Re: Network traffic human readable?!

2012-01-21 Thread Jason C. Wells

On 01/21/12 07:47, Tobias Pulm wrote:

Hi,

how can I display my network traffic (netstat output) human readable?
Is there a function of the netstat that can do this?


Rather than netstat, perhaps you want 'tcpdump' or 'nc'.

Regards,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Rhythmbox and Ipod

2011-10-09 Thread Jason C. Wells
Is anyone here able to use Rhythmbox to manage their ipods?  I'd like to 
break the dependency on itunes if I can.  I've run the package and 
compiled my own with the ipod option set to no avail.  the ipod is not 
displayed in devices under rhythmbox.  dmesg shows that the device is 
probed.  I am able to mount the ipod using msdosfs.


Perhaps there is some hal, dbus, or other dependency that I am missing.  
How did you get youripod to work with rhythmbox?


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: rsync over nfs or rsync protocol

2011-09-25 Thread Jason C. Wells

On 09/23/11 14:11, Jerry McAllister wrote:

Why would you interject NFS in the middle of it? jerry

There would be no middle.  I would run rsyncd or nfsd, but not both.

Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: rsync over nfs or rsync protocol

2011-09-25 Thread Jason C. Wells

On 09/23/11 14:15, Chuck Swiger wrote:
Lots. The handbook has a chapter on backups which is worth reading, 
also Regards,


Ah the handbook.  I forgot all about it.  Thanks.

Later,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


rsync over nfs or rsync protocol

2011-09-23 Thread Jason C. Wells
I am looking into finally setting up a backup solution that's a little 
more sophisticated than a bunch of DVD-RWs.  I have two servers.  I'd 
like to make each a backup server for the other.  I'm considering using 
rsync.


Is rsync a good choice for a backup tool?
Should I use the rsyncd or should I use NFS?  I'm using 100 mbps ethernet.
What's the better solution I haven't considered?

Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using ports and packages together (or, how do I get mod_php5 ? )

2011-09-20 Thread Jason C. Wells

On 09/20/11 01:23, Matthew Seaman wrote:

'Latest' packages are built for each updated port + OS version +
architecture combination whenever resources are available on the build
cluster.  Typically that implies a delay of a few days or a week or so
after the update hits the ports CVS.  Yes, if you install the latest
pkgs everything should still remain consistent -- but that means you
should install all of the available updates: picking and choosing is the
route to tears before bedtime[*].
For my part, I plan to update all.  I have decided over the years that 
letting the FreeBSD project manage my ports versions for me is the way 
to happiness.  Roll-your-own is a thing of my past.


That said, updating onesy-twosy has only caused me a manageable amount 
of grief.  The problem is the timing.  It is always before bed, or 
before my paper is due, and openoffice is griping about something do 
with java and java is now done differently than it has been... Like I 
said, updating onesy-twosy can be a serious PITA.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using ports and packages together (or, how do I get mod_php5 ? )

2011-09-19 Thread Jason C. Wells

On 09/19/11 13:56, Lars Eighner wrote:

On Mon, 19 Sep 2011, Brandon Kuczenski wrote:

I'm concerned that, if I have some packages built from ports and some 
installed from the release, that the system will become unstable if 
things get too out of sync.


I noticed only recently that there are now packages on FTP in a folder 
called packages-8-stable.  I am not sure how often these are built.  I 
expect that the entire ports tree is built much like it is during a 
release, except at some later point in time.  I would expect that those 
ports are all dependency consistent with each other to the maximum 
extent possible.


I also prefer packages to ports, but there are a few updates to ports 
that I want now (xorg, xfce, rhythmbox), but I really don't want to try 
9.0 when it becomes a release.


I plan to upgrade my packages to 8-stable from this directory in a 
couple weeks. Maybe this policy will work for you.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using ports and packages together (or, how do I get mod_php5 ? )

2011-09-19 Thread Jason C. Wells

On 09/19/11 13:56, Lars Eighner wrote:

On Mon, 19 Sep 2011, Brandon Kuczenski wrote:

I'm concerned that, if I have some packages built from ports and some 
installed from the release, that the system will become unstable if 
things get too out of sync.




Doh, I just read the handbook.

http://www.freebsd.org/doc/handbook/packages-using.html

**

   If you want to force pkg_add(1)
   http://www.FreeBSD.org/cgi/man.cgi?query=pkg_addsektion=1 to
   download FreeBSD 8-STABLE packages, set PACKAGESITE to
   ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8-stable/Latest/.

Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


SATA Host Adapter Recommendation

2011-05-21 Thread Jason C. Wells
I am looking to get 2 sata host adapters.  The mandatory requirements 
are good freebsd support and hot swap capability.  I plan to use 
gmirror. I have discovered that my onboard chipsets don't support hot swap.


The highpoint cards are rated highly on newegg.  Are these good with 
freebsd?


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Can't Boot 8.2 with Gmirror

2011-03-27 Thread Jason C. Wells
Once upon a time, I partitioned two disks identically and then added 
them to a mirror.  It was good.  Then I upgraded to 8.2-RELEASE and now 
I can't boot.  Well, I did a little recovery work and I am currently 
booting without the gmirror so I am satisfied that my data is safe.


Having read a few messages it sounds like there are some steps I need to 
take to fix up my partitioning scheme to make things work right in 
8.2-RELEASE.  But since gotchas got me once, what are the gotchas? 
Should I partition before adding a disk to a mirror?  Unfortunately, one 
of the messages that I read said, There's no fix as yet. so I am quite 
leary of proceeding without a little help from my friends.


Thanks,
Jason C. Wells

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Unable to umount

2011-03-12 Thread Jason C. Wells

On 03/12/11 09:51, Chris Brennan wrote:
'umount -f' is dangerous, while it worked in your case, truly, make 
sure you

don't have any open files in the future, just to ensure no loss of files or
filesytem corruption

Run sync before umount -f to flush write caches.

Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Cannot build jdk16

2011-03-06 Thread Jason C. Wells

On 03/04/11 03:23, Redd Vinylene wrote:

Hello!

/usr/ports/java/jdk16 instructs me to manually fetch
tzupdater-1_3_34-2010o.zip and put it in /usr/ports/distfiles - this file
however is no longer available and has been replaced by
tzupdater-1_3_35-2011b. So what's the best way of installing jdk16 despite
of this? Rename tzupdater-1_3_35-2011b to tzupdater-1_3_34-2010o.zip and
make -DNO_CHECKSUM?
I recently ran into this.  You can just tweak the download URL manually 
and still get the old version of tzupdater.


It's not really necessary to cross post.  Give -questions a chance to 
help you first.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


SIL Fonts

2011-03-02 Thread Jason C. Wells
I was unable to find a port with Charis or Doulos typefaces.  Perhaps 
someone can tell me that these typefaces are part of some meta-port.  Which?


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Building Java

2011-02-26 Thread Jason C. Wells
Trying to build java.  Oracle has change tzupdater to 1.3.35.  Ports 
calls for 1.3.34.  Oracle provides 1.3.35 if you register for their 
support portal.  The support portal is behind a flash sniffer that won't 
let you in without flash. g!


Can someone please just point me to a bootleg copy of the java sources?

Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Building Java

2011-02-26 Thread Jason C. Wells

On 02/26/11 08:19, Jason C. Wells wrote:
Trying to build java.  Oracle has change tzupdater to 1.3.35.  Ports 
calls for 1.3.34.  Oracle provides 1.3.35 if you register for their 
support portal.  The support portal is behind a flash sniffer that 
won't let you in without flash. g!


Can someone please just point me to a bootleg copy of the java sources?

Thanks,
Jason C. Wells

Whoops.  That should read Oracle provides 1.1.34 only if you register.

Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Building Java

2011-02-26 Thread Jason C. Wells

Never mind.  I did a little URL edit and got the file.

Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Heimdal on 8.1 ASN.1 Encoding

2011-02-09 Thread Jason C. Wells
Some time ago I gave 8.0 a try as a Heimdal KDC.  I tried again today 
with 8.1.  With new principals and new keytabs I get this error:


Kerberos V5 refuses authentication because Read req failed: ASN.1 
encoding ended unexpectedly


Any ideas what this might be?  My kdc.conf and krb5.conf are minimal 
with no tinkering with keytypes.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Half a Mirror Backup

2011-01-02 Thread Jason C. Wells

Is using one half of a mirror as a backup a good/bad idea?

I was thinking of rotating drives on a periodic basis as a back up 
method.  You'd get the backup instantly, but rebuilding the mirror with 
the incoming drive would take a little time and leave you vulnerable to 
a small loss of data if a disk failed while the mirror was rebuilding.


Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Nullfs Allows Jailbreaking

2010-12-22 Thread Jason C. Wells
Here is my file system scheme for a newly created jail as viewed from 
the host:


/usr/jail/template on /usr/jail/f1 (nullfs, local, read-only)
/usr/jail/f1-fs/etc on /usr/jail/f1/etc (nullfs, local)
/usr/jail/f1-fs/tmp on /usr/jail/f1/tmp (nullfs, local)
/usr/jail/f1-fs/var on /usr/jail/f1/var (nullfs, local)
/usr/jail/f1-fs/usr-local on /usr/jail/f1/usr/local (nullfs, local)

As viewed from the jail:

/usr/jail/template on / (nullfs, local, read-only)

I like the idea of using a template for multiple jails that I plan to 
use later.  I like the ide of mounting the template read only.  I had to 
splice in the other nullfs filesystems so that things that need to be 
read-write can be.


But it seems kinda funky.  Inside the jail it looks like EVERYTHING is 
read-only and you have no way of knowing that /tmp is actually 
read-write.  There seems to be a violation of the segregation going on here.


What pitfalls can you see in a file system scheme like this for my 
jails?  Is the above behavior by design or did I find a flaw?


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Nullfs Allows Jailbreaking

2010-12-22 Thread Jason C. Wells

On 12/22/10 19:00, Chad Leigh -- Shire.Net LLC wrote:

I have been doing this for years with great success.   I don't understand your question.  
 How does it look like everything is read only from inside the jail?  The fact that a 
df only shows the root filesystem and not all your others file systems? 
(assuming that is still the truth -- my jails do this on older FBSD systems
Your report of great success is encouraging.  I've never done this and 
sometimes you don't see the full consequences when you haven't done 
something before.


I think you understand my question.  It's the fact that mount(8) report 
read only. If you looked at that, you would conclude that you had no 
write access at all.  Well, I set up the jail, so I can see behind the 
curtain.  A downstream user that never saw behind the curtain wouldn't 
know where they could write a file unless they simply guessed.


That is why I asked about jailbreaking.  There is information crossing 
the jail in a mysterious way.  The jail reports that everything under 
root is read only, but the jail can still see the read-writeness of the 
invisible (to mount) null filesystems.


From the sound of it, this is expected behavior.

Regards,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Samba Access Like Windows Explorer

2010-11-25 Thread Jason C. Wells

Is it possible to access samba shares much like windows explorer does?

The ultimate solution would be UNC names with browsing.  I would very 
much like to have my freebsd client see the network namespace in as 
similar fashion to windows as possible.


I also would like to avoid having to duplicate the hierarchy of mount 
points (for mount_smbfs) on every freebsd client in order to achieve 
this.  Nautilus access the samba shares this way, but I want this work 
on the command line.  Plus I prefer Thunar, which doesn't do samba 
access at all.


As it stands, I think I will have to mount all samba shares on a freebsd 
client into a top level directory named for the server name, with mount 
points sprinkled about.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Recovering a DVD

2010-10-29 Thread Jason C. Wells
I have a back up DVD that I cannot mount.  dd won't read /dev/acd0  with 
an error dd: /dev/acd0: Input/output error.Tried dvdisaster but it 
can't find my drive. Any pointers you can offer in getting this data off 
this disc are greatly appreciated.


Thanks,
Jason


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


PF Version

2010-10-04 Thread Jason C. Wells
What version of PF shipped with 8.1-RELEASE?  Where can I find this for 
myself?  I looked in cvsweb but was unable to understand what I was reading.


Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: this is probably a little touchy to ask...

2010-09-10 Thread Jason C. Wells

On 09/10/10 07:29, Randal L. Schwartz wrote:


I repeat... Java had its day.  Time to move on.

   

Java is not just for browsers.

Regards,
Jason C. Wells

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: kernel replacement in installation media

2010-09-10 Thread Jason C. Wells

On 09/10/10 20:01, CyberLeo Kitsana wrote:

On 09/10/2010 07:57 PM, Samuel Martín Moro wrote:
   

Hi,
...
The thing is, it only have a 128M flash disk (seen as /dev/da0)
GENERIC needs almost 250M.
 

I have run into something similar, while building a ZFS install to run
on an Intel SS4200EHW NAS device. Utilizing a series of scripts I have
developed[1], I was able to compact an entire functional FreeBSD system
into 4.6MB /boot and 84MB root with mkisofs and mkuzip, without
permanently tying up a bunch of the machine's limited RAM with an MFS,
and with acceptable performance despite the IDE channel's speed limit of
1.6MB/sec. Plus, boot and root are read-only, so the CompactFlash card
won't wear out prematurely.

You can make use of src.conf(5) while building world and kernel to
eliminate a lot of unnecessary userland components, and MODULES_OVERRIDE
and WITHOUT_MODULES to control what modules get built, as the kernel
build process will build all modules regardless of what might be in your
kernel config. Be prepared to perform lots of testing, though, as a
missed critical dependency can appear to succeed, but leave something
else broken.
   
I do believe you can omit the *.symbols files.  I plan to try it 
myself.  Would someone please confirm this?


And you might look at resurrecting the picobsd method of crunching 
binaries into one single statically linked binary with hard links of 
differing file names if you want to get really small.  I used to do this 
when compactflash was only 128MiB.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: this is probably a little touchy to ask...

2010-09-09 Thread Jason C. Wells

On 09/09/10 14:02, Jules Gilbert wrote:

About Java.  Using java with freebsd/mozilla or another browser.

Some questions:

Is GNU java sufficient?  I need to be able to run a browser with Java.
  No alternative -- and no I don't want to run windoz.

I'm trying to do an 8.1 install.

Does this problem exist with Sun's x86 OS?

Does anyone have a website or even a set of notes as to the right way
to do this.

   

cd /usr/ports/java/jdk
make
make install

Now an opinion.  If Oracle isn't going to help us, we should look
around for an alternative, even inventing something else, something
that isn't Sun/Oracle/Java.

Because this problem has been getting progressively worse for the past
three or four years or so (longer?,) and, look around, it's hurting
the FreeBSD community.
   
Help you with what?  Their silly little distribution policy is annoying. 
It doesn't prevent you from running java.


Regards,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: unchar and ulong typedefs

2010-09-06 Thread Jason C. Wells

On 09/06/10 17:08, Alexander Best wrote:

hi there,

just stumbled over PR 44365 and was wondering why FreeBSD never added unchar
and ulong to types.h to increase sys v compatibility?
   

Sys V.  Is that some sort of linux distribution?

(only half joking)

Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ASN.1 encoding ended unexpectedly

2010-09-05 Thread Jason C. Wells
I've upgraded to FreeBSD 8.1-R from 7.1-R.  I propogated my database to 
my new KDC.  After doing so I've deleted and recreated most of my 
principals to take advantage of AES.  I also deleted and re-extracted 
keytabs on the hosts.  I can acquire a TGT.  When I attempt to telnet to 
a host, I receive this error:


[ Kerberos V5 refuses authentication because Read req failed: ASN.1 
encoding ended unexpectedly ]


Any ideas where to start?

Thanks,
Jason C. Wells


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


su always works if pam config missing

2010-08-26 Thread Jason C. Wells
The su(1) command always provide root access if there are no pam config 
files. Is this actually the desired behavior?


Regards,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Typical Network Performance

2010-08-21 Thread Jason C. Wells

On 08/08/10 22:10, per...@pluto.rain.com wrote:

Jason C. Wellsj...@speakeasy.net  wrote:
   

By process of elimination (swap cables, swap ports, try different
host pairs) I was able to discover that a single server on my home
LAN was getting about 1.6% performance compared to other servers
getting 94%
 

...
   

What would be the next step to figuring out why this host's network
performance is slow?
 

My next step would be to check whether this host and its hub/switch
port agree on speed and duplex -- occasionally some combination
of netcard phy and switch type gets the negotiation wrong.  Duplex
mismatch, in particular, can have huge performance impact.
   


I needed a windows utility to connect to my switch.  Instead I just 
added a realtek NIC to my server to replace the Marvell on-board NIC.  
After this, network load using 'nc' to pipe 1MiB gives 98% transfer 
rate.  Even though I don't know what the problem was, I consider the 
problem solved.  Thanks.


Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Typical Network Performance

2010-08-08 Thread Jason C. Wells
Seems like someone else got their question answered, but I was able to 
make use of the tips that were provided.  win-win.  Thanks for the pointers.


By process of elimination (swap cables, swap ports, try different host 
pairs) I was able to discover that a single server on my home LAN was 
getting about 1.6% performance compared to other servers getting 94% 
performance using the 'dd if=/dev/zero bs=1M count=1 | nc servername 
2000' technique. netstat -I on the errant server reports no errors.


What would be the next step to figuring out why this host's network 
performance is slow?


Regards,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Typical Network Performance

2010-08-01 Thread Jason C. Wells
I have a 100 mbps (12,207 KiB/s) home LAN in full-duplex.  A 1 MiB file 
transfers at 146.7 KiB/s via wput.  The same file transfers at 91.34 
KiB/s via samba.  That's less than 1% of available transfer rate.  Seems 
like my transfers are slow.  I do better than that when installing via 
the internet.


