Re: Upgrade 7.0 to 7.2 installworld failed

2009-12-24 Thread Mel Flynn
On Thursday 24 December 2009 06:10:21 Colin wrote:
 Hi folks,
 I have started trying to upgrade my 7.0 to 7.2 and it all seemed to be
 going well until I got to installworld.
 
 First off I did a cvsup for src-all from cvsup.ie.freebsd.org with the
 tag RELENG_7_2
 
 I have then done:
 
 cd /usr/src
 make buildworld
 make kernel-toolchain
 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=TED
 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=TED
 shutdown -r now

I'm going to guess from the fact that installworld tries to build stuff, that 
/usr/obj is a filesystem that isn't mounted after your reboot or that the 
MAKEOBJDIRPREFIX you had set in your environment before reboot, is unset.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrade 7.0 to 7.2 installworld failed

2009-12-24 Thread Mel Flynn
On Thursday 24 December 2009 09:47:26 Colin wrote:

 On 24/12/2009 16:30, Mel Flynn wrote:
  I'm going to guess from the fact that installworld tries to build stuff,
  that /usr/obj is a filesystem that isn't mounted after your reboot or
  that the MAKEOBJDIRPREFIX you had set in your environment before reboot,
  is unset.
 
 /usr/obj is a folder within the /usr partition not its own filesystem
 and /usr is mounted fine so unfortunately for me its nothing as simple
 as that.
 
 As to the prefix, I haven't manually set that anywhere. The buildworld
 log seems to set it during the build as there are several make lines
 with things like MAKEOBJDIRPREFIX=/usr/obj/usr/src/rescue/rescue and
 MAKEOBJDIRPREFIX=/usr/obj/usr/src/tmp

Take the reboot out of the equation and keep  it simple:
su to root
mkdir /usr/testdir
cd /usr/src
env -i make buildworld
env -i make installworld DESTDIR=/usr/testdir

Kernel has nothing to do with installworld target.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: samba3.x - 3.0 won't compile, 3.2 and 3.3 can't be installed

2009-12-23 Thread Mel Flynn
On Wednesday 23 December 2009 04:51:24 Ewald Jenisch wrote:
 Hi,
 
 For quite some time now I'm trying to get samba 3.x installed on my
 FreeBSD 7.2 System.
 
 The symptoms in short:
 
 o) 3.0 - doesn't compile
 
 o) 3.2, 3.3 - can't be installed because of installation dependencies
 to samba4-devel-4.0.0.a8_2, talloc-1.3.1 and tdb-1.1.5.
 
 System:
 FreeBSD test.at 7.2-STABLE FreeBSD 7.2-STABLE #8: Mon Dec 7 12:21:59 CET
  2009 r...@test.at:/usr/obj/usr/src/sys/GENERIC amd64
 
 
 Ports tree is updated and all ports installed up2date.
 
 Now for the Samba-port(s): Depending on the version of Samba it either
 can't be built at all or fails upon installation.
 
 In detail:
 
 1) Samba3.0:
 
 Bails out during compilation with the following error:
 
 Compiling locking/locking.c
 locking/locking.c: In function 'unparse_share_modes':
 locking/locking.c:701: error: invalid operands to binary -
 The following command failed:
 cc -I. -I/usr/ports/net/samba3/work/samba-3.0.37/source  -O -pipe
  -DLDAP_DEPRECATED -D_SAMBA_BUILD_=3 -I/usr/local/include 
  -I/usr/ports/net/samba3/work/samba-3.0.37/source/iniparser/src -Iinclude
  -I./include  -I. -I. -I./lib/replace -I./lib/talloc -I./tdb/include
  -I./libaddns -I./librpc -DHAVE_CONFIG_H  -I/usr/local/include
  -I/usr/local/include -DLDAP_DEPRECATED   
  -I/usr/ports/net/samba3/work/samba-3.0.37/source/lib -D_SAMBA_BUILD_=3
  -fPIC -DPIC -c locking/locking.c -o locking/locking.o *** Error code 1

This is most likely caused by tdb-1.1.5 and the fact that -I/usr/local/include 
is in order before -I./tdb/include. To confirm this:
1) cd `make -C /usr/ports/net/samba3 -V WRKSRC`/locking
2) Copy the above compilation line
3) Paste but remove the first -I/usr/local/include
4) Run the result

If it compiles cleanly, you need to fix it somewhere in the configure foo, but 
it's still no guarantee everything will work, especially when linking (though 
when linking removing the corresponding first -L/usr/local/lib may actually 
fix things too).

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Packages vs Ports

2009-12-23 Thread Mel Flynn
On Wednesday 23 December 2009 08:13:21 Adam Vande More wrote:
 On Wed, Dec 23, 2009 at 11:06 AM, Arthur Barlow 
arthurbar...@gmail.comwrote:

  P.S. I'm using FreeBSD 7.2 on an old Gateway Pentium III machine with a
  40G harddrive.
 
 pkg's are created at the time of release eg 7.2.  They are never updated
  for that release.

Or set PACKAGESITE to:
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/

See pkg_add(1) for details.
This will usually work for legacy stable branches, but you may actually need 
to update your system to a more recent stable version once in a while.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Help building/running SDL/OpenGL code

2009-12-23 Thread Mel Flynn
On Tuesday 22 December 2009 06:36:19 Richard Mace wrote:

 So, it appears that there is some conflict between the mesa libraries
  (which I need to #include to build the code) and the NVIDIA-supplied
  libraries, or am I on the wrong track?
 
 Can anyone shed some light on this? I've spent quite some time on what
  first appeared to be a fairly trivial task and I am eager to see how this
  runs under FreeBSD.

If you want to run any OpenGL code with nvidia-driver you will need to 
reinstall the driver after every:
- kernel update
- update of x11-servers/xorg-server
- update of graphics/libGL*

There may be exceptions, but they're not worth figuring out or remembering.

In your case you may actually have a problem with math code in libm.so.3 vs 
libm.so.5, but I doubt it's the case as no OpenGL app that I encountered has 
one.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Destroying a CD-R without a sledgehammer (Was: Re: (no subject))

2009-12-23 Thread Mel Flynn
On Wednesday 23 December 2009 10:05:40 Modulok wrote:
 List,
 
 Is there a software method (not a microwave oven) to destroy a CD-R?

No. A CD-R is only readable once written. Rewritable CD's (CD-RW) you can 
reformat using your favorite burn tool, which should provide a short and long 
blank method.
See for example the 'blank' and 'erase' command for burncd(8) for specifics.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What happened to /home?

2009-12-23 Thread Mel Flynn
On Wednesday 23 December 2009 15:34:39 Glen Barber wrote:
 Hi
 
 On Wed, Dec 23, 2009 at 6:40 PM, Rem P Roberti remeg...@comcast.net wrote:
  On 2009.12.24 00:21:47 +, Pieter de Goeje wrote:
  On Thursday 24 December 2009 00:01:11 Rem P Roberti wrote:
   Today I booted my laptop and discovered that /home was gone.
Well...not exactly..but for all intents and purposes.  The system
   isn't seeing it although I can see it when I cd to /.  But if I try
   and cd to /home from there the system tells me home:Not a directory.
What happened, and what can I do about it?
  
   Rem
 
  Usually /home is a symlink to /usr/home. Perhaps the symlink is busted?
  What it the output of `ls -ld /home' ? If you can still login as a
  regular user, what does `pwd -P' say just after you are logged in?
 
  I can still login as regular user, and when I run 'pwd -P' the output is
  / and then it goes back to the prompt.  Output of 'ls -ld /home is:
 
  lrwxr-xr-x  1 root wheel 8 Dec 18 12:08 /home - usr/home
 
 What does 'file /home' say?

It is a symlink. What you really want to see is ls -l /home/. Note the 
trailing slash.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What happened to /home?

2009-12-23 Thread Mel Flynn
On Wednesday 23 December 2009 15:46:57 Glen Barber wrote:
 On Wed, Dec 23, 2009 at 7:43 PM, Mel Flynn
 
 mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
  What does 'file /home' say?
 
  It is a symlink. What you really want to see is ls -l /home/. Note the
  trailing slash.
 
 It _should_ be a symlink, which is what I am getting at.

No, it _is_ a symlink. ls says so:

On Wed, Dec 23, 2009 at 6:40 PM, Rem P Roberti remeg...@comcast.net wrote:
 lrwxr-xr-x  1 root wheel 8 Dec 18 12:08 /home - usr/home
  ^ ^^^

The only thing file is gonna tell you that the symlink might be broken.

# ls -l
total 1
lrwxr-xr-x  1 root  wheel  8 Dec 23 16:50 home - usr/home
drwxr-xr-x  3 root  wheel  3 Dec 23 16:50 usr

# ls -ld home/.
drwxr-xr-x  2 root  wheel  2 Dec 23 16:50 home/.

# file home
home: symbolic link to `usr/home'

# chmod 000 usr/home

# ls -ld home/.
d-  2 root  wheel  2 Dec 23 16:50 home/.

# file home
home: symbolic link to `usr/home'

As you can see, file don't tell you much, while using ls -ld on the target 
will immediately show the problem.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Loadbalance outgoing traffic over two cable modems in same network

2009-12-22 Thread Mel Flynn
On Tuesday 22 December 2009 02:48:58 Craig Butler wrote:
 On 22/12/2009 00:46, Mel Flynn wrote:
  On Monday 21 December 2009 09:56:11 Nikos Vassiliadis wrote:
  On 12/21/2009 6:03 AM, Mel Flynn wrote:
  Hi,
 
  I've looked over http://www.openbsd.org/faq/pf/pools.html but this
  assumes two different gateways for the two interfaces.
  I'm faced with two cable modems from the same ISP, with the same
  gateway. I can't lagg(4) the interfaces, since specific IP's are bound
  to specific modems.
 
  This can probably be fixed from the ISP side. It should probably be some
  antispoofing rule that drops the packets you are sending via the wrong
  interface. You could try communicating the problem to the ISP and hope
  for the best...
 
  I'd rather not go that route. However, I might ask the ISP to move swap
  two IP's, so that I have two consecutive IPs on two modems and can use
  /31 notation for the pool. Source hash should then work better.
 
  So I'm wondering if using stick-address with a round-robin nat pool is
  really sufficient to do load balancing of outgoing traffic and not get
  into session problems with various protocols. Has anybody had similar
  experiences?
 
  I have no experience on this, but theoretically a state can expire while
the upper layers are still active... so, I *think* you may have
problems... Of course, you could increase the lifetime of states
 
  True, I'm mostly worried about DNS queries and other UDP protocols. TCP
  should theoretically be fine.
  Thanks for your feedback.
 
 Would ECMP (aka RADIX_MPATH) not be suitable for your requirements ?? 2
 default routes, one to each of the modems IP's ... that should start
 bunting traffic down both pipes.
 
 Works for me here...
 
 =
 Equal cost multipath routing
 
 Status: Committed to 8-CURRENT
 Will appear in 8.0: sure
 Authors: Qing Li
 Web: commit message
 
 ECMP routing allows for multiple routes to be handled by the kernel,
 including default routes. It potentially offers substantial increases in
 bandwidth by load-balancing traffic over multiple paths.
 =
 http://en.wikipedia.org/wiki/Equal-cost_multi-path_routing
 http://lists.freebsd.org/pipermail/cvs-src/2008-April/089956.html

Thanks for the pointers, I'll look into this. It's a little more complicated, 
there's 16 total IP's. 2 of which are gonna be used for LAN translations. The 
other 14 are eventually going to be used by DMZ services, so I'm not sure if 
it's solvable at the routing level, as the incoming traffic needs to go out 
the same way, not through the 2 LAN IP's.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Loadbalance outgoing traffic over two cable modems in same network

2009-12-21 Thread Mel Flynn
On Monday 21 December 2009 09:56:11 Nikos Vassiliadis wrote:
 On 12/21/2009 6:03 AM, Mel Flynn wrote:
  Hi,
 
  I've looked over http://www.openbsd.org/faq/pf/pools.html but this
  assumes two different gateways for the two interfaces.
  I'm faced with two cable modems from the same ISP, with the same gateway.
  I can't lagg(4) the interfaces, since specific IP's are bound to specific
  modems.
 
 This can probably be fixed from the ISP side. It should probably be some
 antispoofing rule that drops the packets you are sending via the wrong
 interface. You could try communicating the problem to the ISP and hope for
 the best...

I'd rather not go that route. However, I might ask the ISP to move swap two 
IP's, so that I have two consecutive IPs on two modems and can use /31 
notation for the pool. Source hash should then work better.

  So I'm wondering if using stick-address with a round-robin nat pool is
  really sufficient to do load balancing of outgoing traffic and not get
  into session problems with various protocols. Has anybody had similar
  experiences?
 
 I have no experience on this, but theoretically a state can expire while
  the upper layers are still active... so, I *think* you may have
  problems... Of course, you could increase the lifetime of states

True, I'm mostly worried about DNS queries and other UDP protocols. TCP should 
theoretically be fine.
Thanks for your feedback.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Loadbalance outgoing traffic over two cable modems in same network

2009-12-20 Thread Mel Flynn
Hi,

I've looked over http://www.openbsd.org/faq/pf/pools.html but this assumes two 
different gateways for the two interfaces.
I'm faced with two cable modems from the same ISP, with the same gateway. I 
can't lagg(4) the interfaces, since specific IP's are bound to specific 
modems.

So I'm wondering if using stick-address with a round-robin nat pool is really 
sufficient to do load balancing of outgoing traffic and not get into session 
problems with various protocols. Has anybody had similar experiences?
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: RFC: Fam/Python based script for bruteforce blocking

2009-12-19 Thread Mel Flynn
On Thursday 17 December 2009 16:34:22 Brandon Low wrote:

 I'd love to hear other people's feedback on this approach of using FAM +
 auth.log to implement this and/or to hear of other superior approaches
 to achieving this result.

Well, my first problem with it is obviously that I now need python, where I 
don't want python. In fact, my firewalls/gateways only have /bin/sh and 
/bin/csh as scripting languages. It's one reason I switched from custom 
sysutils/grok rules to using security/sshguard - it got me rid of perl.
Secondly, you have matching rules coded in the script. If there would be one 
reason to prefer this script over sshguard, it would be that I can add attack 
patterns more easily, in config file with a syntax that's not too obscure.
Last but not least, you assume that once an IP is at fault, I want that IP 
blocked permanently. In practice you end up with an extremely large table that 
might eventually be too big for a default PF table and recurring scans from 
the same IP are not that common (you see the IP in a 12-24 hour window, then 
not again).

Hope this helps.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: System crashes under heavy disk i/o

2009-12-19 Thread Mel Flynn
On Thursday 17 December 2009 12:57:30 Erik Norgaard wrote:
 Mel Flynn wrote:
  Turn down operating mode via atacontrol. If using dump(8) use the cache
  feature and/or do the backup from live disk, so no other services are
  running and disk isn't accessed other then by dump.
 
 Thanks, is there a way to set UDMA mode at boot?

Roll your own rc(8). I know not of a loader tunable or device.hints setting, 
but I'm happily corrected on that.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how to make vimage jail permanent by configuring rc.conf?

