Re: Intel S3210SHLC motherboard and FreeBSD 7.0

2008-10-05 Thread Carl

Jeremy Chadwick wrote:

On Fri, Oct 03, 2008 at 01:37:56AM -0700, Jeremy Chadwick wrote:
2) BIOS: Thermal monitoring 


I should be more precise: I'm referring to things like fan speed
auto-slowdown or PWM.  These boards often offer numerous methods of
throttling fans and other features.


I *did* make some BIOS setting changes within the time frame of the 
unexpected reset-equals-power-cycle events, but I didn't notice whether 
there was a correlation.


As regards getting USB flash thumb drives to boot, a new thumb drive, 
lots of reading and experimenting with obscure applications, and I've 
successfully got Damn Small Linux to boot with the aid of UNetbootin. 
FreeBSD 7.0 still won't boot, but I appear to have stumbled over a 
UNetbootin bug that FreeBSD probably can't be blamed for:


  https://bugs.launchpad.net/unetbootin/+bug/272219

That unfortunately leaves me still wondering whether the motherboard 
and/or that SATA DVD drive are compatible with FreeBSD 7.0 or not.


Can anyone point me to instructions on how to create a FreeBSD 7.0 
install USB thumb drive without the aid of UNetbootin? I've found bits 
and pieces on the 'net, but nothing complete. Surprising, actually, when 
you think about it.


No one else out there with experience combining the Intel S3210SHLC 
motherboard and FreeBSD?


Carl / K0802647
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: make buildkernel error

2008-10-05 Thread Unga
--- On Sat, 10/4/08, Unga [EMAIL PROTECTED] wrote:

 I'm getting following compile error for
 /usr/src/sys/i386/i386/genassym.c :
 cc1: error: unrecognized command line option
 -mno-align-long-strings
 cc1: error: unrecognized command line option
 -fformat-extensions
 *** Error code 1
 

I found in /usr/src/gnu/usr.bin/cc/cc_tools/i386-freebsd.opt:
mno-align-long-strings
Target RejectNegative Report Mask(NO_ALIGN_LONG_STRINGS)
Do not align long strings specially

What does FreeBSD mean by Do not align long strings specially?

Best regards
Unga




  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Cannot create custom FreeBSD 7.0 install CD for serial console

2008-10-05 Thread Carl

On Thu Oct 2 06:59:47 UTC 2008 Jonathan McKeown wrote:
On a system running 6.2-RELEASE, with a 6.2-RELEASE Disc 1 in the CD drive but 
not mounted:


mkdir serialcd

tar xvfC /dev/acd0 serialcd

These two commands created a directory tree in serialcd containing most of the 
contents of the CD. There was a ``tar ignoring out-of-order file'' error, and 
when I mounted the CD and ran


diff -qr  /cdrom serialcd

it reported that RELNOTES.TXT differed - in fact the version in the serialcd 
directory turned out to have zero length. [I suspect you could probably do 
this comparison quicker with mtree, and I never did bother to fix it or find 
out why it was happening]


Thanks, Jonathan. So I've redone the process again. I'm working from the 
original ISO image instead of a physical CD copy of it, so I utilize 
step 4 from Jeremy Chadwick's document 
(http://jdc.parodius.com/freebsd/pxeboot_serial_install.html) to make 
the initial directory tree. There are no tar error messages.



I edited serialcd/boot/loader.conf to include the line

console=comconsole


I did exactly that, although I also tried adding the following lines 
instead on a separate attempt:


 boot_multicons=NO
 boot_serial=YES
 comconsole_speed=115200
 console=comconsole


I then ran

mkisofs -J -r -b boot/cdboot -no-emul-boot -o serialcd.iso serialcd

and got an ISO image, serial.iso, which is about 600MB.


Your switches are a little different from my original procedure, so this 
time I used yours.


The only drawback with this method is that the serial console only cuts in 
just before the boot menu. I suspect that if you wanted to have a serial 
console for every stage of the boot you would need to mess about with the 
ramdisk image on the CD.


So creating a boot.config in the root of the CD image cannot be used the 
way it is for a hard drive installation in order to solve that problem?


Anyway, I didn't create a boot.config this time, so I should have ended 
up with a 7.0 equivalent of your 6.2 serialcd.iso, which I then burned 
and tried. End result? Abject failure again. All boot stages still use 
the internal console.


Just after Loading /boot/defaults/loader.conf appears, there is a 
*very* long pause added as compared with the unmodified install CD. 
Eventually it resumes. Don't know why that's happening.


Carl / K0802647
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Utility to extract iso files without burning

2008-10-05 Thread Edwin Groothuis
Use tar. Simple FreeBSD tar, it's good for everything.

-- 
Edwin Groothuis Website: http://www.mavetju.org/
[EMAIL PROTECTED]   Weblog:  http://www.mavetju.org/weblog/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Can't add new 1TB disk in FreeBSD 6.1

2008-10-05 Thread Wojciech Puchar



I tried using fdisk first, same problem, won't let me write to the disk.


Do you will use the entire disk in one partition ? If so, just do:
newfs /dev/ad4


yes you can. i actually do this
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Canon Pixma iP4500 - problem with colours

2008-10-05 Thread WATANABE Kazuhiro
Hello,

At Wed, 1 Oct 2008 15:46:29 +0100,
Mike Clarke wrote:
 I've just installed a Canon Pixma iP4500 on a 6.3 system using CUPS and 
 gutenprint. Black printing is fine but I've got problems with colours. 
 The colour wheel on the CUPS test page comes out as a psychedelic 
 collection of brightly coloured rings. If I print from gimp then the 
 correct colours appear but they are very dark and muddy. The colours 
 start to look a bit more reasonable from the gimp if I push the gamma 
 value up to 2.
 
 This isn't a physical problem with the printer, I get good results when 
 printing from Windows.
 
 Should I be able to get correct colour rendering out of the box or do 
 I have to fiddle about with the multitude of output control adjustments 
 available on the CUPS admin panel?
 
 Or should I be using something other than CUPS, that's what I've always 
 used so far but I'm happy to try alternatives if necessary.

I've used Canon MP810 with CUPS and IJ Printer Driver for Linux
(supplied by Canon) on FreeBSD.

Canon doesn't supply the printer driver for MP810, but I've been able
to use the printer with the driver for MP610.  These printer specs are
very similar.

I don't use the printer from FreeBSD so many time, but printing an web
page from firefox and the Print Test Page from http://localhost:631/
are fine.  That color print has no defferences between the Windows's
one.


So you will be able to use Canon iP4500 (and MP610/MP520/iP3500) with
the procedure below [1].


  1. Installng necessary ports

   1.1. For the PS to Canon IJ filter

print/cups
emulators/linux_base-fc4
graphics/linux-jpeg
graphics/linux-png
graphics/linux-tiff
archivers/rpm2cpio

   1.2. For compiling the Canon CUPS filter

devel/autotools
devel/gmake
shells/bash

  2. Read /usr/ports/print/cups-base/pkg-message, and set some
 necessary settings.

  3. Set the following lines to /etc/rc.conf:

linux_enable=YES
cupsd_enable=YES

  4. Download the IJ Printer Driver Ver.2.80 for Linux

The following two archives are required:

 IJ Printer Driver Ver. 2.80 for Linux (rpm Package for iP4500 series) 
 cnijfilter-ip4500series-2.80-1.i386.rpm 

 IJ Printer Driver Ver. 2.80 for Linux (Source file)
 cnijfilter-common-2.80-1.tar.gz

These archives are available at the following sites:

 Canon Australia - Drivers
 http://www.canon.com.au/drivers/

 Canon Singapore - Support  Download Search
 http://support-asia.canon-asia.com/

 Canon in Japan - Software Download - Other OSes (in Japanese)
 http://cweb.canon.jp/drv-upd/bj/other.html#linux

  5. Installing the binary package for iP4500, and a printing test

   5.1. Install

$ mkdir ip4500  # working directory
$ cd ip4500
$ rpm2cpio /PATH/TO/cnijfilter-ip4500series-2.80-1.i386.rpm | cpio -ivd
$ su
Password:
# cp -Ri ./usr /compat/linux/
# /compat/linux/sbin/ldconfig -r /compat/linux

   5.2. Printing test (ASCII text)

It uses a2ps (ports/print/a2ps-a4).

$ su
Password:
# a2ps -B --borders=no ascii-text.txt | \
gs -q -r600 -dSAFER -dNOPAUSE -dBATCH -sDEVICE=ppmraw -sOutputFile=- - | \
/compat/linux/usr/local/bin/cifip4500 --imageres 600 --media plain  \
/dev/ulpt0

  6. Compiling the Canon CUPS filter, and a printing test

   6.1. Compile

Extract the common source archive, and apply a patch:

 http://homepage2.nifty.com/dumb_show/unix/cnijfilter-common-2.80-freebsd.diff

The patch file is not my original.  I got a patch for Canon Inkjet
Print Filter Ver.2.60 for Linux from http://tabochan.f2g.net/pixus.html
(currently the site is down) and modified it for 2.70 and 2.80.

Then compile and install the necessary (not all) program.

$ mkdir common  # working directory
$ cd common
$ tar zxvf /PATH/TO/cnijfilter-common-2.80-1.tar.gz
$ patch  /PATH/TO/cnijfilter-common-2.80-freebsd.diff
$ cd cnijfilter-common-2.80/libs
$ ./autogen.sh
$ gmake
$ cd ../pstocanonij
$ ./autogen.sh
$ gmake
$ cd ../
$ su
Password:
# cp -i pstocanonij/filter/pstocanonij /usr/local/libexec/cups/filter/
# cp -i ppd/*.ppd /usr/local/share/cups/model/

   6.2. Printing test

Register the printer.