Does the FTP performance compared to available bandwidth seem right?  Is 
the relative performance of samba to FTP right?  I read a couple quick 
links on the net which said, It's complicated.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Configure PMBR to Find Loader on GPT Disk

2010-06-09 Thread Jason C. Wells

Jason C. Wells wrote:

After setting up a GPT disk and installing the boot blocks with:

   # gpart bootcode -b /boot/pmbr -p /boot/gptboot -i 1 ad4

The system wants to boot:

   0:ad(0p2)/boot/kernel/kernel

I manually intervene to cause the system to boot:

   1:ad(5p8)/boot/loader

How do I configure the boot blocks to do this without human 
intervention on a GPT system?  boot0cfg doesn't seem to be the correct 
tool for this job.
The docs and various guides around the net could use a little help.  
Please correct me below.  My C and assembly is non-existent and I 
discovered the information below by trial and error and reading the source.


My subject header is wrong.  The pmbr is working just like it should.  
It is gptboot that is failing to find my boot loader.


I found a work around for the non-configurability of the pmbr/gptboot 
code.  gptboot searchs for the first UFS partition and tries to use that 
partition as root.  In my partition scheme, the first partition was for 
user data. The presence of boot.config in the first partition will cause 
gptboot to boot some other disk and partition of your choice.  In my 
case, I added 1:ad(5p8)/boot/loader to boot.config on 0:ad(4p2) to allow 
my system to boot automatically.


Also, some guides online magically select the size of 64k for the 
freebsd-boot partition.  This is not just magic. It's mandatory.  The 
pmbr boot code assume that the partition is not larger than 64k and 
complains if it is larger.  Ref my earlier message on that topic.


The bad part about all of this is that I intend to build a mirror from 
two disks. Will my boot process be brittle because the boot.config is 
not actually located in / where it truly belongs?  If I pull bios disk 
0, then when I boot, bios disk 1 will be renumbered to bios disk 0.  The 
boot.config file won't be there.  The system will fail to boot.


It sure would be nice if 'gpart bootcode' would accept 
'1:ad(5p8)/boot/loader' as an option so I don't have to be sticking 
boot.config files in weird locations.


Regards,
Jason

A partition of type freebsd-boot is NOT where you mount /boot.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Configure PMBR to Find Loader on GPT Disk

2010-06-08 Thread Jason C. Wells

After setting up a GPT disk and installing the boot blocks with:

   # gpart bootcode -b /boot/pmbr -p /boot/gptboot -i 1 ad4

The system wants to boot:

   0:ad(0p2)/boot/kernel/kernel

I manually intervene to cause the system to boot:

   1:ad(5p8)/boot/loader

How do I configure the boot blocks to do this without human intervention 
on a GPT system?  boot0cfg doesn't seem to be the correct tool for this job.


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


boot loader too large

2010-04-17 Thread Jason C. Wells
I have been following a number of GPT and ZFS docs on the web. I intend 
to run UFS with GPT. 


I have partitioned the drive.  I installed the bootcode using:

   gpart bootcode -b /dist/boot/pmbr -p /dist/boot/gptboot -i 1 ad4

ad4p1 is a 1 MB partition with nothing in it and type=freebsd-boot.  The 
root device is ad4p2 with binaries and kernel already installed. When I 
boot I get an error message:


   boot loader too large

I am not sure what stage of the boot process this occurs in.  I do not 
see any of the familiar boot0 or boot1 prompts.  I tried installing mbr, 
boot0, and boot1 just to see what would happen.  I didn't expect them to 
boot assuming that they are GPT unaware.  I did get some familiar 
prompts/errors. I at least confirmed that I was managing to get the 
bootcode installed.


Is there any documentation on the new GPT boot process yet?  I am 
curious how the PMBR knows to pass control to the boot partition, and 
then on the to root partition's /boot/loader.


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: boot loader too large

2010-04-17 Thread Jason C. Wells

Dan Naumov wrote:

Hey

A 64kb freebsd-boot partition should be more than plenty for what you
want to do, see my setup at: http://freebsd.pastebin.com/QS6MnNKc
  


Interesting.  I read somewhere that the boot partition should not be too 
large as the entire partition is loaded into memory.  I re-partitioned 
my drive to create a 64KiB freebsd-boot partition and I no longer get 
the error.  It would appear that there is an undocumented maximum size 
to the freebsd-boot partition.  In my case, a 1MiB boot partition was 
too large.


Now I need to teach gptboot in ad4p1 how to find my root partition in 
ad4p4 without manual intervention.  Is there a GPT equivalent to boot0cfg?


gptboot currently attempts to boot:

   0:ad(0p2)/boot/kernel/kernel

I'd like it to boot:

   0:ad(4p4)/boot/loader

How does the boot process discover the partition in which the gptboot 
loader resides?


And GPT is pretty damn slick.  Nice work FreeBSD hackers.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Persistent Kernel Variables

2008-12-25 Thread Jason C. Wells

I have a new kernel variable in /boot/device.hints.

kern.timecounter.hardware=i8254

but it's not set during boot.   I have other hints that are set during 
boot.  Why is kern.timecounter.hardware not being set?  How can I fix it.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Kernel Variables Sanity Check

2008-12-24 Thread Jason C. Wells

Gonzalo Nemmi wrote:
Hi Jason, and sorry to pop in, but now you got me guessing if I should follow 
your lead too ...


This is what I get in here:

[gonz...@inferna ~]% grep Time /var/run/dmesg.boot
Timecounter i8254 frequency 1193182 Hz quality 0
Timecounter ACPI-safe frequency 3579545 Hz quality 850
acpi_hpet0: High Precision Event Timer iomem 0xfed0-0xfed003ff on acpi0
Timecounter HPET frequency 14318180 Hz quality 900
Timecounters tick every 1.000 msec

Should I change kern.timecounter.hardware to i8254 too??
  
I did this because NTP wouldn't synch.  My clock was so much faster than 
actual time that the time between running ntpdate and running ntpd would 
cause to much error (jitter?, offset?) for ntpd to synch.  So if you're 
not having a problem, you don't need to do anything.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


NTPD on 7.1-PRERELEASE

2008-12-23 Thread Jason C. Wells
My ntpd will not sync on my newly installed 7.1-PRERELEASE hosts.  The 
configuration is the same as other correctly time synched hosts.  They 
are behind the same firewall.  The only difference is that these hosts 
are running 7.1.


Does anyone have any tricks for getting ntpd to sync on 7.1?  Did 
something time related change in the kernel?


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Going back to generic kernel

2008-12-23 Thread Jason C. Wells

Zbigniew Szalbot wrote:

Hi friends,

I have a test machine with a custom kernel, which I copied (as the
handbook suggests) to /root/kernels/. However, I do not really need
it.

My question is how do I switch back to the generic kernel? Many thanks
and all the best to you all!

  
/root/kernels is not booted by default.  I doubt this is the kernel that 
is running.


To run generic again, simply install the generic kernel much the same 
way you did the custon kernel.


cd /usr/src
make buildkernel KERNCONF=GENERIC
make installkernel KERNCONF=GENERIC

or set KERNCONF in /etc/make.conf

If you tweaked /boot/loader.conf to load something other than 
/boot/kernel/kernel then you'll need to untweak it.



Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Kernel Variables Sanity Check

2008-12-23 Thread Jason C. Wells
Based on someone elses historical message I tried changing the time 
counter from TSC to i8254


# sysctl kern.timecounter.hardware=i8254

and after doing some manual calculations I tweaked

# sysctl machdep.i8254_freq=1187216
# machdep.i8254_freq: 1193182 - 1187216

Is doing this safe?  I'm concerned that there are unforeseen 
consequences to messing with these kernel variables.  Ntpd seems to like 
this setup.  Anything to make ntpd happy.


And if I may, why can't ntpd do this? (Don't answer that.) I use the 
FINE software to set my clock so I don't have to.  It's supposed to make 
my life easier.


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Disk Errors

2008-12-14 Thread Jason C. Wells
I am working on installing 6.4-RELEASE on a Motorola CPN5360 which is an 
industrial CompactPCI computer.  The system boots via PXE.  That much is 
good.  The host has two storage devices.


This is a 16MB boot flash device that is soldered to the board.

ad0: FAILURE - SETFEATURES SET TRANSFER MODE status=51READY,DSC,ERROR 
error=4

ABORTED
ad0: 15MB SunDisk SDTB-128 vcb 1.45 at ata0-master BIOSPIO

This is a standard compact flash from Kingston. Many repetitive errors 
are snipped here.


ad2: 1923MB CF CARD 2GB Ver2.19K at ata1-master UDMA33
ad2: FAILURE - READ_DMA timed out LBA=3940269
ad2: FAILURE - READ_DMA timed out LBA=3940209
ad2: TIMEOUT - READ_DMA retrying (0 retries left) LBA=0
ad2: FAILURE - READ_DMA timed out LBA=0
ad2: TIMEOUT - READ_DMA retrying (1 retry left) LBA=1
ad2: TIMEOUT - READ_DMA retrying (0 retries left) LBA=1

The flash drive is detected with 3940272 sectors.  Is there a way to 
control the LBA= parameter?  Does it matter if I try?


How can I control the number of retries?

