compiler on a particular operating system) and 
most probably never going to see the light of day.


The only fair comment there is 'obsolete and unmaintained'.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-25 Thread Christopher Chan

On 25/04/12 11:06 PM, Gary Gendel wrote:

Chris,

I've replaced my qmail chain for SASL delivery with postfix. It took me
a few rounds to get all the bits I needed working, but I'm good with the
results.

The non-SASL chain will be a big nut to crack. There are a lot of useful
spam features in spamdyke that I haven't found an equivalent for in
postfix. For example, spamdyke can find an ip address buried in the fqdn
and check if it matches the sending MTA's ip address. This can be done
for the domains you specify. I have the one spamdyke option turned on to
do this against all country code domains. I also have a list of about 60
other domains to do this against.


...piece of cake...

http://www.postfix.org/postconf.5.html#reject_unknown_client_hostname

That provides what you want to check fqdn-ip = client ip

To restrict that check to specific domains, you can make use of 
restriction classes. http://www.postfix.org/RESTRICTION_CLASS_README.html




If it weren't for spamdyke, I wouldn't have an issue but Sam Clippinger
did an impressive job at making an open source anti-spam tool
specifcally for qmail that beats anything else I've seen.


I've only heard of spamdyke now (sorry, I got off the qmail for 
incoming/front line/first stage a long time ago) but there is mimedefang 
if postfix's own facilities are not good enough for you.




As for the dot-qmail stuff. I've moved away from that quite awhile ago
except for my mailing lists which I don't have a problem shutting down.



Ah. I'm using dovecot's lda with sieve support. Postfix will happily use 
procmail, maildrop, dovecot lda, cyrus, whatever except qmail-local.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Using OI as a combined storage serverandvirtual server enviroment

2012-04-25 Thread Christopher Chan

On 24/04/12 04:01 PM, Richard PALO wrote:

Evidently licensing is more the problem...
... hence the benefit of KVM
 (and for those on AMD, that AMD SVM support continues to improve!)



This AMD Opteron user cannot wait for kvm to support AMD-V

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-23 Thread Christopher Chan

On Monday, April 23, 2012 08:44 PM, låzaro wrote:

in Qmail, the security is patch-maked in postfix is by-design-maked
   


NO, that is not accurate. security where it means anti-spam, DJB did 
not bother because as far as he is concerned, the way things are, things 
are just broken. Too bad his idea of how email should work never took 
off. So any anti-spam features are provided by THIRD-PARTIES. It is not 
'patch-maked'. There is zero anti-spam.


As for postfix, 'by-design-maked' just means Wietse put in the time to 
develop postfix unlike DJB who stopped in 1998.



for example, smtp auth, SASL, TLS and soon. Also postfix is more
modular. You can use it with someSQL LDAP and all thats cute things.
   


There is a qmail fork that does both sql and ldap too. postfix is only 
better because its developer continued to work on the code and keep up 
with the times and he built a good reputation while at it.


No qmail fork has ever managed that because of DJB's stand on licensing 
but now that qmail is public domain, maybe in the future one of these 
forks might.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-22 Thread Christopher Chan

On 22/04/12 05:19 AM, Jonathan Adams wrote:

you could always use Sendmail ... It's reliable, and flexible, if you
can work out the configuration for it ... but Postfix is a damn sight
easier to get working.


people can still read sendmail rulesets? :p



My biggest bug bears with Postfix are the inability to use sendmail
-bv for testing aliases and the fact that a person in multiple
aliases will get the email more than once e.g:


I suspect postmap -q will do what you want.

man postmap (if you have postfix)

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-22 Thread Christopher Chan

On 22/04/12 12:50 AM, Magnus Hedemark wrote:

If we're going out on limbs, Haraka might be worth a look.

http://haraka.github.com/



One still needs a proper mta on a later stage with haraka if used for 
incoming...


Sounds more like a smtp proxy with filtering/authentication capabilities.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-22 Thread Christopher Chan

On 22/04/12 11:28 PM, Jerry Kemp wrote:

For the most part, they don't need to any more.

IMHO, during the Sendmail 8.8/8.9, or when ever the m4 macro compiler
and .mc files got brought online, that event brought Sendmail up to
speed on ease of configuration inline with its competitors.



