Re: Kerberos authenticatino and ldap authorization

2007-03-07 Thread Tillman Hodgson
On Wed, Mar 07, 2007 at 02:43:15AM -0700, RJ45 wrote: there are many difficulties and YES there is the documentation on FreeBSD handbook but it does not helped me so much I Still ahve difficulties. I isntalled MIT krb5 also and I Am using kadmin from MIT to manage krb5 server. So no

Re: Kerberos authenticatino and ldap authorization

2007-03-06 Thread Tillman Hodgson
On Tue, Mar 06, 2007 at 10:07:57AM -0700, RJ45 wrote: for example I would like to installa MIT krb5 implementation from ports instead of using heidmal default this because the kerberos server on my network is a MIT server and I can't use kadmin on FreeBSD to administrer the kerberos server

Re: Mounting multiple NFS shares to the same point

2007-02-13 Thread Tillman Hodgson
On Tue, Feb 13, 2007 at 12:24:03PM +, Alex Zbyslaw wrote: Tillman Hodgson wrote: If that still holds true in the -current src, the second mount will *definitely* cause me backup problems. I may have to move to keeping the NFS export always mounted, which is not ideal. Could you use

Re: Mounting multiple NFS shares to the same point

2007-02-13 Thread Tillman Hodgson
On Tue, Feb 13, 2007 at 03:10:30PM +, Alex Zbyslaw wrote: Tillman Hodgson wrote: Yes, that's certainly an issue. Presumably you can lock down the directory perms to be root only or root/operator though. Depending on setup and money, backing up the backups to tape would give more

Mounting multiple NFS shares to the same point

2007-02-12 Thread Tillman Hodgson
A bit of background: I run backup scripts (dumps piped through gzip to a fileshare) out of periodic on a daily, weekly and monthly basis. In the script I mount the NFS share, perform the dumps, and then umount the share. I was worried that if a daily backup took a long time (more than twice the

Re: Mounting multiple NFS shares to the same point

2007-02-12 Thread Tillman Hodgson
On Mon, Feb 12, 2007 at 02:04:38PM -0500, Bob Johnson wrote: On 2/12/07, Tillman Hodgson [EMAIL PROTECTED] wrote: Is this normal behaviour? Are there any problems with (performance, perhaps) that might occur if an NFS share is mounted twice? What if my backup job is still running, would

Re: Mounting multiple NFS shares to the same point

2007-02-12 Thread Tillman Hodgson
On Mon, Feb 12, 2007 at 01:42:04PM -0600, Tillman Hodgson wrote: (Note that that in this case I'm backing up TO the NFS mount, and it's possible that the same NFS share could be mounted on the same spot twice, depending on how long it takes for the daily backup job to run). Following up on my

Re: NIS and Kerberos 5 : is it possible / smart?

2006-08-10 Thread Tillman Hodgson
On 8/4/06, Garrett Cooper [EMAIL PROTECTED] wrote: Hi all, Just wondering if it's possible for NIS and Kerberos 5 to work in tandem with one another, such that NIS would handle groups and configuration file management and Kerberos would handle authentication only. Also, is this

Re: linux iproute2 replacement

2006-03-07 Thread Tillman Hodgson
On Tue, Mar 07, 2006 at 12:58:59PM +0200, Petre Bandac wrote: hallo I am trying to migrate a dual-homed linux box to freebsd; how can I achieve the src routing iproute2 does on freebsd ? There isn't currently a direct routing equivalent. I cheat and use IPF like so (the IPs are faked): #

Re: linux iproute2 replacement

2006-03-07 Thread Tillman Hodgson
On Tue, Mar 07, 2006 at 06:07:48PM +0200, Petre Bandac wrote: On Tue, 7 Mar 2006 09:49:51 -0600 Anno Domini, the honourable Tillman Hodgson wrote using one of his keyboards: On Tue, Mar 07, 2006 at 12:58:59PM +0200, Petre Bandac wrote: hallo I am trying to migrate a dual-homed

Re: Heimdal Key Table Entry Not Found

2006-02-26 Thread Tillman Hodgson
On Sun, Feb 26, 2006 at 10:08:53AM -0800, Jason C. Wells wrote: I am not able to use heimdal kerberos telnetd on FreeBSD-6 to provide remote access to a host. I get this error from my Kermit client: Kerberos authentication failed! Kerberos V5 refuses authentication because

Re: 10 years of The Complete FreeBSD

2006-02-23 Thread Tillman Hodgson
On Fri, Feb 24, 2006 at 11:30:27AM +1030, Greg 'groggy' Lehey wrote: Ten years ago today, on 24 February 1996, I submitted for publication the final version of the first ever book on FreeBSD, Installing and Using FreeBSD. It was later renamed to The Complete FreeBSD. I have always retained