I read that FreeBSD doesn't use the BIOS at least for CHS.  Does FreeBSD 
use the BIOS for PIO and UDMA modes?


Any thoughts on how to get these storage devices working?

Thanks,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: stupid xfce clock question

2008-10-06 Thread Jason C. Wells

Aryeh M. Friedman wrote:
I work remotely with a company that is across the international date 
line from me and I can do the math in my head but want to know if it 
is possible to add a clock to my xfce panel that shows the time their 
(and keep the one that has my time on it)

___
You can run two instances of orage.  I think they read the same config 
file.  I think you would have little trouble hacking up a TZ1, TZ2 
variable for seperate instances to read.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Make World Inside Jail

2008-08-28 Thread Jason C. Wells
I currently use a separate machine to make world and to make and archive 
ports and packages.  I would like to retire that machine and move that 
functionality into a jail. I am due to switch to 7.1 from 6.3 soon.


I understand that I cannot run divergent kernels in the jails.

I could still make a 7.1-RELEASE world on a 6.3-RELEASE jail and 
installworld into the jail.  That would leave me with a very strange 
jail system with a new generation system (binaries / libs / includes / 
utils / ports) with an old generation kernel.


The only purpose of the jails is compiling world and installing ports. 
The parent system on which the jails reside cannot be made unreliable 
due to running the mishmash old/new jails.


I'll need to run NFS servers and telnet servers inside the jails. 
Systems on my network would mount the jail's /usr/obj, /usr/src and 
/usr/ports via NFS to facilitate installworld and port upgrades.


Can I make this work? Am I asking for trouble?

Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Spam sent to me from my own mail server ?

2008-08-27 Thread Jason C. Wells
Peter Ulrich Kruppa wrote:
 Hello,
 
 for some time now I keep receiving spam mails from my own (small) mail
 server, some of them with faked usernames some of them even with my own
 ([EMAIL PROTECTED]).
   1) How is this possible?
   2) What can I or do I have to do against it?
 I am running a quite plain sendmail setup from 7.0 -STABLE.

Look to see if you are running an open relay.  You shouldn't be by
default.  There are websites that will test this for you if you simply
provide the IP of the server.

That's a start.

My SPAM policy is something like this.  Spammers win. feh!  It's not the
best policy, but it requires the least effort on my part.

Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


USB Drive Reliability

2008-08-17 Thread Jason C. Wells
I am running FreeBSD 6.3.  I have found that attaching and detaching USB 
drives to my box is unreliable. Is this the experience of other users?


Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: USB Drive Reliability

2008-08-17 Thread Jason C. Wells

Wojciech Puchar wrote:

I am running FreeBSD 6.3.  I have found that attaching and detaching 
USB drives to my box is unreliable. Is this the experience of other 
users?



something more precise please?


I realize that this is primarily a tech support forum. I wasn't asking 
for a solution to the problem.  I was asking for other peoples 
experiences. If the USB support in FreeBSD was spotty according to other 
people, as has been reported, then I plan to not even try to work on it 
more until I install 7.1.


Just for the record:

- crashes the system on attachment
- crashes the system on detachment
- the system hangs on attachment but resumes responding if you pull the 
drive
- installing the drive results in the little blue light coming on with 
dmesg reporting attachment, but attempts to mount fail with device not 
configured or somesuch

- dataloss on the device that chkdisk in DOS couldn't save

Basically, every possible bad behavior that you could ask from a USB 
connected drive has happened to me over time as I keep coming back and 
trying USB drives.  That's OK.  I'm not upset.  I'm not complaining.  I 
just want to know what to expect from USB drives in FreeBSD.


BTW, I love Poland!  My family hails from Poland several generations 
ago. I just watched you guys win gold in boat racing.  Robert Kubica is 
my favorite driver. I've also been keeping on eye on Poland in the world 
scene. Don't let the bear get you down. They have no cause to say the 
things they've said recently. I wish your country the best.


Regards,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup RELENG_6_3 to RELENG_7 impaired gnome

2008-05-25 Thread Jason C. Wells
Try downloading the binary packages for 7.0 that you need and install 
them.  That would be fastest.


FreeBSD doesn't claim to maintain binary (library?) compatibility across 
major releases.  I personally have never had a problem, but I consider 
that dumb luck.


Regards,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Some ideas for FreeBSD

2008-02-08 Thread Jason C. Wells
Oh good heavens.  How do you spell joke in geekish?  I spell it md 
backed swap.


Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Some ideas for FreeBSD

2008-02-07 Thread Jason C. Wells

Heiko Wundram (Beenic) wrote:

Am Donnerstag, 7. Februar 2008 07:32:16 schrieb Jason C. Wells:

Norberto Meijome wrote:

But I agree with Wojciech..do you really want to use swap files?

One could mount an md filesystem and then use that as swap.  That way
you wouldn't need to use any disc space.  As a plus, the performance
would be way better than disc.


Ahem, sorry, that's just plain stupid. Either the md system is backed up by 
RAM (in which case you don't need the swap anyway; why'd you want to access 
RAM by putting it in a swap on an md in RAM?), or it's backed up by swap, in 
which case you have a chicken and egg problem.


Mmm, yes. That is quite a pickle.  But a chicken or an egg would still 
be inferior to an md backed swap. :)


Regards,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Upgrading the Installed package

2008-02-06 Thread Jason C. Wells

navneet Upadhyay wrote:

Hi,
  I have two binary packages of an application of version 1.1 and 1.2.
*The 1.1 is already installed, how can i upgrade it to 1.2* ?

Do i have to uninstall 1.1 and then install 1.2 ?   I would prefer a way by
which i can upgrade an wxisting package without uninstalling.


Uninstall reinstall takes all of five seconds.  It's quite easy.  Any of 
the ports management software has to do some variety of this anyway. 
The only difference is they do it with one command.


#!/bin/sh
pkg_delete pkg-1.1
pkg_add pkg-1.2

There!  A new port management binary upgrade utility.

The usefulness of the port management apps (portmaster,portupgrade) is 
when you want to upgrade multiple ports and large amounts of 
dependencies all at once.  They are more trouble than they are worth for 
a single package. That is, unless you are already using them.


Regards,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Some ideas for FreeBSD

2008-02-06 Thread Jason C. Wells

Norberto Meijome wrote:


But I agree with Wojciech..do you really want to use swap files?


One could mount an md filesystem and then use that as swap.  That way 
you wouldn't need to use any disc space.  As a plus, the performance 
would be way better than disc.


Regards,
Jason Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Updating older 7.0 to newer sources, local buildworld problems

2008-01-23 Thread Jason C. Wells

Sten Daniel Soersdal wrote:


Thank you, i appreciate your time.
At the bottom of the (messy) mail i sent there was the error i get from 
building sources. I think it's the same error, no matter what version of 
sources i download.
Could it have any relations to any compiler version upgrades done in 7.0 
(not by me but by freebsd project)?


How many versions of the source code did you try?  In your case I 
recommend only 7.0-RELEASE.  The terminology in your email makes me 
skeptical that you have tried what I recommended.


Did you run cvsup?  I highly recommend using cvsup to update your 
sources.  It's slick.  It's saves bandwidth.  Plus it's the way that 
just about everyone who runs FreeBSD maintains there system.  That means 
lot's of tech support.


If you are just downloading sources using FTP, or perhaps sysinstall, 
then I recommend deleting all of /usr/src and re-FTP-ing the sources.


I have never had a problem that could not be fixed by re-supping the 
sources.  On rare occasion a breakage will be introduced by the freebsd 
project or you might cvsup most, but not all of a change that is being 
implemented.  A re-sup has always worked for me.  A re-sup has always 
been the very first thing that people on -questions have recommended.


-RELEASES are never broken.  At least not that I can recall.

Try re-posting your question with the last twenty lines or so of your 
log file.  Perhaps someone else will pick it up.  They might be able to 
suss out the exact details of your problem.


Regards,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Updating older 7.0 to newer sources, local buildworld problems

2008-01-22 Thread Jason C. Wells

Sten Daniel Soersdal wrote:
I'm having troubles updating my buildworld and i've had troubles 
narrowing it down on google.


My question is:

Is there any way i could update the system in the state it is now?
(Preferably without reinstalling the entire system from scratch.)

PS. I've heard about freebsd-update but never got it to work (see below)


I have never used freebsd-update so I can't comment there.  I think 
that's a binary update though.  You are trying to build from source.


I would use cvsup to update my source tree to 7.0-RELEASE.  Since your 
initial sources are before Sep 19, they are not 7.0-RELEASE.  Read about 
cvsup in the handbook.  Look at the example files in 
/usr/share/examples/cvsup.  The I would run 'make clean' and 'make 
buildworld' all over again.


Except for creating a newfs and tweaking files in /etc, building the 
world is pretty much installing the entire system.


http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cutting-edge.html

Be careful about the cvs tag that you use.  RELENG_7_0_0_RELEASE is what 
you will eventually want.  If that tag has not yet been set by releng@, 
then you will delete your sources.  I recommend '-d 20' with cvsup to 
protect yourself from accidental deletions.  RELENG_7 is probably what 
you want until 7.0 is actually released.