But where is the fun in that? Trying to debug, searching for that 
missing tab, jumping here and there following the rules, isn't that what 
it means to run sendmail? :D



Jerry



On 04/22/12 08:22, Christopher Chan wrote:

On 22/04/12 05:19 AM, Jonathan Adams wrote:

you could always use Sendmail ... It's reliable, and flexible, if you
can work out the configuration for it ... but Postfix is a damn sight
easier to get working.


people can still read sendmail rulesets? :p



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-22 Thread Christopher Chan

So are people up for netqmail, daemontools, djbdns packages?

On Sunday, April 22, 2012 08:34 PM, Gary Gendel wrote:
Which brings us back to qmail.  I've been using it flawlessly starting 
on a Sparc IPC running SunOS before Postfix was a gleam in Wietse 
Venema's eye.  The darn thing is rock solid, secure, lightweight, and 
fast.  That said, I have nothing against Postfix other that I've never 
had a reason to look further than qmail.


You did. That's why you are not running qmail-smtpd. Not even a patched 
qmail-smtpd. Yes, DJB designed qmail to be modular and using third-party 
modules is far game but using third-party modules already means it is 
not qmail. Stop deluding yourself. qmail's main problem has always been 
back-scatter due to lack of smtp time recipient checking not mention all 
the other host of things one needs/wants do before accepting message 
body data.


You have looked beyond qmail and decided to stick with dot-qmail and 
other goodies and found yourself a qmail-smtpd replacement.




Gary

On 4/22/12 8:26 AM, Christopher Chan wrote:

On 22/04/12 12:50 AM, Magnus Hedemark wrote:

If we're going out on limbs, Haraka might be worth a look.

http://haraka.github.com/



One still needs a proper mta on a later stage with haraka if used for 
incoming...


Sounds more like a smtp proxy with filtering/authentication 
capabilities.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Qmail-to-go on openindiana?

2012-04-21 Thread Christopher Chan

On 21/04/12 09:29 PM, Magnus Hedemark wrote:

Postfix.


+1

Problem for both is still the same at the moment...build your 
own...postfix integrates well with a lot of stuff...vpopmail, dovecot, 
spamassassin via spamass-milter...at least, that is how i set things up.


qmail's modularity allows you to use stuff like mailfront, qpsmtpd, 
whatever else out there but you cannot touch the queue while qmail-send 
is running. You will also have to patch it if you have 'high' loads of 
any kind. At least with the ext-todo patch if you get injection rates 
beyond your hardware.


I'm going to out on a limb and call into question zfs' performance for a 
mail queue. You'd want it on a separate disk running UFS with softupdates.




Sent from my typewriter

On Apr 21, 2012, at 9:19 AM, Hans J. 
Albertssonhans.j.alberts...@branneriet.se  wrote:


What MTA would you suggest?

On 2012-04-20 14:40, openindiana-discuss-requ...@openindiana.org wrote:

Message: 8 Date: Fri, 20 Apr 2012 09:00:03 +0800 From: Christopher 
Chanchristopher.c...@bradbury.edu.hk  To: openindiana-discuss@openindiana.org 
Subject: Re: [OpenIndiana-discuss] Qmail-to-go on openindiana? 
Message-ID:4f90b513.9080...@bradbury.edu.hk  Content-Type: text/plain; 
charset=ISO-8859-1; format=flowed Hi Hans, May I ask why you would want to use qmail? It 
has pretty weak anti-spam facilities, if at all, and so would not really be an mta you want 
for incoming use. If you only want to use it for outgoing then I can understand. 
Christopher On Friday, April 20, 2012 03:40 AM, Hans J. Albertsson wrote:

  I'm considering setting up qmail rather than sendmail or postfix on my
  openindiana 151-a3 systems.

  Is there a ready-made package available for openindiana or must I
  compile it from scratch?

  Will Qmail integrate well with Webmin, or even at all?

  ___
  OpenIndiana-discuss mailing list
  OpenIndiana-discuss@openindiana.org
  http://openindiana.org/mailman/listinfo/openindiana-discuss


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Solaris 11 source code leaked?

