Re: [osol-discuss] OpenSolaris static IP and hostname

2010-07-28 Thread Darren Mackay
 Yes. NWAM can handle static addresses as well. I
 was running it using 
 the 'edit /etc/nwam/llp' file. But with latest build,
 that is not working.

sysidtool-net on a default install (b134) seems to run DHCP client *after* nwam 
has run.

a quick and dirty is to add an exit 0 to /lib/svc/method/sysidtool-net to 
prevent this from occuring.

Darren Mackay
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] OpenSolaris static IP and hostname

2010-07-26 Thread Darren Mackay
Hi,

- assumes you are current a user or role that has write perms for the relevant 
conf files...

in /etc/nwam/llp

rge0 [tab] static 192.168.1.1/24 up

- replace rge0 with your network interface instance, and the IP  mask as 
appropriate. Your llp file should already have the instance with dhcp present.

and for your default gateway (edit IP as necessary):

echo 192.168.1.254  /etc/defaultrouter

then svcadm restart nwam

echo hostname  /etc/nodename

- may need to reboot for the new hostname to take affect.

Cheers,

Darren Mackay
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] onnv 135 MIA? Skipped or delayed? (knock, knock) Is this Mic turned on?...

2010-04-02 Thread Darren Mackay
The BFU for b136 was made available in the past 24 hours:

http://dlc.sun.com/osol/on/downloads/b136/

(although http://dlc.sun.com/osol/on/downloads/current/ still points to a 
nightly build as I am writing this post)

The BFU for b135 has been available for a around 4 weeks (give or take a few 
days).

Given previous history (the past 2 years), this *usually* means that the 
previous BFU release is in the process of being cut and released.

However, also given the past 2 opensolaris releases, and that b134 was 
originally slated as the 2010.03 release, I am not expecting to see ISO / USB 
images releases for for anything past b135 until approx 2 weeks after the 
2010.03 (or what ever this will now be called).

I personally think that bug id 6924824 (and related cases) is a show stopper 
for 2010.03. 

Speculation and opinion: I think the unified storage platform (ie - 7000 
series) would generate significantly more revenue that opensolaris support 
contracts, thus show stoppers for that platform would probably drive fixing the 
bug sooner, provided customers are logging support incidents as Sev1 / Sev2.

Darren Mackay
http://www.sikkra.com/
http://sourceforge.net/projects/velitium/
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] onnv 135 MIA? Skipped or delayed? (knock, knock) Is this Mic turned on?...

2010-04-02 Thread Darren Mackay
Are you running a development build or the unified storage distro?

Currently, *I believe* that the only supported release for zfs dedup was 
2010.Q1 of the unified storage platform - perhaps someone else can correct me 
if my understanding is wrong here 2010.Q1 was only released 10th March.

If you are running a dev build (which based on your post, I think this is the 
case - please correct me if my interpretation is wrong), I think you are very 
very brave running a dev build in prod... Especially as there has never been 
any formal support of development builds that I am aware.

You do have another option though - but it will probably cost... Given you have 
00's of TB of deduped data already...

If this is critical to the business, and the business cannot wait, you could 
approach you account and engage oracle professional services to write the fix 
you require, particularly if no dates have been provided when a fix will be 
released.

Again, if this is business critical, you could approach Pawel Dawidek from the 
BSD community - he gave a talk on GEOM at the Kernel Conf in Brisbane last 
year, and he seemed very knowledgeable on the ZFS code-base - he may also be 
able to assist, or direct you to someone who can.

Internally, we have fairly good knowledge of parts of the ZFS code-base - so we 
may be able to assist. But our expertise is elsewhere in the ZFS code-base, and 
not in the dedup code.

You best option will still be to approach your account exec directly

Although I think my reply to the original poster re this issue being a show 
stopper may accelerate the natural order in the universe... I can only suggest 
sitting tight.

Cheers, and good luck.

Darren Mackay
http://www.sikkra.com/
http://sourceforge.net/projects/velitium/
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Moving Storage to opensolaris+zfs. What about backup?

2010-03-04 Thread Darren Mackay
a number of apps support zfs extended attributes, but not many support backup 
up snapshots in a format that can be *easily* recovered (ie - as a regular 
snapshot of a filesystem). hopefully this will change in the future ;-)

if you want to backup snapshot too, then perhaps something like:

mkfifo /tmp/some_pipe
zfs snapshot ...
zfs send -I startsnap endsnap  /tmp/some_pipe

then something that is able to backup to tape from a pipe, and manage your 
tapes, etc - use what you are comfortable with, but not all backup apps are the 
same

note - if changing tapes takes too long, the pipe *may* actually time out on 
the send side if you are not careful...

opensolaris also has an ndmp service - so if your backup app support grabbing 
data form an ndmp enabled nas, then you may want to look into this - although, 
I am not sure if this metho will also grab any zvols (I have never tried the 
ndmp agent to be honest, this suggestion is purely speculative).

recovery is a little more tricky for rpool, but other pools are basically the 
same...

Cheers,

Darren Mackay
http://www.sikkra.com/
http://sourceforge.net/projects/velitium/
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] kernel panic on zpool import

2009-10-11 Thread Darren Taylor
I have searched the forums and google wide, but cannot find a fix for the issue 
I'm currently experiencing. Long story short - I'm now at a point where I 
cannot even import my zpool (zpool import -f tank) without causing a kernel 
panic

I'm running OpenSolaris snv_111b and the zpool is version 14. 

This is the panic from /var/adm/messages;  (full output attached);

genunix: [ID 361072 kern.notice] zfs: freeing free segment 
(offset=3540185931776 size=22528)

This is the output I get from zpool import;

# zpool import
  pool: tank
id: 15136317365944618902
 state: ONLINE
status: The pool was last accessed by another system.
action: The pool can be imported using its name or numeric identifier and
the '-f' flag.
   see: http://www.sun.com/msg/ZFS-8000-EY
config:

tankONLINE
  raidz1ONLINE
c9t4d0  ONLINE
c9t5d0  ONLINE
c9t6d0  ONLINE
c9t7d0  ONLINE
  raidz1ONLINE
c9t0d0  ONLINE
c9t1d0  ONLINE
c9t2d0  ONLINE
c9t3d0  ONLINE

I tried pulling back some info via this zdb command, but i'm not sure if i'm on 
the right track here (as zpool import seems to see the zpool without issue). 
This result is similar from all drives;

# zdb -l /dev/dsk/c9t4d0

LABEL 0

failed to unpack label 0

LABEL 1

failed to unpack label 1

LABEL 2

failed to unpack label 2

LABEL 3

failed to unpack label 3

I also can complete zdb -e tank without issues – it lists all my snapshots and 
various objects without problem (this is still running on the machine at the 
moment) 

I have put the following into /etc/system;

set zfs:zfs_recover=1
set aok=1 

i've also tried mounting the zpool read only with zpool import -f -o ro tank 
but no luck.. 

I dont know where to go next? – am I meant to try and recover using an older 
txg? E.

I would be extremely grateful to anyone who can offer advice on how to resolve 
this issue as the pool contains irreplaceable photos. Unfortunately I have not 
done any backups for a while as I thought raidz would be my savour. :( 

please help
-- 
This message posted from opensolaris.orgOct 11 17:16:55 opensolaris unix: [ID 836849 kern.notice] 
Oct 11 17:16:55 opensolaris ^Mpanic[cpu0]/thread=ff000b6f7c60: 
Oct 11 17:16:55 opensolaris genunix: [ID 361072 kern.notice] zfs: freeing free 
segment (offset=3540185931776 size=22528)
Oct 11 17:16:55 opensolaris unix: [ID 10 kern.notice] 
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f75f0 
genunix:vcmn_err+2c ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f76e0 
zfs:zfs_panic_recover+ae ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7770 
zfs:space_map_remove+13c ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7820 
zfs:space_map_load+260 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7860 
zfs:metaslab_activate+64 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7920 
zfs:metaslab_group_alloc+2b7 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7a00 
zfs:metaslab_alloc_dva+295 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7aa0 
zfs:metaslab_alloc+9b ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7ad0 
zfs:zio_dva_allocate+3e ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7b00 
zfs:zio_execute+a0 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7b60 
zfs:zio_notify_parent+a6 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7b90 
zfs:zio_ready+188 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7bc0 
zfs:zio_execute+a0 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7c40 
genunix:taskq_thread+193 ()
Oct 11 17:16:55 opensolaris genunix: [ID 655072 kern.notice] ff000b6f7c50 
unix:thread_start+8 ()
Oct 11 17:16:55 opensolaris unix: [ID 10 kern.notice] 
Oct 11 17:16:55 opensolaris genunix: [ID 672855 kern.notice] syncing file 
systems...
Oct 11 17:16:55 opensolaris genunix: [ID 904073 kern.notice]  done
Oct 11 17:16:56 opensolaris genunix: [ID 111219 kern.notice] dumping to 
/dev/zvol/dsk/rpool/dump, offset 65536, content: kernel
Oct 11 17:17:09 opensolaris genunix: [ID 409368 kern.notice] ^M100% done: 
168706 pages dumped, compression ratio 3.58, 
Oct 11 17:17:09 opensolaris genunix: [ID 851671 kern.notice] dump succeeded___

Re: [osol-discuss] [zfs-discuss] Which kind of ACLs does tmpfssupport?

2009-09-16 Thread Darren J Moffat

Joerg Schilling wrote:

Alan Coopersmith alan.coopersm...@sun.com wrote:


If the test suite is going to be running on nv_128 or later, then
you are guaranteed to have a zfs filesystem, since root must be
zfs then (since the only install method will be IPS, which requires
zfs root).   Until then you could just document to run it on a
system with a zfs filesystem available.


Are you kidding?


pkg will install just fine onto other filesystems eg:

$ pkg image-create -a opensolaris.org=http://pkg.opensolaris.org/dev 
/tmp/darrenm/myimage

$ pkg -R /tmp/darrenm/myimage install SUNWmkcd

/tmp is tmpfs on this sytem and note that the prompt is $ not # pkg 
doesn't even require you be root.


Whats more pkg isn't even specific to Solaris it works on other UNIX 
like systems and even on Windows.  So it is clearly false that it 
requires ZFS since that doesn't even exist on all the other platforms.


Don't confuse the decisions made for the OpenSolaris 2009.06 releases of 
only supporting and allowing install to ZFS root with the capabilities 
of the package system.



An installer that depends on the availability of a specific root filesystem
is based on a design bug.



What is the reason? Is there still no pkgrm command in IPS?
If Yes, then it is obvious that IPS is not yet ready for production use.


See the man page for pkg:

pkg uninstall [-nrvq] [--no-index] package...

If you want to discuss pkg capabilities more please continue this 
discussion on pkg-disc...@opensolaris.org where the pkg experts will be 
happy to engage.


--
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [pkg-discuss] [on-discuss] ON/SXCE bi-weekly schedule not valid anymore?

2009-08-26 Thread Darren J Moffat

Peter Tribble wrote:

# ptime pkgadd SUNWzsh

real   2.390
user   0.808
sys1.380


That I assume was local disk, right ?


# ptime pkg install SUNWzsh

real   2:30.397
user 11.191
sys   2.770


Did this needed to transfer over the network or was it a local repo ?

--
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Blastwave repository down?

2009-08-16 Thread Darren Couch
Awesome-thanks!  I have been enjoying the new opensolaris install, and there 
are only a few things more to tie down for it to be excellent.  Running on an 
XPS M1710 with 4G ram-stable and smooth.
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] Blastwave repository down?

2009-08-15 Thread Darren Couch
Hello!  I have searched for a couple of days on how to add the Blastwave 
repository to the package manager, to no avail.  No matter which method I use, 
they all error out.  I've tried from the command line, I've tried adding it 
through the manager.  Any idea if it is still up?
-- 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [zfs-discuss] zfs related google summer of code ideas - your vote

2009-03-05 Thread Darren J Moffat

Wes Felter wrote:

slog and L2ARC on the same SSD


You can do that already today.