Regards,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ACPI Thermal Zone Error

2008-01-21 Thread Jason C. Wells
I just built a new 6.3 kernel with device acpi.  I am now getting this 
error:


acpi_tz0: _TMP value is absurd, ignored (-127.0C)

Does FreeBSD ACPI functionality override the system BIOS?  I am 
concerned about overheating my system.


How can I fix this error?  How can I silence it if it is really a no-op?

Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Gutmann Method on Empty Space

2008-01-18 Thread Jason C. Wells

RW wrote:

On Thu, 17 Jan 2008 08:59:44 -0800
Jason C. Wells [EMAIL PROTECTED] wrote:



Gutmann method might be excessive but any software that uses it shows
a seriousness about security. 


Gutmann himself regards the continued use of his method as Voodoo


Yes well.  We lay people have only the best voodoo to go by. There are 
many things that I do with computers that can be called voodoo by virtue 
of the fact that I do them superstitiously. And if I don't happen to 
know the optimal patterns/passes to apply to a specific drive, then I'll 
do what was last known to be adequate until I hear otherwise. (As I have 
just now.)


It's interesting to note that Gutmann's earlier work said, loosely If 
you do this, you should be fairly certain you data is unrecoverable. 
He now says, A few passes of random data is as good as can be 
expected.  Those two standards of performance are very different.  Too 
bad wikipedia didn't cite the follow on work.


And no I don't want to physically shred my drive in a running server.  I 
just want to make sure that any given day that the police come take my 
functioning computers way that nothing can be recovered that I 
explicitly deleted.  The blank space should be blank.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Gutman Method on Empty Space

2008-01-17 Thread Jason C. Wells
Can anyone recommend a utility for the secure overwriting of unused disc 
space?  I am a satisfied customer of Eraser for Windows.  I'm looking 
for the same thing for FreeBSD.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Gutman Method on Empty Space

2008-01-17 Thread Jason C. Wells

Marc Silver wrote:


Obviously it all comes down to how important the data is that you're
removing, but a single write is not enough if the data needs to be
disposed of 'securely'.


Yep.  The magnetic media retains a trace of everything that was recorded 
on it. If you have recorded over an old cassette tape, you may still be 
able to discern the original recording under the new recording.


Gutmann method might be excessive but any software that uses it shows a 
seriousness about security.  Plus I don't have to do all that writing. 
The computer does it for me.


Wipe looks like a good start.  Thanks for the tip.

Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: AFS ... or equivalent ...

2008-01-14 Thread Jason C. Wells

Marc G. Fournier wrote:


  Does anyone know if there is any serious work being done to get AFS working 
under FreeBSD?  I have a large project that I'm working on that AFS (or 
something equivalent) would be *very* useful for, but we're trying to keep it 
as FreeBSD-pure as possible ...


Yes.  Please get in touch with any of the people CC'ed in this list.  I 
believe Matt Benjamin is the one who is actually getting serious on this 
project.  Patches were even mentioned in a recent email.  I recall Jim 
Rees is knowledgeable on AFS.  I also think one Derrick J. Brashear was 
interested/knowledgeable too, but I don't have his address handy.  If I 
misrepesented anyone please feel free to correct me.


Matt, if you do not know Marc, look up Postgresql.  Marc is the port 
maintainer for postgresql as well as a postgres developer. (iirc)


Me, I am just a user who put together an ugly, ugly little FreeBSD port 
a long time ago in the hope that it would inspire some people who were 
qualified to do real work to pick it up and run with it.


There are a couple mailing lists suitable for FreeBSD porting 
discussions.  One is run by the OpenAFS people and the other is run by 
FreeBSD people.


Sorry for the spam and cross posts. It seems like the interest in 
OpenAFS on FreeBSD is building.  I hope that this message will put the 
right people in touch with each other and that maybe a concerted effort 
to port OpenAFS to FreeBSD will arise.


Later,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: AFS ... or equivalent ...

2008-01-14 Thread Jason C. Wells
For those of you who haven't seen this.  Here is my rudimentary port. 
It is nothing more than the FreeBSD parts wrapped around the OpenAFS 
source.  I think I was working on version 5 of FreeBSD but I don't 
recall for sure.  This was version OpenAFS 1.4.2.  It compiled. The 
kernel module loaded. I was able to get tokens using the system heimdal. 
I even got a directory listing via the client. Attempting to manipulate 
files resulted in an immediate panic.


http://www.stradamotorsports.com/~jcw/openafs/

I would advise those who are interested to discuss and choose a mailing 
list for continuing the effort.  We are currently writing four different 
lists in this thread.


I'll test whatever you guys come up with.  I'll be running FreeBSD-6.3 
real soon now.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mailing lists

2007-12-13 Thread Jason C. Wells

 On Thu, 13 Dec 2007, Brian wrote:

The fact that each mailing list exists as [EMAIL PROTECTED] and 
[EMAIL PROTECTED] makes me need to make 2 filters for each 
list I subscribe to.  Can I suggest that if this is going to 
continue, that the server shows one format for all the messages 
that go out?


Filter on the Sender header.  That is controlled by the list manager and 
doesn't have duplicate names.  For -questions, the Sender is 
[EMAIL PROTECTED]


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Scanner Compatibility

2007-12-05 Thread Jason C. Wells

Does this represent the state of the art in scanners under FreeBSD?

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/scanners.html

Any other up to the minute tips on purchasing a scanner?  Does 
7.0-RELEASE present any new issues?


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Website

2007-11-18 Thread Jason C. Wells

Frank Shute wrote:

On Sun, Nov 18, 2007 at 10:42:57AM -0600, Chris wrote:
  

** pissing contest snipped **

One of the questions I like to ask myself before I post to the list is, 
Will my reply add value to the individual poster or the community at 
large?  It's a great question to consider before sending.  The purpose 
behind the open source movement is to contribute value to one another.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PAM, su, and ksu behavior

2007-08-01 Thread Jason C. Wells
I would like for the su command to NOT prompt the user for any password 
when the user has a kerberos ticket.  That is su should not prompt for a 
kerberos or unix passwd.  PAM is unable to determine if a terminal is 
encrypted and so the system should not inspire the user to cough up a 
password.


I simply added:

authsufficient  pam_ksu.so  no_warn

to the second line in the default /etc/pam.d/su config file.  It worked, 
but I would not expect to be prompted for a password when I already have 
a ticket.  (Secure single sign on is the whole point, right?)


What I desire is the behavior of the MIT ksu command.  If the principal 
is listed in .k5login and has a valid ticket for the requesting 
principle, to be granted the shell as the new UID.


Near as I can tell, the heimdal ksu command that comes with FreeBSD has 
nothing to do with PAM.  Is that true?


Don't assume that I understand PAM.  I have been looking at this for all 
of a couple days.  It seems dead simple.  Maybe I just can't get the 
behavior I want.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What have you done for me lately !!!

2007-01-17 Thread Jason C. Wells

Kris Kennaway wrote:

Besides, apple has and does contribute code back to FreeBSD.

Kris
  
Yes but...  they took Jordan and they didn't give him back,  did they?  
He wasn't BSD licensed, was he? They can't just do whatever they want 
with him.  Those bastards!  So  phooey on Wilfredo Sanchez and his 
Jordan stealing antics.


::sniff::  I miss Jordan

Later,
Jason :)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Mystery Spam Piling Up in Mqueue

2007-01-14 Thread Jason C. Wells
I have a bunch of mail piling up in /var/spool/mqueue.  It appears to be 
all spam and it appears to be generated on the localhost.  I am not 
sending it.  I double checked my self @ abuse.net to see if I was an 
open relay, I'm not.  I can't really say where it's coming from.  How do 
I figure this one out?


An example is shown below.

What has been a fun hobby all these years is turning into a nightmare.  
Spam is making me batty.


Thanks,
Jason C. Wells


V8
T1168684668
K1168832991
N87
P7790448
I0/81/22039
MDeferred: Connection refused by macbilling.com.
Frs
$_localhost
$r
$slocalhost
${daemon_flags}
${if_addr}192.168.1.204
SMAILER-DAEMON
MDeferred: Connection refused by macbilling.com.
rRFC822; [EMAIL PROTECTED]
RPF:[EMAIL PROTECTED]
H?P?Return-Path: 81g
H??Received: from localhost (localhost)
   by mx1.highperformance.net (8.13.8/8.13.8) id l0DAbm7q007014;
   Sat, 13 Jan 2007 02:37:48 -0800 (PST)
   (envelope-from MAILER-DAEMON)
H?D?Date: Sat, 13 Jan 2007 02:37:48 -0800 (PST)
H??Received: from localhost (localhost)
   by mx1.highperformance.net (8.13.8/8.13.8) id l0DAbm7q007014;
   Sat, 13 Jan 2007 02:37:48 -0800 (PST)
   (envelope-from MAILER-DAEMON)
H?D?Date: Sat, 13 Jan 2007 02:37:48 -0800 (PST)
H?F?From: Mail Delivery Subsystem MAILER-DAEMON
H?x?Full-Name: Mail Delivery Subsystem
H?M?Message-Id: [EMAIL PROTECTED]
H??To: [EMAIL PROTECTED]
H??MIME-Version: 1.0
H??Content-Type: multipart/report; report-type=delivery-status;
   boundary=l0DAbm7q007014.1168684668/mx1.highperformance.net
H??Subject: Returned mail: see transcript for details
H??Auto-Submitted: auto-generated (failure)
.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mystery Spam Piling Up in Mqueue

2007-01-14 Thread Jason C. Wells

Jeff Royle wrote:

Welcome to the running a mailserver on the intertubes. :-)

And it used to be such a nice neighborhood.  :(

It's hard to be a good netizen.  I probably don't spend as much time on 
it as purist would prefer.  I just try to sweep up whatever flotsam 
comes my way when I find the time.