2011-12-20 Thread Christopher Chan

On Tuesday, December 20, 2011 08:24 PM, Dave Koelmeyer wrote:

On 12/21/11 12:43 AM, Gabriel de la Cruz wrote:

The most they can do is politely asking not to use it.

Am I wrong?


Yes. This is Larry we're talking about here. I can't quite believe
anyone is even seriously contemplating risking his ire.



There, fixed that for you. :-D

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] ZFS/CIFS shares in cross domains

2011-12-13 Thread Christopher Chan
There is an illumos issue on this I think: #1087. A fix is available but 
I don't know if it has been applied to the illumos 151 tree and whether 
OI has packaged that.




On Wednesday, December 14, 2011 08:18 AM, Patrick O'Sullivan wrote:

Question for the group at large:

Was true Kerberos support for CIFS ever added? It's tough to tell because the 
old OpenSolaris documentation/bug tracking has been largely taken down.

Here's one of the old references I can find: 
http://arc.opensolaris.org/caselog/PSARC/2009/673/20091209_natalie.li

Alexei,

If you read that, you'll see that as of when it was written, the CIFS service 
could do pass through auth but not true Kerberos auth. Maybe pass through is 
working for members of ADS.DOMAIN.EDU but not for KRB.REALM.EDU as those users 
are not part of ADS.DOMAIN.EDU. Maybe some packet captures would help see what 
the flow actually looks like?

On Dec 12, 2011, at 10:08 PM, ale...@soemail.rutgers.edu wrote:

   

Greetings,

I'm trying to set OpenIndiana 151a as a storage server, ZFS/CIFS, in a
cross Realm/Domain trust infrastructure. Namely, I have an MIT Kerbreros 5
server, providing realm KRB.REALM.EDU, and an Active Directory Windows
2003 server, providing domain ADS.DOMAIN.EDU, set with cross DOMAIN/REALM
two-way trust.

The OpenIndiana ZFS/CIFS server is added to the domain, ADS.DOMAIN.EDU, and
allows mapping shares onto Windows 7 desktops in the domain for the domain
users, for example a...@ads.domain.edu.
However, the user who logins to the same desktop as the realm user, such
as a...@krb.realm.edu, appears to  ZFS/CIFS server as Guest and can not
map the shares unlike the domain users.

However, my NetApp filer, which also operates in ADS.DOMAIN.EDU, has no
problem mapping the shares for both the domain and the realm accounts.

Is there any limitation in ZFS/CIFS on OpenIndiana 151a that disallows
access to the shares in the cross Domain/Realm two-way trust case?

Any of your recommendations and advices would be appreciated.
Thanks,
Alexei



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
 


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
   



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] ZFS/CIFS shares in cross domains

2011-12-13 Thread Christopher Chan

On Wednesday, December 14, 2011 09:17 AM, Patrick O'Sullivan wrote:

I found that issue: https://www.illumos.org/issues/1087

However, that issue itself is that certain modes of access try to force 
Kerberos auth, not that Kerberos auth itself is broken.

Do you know if the Kerberos auth issue was fixed or if they made accessing 
\\servername.fqdn work like \\servername (i.e. using pass through auth)?
   


No idea as I am not a Nexenta customer. The details appear to be on the 
Nexenta bug tracking system.


My problem is that accessing \\servername does not work but \\serverip 
does...




Googling for the Nexenta support number doesn't turn anything up.

On Dec 13, 2011, at 7:44 PM, Christopher Chanchristopher.c...@bradbury.edu.hk 
 wrote:

   

There is an illumos issue on this I think: #1087. A fix is available but I 
don't know if it has been applied to the illumos 151 tree and whether OI has 
packaged that.



On Wednesday, December 14, 2011 08:18 AM, Patrick O'Sullivan wrote:
 

Question for the group at large:

Was true Kerberos support for CIFS ever added? It's tough to tell because the 
old OpenSolaris documentation/bug tracking has been largely taken down.