Re: Compaq ProLiant 1600 server freezes when detecting keyboard

2006-02-02 Thread Tillman Hodgson
the freebsd-current@freebsd.org archives for: Date: Fri, 2 Dec 2005 16:24:16 -0600 From: Tillman Hodgson [EMAIL PROTECTED] Subject: Re: Compaq ProLiant 1600 server freezes when detecting keyboard controller Basically, you need to build a kernel without the uhci device and boot with that. -T

Re: Compaq ProLiant 1600 server freezes when detecting keyboard

2006-01-10 Thread Tillman Hodgson
On Tue, Jan 10, 2006 at 12:35:32PM +0200, Ertan K???ko?lu wrote: Good news, System boots flawlessly after removing USB and Firewire in GENERIC kernel. [My apologies for not jumping into this thread early, in spite of Ertan's polite email of inquiry. Vacations, yada yada etc :-).] I can

Trouble connecting OS X 10.4.1 client to FreeBSD -current (on sparc64) mpd server for pptp tunneling

2005-07-06 Thread Tillman Hodgson
Howdy, I've been googling for information about getting a Mac OS X client (a powerbook running 10.4.1) to work with a VPN server of some sort on FreeBSD (-current as of April 25 running on sparc64). The VPN server has a static IP and acts as a firewall and BGP/OSPF router as well (over tunnels to

Re: Kerberos

2005-05-10 Thread Tillman Hodgson
On Mon, May 09, 2005 at 05:44:23PM -0700, Damian Sobieralski wrote: Look into the GSSAPI options for /etc/ssh/ssh_config instead. Newer OpenSSH versions support Kerberos natively and don't need PAM hacks. Thanks Tillman! I was using PAM only based on someone's recommendation. As I've

Re: Kerberos

2005-05-09 Thread Tillman Hodgson
On Mon, May 09, 2005 at 08:53:21AM -0700, Damian Sobieralski wrote: PAM does not map well to Kerberos, unfortunately. Generally speaking you want to avoid PAM with Kerberos if you can possibly use native Kerberos :-) It seems my ignorance is kicking in here- how would they log into the

Re: Kerberos 5

2005-05-05 Thread Tillman Hodgson
On Wed, May 04, 2005 at 02:33:30PM -0700, Damian Sobieralski wrote: I have a fairly weird question for the group. I recently set up a FreeBSD 5.3 box to use pam_krb5 for sshd authentication. It worked great. I created a local workstation user via adduser and when it came time for the

Re: Kerberos 5

2005-05-05 Thread Tillman Hodgson
On Thu, May 05, 2005 at 10:11:30AM -0700, Damian Sobieralski wrote: Followup up: If AFTER I log in, I issue kinit and type my password in. Now when I do a klist I get ticket information. Shouldn't the pam module do this aotomatically (call kinit)? PAM does not map well to Kerberos,

Proper way to add 3rd party milters?

2005-03-23 Thread Tillman Hodgson
Howdy folks, I'm looking at some milters that would be very useful to my mail architecture (milter-ahead is one I'm looking at deploying very soon). What's the best way to add 3rd-party milters so that it's still maintainable? I'm thinking of writing a port around it (using mail/rbl-milter)

Re: ksu doesn't use my ticket

2005-03-19 Thread Tillman Hodgson
On Sat, Mar 19, 2005 at 01:53:58PM -0600, Kirk Strauser wrote: I have a working kdc on my LAN and use OpenSSH's gssapi-with-mic authentication to connect to other machines. However, I can't use /usr/bin/ksu to su to root without entering root's password, even if I have a current, valid

Re: ksu doesn't use my ticket

2005-03-19 Thread Tillman Hodgson
On Sat, Mar 19, 2005 at 08:53:18PM -0600, Kirk Strauser wrote: On Saturday 19 March 2005 02:22 pm, Tillman Hodgson wrote: The ksu from the mit-krb5 port works the way you expect it to. Thanks for the info. Any idea why the one in the base system wouldn't, though? I'm loathe to replace

Re: kerberos problems

2005-03-13 Thread Tillman Hodgson
On Sun, Mar 13, 2005 at 03:38:46PM -, [EMAIL PROTECTED] wrote: I followed the handbook guide to setting it up, and it all seems to be working ok. I have now setup telnetd as described to test how it is working. If I have done a kinit previously, it will log in no problem, but if I do

Re: kerberos problems

2005-03-13 Thread Tillman Hodgson
On Sun, Mar 13, 2005 at 05:30:09PM -, [EMAIL PROTECTED] wrote: what I was assuming would happen when I try to telnet in without a ticket (i.e. with running kinit) was that I would get asked for a username/password, and then I would get issued a ticket, rather than manually having to kinit

Re: WEIRD: telnet

2005-02-13 Thread Tillman Hodgson
On Sun, Feb 13, 2005 at 09:22:45AM -0600, Chris wrote: 2. Telnet passes clear text no matter what. Not in a Kerberos environment it doesn't, nor in an transport-mode IPsec environment. Related to that is connections where transport-level encryption typically doesn't matter: connecting over a