Later,
Jason


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Best SPF Implementation

2007-01-03 Thread Jason C. Wells
Which of the ports provides the best SPF implementation for FreeBSD 
running sendmail? 

I messed around with SPF when it was still in it's infancy.  There seem 
to be more choices now.  I value ease of use if that is a useful 
discrimination.  I really need to add something to spamassasin to 
prevent receiving the spam in the first place.  I hate spending time on 
this but these guys are killing me.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Where are CVS Tags Announced

2006-10-25 Thread Jason C. Wells
I was looking forward to the tagging of RELEASE_6_2 in the ports tree.  
I surfed around cvsweb but didn't see anything that looked like a tag 
announcement.  Where do I look to determine if the sources have been 
tagged with a new release? 


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Compatibility Between Releases Policy

2006-10-05 Thread Jason C. Wells

Erik Norgaard wrote:

Jason C. Wells wrote:

Where is the policy regarding compatibility between releases documented?

I recall reading once upon a time that FreeBSD won't break 
compatibility for the duration of a major point release.  If a third 
party wrote software for 6.0 it would be perfectly compatible with 
6.1, 6.2 and on.


The reason I ask is that I am considering the wisdom of running 
portupgraed with each minor point release.


I don't think you can rely on POLA for ports. But for the base system, 
the developers try to stick to the Principle Of Least Astonishment, in 
particular across minor version numbers.


Chears, Erik
Ports astonish me more often than FreeBSD to be sure.  If one uses a 
port that was built on a 6.0 system, can one trust that no bit rot will 
occur by the time 6.9 rolls around.  Will all of FreeBSDs interfaces and 
features remain backward compatible?  While the developer community 
might employee POLA in this regard, this sure seems like the kind of 
policy issue that would be written into our release engineering 
documents.  (I couldn't find it.)


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Compatibility Between Releases Policy

2006-10-04 Thread Jason C. Wells

Where is the policy regarding compatibility between releases documented?

I recall reading once upon a time that FreeBSD won't break compatibility 
for the duration of a major point release.  If a third party wrote 
software for 6.0 it would be perfectly compatible with 6.1, 6.2 and on.


The reason I ask is that I am considering the wisdom of running 
portupgraed with each minor point release.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Build Binary Packages from Installed Ports

2006-04-04 Thread Jason C. Wells
The new (to me) ports tools are pretty slick.  Is there a way to build a 
binary package for each installed port without upgrading or rebuilding 
each installed port?


As I read the man pages the only thing close to this is 'portupgrade 
-afp' which will give me the full set of packages, but insists on 
rebuilding everything first.


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Network traffic Monitor

2006-04-04 Thread Jason C. Wells

Eric Schuele wrote:

Rodrigo G. Tavares de Souza wrote:

Hi,

   I getting a problem with a DSL connection, and I need a way to 
monitor the network traffic.

   I found a program called Netsaint, could I do it with this one?


It depends on what your monitoring focus is.  If you just want to do 
some quick troubleshooting, ping and traceroute are probably all you need.


If you are looking for intrusion monitoring snort is the leading tool 
for that. (last time I checked)


If you are looking for traffic graphing you might look at RRDTool/MRTG.

It depends on what your specific problem is.

Surf through ports/net and ports/sysutils for all kinds of good tools.

Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what is the process for migrating a pre-built kernel to a new machine?

2006-03-26 Thread Jason C. Wells

Jonathan Horne wrote:


Can you give me more specifics on exactly what should be moved/copied?


I recommend backing up from / on down.  As I like to say, Nuke em from 
orbit.  It's the only way to be sure.  That's my specific answer on 
what should be moved or copied.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: method for installing ports

2006-03-25 Thread Jason C. Wells

Jonathan Horne wrote:

Ive read many many guides found all over the net in the past few days, and
they can never seem to agree on the way a port is installed.  I see these
methods:

Make install
Make install clean
Make install distclean

What is the difference between the 3, and are there legitimate times when
one is preferred over the other?


Once you have run make with the 'install' target, you have your software 
installed.  You may safely use the software.


The 'clean' target removes the ./work subdirectory.  Some folks might 
keep that around for various reasons.  I like to keep the ./work subdir 
because I like to poke around in the port's config files and make files 
for things I can tweak.  Occasionally I run 'make clean' from /usr/src 
to clean EVERY port in the tree to get some disc space back.


The 'distclean' target deletes the downloaded distribution files for 
that port in /usr/ports/distfiles.  I rarely do this.


The choice is up to you.  None of the three targets listed is more 
correct than the other.


There are many possible targets one can use when running make.  For the 
ports collection, poke around in /usr/ports/Mk/bsd.port.mk to see what 
many interesting targets will do.  A make target starts at the beginning 
of a line in a makefile and in punctuated by a colon.


sometarget: optional-subtarget another-subtarget

Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what is the process for migrating a pre-built kernel to a new machine?

2006-03-25 Thread Jason C. Wells

Jonathan Horne wrote:

What if I want to use a kernel I compiled on one system, on another system?
What is the process to successfully migrate a kernel from one system to
another (or back to the same after a disaster recovery)?


Just FTP, NFS, or otherwise copy the kernel to the new system and reboot.

Now for the caveats.  It is inadvisable to copy a kernel from one 
version of FreeBSD to another.  You'll get mysterious library errors 
from libraries like libkvm.  Copying 6.1 kernels to and from 6.1 systems 
is OK.  Copying 6.1 kernels to 5.4 system is bad.  Copying a kernel from 
last month's build of stable to this months build of stable is probably 
bad also.


I would advise you to install the kernel sources on each machine where 
you want to build a custom kernel.  That or set up one machine to be 
your build server in the fashion described in the handbook.


You also have to take care regarding hardware compatibility.  If one 
system is all SCSI and the other is all IDE you are not going to be able 
to move those kernels around and have properly functioning hard drives.


For disaster recovery, keep your kernel config file.  I would argue that 
the config file is more important than the actual kernel binary.


Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: which controllers(devices) to disable in kernel?

2006-03-23 Thread Jason C. Wells

Perica Veljanovski wrote:

Hi,

I bought a new pc with GIGABYTE GA-K8VT800 VIA K8T800 mother board (has 
ata, sata, raid) and a SATA IBM HDD and installed FreeBSD 6.0.


I'm building a custom kernel and I was wondering which 
controllers(devices) I need for my new kernel to support my motherboard 
properly?

Is there a way to see which devices my pc uses from the GENERIC kernel?


Don't forget to read NOTES.  Some devices are not intuitively obvious. 
You need SCSI to run a USB mass storage device even if you don't have a 
SCSI host adapter.


dmesg like the other fellow said.  There is one caveat.  If you have 
some obscure hardware it may not show in dmesg output because it was 
never built into GENERIC.  For this hardware you might look at the chips 
on the mainboard or in the hardware manual.  You the take the chip's 
identifier (for lack of a better word) and grep the kernel config files 
to find the right driver.


And oh yeah, you could use these docs:

http://www.freebsd.org/releases/6.0R/hardware-i386.html

But that's less adventurous.

Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is there a stable ports tree?

2006-03-15 Thread Jason C. Wells

Kris Kennaway wrote:

On Sun, Mar 05, 2006 at 11:24:08PM -0500, Xn Nooby wrote:

Is there a stable ports tree?


No.


However you can sup the ports tree for a specific release.  I run ports 
using tag=RELEASE_6_0_0.  The reason I do this is that I find it to be 
much less work.


I am a much more conservative user than many.  I really hate chasing 
down down upgrade dependencies even with the the very nice ports tools 
we have today.


If you really wanted a particular port to be updgraded, you can fetch 
just that one port and build it.  This would give you a manually 
controlled psuedo-stable.  It would be more work though.


Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Terminal Not Providing login: Prompt

2006-03-05 Thread Jason C. Wells

Glenn Dawson wrote:

At 06:17 PM 3/4/2006, Jason C. Wells wrote:

Glenn Dawson wrote:

What sort of cable are you using?  Does it have all the control lines 
connected? or just tx/rx data?


(forgive me if this sounds like nitpicking)


Not at all.  I haven't been able to get it working and my collection of 
nits to pick has run out.