Create two slices using format(1M) and add the slices rather than the 
whole disk as the L2ARC or slog device.


However IMO this is with current SSD techology probably the wrong thing 
to do.  The slog wants a very fast write devices, the L2ARC wants a very 
fast read device.  Unless your SSD is fast at both reads and writes 
using the same SSD for the slog and L2ARC isn't a good idea.


--
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Video Decode and Presentation API for Unix (VDPAU) [PSARC/2009/059 FastTrack timeout 02/05/2009]

2009-01-29 Thread Darren J Moffat
Shawn Walker wrote:
 Darren J Moffat wrote:
 John Martin wrote:
 Are there any plans for integrating this with any actual 
 applications, or with gstreamer or other desktop video apps?
 NVIDIA already provides patches to the ffmpeg library and the mplayer 
 application
 to enable VDPAU.

 A pity OpenSolaris doesn't have ffmpeg or mplayer though.
 
 I would hope that the fluendo folks can make the necessary changes to 
 their codecs to take advantage of this; paired with their upcoming dvd 
 player, we might finally have a first-class DVD playback experience on 
 OpenSolaris.

DVD playback isn't only one reason for having ffmpeg on OpenSolaris 
though. There are other use cases such as DLNA/UPnP servers such as 
mediatomb where ffmpeg is being used for transcoding.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [networking-discuss] Megacli, NetCat, and Virt-Install Test Suites Released

2008-11-20 Thread Darren Reed
Jim Walker wrote:
 ..
 Vladimir Kotal from the Solaris RPE Security group, has released the NetCat 
 test
 suite.
 More information on the NetCat test suite can be found at:
 http://opensolaris.org/os/community/networking/tests/nc/
 http://src.opensolaris.org/source/xref/test/ontest-stc2/src/suites/net/nc/README
 http://src.opensolaris.org/source/xref/test/ontest-stc2/src/suites/net/nc/
   

Thanks for the news Jim, I've updated the table of OpenSolaris 
Networking Test Suites
to include a reference to this. The table can be found at:
http://www.opensolaris.org/os/community/networking/tests/

Cheers,
Darren

___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Auto fsck filesystems upon reboot if disk corrupt?

2008-10-17 Thread Darren Dunham
 So here's the scenario.  We have roughly 800 boxes
 out in various locations running OpenSolaris snv_81.
 There is no technical staff at these locations.
 Often if there's a connectivity issue, the staff
 will just power cycle the machine, which is not
 ideal.  Sometimes there is disk corruption as a
 result of these repeated power cycles and the
  machine will go into system maintenance mode.

Ouch.  The default is for UFS filesystems to be in logging mode and ZFS always 
has logging.  So a simple power outage shouldn't cause corruption.   

Are you talking UFS or ZFS?  If UFS, can you confirm the filesystems don't have 
'nologging' set as a mount option?

 I'm wondering if there's anyway to configure the OS
 to auto fsck the filesystem upon reboot if the OS
 detects the drives as being unclean, because what
 happens is that if the box goes into maintenance
 mode, we need to build a new one and ship it out to
 the remote location and as a result they are down for
 24 hours or so.

fsck can't fix everything.  I'm very worried that if the log replay fails, 
you're going to have serious corruption.  

However, as with all things in the computer world, it is possible to do this 
(even if it may not be a good idea).

The default startup action is to fsck all filesystems.  But it only does 
operations that should be pretty safe.  If things are bad enough, it stops and 
demands an administrator examine.  The result of running 'fsck -y' at this 
point could be to remove valid data.

If you look at /lib/svc/share/fs_include.sh, there's a section on the default 
fsck options.  You'll see that UFS is set to -o p, which does a safe check.  
If you change that to -o y, it'll answer yes to all checks, even unsafe and 
potentially dangerous ones.

-- 
Darren
--
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-10-03 Thread Darren
Is there any movement on Nvidia 780a drivers
--
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Software RAID in solaris 10?

2008-08-22 Thread Darren Dunham
You can't really add a drive to Raid-5 either (at least not in SVM).  You can 
do it, but it's not really RAID-5 any more because the data isn't striped 
across the new disk.  It's concatenated.  So it doesn't really offer a better 
add-a-drive situation.

Write performance of SVM raid-5 will be much worse than the write performance 
of raid-z on similar devices.
-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] ps -ef running really slow on non-global zone

2008-07-07 Thread Darren Archibald
Has anyone encountered any issues with the 'ps -ef' command running really slow 
on a non-global zone ? Th ecommand runs instantly on the global zone, but takes 
around 1 minute to show all running proccesses on the local zone? Obviously 
need to do some further investigation, but just wondered if someone had a quick 
fix.
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] ps -ef running really slow on non-global zone

2008-07-07 Thread Darren Archibald
Frank, thanks for the reply, I've managed to work out what the issue was. There 
was no nscd running, so it had to go off to a remote name server each time to 
resolve the process owner. 'svcadm enable name-service-cache' cleared things up.
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-21 Thread Darren
Mritun As I stated earlier I had done this already and it does not work. The 
switch is D-link and has 5 other machines connected one is a PS3 and all work 
fine. Including this machine that works fine in all but opensolaris. 

So go figure the opensolaris driver for Nge is not handling the card correctly, 
this method may have worked to give you a work around for your M2NPV, but 
hardly a solution. Hence the word used Rubbush for a solution or option, 
don't take it personally. I am very serious about moving away from Windows and 
hate the fact that the machine runs great on windows but not on opensolaris. 
THis is not a reflection on opensolaris merely a reflection of the market 
today. 

Solaris is the best operating system in the world as far as I am concerned and 
second rate fixes and work arounds are not appropriate. Especially if we want a 
development community to shift away from that aborable operating system of MS 
windows/Vista.  Sorry ranting  But this is stopping me from shifting 
complety onto OpenSolaris and having windows in a domU. Add maybe a boot of 
windows for high need graphics games, which maybe oneday will come in 
Solaris(OH how I dream).
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-20 Thread Darren
Thanks lars I had already set this up manually so Nwam was not enabled anyway, 
but here is a copy of what I did which was just run through your steps any way. 
I do not think the current nge driver is capable of dealing with this network 
card that somes as part of the 780a chipset. I also lot's of stuff on google 
where the linux and freebsd community are having the same issues.

I have also logged and RFE which has now been accepted as no CR 6716752 .

Anyway here is the commands executed.

__
# svcs -a |grep physical
disabled   19:14:57 svc:/network/physical:nwam
online 19:15:03 svc:/network/physical:default
# svcadm disable svc:/network/physical:nwam
# svcadm enable svc:/network/physical:default
# svcs -a |grep physical
disabled   19:14:57 svc:/network/physical:nwam
online 19:15:03 svc:/network/physical:default
# ifconfig /dev/nge0 down
ifconfig: setifflags: SIOCGLIFFLAGS: /dev/nge0: no such interface
# ifconfig -a
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu 8232 
index 1
inet 127.0.0.1 netmask ff00 
nge0: flags=201000843UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS mtu 1500 index 2
inet 10.1.1.101 netmask ff00 broadcast 10.255.255.255
ether 7a:a6:73:c6:1f:0 
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL mtu 8252 
index 1
inet6 ::1/128 
# ifconfig nge0 down
# ifconfig nge0 unplumb
# ifconfig /dev/nge0 plumb
ifconfig: cannot open link /dev/nge0: DLPI link does not exist
# ifconfig nge0 plumb
# ifconfig -a 
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu 8232 
index 1
inet 127.0.0.1 netmask ff00 
nge0: flags=201000842BROADCAST,RUNNING,MULTICAST,IPv4,CoS mtu 1500 index 3
inet 0.0.0.0 netmask 0 
ether 7a:a6:73:c6:1f:0 
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL mtu 8252 
index 1
inet6 ::1/128 
# ifconfig nge0 10.1.1.101 netmask 255.0.0.0 broadcast 10.255.255.255 up
# 
# 
# ping 10.1.1.101
10.1.1.101 is alive
# ping 10.1.1.1
no answer from 10.1.1.1
# 
# netstat -r

Routing Table: IPv4
  Destination   Gateway   Flags  Ref Use Interface 
  - - -- - 
default  10.1.1.1 UG1  0   
arpanet  dbsol-1  U 1 20 nge0  
localhostlocalhostUH1377 lo0   

Routing Table: IPv6
  Destination/MaskGateway   Flags Ref   UseIf   
--- --- - --- --- - 
::1 ::1 UH  1  21 lo0
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-20 Thread Darren
Also just for your further edification I also grabbed output from the files 
which I had already created.

# tail -f /var/adm/messages
Jun 20 19:20:09 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:20:11 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 20 19:20:51 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:20:53 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 20 19:21:33 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:21:35 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 20 19:22:15 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:22:19 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 20 19:23:37 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:23:38 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex


After making changes 


Jun 20 19:27:51 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:27:55 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 20 19:28:39 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:28:41 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 20 19:29:21 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 20 19:29:23 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex

___


# cat /etc/netmasks
10.0.0.0255.0.0.0

---
# cat /etc/defaultrouter
10.1.1.1

---
# cat /etc/nsswitch.conf

passwd: files
group:  files
hosts:  files
ipnodes:files
networks:   files
protocols:  files
rpc:files
ethers: files
netmasks:   files
bootparams: files
publickey:  files
# At present there isn't a 'files' backend for netgroup;  the system will 
#   figure it out pretty quickly, and won't use netgroups at all.
netgroup:   files
automount:  files
aliases:files
services:   files
printers:   user files

auth_attr:  files
prof_attr:  files
project:files

tnrhtp: files
tnrhdb: files

---
# cat /etc/resolv.conf
nameserver 61.9.133.193
nameserver 61.9.134.49
domain home.net.au
---
# cat /etc/hostname.nge0
10.1.1.101
---
# cat /etc/hosts
127.0.0.1 localhost
10.1.1.101 dbsol-1 loghost
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Western Digital SATA drives and Pioneer Blu-ray SATA do not register in b90

2008-06-20 Thread Darren
I have sent you a copy of the outputs you asked for, there are no console 
outputs. I have attached cfgadm and prtconf outputs and sent you email directly 
for /var/adm/messages file as to large to paste.

*** Does anyone know how to attach files, as when I try in this forum I get an 
error message saying I do not have permissions to edit  


cfgadm -la |grep sata

sata0/0unknown  connectedunconfigured unknown
sata0/1::dsk/c2t1d0disk connectedconfigured   ok
sata0/2unknown  connectedunconfigured unknown
sata0/3unknown  connectedunconfigured unknown
sata0/4unknown  connectedunconfigured unknown
sata0/5::dsk/c2t5d0disk connectedconfigured   ok
__
*** note only  1 and 5 are recognised by opensolaris I have placed actual 
details below

0 is a  Seagate ST332061 3AS 
1 is a Seagate ST325062 4AS 
2 is PIONEER BD-ROM  BDC-202 CdRom Device Blu-Ray
3 is Western Digital WDC WD25 00KS-00MJB0 
4 is Western Digital WDC WD25 00KS-00MJB0 
5 is  Seagate ST325062 4AS 

__

prtconf -vp


System Configuration:  Sun Microsystems  i86pc
Memory size: 4095 Megabytes
System Peripherals (PROM Nodes):

Node 0x01
bios-boot-device:  '81'
stdout:  
name:  'i86pc'

Node 0x02
existing:  00d7c000..02a0f801.
name:  'ramdisk'

Node 0x03
bus-type:  'isa'
device_type:  'isa'
name:  'isa'

Node 0x04
compatible: 'pciex_root_complex'
device_type:  'pciex'
reg:  ..
#size-cells:  0002
#address-cells:  0003
name:  'pci'

Node 0x05
reg:  ....
compatible: 'pci10de,754.1043.82e7.a2' + 'pci10de,754.1043.82e7' + 
'pci1043,82e7' + 'pci10de,754.a2' + 'pci10de,754' + 'pciclass,05' + 
'pciclass,0500'
model:  'Ram'
power-consumption:  0001.0001
66mhz-capable:  
fast-back-to-back:  
devsel-speed:  
max-latency:  
min-grant:  
subsystem-vendor-id:  1043
subsystem-id:  82e7
unit-address:  '0'
class-code:  0005
revision-id:  00a2
vendor-id:  10de
device-id:  0754
name:  'pci1043,82e7'