$ su
Password:
# /usr/local/etc/rc.d/cupsd restart
# lpadmin -p PIXUSIP4500 -m canonip4500.ppd -v usb:/dev/ulpt0 -E

Finally visit http://localhost:631/ with an web browser, and click
Printers - Print Test Page.


[1] The original text was posted to the FreeBSD Japansese mailing list.
http://www.mail-archive.com/[EMAIL PROTECTED]/msg02592.html
---
WATANABE Kazuhiro ([EMAIL PROTECTED])
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: HP DL servers

2008-10-05 Thread H.fazaeli


HP servers usually have NICs with broadcom or intel chipsets which are 
recognized

as bge and em under freebsd and work great.

We have the following configurations and they work fine:

- freebsd 6.3 on dl320G5 with on-board broadcom network chipset and SATA 
HDDs. We had

 problems with hardware RAID and used geom to impl. RAID functionality.

- freebsd 6.3 on dl380G5 with SAS HDDs. Hardware RAID controller is 
recognized by 6.3

 and works.


Ludovit Koren wrote:

Hi,

I would like to buy HP servers DL 320 G5p or DL 360 G5p. I googled but
did not find clear answer if the NICs and disk controllers are
supported in FreeBSD 7.x. I read about some problems with NIC in DL
360 but it was not actual and I am not sure about disk controller
in DL 320.

Any personal recommendations and experience with the servers are
welcomed. 


Thank you very much in advance.

Regards,

lk
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  


--


Best regards.

Hooman Fazaeli [EMAIL PROTECTED]
Sepehr S. T. Co. Ltd.

Web: http://www.sepehrs.com
Tel: (9821)88975701-2
Fax: (9821)88983352




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't add new 1TB disk in FreeBSD 6.1

2008-10-05 Thread Jeremy Chadwick
On Sun, Oct 05, 2008 at 11:07:58AM +0200, Wojciech Puchar wrote:


 I tried using fdisk first, same problem, won't let me write to the disk.

 Do you will use the entire disk in one partition ? If so, just do:
 newfs /dev/ad4

 yes you can. i actually do this

Isn't this what's called Dangerously Dedicated mode, and is considered
very risky behaviour on FreeBSD nowadays?

I would be wary of doing it that way.  Using slices is the preferred
method, e.g. newfs /dev/ad4s1a.

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't add new 1TB disk in FreeBSD 6.1

2008-10-05 Thread Jeremy Chadwick
On Sun, Oct 05, 2008 at 03:42:53AM -0700, Jeremy Chadwick wrote:
 On Sun, Oct 05, 2008 at 11:07:58AM +0200, Wojciech Puchar wrote:
 
 
  I tried using fdisk first, same problem, won't let me write to the disk.
 
  Do you will use the entire disk in one partition ? If so, just do:
  newfs /dev/ad4
 
  yes you can. i actually do this
 
 Isn't this what's called Dangerously Dedicated mode, and is considered
 very risky behaviour on FreeBSD nowadays?
 
 I would be wary of doing it that way.  Using slices is the preferred
 method, e.g. newfs /dev/ad4s1a.

Specific details are covered in the FAQ:

http://www.freebsd.org/doc/en/books/faq/disks.html#DANGEROUSLY-DEDICATED

The bottom line should be obvious: do not use this method.

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems moving my jails (mv: Operation not permitted)

2008-10-05 Thread Redd Vinylene
Yes, this worked perfectly. Thank y'all so much. May this post be of
help to others in the future as well.

-- 
http://www.home.no/reddvinylene
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Canon Pixma iP4500 - problem with colours

2008-10-05 Thread Mike Clarke
On Friday 03 October 2008, Roland Smith wrote:

 I can't spot anything suspicous in that. Maybe you should try a
 gutenprint mailing-list/forum.

I've tried a couple of gutenprint and CUPS lists but no responses yet 
apart from a recommendation to use Linux Turboprint.

Out of curiosity I've tried the Pixma IP4500 on a Linux system (Fedora 
fc9) but the supplied foomatic driver just spat out blank pages. 
Turboprint produced excellent results but there's no FreeBSD version 
and I expect getting it to run under Linux emulation would be difficult 
or even impossible.

-- 
Mike Clarke
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems moving my jails (mv: Operation not permitted)

2008-10-05 Thread Miroslav Lachman

Ian Smith wrote:


On Sat, 4 Oct 2008, Redd Vinylene wrote:
  On Sat, Oct 4, 2008 at 9:22 PM, George Hartzell [EMAIL PROTECTED] wrote:
   Redd Vinylene writes:
 On Sat, Oct 4, 2008 at 9:02 PM, George Hartzell [EMAIL PROTECTED] 
wrote:
 
  If you do an ls -lo /home/jail/box/usr/bin/chpass, you'll probably see
  the schg flag set.  Man chflags for more info and instructions on how
  to unset it
 
  g.
 

 Yes:

 -r-sr-xr-x  6 root  wheel  schg 18468 Aug  2 19:47 
/usr/jail/box/usr/bin/chpass

 So I'd simply have to chflags noschg /usr/jail/box/usr/bin/chpass
 and then cp /usr/jail/box/usr/bin/chpass
 /home/jail/box/usr/bin/chpass?
  
   I think that you ought to be able to cp it as is.  You're just not
   allowed to change the original (e.g. remove it), which is why your mv
   and rm failed.
  
   g.
  
  
  I've been told that changing flags might seriously mess things up. Is

  there any way to copy the remaining files from /usr/jail into
  /home/jail, or do I have to rebuild everything from scratch?

Having read the thread to date, I reckon you should:

 a) find(1) all schg files in your jails (was chpass the only one?)
 b) clear the schg flag on any such found as above (-R if you like)
 c) use mv as you originally intended (if they're still there :)
 d) chflags schg on all files that were originally set that way.

If you do use cp instead of mv, make sure to use cp -p to preserve 
each file's owner/group/permissions/datestamp.


 e) make sure any and all symlinks still point to the right file/s.

Personally I'd use cp -pR rather than mv in case I stuffed it up :) but 
then being perhaps overcautious I'd have started off with a 'ls -lR 
/usr/jail  listfile' (if I hadn't made a backup tar) to at least have a 
full list of what was where, with what user/perms etc ..


Also read cp(1) re -R flag carefully .. if there are any hard linked 
files, as there may well be, then using tar to move these would be 
the safest bet anyway - plus you'd have a backup .. next time anyway :)


Since it just failed to mv some files, you shouldn't need to rebuild if 
you can mv those files and reset their flags/permissions correctly.


Yes, there are hardlinks, so the best way to move all files with 
preserving flags, permissions, links etc is something like this:

   [copy jails by tar (or use cpio if you prefer)]
tar -cf - -C /usr/jail . | tar -xpf - -C /home/jail
   [remove flags from old jail files]
chflags -R noschg /usr/jail
   [remove old jail files]
rm -r /usr/jail

But it applies only in case before you use chflags -R noschg on original 
files (as you post earlier - now you do not have flags anymore)


Another way is to use getfacl/setfacl or mtree to get backup of original 
files permissions and restore them later.


Miroslav Lachman
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


CARP issue with 2 Masters

2008-10-05 Thread frank . cam
Hi

I have CARP running on a master and a slave server and for some unknown reason 
the slave continues to classify itself as a master, even though the advskew is 
higher than on the master. 
It appears that queries sent to the CARP ip address go to the master 50% of the 
time and the slave 50% of the time when both servers are up. This plays havoc 
with my databases as I synchronise them asynchronously.

When I take the carp interface down on the slave using 'ifconfig carp0 down  
ifconfig carp0 up' it lists it's status as 'backup' for about 10 seconds and 
then goes back to 'master'.


Both servers run identical versions of FreeBSD 7.0 with all the same installed 
ports on identical hardware.

The kernel has the following differences from the standard amd64 kernel:
ident   DBKERNEL
options SCHED_ULE
device  carp

The standard kernel includes options  PREEMPTION which is mentioned as a 
possible problem in the handbook with the slave not relinquishing the ip 
address when the master comes back, but that's not exactly what I'm getting 
here.


Here are the relevant setup details for the boxes.

MASTER
uname -a
FreeBSD dbmaster.xxx.net 7.0-RELEASE-p5 FreeBSD 7.0-RELEASE-p5 #1: Fri Oct  3 
13:54:35 EST 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/DBKERNEL  amd64

/etc/rc.conf
ifconfig_em2=inet 192.168.2.11  netmask 255.255.255.248
cloned_interfaces=carp0
ifconfig_carp0=vhid 1 pass mypassword 192.168.2.10/29

ifconfig
em2: flags=8943UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST metric 0 mtu 
1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:14:22:20:b0:dc
inet 192.168.2.11 netmask 0xfff8 broadcast 192.168.2.15
media: Ethernet autoselect (100baseTX full-duplex)
status: active
carp0: flags=49UP,LOOPBACK,RUNNING metric 0 mtu 1500
inet 192.168.2.10 netmask 0xfff8
carp: MASTER vhid 1 advbase 1 advskew 0


SLAVE
uname -a
FreeBSD dbslave.xxx.net 7.0-RELEASE-p5 FreeBSD 7.0-RELEASE-p5 #1: Fri Oct  3 
13:54:42 EST 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/DBKERNEL  amd64

/etc/rc.conf
ifconfig_em2=inet 192.168.2.12  netmask 255.255.255.248
cloned_interfaces=carp0
ifconfig_carp0=vhid 1 advskew 200 pass mypassword 192.168.2.10/29

ifconfig
em2: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
options=9bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM
ether 00:14:22:1d:15:d0
inet 192.168.2.12 netmask 0xfff8 broadcast 192.168.2.15
media: Ethernet autoselect (100baseTX full-duplex)
status: active
carp0: flags=49UP,LOOPBACK,RUNNING metric 0 mtu 1500
inet 192.168.2.10 netmask 0xfff8
carp: MASTER vhid 1 advbase 1 advskew 200

With the advskew on the 'slave', I've tried values of 100, 200, 230, 240 and 
250 with no difference in performance.