Re: Username and password limits

2005-01-24 Thread Tillman Hodgson
On Mon, Jan 24, 2005 at 04:00:55PM -0800, Sean Murphy wrote: Sorry eight for password as well. Does any know the limits for FreeBSD? man 1 passwd says The new password should be at least six characters long (which may be overridden using the login.conf(5) ``minpasswordlen'' setting for

Re: FreeBSD 5.3 I/O Performance / Linux 2.6.10

2005-01-21 Thread Tillman Hodgson
On Fri, Jan 21, 2005 at 03:20:58PM -0700, Nick Pavlica wrote: To be sure that I was using up to date versions of each OS I performed a cvsup and rebuilt the kernel (GENERIC) during the FBSD setup, and a yum update on the Linux install. Most likely unrelated to your performance question, but

Re: openvpn?

2005-01-20 Thread Tillman Hodgson
On Thu, Jan 20, 2005 at 09:11:10PM -0500, Shawn wrote: I have been attempting to get open vpn working on my freebsd 4.11 Alpha machine. SO Far I have done the following.. I did the make install for /usr/ports/security/openvpn/ Where is uses SSL Im trying to understand the config file for

Re: Upgrade to Courier 4.0.1?

2005-01-10 Thread Tillman Hodgson
On Mon, Jan 10, 2005 at 01:44:57PM -, Scott Bye wrote: I updated to this via ports, and the services appear to be running and listening for connections. However, if I connect to them, I get disconnected immediately, and nothing appears to be logged for any of the services. I'm

Re: Upgrade to Courier 4.0.1?

2005-01-10 Thread Tillman Hodgson
On Mon, Jan 10, 2005 at 11:19:26AM -0600, Tillman Hodgson wrote: On Mon, Jan 10, 2005 at 01:44:57PM -, Scott Bye wrote: I updated to this via ports, and the services appear to be running and listening for connections. However, if I connect to them, I get disconnected immediately

Re: grep help

2005-01-05 Thread Tillman Hodgson
On Wed, Jan 05, 2005 at 08:27:51PM -0800, Jay O'Brien wrote: I want to look at all of the lines in a FreeBSD log file that do not have an entry from an IP, example 1.2.3.4. Some basic help with the use of grep would be appreciated. This is one of the arguments I've tried that didn't work:

Re: How to edit file in single user mode

2004-12-01 Thread Tillman Hodgson
On Wed, Dec 01, 2004 at 06:03:05PM -0600, Kevin D. Kinsey, DaleCo, S.P. wrote: There was some discussion on the lists (IIRC) a while back on the idea of building a small editor binary that you like (trying to remember some of the possibilities: zed, ved, led, sted, (but not ted), ee (already

Re: Setting SCSI bus options before reaching fsck at boot time

2004-11-13 Thread Tillman Hodgson
On Fri, Nov 12, 2004 at 11:28:18PM -0600, Dan Nelson wrote: In the last episode (Nov 12), Tillman Hodgson said: I'd like to find a way to have camcontrol (or some other mechanism) set the SCSI bus speed on this particular SCSI chain early in the boot process, /before/ it encounters fsck

Setting SCSI bus options before reaching fsck at boot time

2004-11-12 Thread Tillman Hodgson
Howdy foilks, I have a SCSI controller (the external 68-pin high density connector on a Compaq Proliant 1600) that seems to ignore it's own settings when I through its bus speed down. This is a problem, as I'm running into /many/ SCSI bus reset problems with this ancient DEC 7-bay JBOD tower that

Re: sun box

2004-10-28 Thread Tillman Hodgson
On Thu, Oct 28, 2004 at 01:16:10PM -0400, Kimberley Chrona wrote: Hi there Two very simple questions, can I run FreeBSD on a Sun box and is it possible to run BSD on VMware I can't speak to VMware, but you can run FreeBSD on some types of Sun gear (I'm running it on an Ultra 5, for

Re: getloadavg and source for /usr/bin/uptime

2004-10-27 Thread Tillman Hodgson
On Wed, Oct 27, 2004 at 11:09:46PM +0100, David Jenkins wrote: NB - I don't want to pipe uptime into awk or use a perl script etc, I'd much prefer it to be C based. If you *did* want to do it that way, something like uptime | sed -e 's/.*: \([0-9.]*\).*/\1/' is handy. If any knows where

Re: topposting (was: colourization in ls command)

2004-10-13 Thread Tillman Hodgson
On Wed, Oct 13, 2004 at 01:58:28PM +0100, Simon Burke wrote: It may also help if you put the good ole hyphen hyphen space enter' decent e-mail clients should see this as the start of a sig an will remove anything below it, i know thunderbird and even gmail does, so it tidys up the default sig

Apache13+static modperl+modssl?