Node 0x06
reg:  0800....
compatible: 'pci10de,75d.1043.82e7.a2' + 'pci10de,75d.1043.82e7' + 
'pci1043,82e7' + 'pci10de,75d.a2' + 'pci10de,75d' + 'pciclass,060100' + 
'pciclass,0601'
model:  'ISA bridge'
power-consumption:  0001.0001
66mhz-capable:  
fast-back-to-back:  
devsel-speed:  
max-latency:  
min-grant:  
subsystem-vendor-id:  1043
subsystem-id:  82e7
unit-address:  '1'
class-code:  00060100
revision-id:  00a2
vendor-id:  10de
device-id:  075d
name:  'pci1043,82e7'

Node 0x07
assigned-addresses:  
81000910..fc00..0040.81000920..1c00..0040.81000924..1c40..0040
reg:  
0900.....01000910....0040.01000920....0040.01000924....0040
compatible: 'pci10de,752.1043.82e7.a1' + 'pci10de,752.1043.82e7' + 
'pci1043,82e7' + 'pci10de,752.a1' + 'pci10de,752' + 'pciclass,0c0500' + 
'pciclass,0c05'
model:  'SMBus (System Management Bus)'
power-consumption:  0001.0001
66mhz-capable:  
fast-back-to-back:  
devsel-speed:  
interrupts:  0001
max-latency:  
min-grant:  
subsystem-vendor-id:  1043
subsystem-id:  82e7
unit-address:  '1,1'
class-code:  000c0500
revision-id:  00a1
vendor-id:  10de
device-id:  0752
name:  'pci1043,82e7'

Node 0x08
reg:  0a00....
compatible: 'pci10de,751.1043.82e7.a1' + 'pci10de,751.1043.82e7' + 
'pci1043,82e7' + 'pci10de,751.a1' + 'pci10de,751' + 'pciclass,05' + 
'pciclass,0500'
model:  'Ram'
power-consumption:  0001.0001
66mhz-capable:  
fast-back-to-back:  
devsel-speed:  

Re: [osol-discuss] Veritas volumes on Global zone, best way to present to the Local Zone

2008-06-20 Thread Darren Archibald
Veritas Volume manager only runs within the Global Zone, it is not supported 
within the local zones, as they share the global zone kernel. I just want to 
know if there was a preference when presenting volumes to the local zones, ufs 
versus lofs
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-20 Thread Darren
Lars noway thanks but that sounds like rubbish, and in fact I have hard reset 
and powered up directly prior.

Come on, I do appreciate your enthusiam though.

I am about to log a bug as suggested by several other sun engineers I have been 
in contact with. The nforce 780a has some differences that will need to be 
added to the O/S.
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] Veritas volumes on Global zone, best way to present to the Local Zone

2008-06-19 Thread Darren Archibald
I've been searching the web for some advice, but can't seem to find a 
definitive answer on this subject. Perhaps there's no real benefit either way.

I have a Global zone with x5 local zones, each local zone has file-systems that 
need to be on SAN. We use VXvM to create the volumes and we need to present 
those to the local zones in the shape of a file system. Now we understand you 
can mount the volumes on the global zone and then present these to the local 
zones as a loopback fs (lofs), or we can just present the volumes to the local 
zones directly using a ufs mount. Is there a best practice ? we are using the 
ufs approach, but now sure if we'll encounter any issues.
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-18 Thread Darren
I have logged details as requested and details. Was unclear of where to attach 
files outputs of each command, so I added in section for additional info.
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-18 Thread Darren
Sorry not yet the ID looks like 0760 for the device. I did a reboot -- -rfor 
a reconfigure but I get a panic and cant catch details happens to fast. 

But I also added two other items at the sametime so have removed this but still 
can't get reconfigure to run. But did get successfully get back into the os 
through normal boot, and now say nge is there but fails.

I may do a re-install and try a reconfigure just by itself just to check, as 
the other items may have caused futher issues.

will Keep posted. I have also included scanpci output with comments around 
devices I could identify through windows once captured the scanpci output.

sorry about large output but I tried to attach files seperatly in this forum 
but unable to edit error cam up.

___pci bus 0x cardnum 0x00 function 
0x00: vendor 0x10de device 0x0754
 nVidia Corporation  Device unknown

pci bus 0x cardnum 0x01 function 0x00: vendor 0x10de device 0x075d
 nVidia Corporation  Device unknown

## PCI standard ISA Bridge

pci bus 0x cardnum 0x01 function 0x01: vendor 0x10de device 0x0752
 nVidia Corporation  Device unknown

## nforce PCI System Management

pci bus 0x cardnum 0x01 function 0x02: vendor 0x10de device 0x0751
 nVidia Corporation  Device unknown

### PCI Ram Controller

pci bus 0x cardnum 0x01 function 0x03: vendor 0x10de device 0x0753
 nVidia Corporation  Device unknown

### Nforce System Management Controller

pci bus 0x cardnum 0x01 function 0x04: vendor 0x10de device 0x0568
 nVidia Corporation  Device unknown

### PCI Ram controller

pci bus 0x cardnum 0x02 function 0x00: vendor 0x10de device 0x077b
 nVidia Corporation  Device unknown

### OpenHCD USB host controller

pci bus 0x cardnum 0x02 function 0x01: vendor 0x10de device 0x077c
 nVidia Corporation  Device unknown

### PCI to USB Controller

pci bus 0x cardnum 0x04 function 0x00: vendor 0x10de device 0x077d
 nVidia Corporation  Device unknown

### OpenHCD USB host controller

pci bus 0x cardnum 0x04 function 0x01: vendor 0x10de device 0x077e
 nVidia Corporation  Device unknown

### PCI to USB Controller

pci bus 0x cardnum 0x06 function 0x00: vendor 0x10de device 0x0759
 nVidia Corporation  Device unknown

### IDE Dual Channel Controller

pci bus 0x cardnum 0x07 function 0x00: vendor 0x10de device 0x0774
 nVidia Corporation  Device unknown

### HD Audio controller

pci bus 0x cardnum 0x08 function 0x00: vendor 0x10de device 0x075a
 nVidia Corporation  Device unknown

pci bus 0x cardnum 0x09 function 0x00: vendor 0x10de device 0x0ad4
 nVidia Corporation  Device unknown

### Nforce Sata Controller

pci bus 0x cardnum 0x0a function 0x00: vendor 0x10de device 0x0760
 nVidia Corporation  Device unknown

## 760 is the Nvidia Network Card.

pci bus 0x cardnum 0x10 function 0x00: vendor 0x10de device 0x0778
 nVidia Corporation  Device unknown

pci bus 0x cardnum 0x13 function 0x00: vendor 0x10de device 0x077a
 nVidia Corporation  Device unknown

pci bus 0x cardnum 0x14 function 0x00: vendor 0x10de device 0x077a
 nVidia Corporation  Device unknown

pci bus 0x cardnum 0x18 function 0x00: vendor 0x1022 device 0x1200
 Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] 
HyperTransport Configuration

pci bus 0x cardnum 0x18 function 0x01: vendor 0x1022 device 0x1201
 Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] Address 
Map

pci bus 0x cardnum 0x18 function 0x02: vendor 0x1022 device 0x1202
 Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] DRAM 
Controller

pci bus 0x cardnum 0x18 function 0x03: vendor 0x1022 device 0x1203
 Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] 
Miscellaneous Control

pci bus 0x cardnum 0x18 function 0x04: vendor 0x1022 device 0x1204
 Advanced Micro Devices [AMD] Family 10h [Opteron, Athlon64, Sempron] Link 
Control

pci bus 0x0001 cardnum 0x0a function 0x00: vendor 0x11c1 device 0x5811
 Agere Systems FW323

### IEEE 1394 Host Controller

pci bus 0x0002 cardnum 0x00 function 0x00: vendor 0x10de device 0x05b1
 nVidia Corporation  Device unknown

### PCI to PCI Bridge

pci bus 0x0003 cardnum 0x00 function 0x00: vendor 0x10de device 0x05b1
 nVidia Corporation  Device unknown

### PCI to PCI Bridge

pci bus 0x0003 cardnum 0x02 function 0x00: vendor 0x10de device 0x05b1
 nVidia Corporation  Device unknown

### PCI to PCI Bridge

pci bus 0x0004 cardnum 0x00 function 0x00: vendor 0x10de device 0x0622
 nVidia Corporation  Device unknown

## NVIDIA GeForce 9600GT

pci bus 0x0007 cardnum 0x00 function 0x00: vendor 0x11ab device 0x6121
 Marvell Technology Group Ltd. 88SE6121 SATA II Controller

__-
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-18 Thread Darren
Further to comments earlier I reinstalled and did a touch /reconfigure and 
changed only the driver_aliases for the nge interface. 

All starts OK but can't communicate out, and the interface in /var/adm/messages 
goes up and down see some extracts below.
This card does work at 1000Mbs/Full Duplex when same pc boots into windows.

Can ping myself, but no where else.

There must be some differences here, let me know if there is anything else I 
can add or discover

extract from messages file :

Jun 19 14:40:48 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:40:50 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:41:30 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:41:32 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:42:17 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:42:19 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:43:02 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:43:04 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:43:44 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:43:46 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:44:26 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:44:29 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:45:13 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:45:17 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:46:00 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:46:02 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:46:42 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:46:45 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:47:25 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:47:29 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:48:09 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:48:11 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
Jun 19 14:48:51 dbsol-1 mac: [ID 486395 kern.info] NOTICE: nge0 link down
Jun 19 14:48:53 dbsol-1 mac: [ID 435574 kern.info] NOTICE: nge0 link up, 1000 
Mbps, full duplex
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] Western Digital SATA drives and Pioneer Blu-ray SATA do not register in b90

2008-06-18 Thread Darren
I have 6 sata drives in machine and only 2 are being recognised by opensolaris.
I am running the MBD in AHCI mode not ide.

The two drives that are recognised within b90 are seagate drives.

Has anyone had similar experiences, and workarounds ? maybe /etc/systems 
parameters etc etc.

Also I am using a new ASUS M3N-HT deluxe MBD which many of the devices are not 
recoginised as yet.

The pioneer drive Blu-ray also is not recognised
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nvidia 780a drivers

2008-06-10 Thread Darren
Thanks I will try that out
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] Nvidia 780a drivers

2008-06-09 Thread Darren
I have recently purchased and ASUS M3N-HT MBD with a phenom 9850. The current 
version b90 does not seem 
1) to recognize the network card. When will this be avalible does anyone know?
2) I am also having an issue with the SATA Blu-ray drive which does seem like 
bug id  6595488 will cover this.

appreciate any help as will have to run windows for now which I hate. Was 
hoping to move everything into opensolaris and run everything else inside 
virtualbox 1.6.2
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [arc-discuss] Project planning and ARC/no-ARC integration (was was Alpine, now Exim...)

2008-05-05 Thread Darren Reed
Mark Martin wrote:

 On Mon, May 5, 2008 at 12:21 PM, James Carlson 
 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote:

 Mark Martin writes:

 ...

 It's never as simple as just doing ./configure and make.  If it
 were, then there'd really be no point in having a repository at all,
 as *anybody* can do that.


 Sometimes it is that simple, and probably more oft not.  I disagree, 
 though, that even if package-get = ./configure  make  make install 
 that *anybody* can do that.  Honestly, even that bar is very high for 
 some users.  One of the first hurdle is ./configure --? 
 (--prefix=/usr/local | /opt | /usr/sfw | ?).  Linux converts might 
 make it, but even Portage and Ports wrap a lot of that away and we 
 don't have either.  Honestly, though, it often *was* that simple for 
 me and for my uses, and before I knew about SFE and the like, I built 
 at least a dozen things with minimal effort and stuck them on boxes 
 throughout my LAN (and I did this because either they were either 
 nascent or non-existent on Blastwave).  I never bothered to package 
 anything though.