Here's one of the old references I can find: 
http://arc.opensolaris.org/caselog/PSARC/2009/673/20091209_natalie.li

Alexei,

If you read that, you'll see that as of when it was written, the CIFS service 
could do pass through auth but not true Kerberos auth. Maybe pass through is 
working for members of ADS.DOMAIN.EDU but not for KRB.REALM.EDU as those users 
are not part of ADS.DOMAIN.EDU. Maybe some packet captures would help see what 
the flow actually looks like?

On Dec 12, 2011, at 10:08 PM, ale...@soemail.rutgers.edu wrote:


   

Greetings,

I'm trying to set OpenIndiana 151a as a storage server, ZFS/CIFS, in a
cross Realm/Domain trust infrastructure. Namely, I have an MIT Kerbreros 5
server, providing realm KRB.REALM.EDU, and an Active Directory Windows
2003 server, providing domain ADS.DOMAIN.EDU, set with cross DOMAIN/REALM
two-way trust.

The OpenIndiana ZFS/CIFS server is added to the domain, ADS.DOMAIN.EDU, and
allows mapping shares onto Windows 7 desktops in the domain for the domain
users, for example a...@ads.domain.edu.
However, the user who logins to the same desktop as the realm user, such
as a...@krb.realm.edu, appears to  ZFS/CIFS server as Guest and can not
map the shares unlike the domain users.

However, my NetApp filer, which also operates in ADS.DOMAIN.EDU, has no
problem mapping the shares for both the domain and the realm accounts.

Is there any limitation in ZFS/CIFS on OpenIndiana 151a that disallows
access to the shares in the cross Domain/Realm two-way trust case?

Any of your recommendations and advices would be appreciated.
Thanks,
Alexei



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

 

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

   


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
 

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
   



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


[OpenIndiana-discuss] taking snapshots was Re: OpenIndiana/ZFS mail server HA config

2011-12-06 Thread Christopher Chan

On Tuesday, December 06, 2011 07:01 AM, Joshua M. Clulow wrote:


We used to do this every 15 minutes on a pair of thumpers at the Uni I
worked at.  Has anybody done this with a shorter period?  You may get
more traction with the question on a ZFS mailing list.

   
I thought I was the only one who did fifteen minute intervals for taking 
snapshots. You said you 'used' to. Did you run into issues doing 
snapshots at this frequency? How long did you keep the snapshots for?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-10 Thread Christopher Chan

On Tuesday, October 11, 2011 05:44 AM, Ken Gunderson wrote:


My comment was not directed at anyone in particular, but more broadly
scoped to include various posts that seem to keep holding up Linux like
it's the holy grail.  I don't need another Linux option.  I do have an
interest/need in something better than Linux, e.g. zfs, dtrace, and
other enterprise grade features that Linux presently lacks.




Hi Linux basher. BTW, I don't remember anybody holding up Linux like 
it's the holy grail. They were holding Ubuntu up like it's the holy 
grail. FYI, there are plenty of Linux sysadmins that despise Ubuntu just 
as much as you despise Linux.


ZFS an 'enterprise grade' feature now is it? So what are you going to do 
when Oracle pushes out btrfs for Linux with the self same functionality 
that ZFS has and maybe more? Jump ship? The rumour mills have this story 
about Oracle doing a dtrace for Linux. Sounds fun?


You have missed the point of those posters 'holding up Ubuntu like it is 
the holy grail'. They would like to see OpenIndiana get more exposure 
and hopefully attract the attention of more developers to keep it from 
dying. They have good intentions. Only problem is that most people who 
do use OpenIndiana, including idiots like me (thanks Garrett), use it 
for server purposes and not general desktop use like Ubuntu.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-10 Thread Christopher Chan

On Tuesday, October 11, 2011 07:51 AM, Dan Swartzendruber wrote:


I think I've gotten frustrated enough at trying to make the same point N
times that I'm done here.  One last time: the point was that someone brought
up OSX as an example of a widely deployed platform using a non-linux (as I
recall the point) OS.  My rebuttal was that 95% or whatever of the users of
OSX have no clue that BSD or linux or OS/360 is the underlying OS, so it was
a bad example.  I honestly don't understand why this has been such a
difficult point for people to understand.



Dan,

OpenIndiana is not quite ready for the desktop. Where it is usable, you 
still have to pick the right hardware (Nvidia graphics)...