2004-10-12 Thread Tillman Hodgson
Howdy, How does one get Apache compiled with both a statically compiled modperl (required for www/bricolage) as well as modssl? I see a www/apache13-modssl and a www/apache13-modperl, but spelunking through the Makefiles for either doesn't reveal a knob that enables the other option. -T --

Re: Apache13+static modperl+modssl?

2004-10-12 Thread Tillman Hodgson
On Tue, Oct 12, 2004 at 02:09:33PM -0500, Paul Schmehl wrote: --On Tuesday, October 12, 2004 10:26:19 AM -0600 Tillman Hodgson [EMAIL PROTECTED] wrote: How does one get Apache compiled with both a statically compiled modperl (required for www/bricolage) as well as modssl? I see a www

Re: Apache13+static modperl+modssl?

2004-10-12 Thread Tillman Hodgson
On Tue, Oct 12, 2004 at 03:15:10PM -0500, Paul Schmehl wrote: --On Tuesday, October 12, 2004 01:43:35 PM -0600 Tillman Hodgson [EMAIL PROTECTED] wrote: Install apache13-modssl, then install www/mod-perl. That's what I have now, and it results in a mod-perl /module/. www/bricolage

Re: /usr/ports/net/net-snmp Only contains Readme.html

2004-09-08 Thread Tillman Hodgson
On Wed, Sep 08, 2004 at 05:06:25PM +0100, Matthew Seaman wrote: The old directory still exists only because there's a readme.html file in it -- if you delete that and re-run cvsup, the old net/net-snmp directory will be deleted completely. Is there a handy way to automate the deletion of

Re: User Accounts across multiple machines

2004-07-22 Thread Tillman Hodgson
On Thu, Jul 22, 2004 at 02:23:36PM -0400, Bill Moran wrote: Ray Seals [EMAIL PROTECTED] wrote: I have 15 FreeBSD machines on my network (soon to be around 30) and want to synch all the machines userid and passwords. Is NIS still the primary way to do this or is there a better solution?

dhclient.conf and DDNS via TSIG to Bind 9.2.3

2004-07-08 Thread Tillman Hodgson
Howdy, I have a backup connection on an ADSL line with an IP address provided by DHCP. My main line, which has static IPs, hosts my Bind 9.2.3 DNS server. I don't have control of the DHCP server for the backup line, it's simply provided by the ISP. I'm using dhclient from -CURRENT on i386, dated

Re: NFS and Backups

2004-07-05 Thread Tillman Hodgson
On Sat, Jul 03, 2004 at 02:33:22PM -0400, Chuck Swiger wrote: Grant Peel wrote: I have recently decided to use some extra disk space on one of my servers as backup space. I have NFS client and Servers running OK, but was wondering how secure it really is. NFS is not secure at all. If

Re: Is it worth using both gigabit ether ports?

2004-04-21 Thread Tillman Hodgson
On Wed, Apr 21, 2004 at 03:11:55PM +0100, Andy Holyer wrote: I work for a small special-purpose ISP, and right now I'm configuring our main Web/Mail/DNS server. It's a Dell Poweredge 750, 2.4Gb with 1Gig of memory and twp 80 GB drives mirrored using vinum. When I've prepped it up, it's due

IPsec performance impact [was: Re: OS X and FreeBSD: What could be a good setup]

2004-04-12 Thread Tillman Hodgson
On Mon, Apr 12, 2004 at 03:30:42PM +0100, Matthew Seaman wrote: If you're that worried about WEP not being secure enough, you could wrap the NFS connections in ipsec instead. It might have a bit of a performance impact though. I'm a big fan of running IPsec over wireless connections. But I

Re: Well-supported gigabit cards under 4-stable?

2004-03-22 Thread Tillman Hodgson
On Mon, Mar 15, 2004 at 12:46:31AM -0600, Tillman Hodgson wrote: I'm interesting in seeing what low-cost gigabit cards are supported under -stable and which cards might be recommended. I'm looking specifically at the Linksys EG1032, D-Link DGE-530T, Intel Pro1000MT, and the Micronet SP2612R

Re: Top posting

2004-03-20 Thread Tillman Hodgson
On Fri, Mar 19, 2004 at 10:41:14PM -0800, Chuck McManis wrote: At 03:24 PM 3/19/2004, you wrote: Top-posting may be an opinion, but RFC 1855 makes it _standard_ opinion. Let's get serious for a minute here. Just because someone wrote up an INFORMATIONAL RFC does NOT make it STANDARD. It

Re: Top posting

2004-03-19 Thread Tillman Hodgson
On Fri, Mar 19, 2004 at 05:35:06PM -0500, Al Johnson wrote: I'm with you... Top-posting makes the most sense for me. It comes down to opinion I think My standard response to top-posting: A: Because it reverses the logical flow of conversation. Q: Why is putting a reply at the top of the

Well-supported gigabit cards under 4-stable?