I've also tried ifconfig_carp0=vhid 1 advskew 200 pass mypassword backup 
192.168.2.10/29 on the slave but this simply locks it into INIT.


I can't figure out if I missed a step in the documentation, made a silly 
mistake in my setup, or found a bug. Any help would be greatly appreciated.

Thank you





Come and visit Web Prophets Website at http://www.webprophets.net.au

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Cannot create custom FreeBSD 7.0 install CD for serial console

2008-10-05 Thread Jeremy Chadwick
On Sun, Oct 05, 2008 at 01:26:37AM -0700, Carl wrote:
 On Thu Oct 2 06:59:47 UTC 2008 Jonathan McKeown wrote:
 On a system running 6.2-RELEASE, with a 6.2-RELEASE Disc 1 in the CD 
 drive but not mounted:

 mkdir serialcd

 tar xvfC /dev/acd0 serialcd

 These two commands created a directory tree in serialcd containing most 
 of the contents of the CD. There was a ``tar ignoring out-of-order 
 file'' error, and when I mounted the CD and ran

 diff -qr  /cdrom serialcd

 it reported that RELNOTES.TXT differed - in fact the version in the 
 serialcd directory turned out to have zero length. [I suspect you could 
 probably do this comparison quicker with mtree, and I never did bother 
 to fix it or find out why it was happening]

 Thanks, Jonathan. So I've redone the process again. I'm working from the  
 original ISO image instead of a physical CD copy of it, so I utilize  
 step 4 from Jeremy Chadwick's document  
 (http://jdc.parodius.com/freebsd/pxeboot_serial_install.html) to make  
 the initial directory tree. There are no tar error messages.

 I edited serialcd/boot/loader.conf to include the line

 console=comconsole

 I did exactly that, although I also tried adding the following lines  
 instead on a separate attempt:

  boot_multicons=NO
  boot_serial=YES
  comconsole_speed=115200
  console=comconsole

 I then ran

 mkisofs -J -r -b boot/cdboot -no-emul-boot -o serialcd.iso serialcd

 and got an ISO image, serial.iso, which is about 600MB.

 Your switches are a little different from my original procedure, so this  
 time I used yours.

 The only drawback with this method is that the serial console only cuts 
 in just before the boot menu. I suspect that if you wanted to have a 
 serial console for every stage of the boot you would need to mess about 
 with the ramdisk image on the CD.

 So creating a boot.config in the root of the CD image cannot be used the  
 way it is for a hard drive installation in order to solve that problem?

Correct.  It has to be done differently, since the bootstraps used
from the CD are different than those on a hard disk.  I choose not to
use the loader.conf variables because I feel they get read too late
into the boot process.

For the record, I've never done a CD-based install via serial.

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: gmirror prerequisite question

2008-10-05 Thread Edwin Groothuis
Today I mirrored my new harddisk with the instructions at
http://www.freebsddiary.org/gmirror.php

Right now I'm synchronized up to 65% :-)

Edwin

-- 
Edwin Groothuis Website: http://www.mavetju.org/
[EMAIL PROTECTED]   Weblog:  http://www.mavetju.org/weblog/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


HP DL servers

2008-10-05 Thread Ludovit Koren

Hi,

I would like to buy HP servers DL 320 G5p or DL 360 G5p. I googled but
did not find clear answer if the NICs and disk controllers are
supported in FreeBSD 7.x. I read about some problems with NIC in DL
360 but it was not actual and I am not sure about disk controller
in DL 320.

Any personal recommendations and experience with the servers are
welcomed. 

Thank you very much in advance.

Regards,

lk
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: CARP issue with 2 Masters

2008-10-05 Thread Matthew Seaman

[EMAIL PROTECTED] wrote:

I have CARP running on a master and a slave server and for some unknown reason 
the slave continues to classify itself as a master, even though the advskew is 
higher than on the master. 
It appears that queries sent to the CARP ip address go to the master 50% of the 
time and the slave 50% of the time when both servers are up. This plays havoc 
with my databases as I synchronise them asynchronously.


When I take the carp interface down on the slave using 'ifconfig carp0 down  
ifconfig carp0 up' it lists it's status as 'backup' for about 10 seconds and 
then goes back to 'master'.


Have you by any chance firewalled out the multicast packets that CARP uses
to test for interface death?  If either one of a CARP pair can't see CARP 
packets
frequently enough it will think the other is down and promote itself to master.

If your firewall is blocking, then add a rule like this on both machines:

pass quick on $ext_if proto carp \
   from $ext_if:network to $carp_mcast keep state

$carp_mcast is defined as 224.0.0.18

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: Canon Pixma iP4500 - problem with colours

2008-10-05 Thread Mike Clarke
On Sunday 05 October 2008, WATANABE Kazuhiro wrote:

 I've used Canon MP810 with CUPS and IJ Printer Driver for Linux
 (supplied by Canon) on FreeBSD.

 Canon doesn't supply the printer driver for MP810, but I've been able
 to use the printer with the driver for MP610.  These printer specs
 are very similar.

 I don't use the printer from FreeBSD so many time, but printing an
 web page from firefox and the Print Test Page from
 http://localhost:631/ are fine.  That color print has no defferences
 between the Windows's one.


 So you will be able to use Canon iP4500 (and MP610/MP520/iP3500) with
 the procedure below [1].

[snip]

Thanks very much for this clearly detailed explanation of how to install 
the linux driver. This looks very promising and I'll certainly give it 
a try. I may have to put this task to one side while I deal with some 
other jobs but I've downloaded the files and filed your email for 
reference - I'll report back when I've tried it.

-- 
Mike Clarke
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems moving my jails (mv: Operation not permitted)

2008-10-05 Thread Ian Smith
On Sat, 4 Oct 2008, Redd Vinylene wrote:
  On Sat, Oct 4, 2008 at 9:22 PM, George Hartzell [EMAIL PROTECTED] wrote:
   Redd Vinylene writes:
 On Sat, Oct 4, 2008 at 9:02 PM, George Hartzell [EMAIL PROTECTED] 
   wrote:
 
  If you do an ls -lo /home/jail/box/usr/bin/chpass, you'll probably see
  the schg flag set.  Man chflags for more info and instructions on how
  to unset it
 
  g.
 

 Yes:

 -r-sr-xr-x  6 root  wheel  schg 18468 Aug  2 19:47 
   /usr/jail/box/usr/bin/chpass

 So I'd simply have to chflags noschg /usr/jail/box/usr/bin/chpass
 and then cp /usr/jail/box/usr/bin/chpass
 /home/jail/box/usr/bin/chpass?
  
   I think that you ought to be able to cp it as is.  You're just not
   allowed to change the original (e.g. remove it), which is why your mv
   and rm failed.
  
   g.
  
  
  I've been told that changing flags might seriously mess things up. Is
  there any way to copy the remaining files from /usr/jail into
  /home/jail, or do I have to rebuild everything from scratch?

Having read the thread to date, I reckon you should:

 a) find(1) all schg files in your jails (was chpass the only one?)
 b) clear the schg flag on any such found as above (-R if you like)
 c) use mv as you originally intended (if they're still there :)
 d) chflags schg on all files that were originally set that way.

If you do use cp instead of mv, make sure to use cp -p to preserve 
each file's owner/group/permissions/datestamp.

 e) make sure any and all symlinks still point to the right file/s.

Personally I'd use cp -pR rather than mv in case I stuffed it up :) but 
then being perhaps overcautious I'd have started off with a 'ls -lR 
/usr/jail  listfile' (if I hadn't made a backup tar) to at least have a 
full list of what was where, with what user/perms etc ..

Also read cp(1) re -R flag carefully .. if there are any hard linked 
files, as there may well be, then using tar to move these would be 
the safest bet anyway - plus you'd have a backup .. next time anyway :)

Since it just failed to mv some files, you shouldn't need to rebuild if 
you can mv those files and reset their flags/permissions correctly.

cheers, Ian 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't add new 1TB disk in FreeBSD 6.1

2008-10-05 Thread Jerry McAllister
On Sun, Oct 05, 2008 at 03:42:53AM -0700, Jeremy Chadwick wrote:

 On Sun, Oct 05, 2008 at 11:07:58AM +0200, Wojciech Puchar wrote:
 
 
  I tried using fdisk first, same problem, won't let me write to the disk.
 
  Do you will use the entire disk in one partition ? If so, just do:
  newfs /dev/ad4
 
  yes you can. i actually do this
 
 Isn't this what's called Dangerously Dedicated mode, and is considered
 very risky behaviour on FreeBSD nowadays?

It is what is called 'dangerously dedicated'  but the 'nowdays' thing is
not relevant.   It is as old as the slice/partition framework.  It is
probably not a good name for it because it is not risky for the system
you are using it on.It's only problem is if you want to read/write
the disk in a different system.  You might not be able to do it because
it does not follow the most standard way.It is not a problem for a disk
that is only used on FreeBSD.