2009-12-19 Thread Mel Flynn
On Friday 18 December 2009 13:40:47 Kouichiro Iwao wrote:

 I want to make it permanent. I want jails to start automatically when I
 rebooted the host environment. I add the following lines into rc.conf.
 
 jail_jail01_flags=-c vnet
 jail_jail01_rootdir=/usr/jail/jail01
 jail_jail01_hostname=jail01.example.jp
 jail_jail01_ip=192.168.100.101
 
 However, I failed /etc/rc.d/jail onestart jail01 to start up the jail.
 How to configure rc.conf in order to make vimage jail permanent?
 
 rc.d/jail only support traditional jails?

Please show the output, with rc_debug turned on in /etc/rc.conf.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: System crashes under heavy disk i/o

2009-12-17 Thread Mel Flynn
On Thursday 17 December 2009 12:26:12 Erik Norgaard wrote:

 My two questions:
 
 - is there any utility that I can use monitor the system to see what's
 going on, when or why?

gstat(8)
Also, perhaps syslog to a different machine or nfs mount /var/log if you feel 
you're missing a log message due to this error.

 - is there any way that I can slow down the disk i/o?

Turn down operating mode via atacontrol. If using dump(8) use the cache 
feature and/or do the backup from live disk, so no other services are running 
and disk isn't accessed other then by dump.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: kern.polling.lost_polls

2009-11-21 Thread Mel Flynn
On Fri, 20 Nov 2009 19:07:42 -0700, Brett Glass br...@lariat.net wrote:
 At 06:25 PM 11/20/2009, Mel Flynn wrote:
 
So that means that you give the kernel .25 microseconds to poll and act
on
any pending network IO. That's probably not enough.
 
 I think that you mean .25 milliseconds, not .25 microseconds, above.

Yes, sorry. It should be enough, but...it's related to CPU speed and number
of interfaces. On FreeBSD-net they can give you better advice, most notably
whether all 6 interfaces are done in one poll and so each task needs to be
completed within 1/HZ/N? I cannot say this with certainty.

It is further explained by
the
comment in sys/kern/kern_poll.c:
/*
  * Hook from hardclock. Tries to schedule a netisr, but keeps track
  * of lost ticks due to the previous handler taking too long.
  * Normally, this should not happen, because polling handler should
  * run for a short time. However, in some cases (e.g. when there are
  * changes in link status etc.) the drivers take a very long time
  * (even in the order of milliseconds) to reset and reconfigure the
  * device, causing apparent lost polls.
  *
  * The first part of the code is just for debugging purposes, and tries
  * to count how often hardclock ticks are shorter than they should,
  * meaning either stray interrupts or delayed events.
  */
 
 Well, even at HZ=2000, kern.polling.lost_polls and 
 kern.polling.suspect are both incrementing, as is kern.polling.stalled:
 
 stargate# sysctl -a | grep polling
 kern.polling.burst: 150
 kern.polling.burst_max: 150
 kern.polling.each_burst: 5
 kern.polling.idle_poll: 0
 kern.polling.user_frac: 50
 kern.polling.reg_frac: 20
 kern.polling.short_ticks: 0
 kern.polling.lost_polls: 41229
 kern.polling.pending_polls: 0
 kern.polling.residual_burst: 0
 kern.polling.handlers: 2

That bugs me: if you have 6 devices, the number of handlers should be
6.
/*
 * Try to register routine for polling. Returns 0 if successful
 * (and polling should be enabled), error code otherwise.
 * A device is not supposed to register itself multiple times.
 *
 * This is called from within the *_ioctl() functions.
 */

Unless this should really read drivers, but I think it's devices.

 kern.polling.enable: 0
 kern.polling.phase: 0
 kern.polling.suspect: 31653
 kern.polling.stalled: 10
 kern.polling.idlepoll_sleeping: 1
 hw.acpi.thermal.polling_rate: 10
 
 But if I slow the clock down to 1000 Hz, it's unclear if the 
 machine will be able to keep up with traffic. I was already getting 
 more than 1,000 network interrupts per second before I tried 
 polling, and I'm not sure how many packets the interfaces (some 
 fxp, some em) can buffer up. I'm going to try it, but if it doesn't 
 work I will have to go back to interrupt-driven operation.

You might be able if your network architecture allows it, to bring down
the task load by increasing the MTU and enable jumbo frames.
From em(4):
 Support for Jumbo Frames is provided via the interface MTU setting.
 Selecting an MTU larger than 1500 bytes with the ifconfig(8) utility
con‐
 figures the adapter to receive and transmit Jumbo Frames. The maximum
 MTU size for Jumbo Frames is 16114.

-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: sending mail with attachments always fail (FreeBSD/pf)

2009-11-21 Thread Mel Flynn
On Sat, 21 Nov 2009 23:36:33 +0600, Victor Lyapunov
fullblastst...@gmail.com wrote:
 This kind of thing is often due to a mtu blackhole - when a larger
 email causes a full size IP packet to be sent. I don't see why PF
 should make a difference though, IFAIK it's supposed to let ICMP through
 when it's learned state on a tcp connection.
 
 Thanks for your answer.
 Don't know whether it is relevant to the particular issue, but i tried
 both rulesets first with `scrub in all fragment reassemble` and
 another one without it, but neither worked for me. I'm kinda upset by
 the fact that pf can't handle large emails.
 
 Any other ideas how to possibly fix it, please?

If on FreeBSD 7 or higher you can get rid of the keep state. It's implicit.
Secondly, please test if the problem disappears by removing the rules and
simply allowing outgoing traffic.
Your rules would be:
scrub in on $ext_if fragment reassemble
block in on $ext_if
pass out on $ext_if from $int_if:network to any

If that works, then your problem is likely that you're creating 2 states
for one connection causing confusion.
-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: diskless problem: Lookup of /dev for devfs, error: 13

2009-11-20 Thread Mel Flynn
On Thu, 19 Nov 2009 16:18:29 -0500, Michael W. Lucas
mwlu...@blackhelicopters.org wrote:
 Hi,
 
 I'm attempting to run a diskless 8.0 i386 workstation on VMWare, using
 an OpenSolaris box as a file store.  I get PXE, the kernel loads, but
 when we try to remount the filesystem I get:
 
 ...
 NFS ROOT:  XXX.XXX.XXX.XXX:/storage1/vm/netflow
 Lookup of /dev for devfs, error 13
 exec /sbin/init: error 13
 exec /sbin/oinit: error 13
 exec /sbin/init.bak: error 13
 exec /rescue/inet: error 13
 exec /stand/sysinstall: error 13
 init: not found in path
 ...
 
 At first glance, it would appear that /dev is missing.

Actually, at first glance it would appear that the mount doesn't allow
execution.

-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Problem compiling php5 fro ports

2009-11-20 Thread Mel Flynn
On Fri, 20 Nov 2009 12:13:39 +0100, Thomas Vogt freebsdli...@bsdunix.ch
wrote:
 Hello
 
 Maybe someone can help me. I try to compile several php5 extensions from
 the ports. php5 compiles fine but every extension fails with the same
 error.
 
 Example: php5-mcrypt
 
 In file included from
 /usr/local/include/php/main/../main/php_config.h:2827,
  from /usr/local/include/php/Zend/zend_config.h:1,
  from /usr/local/include/php/Zend/zend.h:53,
  from /usr/local/include/php/main/php.h:34,
  from
 
/usr/ports/security/php5-mcrypt/work/php-5.2.11/ext/mcrypt/mcrypt.c:25:
 /usr/local/include/php/ext/php_config.h:1: error: expected '=', ',', ';',
 'asm' or '__attribute__' before 'file'

There shouldn't be anything declared there. What is line 1 of that file?

-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: kern.polling.lost_polls

2009-11-20 Thread Mel Flynn
On Fri, 20 Nov 2009 14:35:22 -0700 (MST), Brett Glass br...@lariat.net
wrote:
 Everyone:
 
 I've been experimenting with using device polling on a router with six
 Ethernet
 interfaces that handles lots of traffic. I turned polling on, and set
 HZ=4000
 to minimize latency and ensure that enough time was allocated to handle
all
 of
 the incoming packets. But the sysctl variable kernel.polling.lost_polls
 keeps
 incrementing! The documentation of this variable isn't very good, so I am
 not
 sure what this means. Does it mean that I should set kern.hz lower
(perhaps
 to 2000) and kern.polling.burst_max higher? Or that running the
interfaces
 in interrupt-driven mode would be more effective?

You likely have the HZ too high. First, see this description:
http://www.pubbs.net/freebsd/200909/107087/

So that means that you give the kernel .25 microseconds to poll and act on
any
pending network IO. That's probably not enough. It is further explained by
the
comment in sys/kern/kern_poll.c:
/*
 * Hook from hardclock. Tries to schedule a netisr, but keeps track
 * of lost ticks due to the previous handler taking too long.
 * Normally, this should not happen, because polling handler should
 * run for a short time. However, in some cases (e.g. when there are
 * changes in link status etc.) the drivers take a very long time
 * (even in the order of milliseconds) to reset and reconfigure the
 * device, causing apparent lost polls.
 *
 * The first part of the code is just for debugging purposes, and tries
 * to count how often hardclock ticks are shorter than they should,
 * meaning either stray interrupts or delayed events.
 */

I would start with the FreeBSD provided default of 1000HZ. If there are
lost
polls then, see if you can correlate it with link state changes. If not,
then there may be issues with the driver and I would follow up to
freebsd-net.
If there are no lost polls, see if you can increase the frequency until
they return. You also want to get some form of realworld measurement for
these higher values: do they in effect increase network throughput.

-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: diskless problem: Lookup of /dev for devfs, error: 13

2009-11-20 Thread Mel Flynn
On Fri, 20 Nov 2009 12:49:16 -0500, Michael W. Lucas

 It turns out that there's a whole discussion thread on nfsv2 and v3
 interoperability with diskless systems.  See

http://lists.freebsd.org/pipermail/freebsd-hackers/2008-January/022792.html
 for a sample message.
 
 Short answer: it seems that there are interoperability annoyances with
 diskless systems and assorted NFS servers.  NFS mount options in
 /etc/fstab seem to be ignored, but you can set them in
 /boot/loader.conf.
 
 boot.nfsroot.options=nfsv2
 
 made FreeBSD try a NFSv2 remout, and the system came up.

It's even funkier, since you said an 8.0 system, it should be nfsv4. Rick
Maklem may be interested in your findings, on either freebsd-fs or in light
of the upcoming release on freebsd-current.
This is also a nice dilemma: nfsv4 is still wet behind the ears, but v2
should be considered deprecated. But - it is good to know that with all
the new NFS code in 8.0, the v2 compat plays nice with Solaris v2.

 Thanks for pointing out it seems to be a permissions error, I wouldn't
 have headed down this route without that.

You're very welcome.
-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: get accounting info for running process

2009-11-19 Thread Mel Flynn
On Thu, 19 Nov 2009 20:01:02 +0300, cronfy cro...@sprinthost.ru wrote:
 Is it possible to find out how much a process have used CPU user 
 time/system time/IO operations for now by it's pid? Like in sa, but for

 running process.
 
 
 Dan, Mel, thanks for your answers. I examined 'ps' sources and decided 
 to use  kvm_getprocs() and rusage structure.
 
 I am trying to create a daemon that would report system accounting stats 
 for every X seconds, let's say 10.  'sa' reports about terminated 
 processes only, but it would be nice to have more detailed system usage 
 stats per user for a given time interval (i.e. last 10 seconds), 
 including tasks that are not finished at the moment of querying.
 
 I can achieve this by querying list of processes each 10 seconds and 
 producing diffs between previous and current list, saving these to some 
 log and combining data with /var/account/acct file.
 
 The only thing I do not want to do is to invent a wheel ;-) I googled 
 much for such solutions, but did not find any. May be someone knows 
 existing products that has this functionality already?

I don't know of anything like that, but ... there is of course radius.
Depends what you want to do with the info. If usage restriction is your
ultimate goal, then radius is your friend.

-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: get accounting info for running process

2009-11-18 Thread Mel Flynn
On Wed, 18 Nov 2009 20:18:08 +0300, cronfy cro...@sprinthost.ru wrote:

 Is it possible to find out how much a process have used CPU user 
 time/system time/IO operations for now by it's pid? Like in sa, but for 
 running process.
 
 Thanks in advance.

man procfs(5), specifically, the status file.
% cat /proc/2143/status
Xorg ... 1255690702,469845 177507,790130 115403,436713 ...
 ^starttime^^^ ^usertime ^system time^
-- 
Mel

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: weird save-entropy behaviour

2009-11-15 Thread Mel Flynn
On Sunday 15 November 2009 17:30:02 Ed Jobs wrote:

 Yesterday, i noticed a very weird behaviour on my computer (which is
  running 8.0-RC3 btw.
 The shells were not responding and the load was insane, and constantly
 going up. At the time i managed to lock myself out, the load was 84 and
 growing (i have a screenshot if anyone is interested).
 
 That happened last night. Today, the computer was ok and i managed to ssh
 into it. The root account was spammed with two types of cron mails.
 
 half of them said:
 mv: /var/db/entropy/saved-entropy.2: No such file or directory
 
 and the other half said:
 override r  operator/operator for /var/db/entropy/saved-entropy.2?
 (y/n [n]) not overwritten
 
 So i know that it's the save-entropy cron job, but i doubt that was
  supposed to happen, and i have never touched that directory. Anyone has an
  idea?

Did the operator uid change or perhaps shared with another uid?
Check both `id operator` and `id 2`.

Secondly, why did this stop? Seems like a weird question to ask, but since 
this script is supposed to run every 11 minutes, there should not be a reason 
for this to stop, if there's a race condition.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: weird save-entropy behaviour

2009-11-15 Thread Mel Flynn
On Sunday 15 November 2009 23:38:10 Ed Jobs wrote:
 On Monday 16 November 2009 00:12, Mel Flynn wrote:
  Did the operator uid change or perhaps shared with another uid?
  Check both `id operator` and `id 2`.
 
  Secondly, why did this stop? Seems like a weird question to ask, but
  since this script is supposed to run every 11 minutes, there should not
  be a reason for this to stop, if there's a race condition.
 
 # id operator
 uid=2(operator) gid=5(operator) groups=5(operator)
 # id 2
 uid=2(operator) gid=5(operator) groups=5(operator)
 
 As for the orer part, why did it stop, i really have no clue. All the
  messages arrived at root's mailbox at 5:57, tho the date in them said that
  they were sent at 5:50.
 It's really strange because I was locked out from the computer at 2:29, so
 it's not something I did. and there's nothing that cron runs at that time.

Does the cron log (/var/log/cron) show that it was run as operator around the 
time it started?
/usr/sbin/cron[47350]: (operator) CMD (/usr/libexec/save-entropy)

Even if it wasn't, I don't see a reason for such a buildup. Unlesssince 
stdin isn't sending anything, it could be the scripts wait indefinitely for 
user confirmation, then finally get killed off by some limit. There should be 
some hint at that in /var/log/messages around 5:50.
The script should probably do mv -f in line 76.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: WPA: specify alternate config file in rc.conf

2009-11-03 Thread Mel Flynn
On Tuesday 03 November 2009 00:57:41 jhell wrote:
 On Mon, 2 Nov 2009 17:27, onemda@ wrote:
  On 11/2/09, Chad Perrin per...@apotheon.com wrote:
  If I want to start wpa_supplicant directly, and specify a particular
  configuration file, I can do something like this:
 
  wpa_supplicant -i iwi0 -c /path/to/wpa_alternate.conf
 
  How would I specify the use of /path/to/wpa_alternate.conf in my rc.conf
  ifconfig line, rather than just going with the default
  /etc/wpa_supplicant.conf file?
 