2004-03-14 Thread Tillman Hodgson
Howdy, I found a few threads on this topic in google, but they were from a while ago (-stable and hardware are both moving targets, after all). I'm interesting in seeing what low-cost gigabit cards are supported under -stable and which cards might be recommended. I'm looking specifically at the

Re: sparc classic

2004-03-05 Thread Tillman Hodgson
On Fri, Mar 05, 2004 at 11:15:09AM -0600, Brian Henning wrote: Is there a port of freebsd that will run on a sparc classic? I only see one for 64 bit sparc on the ftp site. No, there isn't. Sparc64 works wonderfully, however. http://www.freebsd.org/releases/5.2.1R/hardware.html I suspect that

Re: OT: Longest uptime

2004-02-22 Thread Tillman Hodgson
On Sun, Feb 22, 2004 at 06:18:18PM +, Jez Hancock wrote: On Sat, Feb 21, 2004 at 11:49:22PM -0400, Marc G. Fournier wrote: Doesn't (or didn't?) Linux have a 'feature' that allowed ppl to save their uptimes through a reboot? So, for instance, if it was a schedualed reboot, uptime

Vim startup time much longer than expected

2004-01-22 Thread Tillman Hodgson
Howdy folks, I NFS export my home directory from a 4-STABLE box. In this home directory are my .vimrc file and a couple of vim plugins that I use. When I launch vim (which I use with mutt) from a workstation running RedHat 7.3 it loads and is ready for input virtually instantly. When I launch

Re: Re: Loading balancing with more than one ISP.

2004-01-19 Thread Tillman Hodgson
On Mon, Jan 19, 2004 at 09:25:01AM +0100, Antoine Jacoutot wrote: Now, it does NOT work... 192.168.1.0 -- Internet works with no problem (tun0 being the default route on the FreeBSD gateway) 192.168.0.0 -- Internet doesn't work :( When you tcpdump both external interfaces, do the packets on

Re: Loading balancing with more than one ISP.

2004-01-19 Thread Tillman Hodgson
On Mon, Jan 19, 2004 at 05:04:50PM +0100, Antoine Jacoutot wrote: On Monday 19 January 2004 16:21, Tillman Hodgson wrote: When you tcpdump both external interfaces, do the packets on the interface that the 1921.68.0.0/24 network is supposed to use look like you would expect? Nope

Re: Using Vi through a Serial Console

2004-01-17 Thread Tillman Hodgson
On Sat, Jan 17, 2004 at 06:52:31PM -0500, Mario Antonio wrote: Dear List, When I make a serial connection to a FreeBSD server that has its serial port configured as a console, how can I make the vi editor work? What doesn't work about it? And you've already set your TERM environment

Re: How to find the reverse on a IP address?

2004-01-16 Thread Tillman Hodgson
On Fri, Jan 16, 2004 at 09:28:47AM -0800, Jason Williams wrote: Morning everyone. I'm having a major brain freeze this morning. I dont recall how to find the reverse for an IP address? I need to do some testing with a few IP addresses, to ensure they have valid reverse's set, but dont

Re: make -jX build(world|kernel): test results

2004-01-15 Thread Tillman Hodgson
On Thu, Jan 15, 2004 at 03:59:22PM -0500, Lowell Gilbert wrote: Tillman Hodgson [EMAIL PROTECTED] writes: * I built 4 kernels: 3 customized and GENERIC (see above for why) Note that kernels are forced into serial compilation anyway, so the -j flag has no effect on them. This test probably

Re: Loading balancing with more than one ISP.

2004-01-15 Thread Tillman Hodgson
On Thu, Jan 15, 2004 at 05:10:01PM +0100, Antoine Jacoutot wrote: On Thursday 15 January 2004 16:41, Dirk Meyer wrote: Thats easy on your router: #!/bin/sh gateway1=10.10.10.1 gateway2=10.10.10.2 dmz=10.10.20.0/24 lan=10.10.30.0/24 ipfw add fwd ${gateway2} ip from ${dmz} to any

Re: Any comparison chart for FreeBSD and other OS about performans

2004-01-15 Thread Tillman Hodgson
On Fri, Jan 16, 2004 at 12:29:37AM +0200, Vahric MUHTARYAN wrote: Hi I found old chart about some comparison between some OS FreeBSD , Linux and like this . Does any body know any new report or chart about performans between Oss which included FreeBSD of course . Do a google search for

Re: Loading balancing with more than one ISP.

2004-01-14 Thread Tillman Hodgson
On Wed, Jan 14, 2004 at 02:46:28PM -, Simon Gray wrote: I've been looking for answers on this for a while but I found nothing nor no-one who could tell me if and how it is possible. Let the list know if you find anything interesting. Easiest way I would of thought would be to use BGP

Re: Loading balancing with more than one ISP.

2004-01-14 Thread Tillman Hodgson
On Wed, Jan 14, 2004 at 06:27:30PM +0100, Antoine Jacoutot wrote: On Wednesday 14 January 2004 17:30, Tillman Hodgson wrote: I'm a heavy Zebra (migrating to Quagga) user. Using dynamic routing is very handy, but it won't solve the problem of balancing load across two connections. Thanks

Re: Loading balancing with more than one ISP.

