Re: ioctl call freebsd < 7.2 in jail

2009-12-18 Thread Axel Scheepers
"Bjoern A. Zeeb"  writes:

> What I was thinking was this commit to head and the PR mentioned
> there:
> http://svn.freebsd.org/viewvc/base?view=revision&revision=186948

Ah I see, thanks!

> Note that 7.1 or earlier won;t have the prison_check_ip4() function,
> different byte order requirements etc (and not IPv6 support).
> It's s pretty short thing but has to be "converted" correctly.
>
> I might be able to do that later today.

Noted, but don't worry, let me see if I can fiddle it out myself.

Thanks for this very quick helpfull response,
Kind regards,
-- 



Axel L.C.M.C. Scheepers
Systems & Network Engineer

axel.scheep...@nl.clara.net

Tel +31 40 2393393
Fax +31 40 2393310
Mob +31 6 46382759

Claranet Benelux BV
Science park 5630
5692 EN Son
Nederland
http://www.nl.clara.net


pgpNsPIYkJBdV.pgp
Description: PGP signature


Re: ioctl call freebsd < 7.2 in jail

2009-12-18 Thread Bjoern A. Zeeb

On Fri, 18 Dec 2009, Axel Scheepers wrote:

hi,


"Bjoern A. Zeeb"  writes:


I think I remember the patch; I guess it was the "samba patch".  I can
extract it for you; not sure if it'll work easily w/o the other
infrastructure but I'll see what I can do.

I can see no chance that it'll ever make it into 7.1 as an Errata
Notice though, so you would have to keep patching your system
yourself.



Hi Bjoern,

I know it won't make it as an errata, that's not a problem. I'm looking
for a way to fix the problem without having to upgrade all our virtual
hosts to 7.2. The machines in question run a mix of freebsd versions, if
it's not to much trouble it's highly appreciated if you can send me some
more information about the patch you mention. Is this the multi-ip jail
patch you talked about in
http://lists.freebsd.org/pipermail/freebsd-jail/2008-October/000488.html


well, I think that was the earlier workaround; the multi-IP jail
includes one of the patches that actually fix the problem; but the fix
for this case really just is a fraction of the change.

What I was thinking was this commit to head and the PR mentioned
there:
http://svn.freebsd.org/viewvc/base?view=revision&revision=186948

Note that 7.1 or earlier won;t have the prison_check_ip4() function,
different byte order requirements etc (and not IPv6 support).
It's s pretty short thing but has to be "converted" correctly.

I might be able to do that later today.

/bz

--
Bjoern A. Zeeb It will not break if you know what you are doing.
___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"


Re: ioctl call freebsd < 7.2 in jail

2009-12-18 Thread Axel Scheepers
"Bjoern A. Zeeb"  writes:

> I think I remember the patch; I guess it was the "samba patch".  I can
> extract it for you; not sure if it'll work easily w/o the other
> infrastructure but I'll see what I can do.
>
> I can see no chance that it'll ever make it into 7.1 as an Errata
> Notice though, so you would have to keep patching your system
> yourself.


Hi Bjoern,

I know it won't make it as an errata, that's not a problem. I'm looking
for a way to fix the problem without having to upgrade all our virtual
hosts to 7.2. The machines in question run a mix of freebsd versions, if
it's not to much trouble it's highly appreciated if you can send me some
more information about the patch you mention. Is this the multi-ip jail
patch you talked about in
http://lists.freebsd.org/pipermail/freebsd-jail/2008-October/000488.html

Thanks,
Kind regards,
-- 



Axel L.C.M.C. Scheepers
Systems & Network Engineer

axel.scheep...@nl.clara.net

Tel +31 40 2393393
Fax +31 40 2393310
Mob +31 6 46382759

Claranet Benelux BV
Science park 5630
5692 EN Son
Nederland
http://www.nl.clara.net


pgp2CFfG05AbE.pgp
Description: PGP signature


Re: ioctl call freebsd < 7.2 in jail

2009-12-18 Thread Bjoern A. Zeeb

On Fri, 18 Dec 2009, Axel Scheepers wrote:

Hi,


We run Direct Admin in a jailed setup on FreeBSD 7.2 (last supported
release for Direct Admin). We have a problem retrieving the correct ip
address of the jail which makes Direct Admin misbehave.

..

Would it be trivial to backport just the changes which changed this
behaviour and if so how can I get a patch for the changes to
7.2-RELEASE?

I've read that under FreeBSD it's better to use getifaddrs(3) but we
can't change the ioctl call.


I think I remember the patch; I guess it was the "samba patch".  I can
extract it for you; not sure if it'll work easily w/o the other
infrastructure but I'll see what I can do.

I can see no chance that it'll ever make it into 7.1 as an Errata
Notice though, so you would have to keep patching your system
yourself.

/bz

--
Bjoern A. Zeeb It will not break if you know what you are doing.
___
freebsd-jail@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "freebsd-jail-unsubscr...@freebsd.org"


ioctl call freebsd < 7.2 in jail

2009-12-18 Thread Axel Scheepers
Hi list,

We run Direct Admin in a jailed setup on FreeBSD 7.2 (last supported
release for Direct Admin). We have a problem retrieving the correct ip
address of the jail which makes Direct Admin misbehave.

I've written a small c program which does an ioctl call to get the ip
address for a given interface which I attached. If I run this on FreeBSD
<7.2 in a jail it will give me the ip address of the master server. On
FreeBSD 7.2> it gives me the ip address of the jail (as Direct Admin
expects).

This is what happens:

fmh236# gcc ioctl.c 
fmh236# ./a.out bce0
found ip address 212.61.32.234 on interface bce0
 ^
fmh236# ifconfig bce0 | grep inet
inet 212.61.32.236 netmask 0x broadcast 212.61.32.236
 ^



On FreeBSD 7.2> (test):

mh008# jail /home/via/jail-test test 212.61.33.7 /bin/csh
%./a.out bce0
found ip address 212.61.33.7 on interface bce0
%ifconfig bce0 | grep inet
inet 212.61.33.7 netmask 0x broadcast 212.61.33.7


Would it be trivial to backport just the changes which changed this
behaviour and if so how can I get a patch for the changes to
7.2-RELEASE?

I've read that under FreeBSD it's better to use getifaddrs(3) but we
can't change the ioctl call.

Kind regards,
-- 



Axel L.C.M.C. Scheepers
Systems & Network Engineer

axel.scheep...@nl.clara.net

Tel +31 40 2393393
Fax +31 40 2393310
Mob +31 6 46382759

Claranet Benelux BV
Science park 5630
5692 EN Son
Nederland
http://www.nl.clara.net


ioctl.c
Description: ioctl.c


pgpIuXon2P96m.pgp
Description: PGP signature