  Look into /etc/defaults/rc.conf for hint.
 
 This is not a option in rc.conf default or otherwise ATM.

It is on 8.

Looks pretty safe to apply:
svn diff -c 178022 svn://svn.freebsd.org/base/stable/8
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: system() call causes core dump

2009-11-03 Thread Mel Flynn
On Saturday 31 October 2009 21:52:37 Peter Steele wrote:
 In UNIX it is not safe to perform arbitrary actions after forking a
  multi-threaded process.  You're basically expected to call exec soon
  after the fork, although you can do certain other work if you are very
  careful.
 
 The reason for this is that after the fork, only one thread will be
  running in the child, and if that thread tries to acquire a lock or other
  formerly-shared resource it may deadlock or crash, because the child
  process is no longer accessing the same memory location as the threads in
  the parent process (it gets a separate copy of the address space at the
  time of fork, which may not be in a consistent state from the point of
  view of the thread library).
 
 I am not calling fork explicitly. The thread I'm running in was created
  with pthread_create(). The fork() in the stack trace in my original email
  is being called by the system() function as it spawns off the process it
  is supposed want to run. Is there a safe way to call system() within a
  pthread?

Either I'm very lucky, or popen is better suited for this, as I have this 
running on various machines, 24/7:

#define PING_CMD \
ping -n -c 50 %s 2/dev/null|egrep 'round-trip|packets received'

/* worker thread main loop */
void *monitor_host(void *data)
{
...
if( -1 == asprintf(cmd, PING_CMD, ip) )
{
warnl(Failed to construct command);
*ex = EX_OSERR;
return(ex);
}



while( !signalled )
{
if( (cmd_p = popen(cmd, r)) == NULL )
{
warnl(Failed to run command %s, cmd);
*ex = EX_OSERR;
return(ex);
}

EV_SET(ch, fileno(cmd_p), EVFILT_READ, EV_ADD|EV_ENABLE,
0, 0, NULL);
for( ;; )
{
int nev;

if( signalled ||
(nev = kevent(kq, ch, 1, ev, 1, timeout)) == -1 )
{
if( signalled == SIGHUP )
goto closeproc;
else
goto cleanup;
}

if( nev )
break;
}
/* read fp, store in db */
}
}
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: most bizarre libc.so.7 problem

2009-10-25 Thread Mel Flynn
On Saturday 24 October 2009 14:33:53 B. Cook wrote:
 B. Cook wrote, On 10/24/2009 7:43 AM:

  49  === lib/libc (install)
  50  install -C -o root -g wheel -m 444   libc.a /usr/lib
  51  install -C -o root -g wheel -m 444   libc_p.a /usr/lib
  52  install -s -o root -g wheel -m 444   -fschg -S  libc.so.7 /lib
  53  install: /lib/libc.so.7: chflags: Invalid argument
  54  *** Error code 71

When on ZFS, set NO_FSCHG in /etc/src.conf. For the time being, file flags are 
not supported on ZFS.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Microsoft Dynamic DNS

2009-09-20 Thread Mel Flynn
On Saturday 19 September 2009 22:06:03 stan wrote:
 I have a situation at work, where I need  a FreeBSD machine to be in the
 corporate DNS. We have been bought out, and the new owner says no static
 DNS entries. They use some Microsoft technogly where the client machiens
 register thier names with the corprate DNS.
 
 My Windows laptop for instance, may get different IP addresses using DHCP
 depending on what physical location I connect it in. but it's always the
 same DNS name.
 
 Can anyone sugest where to look for information as to how this works, and
 how I cna make my FreeBSD machine participate in this?

You don't need to do anything. By default, dhclient sends the hostname. 
Exception is when you don't have a hostname configured in /etc/rc.conf.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: DHCP client questions

2009-09-20 Thread Mel Flynn
On Sunday 20 September 2009 21:19:28 stan wrote:

 I have several machines (such as a mailserver) which _MUST_ have fixed
 names. I have played around with /etc/dhcllient.conf, but not managed to
 get this working. I can get IP addresses, and various things such as
 default routers, and DNS servers, but I have not managed to get the
 suggested name put in their DNS.

Ok, I know you're trying to make clear what your problem is, but it's still 
not. So, let's try step by step,, using a FreeBSD mailserver as the example:
1) Does the mailserver have a fixed HOSTNAME or can the HOSTNAME change if the 
DHCP server wants it to?

2) When you say but I have not managed to get the suggested name put in their 
DNS, does this mean you expect the FreeBSD mailserver to enter itself into 
the Microsoft DNS? Or can you not get the FreeBSD mailserver to name itself 
according to what the DHCP server tells them to?

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Not able to compile GENERIC kernel

2009-09-20 Thread Mel Flynn
On Sunday 20 September 2009 23:26:58 Giorgos Keramidas wrote:
 On Sun, 20 Sep 2009 21:10:00 +0200, Christer Solskogen 
christer.solsko...@gmail.com wrote:
  Giorgos Keramidas wrote:
  # rm -fr /usr/obj/usr
  # cd /usr/src
  # make cleandir ; make cleandir
 
  I've seen serveral placeses that make cleandir should be run twice. I
  dont understand why. Could somebody explain?
 
 The first run cleans file sunder $(MAKEOBJDIRPREFIX), or under
 `/usr/obj' if MAKEOBJDIRPREFIX is unset.
 
 The second run cleans files in the source tree itself.

Which you'll see if you don't use the designated build{world|kernel} targets, 
but cd into a directory and start typing make orquite the pitfall, run 
make obj depend, rather then make obj  make depend. In the first case, the 
.depend file ends up in .CURDIR, not .OBJDIR.

Also, perhaps it's better to advise make cleanworld for the rm -rf, as this 
target accomplishes the same, deals better with chflags(2) and leaves 
/usr/obj/usr/ports in tact for those who have set WRKDIRPREFIX to /usr/obj for 
ports.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: passing options thru '/etc/rc.d/foo start'

2009-09-17 Thread Mel Flynn
On Wednesday 16 September 2009 21:18:03 Tom Worster wrote:
 On 9/16/09 2:37 PM, Mel Flynn
 
 mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
  On Wednesday 16 September 2009 20:21:40 Chris Cowart wrote:
  Tom Worster wrote:
  thanks, Mel, that's good to know.
 
  i think your suggestion of modifying rc.conf will turn out to be a tidy
  solution for me.
 
  You could also just put:
 
  sshd_flags=-o X11Forwarding=no
 
  into your /etc/rc.conf file.
 
  What he wants is passing arguments without touching config files, which I
  find myself needing sometimes as well, on machines where static
  partitions are mounted read-only + kern.secure_level.
 
 that's right.
 
 when i read in 11.7 of the handbook: Since the rc.d system is primarily
 intended to start/stop services at system startup/shutdown time, ... i
 thought: maybe i'm making things hard by trying to use rc.d scripts when i
 could just execute the daemon's binary.

One downside I forgot to mention:
You do open yourself up now to SSHD_FLAGS=-o AllowRoot=yes, so you may need 
to complicate the logic a bit more, by sanitizing SSHD_FLAGS.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can lagg0 failback be prevented?

2009-09-17 Thread Mel Flynn
On Wednesday 16 September 2009 20:58:45 Peter Steele wrote:
 Not really, unless you manually change master. However I believe this also
  causes a slight or even bigger network outage. Any reason you're not
  using loadbalance algorithm, since it seems to suit you better?
 
 Our resident network guru is quite opposed to using the loadbalancing
  option since it comes with a lot of potentially undesirable baggage of its
  own...

Then your best option is to patch lagg(4) with an avail algorithm, that 
prefers $master and sticks with an interface till it's detected down. When 
done properly the chances are good to get this into base.
Another approach would be to change the failover with a 'fader' algorithm, 
that gradually fades from one nic to the other, kind of like an audio mixer, 
though I'm not sure if that's possible and would work satisfactory.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: mpt timed out and Re: port math/gnuplot hangs and ignores kill -9

2009-09-17 Thread Mel Flynn
On Thursday 17 September 2009 15:57:43 Anton Shterenlikht wrote:
 On Thu, Sep 17, 2009 at 02:40:24PM +0100, Anton Shterenlikht wrote:
  On Thu, Sep 17, 2009 at 03:16:16PM +0200, Roland Smith wrote:
   On Thu, Sep 17, 2009 at 01:34:04PM +0100, Anton Shterenlikht wrote:
 It could be that the process is stuck in the 'D' state
 (uninterruptable wait). You can veryfiy that by running 'ps -u' and
 looking in the eight column when gnuplot is running.

 Does the window with the plot actually appear?

 Interactive use of gnuplot-4.2.6 is fine on amd64 7.2-RELEASE-p2.
   
I reinstalled gnuplot-4.2.6 and (hopefully) all ports on which it
depends. I still get the same behaviour.
   
top -PISu shows:
   
last pid:   108;  load averages:  0.88,  0.35,  0.19up 2+02:23:38
 13:27:52 109 processes: 4 running, 88 sleeping, 17 waiting
CPU 0:  0.0% user,  0.0% nice,  0.0% system,  0.0% interrupt,  100%
idle CPU 1:  0.0% user,  0.0% nice,  100% system,  0.0% interrupt, 
0.0% idle Mem: 105M Active, 2074M Inact, 363M Wired, 768K Cache, 827M
Buf, 5322M Free Swap: 19G Total, 19G Free
   
  PIDUIDTHR PRI NICE   SIZERES STATE   C   TIME   WCPU
COMMAND 11  0  2 171 ki31 0K64K RUN 0  77.9H
100.00% idle 2   1001  2  480 98240K 55608K CPU11  
0:00 100.00% gnuplot
   
so gnuplot is using 100% and all in system state.
   
and ps -u:
   
USERPID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
mexas 2 98.1  0.7 98240 55608   5  R+1:25pm   0:00.72 gnuplot
   
so the state is not D.
   
The window does appear (just using simple gnuplot plot sin(x), and
the terminal is set to 'wxt', but nothing ever apears in the window.
  
   The wxt terminal is only available when gnuplot is compiled with the
   wxWidgets toolkit. Try using the plain x11 terminal, and see if that
   works better?
 
  yes, that works fine! Thank you!
 
  So the problem must be with wxgtk2-2.8.10_1 and wxgtk2-common-2.8.10_1 ?
 
  How can I kill the offending gnuplot process?
 
 On reboot I see this on the console:
 
 System shutdown time has arrived
 Stopping cron.
 Stopping sshd.
 Stopping ntpd.
 Stopping devd.
 Writing entropy file:mpt0: request 0xa00d2140:52792 timed out for
  ccb 0x
 
 e00019ece800 (req-ccb 0xe00019ece800)
 mpt0: completing timedout/aborted req 0xa00d2140:52792
 mpt0: Timedout requests already complete. Interrupts may not be
  functioning. Sep 17 14:49:59 mech-cluster241 syslogd: exiting on signal 15
 Sep 17 14:49:59 init: timeout expired for /bin/sh on /etc/rc.shutdown:
  Interrupt
 
 ed system call; going to single user mode
 Sep 17 14:50:19 init: some processes would not die; ps axl advised
 Waiting (max 60 seconds) for system process `vnlru' to stop...done
 Waiting (max 60 seconds) for system process `bufdaemon' to stop...done
 Waiting (max 60 seconds) for system process `syncer' to stop...
 Syncing disks, vnodes remaining...3 1 2
 
 
 I'm a bit worried about mpt0 messages - this is the SCSI driver.
 Does this indicate a problem with mpt?

Since gnuplot was spinning in kernel mode, all bets are off. This timeout is 
most likely a side effect from that, unless you see this every reboot not just 
with an unkillable gnuplot. 

If your system has the ability to run procstat -k, you might find out what 
gnuplot is spinning on. You'll need at least a 7.x system, but I'm not sure if 
kernelthreads are supported on ia64 and kernel needs to have STACK or DDB 
options.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: passing options thru '/etc/rc.d/foo start'

2009-09-17 Thread Mel Flynn
On Thursday 17 September 2009 19:55:33 Ruben de Groot wrote:
 On Thu, Sep 17, 2009 at 07:14:29PM +0200, Mel Flynn typed:
  On Wednesday 16 September 2009 21:18:03 Tom Worster wrote:
   On 9/16/09 2:37 PM, Mel Flynn
  
   mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
On Wednesday 16 September 2009 20:21:40 Chris Cowart wrote:
Tom Worster wrote:
thanks, Mel, that's good to know.
   
i think your suggestion of modifying rc.conf will turn out to be a
tidy solution for me.
   
You could also just put:
   
sshd_flags=-o X11Forwarding=no
   
into your /etc/rc.conf file.
   
What he wants is passing arguments without touching config files,
which I find myself needing sometimes as well, on machines where
static partitions are mounted read-only + kern.secure_level.
  
   that's right.
  
   when i read in 11.7 of the handbook: Since the rc.d system is
   primarily intended to start/stop services at system startup/shutdown
   time, ... i thought: maybe i'm making things hard by trying to use
   rc.d scripts when i could just execute the daemon's binary.
 
  One downside I forgot to mention:
  You do open yourself up now to SSHD_FLAGS=-o AllowRoot=yes, so you may
  need to complicate the logic a bit more, by sanitizing SSHD_FLAGS.
 
 Please explain how this can be exploited by a non-root user?

By adding this to .profile of compromised wheel account and waiting for him to 
run sudo -E or using an older version of sudo.
Yes, it's an unlikely path.

More to the point, it defeats having ro mounted /etc + secure level, since no 
reboot is required to modify the running sshd, so you're compromising your 
failsafe.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: passing options thru '/etc/rc.d/foo start'

2009-09-16 Thread Mel Flynn
On Wednesday 16 September 2009 18:45:29 Tom Worster wrote:
 is there a general shell syntax that can be used to pass arguments to a
 daemon that you're starting with the /etc/rc.d/foo start command?
 
 for example, how does one start sshd using /etc/rc.d/sshd and pass it
 '-o X11Forwarding=no' without touching a config file?

You don't. Defaults are set in /etc/defaults/rc.conf, overridden in 
/etc/rc.conf. Unless you add the logic yourself in /etc/rc.conf, the 
environment is not looked at.
So this means a one-time edit of /etc/rc.conf:
if test -n ${SSHD_FLAGS}; then
sshd_flags=${SSHD_FLAGS}
else
sshd_flags=${sshd_flags}
fi

Then start with SSHD_FLAGS=-o X11Forwarding=no /etc/rc.d/sshd start

But this is specific for sshd, as it supports _flags. There's no generic way 
to do this.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can lagg0 failback be prevented?

2009-09-16 Thread Mel Flynn
On Wednesday 16 September 2009 16:12:25 Peter Steele wrote:

 The problem we're having is when nfe0 comes online again, a failback occurs
  making nfe0 active again. This causes a momentary network outage that we
  want to prevent. Is there a way to configure the lagg device to stay with
  the currently active interface, even if the MASTER interface comes back
  online?