FWIW, I agree with the above - often
# ./configure  make  make install
is all I need to do.

What I find annoying is when you use some package system (blastwave,
pkgsrc, etc) to build a package as they often insist that all of the
dependencies must be present rather than some - which defeats
the purpose of having ./configure.

Darren

___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] xntp interval

2008-04-30 Thread Darren Dunham
NTP adjusts the clock constantly.  What changes is the poll intervals.  Unless 
you override it, it will begin polling servers at 64 second intervals.  If the 
clock is stable and the links to the remote clocks are good, it will raise the 
interval to a maximum of 1024 seconds between polls.

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] chroot environment and mknod in a zone

2008-04-22 Thread Darren Dunham
Yes, you can create devices in the non-global zone's filesystem from the global 
zone.

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Solaris 10 Update 5 CD1

2008-04-21 Thread Darren Dunham
's1' is a mount point for a separate UFS filesystem.

I assume this is the SPARC CD? How are you accessing the CD?  Are you mounting 
it on a SPARC machine, or are you using 'lofiadm' to mount the image?

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Long usernames greater than 8 chars

2008-02-26 Thread Darren Dunham
 We use LDAP authentication on our fileserver, which
 allows usernames of
 greater than 8 chars.
 
 $ id -un 
 chris.lintonford

You don't need LDAP for that, /etc/passwd will give you the same ability.

It does nothing to guarantee that utilities that use and display usernames 
(think 'ps') will do the right thing with names longer than 8 characters.

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [ogb-discuss] Nameclash on svn_77 because Sun is ignoring PSARC discussions

2007-12-19 Thread Darren J Moffat
Joerg Schilling wrote:
 Paul Jakma [EMAIL PROTECTED] wrote:
 
 On Fri, 14 Dec 2007, Joerg Schilling wrote:

 As an example, you might check for compare. This is a program I 
 maintain since 1984 that is similar to cmp(1).
 I'm confused: Why not just submit patches to make cmp faster? Why the 
 need for a functionally-similar (identical?) but new utility?
 
 Looks like you are missing the fact that cmp sources have not been available
 when compare has been created. Also note that the compare -a output
 is better readable than the one from cmp.

I believe Paul was suggesting that you could *now* use the knowledge you 
gained in writing your compare(1) to improved the now available in 
source form cmp(1) ? As some other OpenSolaris contributor has already 
done.  I personally think this would be possible even if it means a 
complete replacement of cmp(1) with your compare(1) - providing your 
compare is 100% compatible (modulo extensions).

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [ogb-discuss] Nameclash on svn_77 because Sun is ignoring PSARC discussions

2007-12-19 Thread Darren J Moffat
Joerg Schilling wrote:
 For this reason, compare is used on a dayly base, something that does not 
 apply
 to e.g. imagemagic.

Depends on the usage of the system.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [ogb-discuss] Nameclash on svn_77 because Sun is ignoring PSARC discussions

2007-12-19 Thread Darren J Moffat
Joerg Schilling wrote:
 Darren J Moffat [EMAIL PROTECTED] wrote:
 
 I believe Paul was suggesting that you could *now* use the knowledge you 
 gained in writing your compare(1) to improved the now available in 
 source form cmp(1) ? As some other OpenSolaris contributor has already 
 done.  I personally think this would be possible even if it means a 
 complete replacement of cmp(1) with your compare(1) - providing your 
 compare is 100% compatible (modulo extensions).
 
 Once it has been verified that it is possible to contribute to OpenSolaris

Lots of people have, even your fellow country men.

You produce the diffs and ask on [EMAIL PROTECTED] for 
help.  If you don't do the later part it will never happen.

 I am happy to do so but please note that:
 
 - The better readable output from compare is not compatible with the
   POSIX cmp definition
 
 - One reason why compare is faster is that it by default does not 
   count lines wich is also not compatible with the POSIX cmp definition
   although nobody usually needs this feature.

Hmn that could be a problem but we could resolve that by having 
/usr/xpg?/bin/cmp.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [ogb-discuss] Nameclash on svn_77 because Sun is ignoring PSARC discussions

2007-12-19 Thread Darren J Moffat
Joerg Schilling wrote:
 Nicolas Williams [EMAIL PROTECTED] wrote:
 
 On Wed, Dec 19, 2007 at 05:56:49PM +0100, Joerg Schilling wrote:
 Or you could rename your compare to something else that conflicts
 neither with the existing cmp(1) nor the new compare(1) (yes, it came in
 before yours and now you're not happy; c'est la vie).   ecmp, fcmp, ...
 four letters long is better than seven -- less typing.
 If someone starts to use a name that has been in use since 20 years before, 
 this
 entity needs to change the name to something that does not conflict.
 It happened.  Oh well.  Now you might want to finish the task of
 integrating star before someone appropriates that command name for
 something else...  :/
 
 This does not depend on me as I am ready and waiting sice quite some time.

Please point to the message in the opensolaris.org mailman archives 
where you requested a sponsor to integrate star.  I would have expected 
to see this on request-sponsor@ or [EMAIL PROTECTED]  Anything you did 
before OpenSolaris existed is no longer relevant, OpenSolaris changed 
the world.

 And yes, a registry that all Linux/*BSDs/OpenSolaris distros/c-teams
 could use would be cool.
 
 You find one at Sourceforge.net, one at freshmeat.net and one at 
 developers.berlios.de/sourcewell.berlios.de and a smaller one at savannah.org

It obviously doesn't work then because freshmeat.net lists both star and 
ImageMagic.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Limitation for LOGIN ID by useradd

2007-12-18 Thread Darren J Moffat
Flexscan wrote:
 Hi all,
 
 Anyone knows the limitation for LOGIN ID while creating users by USERADD 
 command in Solaris?

Yes and it is clearly documented in the useradd that you should read the 
passwd(4) man page:

  useradd requires that usernames be in the  format  described
  in  passwd(4).  A warning message is displayed if these res-
  trictions are not met. See passwd(4)  for  the  requirements
  for usernames.

passwd(4) says:

  username   is the user's login name.

 The login  (login)  and  role  (role)  fields
 accept  a  string of no more than eight bytes
 consisting of  characters  from  the  set  of
 alphabetic  characters,  numeric  characters,
 period (.), underscore (_), and  hyphen  (-).
 The  first character should be alphabetic and
 the field should contain at least  one  lower
 case  alphabetic character. A warning message
 is displayed if these  restrictions  are  not
 met.

 The login and role  fields  must  contain  at
 least  one  character  and must not contain a
 colon (:) or a newline (\n).


For support of longer the 8 char usernames see 
http://opensolaris.org/os/community/security/library/long_usernames/



-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] svc:/network/samba vs. svc:/network/smb/server

2007-12-14 Thread Darren J Moffat
Mark wrote:
 Can someone explain the difference between these two?

Yes.

network/samba is the userland Samba server.

network/smb/server is the OpenSolaris specific in kernel CIFS server, 
more info on which can be found at 
http://opensolaris.org/os/project/cifs-server/

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nameclash on svn_77 because Sun is ignoring PSARC discussions

2007-12-14 Thread Darren J Moffat
Joerg Schilling wrote:
 Darren J Moffat [EMAIL PROTECTED] wrote:
 
 When it comes to generic names (which unfortunately ImageMagick is full 
 of) I personally would prefer that it wasn't allowed unless they were 
 really generic.  However UNIX is full of stuff like this already 
 cancel,accept etc.   It is very important for adoption of OpenSolaris 
 distributions that in some cases when OpenSolaris imports external 
 technology that we do so in the most appropriate way, in the ImageMagick 
 case that means not changing the default program names.
 
 So how did these names make it into /usr/bin/?

The third sentence in that quoted paragraph is the reason.  Note that I 
said I personally not The ARC requires.

 It usually helps to avoid problems if things are planned instead of just
 let them pile up.

I personally don't see an problem with this particular instance.  I also 
see no generic issue here just your personal crusade, against any 
program name you happen to have picked.  In this particular instance 
your choice of a generic english word for a specific comparison 
technology is just as much at fault as ImageMagick.  That fact that 
you believe yours predates theirs really doesn't matter.

What does mater for OpenSolaris is that the ImageMagick case followed 
the appropriate process and has integrated.

 BTW: I am still waiting for a reply that signalls the will for cooperation.

Cooperation would mean that both upstream projects yours and ImageMagick 
agreed to a change.  OpenSolaris is just the messenger here.  If you 
want cooperation you need to be willing to compromise otherwise there is 
no cooperation only Joerg dictate.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Nameclash on svn_77 because Sun is ignoring PSARC discussions

2007-12-14 Thread Darren J Moffat
Joerg Schilling wrote:
 [EMAIL PROTECTED] wrote:
 
 For this reason, the compare from imagemagick either needs to be renamed
 or it needs to be put into a different directory.

 Your compare command gives a name clash with ImageMagick's compare command;
 why don't you rename yours?
 
 Looks like you are unwilling to cooperate!
 
 Why should I rename that exists in the public for a long time just because
 some uncooperative people reused the name?

In order to compromise and to move forward.  Otherwise you just look 
demanding, unwilling to make any change and difficult to work with so 
people will eventually just start ignoring you.  If that is the stance 
you want to take that is your choice but don't expect others to change 
if you aren't willing to.

Oldest provable use isn't what matters, sometimes most popular 
elsewhere is what is most important and sometimes it isn't.  Sometimes 
it is just first past the post is what wins and in this case ImageMagick 
one.

When it comes to generic names (which unfortunately ImageMagick is full 
of) I personally would prefer that it wasn't allowed unless they were 
really generic.  However UNIX is full of stuff like this already 
cancel,accept etc.   It is very important for adoption of OpenSolaris 
distributions that in some cases when OpenSolaris imports external 
technology that we do so in the most appropriate way, in the ImageMagick 
case that means not changing the default program names.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] How to avoid several access restricted files from indexing

2007-12-07 Thread Darren J Moffat
yeshanth wrote:
 I am trying to index a source code tree and there are several files that are 
 access restricted. So as a result, I get the indexing to stop with 
 Exceptions(Access is Denied).  I tried using the -i option and it does work.  
 But the same option is tedious if I have around 65 files that I need to omit 
 with -i option.
 
 Is there any option/way that I can use/approach that would help me skip these 
 access is denied from getting indexed??
 
 Any help is appreciated.

The -i option to what ?

What are you indexing with and why is this relevant to OpenSolaris ?

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Indiana review

2007-12-03 Thread Darren J Moffat
Richard L. Hamilton wrote:
 The one problem I have with either /root or root as a role is what there
 is in the way of recovery options (on SPARC too eventually!) under very
 degraded conditions in the absence of being able to log in to the console
 directly as root.  There needs to be something - preferably not _requiring_
 a reboot, and certainly not involving a reboot off of removable media like
 CD/DVD.

I don't see how changing root's home dir from / on the root filesystem 
to /root on the root filesystem changes that.

sulogin will still allow root to login on the console even when root is 
a role.

If you wish to allow root to login directly on the console but not 
directly by any other means - and you are happy with your console 
security - then add the following line to /etc/pam.conf

login account   requiredpam_unix_account.so.1

Normally login would be using the 'other' stack which is:

other   account requisite   pam_roles.so.1
other   account requiredpam_unix_account.so.1

The absence of pam_roles.so.1 is what will allow console access when 
root is a role.

NOTE that this will allow root on ANY direct attached tty not just 
/dev/console.
-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Logging Telnet Sessions

2007-11-29 Thread Darren J Moffat
Rob Sandifer wrote:
 I am trying to find the following information regarding the logging of telnet 
 sessions within a Solaris 10 environment:
 
 (1)  How can I tell if the logging of telnet sessions is enabled on a Solaris 
 10 machine?
 
 (2)  Assuming that the logging of telnet sessions is not enabled, what is the 
 procedure of enabling the logging of a telnet session?
 
 I have alread Googled these questions, but could not find any satisfactory 
 answers.  Any and all constructive replies will be appreciated.  Thanks!