On the other hand, I see no reason to not use the slice+partition system
that is most standard.   fdisk to create slices and bsdlabel to create
partitions and then newfs each partition except swap.

jerry

 
 I would be wary of doing it that way.  Using slices is the preferred
 method, e.g. newfs /dev/ad4s1a.
 
 -- 
 | Jeremy Chadwickjdc at parodius.com |
 | Parodius Networking   http://www.parodius.com/ |
 | UNIX Systems Administrator  Mountain View, CA, USA |
 | Making life hard for others since 1977.  PGP: 4BD6C0CB |
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: processes hanging in _umtx_op

2008-10-05 Thread Mel
On Sunday 05 October 2008 02:12:44 Dale Hagglund wrote:

 I can reproduce this reliably with

 $ python -c import wx

 I'm running 7.0-RELEASE-p2 with uname -a giving the following output,
 suitably wrapped.

 FreeBSD ponoka.ab.hsia.telus.net
 7.0-RELEASE-p2 FreeBSD 7.0-RELEASE-p2
 #0: Wed Jun 18 07:33:20 UTC 2008
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
 i386

[...]

 Dale Hagglund

 - start: kdump output -
  34453 python   1223164746.661828 CALL  munmap(0x2aa0,0xc1000)
  34453 python   1223164746.661840 RET   munmap 0
  34453 python   1223164746.662541 CALL 
 _umtx_op(0x283071e0,0x8,0x1,0x283071c0,0 )

Can you change scheduler to ULE and rebuild kernel? Or better yet, try 
7.1-PRERELEASE, since it's good to know if this bug persists with 7.1 being 
close to release.
It's not a 'standard answer', btw, but an educated guess, since utmx is 
(simplified) the kernel equivalent of pthread_(rwlock|mutex)_* and looks like 
it's hanging in one of those functions.

If you're comfy with kernel debugging, print uap-op when it's hanging, so we 
know which op it's waiting on.

Now, it can simply be programmer error (lock twice, unlock once), but most of 
the time the kernel catches this for me with EDEADLK.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Lenovo X200s

2008-10-05 Thread Mel
On Wednesday 01 October 2008 22:36:51 Peter Thoenen wrote:
 The Thinkpad series has always had strong FreeBSD support with the two
 digit models (Xnn) but I am a bit iffy on Lenovo's attempts to morph the
 Thinkpads into something else via the three digit series (Xnnn).
 Anybody own a X200s and successfully running FreeBSD 7.x?

This (rather long) thread contains quite some info on FreeBSD+laptop, along 
with some Lenovo info.
http://lists.freebsd.org/pipermail/freebsd-mobile/2008-July/010831.html

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Can't get in-kernel IPFW NAT (libalias) to work

2008-10-05 Thread n j
Hello all,

I resolved my earlier problem (ipfw: getsockopt(IP_FW_ADD): Invalid
argument when trying ipfw add nat) by upgrading to 7.1-BETA which
includes ipfw_nat as a kernel module; however, it still doesn't seem
to work.

When I'm directly ping'ing another box, I can see packets arriving at
the destination, so the forwarding part (routes) works fine. However,
when I add an ipfw rule to send these packets to the nat instance, the
packets disappear instead of arriving nat'ted to the same destination.

Did anyone have any success in getting the in-kernel (libalias) ipfw
nat to work? I'd be grateful for any pointers.

Thanks,
-- 
Nino
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: HP DL servers

2008-10-05 Thread Gavin Spomer
We also have DL380's and I can't remember what generation my FreeBSD test 
server is, but it too has the Broadcoms in it which work fine with FreeBSD 7.0. 
Ours is recognized as bce however.



Gavin Spomer
Systems Programmer
Brooks Library
Central Washington University

 H.fazaeli [EMAIL PROTECTED] 10/05/08 3:24 AM 

HP servers usually have NICs with broadcom or intel chipsets which are 
recognized
as bge and em under freebsd and work great.

We have the following configurations and they work fine:

- freebsd 6.3 on dl320G5 with on-board broadcom network chipset and SATA 
HDDs. We had
  problems with hardware RAID and used geom to impl. RAID functionality.

- freebsd 6.3 on dl380G5 with SAS HDDs. Hardware RAID controller is 
recognized by 6.3
  and works.


Ludovit Koren wrote:
 Hi,

 I would like to buy HP servers DL 320 G5p or DL 360 G5p. I googled but
 did not find clear answer if the NICs and disk controllers are
 supported in FreeBSD 7.x. I read about some problems with NIC in DL
 360 but it was not actual and I am not sure about disk controller
 in DL 320.

 Any personal recommendations and experience with the servers are
 welcomed. 

 Thank you very much in advance.

 Regards,

 lk
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


   

-- 


Best regards.

Hooman Fazaeli [EMAIL PROTECTED]
Sepehr S. T. Co. Ltd.

Web: http://www.sepehrs.com
Tel: (9821)88975701-2
Fax: (9821)88983352




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


portupgrade troubles

2008-10-05 Thread Martin Schweizer
Hello

I post the questions several months a go but I find until now no solutions. If 
I use portupgrade -fa I get the folowing error:

/usr/local/lib/ruby/site_ruby/1.8/pkgversion.rb:41:in `initialize': ,2: Not in 
due form: 'version[_revision][,epoch]'. (ArgumentError)
from /usr/local/sbin/portupgrade:638:in `new'
from /usr/local/sbin/portupgrade:638:in `main'
from /usr/local/sbin/portupgrade:613:in `each'
from /usr/local/sbin/portupgrade:613:in `main'
from /usr/local/sbin/portupgrade:588:in `catch'
from /usr/local/sbin/portupgrade:588:in `main'
from /usr/local/lib/ruby/1.8/optparse.rb:1303:in `call'
from /usr/local/lib/ruby/1.8/optparse.rb:1303:in `parse_in_order'
 ... 7 levels...
from /usr/local/lib/ruby/1.8/optparse.rb:785:in `initialize'
from /usr/local/sbin/portupgrade:229:in `new'
from /usr/local/sbin/portupgrade:229:in `main'
from /usr/local/sbin/portupgrade:2173

But get no answer and find no solution for my problem. Any ideas

Regards,


In the past I did a lot: 

- /usr/ports/UPDATING: checked all the ruby hints
- Find and read the following posts:
[snip]
 Re: portupgrade error - `deorigin': cannot convert nil into String
  (PkgDB::DBError)

   From: Kent Stewart (kstewart_at_owt.com)
   Date: 06/25/04

To: [EMAIL PROTECTED]
Date: Fri, 25 Jun 2004 13:10:44 -0700


   On Friday 25 June 2004 12:25 pm, Andy Smith wrote:
Ever since a recent cvsup of ports and a portsdb -Uu, portupgrade
has been giving the following error:
   
--- Session started at: Fri, 25 Jun 2004 18:58:25 +
--- Session ended at: Fri, 25 Jun 2004 18:58:28 + (consumed
00:00:03) /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:323:in
`deorigin': cannot convert nil into String (PkgDB::DBError) from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:916:in `tsort_build' from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:915:in `each' from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:915:in `tsort_build' from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:907:in `each' from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:907:in `tsort_build' from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:929:in `sort_build' from
/usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:933:in `sort_build!' from
/usr/local/sbin/portupgrade:674:in `main'
from /usr/local/sbin/portupgrade:207:in `initialize'
from /usr/local/sbin/portupgrade:207:in `new'
from /usr/local/sbin/portupgrade:207:in `main'
from /usr/local/sbin/portupgrade:1845
   
I have tried:
   
- Waiting a day and doing another cvsup
   
- Doing make index / portsdb -Uu
   
- Removing ruby and portupgrade and reinstalling
   
but I still get the same error.
   
I also searched the mailing list archives and found someone with a
very similar error:
   
http://lists.freebsd.org/pipermail/freebsd-stable/2003-May/001255.htm
   l
   
however, I've already learnt my lesson about refusing ports, and so
my sup/refuse contains only:
   
ports/INDEX
ports/INDEX-5
   
Anyone have any other ideas?

   Someone on ports said to run portsdb -fu to fix this one. The cooment
   was
Probably a ruby bug. Rebuilding {pkg|ports}.db from scratch will do,
   I
   think.

   But I thought that was a pkgdb -fu.

   Kent

--
Kent Stewart
Richland, WA
http://users.owt.com/kstewart/index.html
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]
 __


[snip]
   Newsgroups: mailing.freebsd.ports
   Von: [EMAIL PROTECTED] (Sergey Matveychuk)
   Datum: Sun, 27 Jan 2008 04:20:30 +0800 (CST)
   Lokal: Sa 26 Jan. 2008 22:20
   Betreff: ports-mgmt/portupgrade-devel
   Antwort an Autor | Weiterleiten | Drucken | Einzelne Nachricht |
   Hi!

   After a long time, I've got a little free time and spent it working for
   portupgrade.
   A new version (2.4.0) was released.
   * Many bugs fixed (thanks to reporters).
   * At last I've finished rewriting code and portupgrade now controls all
   tasks (before some port installed without a portupgrade note). As a
   result portupgrade gathers all depends for a port. It spends a time for
   preparing in the beginning of a upgrade process.
   * I've change unused -c and -C options to allow run 'make
   config-conditional' and 'make config' (force options change) before all
   processing.

