Re: SUID permission on Bash script
per...@pluto.rain.com wrote: RW rwmailli...@googlemail.com wrote: On Sat, 29 Aug 2009 00:06:29 -0700 per...@pluto.rain.com wrote: Actually, absent some careful cooperation between the kernel and the interpreter to prevent a race condition ... isn't that the same issue that Matthew Seaman was saying was fixed years ago ... and is described in the follow-up: http://www.mail-archive.com/freebsd-questions@freebsd.org/msg185145.html That's entirely in the kernel, it doesn't require interpreter support. Er, I'm pretty sure it _does_ require support in the interpreter. It would do no good for the kernel to hand the interpreter an open descriptor if the interpreter did not somehow know to read the script from that open descriptor instead of opening the script file by name. This approach is exactly the careful cooperation between the kernel and the interpreter that I was referring to. Errr -- no. That's what fdescfs(5) is for. When the kernel execs the interpreter, it tells the script to open /dev/fd/5 (for example) and doing that just connects the script to the open file descriptor the kernel used previously to taste the magic number and the #! line of the script. As fdescfs(5) says: [...] the call: fd = open(/dev/fd/0, mode); and the call: fd = fcntl(0, F_DUPFD, 0); are equivalent. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
Re: Boot from RAIDZ in 8.0-BETA3?
On Sunday 30 August 2009 04:16, Doug Poland wrote: Hello, I'm experimenting with trying to boot from a RAIDZ on 8.0-BETA3 (amd64). The environment is VMware. I've been googling and reading what I can on this procedure, which sounds possible, but I have been unable to successfully get a system up and running with my technique. snip And this is far as I have been able to get. Can anyone identify what I'm doing wrong, or overlooking? Pointers to docs, man pages, URLs appreciated. i'm sure that you have already checked this out, but there is a howto in the wiki pages http://wiki.freebsd.org/ZFSOnRootWithZFSboot i tried this procedure twice on a i386 (once on a vm and once on an actual pc) and worked. (tho a nasty bug preventedme from keeping my root on zfs) it's about a zpool and not raidz/z2, but i'm pretty sure that the same apply to those too. cheers -- God, root, what's the difference? signature.asc Description: This is a digitally signed message part.
Re: About libc6-dev on FreeBsd
On Sun, 30 Aug 2009 02:03:43 +0200 Polytropon free...@edvax.de wrote: On Sat, 29 Aug 2009 09:35:49 -0700, Vladimir M vol...@techemail.com wrote: Could you please give me any suggestion about howto install libc6-dev on FreeBsd? I'm not sure what libc6-dev refers to, maybe development version 6 of the C library? In this case, FreeBSD already has version 7 which should be compatible. It seems libc6 is glibc on Linux; libc6-dev is the set of headers. On my Debian system: ii libc6-dev 2.7-18 GNU C Library: Development Libraries and Headers -- Bruce ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Boot from RAIDZ in 8.0-BETA3?
2009/8/30 Ed Jobs olori...@gmail.com On Sunday 30 August 2009 04:16, Doug Poland wrote: Hello, I'm experimenting with trying to boot from a RAIDZ on 8.0-BETA3 (amd64). The environment is VMware. I've been googling and reading what I can on this procedure, which sounds possible, but I have been unable to successfully get a system up and running with my technique. snip And this is far as I have been able to get. Can anyone identify what I'm doing wrong, or overlooking? Pointers to docs, man pages, URLs appreciated. i'm sure that you have already checked this out, but there is a howto in the wiki pages http://wiki.freebsd.org/ZFSOnRootWithZFSboot i tried this procedure twice on a i386 (once on a vm and once on an actual pc) and worked. (tho a nasty bug preventedme from keeping my root on zfs) it's about a zpool and not raidz/z2, but i'm pretty sure that the same apply to those too. cheers -- God, root, what's the difference? Not sure if its required but you dont seem to be setting the bootfs paramenter on the zpool. Also in theory dump/restore should work, I would feel safer doing it with rsync or cp. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
unknown oid
Здравствуйте, Freebsd-questions. in /var/log/messages kernel: swap zone exhausted, increase kern.maxswzone flux# sysctl kern.maxswzone sysctl: unknown oid 'kern.maxswzone' What I must to do now? -- С уважением, Коньков mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: unknown oid