2004-01-14 Thread Tillman Hodgson
On Wed, Jan 14, 2004 at 08:10:19PM +0100, Antoine Jacoutot wrote: On Wednesday 14 January 2004 19:50, Tillman Hodgson wrote: On FreeBSD, source-based routing is done with the IPFW 'fwd' command (or the IPFilter 'pass out quick on int_2 to int_1' syntax) rather that using the `route` command

make -jX build(world|kernel): test results

2004-01-14 Thread Tillman Hodgson
Howdy, Occasionally the question pops up on the questions@ list about what the fastest -jX number is for a single CPU system. I had some spare time so I tried out a small matrix of possibilities. My conclusion is that using -jX at all is mostly a waste of time on single CPU systems running

Re: How do YOU stay up to date?

2004-01-14 Thread Tillman Hodgson
On Wed, Jan 14, 2004 at 11:11:22PM -0500, Duane Winner wrote: I now understand how to use cvsup to keep my src and ports tree current. I know how to use pkg_add -r to install new sotware, or go into /usr/ports/whatever to make install. I know how to do portupgrade to upgrade my installed

Re: ngctl and rc.conf

2004-01-13 Thread Tillman Hodgson
On Mon, Jan 12, 2004 at 09:45:20PM -0500, Lowell Gilbert wrote: Tillman Hodgson [EMAIL PROTECTED] writes: Howdy folks, What's the best way to build ng_one2many interfaces into rc.conf such that they're brought up (live) at the normal time so that: 1) configuration remains

ngctl and rc.conf

2004-01-12 Thread Tillman Hodgson
Howdy folks, What's the best way to build ng_one2many interfaces into rc.conf such that they're brought up (live) at the normal time so that: 1) configuration remains centralized in rc.conf 2) other pieces that depend on a network being present don't fail in enlightening ways? I want to

Re: Commercial Distribution?

2004-01-09 Thread Tillman Hodgson
On Fri, Jan 09, 2004 at 06:23:45PM -0500, Scott W wrote: That still doesn't remove (IMHO of course) the validity of my statement about calling FreeBSD and OS but Linux not based on licensing- FreeBSD wouldn't exist in it's current incarnation without the use of GPL and GNU software. Nor

Re: Commercial Distribution?

2004-01-06 Thread Tillman Hodgson
On Tue, Jan 06, 2004 at 09:14:41PM -0500, David D.W. Downey wrote: And how is that different from Linux? FreeBSD is an Operating System, so is Red Hat, Debian, Stampede, SLS, Slackware, and on and on. FreeBSD does the same thing. FreeBSD didn't develop OpenSSL but it includes it, nor did it

Re: Commercial Distribution?

2004-01-06 Thread Tillman Hodgson
On Tue, Jan 06, 2004 at 10:39:59PM -0500, Scott W wrote: snip Note that I don't entirely disagree with the response- IMHO, RedHat and SuSe are in fact merely distributions, but Linux as a collection of kernel + core programs is certainly an OS, in the same manner as *BSD is. I think that

Re: using multiple isc-dhcp servers?

2004-01-01 Thread Tillman Hodgson
On Thu, Jan 01, 2004 at 05:06:23PM -0500, stan wrote: I have set up the isc-dhcp port on 2 machines. and it is serving addresses, but I notice that whichever machine gives the lease is the only one that records the lease in it's leases file. This seems like a problem. Yes, I imagine it is

Re: File system full?

2004-01-01 Thread Tillman Hodgson
On Thu, Jan 01, 2004 at 06:23:15PM -0600, Eric F Crist wrote: On Thursday 01 January 2004 06:15 pm, Eric F Crist wrote: On Thursday 01 January 2004 06:04 pm, Chris wrote: If you have source installed, that takes up a bit. If you don't see yourself doing a makeworld and building kernel - a

Re: Dual-boot does not work with GRUB

2003-12-22 Thread Tillman Hodgson
On Tue, Dec 23, 2003 at 01:52:46AM +0100, Jaroslaw Nozderko wrote: I've got the following error: Filesystem type unknown, partition type 0xa5 Error 17: Cannot mount selected partition Does GRUB have some problems with FreeBSD partition ? I recently ran into the same problem - I found the

Re: Mutt + Procmail Filters

2003-12-17 Thread Tillman Hodgson
On Wed, Dec 17, 2003 at 11:08:57PM -0600, Bryan Cassidy wrote: OK. I've added that to my .procmailrc but when I load Mutt it still doesn't show any group called freebsd-questions. Do I have to create a ~/Maildir/freebds-questions directory? Yes. In my post I talked about having mutt do that

Re: ipnat+ipfw + 3 gateways

2003-12-15 Thread Tillman Hodgson
On Mon, Dec 15, 2003 at 07:25:21AM -0800, hugle wrote: now about this script. Let's reduce this this to pseudo code to simplify the discussion: map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 (some ports) - (gw2) map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 (other ports) - (gw1) map rl1

Re: NIS authontication problem.