Not really, unless you manually change master. However I believe this also 
causes a slight or even bigger network outage. Any reason you're not using 
loadbalance algorithm, since it seems to suit you better?
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: passing options thru '/etc/rc.d/foo start'

2009-09-16 Thread Mel Flynn
On Wednesday 16 September 2009 20:21:40 Chris Cowart wrote:
 Tom Worster wrote:
  thanks, Mel, that's good to know.
 
  i think your suggestion of modifying rc.conf will turn out to be a tidy
  solution for me.
 
 You could also just put:
 
 sshd_flags=-o X11Forwarding=no
 
 into your /etc/rc.conf file.

What he wants is passing arguments without touching config files, which I find 
myself needing sometimes as well, on machines where static partitions are 
mounted read-only + kern.secure_level.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: rebinding keys to functions

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 09:01:00 Roland Smith wrote:
 On Tue, Sep 15, 2009 at 01:38:18AM +0200, Mel Flynn wrote:
   Not all of them. My laptop is based on a quite modern cantiga (aka
centrino2) PM45 chipset (from 2008, according to Wikipedia). The
   function keys for changing the creen brightness and sound volume work
   OK with FreeBSD, even though xev doesn't see them. So that signal seems
   to go directly to the hardware.
 
  Most likely not entirely. Having acpidump(8)ed a few laptops, I have seen
  references to multimedia keys in there. However I know not nearly enough
  about ACPI to know if the OS can intercept/reroute the bindings. A gamble
  I would take is to let FreeBSD post itself as a windows variant to acpi,
  by setting hw.acpi.osname=Windows 2001 in /boot/loader.conf. Then
  recheck xev.
 
 What would you see in the acpidump that indicates those keys?

Example, HPDV9000:

If (LEqual (Local1, 0x07))
{
Store (Fn+F7 Pressed, Debug)
If (LEqual (OSYS, 0x07D6))
{
If (IGDS)
{
Notify (\_SB.PCI0.GFX0.DD04, 0x87)
}
Else
{
Notify (\_SB.PCI0.PEGP.VGA.LCD, 0x87)
}
}
Else
{
Store (0x15, SMIF)
Store (0x00, TRP0)
}


Fn+F7 = screen darker. See the ref to OSYS.
Also:

Method (_Q16, 0, NotSerialized)
{
Store (!!! DVD/Music Button pressed !!!, Debug)
If (LEqual (OSYS, 0x07D6))
{
And:
If (\_OSI (Windows 2006))
{
Store (0x07D6, OSYS)
}

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: libnsl.so.1

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 02:43:32 Joe R. Jah wrote:
 On Tue, 15 Sep 2009, Mel Flynn wrote:
  Date: Tue, 15 Sep 2009 01:17:02 +0200
  From: Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net
  To: freebsd-questions@freebsd.org
  Cc: Joe R. Jah j...@cloud.ccsf.cc.ca.us
  Subject: Re: libnsl.so.1
 
  On Tuesday 15 September 2009 00:02:50 Joe R. Jah wrote:
   Hello all,
  
   I want to install a dispather module from Day Communique software on
   apache22.  The binaray mod_dispatcher.so is provided by Day as a 64 bit
   *NIX compatible module to place in apache22 module directory.  The
   mocule requires a shared library missing from system:
  
   --8--
   # apachectl -t
   httpd: Syntax error on line 827 of /usr/local/etc/apache22/httpd.conf:
   Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
   Shared object libnsl.so.1 not found, required by mod_dispatcher.so
   --8--
  
   Does anyone know where to download libnsl.so.1, or from what port it
   can be installed?
 
  nsl=name service library. All of it's functions are in FreeBSD implement
  in libc. If this mod_dispatcher.so is indeed loadable by FreeBSD's
  linker, then you can provide a dummy libnsl.so.1, like so:
 
  $ cat 'EOF' BSDmakefile
  SHLIB=nsl
  SHLIB_MAJOR=1
  NO_MAN=yes
  SRCS=nsl.c
 
  .include bsd.lib.mk
  EOF
  $ cat 'EOF' nsl.c
  int nsl_dummy(void);
 
  int nsl_dummy(void) { return 0; }
  EOF
 
  $ make; sudo make LIBDIR=/usr/local/lib install
 
  The symbols it's looking for should be provided by libc, but if there's
  any undefined ones, this trickery gets a little dangerous and you're
  better off asking the developers for a native FreeBSD version.
 
 Thank you Mel.  You were right about undefined ones;  Here's what I get:
 
 --8--
 apachectl -t
 httpd: Syntax error on line 826 of /usr/local/etc/apache22/httpd.conf:
 Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
 /usr/local/libexec/apache22/mod_dispatcher.so: Undefined symbol __strdup
 --8--
 
 Any more trickeries?;-)

Sure, add #define __strdup strdup to nsl.c, however this road is not likely to 
end soon. It seems to be compiled for a linux system, at least for a SYSV 
system, while FreeBSD follows '4.4BSD'.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 09:58:31 Przemyslaw Frasunek wrote:
 Giorgos Keramidas wrote:
  Przemyslaw should email security-officer with any details he thinks are
  relevant.  Then the security team will make sure to fix the bug for all
  affected releases of FreeBSD, release a patch with the fix, issue an
  advisory through the usual channels, and post the details online at our
  security information web pages at http://www.FreeBSD.org/security/.
 
 I see that I received a lot of criticism after disclosing 6.4
  vulnerability. Please read some facts:

FWIW, I think some people here read with their eyes closed and I'm wondering 
myself, why security@ did not at least respond with a we're looking into it, 
please hold on, as we're busy with 8.0 release..
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Non-root user and accept() or listen()

2009-09-15 Thread Mel Flynn
On Monday 14 September 2009 18:47:18 Freminlins wrote:
 Hi,
 
 I am not sure if this exists (but don't think so), so I am asking.
 
 Is there a sysctl type thing to disallow non-root users, or indeed any
 specified user or group, from running a program with listen() ?
 
 What I am looking at is improving network security, such that if a user
 account is compromised it can then not be used to run a dodgy web
 server/whatever on a non-privileged port. Although I can firewall off any
 port I wish, it seems like an obvious thing to disallow any user from
 opening a listening socket in the first place. I am suggesting something
 like sysctl user.socket_listen with enable or disable.
 
 Am I being really daft? Or does this exist already?

See mac_portacl(4).
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: krootimage crashed at KDE 3.5 startup on signal 11 (7.2 STABLE)

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 19:35:47 Jeronimo Calvo wrote:
 Hi folks!!!
 
 For some reason im getting krootimage (the wallpaper manager of kde)
 crashing everytime when i login...
 Any ideas of how to fix that?

Any chance you have two jpeg versions lying around? Please provide ldd -a 
output of krootimage.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 20:13:17 Jerry wrote:
 On Tue, 15 Sep 2009 13:18:29 -0400
 
 Bill Moran wmo...@potentialtech.com wrote:
  On Tue, 15 Sep 2009 13:03:50 -0400
 
  Jerry ges...@yahoo.com wrote:
   On Tue, 15 Sep 2009 11:13:31 -0400
  
   Bill Moran wmo...@potentialtech.com wrote:
In response to Jerry ges...@yahoo.com:
 I usually discover security problems with updates I receive from
 http://www.us-cert.gov/. Aren't FreeBSD security problems
 reported to their site? If not, why? IMHO, keeping users in the
 dark to known security problems is not a serviceable protocol.
   
Because releasing security advisories before there is a fix
available is not responsible use of the information, and (as is
being discussed) the fix is still in the works.
  
   I disagree. If I have a medical problem, or what ever, I expect to
   be informed of it. The fact that there is no known cure, fix, etc.
   is immaterial, if in fact not grossly negligent.
 
  This is a stupid and non-relevant comparison.  A better comparison
  would be if I realized that you'd left your car door unlocked in a
  less than safe neighborhood.  Would you rather I told you discreetly,
  or just started shouting it out loud to the neighborhood?  Wait, I
  know the answer, if I see _your_ car unlocked, I'll just start
  shouting.
 
 The fact is, that you do in fact notify me. Keeping important security
 information secret benefits no one, except for possibly those
 responsible for the problem to begin with who do not want the
 knowledge of the problem to become public. A multitude of software,
 such as Mozilla, publish known security holes in their software.
 The ramifications of allowing a user to actively use a piece of
 software when a known bug/exploit/etc. exists within it is grossly
 negligent.

Please inform yourself properly before assuming you're right. Mozilla does not 
by default publish vulnerabilities before a fix is known. In some cases 
publishing has been delayed by months. The exception is when exploits are 
already in the wild and a work around is available, while a real fix will take 
more work.

This is also why vulnerabilities are typically not disclosed till a fix is 
known, because it does not protect the typical user, but puts him in harms 
way, which is exactly what you don't want.

In theory, if I know the details of this particular exploit, I can patch my 
6.4 machines myself, but more realistically, if developers take all this time 
to come up with a solution that doesn't break functionality the chances that I 
and more casual users can do this are slim. Meanwhile, the exploit will be 
coded into the usual rootkits and internet scanners and casualties will be 
made. That doesn't help anyone.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: krootimage crashed at KDE 3.5 startup on signal 11 (7.2 STABLE)

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 20:48:55 Jeronimo Calvo wrote:
 Yes, I remember I had an error when I ran pkgdb -F due to 2
 different versions of jpeg...
 
 here is the output:
 
 $ ldd -a /usr/local/bin/krootimage

...

 /usr/local/lib/libqt-mt.so.3:
 libaudio.so.2 = /usr/local/lib/libaudio.so.2 (0x803e1)
 libXt.so.6 = /usr/local/lib/libXt.so.6 (0x803f27000)
 libmng.so.1 = /usr/local/lib/libmng.so.1 (0x804086000)
 libjpeg.so.9 = /usr/local/lib/compat/pkg/libjpeg.so.9
  (0x8041e6000) libpng.so.5 = /usr/local/lib/libpng.so.5 (0x802796000)
 libz.so.4 = /lib/libz.so.4 (0x803351000)
 libXi.so.6 = /usr/local/lib/libXi.so.6 (0x804307000)
 libXrender.so.1 = /usr/local/lib/libXrender.so.1 (0x802bef000)
 libXrandr.so.2 = /usr/local/lib/libXrandr.so.2 (0x80441)
 libXcursor.so.1 = /usr/local/lib/libXcursor.so.1 (0x804518000)
 libXinerama.so.1 = /usr/local/lib/libXinerama.so.1 (0x804622000)
 libXft.so.2 = /usr/local/lib/libXft.so.2 (0x804724000)
 libfreetype.so.9 = /usr/local/lib/libfreetype.so.9 (0x804837000)
 libfontconfig.so.1 = /usr/local/lib/libfontconfig.so.1
  (0x8049b6000) libXext.so.6 = /usr/local/lib/libXext.so.6 (0x8028bc000)
 libX11.so.6 = /usr/local/lib/libX11.so.6 (0x802cf8000)
 libSM.so.6 = /usr/local/lib/libSM.so.6 (0x8029cd000)
 libICE.so.6 = /usr/local/lib/libICE.so.6 (0x802ad5000)
 libstdc++.so.6 = /usr/lib/libstdc++.so.6 (0x8036a1000)
 libm.so.5 = /lib/libm.so.5 (0x8038ad000)
 libgcc_s.so.1 = /lib/libgcc_s.so.1 (0x8039c7000)
 libthr.so.3 = /lib/libthr.so.3 (0x803ad4000)
 libc.so.7 = /lib/libc.so.7 (0x803bec000)

 /usr/local/lib/libmng.so.1:
 libm.so.5 = /lib/libm.so.5 (0x8038ad000)
 libz.so.4 = /lib/libz.so.4 (0x803351000)
 liblcms.so.1 = /usr/local/lib/liblcms.so.1 (0x804ae5000)
 libjpeg.so.9 = /usr/local/lib/compat/pkg/libjpeg.so.9
  (0x8041e6000) libc.so.7 = /lib/libc.so.7 (0x803bec000)
 /usr/local/lib/compat/pkg/libjpeg.so.9:

Those are the two culprits. Forcibly (portupgrade/portmaster -f) reinstall 
x11-toolkits/qt33 and graphics/libmng and make sure it's done from source, not 
from local packages.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 21:14:25 Jerry wrote:
 On Tue, 15 Sep 2009 20:51:40 +0200
 
 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

  The exception is
  when exploits are already in the wild and a work around is available,
  while a real fix will take more work.

 Assume that I have discovered a vulnerability in a widely used, or even
 marginal for arguments sake, program. I now start to exploit that
 vulnerability. Now assume that you are responsible for maintaining,
 that program. Use any job description that suits you for this purpose.
 Are you claiming that since it may take several months to fix, it is
 better to let users be exploited rather than inform them that there is
 an exploitable problem in said software? I fine that extremely
 disturbing.

Then I suggest you cancel your internet account(s). Also, it helps to read 
what people are writing.

But for the corner case where you are the person reporting me this 
vulnerability, telling me you won't exploit it, then do it anyway, there is no 
guard in place, other then that sooner or later, you'll compromise a machine 
administered by someone able to retrace what happened and it'll come back to 
me and I'd move up the timetable, cook up a work around and publish the 
details.
There is some level of trust between reporter and fixer, whether it be good or 
bad, it's simply a fact of life and not likely to change.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: krootimage crashed at KDE 3.5 startup on signal 11 (7.2 STABLE)

2009-09-15 Thread Mel Flynn
On Tuesday 15 September 2009 21:23:40 Jeronimo Calvo wrote:
 done and fixed!! thanks a lot!!

Good, and you're very welcome.

 btw, that was caused then to a portupgrade -f?? there is any
 additional steps, to solve any future errors caused by that as well??

Though the initial instructions about the jpeg upgrade were questionable at 
best, the current description is accurate and will resolve any future 
problems. You can of course reduce the amount of work by figuring out which 
ports still link with libjpeg.so.9, using ldd on /usr/local/bin/* and 
/usr/local/sbin/*, grep and pkg_info -W.

pkg_updating -d 20090719 jpeg

will show the UPDATING entry.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remounting a drive as read/write crashes the system and no dmesg.boot

2009-09-14 Thread Mel Flynn
On Saturday 22 August 2009 02:40:53 Scott Schappell wrote:
 On Aug 21, 2009, at 17:32:13, Mel Flynn wrote:
  On Friday 21 August 2009 07:34:11 Scott Schappell wrote:
  Looking at info.0 I see:
 
 
  Dump header from device /dev/ad0s1b
Architecture: i386
Architecture Version: 2
Dump Length: 155131904B (147 MB)
Blocksize: 512
Dumptime: Fri Aug 21 08:27:45 2009
Hostname: arthur.silvertree.org
Magic: FreeBSD Kernel Dump
Version String: FreeBSD 7.2-RELEASE-p3 #1: Fri Aug 14 13:27:47 PDT
  2009
  r...@arthur.silvertree.org:/usr/obj/usr/src/sys/ARTHUR
Panic String: ffs_sync: rofs mod
Dump Parity: 2778312054
Bounds: 0
Dump Status: good
 
  This is interesting:
 
  Panic String: ffs_sync: rofs mod
 
  It looks I'm guessing this is saying read only file system
  modified.  So it looks like the problem is with mount?
 
  If there's anything you want me to pull from the vmcore.0 let me
  know.
 