kes-...@yandex.ru writes: in /var/log/messages kernel: swap zone exhausted, increase kern.maxswzone flux# sysctl kern.maxswzone sysctl: unknown oid 'kern.maxswzone' What I must to do now? It isn't exported as a sysctl; you need to set it in the loader. There is a discussion in man 8 loader that will tell you everything you need to know. -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org/~lowell/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Kerberos authentication by PAM againts AD Windows 2003 Server domain
Hello
My goal is to authenticate my Cyrus Imapd users against Windos 2003
Active Directory with Kerberos . I have the following setup:
Kerberos5 client
===
FreeBSD acsvfbsd06.domain.tld 7.2-RELEASE FreeBSD 7.2-RELEASE
/etc/krb.conf:
[libdefaults]
default_realm = domain.tld
default_etypes_des = des-cbc-md5
[realms]
ACUTRONIC.CH = {
kdc = tcp/acsv3k04.domain.tld:88
}
[logging]
kdc = SYSLOG:INFO:AUTH
admin_server = SYSLOG:INFO:AUTH
default = SYSLOG:INFO:AUTH
/etc/krb5.keytab (ktutil list output):
For the keytab file I followed:
http://technet.microsoft.com/en-us/library/bb742433.aspx
FILE:/etc/krb5.keytab:
Vno Type Principal
1 des-cbc-md5 host/acsvfbsd06.domain@domain.tld
I get tickets if I use kinit user:
acsvfbsd06# kinit user
mar...@domain.tld's Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
klist:
Credentials cache: FILE:/tmp/krb5cc_0
Principal: u...@domain.tld
Issued Expires Principal
Jul 31 17:58:09 Aug 1 03:57:44 krbtgt/domain@domain.tld
I can no more use ldapsearch as follows:
acsvfbsd06# ldapsearch -v -LLL -b
OU=Mitgliedsserver,OU=ACH,DC=Domain,DC=tld -h acsv3k04.domain.tld description
Which in the past worked. And really I did not change anything.
I checked also the DNS and Kerberos communication by tcpdump without any
strange issues. As the DNS server I use is the KDC server (all the DNS
Kerberos erntries are correct).
My PAM configurations is:
/etc/pam.d/imap:
authrequired pam_krb5.so try_first_pass debug
I tried with testsaslautd -u username - password different combinations of
user names and passwords. As expected the wrong ones would be denied. But I
get no PAM_SUCCESS for the correct ones, with one exception: If I use
sufficient as PAM option then all username and password combinations (wrong or
not) would be accepted! With the option required (and the others) I see in
/var/log/auth.log:
Aug 30 18:27:04 acsvfbsd06 saslauthd[9188]: rel_accept_lock : released accept
lock
Aug 30 18:27:04 acsvfbsd06 saslauthd[9188]: pam_krb5: verify_krb_v5_tgt():
krb5_rd_req(): Key table entry not found
Aug 30 18:27:04 acsvfbsd06 saslauthd[9188]: DEBUG: auth_pam: pam_authenticate
failed: authentication error
Aug 30 18:27:04 acsvfbsd06 saslauthd[9188]: do_auth : auth failure:
[user=martin] [service=imap] [realm=] [mech=pam] [reason=PAM auth error]
Aug 30 18:27:04 acsvfbsd06 saslauthd[9188]: get_accept_lock : acquired accept
lock
I read FreeBSDs PAM documentation backwards and forwards but did not find any
clue. Also I did not find any hints about the debugging for PAM problems.
So I have now no more ideas where I can check. Any hints are welcome.
Kind regards,
--
Martin Schweizer
off...@pc-service.ch
PC-Service M. Schweizer GmbH; Bannholzstrasse 6; CH-8608 Bubikon
Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch;
public key : http://www.pc-service.ch/pgp/public_key.asc;
fingerprint: EC21 CA4D 5C78 BC2D 73B7 10F9 C1AE 1691 D30F D239;
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: SUID permission on Bash script
Matthew Seaman m.sea...@infracaninophile.co.uk wrote: It would do no good for the kernel to hand the interpreter an open descriptor if the interpreter did not somehow know to read the script from that open descriptor instead of opening the script file by name. Errr -- no. That's what fdescfs(5) is for. When the kernel execs the interpreter, it tells the script to open /dev/fd/5 (for example) and doing that just connects the script to the open file descriptor the kernel used previously to taste the magic number and the #! line of the script. which -- again absent some special arrangement in the interpreter -- would cause the script to receive $0 as /dev/fd/5 instead of the actual name of the script, no? I'd expect this to at least break any messages that the script might try to produce via constructs like echo $0: whatever ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
shell command line argument + parsing function
hi,
assuming I execute shell script like this
$ ./script -c hello world
I want to save hello world string to variable COMMENT in shell script.
code:
#!/bin/sh
parse_cmdline() {
while [ $# -gt 0 ]; do
case $1 in
-c)
shift
COMMENT=$1
;;
esac
shift
done
}
parse_cmdline $*
echo $COMMENT
exit 0
but that only write out hello. I tried to change $* to $@, nothing
changed.