2003-12-14 Thread Tillman Hodgson
On Sun, Dec 14, 2003 at 06:13:39PM -0500, Hossein wrote: Hello every body; In our department we are going to use a 5.1 Stable FreeBSD, and it must run NIS client to authonticate the users through a Linux NIS server. The ypbind works well and when I do ypcat passwd I get the

Re: ipnat+ipfw + 3 gateways

2003-12-14 Thread Tillman Hodgson
On Sun, Dec 14, 2003 at 06:01:08PM -0500, fbsd_user wrote: I think you are confused. IPNAT is part of ipfilter firewall and IPFW is an different firewall who has his own NATD function. You can not use one part from one and the other part from the other one. They work as an set,

Re: ipnat+ipfw + 3 gateways

2003-12-14 Thread Tillman Hodgson
On Sun, Dec 14, 2003 at 07:23:26PM -0500, fbsd_user wrote: What do you think IPF is? That's the utility name used to load filter rules into IPFILTER. So you are doing just what I said. The original poster said nothing about doing traffic shaping. IPNAT will not function with out IPFILTER

MIT krb5, telnetd, PAM, incorrect permissions on forwarded tickets

2003-12-04 Thread Tillman Hodgson
I'm trying over here since I didn't have any luck fishing in ports@ :-) I've since found the parts of the MIT login.krb5 that chown the forwarded ticket file. That was nice to know to not really relevent :-) I understand that there's a race condition when having root chown a file in /tmp to a

Re: security issue.

2003-11-28 Thread Tillman Hodgson
On Fri, Nov 28, 2003 at 08:11:23PM -0500, Dragoncrest wrote: Limiting closed port RST response from 272 to 200 packets per second snip Can you disable all PINGS from router to my server? snip It may be best to do two things. 1st would be to disable pings to and from the server at

Re: How do I know when ports are frozen?

2003-11-26 Thread Tillman Hodgson
On Wed, Nov 26, 2003 at 08:02:19PM +0100, Harald Schmalzbauer wrote: If I unterstand the latest commit messages correctly, the ports tree is in code freeze. Also -current is in code freeze. But how do one know? I'm subscribed to current and announce but can't remember any notice. Kris sent

Re: FreeBSD and FHS summary

2003-11-25 Thread Tillman Hodgson
On Tue, Nov 25, 2003 at 09:11:28PM +0100, Frank Murphy wrote: Before going back to the FHS list, I'd like to summarize what I think the opinions here were. Please correct me if I'm horribly off-base. The idea of defining a default directory to hold directories for recurring temporary

Re: FreeBSD, FHS, and /mnt/cdrom

2003-11-22 Thread Tillman Hodgson
On Sat, Nov 22, 2003 at 02:18:30PM -0500, Charles Swiger wrote: Obviously, a standard that says place mount points anywhere you want isn't very useful. But if you did come up with a standard, who should follow it and what would they gain? I don't want to speak for the FHS, but I do want to

Re: FreeBSD, FHS, and /mnt/cdrom

2003-11-21 Thread Tillman Hodgson
On Fri, Nov 21, 2003 at 03:41:16PM +0100, Frank Murphy wrote: The folks at the Filesystem Hierarchy Standard (FHS) are discussing (again) where directories for recurring temporary mount points should go. Recurring temporary mount points are for things like cdroms, floppies, and digital cameras

Upgrading perl modules (as ports) and already installed problems

2003-11-17 Thread Tillman Hodgson
Howdy, I'm looking for the appropriate portupgrade magic to handle these sorts of situations automatically: You may wish to ``make deinstall'' and install this port again by ``make reinstall'' to upgrade it properly. If you really wish to overwrite the old port of

Re: Upgrading perl modules (as ports) and already installed problems

2003-11-17 Thread Tillman Hodgson
On Mon, Nov 17, 2003 at 09:14:31AM -0600, Tillman Hodgson wrote: Whats the best way to ensure that all perl modules are properly and automatically upgrade when perl itself is upgraded? I've since discovered that I can shorten the time somewhat by using `pkg_info -R perl-5.6.1_14

Re: Sparc64 (Ultra 10) Install emulation

2003-11-12 Thread Tillman Hodgson
On Wed, Nov 12, 2003 at 04:55:19PM -0800, Kris Kennaway wrote: On Wed, Nov 12, 2003 at 04:40:53PM -0700, Aaron Brandt wrote: Can someone tell me what I need to do to get FreeBSD Sparc 64 installed on a Ultra Sparc 10. It seems as if the emulation is messed up. I have heard of doing a

Re: problems with FreeBSD telnet client

2003-11-10 Thread Tillman Hodgson
On Mon, Nov 10, 2003 at 06:16:50PM -0800, Will Yardley wrote: I've asked this before (a long while back), but never got a response. When I telnet to a Cisco device from a FreeBSD machine, I get this error: jazz% telnet somerouterorswitch Password: Kerberos: No default realm defined

Re: NFS v2? possible?