What does logging mean in this context ?

Audit records for all login/logout events ?
Audit records for all commands run during a session ?
Audit records for all syscalls made ?

Keystroke logging ?

Something else ?

BTW since this is likely security releated 
[EMAIL PROTECTED] is the more appropriate place.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Logging Telnet Sessions

2007-11-29 Thread Darren J Moffat
Rob Sandifer wrote:
 Thanks for the heads-up on the security-discuss group!
 
 To answer your question, I am interested in logging telnet 
 logon/authentication events.  Thanks!

Using Solaris Auditing to log detailed information about all logins:

Turn on Solaris Auditing using /etc/security/bsmconv

If you are only interested in login data then specify
only the class `lo` on the flags: line of /etc/security/audit_control.


An example successful event for a remote login to a machine braveheart
from a machine called hepcat:

| header,81,2,login - rlogin,,Wed Aug 27 09:46:53 1997, + 511485295 msec
| subject,darrenm,darrenm,techies,darrenm,techies,10100,10100,24 5 hepcat
| text,successful login


An example failed login event when comming in via ftp from netwon:

| header,77,2,ftp access,,Wed Sep 03 16:56:30 1997, + 712178483 msec
| subject,darrenm,darrenm,techies,darrenm,techies,1200,1200,0 20 newton
| text,bad password
| return,failure,1

Simialar records are generated for local logins, telnet, rlogin, rsh,
rexec, and ftp, ssh, scp, sftp

To find all of the login events for user darrenm in December 1997:

# auditreduce -a 19971201 -b +31d -u darrenm -c lo | praudit


If you only wish to log the failed events then specify -lo eg.
 flags: -lo


Note: Solaris Auditing is not resticted to information about logins,
for more information see the Solaris Auditing section in docs.sun.com 
and read the following manual pages:

audit_control(4), auditreduce(1M), praudit(1M), auditd(1M), bsmconv(1M)

See http://docs.sun.com/app/docs/doc/816-4557/auditplan-6?a=view



-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] New passwd switch?

2007-11-27 Thread Darren J Moffat
Mark Drummond wrote:
 On 26/11/2007, Darren J Moffat [EMAIL PROTECTED] wrote:
 [Reply-To set to security-discuss, please respect and do NOT cross post]

 Mark Drummond wrote:
 How difficult would it be to add a switch to passwd which allows a
 privileged user to select the password hashing scheme?
 Pretty easy, and in fact I have it prototyped (I did the work about 2 or
 3 years ago) by using a new user_attr(4) key=value pair.
 
 Thanks Darren. I suppose this is a bit of a corner case. I'm looking
 for a feature to deal with one poorly behaved app. Better that IBM fix
 DB2 (and it might well be fixed in DB2 9 or even a V8 fixpack), but
 the flexibility in passwd or usermod would be nice.

You have a specific case to work around a problem but you are perfectly 
correct that the flexibility is needed anyway.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] LDAP authentication w/ OpenLDAP server on Linux

2007-11-26 Thread Darren J Moffat
Howard Tsai wrote:
 Hi,
 
 I installed OpenSolaris w/ Crossbow snapshot (snv_61-xb_15) on an x86 machine 
 and would like to setup LDAP to authenticate ssh logins.  The LDAP server is 
 OpenLDAP on a Linux box.
 
 I init LDAP client with the following cmd:
 ldapclient manual \
 -a defaultSearchBase=dc=some,dc=edu \
 -a defaultServerList=10.0.0.1 \
 -a serviceSearchDescriptor=passwd:ou=Users,dc=some,dc=edu \
 -a serviceSearchDescriptor=group:ou=Groups,dc=some,dc=edu \
 -a serviceAuthenticationMethod=pam_ldap:simple
 
 and modified pam.conf by changing required into binding, adding 
 server_policy, and adding pam_ldap lines.
 
 While I can see user info by issuing ldaplist passwd username, users have 
 even no chance to type in passwords when logging in via ssh.  What could be 
 wrong?

Are you actually using keyboard-interactive or password SSH UserAuth 
methods ?  Or do you have pubkey or gss-api (ie have kerberos tickets) 
setup ?

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] LDAP authentication w/ OpenLDAP server on Linux

2007-11-26 Thread Darren J Moffat
Howard Tsai wrote:
 On Nov 26, 2007 5:50 AM, Darren J Moffat [EMAIL PROTECTED] wrote:
 Howard Tsai wrote:
 Hi,

 I installed OpenSolaris w/ Crossbow snapshot (snv_61-xb_15) on an x86 
 machine and would like to setup LDAP to authenticate ssh logins.  The LDAP 
 server is OpenLDAP on a Linux box.

 I init LDAP client with the following cmd:
 ldapclient manual \
 -a defaultSearchBase=dc=some,dc=edu \
 -a defaultServerList=10.0.0.1 \
 -a serviceSearchDescriptor=passwd:ou=Users,dc=some,dc=edu \
 -a serviceSearchDescriptor=group:ou=Groups,dc=some,dc=edu \
 -a serviceAuthenticationMethod=pam_ldap:simple

 and modified pam.conf by changing required into binding, adding 
 server_policy, and adding pam_ldap lines.

 While I can see user info by issuing ldaplist passwd username, users have 
 even no chance to type in passwords when logging in via ssh.  What could be 
 wrong?
 Are you actually using keyboard-interactive or password SSH UserAuth
 methods ?  Or do you have pubkey or gss-api (ie have kerberos tickets)
 setup ?
 
 Yes, I would like to login with a password (clear text password via
 encrypted tunnel).  We don't have kerberos infrastructure here.

Do you have pubkey setup ?  ie do you have a ~/.ssh/id_rsa.pub file on 
the client and a ~/.ssh/authorized_keys file on the server ?

What does ssh -v say you are using as the user authentication method ?

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] New passwd switch?

2007-11-26 Thread Darren J Moffat
[Reply-To set to security-discuss, please respect and do NOT cross post]

Mark Drummond wrote:
 How difficult would it be to add a switch to passwd which allows a 
 privileged user to select the password hashing scheme?

Pretty easy, and in fact I have it prototyped (I did the work about 2 or 
3 years ago) by using a new user_attr(4) key=value pair.

 Users who need to access DB2 (at least, DB2 V8) must have their 
 passwords stored with CRYPT. Or at least, whatever DB2 we are running 

Seems like it must have a statically compiled in version of crypt(3C) in 
that case.  This might be able to be fixed with some linker magic.

 here where I work gets tripped up by anything other than crypt. Storing 
 such a users password in md5 causes their DB2 authentication to fail. As 
 far as I can tell, the only way to get that users password into crypt 
 format is:
 
 1. Make CRYPT the default in policy.conf.
 2. Manually delete the users password from /etc/shadow.
 3. Set the users password.
 4. Now you can set the default back to md5, blowfish, etc.
 
 Step 2 is required because passwd will always use whatever hashing 
 algorithm was last used for that password, regardless of any policy.conf 
 settings.

Not quite true, if the last algorithm is NOT on CRYPT_ALGORITHMS_ALLOW 
(or is on CRYPT_ALGORITHMS_DEPRECATE) and is NOT the default then it 
won't be used.

 Having a switch so I can passwd -z md5 user1 and passwd -z crypt 
 user2 would be great, especially if it we transparent to the actual 
 user account repository (e.g. passwd -z ssha would work with LDAP). Of 

usermod -K crypt_alg=md5 user1

Where the values are the algorithm names from /etc/security/crypt.conf

The problem at the time when I did this was changing smc(1M) GUI to have 
an equivalent.  The Sun policy at the time (which still stands for 
Solaris) is such that that work would still likely be required.

Updating libc/libsecdb and usermod is pretty easy.  The other thing I 
encountered at the time was that this makes libc depend on libsecdb 
which means libsecdb should maybe be rolled into libc.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] OpenSolaris Starter Kit DVD (2 Discs)

2007-11-20 Thread Darren J Moffat
UNIX admin wrote:
 My target machine is currently running SunOS 5.7
 and CDE 1.3. But I want to 
 get rid of all that and start with a fresh new
 install of the latest version of 
 Solaris that will run on this machine.
 
 Latest revision of Solaris is Solaris 10 8/07 aka update 4 (u4), not 
 OpenSolaris.

Not quite true.  There is Solaris Express Developer Edition (SX:DE) and 
Solaris Express Community Edition (SX:CE).  Those are Solaris and are 
based on OpenSolaris (but with additional non open components).

The latest version of Solaris 10 is 8/07, but Solaris 10 isn't the only 
train.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] NIS+ days numbered? is it in OpenSolaris?

2007-11-19 Thread Darren J Moffat
Kyle McDonald wrote:
 Hi all,
 
 I see notices in the Solaris 10 Docs that NIS+ may not be available in 
 the future. Has a date been set for it's demise?

No, if there was there would be an ARC case visible from the ARC 
community saying what that date (release really) was.

 Has the source for it been released to OpenSolaris? so the community can 
 continue maintaining it if desired?

Yes, but note that it isn't an easy extractable part but the code is 
there (all over the place in fact, bits in nsswtich, libnsl, the daemons 
and commands themselves).

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] lofi questions?

2007-11-13 Thread Darren Dunham
 Kyle McDonald wrote:
 How does one go about increasing the number of
 filesystem types 'mount' 
 understands?

/usr/sbin/mount is really more of a wrapper program.  The heavy lifting is done 
by /usr/lib/fs/fstype/mount.  

So if you create a 'uberfs' filesystem, you might want a 
/usr/lib/fs/uberfs/mount program to mount it.

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] lofi questions?

2007-11-09 Thread Darren J Moffat
Kyle McDonald wrote:
 Hi,
 
 I recently read that the option for compression on loopback devices was 
 put back recently.
 This is good news.
 
 Where to look for more info? like:

http://opensolaris.org/os/project/loficc/

and for the approved specification:

http://opensolaris.org/os/community/arc/caselog/2007/569/

specifically:

http://opensolaris.org/os/community/arc/caselog/2007/569/materials/spec-final/

 What compression types are supported?
 
 I'm specifically hoping to use it on compressed .iso files. In the PC 
 world there are several utilities that work (burn, mount, create, etc.) 
 .isz files which are compressed ISO's. I once tried to uncompress one 
 with gzip hwoever and it didn't like it so I'm not sure what compression 
 is used in a .isz. Anyone know? Can I use the same .isz on both types of 
 systems?

Nope this compression is OpenSolaris lofi specific.

 Lastly, most of the ISO's I'll be mounting will be Solaris DVD images. 
 Currently I keep the .iso, and then mount it, and run 
 'setup_install_server' to copy it to disk for Jumpstarts. If I were to 
 only keep the (compressed) .iso file, and permanently lofi mount it 
 where I would normally copy it to, is that enough for Jumpstart?

Yes.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Cannot get RSA webagent to work under Solaris 10 08/07

2007-11-09 Thread Darren J Moffat
Philip wrote:
 Neither the Sun Java web server version nor the Apache version of RSA's web 
 agent client (5.3) seems to work under Solaris 10 08/07.  Both versions 5.2 
 and 5.3 of the Sun Java web server RSA webagent work on a pre-08/07 kernel, 
 however.
 
 Under 08/07, both agents work from the command line (acetest), but both fail 
 at the web layer.  The Apache version will authenticate, but then dies with a 
 message like [notice] child pid 477 exit signal Bus error (10) in the 
 Apache error log.  The Sun Java web server version 5.3 will not authenticate 
 at all, getting node verification errors, even though a command line RSA 
 login works fine (indicating that the node secret and sdconf.rec are working 
 properly).  Version 5.2 for the Java web server sometimes (but not always) 
 gets errors like these when someone successfully authenticates:

Since this is a question about Solaris 10, non open sourced Sun 
unbundled software and 3rd party authentication agents this really isn't 
the correct forum.

 mod_rsa_webagent reports: Authentication succeeded User:
 catastrophe ( 3033): Server crash detected (signal SIGBUS)
 info ( 3033): Crash occurred in NSAPI SAF mod_rsawa_service_auth
 info ( 3033): Crash occurred in function SHA1Final from module 
 /platform/sun4u/lib/libmd_psr.so.1
 failure (  569): Child process admin thread is shutting down
 
 Applying kernel patch 120011-14 breaks RSA web authentication, no matter what 
 we do;  and I don't know what changed.  Any help would be appreciated!