It is interesting, that if I dont put while loop into function
parse_cmdline,
and do echo $COMMENT, it writes hello world.
I WANT that function style. How to do it ?
thank you
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: shell command line argument + parsing function
On Mon, Aug 31, 2009, Stefan Miklosovic wrote:
hi,
assuming I execute shell script like this
$ ./script -c hello world
I want to save hello world string to variable COMMENT in shell script.
code:
#!/bin/sh
parse_cmdline() {
while [ $# -gt 0 ]; do
case $1 in
-c)
shift
COMMENT=$1
;;
esac
shift
done
}
parse_cmdline $*
echo $COMMENT
exit 0
but that only write out hello. I tried to change $* to $@, nothing
changed.
Did you put $@ in quotes? That is parse_cmdline $@. I haven't
tried this in calling functions in scripts, but use it frequently
when calling scripts from other scripts. I would probably use
something like:
for arg in $@; do
dosomething $arg
done
Bill
--
INTERNET: b...@celestial.com Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way
Voice: (206) 236-1676 Mercer Island, WA 98040-0820
Fax:(206) 232-9186 Skype: jwccsllc (206) 855-5792
Good luck to all you optimists out there who think Microsoft can deliver
35 million lines of quality code on which you can operate your business.
-- John C. Dvorak
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: shell command line argument + parsing function
hehe :D
easy as hell, one has to enclose argument of parse_cmdline into brackets :)
parse_cmdline $@
sorry for noise
On Mon, Aug 31, 2009 at 1:07 AM, Stefan Miklosovic
miklosovic.free...@gmail.com wrote:
hi,
assuming I execute shell script like this
$ ./script -c hello world
I want to save hello world string to variable COMMENT in shell script.
code:
#!/bin/sh
parse_cmdline() {
while [ $# -gt 0 ]; do
case $1 in
-c)
shift
COMMENT=$1
;;
esac
shift
done
}
parse_cmdline $*
echo $COMMENT
exit 0
but that only write out hello. I tried to change $* to $@, nothing
changed.
It is interesting, that if I dont put while loop into function
parse_cmdline,
and do echo $COMMENT, it writes hello world.
I WANT that function style. How to do it ?
thank you
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: shell command line argument + parsing function
On Mon, Aug 31, 2009 at 01:07:36AM +0200, Stefan Miklosovic wrote:
hi,
assuming I execute shell script like this
$ ./script -c hello world
I want to save hello world string to variable COMMENT in shell script.
code:
#!/bin/sh
parse_cmdline() {
while [ $# -gt 0 ]; do
case $1 in
-c)
shift
COMMENT=$1
;;
esac
shift
done
}
parse_cmdline $*
echo $COMMENT
exit 0
but that only write out hello. I tried to change $* to $@, nothing
changed.
But if you use $@ (with the quote marks) instead it should work fine.
For further explanation please read the sh(1) man page where it explains the
special parameters $* and $@, while paying special attention to how they
expand when used within double-quotes.
It is interesting, that if I dont put while loop into function
parse_cmdline,
and do echo $COMMENT, it writes hello world.
I WANT that function style. How to do it ?
thank you
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
--
Insert your favourite quote here.
Erik Trulsson
ertr1...@student.uu.se
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: IBM Stinkpad and Wifi
On Tue, 25 Aug 2009, herbert langhans wrote: Hi Daemons, I have some troubles to get connected to an open Wifi-Net. Its an older IBM Stinkpad 600 and I bought a new PCMCIA-card for it. Chipset of the card is from Atheros, this is recommended by the FreeBSD Handbook. I boot the Laptop, the drivers seem to be compiled in the generic Kernel. Booting shows something like: ath0: Atheros 5212 mem 0xff9f-0xff9f irq 17 at device 2.0 on pci2 ath0: Ethernet address: 00:11:95:d5:43:62 ath0: mac 7.9 phy 4.5 radio 5.6 Good. Then I try: # ifconfig ath0 up scan # (I tried this in a cool caf?, with cool people there and a cool open access point..) Nothing. There should be a list of the available access points. Is that right? Something I missed with the setup? I tried: #kldload wlan_wep.ko #kldload wlan_ccmp.ko #kldload wlan_tkip.ko ..and BSD 7.2, a very recent version, tells me that these files already exist (so the kernel took already care of it). What am I doing wrong?? All ideas appreciated! Thanks herb langhans Assuming that you know the SSID. # ifconfig ath0 ssid SSID # ifconfig ath0 up # dhclient ath0 What do you observe in this case (ie. dmesg log) ? thanks Saifi. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: howto alias a stty erase?