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-10 Thread Christopher Chan

On Tuesday, October 11, 2011 08:29 AM, Dan Swartzendruber wrote:


Richard, you continue to miss the point.  This isn't about you (OS) vs me
(linux).  I would wager that for every opensolaris user there are at least
10 linux users.  Getting them to use OS (which is better in many ways,
granted), making the environment more familiar is essential, IMO.  You are
of course, free to disagree.  Just saying, I've been through this before...



GNU userland is already available in a big way with Nexenta and partly 
available in OpenIndiana. GNU awk, GNU tar, gcc, GNU make, yada yada.


But if you want to change the way things are done in /etc, please go 
elsewhere. Even in Linux land, things are in a big flux at the moment 
with /etc although certain things like network configuration are not 
changing but distro differ from distro in things like that. I don't see 
a problem with OpenIndiana differing too.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-10 Thread Christopher Chan

On Tuesday, October 11, 2011 08:32 AM, Dan Swartzendruber wrote:


Quite true.  At this point, though, the admin space is the issue.


I come from a Linux background with my experience being done on Redhat 
Linux, Fedora, Centos and Ubuntu. I have also worked on FreeBSD and 
OpenBSD. I do not see a problem in the admin space. You can get various 
GNU tools on OpenIndiana. As for configuration files, they differ from 
distro to distro so you cannot even claim admin space familiarity in 
Linux space because there is no single admin environment. Other than 
that, everybody has to deal with different layouts for configuration 
files for the daemons in common be they apache, BIND, ntpd, nfsd.


If you cannot be bothered to learn like the rest of us who came over 
from Linux space, then please stop bothering us.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-09 Thread Christopher Chan

On Monday, October 10, 2011 04:56 AM, Ken Gunderson wrote:

On Sun, 2011-10-09 at 11:43 -0700, Alan Coopersmith wrote:

On 10/ 9/11 11:37 AM, Ken Gunderson wrote:

I haven't looked in recent years, but the last time I did look, port 25,
not port 80, was responsible for the lions share of Internet traffic.


I don't think that's been true for many years.   Last I heard, YouTube
Netflix dominated the bandwidth.


So yeah, Alan, you snipped my after thought were I corrected myself.  So
let's factor out streaming media.  Then, I think, smtp would still be
quite large proportion.


And how much of that bandwidth is spam? That might bring down the 
numbers for smtp versus http.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-09 Thread Christopher Chan

On Monday, October 10, 2011 03:54 AM, LinuxBSDos.com wrote:


I fail to see why you consider my statements erroneous assumptions.
Whether we like it or not, forums rule. The most prolific communities on
the Internet are forums, or forum-like. answers.yahoo.com. facebook,
Google Groups, are all forum-type communities.

That I'm advocating for such is not necessarily a personal preferences,
but a recognition of what I feel, based on what I've seem elsewhere, of
what the community needs to do to bring all the goodies that oi has to
offer to mainstream users. If you want to promote something, I think you
can make the task a bit easier if you take it to where crowds like to
gather.


But is OpenIndiana ready for the desktop? If you have a box with Nvidia 
graphics, you might get away with a bit. What's the point in catering to 
end users when it's not ready? Then if you put up a forum for said end 
users and there is little to no experts on hand, you will just leave a 
very bitter taste for any end user brave enough to give OpenIndiana a 
try. Guess what that is going to do with OpenIndiana advocacy?



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Help with website

2011-10-09 Thread Christopher Chan

On Monday, October 10, 2011 09:45 AM, Ken Gunderson wrote:

On Mon, 2011-10-10 at 09:16 +0800, Christopher Chan wrote:

On Monday, October 10, 2011 04:56 AM, Ken Gunderson wrote:

On Sun, 2011-10-09 at 11:43 -0700, Alan Coopersmith wrote:

On 10/ 9/11 11:37 AM, Ken Gunderson wrote:

I haven't looked in recent years, but the last time I did look, port 25,
not port 80, was responsible for the lions share of Internet traffic.


I don't think that's been true for many years.   Last I heard, YouTube
Netflix dominated the bandwidth.


So yeah, Alan, you snipped my after thought were I corrected myself.  So
let's factor out streaming media.  Then, I think, smtp would still be
quite large proportion.