   Test the release please. To move from portupgrade to portupgrade-devel
   port, use the command:
   portupgrade -fo ports-mgmt/portupgrade-devel portupgrade

   If you'll want to back to stable porupgrade, use the command:
   portupgrade -o ports-mgmt/portupgrade portupgrade-devel

   --
   Dixi.
   Sem.
   ___
   Von: [EMAIL PROTECTED] 

Re: HP DL servers

2008-10-05 Thread Michael Lednev

Ludovit Koren пишет:

Hi,

I would like to buy HP servers DL 320 G5p or DL 360 G5p. I googled but
did not find clear answer if the NICs and disk controllers are
supported in FreeBSD 7.x. I read about some problems with NIC in DL
360 but it was not actual and I am not sure about disk controller
in DL 320.

Any personal recommendations and experience with the servers are
welcomed. 


DL360G5 works flawlessly with 7.0, I can post its dmesg if you want.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: processes hanging in _umtx_op

2008-10-05 Thread Dale Hagglund
 Mel == Mel  [EMAIL PROTECTED] writes:

Mel Can you change scheduler to ULE and rebuild kernel? 
Mel Or better yet, try 7.1-PRERELEASE, since it's good to know if
Mel this bug persists with 7.1 being close to release.

I'll rebuild with ULE first, and let you and the list know what happens.

Mel It's not a 'standard answer', btw, but an educated guess, since
Mel utmx is (simplified) the kernel equivalent of
Mel pthread_(rwlock|mutex)_* and looks like it's hanging in one of
Mel those functions.

This was my guess as well.  I first noticed this hang while attempting
to build gnuradio around the end of August.  During conversations with
the maintainer, Diane Bruce, about this hang she recognized it from
before and suggested that she'd been able to fix it at that time by
upgrading all ports (or maybe just the wx port) on her system.

Mel Now, it can simply be programmer error (lock twice, unlock
Mel once), but most of the time the kernel catches this for me with
Mel EDEADLK.

The background with gnuradio and the Diane's suggestion to upgrade ports
lead to my thought that I could easily have some sort of conflicting or
out-of-date combination of libraries causing some sort of locking
problem.

That said, I've since upgraded almost all of my ports/packages, but
building gnuradio still hangs the same way.  Life/work got very busy
just after that, so I unfortunately didn't got back to Diane with this
update.  Also, I just saw the same hang with the openoffice 3.0beta
(milestone m5) package.  Just out of curiousity, I produced the list
of shared dependencies between these packages and have attached these below.

Mel If you're comfy with kernel debugging, print uap-op when it's
Mel hanging, so we know which op it's waiting on.

I haven't used the kernel debugger before, but I'd be willing to give it
a go after trying some of the things above.  If you have a pointer to a
slightly more detailed set of instructions, I'd definitely appreciate
it.

Dale.

ORBit2-2.14.14
atk-1.22.0_1
bitstream-vera-1.10_4
cairo-1.6.4_2,1
compositeproto-0.4
damageproto-1.1.0_2
encodings-1.0.2,1
expat-2.0.1
fixesproto-4.0
font-bh-ttf-1.0.0
font-misc-ethiopic-1.0.0
font-misc-meltho-1.0.0_1
font-util-1.0.1
fontcacheproto-0.1.2
fontconfig-2.5.0,1
fontsproto-2.0.2
freetype2-2.3.7
gconf2-2.22.0_1
gettext-0.17_1
glib-2.16.5
gnomehier-2.3_10
gtk-2.12.11_1
hicolor-icon-theme-0.10_2
inputproto-1.4.2.1
jpeg-6b_7
kbproto-1.0.3
libFS-1.0.0_1
libICE-1.0.4_1,1
libIDL-0.8.11
libSM-1.0.3_1,1
libX11-1.1.3_1,1
libXScrnSaver-1.1.2
libXTrap-1.0.0
libXau-1.0.3_2
libXaw-1.0.4_1,1
libXcomposite-0.4.0,1
libXcursor-1.1.9_1
libXdamage-1.1.1
libXdmcp-1.0.2_1
libXevie-1.0.2
libXext-1.0.3,1
libXfixes-4.0.3_1
libXfont-1.3.1_3,1
libXfontcache-1.0.4
libXft-2.1.13
libXi-1.1.3,1
libXinerama-1.0.2,1
libXmu-1.0.3,1
libXp-1.0.0,1
libXpm-3.5.7
libXprintAppUtil-1.0.1
libXprintUtil-1.0.1
libXrandr-1.2.2_1
libXrender-0.9.4_1
libXres-1.0.3_3
libXt-1.0.5_1
libXtst-1.0.3_1
libXv-1.0.3_1,1
libXvMC-1.0.4_1
libXxf86dga-1.0.2
libXxf86misc-1.0.1
libXxf86vm-1.0.1
libdmx-1.0.2_1
libfontenc-1.0.4
libiconv-1.11_1
liboldX-1.0.1
libxkbfile-1.0.4
libxkbui-1.0.2_1
libxml2-2.6.32
mkfontdir-1.0.3_1
mkfontscale-1.0.3
pango-1.20.5
pcre-7.7_1
perl-5.8.8_1
pixman-0.10.0_2
pkg-config-0.23_1
png-1.2.31
printproto-1.0.3
python25-2.5.2_3
randrproto-1.2.1
recordproto-1.13.2
renderproto-0.9.3
scrnsaverproto-1.1.0
shared-mime-info-0.51
tiff-3.8.2_1
trapproto-3.4.3
videoproto-2.2.2
xbitmaps-1.0.1
xextproto-7.0.2
xf86dgaproto-2.0.3
xf86miscproto-0.9.2
xf86vidmodeproto-2.2.2
xineramaproto-1.1.2
xorg-fonts-truetype-7.3
xorg-libraries-7.3_2
xproto-7.0.10_1
xtrans-1.0.4

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ssh jail

2008-10-05 Thread Mel
On Thursday 02 October 2008 19:38:21 kalin m wrote:
 hi all...

 i have openssh 5. i want to jail the users to their home directories so
 they can go down but not up.

 i didn't see a directive that does that in the man or in the sshd_config.

On RELENG_7 (aka -stable, aka 7.1-PRERELEASE), isn't this what you're looking 
for?
 ChrootDirectory
 Specifies a path to chroot(2) to after authentication.  This
 path, and all its components, must be root-owned directories that
 are not writable by any other user or group.

 The path may contain the following tokens that are expanded at
 runtime once the connecting user has been authenticated: %% is
 replaced by a literal '%', %h is replaced by the home directory
 of the user being authenticated, and %u is replaced by the user-
 name of that user.

 The ChrootDirectory must contain the necessary files and directo-
 ries to support the users' session.  For an interactive session
 this requires at least a shell, typically sh(1), and basic /dev
 nodes such as null(4), zero(4), stdin(4), stdout(4), stderr(4),
 arandom(4) and tty(4) devices.  For file transfer sessions using
 ``sftp'', no additional configuration of the environment is nec-
 essary if the in-process sftp server is used (see Subsystem for
 details).

 The default is not to chroot(2).

$ ssh -V
OpenSSH_5.1p1 FreeBSD-20080901, OpenSSL 0.9.8e 23 Feb 2007



-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mysqldump password issue

2008-10-05 Thread Mel
On Thursday 02 October 2008 21:00:54 Matthew Seaman wrote:
 Andrei Brezan wrote:
  Hello list,
 
  I wanna do a
  mysqldump -u user -ppasswd --all-databases  backup.sql
 
  and all I get is
  mysqldump: No match.
 
  This happens either i put --all-databases or I specify any of the
  databases. I want to do a backup as user root, that's why I use
  all-databases opt.
 
  If I use the command:
  mysqldump -u root -p --all-databases backup.sql
  I get the password prompt, I type the passwd and everythig works great.
  It seems that there is a problem with -p, i've tried --password with
  same result.
 
  If anyone has any ideea please let me know about it.
  I mention that i use Freebsd 7_0 and mysql 5.0.67

 My guess is that the password (which you've obviously elided) contains
 characters of syntactic significance to the shell.  Any of the following
 will lead to wailing and gnashing of teeth:

   * ? [; ! | $

Since I'm writing a parser currently that unescapes make(1)'s :Q modifier, I 
can tell you:
\ ( ) # ~ { } ]  '

belong in the same gnashing category.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Freebsd-update with a custom kernel and jails

2008-10-05 Thread FreeBSD

Hi everyone,

I'm totally new to freebsd-update. I used to recompile the kernel and 
the world when I wanted to update. But I think it's now time to take 
advantages of the binary update possibility. I looked at the man pages 
and some googling couldn't answer my questions properly. I need to roll 
out a server quick and I just want to be sure I'm on the good path.


There is my situation:
I want to be able to use freebsd-update to update a FreeBSD 7.0-Release 
installation to the latest security patches (I want an update and not an 
upgrade if I understand correctly). Where this gets more complicated is 
that I need a custom kernel (for ULE, pf and ALTQ while also disabling 
some devices I'll never need) and I want to use jails to isolate every 
services (Apache and MySQL by now).


So, I read at some places that you can't use freebsd-update with a 
custom kernel, but I'm not sure if this apply only in the case of an 
upgrade between release or if I'll need to manually recompile the kernel 
with every use of freebsd-update.


I also read that it's possible to update the jails from the host system 
with the -b flag. In this case, I supposed that I need to update the 
host system before the jail, but is the procedure going to be exactly 
the same?


Talking about procedure, it would be nice if someone could confirm that 
all I need to do is 'freebsd-update fetch' followed by 'freebsd-update 
install' to update the host system.