  Again, this happens with the drive mounted RO from fstab. Unmounted
  then mount -o rw /backup.
 
  Something is amiss, and first blush doesn't seem to be hardware
  related.
 
  There should be a backtrace in info.0 already. That part contains more
  relevant information.
 
 Nope, that's all info.0 contains.

Follow up. Temp fix available here:
http://www.freebsd.org/cgi/getmsg.cgi?fetch=193338+0+current/freebsd-current
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: libnsl.so.1

2009-09-14 Thread Mel Flynn
On Tuesday 15 September 2009 00:02:50 Joe R. Jah wrote:
 Hello all,
 
 I want to install a dispather module from Day Communique software on
 apache22.  The binaray mod_dispatcher.so is provided by Day as a 64 bit
 *NIX compatible module to place in apache22 module directory.  The mocule
 requires a shared library missing from system:
 
 --8--
 # apachectl -t
 httpd: Syntax error on line 827 of /usr/local/etc/apache22/httpd.conf:
 Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
 Shared object libnsl.so.1 not found, required by mod_dispatcher.so
 --8--
 
 Does anyone know where to download libnsl.so.1, or from what port it can
 be installed?

nsl=name service library. All of it's functions are in FreeBSD implement in 
libc. If this mod_dispatcher.so is indeed loadable by FreeBSD's linker, then 
you can provide a dummy libnsl.so.1, like so:

$ cat 'EOF' BSDmakefile
SHLIB=nsl
SHLIB_MAJOR=1
NO_MAN=yes
SRCS=nsl.c

.include bsd.lib.mk
EOF
$ cat 'EOF' nsl.c
int nsl_dummy(void);

int nsl_dummy(void) { return 0; }
EOF

$ make; sudo make LIBDIR=/usr/local/lib install

The symbols it's looking for should be provided by libc, but if there's any 
undefined ones, this trickery gets a little dangerous and you're better off 
asking the developers for a native FreeBSD version.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mel Flynn
On Monday 14 September 2009 23:46:42 David Kelly wrote:
 On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
  Am 2009/9/14 Dan Goodin dgoo...@sitpub.com writhed:
   Hello,
  
   Dan Goodin, a reporter at technology news website The Register.
   Security researcher Przemyslaw Frasunek says versions 6.x through 6.4
   of FreeBSD has a security bug. He says he notified the FreeBSD
   Foundation on August 29 and never got a response. We'll be writing a
   brief article about this. Please let me know ASAP if someone cares to
   comment.
 
  Has anyone submitted a PR about this?
 
 Przemyslaw Frasunek has PR's posted but none recent. IMO if a PR is not
 submitted then one has *not* informed the Powers That Be.

Wrong. Security bugs should be reported to the security team, not PR'd.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: rebinding keys to functions

2009-09-14 Thread Mel Flynn
On Tuesday 15 September 2009 00:40:38 Roland Smith wrote:
 On Mon, Sep 14, 2009 at 11:06:20PM +0200, Polytropon wrote:
  On Mon, 14 Sep 2009 14:34:29 -0400, Robert Huff roberth...@rcn.com 
wrote:
   Roland Smith writes:
  My laptop has a bunch of volume-up/down/mute internet/mail/etc
  keys.  How do I map each of them to run a specific shell
  command when pressed?
   
 That depends on a couple of things (assuming you're running the X
 window system, I don't know if it is even possible on the
 console).
   
 First you have to make sure that you actually can see the key
 signals. In X you can test that with xev(1).
  
 If this is what I think it is, he probably can't.
 
  For most laptop keyboards, there was (as already explained) a
  specific system that handled Fn+PFx outside the OS so it worked
  always. Even my old Toshiba T1600 can do that.
 
  Modern laptops do it differently: Fn+PFx key combinations
  have to be picked up by a specific driver that listens to
  stange and custom keycodes outside the standard range, and then
  communicate the selected purpose to the OS in order to perform
  the action, e. g. raise the volume.
 
 Not all of them. My laptop is based on a quite modern cantiga (aka
  centrino2) PM45 chipset (from 2008, according to Wikipedia). The function
  keys for changing the creen brightness and sound volume work OK with
  FreeBSD, even though xev doesn't see them. So that signal seems to go
  directly to the hardware.

Most likely not entirely. Having acpidump(8)ed a few laptops, I have seen 
references to multimedia keys in there. However I know not nearly enough about 
ACPI to know if the OS can intercept/reroute the bindings. A gamble I would 
take is to let FreeBSD post itself as a windows variant to acpi, by setting 
hw.acpi.osname=Windows 2001 in /boot/loader.conf. Then recheck xev.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using mdconfig for swap space

2009-09-09 Thread Mel Flynn
On Wednesday 09 September 2009 15:07:37 Peter Steele wrote:
 Thanks for the responses. The reason I'm looking at doing this is that we
 have increased memory on our platform from 4GB to 8GB and therefore have to
 increase swap space from 8GB to 16GB.

No you don't. It's advised, but not mandatory.

 We have enough space in our /var
 partition that we could add a swap file there and not have to touch the
 existing partition layout. I like the simplicity of the swap file approach,
 but we have an application that is very sensitive to I/O performance and
 I'm a little wary what this could mean. QA I know would have a field day in
 trying to pound the system with all sorts of stress tests. I think a
 dedicated swap partition is probably a safer option.

Any I/O bound application suffers from any kind of swap. You would do better 
to first establish how this application suffers once you start swapping. If 
your machine needs more then or even close to 8GB of swap, I doubt the 
applications are responsive to begin with. With 8GB of memory, it's probably 
better to have 2GB of swap, so that offending applications are killed off 
sooner and the machine is able to recover sooner. But - I'm assuming this is a 
server, for a multimedia machine - editing large images or videos - more swap 
is beneficial as inactive images/videos can be swapped out.

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Regex Help - Greedy vs. Non-Greedy

2009-09-09 Thread Mel Flynn
On Wednesday 09 September 2009 18:15:25 Drew Tomlinson wrote:
 I'm trying to do a search and replace in vim.  I have lines like this:
 http://site1/dir/;
 http://site2/dir/;LastName, FirstName;Phone;
 http://site3/dir/;LastName, FirstName;
 http://site4/dir/;

 I'm want to match http:* and stop matching at the first ;.  My basic
 regex is:

 /http:.\+;/

 But it's matching *all* the semi-colons.  Thus I've Googled and tried
 various incatations to try and make my regex non-greedy but I can't
 seem to come up with the correct combination.

 How can I write a regex that stops matching at the first semi-colon?

AFAIK, there's no greediness modifier in vim regex. However, you can use 
character classes to solve your problem:

%s/http:[^;]\+/foo/g
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Inconsistency in root partition size

2009-09-08 Thread Mel Flynn
On Tuesday 08 September 2009 04:14:55 jaymax wrote:

  restore -tf /disk03/dump/root2.dump  rootrestore-0.lst

 To my surprise rootrestore-0.lst contains a whole listings of ./usr/ files
 ex.

2926  ./usr/include/bsnmp/snmpmod.h
2927  ./usr/include/bsnmp/snmp_atm.h

 Now /usr is on a separate and distinct partition

  /dev/ad0s1f  36205990  25765232  754428077%/usr

 Hope someone can make some sense of this.

This is exactly what I figured. Some files are hiding behind a mount point. 
The got there most likely, cause you did make installworld without /usr 
mounted, which would happen if you have the FreeBSD source tree on a different 
location, reboot into single user mode, only mount the source tree and do 
installworld.

To repair, reboot into single user. Run the following commands:
fsck -y /
mount -u -o rw /
rm -rf /usr/*
exit

This should delete the offending files.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Inconsistency in root partition size

2009-09-07 Thread Mel Flynn
On Monday 07 September 2009 04:24:07 jaymax wrote:

 Filesystem  1K-blocks  UsedAvail Capacity  Mounted on
 /dev/ad0s1a507630503694   -36674   108%/

 Don't know if the above can show anything

It is of course entirely possible at this point, that the disk *is* full. 
Could you show: du -sxh / from single user mode, without anything mounted?

That would ensure that the offending file is not hiding behind a mountpoint. 
Like: /usr/hiding_here.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is there such thing as a 'soft checksum' tool?

2009-09-07 Thread Mel Flynn
On Monday 07 September 2009 05:09:53 Michael David Crawford wrote:
  M I'm looking for a pseudo-checksum tool for use with cataloging images.

 I've seen such tools advertised, but they were proprietary products and
 only worked on windows.

 One way you could approach it might be to use a blur filter to blur each
 of your images, and then to compare the blurred images.  Small
 differences in individual pixels would be blurred away.

Did you guys miss Charlie Kester's message? And the above does not work, 
because of compression anyway. Just because you think of an image as a bitmap, 
does not mean it's stored as such.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: wireless: host access point w/ WAP help!

2009-09-07 Thread Mel Flynn
Hi,

0) Always mention OS version, bonus points for uname -a.

On Monday 07 September 2009 02:27:04 Nerius Landys wrote:
 I am following the Handbook instructions for setting up a FreeBSD
 wireless host access point:
 http://www.freebsd.org/doc/en/books/handbook/network-wireless.html

 r...@speedy# dmesg | grep ath
 ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
 ath0: Atheros 5212 mem 0xff8f-0xff8f irq 21 at device 0.0 on pci1
 ath0: [ITHREAD]
 ath0: WARNING: using obsoleted if_watchdog interface
 ath0: Ethernet address: 00:02:6f:61:e6:7d
 ath0: mac 7.9 phy 4.5 radio 5.6
 ath0: ath_chan_set: unable to reset channel 6 (2437 Mhz, flags 0x490
 hal flags 0x150), hal status 12

I read you got it working so far, but if you want this resolved or diagnosed, 
the uname -a is mandatory and an ident /boot/kernel/if_ath.ko as well.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Opera 10.00 (native) flash

2009-09-07 Thread Mel Flynn
On Monday 07 September 2009 13:14:29 Jerry wrote:

 Opera has a closed architecture that does not allow
 third party browser extensions.

For one, there are widgets. For two, it still supports 
the nsplugin interface. For three, some people argue 
that allowing extensions access to local disk, network
threads and pretty much everything in the browser,
including the ability to fight wars with competing
products[1], is less preferable.

[1] 
http://www.browser-watch.com/2009/05/05/firefox-plug-in-war-between-adblock-plus-and-noscript/
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Inconsistency in root partition size

2009-09-07 Thread Mel Flynn
On Monday 07 September 2009 20:54:51 jaymax wrote:

  mach_1# df -k
  Filesystem  1K-blocks  UsedAvail Capacity  Mounted on
  /dev/ad0s1a5076304073845963687%/
  devfs   1 10   100%/dev
  /dev/ad0s1e505646 14212   450984 3%/tmp
  /dev/ad0s1f  36205990  25759138  755037477%/usr
  /dev/ad1s1e  74696394   9836586 5888409814%/disk02
  /dev/ad4s1d 376405390 252115006 9417795473%/disk03
  devfs   1 10   100%/usr/var/named/dev
  mach_1# cd /
  mach_1# du -xhc

   43Mtotal

 Do these look normal or average, compare total with df - k output of
 /dev/ad0s1a
 I don't quite know what next to do

Did you do the du without anything mounted? Cause you have the df output with 
mounts.
If you can't find the missing space, then I suggest making a backup of / with 
dump(8), booting from livefs and restoring the dump. The dump should not be in 
the 390M range, rather in the 40-50M range.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: turn authentication on -- a simple how to please!!

2009-09-07 Thread Mel Flynn
On Monday 07 September 2009 21:49:42 David Southwell wrote:

 My mailserver uses postfix and has a number of virtual domains. I am
 getting the following difficulties on delivery of legitimate emails to
 remote addresses failing with a request to tun authentication on.

Normally this shouldn't occur if you are relaying yourself. Remote mail 
servers should not have authentication on for outside mail. This would only be 
the case if the remote postmaster considers his mailserver private and does 
not want to receive mail from unknown people.

Therefore, this should only happen if your relay via your ISP using the 
relay_host parameter in main.cf.

 I am
 comparatively new to managing mailservers. Could someone please tell me
 what I need to do. My searches on google seem to give me long explanations
 of what is meant to happen but I cannot find simple instructions on how to
 fulfill the requirements!!

 dns1# fgrep abc /var/log/maillog
 Sep  7 17:01:59 dns1 postfix/smtp[86489]: 179BE34D41D:
 to=competiti...@bristolphoto.org.uk,
 relay=mail.abc.org.uk[xxx.xxx.xxx.xxx]:25, delay=2.2, delays=2/0/0.15/0.03,
 dsn=5.0.0, status=bounced (host mail.abc.org.uk[xxx.xxx.xxx.xxx] said: 550
 Please turn authentication on (in reply to RCPT TO command))
 dns1#

Let us know what's not simple about this:
http://www.postfix.org/SASL_README.html#client_sasl
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Inconsistency in root partition size

2009-09-06 Thread Mel Flynn
On Sunday 06 September 2009 04:34:20 jaymax wrote:
 I apparently have open file handles in my / partitions.
 It was partitioned at 512 Mb size, used about 150Mb
 df shows
 Filesystem SizeUsed   Avail Capacity  Mounted on
 /dev/ad0s1a496M492M-36M   108%/

 adjkerntz   147   root0uVBAD  
 (revoked) adjkerntz   147   root1uVBAD 


 Can't really identify lines I can say does not belong so I don't have any
 rational basis to kill any process. All seems legit!

 Rebooting does not correct the descrepancy

For one, you could've used fstat -f / to reduce the noise. Secondly, since 
rebooting does not help, open files are not the cause. Rather the VBAD up 
there. Do an fsck -y. Chances are your file system got filled, a hardware 
write error occurred and the kernel could therefore not return the space to 
the disk.
If you still have logs, I would grep for WRITE_DMA in /var/log/messages.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Inconsistency in root partition size

2009-09-06 Thread Mel Flynn
On Sunday 06 September 2009 12:17:59 jaymax wrote:

 ran fsck on / mounted partition, is that reasonable or possible, since it
 is / or do I have to use a livefs disk like Fixit or Frenzy for this

No, single user mode. Root partition in single user mode can be fsck'd and 
repaired if mounted ro in single user. The system does fsck -p by default, 
which skips partitions marked clean. Since you can shutdown cleanly, nothing 
will happen.
Have a look at /etc/defaults/rc.conf for setting different behaviors by 
overriding the defaults in /etc/rc.conf.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how to display pkg-message

2009-09-06 Thread Mel Flynn
On Sunday 06 September 2009 20:18:38 Chris Whitehouse wrote:

 Thanks for the info. I read man ports, quite a lot of bsd.ports.mk plus
 list archives

If you want to see the dynamically generated pkg-message of a *port*, before 
building/installing it (f.e. to identify what gotchas there are), use the 
following:

make -C /usr/ports/category/portname WRKDIR=/tmp apply-slist  cat /tmp/pkg-
message
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Reverse Proxy /Proxy Pass

2009-09-05 Thread Mel Flynn
On Saturday 05 September 2009 09:55:54 Agus wrote:
 2009/9/3 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net:
  On Friday 04 September 2009 01:20:46 Agus wrote:
  What server, application do u know/recommend me for using as a
  ProxyPass / Reverse Proxy...
 