However this looks familiar to me.  I've looked a problem just recently 
related to applying that patch causing core dumps in the RSA PAM module 
for secuird causing /bin/login and sshd to die - the core only has RSA 
code in the stack though.

I'd strongly suggest logging a case with SunService AND with RSA.   I 
have a feeling (but no evidence) that there is an issue with symbol 
scoping in the RSA code that is tickled by libmd and libmd_psr (again 
no evidence just a gut feeling).

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Password formats...

2007-11-08 Thread Darren J Moffat
Kyle McDonald wrote:
 Hi all.
 
 I just setup a new NIS server on NV.
 
 Then I pasted all the passwd and shadow entries from one of the local 
 linux boxes on the end of yp source files.
 
 It just hit me though. The linux box was storing the encrypted passwords 
 in a newer format (I beleive so that it can handle longer passwords)

Nit: They aren't Linux format passwords the $1$ MD5 based hashes came 
from FreeBSD (as does the source I used in Solaris to support them).

See also PSARC/2007/642 in the ARC community which I filed only this 
week to support the new SHA256/SHA512 based format that Red Hat, IBM, 
HP, and Sun developed and have agreed to support ($5 and $6).

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Using SPARC formated disks on X86?

2007-11-08 Thread Darren J Moffat
Jim Dunham [EMAIL PROTECTED] wrote:
 The only two Solaris file systems that are endian-neutral are ISO  
 9660 (High Sierra), which is read-only, and of course ZFS.

Personally I wouldn't say that ZFS isn endian-neutral but endian aware 
(or adaptive). Writes are done in the local endianness but the on disk 
format and code is ware of this when reading and does the appropriate 
swaps.  So a pool written in big endian then take to a little endian 
machine and written more will gradually migrate to little endian over time.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Password formats...

2007-11-08 Thread Darren J Moffat
Kyle McDonald wrote:
 If possible, I'd like someone to confirm what I think I've proved by my 
 experiments:
 
 1. The default Solaris config will compare the password entered with the 
 encrypted version in the shadow file using what ever crypt method *the 
 existing password* was encrypted with?

Correct.

 2. The default Solaris config will store changed passwords with the same 
 type of encryption that the old password used?

Providing that it is on the CRYPT_ALGORITHMS_ALLOW list or not on the 
CRYPT_ALGORITHMS_DEPRECATE list (only one of which can be in use).  If 
it is not on allow or is on deprecate then the algorithm listed in 
CRYPT_DEFAULT will be used instead.

 So by default my passwd file can have all sorts of different types of 
 encryption, and it will stay that way?

It can and it may depending on the above.

 Is there a way to force changed passwords to be stored in a newer format 
 as people change them?

Yes. Set the policy you want for CRYPT_ALGORITHMS_ALLOW or 
CRYPT_ALGORITHMS_DEPRECATE and set CRYPT_DEFAULT to be what you want the 
  hashes to move to.  Then expire their password using 'passwd -f'.

 I read through the man pages on crypt.conf and policy.conf and it seems 
 I can disallow use of some methods, and/or change the default method, 
 but if both 1 and 2 above are true, I don't think that will force 
 changed passwords to the new default? will it?

It will because 1 was true and you didn't quite have all the details 
correct on 2.

See docs.sun.com:
Solaris Express System Administrator Collection
 System Administration Guide: Security Services
 System, File, and Device Security
 2.  Managing Machine Security (Overview)
 Controlling Access to a Computer System

http://docs.sun.com/app/docs/doc/819-3321/6n5i4b73k?a=view#concept-28

For worked examples.

Or if you prefer check the code I wrote to implement it:

http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/lib/libc/port/gen/crypt.c

The policy part is in crypt_gensalt(), crypt() just uses which ever 
algorithm is passed in.  crypt_gensalt() is only used during password 
change.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [indiana-discuss] I'm sorry, but I just don't get it

2007-11-06 Thread Darren J Moffat
Joerg Schilling wrote:
 John Sonnenschein [EMAIL PROTECTED] wrote:
 
 you're aiming for simplicity. Manually setting $PATH and $SHELL is not  
 simplicity. Forcing everyone to use the GNUserland isn't either.

 An dialog box somewhere in the 'advanced' install path I think, is.
 
 I would prefer to see an automated MANPATH. In case that MANPATH is _empty_,
 ii should be following the PATH order.

This is already being discussed[1] in opensolaris-code with a similar 
proposal.  However note that it isn't just stuff in $PATH that has 
interesting man pages, config files libraries etc need to be found too 
so a purely based on $PATH use of $MANPATH may not be sufficient.

Please continue this subthread on opensolaris-code.

[1] 
http://mail.opensolaris.org/pipermail/opensolaris-code/2007-November/006390.html


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Using SPARC formated disks on X86?

2007-11-06 Thread Darren J Moffat
Kyle McDonald wrote:
 andrewk9 wrote:
 Assuming your disk has UFS partitions on it then no, you can't do that. UFS 
 was not designed to be movable between architectures. The main reason you 
 cannot do this is that the on-disk formats are incompatible  by default 
 due to x86 processors being little-endian, and Solaris running SPARC CPUs in 
 big-endian mode.

   
 I knew it wouldn't be easy.
 
 I just thought there might be a compatibility mode where the driver or 
 fs did the endian translation.
 
 Thanks for the info... I'm off to track down a SPARC machine.
 
 Does NV support Sun4c? lol

sun4, sun4c, sun4d, sun4m are not supported in Nevada, as are UltraSPARC 
  I processors less than 170Mhz.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Self-hosting ON

2007-11-02 Thread Darren J Moffat
[EMAIL PROTECTED] wrote:
 The compiler isn't a big issue for me, but the contents of closed/ and
 SUNWonbld definitely are; for one our codebase is somewhat of a lame
 horse without them and for two it's a PITA to have to check for new
 versions before building anything.
 
 I'm not sure why SUNWonbld is different than the compiler (or is it
 because they are not available under usr/src/tools where all tools live?
 
 (Or is it about elfsign and cscope-fast?)

elfsign is open now but it both a build tool and something we ship so it 
gets build in usr/src/tools and in usr/src/cmd/cmd-crypto/

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Very long boot time when no network available

2007-10-18 Thread Darren J Moffat
Joerg Schilling wrote:
 [EMAIL PROTECTED] wrote:
 
 I encounter a significant raise of time when I boot Solaris without
 network connection. It seems that the initialization of the network
 device runs in a time out when no network cable is plugged in. Maybe
 it would be possible to find that time out setting and set it to a
 lower value? Great if someone could help. Thanks in advance.

 svcadm disable network/physical:default
 svcadm enable network/physical:nwam

 should fix this for most systems 
 
 Is there a documentation for this?

Yes and even pointed to in the services:

$ svcs -x nwam
svc:/network/physical:nwam (physical network interface autoconfiguration)
  State: disabled since Tue Oct 16 02:24:52 2007
Reason: Disabled by an administrator.
See: http://sun.com/msg/SMF-8000-05
See: nwamd(1M)
See: http://opensolaris.org/os/projects/nwam/
See: http://opensolaris.org/os/projects/nwam/phase0/
Impact: This service is not running.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] /export/home vs. /home

2007-10-10 Thread Darren J Moffat
Claus Guttesen wrote:
 If I remember correctly, as long as automounter is running an entry in 
 /etc/auto_home (before +auto_home) like

 * localhost:/export/home/

 should do the trick.
 
 Thank you for yor reply. I added the entry to /etc/auto_home but it
 did not do the trick unfortunately. /etc/auto_home looks like this:
 
 +auto_home
 * localhost:/export/home/
 
 I also switched those two entries, and rebooted each time. I'm running
 opensolaris b70b.

Did you restart the automounter ?

svcadm restart autofs



-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] /export/home vs. /home

2007-10-10 Thread Darren Kenny
Hi Claus,

you have the nobrowse option to /home - which means ls /home will give nothing
(i.e. you can't browse it)  - you probably need to try /home/claus or
/home/kilaasi to see anything in /home.

HTH,

Darren.

Claus Guttesen wrote:
 Did you restart the automounter ?

 svcadm restart autofs
 
 Just tried but unfortunately it did not help.
 
 rozetta~#svcadm restart autofs
 rozetta~#ls -l /home
 total 0
 
 rozetta~#ls -l /export/home
 total 20
 drwxr-x---   6 clausstaff512 Oct 10 16:24 claus
 drwxr-xr-x  16 kilaasi  staff   1024 Oct 10 16:41 kilaasi
 drwx--   2 root root8192 Oct  4 10:58 lost+found
 
 /etc/auto_master:
 +auto_master
 /net-hosts  -nosuid,nobrowse
 /home   auto_home   -nobrowse
 
 /etc/auto_home:
 +auto_home
 kilaasi 127.0.0.1:/export/home/kilaasi
 claus 127.0.0.1:/export/home/claus
 
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] doubt regarding GRUB and /boot

2007-10-09 Thread Darren J Moffat
vineet kumar wrote:
 Hi,
When I installed Open Solaris (X86 platform) i created a separate /boot 
 partition.

Why did you do that ?
What perceived problem were you trying to solve ?

What documentation for OpenSolaris/Solaris lead you to wanting to do that ?

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] Reflections from the GSoC Mentor's summit

2007-10-08 Thread Darren Reed
On Saturday, I walked over to the googleplex to attend the
Google Summer of Code mentor summit.  This is for all of
the mentors from GSoC projects to get together and reflect
on what worked, what didn't work, etc.

Most of the sessions were people talking about what they
worked on (which wasn't that interesting) but the standout
was the security software session, led by the author of
nmap.

Some of the highlights in hearing about how other projects
got involved with students:

- GSoC led to the students becoming more involed with the
  projects by doing support (bug fixing, answering questions)
  after their GSoC project was completed and integrated;

- some students have come back in successive years, building
  familiarity with the project, code, and becoming more of a
  regular contributor;

- effort is required to weed out bad submitters but even when
  you think you've done this successfully, things can still turn
  out bad;

- students will put participation in GSoC (for good or bad) on
  their resume.

While I'm not sure what will be happening next year, it is likely
to run again.  This year I believe there were 6 to 8 submissions
for GSoC projects on OpenSolaris, of which 4 were accepted.
Next year we, opensolaris, should be thinking about how we
can drive greater interest through GSoC, get more submissions
and hopefully increase the number of acceptances to 6-8.

Cheers,
Darren

___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Connecting to the Internet using Modem

2007-10-04 Thread Darren J Moffat
vineet kumar wrote:
 Hi,
I am using my Sony K790i GSM phone as a modem to connect to the Internet 
 on Linux and Windows. How do I do it on Solaris.

http://opensolaris.org/os/project/wwan/

 And how do I connect to Wi-Fi in Solaris?


svcadm disable svc:/network/physical:default
svcadm enable svc:/network/physical:nwam

It it will be auto-magic assuming your hardware is supported.

BTW you didn't say which Solaris release so I'm assuming a recent 
Solaris Express (Developer or Community Edition) build.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Porting OpenSolaris To OLPC XO AMD Geode Laptops

2007-10-03 Thread Darren J Moffat
a b wrote:
GNOME is bloat to those who don't use it.
   
   
Could've been statically linked in.
   
  
   Yikes! Are you suggesting static linking of GNOME libraries into
   every application!!
  
 No. I am suggesting that the GNOME-dependent installer be statically 
 linked, so as to reduce the unbelievable half a gigabyte requirement to 
 install Solaris to something reasonable, like a couple of megs.