On Tue, 25 Aug 2009, Gary Kline wrote: is there a way of setty'ing stty erase to [backspace key? pretty sure that is the delete key. i'm tired of having to hand set it every time when i use the Konsole term. thanks, gary to set this you need to specify command and key combination command is : stty erase keycomb is : CTRL+v then press backspace key once overall it looks like # stty erase ^? Hope this helps. thanks Saifi. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Database Deployment
Contact 1 Million Targeted Prospects for $599 Why = E-Mail Broadcast? * Extremely Cost = Effective * Get your name in front = of LARGE audiences * 100% Accountability for = Results * Contact Individuals = Based on Your Criteria * 200 Million = Consumer Contacts Available * 45 Million Business Contacts = Available [email5.gif ] Peace of mind - privacy and = compliance are assured We know your primary concern is = privacy. Personal privacy integrity is at the very core of = our business, and, our success depends implicitly on = our ability to maintain the trust of the people = viewing our products. Quick delivery and = sophisticated reporting of all your e-mail campaigns MMS Inc's flexible approach to = e-mail campaign delivery has made it even easier for you = to transition through the e-mail marketing process. = The results are flawless campaign execution,increased response rates and improved ROI. Additionally,reporting and analytic tools help you segment lists based = on customer preferences and behaviors. One partner for your multi = channel marketing needs Choose speed and power to fully integrate your online and offline marketing = campaigns. MMS Inc is a leader in online data management and = e-mail deployment services. We are the industry's most successful provider of multi channel marketing solutions. This combination results in our = undisputed leadership in online = marketing. How = It Works: 3D * Our Graphics Team Designs = Your AD * You Pick Your Target Audience * Get OPT-IN Customer List Compiled * We Scrub Do not E-mail Database * Deployment of Millions = of E-mails * Track Click-Thru's = Open Rates * Direct Traffic To Your Web site * Customer Contacts You Interested * Blast Can Broken Up As You Need CALL 1-888-570-7776 TODAY! CALL 1-888-570-7776 TODAY! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: IBM Stinkpad and Wifi
On Tue, Aug 25, 2009 at 07:47:41PM +0200, herbert langhans wrote: Good. Then I try: # ifconfig ath0 up scan # (I tried this in a cool café, with cool people there and a cool open access point..) Nothing. There should be a list of the available access points. Is that right? Something I missed with the setup? I haven't seen up and scan used together like that before. Is that supported? Have you tried the following? # ifconfig ath0 up # ifconfig ath0 list scan -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] Quoth Christopher Hitchens: What can be asserted without proof can be dismissed without proof. pgpWmgda4uNn3.pgp Description: PGP signature
Re: localization management tool which works in FreeBSD
Check out Puppet. It may fit most of your needs, and it is very configurable, so you can design it for what you need it to do. http://reductivelabs.com/trac/puppet/wiki/AboutPuppet GUI is available as 3rd Party, I believe. -jgh On Aug 26, 2009, at 12:47 AM, Matthias Apitz wrote: Hello, Is ther some localization management tool which runs in FreeBSD and supports - connectors to CVS or SVN (i.e. pulls/stores the source and translated files there) - extracts text pieces for translations from various file formats, like XML, HTML, PO, ASCII, ... presents these extracted strings for translation and writes the target file with the translated strings; - keeps somehow track of already translated text pieces and offers the translation nextime the (modified) source file is opened again; - does some checks, for example if the length of the translated string will fit, some kind of aspell/ispell checks, ... - export/import of extracted strings and its translation to give a way the work of translation to translators; - GUI Thanks in advance matthias -- Matthias Apitz t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211 e g...@unixarea.de - w http://www.unixarea.de/ People who hate Microsoft Windows use Linux but people who love UNIX use FreeBSD. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: howto alias a stty erase?
On Mon, Aug 31, 2009 at 08:59:27AM +0530, Saifi Khan wrote: On Tue, 25 Aug 2009, Gary Kline wrote: is there a way of setty'ing stty erase to [backspace key? pretty sure that is the delete key. i'm tired of having to hand set it every time when i use the Konsole term. thanks, gary to set this you need to specify command and key combination command is : stty erase keycomb is : CTRL+v then press backspace key once overall it looks like # stty erase ^? Hope this helps. What worked was a simple alias: alias se=stty erase ^\? but while this does save several keysttokes [ and hitting the ctrl key with v ], now I often forget to type ``se'' before i use vi or vim... :-) oh well... . gary thanks Saifi. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix http://jottings.thought.org http://transfinite.thought.org The 5.67a release of Jottings: http://jottings.thought.org/index.php ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