I'm sorry if this has been explained before but I couldn't find anything 
clear on this. I least, your answer will make a good, update to date 
source of information.


Thank you all for your replies,

Martin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Running cron jobs as nobody

2008-10-05 Thread Mel
On Thursday 02 October 2008 17:11:52 DAve wrote:
 Good morning all,

 We have a cronjob we need to run as nobody from /etc/crontab and it
 seems to be not working. The job runs, but not as user nobody.

 I noticed two things,

 1) the job to update the locate DB runs as nobody, because the script
 uses su to become nobody.
 echo /usr/libexec/locate.updatedb | nice -5 su -fm nobody || rc=3
 ^^^
-fm: Bypass .cshrc and only change user, use root env.

 Is setting the user to nobody in /etc/crontab not possible?

pw showuser operator
pw showuser nobody

Spot the difference (hint: /nonexistent)

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Freebsd-update with a custom kernel and jails

2008-10-05 Thread matt donovan
On Sun, Oct 5, 2008 at 12:58 PM, FreeBSD [EMAIL PROTECTED] wrote:


 There is my situation:
 I want to be able to use freebsd-update to update a FreeBSD 7.0-Release
 installation to the latest security patches (I want an update and not an
 upgrade if I understand correctly). Where this gets more complicated is that
 I need a custom kernel (for ULE, pf and ALTQ while also disabling some
 devices I'll never need) and I want to use jails to isolate every services
 (Apache and MySQL by now).

 So, I read at some places that you can't use freebsd-update with a custom
 kernel, but I'm not sure if this apply only in the case of an upgrade
 between release or if I'll need to manually recompile the kernel with every
 use of freebsd-update.

 I also read that it's possible to update the jails from the host system
 with the -b flag. In this case, I supposed that I need to update the host
 system before the jail, but is the procedure going to be exactly the same?

 yes all you need to do is freebsd-update fetch install your kernel won't be
 updated but your userland will

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


pf vs. RST attack question

2008-10-05 Thread Scott Bennett
 I'm getting a lot of messages like this:

Oct  4 14:30:00 hellas kernel: Limiting closed port RST response from 250 to 
200 packets/sec

Is there some rule I can insert into /etc/pf.conf to reject these apparently
invalid RST packets before they can bother TCP?  At the same time, I do not
want to reject legitimate RST packets.
 Thanks in advance for any clues!


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Touch screen ETT on Clevo tn120r

2008-10-05 Thread Sdävtaker
Hello,
I installed FreeBSD 7.0r in a Clevo tablet.
I works great, but i am missing the touchscreen.
Did someone make it work or got any idea where can i start to try?
I got the pciconf -lv and scanpci -v info:
Thanks in advance for any help you can give me.

pciconf:

[EMAIL PROTECTED]:0:0:0:class=0x06 card=0x01221558 chip=0x2a008086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'Mobile PM965/GM965/GL960 Express Processor to DRAM
Controller'
class  = bridge
subclass   = HOST-PCI
[EMAIL PROTECTED]:0:2:0:class=0x03 card=0x01221558 chip=0x2a028086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'Mobile 965 Express Integrated Graphics Controller'
class  = display
subclass   = VGA
[EMAIL PROTECTED]:0:2:1:class=0x038000 card=0x01221558 chip=0x2a038086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'Mobile 965 Express Integrated Graphics Controller'
class  = display
[EMAIL PROTECTED]:0:26:0:class=0x0c0300 card=0x01221558 chip=0x28348086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) USB UHCI'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:26:1:class=0x0c0300 card=0x01221558 chip=0x28358086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) USB UHCI'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:26:7:class=0x0c0320 card=0x01221558 chip=0x283a8086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '81EC1043 (?) ICH8 Enhanced USB2 Enhanced Host Controller'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:27:0:class=0x040300 card=0x01221558 chip=0x284b8086 
rev=0x03
hdr=0x00
vendor = 'Intel Corporation'
device = '82801H SUBSYS_81EC1043REV_02\3115836590D8'
class  = multimedia
[EMAIL PROTECTED]:0:28:0:class=0x060400 card=0x01221558 chip=0x283f8086
rev=0x03 hdr=0x01
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) PCIe Port 1'
class  = bridge
subclass   = PCI-PCI
[EMAIL PROTECTED]:0:28:1:class=0x060400 card=0x01221558 chip=0x28418086
rev=0x03 hdr=0x01
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) PCIe Port 2'
class  = bridge
subclass   = PCI-PCI
[EMAIL PROTECTED]:0:28:2:class=0x060400 card=0x01221558 chip=0x28438086
rev=0x03 hdr=0x01
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) PCIe Port 3'
class  = bridge
subclass   = PCI-PCI
[EMAIL PROTECTED]:0:28:3:class=0x060400 card=0x01221558 chip=0x28458086
rev=0x03 hdr=0x01
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) PCIe Port 4'
class  = bridge
subclass   = PCI-PCI
[EMAIL PROTECTED]:0:29:0:class=0x0c0300 card=0x01221558 chip=0x28308086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) USB UHCI'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:29:1:class=0x0c0300 card=0x01221558 chip=0x28318086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) USB UHCI'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:29:2:class=0x0c0300 card=0x01221558 chip=0x28328086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) USB UHCI'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:29:7:class=0x0c0320 card=0x01221558 chip=0x28368086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) USB2 EHCI'
class  = serial bus
subclass   = USB
[EMAIL PROTECTED]:0:30:0:class=0x060401 card=0x chip=0x24488086
rev=0xf3 hdr=0x01
vendor = 'Intel Corporation'
device = '82801BAM/CAM/DBM (ICH2-M/3-M/4-M) Hub Interface to PCI
Bridge'
class  = bridge
subclass   = PCI-PCI
[EMAIL PROTECTED]:0:31:0:class=0x060100 card=0x01221558 chip=0x28158086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'ICH8M-E (ICH8 Family) LPC Interface Controller'
class  = bridge
subclass   = PCI-ISA
[EMAIL PROTECTED]:0:31:2:class=0x010180 card=0x01221558 chip=0x28288086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'ICH8M (ICH8 Family) 3 port SATA Controller'
class  = mass storage
subclass   = ATA
[EMAIL PROTECTED]:0:31:3:class=0x0c0500 card=0x01221558 chip=0x283e8086
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82801H (ICH8 Family) SMBus Controller'
class  = serial bus
subclass   = SMBus
[EMAIL PROTECTED]:2:0:0:class=0x028000 card=0x10018086 chip=0x42228086 
rev=0x02
hdr=0x00
vendor = 'Intel Corporation'
device = '10418086 Intel 3945ABG Wireless LAN controller'
class  = network
[EMAIL 

Re: processes hanging in _umtx_op

2008-10-05 Thread Diane Bruce
On Sun, Oct 05, 2008 at 10:07:30AM -0600, Dale Hagglund wrote:
  Mel == Mel  [EMAIL PROTECTED] writes:

 Mel Can you change scheduler to ULE and rebuild kernel?
 Mel Or better yet, try 7.1-PRERELEASE, since it's good to know if
 Mel this bug persists with 7.1 being close to release.
...
 This was my guess as well.  I first noticed this hang while attempting
 to build gnuradio around the end of August.  During conversations with
 the maintainer, Diane Bruce, about this hang she recognized it from
 before and suggested that she'd been able to fix it at that time by
 upgrading all ports (or maybe just the wx port) on her system.

As a data point, I am running ULE here on a single processor with
FreeBSD 7.1 (pre-release). gnuradio builds fine here.


 Mel Now, it can simply be programmer error (lock twice, unlock
 Mel once), but most of the time the kernel catches this for me with
 Mel EDEADLK.

 The background with gnuradio and the Diane's suggestion to upgrade ports
 lead to my thought that I could easily have some sort of conflicting or
 out-of-date combination of libraries causing some sort of locking
 problem.

I thought I had recognised this problem,  but now I am not so sure,
it looked like one a problem I thought I had remembered with wx.

 That said, I've since upgraded almost all of my ports/packages, but
 building gnuradio still hangs the same way.  Life/work got very busy

bizarre.


 just after that, so I unfortunately didn't got back to Diane with this
 update.  Also, I just saw the same hang with the openoffice 3.0beta

I was going to check with you about it anyway.

 (milestone m5) package.  Just out of curiousity, I produced the list
 of shared dependencies between these packages and have attached these below.

Ok.
Here is my list.