  The idea is to forward all requests to port 80 to this server and then
  from here according to the vhost send it to the actual server... For
  now i only need proxying.. dont think cacheing will be possible so im
  just looking for a pretty fast, light and stable app to do this on a
  freebsd 7...
 
  Thanks and ihope to hear some cool recommendations.. hehe
 
  If lightweight, go with www/nginx. Features, go with www/squid or
  apache+mod_proxy.
  --
  Mel
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
  freebsd-questions-unsubscr...@freebsd.org

 Thanks Mel... Now i've been reading a little and found that cherokee
 maybe a very good alternative also I also found that the
 performance will variate according to the syscall the server uses... i
 read about poll,etc how to know which syscalls does the servers
 support and which one is better/fastest?

kqueue is preferred on *BSD, since it's able to aggregate multiple filter 
matches into one event if they happen to occur in a close time frame. This 
reduces copyout from kernel to userland. It also used to be true that poll is 
a busywait, but I think that has been corrected.

If you're interested, the original design document for kqueue is available 
here:
http://people.freebsd.org/~jlemon/papers/kqueue.pdf
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KDE3 -- KDE4

2009-09-04 Thread Mel Flynn
On Wednesday 26 August 2009 12:50:00 Michiel Overtoom wrote:

 I never understood the need for transparent windows.  If you're working in
 a window you want to concentrate on its contents, not on stuff that's
 happening beneath it.  It breaks the flow.  I think it's indicative of the
 ritalin-generation of teens who can't concentrate for two minutes and need
 to constantly tweet about nonsense.  Geez, I'm getting old ;-)

I felt the same way initially. However, I'm not old enough yet, to remember I 
can get used to things and now that I have, it doesn't bother me and at times 
it's convenient (f.e. when repositioning windows). Still, it's easy to turn 
off. I'm also using the Flip Switch to alt-tab windows, which is much more 
pleasant then having to read sometimes missing window titles/icons in a list.
I can definitely do without Kontact's aggregation of message lists, other then 
that, after tweaking it, can't say that I miss KDE 3, even though I had the 
initial shocker you experienced. I also did a fair amount of tweaking after 
the first KDE3 install and I can't honestly remember if I took longer then or 
now.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What invokes cricket on FreeBSD

2009-09-04 Thread Mel Flynn
On Friday 04 September 2009 16:28:07 stan wrote:
 On Thu, Sep 03, 2009 at 11:41:28PM +0200, Mel Flynn wrote:
  On Thursday 03 September 2009 22:23:47 stan wrote:
   On Thu, Sep 03, 2009 at 10:10:13PM +0200, Mel Flynn wrote:
On Thursday 03 September 2009 21:02:41 stan wrote:
 pnoc# cat collect-subtrees
 #!/bin/sh

 echo STARTED  /tmp/stan
 which perl  /tmp/stan
 /usr/local/cricket/cricket/collect-subtrees.pl normal  /tmp/stan
 echo Done  /tmp/stan

 /tmp stan contains:

 pnoc# cat /tmp/stan
 STARTED
 /usr/bin/perl
 Done
 STARTED
 /usr/bin/perl
 Done

 So, cron is invoking the correct command, and perl can be found,
 but the original collect_subtrees perl script silently dies.

 I am convinced it's an environemt probkl`lem, I am just uncertain
 how to determine what.
   
I'm not anymore. I'm putting 1 cent on a broken /usr/bin/perl symlink
(perl upgrade gone bonkers, f.e. done with ro mounted /usr) and
another cent on the perl script using system() function, with
pathless commands (that is environment).
 
  Ok, one liner:
  su -m cricket env -i HOME=/usr/local/cricket PATH=/bin:/usr/bin \
 /usr/local/cricket/cricket/collect-subtrees.pl normal
 
  I've downloaded the 1.0.5 version, but can't quickly see where that would
  go wrong with this script. touch is in /usr/bin, so that should work. Any
  cron messages in /var/mail/cricket?

 I am away from work today, and won't be back till Tuesday. I can't access
 this from home.

 I will try your test then. The only messages that are getting to
 /var/log/cron is just the one saying that the task was executed.
Yea, the error messages end up in /var/mail/$USER or MAILTO variable if set in 
crontab. /var/log/maillog should have some tell tales.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What invokes cricket on FreeBSD

2009-09-03 Thread Mel Flynn
On Thursday 03 September 2009 15:41:07 stan wrote:
 On Thu, Sep 03, 2009 at 09:33:35AM -0400, stan wrote:
  On Thu, Sep 03, 2009 at 09:22:56AM -0400, stan wrote:
   On Thu, Sep 03, 2009 at 01:43:15PM +0100, Matthew Seaman wrote:
stan wrote:
 On Thu, Sep 03, 2009 at 07:48:57AM -0400, stan wrote:
 I have inherited a system that uses Cricket on FreeBSD to do some
 data collection. I have set this up myself in the distnat past,
 but this time I asked a contractor to set it up. I no longer have
 access to this contractor, and the toher day, we shut down the
 system this was running on, and when we rebooted the system,
 cricket id not resume collecting data.

 I don't see anyhting in /usr/local/etc/rc.d to start it up, nor do
 I see anything in /etc/crontag. I don't seen any processes owned
 by cricket running.

 In FreeBSD, how is this process noramally invoked?

 Sorry to reply to my own message, but I have more data. I did find

 -rw---  1 root  wheel  288 Jan 12  2009 /var/cron/tabs/cricke

 Which is, I am failry certain, what is _intended_ to invoke the
 cricket process. However, acording to the cricket logs, the last
 time I have an entry is Aug 29th, which was when the machine was
 shut down. So, I decided to try running this command by hand. Now,
 to do so I need to be the cricket user, so I tried to su - cricket.
 I was told that this user was not avaialble. Looking in
 /etc/passwd. I found that this users shell was listed as
 /usr/sbin/nologin. I edited /etc/paswd to change this to /nin/sh,
 but I still get the smae error message when I try to su to that
 user.

 What do I need to change to be able to su to this suer, and might
 this be the reason tha it's crontab entry is notbeing run?
   
Try:
   
   # su -m cricket
   
although the best way to examine and/or modify that user's crontab
is:
   
   # crontab -e -u cricket
  
   OK, I was able to execute the cricket collector caoomand bu using the
   su - format, and it ran corectly.
  
   Cany anyone sugest what to check to see why cron is not executing this
   command? I see no evidence of it's running in either the cricket logs'
   or cron's logs.
  
   Thanks.
 
  Repkying to my own message again :-(
 
 
  OK, I found in the cron man page the following:
 
   Before running a command from a per-account crontab file, cron
   checks the status of the account with pam(3) and skips the command if
   the account is unavailable, e.g., locked out or expired.
 
  So, now the question is, how do I unlock that user?

 This gets strnager. I found the pw cammand, which should do thatm but:

 pnoc# pw unlock cricket
 pw: user 'cricket' is not locked

 So, how come:

 pnoc# su - cricket
 This account is currently not available.

Cause cricket doesn't have a valid home directory. However, you can simply 
copy the /var/cron/tabs/cricket to /tmp. Remove the time colums, then run:
su -m cricket /usr/bin/env -i HOME=/nonexistent PATH=/bin:/usr/bin \
/bin/sh /tmp/cricket

That's the best approximation of how cron runs the commands. If you don't see 
anything in the cron logs however, it may be an issue with the timestamps 
specified not yielding any runs. Then it would help to see the actual crontab 
file.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What invokes cricket on FreeBSD

2009-09-03 Thread Mel Flynn
On Thursday 03 September 2009 16:42:28 stan wrote:
 On Thu, Sep 03, 2009 at 04:22:43PM +0200, Mel Flynn wrote:
  On Thursday 03 September 2009 15:41:07 stan wrote:
   On Thu, Sep 03, 2009 at 09:33:35AM -0400, stan wrote:
On Thu, Sep 03, 2009 at 09:22:56AM -0400, stan wrote:
 On Thu, Sep 03, 2009 at 01:43:15PM +0100, Matthew Seaman wrote:
  stan wrote:
   On Thu, Sep 03, 2009 at 07:48:57AM -0400, stan wrote:
   I have inherited a system that uses Cricket on FreeBSD to do
   some data collection. I have set this up myself in the distnat
   past, but this time I asked a contractor to set it up. I no
   longer have access to this contractor, and the toher day, we
   shut down the system this was running on, and when we rebooted
   the system, cricket id not resume collecting data.
  
   I don't see anyhting in /usr/local/etc/rc.d to start it up,
   nor do I see anything in /etc/crontag. I don't seen any
   processes owned by cricket running.
  
   In FreeBSD, how is this process noramally invoked?
  
   Sorry to reply to my own message, but I have more data. I did
   find
  
   -rw---  1 root  wheel  288 Jan 12  2009
   /var/cron/tabs/cricke
  
   Which is, I am failry certain, what is _intended_ to invoke the
   cricket process. However, acording to the cricket logs, the
   last time I have an entry is Aug 29th, which was when the
   machine was shut down. So, I decided to try running this
   command by hand. Now, to do so I need to be the cricket user,
   so I tried to su - cricket. I was told that this user was not
   avaialble. Looking in /etc/passwd. I found that this users
   shell was listed as /usr/sbin/nologin. I edited /etc/paswd to
   change this to /nin/sh, but I still get the smae error message
   when I try to su to that user.
  
   What do I need to change to be able to su to this suer, and
   might this be the reason tha it's crontab entry is notbeing
   run?
 
  Try:
 
 # su -m cricket
 
  although the best way to examine and/or modify that user's
  crontab is:
 
 # crontab -e -u cricket

 OK, I was able to execute the cricket collector caoomand bu using
 the su - format, and it ran corectly.

 Cany anyone sugest what to check to see why cron is not executing
 this command? I see no evidence of it's running in either the
 cricket logs' or cron's logs.

 Thanks.
   
Repkying to my own message again :-(
   
   
OK, I found in the cron man page the following:
   
 Before running a command from a per-account crontab file, cron
 checks the status of the account with pam(3) and skips the command
if the account is unavailable, e.g., locked out or expired.
   
So, now the question is, how do I unlock that user?
  
   This gets strnager. I found the pw cammand, which should do thatm but:
  
   pnoc# pw unlock cricket
   pw: user 'cricket' is not locked
  
   So, how come:
  
   pnoc# su - cricket
   This account is currently not available.
 
  Cause cricket doesn't have a valid home directory. However, you can
  simply copy the /var/cron/tabs/cricket to /tmp. Remove the time colums,
  then run: su -m cricket /usr/bin/env -i HOME=/nonexistent
  PATH=/bin:/usr/bin \ /bin/sh /tmp/cricket
 
  That's the best approximation of how cron runs the commands. If you don't
  see anything in the cron logs however, it may be an issue with the
  timestamps specified not yielding any runs. Then it would help to see the
  actual crontab file.

 Hmm, but I think it does :

 pnoc# grep cricket /etc/passwd
 cricket:*:141:80:Cricket Monitoring
 User:/usr/local/cricket:/usr/sbin/nologin

/usr/sbin/nologin. I guess you edited master.passwd and didn't use the proper 
tools (vipw or run pwd_mkdb after using a plain editor).


 As far as cron logs, I am _now_ gettting an entry that looks like cron is
 executing the collector:

 Sep  3 10:40:00 pnoc /usr/sbin/cron[80979]: (cricket) CMD
 (/usr/local/cricket/cricket/collect-subtrees normal)

 But, still not getting anything in cricket's logs:

 ls: No match.
 pnoc# ls -l /usr/local/cricket/*logs
 total 2812
 -rw-r--r--  1 cricket  www   74098 Sep  3 09:17 normal.0

 The 9:17 time is from a manual run of the collector.

 I must admit, I am not certain waht to check next.

Run:
su -m cricket /usr/bin/env -i HOME=/usr/local/cricket PATH=/bin:/usr/bin 
/usr/local/cricket/cricket/collect-subtrees normal

Then check output.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What invokes cricket on FreeBSD

2009-09-03 Thread Mel Flynn
On Thursday 03 September 2009 16:42:57 Jerry wrote:

 Something appears to be broken. You might try a new installation.

Please.wipe and reload is only common in broken OS implementations and 
certainly problems with a task scheduler rarely (if ever) call for extremities 
like this, nor does it provide any guarantee the problem will be solved by it.

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What invokes cricket on FreeBSD

2009-09-03 Thread Mel Flynn
On Thursday 03 September 2009 17:44:53 stan wrote:
 On Thu, Sep 03, 2009 at 05:31:45PM +0200, Mel Flynn wrote:
  On Thursday 03 September 2009 16:42:28 stan wrote:
   On Thu, Sep 03, 2009 at 04:22:43PM +0200, Mel Flynn wrote:
On Thursday 03 September 2009 15:41:07 stan wrote:
 On Thu, Sep 03, 2009 at 09:33:35AM -0400, stan wrote:
  On Thu, Sep 03, 2009 at 09:22:56AM -0400, stan wrote:
   On Thu, Sep 03, 2009 at 01:43:15PM +0100, Matthew Seaman wrote:
stan wrote:
 On Thu, Sep 03, 2009 at 07:48:57AM -0400, stan wrote:
 I have inherited a system that uses Cricket on FreeBSD to
 do some data collection. I have set this up myself in the
 distnat past, but this time I asked a contractor to set it
 up. I no longer have access to this contractor, and the
 toher day, we shut down the system this was running on,
 and when we rebooted the system, cricket id not resume
 collecting data.

 I don't see anyhting in /usr/local/etc/rc.d to start it
 up, nor do I see anything in /etc/crontag. I don't seen
 any processes owned by cricket running.

 In FreeBSD, how is this process noramally invoked?

 Sorry to reply to my own message, but I have more data. I
 did find

 -rw---  1 root  wheel  288 Jan 12  2009
 /var/cron/tabs/cricke

 Which is, I am failry certain, what is _intended_ to invoke
 the cricket process. However, acording to the cricket logs,
 the last time I have an entry is Aug 29th, which was when
 the machine was shut down. So, I decided to try running
 this command by hand. Now, to do so I need to be the
 cricket user, so I tried to su - cricket. I was told that
 this user was not avaialble. Looking in /etc/passwd. I
 found that this users shell was listed as
 /usr/sbin/nologin. I edited /etc/paswd to change this to
 /nin/sh, but I still get the smae error message when I try
 to su to that user.

 What do I need to change to be able to su to this suer, and
 might this be the reason tha it's crontab entry is notbeing
 run?
   
Try:
   
   # su -m cricket
   
although the best way to examine and/or modify that user's
crontab is:
   
   # crontab -e -u cricket
  
   OK, I was able to execute the cricket collector caoomand bu
   using the su - format, and it ran corectly.
  
   Cany anyone sugest what to check to see why cron is not
   executing this command? I see no evidence of it's running in
   either the cricket logs' or cron's logs.
  
   Thanks.
 
  Repkying to my own message again :-(
 
 
  OK, I found in the cron man page the following:
 
   Before running a command from a per-account crontab file, cron
   checks the status of the account with pam(3) and skips the
  command if the account is unavailable, e.g., locked out or
  expired.
 
  So, now the question is, how do I unlock that user?

 This gets strnager. I found the pw cammand, which should do thatm
 but:

 pnoc# pw unlock cricket
 pw: user 'cricket' is not locked

 So, how come:

 pnoc# su - cricket
 This account is currently not available.
   