Connectors or adapters?  What about the cable itself?  Or, does the info 
below cover everything that's linking the two serial ports?


There are no adapters.  This map represents everything that linking the 
two ports.



1,6-4
2-3
3-2
4-1,6
5-5
7-8
8-7
9-null


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: setting the root email address

2006-03-05 Thread Jason C. Wells

Steel City Phantom wrote:
one of my servers was set up by some guys in china.  i have gotten 
everything figured out save one, somehow they got cron job results to 
email to my business account.  i can't for the life of me figure out how 
they did that.  where in bsd do i set another email address for root?


Look in /etc/mail/aliases.  This setting isn't BSD per se.  It's 
sendmail that reads the aliases database.


Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Terminal Not Providing login: Prompt

2006-03-04 Thread Jason C. Wells

When I use 'tip' I seem to bee connected, but I get no login prompt.

$ tip sio0
connected

and nothing else.

If I telnet to the receiving host and redirect a file to the serial 
line, I do see data being transmitted.  The formatting is a bit off though.


(remote)$ cat /etc/issue
(remote)$Hello there!
(remote)$
(remote)$This is a serial line terminal.

(remote)$ cat /etc/issue  /dev/ttyd0
(local)Hello there!
(local)
(local)  This is a serial line terminal.
   ^^
   extra spaces are garbage output

Every document I have read assumes that your terminal will just work.  I 
am connecting a FreeBSD host to a FreeBSD host using default 9600 baud 
settings and things aren't working well.  It's probably pretty hard to 
determine the fix for my problem via email.  Can anyone point me to a 
reference that is comprehensive regarding unix serial communications and 
terminals?


Or am I making this harder than it should be?

Thanks,
Jason C. Wells




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Terminal Not Providing login: Prompt

2006-03-04 Thread Jason C. Wells

Glenn Dawson wrote:

At 03:04 PM 3/4/2006, Jason C. Wells wrote:

When I use 'tip' I seem to bee connected, but I get no login prompt.

$ tip sio0
connected

and nothing else.


Did you enable ttyd0 in /etc/ttys?


Yes.

Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Terminal Not Providing login: Prompt

2006-03-04 Thread Jason C. Wells

Glenn Dawson wrote:

What sort of cable are you using?  Does it have all the control lines 
connected? or just tx/rx data?


This marks the first time I ever busted out my multimeter to work on
FreeBSD.  :)  Here is a pin to pin map of the DB9 connectors that I am
using:

1,6-4
2-3
3-2
4-1,6
5-5
7-8
8-7
9-null

According to a couple online pinout maps this is a proper null modem
cable.  If I understand your question correctly, this cable has all the
control lines connected.

Later,
Jason C. Wells

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Heimdal Key Table Entry Not Found

2006-02-27 Thread Jason C. Wells

Tillman Hodgson wrote:


It's very likely a name resolution problem:


It was in fact.  I caught myself out with a very obscure DNS 
misconfiguration.  One host had a different resolv.conf where primary 
and secondary DNS were reversed.  Then I also had an errant zone file 
that was preventing zone transfers.  I was reverse resolving the new g3 
host as the old g2 host as a result.  It was the situation you cited.


I checked and double checked DNS resolution forward and backward and 
everything was perfect...  on that one host.  Grrr!


Thanks,
Jason C. Wells


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


AES Support in Heimdal

2006-02-27 Thread Jason C. Wells
Does FreeBSD's implementation of Heimdal support 256 bit AES?  Is there 
something special I must do to get AES support?


I built with ENABLE_AES=true but ktutil still doesn't recognize the AES 
keytabs that I extracted.  libcrypto has some aes references when I 
issue 'strings libcrypto.so'.  libkrb5.so has no aes strings though.  I 
would guess that means I don't have aes support builtin in spite of 
setting ENABLE_AES.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Heimdal Key Table Entry Not Found

2006-02-26 Thread Jason C. Wells
I am not able to use heimdal kerberos telnetd on FreeBSD-6 to provide 
remote access to a host.  I get this error from my Kermit client:


Kerberos authentication failed!
Kerberos V5 refuses authentication because
Read req failed: Key table entry not found

The keytab has been extracted to the service host. (see below)

I am thinking that there might be some sort of hard to find 
incompatibility or encryption type issue with Heimdal and MIT.  That or 
there is some stupid detail that I have missed.  I would have expected 
Heimdal to be a drop in replacement for MIT kerberos.  A full 
transcript is provided below if the problem is not obvious.


I am successfully running MIT KDCs and have been for years.  All my 
other MIT kerberized hosts function correctly.


Any idea what I might be missing?

Thanks,
Jason C. Wells


I get a ticket granting ticket as evidenced by the MIT KDC log:

Feb 26 09:40:56 s5.stradamotorsports.com krb5kdc[449](info): AS_REQ (3
etypes {1 6 3 1}) 192.168.1.16: ISSUE: authtime 1140975656, etypes
{rep=16 tkt=16 ses=16}, [EMAIL PROTECTED] for
krbtgt/[EMAIL PROTECTED]

Then I get my service ticket as evidenced by the MIT KDC log:

Feb 26 09:41:09 s5.stradamotorsports.com krb5kdc[449](info): TGS_REQ (1
etypes {1}) 192.168.1.16: ISSUE: authtime 1140975656, etypes {rep=16
tkt=16 ses=1}, [EMAIL PROTECTED] for
host/[EMAIL PROTECTED]

I have all my tickets on my Windows client.

C:\Documents and Settings\jcwklist -e
Ticket cache: API:krb5cc
Default principal: [EMAIL PROTECTED]

Valid starting ExpiresService principal
02/26/06 09:40:56  02/26/06 19:40:56 
krbtgt/[EMAIL PROTECTED]

ORTS.COM
renew until 02/26/06 19:40:57, Etype (skey, tkt): Triple DES 
cbc mode wi

th HMAC/sha1, Triple DES cbc mode with HMAC/sha1
02/26/06 09:41:09  02/26/06 19:40:56 
host/[EMAIL PROTECTED]

PORTS.COM
renew until 02/26/06 19:40:57, Etype (skey, tkt): DES cbc mode 
with CRC-

32, Triple DES cbc mode with HMAC/sha1


Kerberos 4 ticket cache: API:krb4cc
klist: No ticket file (tf_util)

But my kermit client complains with:

 DNS Lookup...  Trying 192.168.1.1...  Reverse DNS Lookup... (OK)
 g3.stradamotorsports.com connected on port telnet
Authenticating with KERBEROS_V5
Kerberos authentication failed!
Kerberos V5 refuses authentication because
Read req failed: Key table entry not found
/Can't connect to g3.stradamotorsports.com:23

The keytab shows:

Vno  Type   Principal
 11  des3-cbc-sha1  host/[EMAIL PROTECTED]
 11  des-cbc-crchost/[EMAIL PROTECTED]

Getprincs on the MIT KDC shows:

kadmin:  getprinc host/[EMAIL PROTECTED]
Principal: host/[EMAIL PROTECTED]
Expiration date: [never]
Last password change: Sun Feb 26 09:08:57 PST 2006
Password expiration date: [none]
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
Last modified: Sun Feb 26 09:08:57 PST 2006 
([EMAIL PROTECTED])

Last successful authentication: [never]
Last failed authentication: [never]
Failed password attempts: 0
Number of keys: 2
Key: vno 11, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 11, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SPF Startup and P5-Mail-SPF-Query

2005-12-18 Thread Jason C. Wells
I am a little confused about starting Sender Policy Framework on 
FreeBSD.  One doc in samples/ says the milter will plug right in. 
Some docs say you don't need to run spfd.  Other docs say you need to 
run sendmail-milter.pl but that script isn't in the packing list.  One 
doc states I should edit my sendmail rc script to start and stop spf-milter.


I would have thought that this milter would be started much like 
spamass-milter.


I have modified my sendmail.cf.  When I start sendmail I get the error:
WARNING: Xspf-milter: local socket name /var/spf-milter/spf-milter.sock 
missing


How do I run SPF using p5-Mail-SPF-Query?  Where is the startup script?

Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SPF Startup and P5-Mail-SPF-Query

2005-12-18 Thread Jason C. Wells
I am a little confused about starting Sender Policy Framework on 
FreeBSD.  One doc in samples/ says the milter will plug right in. 
Some docs say you don't need to run spfd.  Other docs say you need to 
run sendmail-milter.pl but that script isn't in the packing list.  One 
doc states I should edit my sendmail rc script to start and stop spf-milter.


I would have thought that this milter would be started much like 
spamass-milter.


I have modified my sendmail.cf.  When I start sendmail I get the error:
WARNING: Xspf-milter: local socket name /var/spf-milter/spf-milter.sock 
missing


How do I run SPF using p5-Mail-SPF-Query?  Where is the startup script?

Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: CVSup doubts

2005-11-26 Thread Jason C. Wells

Chris wrote:


I hate users looking for the shortcuts.


Funny. I didn't see that at all in the original email.  What I saw was a 
genuine misunderstanding.