And how much of that bandwidth is spam? That might bring down the
numbers for smtp versus http.



Doesn't really matter when you factor in banner ads associated with
http.  The glory days of the internet being populated by academics is
history.




True that. I don't hit forums or even nntp nowadays. If I do go to a 
forum, it is because it is the only choice available. That push thing 
about mailing lists is a winner. But it does show a segmentation of the 
community - end users/system administrators.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Best way to map SAS drives to physical positions

2011-10-06 Thread Christopher Chan

On Wednesday, October 05, 2011 02:03 AM, Alasdair Lumsden wrote:

Hi Jeppe,

On 3 Oct 2011, at 14:19, Jeppe Toustrup wrote:

The only way I have found which I can find the order of the drives in
the JBOD along with the above names, without pulling out each drive
and see which one becomes unavailable, is within /etc/path_to_inst,
where I find the following lines:


Have you tried:

/usr/lib/fm/fmd/fmtopo -V

?

It works with SES compatible JBOD enclosures and I can confirm it works with 
the LSI JBODs we use.



Thanks Alasdair for this!

I get enclosure id and bay id with this command. But boy, it sure does 
need lots of parsing.


Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Samba in OI 148 appears dysfunctional.

2011-08-25 Thread Christopher Chan

On Friday, August 26, 2011 01:55 AM, Oscar del Rio wrote:

On 08/25/11 01:19 PM, Kimmo Jaskari wrote:

I've been trying to get the Samba version that comes with OI to work,
but am unable to get it to authenticate. I'm running a Windows 7
client that I'd like to get going but have not had much luck.



We have no problems running Samba on oi_148.


Oh, are you a winbind user too?

I was quite happy with samba in snv_134 (but it had become old and 
insecure samba 3.0.x) and I have plenty of pain with the one in 
OpenIndiana 147. After I finally got it working with opends, it did 
almost everything it once did. The exception was automatic uid/gid - 
sid mapping in winbind.


I have a script to deal with that but it was so much nicer when it 
handled everything.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Heads up - rpm5 + smart package manager on Belenix

2011-08-22 Thread Christopher Chan

On Monday, August 22, 2011 01:46 PM, Sriram Narayanan wrote:

On Mon, Aug 22, 2011 at 10:06 AM, Christopher Chan
christopher.c...@bradbury.edu.hk  wrote:

And? You got a working rpm binary? Got an rpm based distro? ???

:-D


Yes, I've got a working environment in place for the past month which
has rpm5 and smart (the package manager). There are other things to
have in place too.

This mail from me was a heads up of sorts.


Great!

What else? Repos? Installer that uses smart/yum and rpm?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Heads up - rpm5 + smart package manager on Belenix

2011-08-21 Thread Christopher Chan

And? You got a working rpm binary? Got an rpm based distro? ???

:-D

On Monday, August 22, 2011 12:46 AM, Sriram Narayanan wrote:

All:

I wanted to give everyone a heads up on Belenix related activities.

Context:
We'd decided some time ago to use rpm5 + the smart package manager.
Please see: 
http://www.belenix.org/content/Proposal-use-rpm5-package-format-and-smart-package-manager

All of my work is tested on only my laptop so far, albeit in a number
of clean boot environments.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] KVM on Illumos

2011-08-19 Thread Christopher Chan

On Friday, August 19, 2011 03:38 AM, Nikola M wrote:

Dave Koelmeyer wrote:

For those that haven't already seen:

http://dtrace.org/blogs/bmc/2011/08/15/kvm-on-illumos/

I would like to know, now that is KVM here in Illumos
(and presumably in OpenIndiana and when also AMD CPU support is written,
beside Intel support),
does that means we have something more powerful than XEN is?



I thought kvm was more interesting for running guests like Windows and 
more of a competitor to virtualbox?


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] KVM on Illumos

2011-08-16 Thread Christopher Chan

On Tuesday, August 16, 2011 02:33 PM, Alexander Pyhalov wrote:

On 08/16/2011 10:00, Dave Koelmeyer wrote:

For those that haven't already seen:

http://dtrace.org/blogs/bmc/2011/08/15/kvm-on-illumos/


Great news. However, without an ability to run it on AMD CPUs, it's not
so interesting for us :)


Is their kvm implementation only using Intel's VT?