2003-11-09 Thread Tillman Hodgson
On Sun, Nov 09, 2003 at 07:48:53PM -0700, Chad Leigh -- Shire.Net LLC wrote: On Nov 9, 2003, at 4:28 AM, Kris Kennaway wrote: On Sun, Nov 09, 2003 at 01:33:23AM -0700, Chad Leigh -- Shire.Net LLC wrote: Hi I have a linux server that needs to mount my FBSD server's web volume and

Re: NFS v2? possible?

2003-11-09 Thread Tillman Hodgson
On Sun, Nov 09, 2003 at 08:49:58PM -0700, Chad Leigh -- Shire.Net LLC wrote: My Linux is now mounting the FreeBSD served mounts, but it takes like 10 minutes for the mount to happen. The exports is simple /local/web -maproot=root and an address to allow mounting from The nfsd is the

Re: Restoring vinum root from dump

2003-10-14 Thread Tillman Hodgson
On Tue, Oct 14, 2003 at 10:54:50AM +0930, Greg 'groggy' Lehey wrote: ... In particular, if you restore /usr/lib you'll replace the C library /usr/lib/libc.so. It's then possible to crash dynamically linked processes (since they no longer have libraries), after which you could be left with a

Re: writing pdfs

2003-10-10 Thread Tillman Hodgson
On Fri, Oct 10, 2003 at 03:06:23PM +0200, Alexander Haderer wrote: My opinion: yes. Learn the basics of LaTeX and use pdflatex instead of latex to create pdf files directly from your tex source. The old way of generating pdf via tex-dvi-ps-pdf via the classic (la)tex commands has the

Re: writing pdfs

2003-10-10 Thread Tillman Hodgson
On Fri, Oct 10, 2003 at 04:18:38PM +0200, Alexander Haderer wrote: I agree with the recommendation to learn LaTeX. It's probably the best way to generate PDF output and it's widely used for document generation. I disagree that one needs to use pdflatex, though. Those side-effects you mention

Re: writing pdfs

2003-10-10 Thread Tillman Hodgson
On Fri, Oct 10, 2003 at 07:59:10AM -0600, Tillman Hodgson wrote: 1. \usepackage{times} (or palatino or bookman or whatever font package you like) 2. use something like this in your Makefile: ps: latex some_latex_file.tex latex

Re: low-scale presenter for FreeBSD?

2003-10-05 Thread Tillman Hodgson
On Sun, Oct 05, 2003 at 10:16:07AM +0200, Simon Rutishauser wrote: Hi, give the Latex Prosper Package a try (you have to fetch it separately). With it you can create pdf files. These you can present using xpdf -fullscreen (I think xpdf doesn't need too much ressources ;-)) Peschmä I

Re: vpn

2003-09-24 Thread Tillman Hodgson
On Wed, Sep 24, 2003 at 03:37:19PM -0400, synrat wrote: I'm trying to find vpn software for freebsd that supports pptp. I don't care much for ipsec, unless I have no other choice. Goal being :), windows clients mounting samba shares remotely over vpn. I found a howto for poptop, but it said

Re: fbsd fibre channel SANs

2003-09-18 Thread Tillman Hodgson
On Thu, Sep 18, 2003 at 10:42:13AM -0400, Jerry McAllister wrote: AFS looks like it replicates files onto multiple servers, so if one goes down the data is still available somewhere else. The servers do not share backend filesystems. Don't you just wish OpenAFS for FreeBSD (and some of

Re: nis security (DES passwords)

2003-09-13 Thread Tillman Hodgson
On Sat, Sep 13, 2003 at 05:01:31PM +0200, Guy Van Sanden wrote: I was looking arround for this, and I found that Kerberos uses DES encryption, John (on my sytem) reports it rather weak: snip I'm now using MD5 passwords in NIS. Yet it seems the consensus that Kerberos is secure, am I missing

Re: nis security

2003-09-12 Thread Tillman Hodgson
On Fri, Sep 12, 2003 at 11:35:16AM +0200, Guy Van Sanden wrote: On Tue, 2003-09-09 at 02:15, Tillman Hodgson wrote: The rough instructions are fairly simple: * Set up Kerberos and ensure you have a working realm * Set up NIS, but set all the passwd fields to something that doesn't

Re: remove files in FreeBSD

2003-09-10 Thread Tillman Hodgson
On Wed, Sep 10, 2003 at 05:11:58PM -0700, Joseph Yuen wrote: Got a simple question. on my 80G harddrive, I originally had 4G files in it and I used rm command to remove it all. Now my drive should be totally empty. But this is what I found when I typed df -H /dev/ar0s1e 79G 2.0K 72G 0%

  1   2   >