Information for gnuradio-3.1.3:

Depends on:
Dependency: xineramaproto-1.1.2
Dependency: xf86vidmodeproto-2.2.2
Dependency: xf86miscproto-0.9.2
Dependency: xf86dgaproto-2.0.3
Dependency: xextproto-7.0.2
Dependency: xbitmaps-1.0.1
Dependency: videoproto-2.2.2
Dependency: scrnsaverproto-1.1.0
Dependency: renderproto-0.9.3
Dependency: recordproto-1.13.2
Dependency: randrproto-1.2.1
Dependency: printproto-1.0.3
Dependency: kbproto-1.0.3
Dependency: inputproto-1.4.2.1
Dependency: fixesproto-4.0
Dependency: damageproto-1.1.0_2
Dependency: compositeproto-0.4
Dependency: fontsproto-2.0.2
Dependency: fontcacheproto-0.1.2
Dependency: font-util-1.0.1
Dependency: encodings-1.0.2,1
Dependency: expat-2.0.1
Dependency: hicolor-icon-theme-0.10_2
Dependency: tcl-8.4.19,1
Dependency: python25-2.5.2_2
Dependency: py25-numeric-24.2
Dependency: perl-5.8.8_1
Dependency: png-1.2.28
Dependency: libdrm-2.3.0
Dependency: jpeg-6b_7
Dependency: tiff-3.8.2_1
Dependency: pkg-config-0.23_1
Dependency: xtrans-1.0.4
Dependency: xproto-7.0.10_1
Dependency: pixman-0.10.0_2
Dependency: libtasn1-1.4
Dependency: libfontenc-1.0.4
Dependency: libXdmcp-1.0.2_1
Dependency: libXau-1.0.3_2
Dependency: libX11-1.1.3_1,1
Dependency: tk-8.4.19,2
Dependency: py25-tkinter-2.5.2_2
Dependency: libxkbfile-1.0.4
Dependency: liboldX-1.0.1
Dependency: libXrender-0.9.4_1
Dependency: libXfixes-4.0.3_1
Dependency: libXext-1.0.3,1
Dependency: libdmx-1.0.2_1
Dependency: libXxf86vm-1.0.1
Dependency: libXxf86misc-1.0.1
Dependency: libXxf86dga-1.0.2
Dependency: libXv-1.0.3_1,1
Dependency: libXvMC-1.0.4_1
Dependency: libXtst-1.0.3_1
Dependency: libXres-1.0.3_3
Dependency: libXrandr-1.2.2_1
Dependency: libXp-1.0.0,1
Dependency: libXinerama-1.0.2,1
Dependency: libXi-1.1.3,1
Dependency: libXfontcache-1.0.4
Dependency: libXevie-1.0.2
Dependency: libXdamage-1.1.1
Dependency: libXcursor-1.1.9_1
Dependency: libXcomposite-0.4.0,1
Dependency: libXScrnSaver-1.1.2
Dependency: libICE-1.0.4_1,1
Dependency: libSM-1.0.3_1,1
Dependency: libXt-1.0.5_1
Dependency: trapproto-3.4.3
Dependency: libxkbui-1.0.2_1
Dependency: libXprintUtil-1.0.1
Dependency: libXprintAppUtil-1.0.1
Dependency: libXpm-3.5.7
Dependency: libXmu-1.0.3,1
Dependency: libXaw-1.0.4_1,1
Dependency: libXTrap-1.0.0
Dependency: libGL-7.0.3
Dependency: libGLU-7.0.3
Dependency: libFS-1.0.0_1
Dependency: freetype2-2.3.7
Dependency: py25-imaging-1.1.6_2
Dependency: mkfontscale-1.0.3
Dependency: mkfontdir-1.0.3_1
Dependency: libXfont-1.3.1_3,1
Dependency: fontconfig-2.5.0,1
Dependency: libXft-2.1.13
Dependency: xorg-libraries-7.3_2
Dependency: libglut-7.0.1_1
Dependency: py25-opengl-2.0.1.07_4
Dependency: font-misc-meltho-1.0.0_1
Dependency: font-misc-ethiopic-1.0.0
Dependency: font-bh-ttf-1.0.0
Dependency: fftw3-float-3.1.2
Dependency: fftw3-3.1.2
Dependency: cairo-1.6.4_2,1
Dependency: bitstream-vera-1.10_4
Dependency: xorg-fonts-truetype-7.3
Dependency: pcre-7.7_1
Dependency: libusb-0.1.12_2
Dependency: boost-python-1.34.1
Dependency: libiconv-1.11_1
Dependency: libxml2-2.6.32
Dependency: gettext-0.17_1
Dependency: libgpg-error-1.6_1
Dependency: libgcrypt-1.4.1_1
Dependency: opencdk-0.6.6,1
Dependency: gnutls-2.4.1_1
Dependency: glib-2.16.5
Dependency: 

Re: processes hanging in _umtx_op

2008-10-05 Thread Mel
On Sunday 05 October 2008 18:07:30 Dale Hagglund wrote:
  Mel == Mel  [EMAIL PROTECTED] writes:

 Mel It's not a 'standard answer', btw, but an educated guess, since
 Mel utmx is (simplified) the kernel equivalent of
 Mel pthread_(rwlock|mutex)_* and looks like it's hanging in one of
 Mel those functions.

 This was my guess as well.  I first noticed this hang while attempting
 to build gnuradio around the end of August.  During conversations with
 the maintainer, Diane Bruce, about this hang she recognized it from
 before and suggested that she'd been able to fix it at that time by
 upgrading all ports (or maybe just the wx port) on her system.

 Mel Now, it can simply be programmer error (lock twice, unlock
 Mel once), but most of the time the kernel catches this for me with
 Mel EDEADLK.

 The background with gnuradio and the Diane's suggestion to upgrade ports
 lead to my thought that I could easily have some sort of conflicting or
 out-of-date combination of libraries causing some sort of locking
 problem.

If upgrading ports is a possible solution, then you have the fine task of 
finding out, which library in everything that's being loaded is *NOT* linked 
with libthr, cause a likely candidate would be two different threading 
libraries being used.
I would start with ldd -a /path/to/python/wx.so and see if both libthr.so and 
libpthread.so (or maybe even libkse) show up.

Also inspect /etc/libmap.conf for entries you may have added in a not too 
recent past and forgot about.

Unfortunately, I see no obvious candidates in your package list (ie: 
compat-[456]x, *flash*).
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pf vs. RST attack question

2008-10-05 Thread (-K JohnNy
On Sun, Oct 05, 2008 at 12:53:03PM -0500, Scott Bennett wrote:
  I'm getting a lot of messages like this:
 
 Oct  4 14:30:00 hellas kernel: Limiting closed port RST response from 250 to 
 200 packets/sec
 
 Is there some rule I can insert into /etc/pf.conf to reject these apparently
 invalid RST packets before they can bother TCP?  At the same time, I do not
 want to reject legitimate RST packets.
  Thanks in advance for any clues!

Well, just to clarify a bit, the RST packets aren't the ones you are
getting. You are apparently getting port-scanned. The message just
says it won't reply by an RST packet to a SYN going to a closed port
more than 200 times per second.

I would suggest ignoring all SYN packets going to closed ports.
Haven't yet used pf though, so I can't say how exactly to do this.

-- 
(-K JohnNy alias Partial Derivative ∂
[home] http://johnny64.fixinko.sk/
[icq] 338328204 [abandoned]
[jabber] [EMAIL PROTECTED]
[skype] JohnNy64-konik [abandoned]


pgp4s9I67iRaB.pgp
Description: PGP signature


Re: pf vs. RST attack question

2008-10-05 Thread Mel
On Sunday 05 October 2008 19:53:03 Scott Bennett wrote:
  I'm getting a lot of messages like this:

 Oct  4 14:30:00 hellas kernel: Limiting closed port RST response from 250
 to 200 packets/sec

 Is there some rule I can insert into /etc/pf.conf to reject these
 apparently invalid RST packets before they can bother TCP?  At the same
 time, I do not want to reject legitimate RST packets.
  Thanks in advance for any clues!

Chances are pf is *creating* them. RST responses are used to signal that a 
port is closed, which is what block-policy return does. Combined with default 
block all, a simple portscan will generate this.

Switch to block-policy drop and set return for real denies, not default 
denies.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: processes hanging in _umtx_op

2008-10-05 Thread Diane Bruce
On Sun, Oct 05, 2008 at 08:19:01PM +0200, Mel wrote:
 On Sunday 05 October 2008 18:07:30 Dale Hagglund wrote:
   Mel == Mel  [EMAIL PROTECTED] writes:

...

 If upgrading ports is a possible solution, then you have the fine task of
 finding out, which library in everything that's being loaded is *NOT* linked
 with libthr, cause a likely candidate would be two different threading
 libraries being used.
 I would start with ldd -a /path/to/python/wx.so and see if both libthr.so and
 libpthread.so (or maybe even libkse) show up.

That would do it.

- Diane
--
- [EMAIL PROTECTED] [EMAIL PROTECTED] http://www.db.net/~db
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


kde4 question

2008-10-05 Thread Gary Kline

Over the past four days I've managed to get my FreeBSD server running 
KDE
up by installing kde4.  Now, for some reason, konqueror fails to 
conntect
anywhere.

How can I free up my old kde3 files and get konqueror working again?

gary



-- 
 Gary Kline  [EMAIL PROTECTED]  http://www.thought.org  Public Service Unix
http://jottings.thought.org   http://transfinite.thought.org


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Freebsd-update with a custom kernel and jails

2008-10-05 Thread FreeBSD

matt donovan a écrit :

On Sun, Oct 5, 2008 at 12:58 PM, FreeBSD [EMAIL PROTECTED] wrote:

  

There is my situation:
I want to be able to use freebsd-update to update a FreeBSD 7.0-Release
installation to the latest security patches (I want an update and not an
upgrade if I understand correctly). Where this gets more complicated is that
I need a custom kernel (for ULE, pf and ALTQ while also disabling some
devices I'll never need) and I want to use jails to isolate every services
(Apache and MySQL by now).

So, I read at some places that you can't use freebsd-update with a custom
kernel, but I'm not sure if this apply only in the case of an upgrade
between release or if I'll need to manually recompile the kernel with every
use of freebsd-update.

I also read that it's possible to update the jails from the host system
with the -b flag. In this case, I supposed that I need to update the host
system before the jail, but is the procedure going to be exactly the same?

yes all you need to do is freebsd-update fetch install your kernel won't be
updated but your userland will


So it is right to say that the custom kernel problem applies only when 
upgrading to a newer release?