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] ntpd not keeping time in sync

2011-07-17 Thread Christopher Chan

On Thursday, July 14, 2011 04:38 PM, Mark wrote:

On 14/07/2011 11:54 a.m., Gary wrote:

On Wed, Jul 13, 2011 at 1:04 PM, Mark wrote:


The 500ppm ntp range limit is easy to exceed with virtual hardware,
since it
isn't real time orientated.


The original poster, Chris Chan, is running it on bare metal hardware.
Regardless, I've never had that issue with running NTP in guests
hosted in VirtualBox or VMware. If that happened to me in a VM,
however, I'd be filing a bug with the VM software vendor.



If it is hardware, then check the bios setup for a Spread Spectrum clock
setting and try disabling it if it is on.




/me takes note. Thanks!

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] zpool in sorry state

2011-07-17 Thread Christopher Chan

On Thursday, July 14, 2011 04:11 AM, Mark wrote:

On 14/07/2011 2:44 a.m., Christopher Chan wrote:

On Wednesday, July 13, 2011 09:28 PM, Eric Pierce wrote:

Is the 9211-8i a different driver than mpt_sas?


No it is not. LSI 2008 chip - mpt_sas driver


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

The IT  IR firmware both use the same mpt_sas driver.

I'm currently using IR and pass through all the sas disks.
There are a few quirks with multi-path and failed drives, but it has
been solid so far.


Quirks with MPT?



I also have a few running mpt and sas disks that are very stable.

For Sata disks, very few give good stability, and the model I found to
be the best is now different - gone to 4k internal sectors.



I have not had any problems with SATA Seagates...

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] zpool in sorry state

2011-07-13 Thread Christopher Chan

On Wednesday, July 13, 2011 09:28 PM, Eric Pierce wrote:

Is the 9211-8i a different driver than mpt_sas?


No it is not. LSI 2008 chip - mpt_sas driver


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] zpool in sorry state

2011-07-13 Thread Christopher Chan

On Wednesday, July 13, 2011 09:28 PM, Eric Pierce wrote:

Is the 9211-8i a different driver than mpt_sas?


No it is not. LSI 2008 chip - mpt_sas driver




On Wed, Jul 13, 2011 at 2:53 AM, Roy Sigurd Karlsbakkr...@karlsbakk.netwrote:


We're moving to 9211-8i - so far no such problems with those. Exporting and
reimporting the pool shouldn't be a problem.

roy

- Original Message -

Also, would it be possible to just export the pool, install the new
HBA, and
re-import the pool or is that asking too much? :)

On Tue, Jul 12, 2011 at 9:07 PM, Eric Pierceagtcov...@gmail.com
wrote:


Is it functionally different if I don't even bother with the raid
crap on
it, or should I change the firmware anyway?

The LSI controller is built into the motherboard of the supermicro
server
we have. Do you have a recommendation for a better SAS HBA?


On Tue, Jul 12, 2011 at 3:54 PM, Roy Sigurd Karlsbakk
r...@karlsbakk.netwrote:


And by the way, the IR firmware is the 'raid' firmware, supporting
mirrors. Better use the IT firmware for ZFS

roy

- Original Message -

It's an LSI2008-IR. Same thing or different? It's a SAS
controller, no
RAID.

On Sat, Jul 9, 2011 at 3:21 PM, Roy Sigurd Karlsbakk
r...@karlsbakk.netwrote:


It wouldn't be an LSI 3801/3081 board by any chance? I've seen
some
rather
bad issues like this with those boards

roy

- Original Message -

Indeed, right now zpool status -v is reporting only 1
unrecoverable
error.
However, other LUNs aren't recognized by VMWare as VMFS
volumes
anymore.

The server does have ECC memory, and an LSI SAS controller
(no
RAID,
ZFS
handles everything). We've had this in production for about 4
months
without issue until yesterday. I agree about mirror-8; I'm
concerned
it may
also have problems. I did online one drive in mirror-3. The
other
drive,
wouldn't online.