Cause cricket doesn't have a valid home directory. However, you can
simply copy the /var/cron/tabs/cricket to /tmp. Remove the time
colums, then run: su -m cricket /usr/bin/env -i HOME=/nonexistent
PATH=/bin:/usr/bin \ /bin/sh /tmp/cricket
   
That's the best approximation of how cron runs the commands. If you
don't see anything in the cron logs however, it may be an issue with
the timestamps specified not yielding any runs. Then it would help to
see the actual crontab file.
  
   Hmm, but I think it does :
  
   pnoc# grep cricket /etc/passwd
   cricket:*:141:80:Cricket Monitoring
   User:/usr/local/cricket:/usr/sbin/nologin
 
  /usr/sbin/nologin. I guess you edited master.passwd and didn't use the
  proper tools (vipw or run pwd_mkdb after using a plain editor).
 
   As far as cron logs, I am _now_ gettting an entry that looks like cron
   is executing the collector:
  
   Sep  3 10:40:00 pnoc /usr/sbin/cron[80979]: (cricket) CMD
   (/usr/local/cricket/cricket/collect-subtrees normal)
  
   But, still not getting anything in cricket's logs:
  
   ls: No match.
   pnoc# ls -l /usr/local/cricket/*logs
   total 2812
   -rw-r--r--  1 cricket  www   74098 Sep  3 09:17 normal.0
  
   The 9:17 time is from a manual run of the collector.
  
   I must admit, I am not certain waht to check next.
 
  Run:
  su -m cricket /usr/bin/env -i HOME=/usr/local/cricket PATH=/bin:/usr/bin
  /usr/local/cricket/cricket/collect-subtrees normal

 OK, this is just slightly over my head, so let me be very

Re: What invokes cricket on FreeBSD

2009-09-03 Thread Mel Flynn
On Thursday 03 September 2009 21:02:41 stan wrote:

 pnoc# cat collect-subtrees
 #!/bin/sh

 echo STARTED  /tmp/stan
 which perl  /tmp/stan
 /usr/local/cricket/cricket/collect-subtrees.pl normal  /tmp/stan
 echo Done  /tmp/stan

 /tmp stan contains:

 pnoc# cat /tmp/stan
 STARTED
 /usr/bin/perl
 Done
 STARTED
 /usr/bin/perl
 Done

 So, cron is invoking the correct command, and perl can be found, but the
 original collect_subtrees perl script silently dies.

 I am convinced it's an environemt probkl`lem, I am just uncertain how to
 determine what.

I'm not anymore. I'm putting 1 cent on a broken /usr/bin/perl symlink (perl 
upgrade gone bonkers, f.e. done with ro mounted /usr) and another cent on the 
perl script using system() function, with pathless commands (that is 
environment).
file /usr/bin/perl should report if the symlink is broken.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What invokes cricket on FreeBSD

2009-09-03 Thread Mel Flynn
On Thursday 03 September 2009 22:23:47 stan wrote:
 On Thu, Sep 03, 2009 at 10:10:13PM +0200, Mel Flynn wrote:
  On Thursday 03 September 2009 21:02:41 stan wrote:
   pnoc# cat collect-subtrees
   #!/bin/sh
  
   echo STARTED  /tmp/stan
   which perl  /tmp/stan
   /usr/local/cricket/cricket/collect-subtrees.pl normal  /tmp/stan
   echo Done  /tmp/stan
  
   /tmp stan contains:
  
   pnoc# cat /tmp/stan
   STARTED
   /usr/bin/perl
   Done
   STARTED
   /usr/bin/perl
   Done
  
   So, cron is invoking the correct command, and perl can be found, but
   the original collect_subtrees perl script silently dies.
  
   I am convinced it's an environemt probkl`lem, I am just uncertain how
   to determine what.
 
  I'm not anymore. I'm putting 1 cent on a broken /usr/bin/perl symlink
  (perl upgrade gone bonkers, f.e. done with ro mounted /usr) and another
  cent on the perl script using system() function, with pathless commands
  (that is environment).

Ok, one liner:
su -m cricket env -i HOME=/usr/local/cricket PATH=/bin:/usr/bin \
   /usr/local/cricket/cricket/collect-subtrees.pl normal

I've downloaded the 1.0.5 version, but can't quickly see where that would go 
wrong with this script. touch is in /usr/bin, so that should work.
Any cron messages in /var/mail/cricket?
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 'alias' + sudo

2009-09-03 Thread Mel Flynn
On Wednesday 02 September 2009 13:26:59 Jerry wrote:
 I have set up several 'alias' definitions in my .bashrc file. They are
 honored when run as either a regular user or as root. However, when I
 prefix a command with 'sudo', the alias is no longer honored. In other
 words, the actual command is run;however, any flags that I was passing
 to it via 'alias' are lost. How can I circumvent this annoyance.

 Example, I often use 'pico' from within 'xterm'. I set up an alias that
 causes pico to use the mouse; i.e., pico -m which works fine as long as
 I do not prefix the command with 'sudo'

alias spico='/usr/local/bin/sudo pico -m' and be done with it.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Reverse Proxy /Proxy Pass

2009-09-03 Thread Mel Flynn
On Friday 04 September 2009 01:20:46 Agus wrote:

 What server, application do u know/recommend me for using as a
 ProxyPass / Reverse Proxy...

 The idea is to forward all requests to port 80 to this server and then
 from here according to the vhost send it to the actual server... For
 now i only need proxying.. dont think cacheing will be possible so im
 just looking for a pretty fast, light and stable app to do this on a
 freebsd 7...

 Thanks and ihope to hear some cool recommendations.. hehe

If lightweight, go with www/nginx. Features, go with www/squid or 
apache+mod_proxy.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 'alias' + sudo

2009-09-03 Thread Mel Flynn
On Friday 04 September 2009 02:10:36 Jerry wrote:
 On Fri, 4 Sep 2009 01:34:05 +0200

 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
  alias spico='/usr/local/bin/sudo pico -m' and be done with it.

 That is what I am currently doing; however,there are other commands
 that I want to use that are not available when used via sudo without
 modifying the alias. I did not realize that sudo had such a limitation.

It doesn't. alias has the limitation. As far as alias is concerned, a command 
is the first thing on the command line, and for good reason, as you don't want 
it to look further along the command line and attempt to expand everything.

So the shell only changes the command that is really run, when the first word 
matches an alias. Sudo or any app for that matter, never knew it was run 
through an alias.

However.reading through the bash manpage:
If the
   last character of the alias value is a blank,  then  the  next  command
   word following the alias is also checked for alias expansion.

So.:
$ alias sudo='/usr/local/bin/sudo '
$ alias pico='vim --version'
$ sudo pico
VIM - Vi IMproved 7.2 (2008 Aug 9, compiled Jul 21 2009 13:22:46)
Included patches: 1-6, 8-35, 37-48, 50-70, 73, 75-87, 90-92, 94-100, 102-137, 
139-149, 151-171, 173-190, 192-193, 195-203, 206-209

Howeverbe aware of the consequences. If someone compromises your account, 
then setting:
alias ls='/tmp/mkroot'

and you running:
sudo ls

He just got root.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: memory usage displsy

2009-09-02 Thread Mel Flynn
On Tuesday 01 September 2009 23:19:23 Michael David Crawford wrote:
 Per olof Ljungmark wrote:
  Well, my problem is that if I add up all I *can* see in top or ps it
  never gets near the by now 3G plus memory shown as Active. Maybe one
  gig is accounted for,

 I'm not that familiar with FreeBSD yet, but the kernel uses memory which
 might not be charged against any process.

 For example, to map some virtual memory requires memory to store the
 mappings in.

 Open files have kernel structures, as do filesystems.

 If top or ps were only to show userspace memory allocations, then you're
 right, a lot of memory would be unaccounted for.

It doesn't for the Active to Free states. For individual processes, everything 
is shown that the process allocates. So for a file descriptor, an int would be 
allocated, where the kernel holds the real info.

This is one cause for filled Active memory: a process polling multiple file 
descriptors, like a File Alteration Monitor under current desktops.

The other, as Dan Nelson described, is file cache. If you want to be sure it's 
this, then reboot the machine and run:
/etc/periodic/security/100.chksetuid

You should see memory usage going up. If this causes a performance problem 
(i.e. You sometimes are subject to heavily increasing loads on a mailserver, 
that causes a lot of forks and file cache memory isn't unloaded fast enough), 
then you should either disable the security check or properly seperate data 
from binaries using partitions and mount data partitions with nosuid/noexec, 
so that these are omitted from the daily checks.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: A question for developers

2009-08-21 Thread Mel Flynn
On Monday 17 August 2009 04:14:18 Steve Bertrand wrote:
 Manish Jain wrote:
  You are right. Syntax highlighting only works well with X. On the
  console, to the best of knowledge, there is no way to change the colours
  through vim's rc files.

 Syntax colour changing does work via .vimrc on the console. The
 constructs are named differently: ctermfg, cterm etc.

 The default however uses bright yellow and very light blue for many
 things, which doesn't appear well on my white console.

If you have a set bg=dark line in .vimrc, remove it. or explicitly set 
bg=light.

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remounting a drive as read/write crashes the system and no dmesg.boot

2009-08-21 Thread Mel Flynn
On Friday 21 August 2009 07:34:11 Scott Schappell wrote:
 Looking at info.0 I see:


 Dump header from device /dev/ad0s1b
Architecture: i386
Architecture Version: 2
Dump Length: 155131904B (147 MB)
Blocksize: 512
Dumptime: Fri Aug 21 08:27:45 2009
Hostname: arthur.silvertree.org
Magic: FreeBSD Kernel Dump
Version String: FreeBSD 7.2-RELEASE-p3 #1: Fri Aug 14 13:27:47 PDT
 2009
  r...@arthur.silvertree.org:/usr/obj/usr/src/sys/ARTHUR
Panic String: ffs_sync: rofs mod
Dump Parity: 2778312054
Bounds: 0
Dump Status: good

 This is interesting:

 Panic String: ffs_sync: rofs mod

 It looks I'm guessing this is saying read only file system
 modified.  So it looks like the problem is with mount?

 If there's anything you want me to pull from the vmcore.0 let me know.

 Again, this happens with the drive mounted RO from fstab. Unmounted
 then mount -o rw /backup.

 Something is amiss, and first blush doesn't seem to be hardware related.

There should be a backtrace in info.0 already. That part contains more 
relevant information.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: switching from one network interface to another without reboot

2009-08-20 Thread Mel Flynn
On Thursday 20 August 2009 03:25:17 Michal wrote:

 Problem description: I've got a laptop with two network interfaces
 (wired em0 and wireless ath0). Every now and then I have to set up a DSL
 wireless box which comes with default settings so that I have to start
 with connecting my laptop via em0.
 em0 gets IP address from wireless box by DHCP. I log in to web interface
 and set everything up including WLAN and restart wireless box. At this
 point I would like to switch to ath0 and start using internet connection
 via wireless box.
 I'm taking em0 interface down with ifconfig em0 down and unplug the
 cable. I'm changing /etc/rc.conf entries to:
 ifconfig_em0=NOAUTO
 ifconfig_ath0=WPA DHCP
 Then I'm doing /etc/rc.d/netif restart and ath0 gets IP address via
 DHCP and is connected to wireless box (/etc/wpa_supplicant.conf is set up).

If these are on the same network (like most wireless routers), it can pay off 
to use lagg(4) and then simply unplug the cable. Plug it back in and it will 
use the cable again. You would need:
cloned_interfaces=lagg0
ifconfig_em0=UP
ifconfig_ath0=ether 00:xx:xx:xx WPA # set to MAC address of em0
ifconfig_lagg0=laggproto failover laggport em0 laggport ath0 DHCP
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remounting a drive as read/write crashes the system and no dmesg.boot

2009-08-20 Thread Mel Flynn
On Tuesday 18 August 2009 12:11:10 Tim Judd wrote:
 On 8/18/09, Scott Schappell arc...@silvertree.org wrote:
  I have a drive (/dev/ad2s1d) mounted to /backup that I want to be read
  only until the backup scripts run and then it will be read/write.  If
  I set /etc/fstab to:
 
  /dev/ad2s1d /backup ufs ro
  0   0

 On my CF-based devices (firewalls.. nagios boxes, etc), I run:

 mount -uw /
 to update the mount (not mount again) the filesystem.  If you're
 trying to mount again, I could understand why the box panics.

I don't. It's perfectly valid to mount a device multiple times and on the same 
node even. Certainly unmounting then remounting should not panic the system.

If you keep getting this panic, please try and obtain a crash dump, though I 
suspect this to be driver or hardware related as I can't imagine such a bug 
has slipped into vfs/ufs.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: shell power in rc.conf

2009-08-20 Thread Mel Flynn
On Tuesday 18 August 2009 07:00:08 Dan Nelson wrote:
 In the last episode (Aug 18), Artis Caune said:
  Is there any reason of not using shell variables in rc.conf?
  I want to tune rc.conf for easy editing and administration. Take for
  example jail_list or cloned_interfaces with 10+ entries:

 Remember that every startup script sources rc.conf, sometimes very early or
 late in the startup/shutdown sequence, so just make sure you don't echo
 anything to stdout/stderr or try to run commands that might be on
 filesystems that aren't mounted yet, and you should be fine.

In this particular example, you're fine. In general, you should also take care 
that /etc/defaults/rc.conf is read before /etc/rc.conf and may set values for 
variables you have not specified. Defaults can also change between releases, 
so one should inspect /etc/defaults/rc.conf during mergemaster stage with a 
microscope.

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remounting a drive as read/write crashes the system and no dmesg.boot

2009-08-20 Thread Mel Flynn
On Thursday 20 August 2009 15:00:48 Scott Schappell wrote:
 On Aug 20, 2009, at 15:42:05, Mel Flynn wrote:
  I don't. It's perfectly valid to mount a device multiple times and
  on the same
  node even. Certainly unmounting then remounting should not panic the
  system.
 
  If you keep getting this panic, please try and obtain a crash dump,
  though I
  suspect this to be driver or hardware related as I can't imagine
  such a bug
  has slipped into vfs/ufs.
  --
  Mel

 Since using the mount -r syntax, it hasn't crashed once.  How does one
 obtain a crash dump? I'll be happy to force the system to hork and
 send a crash log.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kerneldebug.html
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remounting a drive as read/write crashes the system and no dmesg.boot

2009-08-20 Thread Mel Flynn
On Thursday 20 August 2009 18:40:27 Scott Schappell wrote:
 On 8/20/2009 7:36 PM, Scott Schappell wrote:
  On 8/20/2009 4:31 PM, Mel Flynn wrote:
  http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/ker
 neldebug.html
 
  OK, /backup was mounted read only, I did the following
 
  umount /backup
  mount -o rw /backup
  [r...@arthur ~]# dd if=/dev/zero of=/backup/testfile bs=1024
  dd: /backup/testfile: end of device
  21122+0 records in
  21121+0 records out
  21627904 bytes transferred in 2.215991 secs (9759924 bytes/sec)
  [r...@arthur ~]#

 As of now, the dd command above has not crashed and it's past 3 GiB,
 using the mount -u -w syntax versus unmount, mount -o rw.

 This is puzzling.