All I have to do is 'freebsd-update fetch install' to update the base 
system then 'freebsd-update -b /usr/jail/jail_name fetch install' to 
update the jails?


I hope so because it would be very impressing :)

Martin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pf vs. RST attack question

2008-10-05 Thread Jeremy Chadwick
On Sun, Oct 05, 2008 at 12:53:03PM -0500, Scott Bennett wrote:
  I'm getting a lot of messages like this:
 
 Oct  4 14:30:00 hellas kernel: Limiting closed port RST response from 250 to 
 200 packets/sec
 
 Is there some rule I can insert into /etc/pf.conf to reject these apparently
 invalid RST packets before they can bother TCP?  At the same time, I do not
 want to reject legitimate RST packets.

They're outbound RST packets coming from your box as a result of
incoming packets someone is sending you (possibly an attack).

Proper firewalling rules should help defeat this, but there is no magic
rule you can place into pf.conf that will stop this.

If you want a magic solution, see blackhole(4).

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: CARP issue with 2 Masters

2008-10-05 Thread Frank Cam
Hi Matthew

That did the trick, have accidentally been using an old pre-carp set of 
firewall rules for the last few days. After your response, I went back and 
updated to the new rule-set. It's always the simple things.

Thank you, your response was greatly appreciated.

Frank

  I have CARP running on a master and a slave server and for some unknown
 reason 
  the slave continues to classify itself as a master, even though the
 advskew is 
  higher than on the master. 
  It appears that queries sent to the CARP ip address go to the master 50%
 of the 
  time and the slave 50% of the time when both servers are up. This plays
 havoc 
  with my databases as I synchronise them asynchronously.
  
  When I take the carp interface down on the slave using 'ifconfig carp0
 down  
  ifconfig carp0 up' it lists it's status as 'backup' for about 10 seconds
 and 
  then goes back to 'master'.
 
 Have you by any chance firewalled out the multicast packets that CARP uses
 to test for interface death?  If either one of a CARP pair can't see CARP
 packets
 frequently enough it will think the other is down and promote itself to
 master.
 
 If your firewall is blocking, then add a rule like this on both machines:
 
 pass quick on $ext_if proto carp \
 from $ext_if:network to $carp_mcast keep state
 
 $carp_mcast is defined as 224.0.0.18
 
   Cheers,
 
   Matthew
 
 -- 
 Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
   Flat 3
 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
   Kent, CT11 9PW
 
 



Come and visit Web Prophets Website at http://www.webprophets.net.au

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: processes hanging in _umtx_op

2008-10-05 Thread Dale Hagglund
[Mel, the last time I replied to your @rachie address, I got a bounce.
I'm still including it here on the CC list.  Should I remove it and just
reply to you via this list?  --rdh]

Diane, Mel, thanks for your suggestions so far.

Mel If upgrading ports is a possible solution, then you have the
Mel fine task of finding out, which library in everything that's
Mel being loaded is *NOT* linked with libthr, cause a likely
Mel candidate would be two different threading libraries being
Mel used.  I would start with ldd -a /path/to/python/wx.so and see
Mel if both libthr.so and libpthread.so (or maybe even libkse) show
Mel up.

What I did was this:

$ python -c import wx

which hangs.  Then I did

$ lsof -p $pid | grep '\.so'

to get a list of open shared objects.  The only matches for thr are

/lib/libthr.so.3
/usr/local/lib/libgthread-2.0.so.0

There are no matches for kse.  Then I started doing

$ lsof -p $pid | 
 grep '\.so' | 
 awk '{print $NF}' | 
 xargs -n 1 ldd -a | less

When I looked closely at the many libthr.so.3 references, though, I saw
something quite interesting.  As far as I can tell, not all are loaded
at the same address.  This is quite confusing to me.

$ lsof -p $pid | 
 grep '\.so' | 
 awk '{print $NF}' | 
 xargs -n 1 ldd -f '\t%o %p %x\n' -a | 
 awk 'NF==1 {prefix=$1; next} {print prefix, $0}' | 
 awk '$2 ~ /libthr/ { print $4 }' | 
 sort |
 uniq -c | 
 sort -nr
  22 0x28bc8000
   7 0x2953f000
   5 0x2945f000
   5 0x29371000
   4 0x29407000
   4 0x293fa000
   3 0x2934d000
   2 0x28952000
   2 0x2894b000
   1 0x29a79000
   1 0x2960d000
   1 0x289fb000
   1 0x28921000
   1 0x28548000
   1 0x281b6000
$

However, closer inspection shows that, confusing as it is, this
behaviour is common to almost all the shared libraries loaded into the
stuck python process.  Indeed, only libc seems to have just one loaded
address.

Also, this pipeline is actually inspecting the results from many
different runs of ldd on each .so, instead of looking at the state of
the running process.

A little more poking leads to the following result that is again
confusing to me

$ lsof -p 79117 | 
 grep '\.so' | 
 awk '{print $NF}' | 
 sort | uniq -c | sort -nr | 
 head
   2 
/usr/local/lib/python2.5/site-packages/wx-2.8-gtk2-ansi/wx/_core_.so
   1 /usr/local/lib/libxml2.so.5
   1 /usr/local/lib/libwx_gtk2_xrc-2.8.so.0.2.0
   1 /usr/local/lib/libwx_gtk2_qa-2.8.so.0.2.0
   1 /usr/local/lib/libwx_gtk2_html-2.8.so.0.2.0
   1 /usr/local/lib/libwx_gtk2_core-2.8.so.0.2.0
   1 /usr/local/lib/libwx_gtk2_aui-2.8.so.0.2.0
   1 /usr/local/lib/libwx_gtk2_adv-2.8.so.0.2.0
   1 /usr/local/lib/libwx_base_xml-2.8.so.0.2.0
   1 /usr/local/lib/libwx_base_net-2.8.so.0.2.0
$

The python wx core library seem to have been opened twice, unlike every
other shared object that the python process has opened.

Anyway, I don't know what to make of these results.  Also, they seem at
least somewhat unlikely to be related to seeing the same hang in ooo3.

Mel Also inspect /etc/libmap.conf for entries you may have added in
Mel a not too recent past and forgot about.

No such file on my system.

Mel Unfortunately, I see no obvious candidates in your package list (ie: 
Mel compat-[456]x, *flash*).

I had compat-5x installed and removed it, but the problem persisted.  I
still have compat-6x installed.

So, the upshot is I still don't see a smoking gun anywhere, but I
certainly see some things that are confusing, although that has no
bearing on whether or not they're actually problems.

If anything above inspires you with more questions, let me know and I
can do more poking around.  The next step, I guess, is to rebuild with
ULE and/or try out 7.1 prerelease.

Thanks again for your help so far.

Dale.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Freebsd-update with a custom kernel and jails

2008-10-05 Thread FreeBSD

FreeBSD a écrit :

matt donovan a écrit :
On Sun, Oct 5, 2008 at 12:58 PM, FreeBSD [EMAIL PROTECTED] 
wrote:


 

There is my situation:
I want to be able to use freebsd-update to update a FreeBSD 7.0-Release
installation to the latest security patches (I want an update and 
not an
upgrade if I understand correctly). Where this gets more complicated 
is that

I need a custom kernel (for ULE, pf and ALTQ while also disabling some
devices I'll never need) and I want to use jails to isolate every 
services

(Apache and MySQL by now).

So, I read at some places that you can't use freebsd-update with a 
custom

kernel, but I'm not sure if this apply only in the case of an upgrade
between release or if I'll need to manually recompile the kernel 
with every

use of freebsd-update.

I also read that it's possible to update the jails from the host system
with the -b flag. In this case, I supposed that I need to update the 
host
system before the jail, but is the procedure going to be exactly the 
same?


yes all you need to do is freebsd-update fetch install your kernel 
won't be

updated but your userland will


So it is right to say that the custom kernel problem applies only 
when upgrading to a newer release?


All I have to do is 'freebsd-update fetch install' to update the base 
system then 'freebsd-update -b /usr/jail/jail_name fetch install' to 
update the jails?


I hope so because it would be very impressing :)

Martin
Another question just came to my head: May I update the src before 
compiling my custom kernel or should I keep the original src that 
shipped with the release to be able to use freebsd-update?


Thank you very much for your help!

Martin

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to generate password hashes for vipw and chpass

2008-10-05 Thread Ivan Rambius Ivanov
Hello,

According to man pages of chpass(1) and vipw(1)  I can create and
modify users by supplying a user database entry in passwd(5) format.
The only problem I face is that I do not know how to generate the
password hashes for the password field.

Following section 14.4
[http://www.freebsd.org/doc/en/books/handbook/crypt.html] from the
handbook I found out that my system is using md5 to encrypt the
passwords. I tried to use /sbin/md5 to generate the hash:

# /sbin/md5 -s newpassword

and then I passed the output to chpass. I tried to use the new
password for the next login but it failed - so I believe this is
wrong.

Can you please show me how to generate the password hashes?

Regards
Rambius

-- 
Tangra Mega Rock: http://www.radiotangra.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to generate password hashes for vipw and chpass

2008-10-05 Thread Adam Zaleski

Ivan Rambius Ivanov pisze:


# /sbin/md5 -s newpassword
and then I passed the output to chpass. I tried to use the new
password for the next login but it failed - so I believe this is
wrong.
Can you please show me how to generate the password hashes?


You can add new account with one command like this:

echo user_password |pw user add new_user -h0

Also if you only want to generate valid password hash
you can use 'openssl passwd -1 new_password'


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]