At this point I want to get the two replacement drives I have
installed,
which goes back to one of my questions: what's the best
method for
replacement with hot spare already in place? I've seen other
articles/posts
about simply using zpool detach pool_name failed_device, but
I
want to
make
sure I get that part right and don't cause further problems.
Once
I
know
those are in place, I'm going to run a full scrub in the
evening.

Thanks,
Eric Pierce

On Fri, Jul 8, 2011 at 9:27 AM, Lucas Van Tol
catsey...@hotmail.com
wrote:



I think the re silver should have looked at all the data
and
given
you the
entire list of bad data, but I'm not entirely sure if re
silvers
look
outside of the vdev they are fixing.
A scrub would look at all the data and verify it.

I note that your drives are out due to too many errors.
Normally, I would say just replace them, but since you lost
so
many
at
once; it may be worth trying to force the drives online.
I don't know how that will interact with the spares, but if
the
original
drives can be brought online and a scrub run; one of the
two
drives
may
still have the missing data; after which a scrub may
recover it.
It would be a problem if the spare detached itself though,
and
I'm
not sure
how spares behave in such situations.


Also; mirror 8 has more 'read' errors than I would trust.
I find it suspicious that there are an equal #'s of
failures on
disks in
that vdev.
Have you had any memory or disk controller issues on the
system,
and
are
you using ECC memory?



-Lucas Van Tol




___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


--
Vennlige hilsener / Best regards

roy
--
Roy Sigurd Karlsbakk
(+47) 97542685
r...@karlsbakk.net
http://blogg.karlsbakk.net/
--
I all pedagogikk er det essensielt at pensum presenteres
intelligibelt. Det
er et elementært imperativ for alle pedagoger å unngå eksessiv
anvendelse av
idiomer med fremmed opprinnelse. I de fleste tilfeller
eksisterer
adekvate
og relevante synonymer på norsk.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


--
Vennlige hilsener / Best regards

roy
--
Roy Sigurd Karlsbakk
(+47) 97542685
r...@karlsbakk.net
http://blogg.karlsbakk.net/
--
I all pedagogikk er det essensielt at pensum presenteres
intelligibelt.
Det er et elementært imperativ for alle pedagoger å unngå eksessiv
anvendelse av idiomer med fremmed opprinnelse. I de fleste
tilfeller
eksisterer adekvate og relevante synonymer på norsk.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss





___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org

Re: [OpenIndiana-discuss] Shorter subjects for mailing lists

2011-07-12 Thread Christopher Chan

On Tuesday, July 12, 2011 02:00 PM, Gregory Youngblood wrote:

On Jul 11, 2011, at 9:07 PM, Joshua M. Clulow wrote:


On 2011-07-09 14:20, Roy Sigurd Karlsbakk wrote:

Most of us use GUI-based email readers that handle80char subjects. Is
this really an issue?


Yes, it is really an issue.  Trying to make sense of mailing list
subjects on my phone, for instance, is a bit tiresome.


I have my mail app on half my screen and with my current setup the subject I see is 
Re: [OpenIndiana-discuss] Shorter su...

My suggestion is to change the subject prefix in the list software from 
[OpenIndiana-discuss] to [oi-disc] and that will reclaim a lot of subject 
line real estate all by itself.



+1

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] ntpd not keeping time in sync

2011-07-12 Thread Christopher Chan

On Wednesday, July 13, 2011 03:51 AM, Roy Sigurd Karlsbakk wrote:

Sigh...

ntpdate -u 192.168.9.1
10 Jul 09:01:15 ntpdate[29929]: step time server 192.168.9.1 offset
3317.946738 sec


IIRC ntpd won't adjust the time if the difference is too big, measured between 
the system clock, inherited from the hardware clock, and the ntp servers. I've 
see this on VMs a few times on Linux - if the guest OS doesn't have a time 
source compatible, it'll usually drift a lot, possibly enough to make ntpd give 
up. But then, since you're running on iron (or silicon or something), adjusting 
the time on bootup with ntpdate should suffice :)



I have switched from broadcastclient to specifying 5 time servers. That 
seems to have got it to behave properly.


cheers,

Christopher

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


  1   2   >