That wouldn't actually help.  In fact it makes it WORSE not better, 
static linking in the general case decreases sharing, increases binary 
sizes makes patching more complex and increases memory requirements not 
decreases it.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Porting OpenSolaris To OLPC XO AMD Geode Laptops

2007-10-02 Thread Darren J Moffat
Brandorr wrote:
 Not happening. You only have 1G of storage. Solaris would need some
 serious trimming to fit. (And maybe compression). With 256M of RAM it
 would be crazy.. Here Linux really is the best choice. (The eee on the
 other hand, might be doable).

Even with the default Solaris Express installer you can install a 
minimal installation in less then 200M of disk space.  That is without 
triming the kernel to only 32 or 64 bit bins as needed.

Why should Linux be any better here ?

If a Linux kernel based system was built for OLPC it would be a custom 
distro with a custom kernel built - at least initially.   Exactly the 
same could be done for OpenSolaris.



-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] GPL drivers

2007-09-20 Thread Darren J Moffat
Bill Sommerfeld wrote:
 On Tue, 2007-09-18 at 16:48 -0500, Shawn Walker wrote:
 Right, and one would think that a kernel and its components are
 usually part of the OS :)
 
 Solaris provides a documented and generally stable in-kernel ABI, the
 DDI, to permit 3rd party device drivers not part of the OS
 distribution to be developed and distributed independently in binary
 form.
 
 While they execute within the kernel address space, solaris drivers
 written to the DDI can be thought of (from an engineering standpoint, at
 least), as independent programs. 

I've already seen GPLv2 network drivers for Solaris somewhere, but I 
can't remember where off the top of my head.  However I don't believe 
these were a port from a Linux driver but a write from scratch.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Small experiment with twitter.com and /var/adm/messages ...

2007-09-17 Thread Darren J Moffat
UNIX admin wrote:
 Based on Glynn Foster's IRC request I hacked-up a
 small experiment/toy
 (see attached script shtwitter.ksh, the file needs
 Solaris 11 = B72
 since it depends on the networking capabilities of
 the new korn shell)
 which allows to post messages to a twitter.com blog.
 
 ...
 
 Does anyone have better ideas how such a thing could
 be utilised (maybe
 to monitor SMF state changes ?) ?
 
 What I had been thinking of (but didn't get to as of yet), is generating 
 traps on certain content in /var/adm/messages, which would end up as an SMS 
 on my mobile phone.
 
 But I've no idea how to build an SMS gateway, or which software to use. Do I 
 need special hardware (a GSM modem of some sort)? No idea.

Let twitter.com be the SMS gateway for you.  What you would do is set it 
twitter to send you SMS messages for those that you follow.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Small experiment with twitter.com and /var/adm/messages ...

2007-09-17 Thread Darren J Moffat
UNIX admin wrote:
 It should be possible by attaching a mobile phone to
 the system (via  
 either USB or serial connection) and using something
 like http:// 
 www.gnokii.org/
 
 Hmmm, but the only thing my mobile phone has is the charger connector and 
 audio out for a mic/headphone. So I guess I'd have to get a new phone for 
 this.
 
 Do you know which phones are suitable for the ugen(7D) driver in Solaris? I 
 presume there are no 3rd party Solaris USB drivers for mobile phones.

Better than ugen is proper modem support:

http://opensolaris.org/os/project/wwan/

Already included in SUNWuacm in recent Solaris Express builds.

 From the man page:

  The usbsacm driver is a loadable STREAMS and  USBA  (Solaris
  USB  architecture)-compliant  client  driver  that  provides
  basic asynchronous communication support for USB modems  and
  ISDN  terminal adapters that conform to the Universal Serial
  Bus Communication Device Class Abstract Control  Model  (USB
  CDC ACM) specification. You can download the USB CDC specif-
  ication  from   the   USB   website   at
  http://www.usb.org/developers/devclass_docs/usbcdc11.pdf.
  Supported devices include mobile  phones  and  PCMCIA  cards
  which provide modem function by the usb cable. Serial device
  streams are built with appropriate modules that  are  pushed
  atop the usbsacm driver by the autopush(1M) facility.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] The next really really big thing. Was OT: Sun joins the dark side :-D

2007-09-14 Thread Darren J Moffat
[EMAIL PROTECTED] wrote:
 Giles Turner wrote:
 By the way, these devices will be designed and built in the People's
 Republic of China. Sooner than you and I can possibly imagine. So get
 rolling, because time is short.

 
 Please, anywhere but China. I will take Taiwan but not China. Man,
 they do not understand quality control. My dad visits factories there
 and he is just frustrated that he cannot teach his fellow countrymen
 that quality IS important. He would point out poorly made stuff and
 put them in a reject bin but the minute he turns his back they put
 them back.
   
 Hi,
 I think this is a gross generalization.  I have been going to China 
 fairly frequently over the past 4 years,
 and the people I meet there are concerned about quality.  They learn 
 fast from mistakes, and if it is explained
 to them, they understand quality issues and take aciton.  I think this 
 is especially true with respect to high tech.
 China wants to compete on a global scale, and that means more than mass 
 production of clothing, or rubber bands,  or most of the
 other Made in China things you can buy pretty much anywhere in the 
 rest of the world.  I think people in China
 know that if they want to compete with more intricate, higher margin 
 products, they need to have quality control.
 
 I'm curious, what  kind of factories is your father visiting, where are 
 they, and what do they produce?

Not on this please please, this has nothing what so ever to do with 
OpenSolaris.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] OT: Sun joins the dark side :-D

2007-09-14 Thread Darren J Moffat
UNIX admin wrote:
 And regarding the publicity stunts, have you noticed
 the distinct lack 
 of them lately? Instead, we have solid deals with
 Intel, MS, and IBM.
 
 The only *concrete* thing thing that I noticed so far, was the code 
 contribution made from the intel OpenSolaris team.
 
 I haven't seen anything concrete from IBM yet. Or Microsoft for that matter.

I don't think you should be expecting direct code contribution into 
OpenSolaris from either IBM or Microsoft.

In the particular case of Microsoft OpenSolaris has gained a lot from 
this but it maybe isn't obvious.  There are several projects like 
Winchester, Sparks, Reno specifically targeting making OpenSolaris 
interoperate better in a Windows world of Active Directory.

http://opensolaris.org/os/project/winchester/
http://opensolaris.org/os/project/sparks/
http://opensolaris.org/os/project/reno/

Also a lot of interop work with the core Kerberos has been done too:

http://opensolaris.org/os/community/security/projects/kerberos/

there is more and this is just the tip of the iceberg.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] OT: Sun joins the dark side :-D

2007-09-13 Thread Darren J Moffat
Giles Turner wrote:
 On 9/13/07, Alan Coopersmith [EMAIL PROTECTED] wrote:
 Giles Turner wrote:
 Nice. I hear Solaris 11 is coming out early next year.
 You need to get a better source of info.
 
 
 That was straight from a local Sun CDP Sales Manager, Partner Sales
 Organization, Global Sales  Services guy.

Since the engineering organisations don't know if the next release is 
Solaris 11 or when it is going to be released I'm afraid to say your 
sales person is talking out of turn.  For Solaris (NOT OpenSolaris) it 
is up to the Solaris PAC to choose when Solaris 11 comes out and that 
decision hasn't been made yet.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [Rant] Why does the Download Center not work?

2007-08-30 Thread Darren Dunham
I haven't used it today (so I don't know if the server's wonky), but I always 
just use 'wget' to pull down the images.  Scriptable, automatic retries on 
connection drops, plus I can interrupt it and have it pick up from that point 
later.

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Device name mapping in regards to IDE/SATA adapters?

2007-08-30 Thread Darren Dunham
Are there links for all those numbers in /dev/cfg?  What are they?

-- 
Darren
 
 
This message posted from opensolaris.org
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [Fwd: Re: snv_70 odd behavior]

2007-08-24 Thread Darren J Moffat
Joerg Schilling wrote:
 The goal for this project is to create a wrapper to create a static speudo
 environment for the ON compilation. Note that the ON makefile system is 
 static 
 and single platform while the Schily makefilesystem is dynamic ant platform
 independent. As ON makefiles allow to run something like rpcgen, it is 
 possible to hide the dynamic stuff here.
 
 Once star is in, it would be a task of minutes to integrate more from the
 schily enviroment.

I think you are making it harder for yourself by targeting ON.  Given 
that you have a known working stable build environment SFW is probably a 
better choice.

The only something should be in ON are usually:

1) it exposes a private interface to other things in ON
2) the ON build depends its source - not binaries (ON already
depends on binaries from SFW and other consolidations to build)
3) it depends on a consolidation or project private interface in ON
and an ARC contract isn't a suitable way to coordinate because of
the complexity of a cross consolidation flag day.

Replacement of something currently in ON isn't necessarily a reason. 
For example replacement of tar by star doesn't imply that start needs to 
be in ON just because tar was (unless one or more of the above also apply).

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Star Office/Open Office locks up during a Save As on a smb mount

2007-08-24 Thread Darren J Moffat
Mike Lehman wrote:
 I am running Nevada build 64 and every time I open a document from a samba 
 mount with either Star Office 8 or Open Office 2.2 and perform a Save As it 
 becomes unresponsive and I have to force quit the application. I can click on 
 the save button and it works just fine. I can create files and folders on 
 this share, but every time I run the Save As option it makes the 
 application unresponsive.

How did you do the mount ? Solaris doesn't have smbfs in build 64.

Do you mean that you used Nautilus (the GNOME file manager) to browse to 
  the folder ?  If so I'm not really susprised that StarOffice doesn't 
work that well since that isn't a real filesystem but an illusion of one 
that only really exists in GNOME (which StarOffice isn't part of) 
applications aware of gnome-vfs.

Try copying the file locally and saving it back to the samba server.

Or try the recently announced alpha 2 smbfs bits from here:

http://opensolaris.org/os/project/smbfs/


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] one login at a time for each user?

2007-08-23 Thread Darren J Moffat
Omer Faruk Sen wrote:
 Hi,
 
 Is it possible to limit users to login just one at a time?
 
 I mean user X can login from anywhere (ssh,telnet,X) but when he is 
 logged in any other attempt to login with the username X is prohibited 
 and maybe
 printed out a message like This user is already logged in?

Yes it is, see my blog entry on this topic that I wrote the last time 
this question came up here (I don't expect you to have been able to find 
anything in the mail archives of this list given that the subject so 
often has not indication of the topic under discussion!):

http://blogs.sun.com/darren/entry/limiting_users_to_one_login

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] one login at a time for each user?

2007-08-23 Thread Darren J Moffat
UNIX admin wrote:

 Not that I know of. But this goes against the very principles on which UNIX 
 was built, namely, an OS which can be used by different people, working on 
 physical and virtual terminals, all at the same time.

I disagree, it goes very much with the resource management principles of 
a multi user timesharing system that UNIX is.

Thanks to the advanced resource management tools on OpenSolaris this is 
actually possible: 
http://blogs.sun.com/darren/entry/limiting_users_to_one_login


 Why would you even want to do something like that???

A user can't be in two or more physical places at one time, depending on 
the environment having them logged in at multiple desktops units 
(workstation, xterminal, Sun Ray DTU etc) could be considered a security 
issue.

 You need a single user OS, non-UNIX OS for that. Windows, AmigaOS, older 
 MacOS and the like would be good candidates.

I didn't take it that a single user OS was being asked for.  Instead 
that a multi user system be able to be configured so that a given user 
can login once and only once on a given machine.

Doing it network wide is harder - and in many cases better solved by 
using Sun Ray - but possible (though not with the solution I outlined in 
my blog: http://blogs.sun.com/darren/entry/limiting_users_to_one_login).



-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] What about SIGs for OpenSolaris?

2007-08-23 Thread Darren . Reed
Brandorr wrote:

On 8/22/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
  

What is a SIG?  Special Interest Group.

Why should we consider SIGs for OpenSolaris?



  

At present the only level of abstraction that we have in
the OpenSolaris community is that of communities.  We
have communities for high level concepts (networking)
and for very specific products (zfs) as well as groups of
people (sysadmin).


...
  