He was asking about using CVSUP to track ports on a one by one basis. 
What he didn't understand is that a person really wants to CVSUP the 
whole ports tree.  It's a fair misunderstanding if one starts with an 
FTP-ish RPM-ish mindset.  John Chen's answer was appropriate.


To Efren I add the following.  You may also want to read up on 'refuse' 
files as documented in the cvsup(1) man page.  I don't recommend using 
them though.


Later,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OpenAFS for FreeBSD...

2005-10-23 Thread Jason C. Wells

Jack T wrote:

Forrest Aldrich wrote:

I've asked the OpenAFS people about a port to FreeBSD.

They recently gained a port to OS X, which I understand
has a similar/FreeBSD codebase.


Please look at Arla. I've been using Arla quite happily on FreeBSD 5.4,
and it provides all the AFS functionalities I need.


Arla was marked as BROKEN when I last tried to build it under 6X.  IIRC, 
it was marked as broken for 5.4 too.  Is there some special secret you 
could share with us to get an AFS client?  I'd love to hear it.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OpenAFS for FreeBSD...

2005-10-22 Thread Jason C. Wells

Forrest Aldrich wrote:

I've asked the OpenAFS people about a port to FreeBSD.

They recently gained a port to OS X, which I understand has a 
similar/FreeBSD codebase.


I have been asking about this for a while.  Occasionally an interested 
party arises.  The work remains incomplete.


The last rumor I heard was that the server works.  The client doesn't 
work out of the box.  I did have the client sort of working once upon a 
time.  That is to say that it was working right up until it panicked.


OSX is a different kernel.  The kernel is where the difficulty lies.

Later,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Realtek AC97 Support

2005-10-02 Thread Jason C. Wells
I haven't had any luck guessing at how to provide a driver for my onboard 
Realtek AC97 audio under FreeBSD 6.  Has anyone made this work?


Can I use the linux ALSA driver with FreeBSD?  Realtek provides this on 
their website in source.  I haven't manage to complete a compilation of the 
driver yet.  If such a thing has actually been done by someone here, I'll 
try harder.


Thanks,
Jason C. Wells
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Ipfw Impossibility - Perpetual Motion Achieved!

2004-11-07 Thread Jason C. Wells
Pray tell how is this report from 'ipfw show' even possible?
17100   3   228 count ip from any to any
65535  27  1986 deny ip from any to any
If rule 17100 only counted three packets, then how did the very next rule 
count 27?  I do not use 'skipto' rules.

We appear to be passing more packets out of rule 17100 than are going in. 
If we can harness this energy, we can power the universe! :)

Thanks,
Jason C. Wells
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Missing Operating System on Sandisk for miniBSD

2004-05-24 Thread Jason C. Wells
I am trying to install FreeBSD on a compact flash drive.  The drive manual
says the drive geometry is 250880 sectors, 8 heads, 32 sectors per track,
and 980 cylinders.  The BIOS for the computer reports drive geometry as
980/8/32 C/H/S.

I read somewhere that this problem generally indicates a drive geometry
problem.  I do believe I have my geometry correct.  I am obviously missing
something.  I followed the instructions for miniBSD for the most part.

Any other ideas on what could be causing this error?  Gorey details
below.

Later,
Jason C. Wells

My disktab entry is:

sd128:\
:dt=ESDI:\
:ty=winchester:\
:ns#32:\
:nt#8:\
:nc#980:\
:pa#250880:oa#0:ba#8192:fa#1024:ta=4.2BSD:\
:pc#250880:oc#0:bc#8192:fc#1024:tc=unused

I use the commands...

disklabel -Brw vn0 sd128
newfs -T sd128 -U /dev/vn0a

...to label and newfs the disk.

fdisk /dev/vn0c reports:

*** Working on device /dev/vn0c ***
parameters extracted from in-core disklabel are:
cylinders=980 heads=8 sectors/track=32 (256 blks/cyl)

parameters to be used for BIOS calculations are:
cylinders=980 heads=8 sectors/track=32 (256 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
UNUSED
The data for partition 2 is:
UNUSED
The data for partition 3 is:
UNUSED
The data for partition 4 is:
sysid 165,(FreeBSD/NetBSD/386BSD)
start 0, size 5 (24 Meg), flag 80 (active)
beg: cyl 0/ head 0/ sector 1;
end: cyl 1023/ head 255/ sector 63



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Routing to External IPs from Internal IPs

2003-12-22 Thread Jason C. Wells
I would like to be able to set the DNS settings for my internal network to
209.20.215.30 and 209.20.215.31.  The internal network is addressed as
192.168.1/24.

How can I route from the internal addresses, through the internal
interface of the firewall, to the external interface of the firewall, back
through the port address translation to my internal nameservers?

If this question is too arcane, please refer me to the correct
documentation.  I don't even know where to start.  Routing has always just
magically worked on FreeBSD.  I would think it would be possible to add
some sort of manual route to the routing tables, but what do I know.

The idea is to allow roamers to roam and never have to change any of their
configuration settings, namely their DNS settings.

Split DNS obviously can handle all other settings such as mail, time, web
and so forth.  Handling the DNS settings themselves, which are by IP
address, proves more difficult.

Thanks,
Jason C. Wells

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Firewall Making Many DNS PTR Queries

2003-11-08 Thread Jason C. Wells
If one of my clients makes a DNS query for a hostname that is not cached,
my firewall subsequently makes a flurry of PTR queries.  I am at a loss to
explain why.

For example:

XX+/192.168.1.13/202.1.168.192.in-addr.arpa/PTR/IN
XX+/192.168.1.13/www.davinci.com/A/IN
XX+/192.168.1.1/49.0.229.193.in-addr.arpa/PTR/IN
XX+/192.168.1.1/10.24.230.130.in-addr.arpa/PTR/IN
XX+/192.168.1.1/132.248.214.128.in-addr.arpa/PTR/IN
XX+/192.168.1.1/10.102.230.130.in-addr.arpa/PTR/IN
XX+/192.168.1.1/64.46.214.128.in-addr.arpa/PTR/IN
XX+/192.168.1.1/64.4.214.128.in-addr.arpa/PTR/IN
... and many more ...

The firewall is 192.168.1.1.

But if I do the query on a cached hostname, no such wierdness occurs.

XX+/192.168.1.13/202.1.168.192.in-addr.arpa/PTR/IN
XX+/192.168.1.13/www.davinci.com/A/IN

My DNS servers are behind the firewall.  I use port translation to run the
DNS through the firewall.  The DNS queries complete successfully.  I fixed
the problem with my secondary nameserver not responding (thanks Pete
Elkhe, my NAT was buggered).

The PTR records the firewall is seeking are mostly for nameservers.
Sometimes the PTRs the firewall is looking for are not resolvable.  The
PTRs don't seem to be related to the domain in question.

What the heck is my firewall doing looking for those PTR records?

Thanks,
Jason C. Wells

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Gateway traffic reporting tool (port)

2003-11-08 Thread Jason C. Wells
You can easily use count rules in ipfw for this.  I did this back when I
had a roommate who was a pornmeister.  The first month that our DSL bill
came in at plus $30, I started counting.  He was using about 85% of our
bandwidth.

Later,
Jason C. Wells


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Gateway traffic reporting tool (port)

2003-11-08 Thread Jason C. Wells
On Sun, 9 Nov 2003, Kathy Quinlan wrote:

 I have a few questions, IPFW shows the result as packets right ? And not
 all packets are equal ?  How do I get the information as human readable
 ?

 If I am wrong please correct me, it is the only way we learn.

'ipfw show' gives a byte count as well as a packet count.  It's in the man
page.

Later,
Jason

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


5.1R Install not Installing Kernel

2003-09-02 Thread Jason C. Wells
The 5.1R install that I just completed twice doesn't boot.  The boot
loader comes to a prompt for F1 or F2 and hangs.  Pressing F1 or F2
results in a beep from the computer.  F1 has a base install. F2 is an
empty slice that I have set aside.

When using kern.flp to boot the system, interupting the boot process and
typing ? shows that /kernel is not listed.  (I have been warned that the
hierarchy has changed, but don't see where the kernel might have moved, if
at all.)

Are the install floppies broken?

And also, kern.flp doesn't seem to give a fixit.flp option that the docs
say it should.  How can I use fixit.flp in 5.1R?  I would use fixit.flp to
repair my semi-complete install if I could get it to work.

Also, what is the proper forum for this question?  I am a bit confused as
to whether I should be posting to -current, since this is being called a
release.

BTW, it's a testament to FreeBSD that I haven't had to bother you guys for
about two years!

Thanks,
Jason C. Wells


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with network cards

2003-09-02 Thread Jason C. Wells
On Tue, 2 Sep 2003, Chris Fisichella wrote:

 1. Is there some network interface card that I can put in and will work?
 Any recommendations?

If your time is worth more than ten bucks, get any generic RealTek PCI
card?  (Do you have a PCI slot?)  They're cheap.

I gave up monkeying with ISA cards.

Later,
Jason C. Wells

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  1   2   >