I agree. These errors make no sense to me, which leads me to drive cable or 
physical memory problems, perhaps filesystem corruption. Since you have plenty 
of space on /home, is it possible for you to move whatever's on /backup to 
/home, then newfs /backup? Of course you could try fsck -y /backup in single 
user, but with these weird errors, I trust the filesystem on that disk as far 
as I can throw it.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Accidentally moved /libexec/ld-elf.so.1

2009-08-20 Thread Mel Flynn
On Thursday 20 August 2009 18:44:12 Stew Houston wrote:
 Setting up a chroot jail I accidentally moved /libexec/ld-elf.so.1 instead
 of copying it.  Bash would no longer take any commands, though I can't
 remember the error I was getting (it was aborting.)  I rebooted, hoping I
 could do something in Single User Mode; but to no avail.  Is there a way I
 can undo this blunder?

/rescue/mv /path/to/jail/libexec/ld-elf.so.1 /libexec/
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: bwi driver

2009-08-14 Thread Mel Flynn
On Friday 14 August 2009 08:49:07 Neal Hogan wrote:

 man lspci

?? wrong distribution. Try pciconf.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fixit mode (live CD): can't find /etc/rc.conf

2009-08-13 Thread Mel Flynn
On Wednesday 12 August 2009 21:58:05 Nerius Landys wrote:
  By convention /etc should be on ad0s1a. If it's not, but /boot is there,
  you may need to fsck.

 Yeah, When I tired to mount ad0s1a, it gave me something like
 permission denied or bad superblock.  How do I fix this with fsck from
 the live CD?

fsck_ffs -p /dev/ad0s1a
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: df -k vs. du -s

2009-08-13 Thread Mel Flynn
On Thursday 13 August 2009 12:37:00 Don O'Neil wrote:
 My /var partition is showing a different value for a df -k on the file
 system vs a du -s on the file system:

FAQ. Search = good(tm).
http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#DU-VS-DF
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Kernel panic

2009-08-12 Thread Mel Flynn
On Wednesday 12 August 2009 08:01:07 Коньков Евгений wrote:
 Aug 12 15:59:08 host savecore: reboot after panic: integer divide fault
 Aug 12 15:59:08 host savecore: writing core to vmcore.4

 How to obtain which process cause system to reboot?

kgdb /boot/kernel/kernel /var/crash/vmcore.4
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: firefox 2.0.0.20_9,1

2009-08-12 Thread Mel Flynn
On Wednesday 12 August 2009 18:16:20 Paul Schmehl wrote:
 --On August 12, 2009 8:18:55 PM -0500 ajtiM lum...@gmail.com wrote:
  Hi!
  When I run
 
 
  ;
  portaudit -a
  Affected package: firefox-2.0.0.20_9,1
  Type of problem: mozilla -- multiple vulnerabilities.
  Reference:
  http://portaudit.FreeBSD.org/49e8f2ee-8147-11de-a994-0030843d3802.html
 
  but when I check above site I found:
  Affects:
  firefox 3.*,1

Given the above, it should be affected. Reading the original documents it 
doesn't show. And I can't find anywhere that firefox 2 is End of Life.

  firefox 3.*,1 3.0.13,1
  firefox 3.5.*,1 3.5.2,1
  linux-firefox 3.*,1
  linux-firefox 3.*,1 3.0.13,1
  linux-firefox 3.5.*,1 3.5.2,1
  linux-firefox-devel 3.5.2
  seamonkey 0
  linux-seamonkey 0
  linux-seamonkey-devel 0
  thunderbird 0
  linux-thunderbird 0
 
  Are problem with  firefox-2.0.0.20_9,1 or not, please.

 That port should probably be removed.  It's ancient.

If that's ancient, you should do a find /usr/ports -name Makefile -exec ident 
{} +|grep ' 200[67]/'.

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fixit mode (live CD): can't find /etc/rc.conf

2009-08-12 Thread Mel Flynn
On Wednesday 12 August 2009 21:07:30 Nerius Landys wrote:
 On my recently updated (as in world+ports are up-to-date) FreeBSD 6.4
 box i tried to get Xorg running, and after building Xorg from ports
 and enabling hald and dbus in rc.conf, I get:

   Fatal trap 12: page fault while in kernel mode

 This happens when I boot.  Now I'm trying to not start hald and dbus
 in rc.conf (I think that's what's causing the kernel problem).  So I
 am using the installation CD and going into fixit mode.  The problem
 is that I can't find rc.conf to edit.

 In /dev:
   ad0
   ad0s1
   ad0s1a

By convention /etc should be on ad0s1a. If it's not, but /boot is there, you 
may need to fsck.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error code 254

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 02:48:49 Per olof Ljungmark wrote:
 === Installing documentation in /usr/local/share/doc/pear/XML_Serializer.
 === Installing tests in /usr/local/share/pear/tests/XML_Serializer.
 === Installing examples in /usr/local/share/examples/pear/XML_Serializer.
 *** Error code 254


 What is Error code 254 ?

A program returning -2 to the shell. Is that useful info? No.
Run make -dl install to see what goes wrong.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Don't let mergemaster beat you down [was Re: Failed update]

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 05:23:28 Arthur Chance wrote:
 Wayne Sierke wrote:
  I lost practically all of my 'mergemaster pain' when I adopted the habit
  of using it with -iUP options:
 
  -i  Automatically install any files that do not exist in the des-
  tination directory.
  -P  Preserve files that you replace in
  /var/tmp/mergemaster/preserved-files-date, or another
  directory you specify in your mergemaster rc file.
  -U  Attempt to auto upgrade files that have not been user modi-
  fied.

 How does -U compare to -F? I've found that saves a lot of tedium.

-U saves a lot on major version upgrades as that tends to have a lot of 
changes in /etc/rc.*, something most of us don't touch by hand. However, the 
feature depends on having a fingerprint of the files, so that mergemaster can 
determine if you changed the file. Before using the feature and before 
upgrading it's therefore recommended to do a dry run so that the file 
(/var/db/mergemaster.mtree) is created.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error code 254

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 08:53:59 Per olof Ljungmark wrote:
 Mel Flynn wrote:
  On Tuesday 11 August 2009 02:48:49 Per olof Ljungmark wrote:
  === Installing documentation in
  /usr/local/share/doc/pear/XML_Serializer. === Installing tests in
  /usr/local/share/pear/tests/XML_Serializer. === Installing examples in
  /usr/local/share/examples/pear/XML_Serializer. *** Error code 254
 
 
  What is Error code 254 ?
 
  A program returning -2 to the shell. Is that useful info? No.
  Run make -dl install to see what goes wrong.

 is this useful?

 /bin/mkdir -p /usr/local/share/pear/packages/pear-XML_Serializer-0.20.0
 install  -o root -g wheel -m 444
 /usr/ports/devel/pear-XML_Serializer/work/package.xml
 /usr/local/share/pear/packages/pear-XML_Serializer-0.20.0
 /usr/bin/env PKG_PREFIX=/usr/local  /bin/sh
 /usr/ports/devel/pear/pear-install pear-XML_Serializer-0.20.0 POST-INSTALL
 *** Error code 254

Yes, the post install script fails. Which means the command:
/usr/local/bin/pear install -r -n -f \
/usr/local/share/pear/packages/pear-XML_Serializer-0.20.0/package.xml 

fails. Why, I don't know, perhaps you can add -v to the above command and see 
if anything useful is printed. In the meantime, I'll try to reproduce it.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error code 254

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 09:27:06 Mel Flynn wrote:
 On Tuesday 11 August 2009 08:53:59 Per olof Ljungmark wrote:
  Mel Flynn wrote:
   On Tuesday 11 August 2009 02:48:49 Per olof Ljungmark wrote:
   === Installing documentation in
   /usr/local/share/doc/pear/XML_Serializer. === Installing tests in
   /usr/local/share/pear/tests/XML_Serializer. === Installing examples
   in /usr/local/share/examples/pear/XML_Serializer. *** Error code 254
...

 In the meantime, I'll try to reproduce it.

Which I can't. Patch below adds -v at the correct spot.
-- 
Mel

Index: devel/pear/pear-install
===
RCS file: /home/ncvs/ports/devel/pear/pear-install,v
retrieving revision 1.1
diff -u -r1.1 pear-install
--- devel/pear/pear-install 9 Dec 2005 18:58:03 -   1.1
+++ devel/pear/pear-install 11 Aug 2009 17:42:03 -
@@ -10,5 +10,5 @@

 [ x$1 = x ]  exit 1
 if [ x$2 = xPOST-INSTALL ]; then
-   ${PEAR} install -r -n -f ${PKGREGDIR}/package.xml
+   ${PEAR} -v install -r -n -f ${PKGREGDIR}/package.xml
 fi

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error code 254

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 10:53:21 Per olof Ljungmark wrote:
 Mel Flynn wrote:
  On Tuesday 11 August 2009 09:27:06 Mel Flynn wrote:
  On Tuesday 11 August 2009 08:53:59 Per olof Ljungmark wrote:
  Mel Flynn wrote:
  On Tuesday 11 August 2009 02:48:49 Per olof Ljungmark wrote:
  === Installing documentation in
  /usr/local/share/doc/pear/XML_Serializer. === Installing tests in
  /usr/local/share/pear/tests/XML_Serializer. === Installing examples
  in /usr/local/share/examples/pear/XML_Serializer. *** Error code 254
 
  ...
 
  In the meantime, I'll try to reproduce it.
 
  Which I can't. Patch below adds -v at the correct spot.

 Unfortunately that did not add much, the error looks exacktly as before,
 no change. I welcome more suggestions of course.

 (7.2-STABLE FreeBSD 7.2-STABLE #0: Mon Aug 10 23:50:08 CEST 2009)

Well, it's hard if I can't reproduce it. Can you show the output of:
make -C /usr/ports/devel/pear-XML_Serializer actual-package-depends
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error code 254

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 12:20:00 Per olof Ljungmark wrote:
 Mel Flynn wrote:
  On Tuesday 11 August 2009 10:53:21 Per olof Ljungmark wrote:
  Mel Flynn wrote:
  On Tuesday 11 August 2009 09:27:06 Mel Flynn wrote:
  On Tuesday 11 August 2009 08:53:59 Per olof Ljungmark wrote:
  Mel Flynn wrote:
  On Tuesday 11 August 2009 02:48:49 Per olof Ljungmark wrote:
  === Installing documentation in
  /usr/local/share/doc/pear/XML_Serializer. === Installing tests in
  /usr/local/share/pear/tests/XML_Serializer. === Installing
  examples in /usr/local/share/examples/pear/XML_Serializer. ***
  Error code 254
 
  ...
 
  In the meantime, I'll try to reproduce it.
 
  Which I can't. Patch below adds -v at the correct spot.
 
  Unfortunately that did not add much, the error looks exacktly as before,
  no change. I welcome more suggestions of course.
 
  (7.2-STABLE FreeBSD 7.2-STABLE #0: Mon Aug 10 23:50:08 CEST 2009)
 
  Well, it's hard if I can't reproduce it. Can you show the output of:
  make -C /usr/ports/devel/pear-XML_Serializer actual-package-depends

 I tried to locate the docs for pear, in particular the switches, but
 failed. Even at pear.php.net/manual I could not find them, are they
 installed on my system somewhere?

pear help
pear help options
pear help commands

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error code 254

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 12:56:40 Per olof Ljungmark wrote:
 Mel Flynn wrote:
  On Tuesday 11 August 2009 12:20:00 Per olof Ljungmark wrote:
  Mel Flynn wrote:
  On Tuesday 11 August 2009 10:53:21 Per olof Ljungmark wrote:
  Mel Flynn wrote:
  On Tuesday 11 August 2009 09:27:06 Mel Flynn wrote:
  On Tuesday 11 August 2009 08:53:59 Per olof Ljungmark wrote:
  Mel Flynn wrote:
  On Tuesday 11 August 2009 02:48:49 Per olof Ljungmark wrote:
  === Installing documentation in
  /usr/local/share/doc/pear/XML_Serializer. === Installing tests
  in /usr/local/share/pear/tests/XML_Serializer. === Installing
  examples in /usr/local/share/examples/pear/XML_Serializer. ***
  Error code 254

 Hmmm, when I try
 portupgrade -fO pear
 the error pops up here too.

 Should I suspect the package database then?

 ===  Installing for pear-1.8.1
 ===   pear-1.8.1 depends on file: /usr/local/include/php/main/php.h -
 found ===   pear-1.8.1 depends on file:
 /usr/local/lib/php/20060613/pcre.so - found
 ===   pear-1.8.1 depends on file: /usr/local/lib/php/20060613/xml.so -
 found
 ===   Generating temporary packing list
 *** Error code 254

Is it really at that point? Could you try a make -dl install again? If it's 
the package list generation for real, then I'm gonna suspect something on a 
system level, like IO errors or read-only mounts.

If it is the same thing with pear install command, then perhaps you should 
pkg_delete -r pear-1.8.1 (careful, will uninstall anything depending on pear) 
and start over to see if the error persists. The pear command sure can use 
some more verbosity then.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: A question for developers

2009-08-11 Thread Mel Flynn
On Tuesday 11 August 2009 16:46:16 Steve Bertrand wrote:
 Steve Bertrand wrote:
  but may be handy until I become more fluent,
  as my first instinct is to hit the BACKSPACE

 ^H^H^H^H^H^H^H^H^H

 ^h key.

terminal emulation fault. stty erase ctrl-vctrl-h should fix it, on the 
shell that is.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: vsftpd with ssl

2009-08-10 Thread Mel Flynn
On Monday 10 August 2009 10:59:34 Stefan Miklosovic wrote:
 Hi there,

 I am installing vsftpd server with ssl.
 It seems it works good, BUT

 *~:*ftp-tls notebook
 Trying 127.0.0.1...
 Connected to localhost.
 220 Welcome to miniBSD service.
 234 Proceed with negotiation.
 [Starting SSL/TLS negotiation...]
 WARNING: Server's certificate issuer's certificate isn't available locally.

This is an ftp-tls error, not vsftpd. It took some searching through OpenSSL 
sources, cause half of the manpages aren't available, but the certificate 
should be in /etc/ssl on the connecting machine.

The error above is the same as described in the verify(1) manpage for OpenSSL:
 2 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: unable to get issuer certifi-
   cate
  the issuer certificate could not be found: this occurs if the
  issuer certificate of an untrusted certificate cannot be found.

The verify(1) manpage also describes how to store your trusted certificates in 
there, though it doesn't contain too much info.
Perhaps this guide will help you:
http://gagravarr.org/writing/openssl-certs/others.shtml#ca-openssl
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Backup Size

2009-08-10 Thread Mel Flynn
On Monday 10 August 2009 18:24:19 Jay Hall wrote:
 On Aug 10, 2009, at 12:09 PM, Roland Smith wrote:
  The fact that you are using tar also plays a part. Tar has some
  overhead to
  store information about the files it contains.

 Is it possible to calculate the amount of overhead tar will use?

Difficult. 512 bytes per entry + 1024 (EOF). See man 5 tar. But since files 
will be padded there is some extra overhead. Also, it is hard to calculate 
hard links and sparse files. Tar will handle these correctly (i.e. preserve 
hard links and detect sparse files and try not archive blocks of nulls) but 
it is hard to calculate the size because of this before the archive operation 
because of this.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


  1   2   3   4   5   6   7   8   9   10   >