What I would like for people to consider is to allow the
idea of SIGs to form within communities.  Why should
a SIG form within a community rather than be a community
in its own right?  Size.  I see SIGs as being composed
of a smaller subset of people.  For example, an approriate
SIG in networking might be ipfilter (;-) or email or routing.



Does IP filter go in Networking or Security?
  


Is the glass half empty or half full?
It has a leg in each group :-(


...

Why isn't there a developer community, that can be broken
down into kernel development, library development, tools,
build environment, etc, as SIGs?



How about a user community as well?
  


Users?  Who are they? O:-)
Don't they just make life difficult for us developers ? ;)

Yesquite obviously they have been forgotten about :(

The makeup of OpenSolaris into communities and the evolution
beyond just communities is something I'd like to invite people
to come and discuss at the OpenSolaris developer summit.

Cheers,
Darren

___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Adobe Acrobat for Solaris x86

2007-08-22 Thread Darren J Moffat
I think the key thing here isn't that we don't have Adobe's reader but 
that there are things lacking in the reader that we do ship (that the 
Adobe reader does have).

Things I am aware of are:

* Fill in forms support
* Markup/Collab - this one got me when someone sent design review 
comments for the zfs-crypto project this way and I couldn't view them 
except on MacOS (and even there it wasn't pretty).

I know there are other things that the Adobe Reader can do that evince 
can't but I think those are the two commonly used ones.

I don't think this is a project for OpenSolaris.org to fix though, it is 
probably best fixed upstream in the envince project.

--
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] What about SIGs for OpenSolaris?

2007-08-22 Thread Darren . Reed
What is a SIG?  Special Interest Group.

Why should we consider SIGs for OpenSolaris?

At present the only level of abstraction that we have in
the OpenSolaris community is that of communities.  We
have communities for high level concepts (networking)
and for very specific products (zfs) as well as groups of
people (sysadmin).

What I would like for people to consider is to allow the
idea of SIGs to form within communities.  Why should
a SIG form within a community rather than be a community
in its own right?  Size.  I see SIGs as being composed
of a smaller subset of people.  For example, an approriate
SIG in networking might be ipfilter (;-) or email or routing.

And in formalising the role of SIGs in OpenSolaris, I'd like
to suggest that people take pause to consider the current
structure of OpenSolaris into the various communities and
ask themselves if it is correct or is it just the only way to
map OpenSolaris into our existing structure?

In short, the current formation of OpenSolaris has largely
been to fit various projects inside Sun and not to model
groups of interested people.

For example, why shouldn't SMF be a SIG inside the
sysadmin community, as afterall, SMF is well and truely
in the province of system administration.

Or where would someone go that wanted to work on VFS
and/or the interfaces that support filesystems in OpenSolaris?
Shouldn't there be a filesystem community that brings together
ZFS, UFS, CIFS, and many of the other filesystems as SIGs
inside it?

Why isn't there a developer community, that can be broken
down into kernel development, library development, tools,
build environment, etc, as SIGs?

Darren

___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] An Open Letter to the Solaris Community.

2007-08-20 Thread Darren J Moffat
Joerg Schilling wrote:
 W. Wayne Liauh [EMAIL PROTECTED] wrote:
 
 It'd be great if we could run VMWare with Solaris as
 the guest OS.

 You mean with Solaris as a host OS?
 
 For me, only Solaris as host OS would be of interest
 
 Does anyone have any experience on xen? thanks.
 
 Did someone use Xen and is it possible to run MS-WIN on case that 
 the host platform supports Pacifica or Vanderbilt?

Technically yes it is possible and I've seen it done.  However there are 
licensing issues (that are not appropriate for *any* @opensolaris.org 
alias) depending on which version/edition of a windows operating system 
you have.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


[osol-discuss] Proposal for a new community...

2007-08-15 Thread Darren . Reed
I'd like to see a new community added to the opensolaris that
supports developers of software that runs on top of opensolaris.

Why do we need that?

Because not every application that a developer wants to build
will fit into one of our buckets.  We need a catch-all that can be
a home to people who build specialised applications that do not
fit into any existing category.

Darren

___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] How to connect 2 laptop

2007-08-14 Thread Darren J Moffat
Dennis wrote:
 AFAIK Bluetooth is not yet supported in Opensolaris.

Correct, and the project that was started to do it had stalled due to 
lack of resources available to proceed.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] portmap(rpc bind) service configuration on solaris

2007-08-14 Thread Darren J Moffat
RAJESH wrote:
 wanted to know if there is a way to configure manually the port number which 
 is assigned by portmapper or rpcbind service on solaris?

Why would you want to do that ?

Exactly what problem are you trying to solve by doing this ?
What RPC service is this for ?

Generally the point of rpcbind is to avoid needing fixed assignments.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] An Open Letter to the Solaris Community.

2007-08-10 Thread Darren J Moffat
S h i v wrote:

 *I* cannot, because I am not the owner of the copyright. Point was
 about mixing CDDL  GPL and why it *is a problem*
 Sane thing is to follow legal advice by the qualified. It seems to
 have its good share of problems and need not be done. There is no
 compelling need either.

Extract of an email from Linus on 3 Dec 2003 to linux-kernel

L Historically, there's been things like the original Andrew filesystem
L module: a standard filesystem that really wasn't written for Linux in the
L first place, and just implements a UNIX filesystem. Is that derived just
L because it got ported to Linux that had a reasonably similar VFS 
interface
L to what other UNIXes did? Personally, I didn't feel that I could make 
that
L judgment call. Maybe it was, maybe it wasn't, but it clearly is a gray
L area.
 
L Personally, I think that case wasn't a derived work, and I was willing to
L tell the AFS guys so.

OpenAFS runs on Linux and it is NOT GPL it is covered under the IBM 
Public License.

OpenAFS isn't part of the Linux kernel source it just hooks into the VFS 
layer.

I personally believe that a ZFS port could very likley be done under the 
same terms, but thats my interpretation of what Linus has said.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] An Open Letter to the Solaris Community.

2007-08-09 Thread Darren J Moffat
Kaiwai Gardiner wrote:
 On Thu, 2007-08-09 at 11:38 +0100, Darren J Moffat wrote:
 Kaiwai Gardiner wrote:
 Just a follow up question; when will acpi appear in OpenSolaris by
 default?
 ACPI already is[1] it appeared as part of newboot on x86 and is 
 regularly updated to the latest Intel reference code.  However I suspect 
 you don't really mean ACPI but some bit of functionality that you 
 believe uses ACPI.  So what do you really mean here.  Often when people 
 say that (I was confused initially as well) they mean one or more of the 
 following: battery info[2], suspend/resume to ram/disk, lid events,


 Power Management, when I go prtconf, 

and what you do mean by power management it is a very broad and vauge 
term.  Do you mean varying the CPU speed/power or something else ?

 acpi (driver not attached) 
 
 along with:
 
 cpus, instance #0
cpu (driver not attached)
cpu (driver not attached)
 
 My laptop has power management which Linux and Windows supports, but B70
 complains about the lack of _PSS.

without knowing exactly what the specs and make/model of your laptop are 
  I can't say if that is expected or not.

This is probably best moved to laptop-discuss where there are likely 
more focused people who can help you.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] [driver-discuss] Sound Blaster Live! in ONNV

2007-08-08 Thread Darren J Moffat
Vladimir Kotal wrote:
 James Carlson wrote:
 
 snip
 
 The one thing I'd ask about here is whether the project team is aware
 of the OSS integration project (that will likely be obsoleting the old
 SADA bits), and if this project conflicts with or is obsoleted by that
 one.  If so, then coordinating with them would be helpful.
 
 I didn't know that someone intends to port OSS bits to OpenSolaris until 
 now.
 
 Could someone please point me to the project page or provide more info ? 

All I've been able externally that I could find is the ARC one pager: 
http://opensolaris.org/os/community/arc/caselog/2007/238/

I'd suggest contactin Margot Miller - she is listed as the submitter for 
the ARC case.

  If the OSS bits (including working SBLive! driver) are going to be
 integrated into Nevada in the foreseeable future then there is no point 
 in integrating SADA based driver.

According to the list on opensound.com  the Creative SBLive! is 
supported on x86 but not on SPARC:

http://manuals.opensound.com/devlists/Solaris-i386.html
http://manuals.opensound.com/devlists/Solaris-sparc.html


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] COBOL?

2007-08-07 Thread Darren J Moffat
Gerard Nualla wrote:
 Hi, I am wondering if we have COBOL in OpenSolaris (or any Solaris 
 distribution).

Are you looking for a COBOL compiler or for source written in the COBOL 
language as part of the OpenSolaris sources ?

BTW you won't find either of those on OpenSolaris.org.

Sun used to ship a COBOL compiler as part of the compiler bundle but I 
don't believe that is included any more.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Compile errors during onnv-gate

2007-08-06 Thread Darren J Moffat
Patrick Ale wrote:
 Hi all,
 
 And now for something completely different.
 
 I pulled the ONNV source from the mercurial (spelling) repository.
 I get the following errors in the mail_msg: http://pastebin.com/m776bbbf0
 
 The end result after 8 hour compilation is... SILK! ACK! I don't see
 any cpio archives in the archives directory, and I think it's cause of
 the error shown in the mail_msg.
 
 Can someone give me a guide line as of what I am doing wrong or how I
 can fix it?
 
 I am trying to compile on an Athlon 2400XP+ with Sun Studio Pro 12,
 which is shipped by default with Nevada 69.

You MUST use Studio 11 at this time.  Use of Studio 12 is not known to 
produce working and usable output from the build.


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] mail from opensolaris.org

2007-08-03 Thread Darren J Moffat
[EMAIL PROTECTED] wrote:
 Hi,
 I notice that some people (all of whom, I believe, work for sun), have 
 an opensolaris.org email address.  So, does opensolaris.org
 support email accounts?  If so, how do I get one?

The work for Sun is a complete Red herring.

The original email from Stephen Lau is this one:

http://mail.opensolaris.org/pipermail/contributors/2007-July.txt


-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Regarding CDDL - using ufs code

2007-08-03 Thread Darren J Moffat
amol wrote:
 Hi,
 
 I want to use the struct direct datastructure from the file ufs_fsdir.h - 
 just that
 data structure in a proprietary code. I read the CDDL  CDDL FAQ and i know I 
 am allowed to do that, but I am not sure how much source code I need to 
 release under CDDL.
 
 Am I allowed to do the following?:
 - take the data structure
 - save it in a .h file, which will have the required license text present.
 - make just this .h file open source and leave the .c files that use the data 
 structure closed-source.

This list is not for legal advice.  You are creating a derivative work 
and should seek qualified formal legal advice.

What you have said sounds correct to me based on my understanding of the 
CDDL.  However I am not a qualified legal professional and this is not 
legal advice.

-- 
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Indiana Wish List

2007-08-02 Thread Darren J Moffat
Kaiwai Gardiner wrote:
 Small problem - if you change your wireless key on the router NWAM fails to 
 come back to say that the password has failed and requires re-entering it.

Have you logged a bug on that or discussed it with the team on 
nwam-discuss ?

--
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Indiana Wish List

2007-08-02 Thread Darren J Moffat
Why should things like Azureus be preinstalled on OpenSolaris 
distributions when they aren't on Windows ? That just isn't a fair 
standard to hold OpenSolaris distributions to.  You had to down load a 
bittorrent client and Photoshop etc initially on Windows.

--
Darren J Moffat
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


Re: [osol-discuss] Indiana Wish List

2007-08-01 Thread Darren J Moffat
Orvar Korvar wrote:
 For a Windows user, these things are essential for a successfull switch:
 
 -chat, msn

Pidgin, nee GAIM.

 -web cam

Works to some extent already with Ekiga.

 -photoshop-esque program.

GIMP - already in Solaris Express.

 -file sharing; bittorrent and DC++. Important.

bittorrent and Azurus both work just fine.

 -office

OpenOffice.org or its peer StarOffice.

 -an easy internet setup (maybe wireless)

See the NWAM project on opensolaris.org, it doesn't get much easier than 
automagic :-)
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org


  1   2   3   4   5   6   7   >