accounting

2008-08-05 Thread [EMAIL PROTECTED]@mgEDV.net

hi together,

we're trying to setup system accounting with sa to get detailed
information which user takes how much cpu.
for any reason we'd like to have separate files like "sa_20080805_14"
for each hour we run process accounting and keep them as well.
but of course when issuing an accton  command, we always get
these kernel messages:
Accounting disabled
Accounting enabled

now my question: is there any way to prevent the messages from being
dmesg'd except hacking the accounting sources? it's pretty sensless
to have hundreds of these messages...

cheers 


ps: just reply to the list, i'll it...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /bin/csh script in GELI partition crashes 6.3-STABLE

2008-02-12 Thread [EMAIL PROTECTED]@mgEDV.net

Subject: /bin/csh script in GELI partition crashes 6.3-STABLE

things i ran into with GELI/UFS2+S:
- geli partition sector size larger than 4KB caused panics on one of our 
boxes

- fs sector size any than 512 sometimes caused hangs/watchdog reboots
try setting up a kernel with debug-flags and integrated debugger
(see ddb(4)) to catch a panic and get a backtrace if there's any. 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


re: strange panic: freebsd 6.3: ffs_alloccg: map corrupted [SOLVED]

2008-02-11 Thread [EMAIL PROTECTED]@mgEDV.net

> during copying ~350GB from one volume to another on
> the local machine (separate disks, separate fs's) i
> get the following panic:

> start = 0, len = 23691, fs = /newdata
> panic: ffs_alloccg: map corrupted
> KDB: enter: panic
> [ thread pid 835 tid 10070 ]
> stopped at kdb_enter +0x2c:  leave

for those, who are interested in:

this issue was not related to UFS but to GELI.
we were trying to use a 8KB sector size on the geli
provider, which caused the panic.
using 4KB as sector size works.

the command before:
geli init -bP -e 3DES -K /my/test.key -s 8192 /dev/da0

and after:
geli init -bP -e 3DES -K /my/test.key -s 4096 /dev/da0

cheers...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: strange panic: freebsd 6.3: ffs_alloccg: map corrupted

2008-02-02 Thread [EMAIL PROTECTED]@mgEDV.net
On Fri, February 1, 2008 16:30, [EMAIL PROTECTED]@mgEDV.net wrote:
>
> hi folks,
>
> during copying ~350GB from one volume to another on
> the local machine (separate disks, separate fs's) i
> get the following panic:
>
> start = 0, len = 23691, fs = /newdata
> panic: ffs_alloccg: map corrupted
> KDB: enter: panic
> [ thread pid 835 tid 10070 ]
> stopped at kdb_enter +0x2c:  leave
>
> the destination filesystem i created from scratch
> today, and the other which is read from is fsck'd.
>
> because of privacy/security considerations, i cannot
> really post the whole configuration of the machine
> (like fs-layout, other details, dmesg will be ok if
> needed).
>
> the backtrace can be viewed on this image:
> http://www.mgedv.at/panic_ffs_alloccg.png
>

update: the filesystem is created using the following newfs-cmd:
newfs -L newdata -O 2 -U -b 65536 -f 8192 -c 262144 -i 524288 -m 0 -o space 
/dev/amrd2

btw, i forgot to mention, that the panic is raised at
different amounts of data being copied. so this does
not seem like a hardware defect for me...

anyone out there who has an idea?
cheers...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


strange panic: freebsd 6.3: ffs_alloccg: map corrupted

2008-02-01 Thread [EMAIL PROTECTED]@mgEDV.net

hi folks,

during copying ~350GB from one volume to another on
the local machine (separate disks, separate fs's) i
get the following panic:

start = 0, len = 23691, fs = /newdata
panic: ffs_alloccg: map corrupted
KDB: enter: panic
[ thread pid 835 tid 10070 ]
stopped at kdb_enter +0x2c:  leave

the destination filesystem i created from scratch
today, and the other which is read from is fsck'd.

because of privacy/security considerations, i cannot
really post the whole configuration of the machine
(like fs-layout, other details, dmesg will be ok if
needed).

the backtrace can be viewed on this image:
http://www.mgedv.at/panic_ffs_alloccg.png

any ideas how to react on this?

cheers...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how to capture freebsd 6.3 kernel panics [solved]

2008-02-01 Thread [EMAIL PROTECTED]@mgEDV.net
On Fri, February 1, 2008 12:46, Manolis Kiagias wrote:
>
> [EMAIL PROTECTED]@mgEDV.net wrote:
>> On Fri, February 1, 2008 11:54, Manolis Kiagias wrote:
>>
>>> [EMAIL PROTECTED]@mgEDV.net wrote:
>>>
>>>> hi,
>>>>
>>>> since i migrated from 6.2-REL to 6.3-REL i got several
>>>> panics when copying much data from one volume to another.
>>>> because of the copy-job taking several hours, i don't
>>>> get a realistic chance to CATCH the stupid panic and
>>>> see what's going on (or at least get an idea of).
>>>> this is really frustrating me!
>>>>
>>>> is there a way to avoid the auto-reboot?
>>>>
>>>> is there a way to save the panic to disk?
>>>>
>>>> btw, there's no swap partition i could use as dump device.
>>>>
>>>> cheers...
>>>>
>>>>
>>> I recently had a system that would not dump to the swap partition for
>>> one reason or the other.
>>> I used an external USB hard disk, and it dumped there with no problems.
>>> With the current sizes of cheap usb flash drives, even that is probably
>>> an option.
>>> You may wish to explore this solution.
>>>
>>> Manolis
>>>
>>>
>>
>> well, although this is a good idea (and i'll keep it
>> as my backup plan for now) , i rather like to
>> prevent the server from rebooting and simply stay at
>> the panic instead of analyzing crash dumps :)
>> is there a way for that?
>>
>>
>>
> Well, according to this:
>
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kerneldebug-options.html
>
> compiling your kernel with options KDB will cause it to enter the
> debugger instead of automatic reboot. This is not something I ever tried
> myself but it maybe worth the trouble.
>
> Manolis
>

yeah, in the mean time, i exactly did this.
loaded /usr/src/sys, compiled with options KDB, options DDB
and booted with that kernel. this gives me at least the option
to SEE what happened...

thx for the replies, guys!


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


how to capture freebsd 6.3 kernel panics

2008-02-01 Thread [EMAIL PROTECTED]@mgEDV.net
hi,

since i migrated from 6.2-REL to 6.3-REL i got several
panics when copying much data from one volume to another.
because of the copy-job taking several hours, i don't
get a realistic chance to CATCH the stupid panic and
see what's going on (or at least get an idea of).
this is really frustrating me!

is there a way to avoid the auto-reboot?

is there a way to save the panic to disk?

btw, there's no swap partition i could use as dump device.

cheers...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: huawei e220 hsdpa on freebsd 6.3-BETA2

2007-12-07 Thread [EMAIL PROTECTED]@mgedv.net


Your HSDPA modem presented itself like a mass storage device, probably 
with

some autorun and virus like drivers intended for the Windows operating
system :-)


unfortunately, this is the "intended" behaviour. this device has the
ability to present itself as "mass storage" which will show up as a
cd-rom device where the windows drivers are stored on.

this is the way it works under windows:
- plug it in first time
- (auto)run the setup on the device for the win-driver
- as soon as the driver is loaded, the cd device disappears and a modem is 
detected


but when loading the ucom/ubsa stuff before umass, the device will
not be recognised as /dev/cdX and show up as a communication device
(ucom).

of course there must be a way for getting the serial device working,
because this is one of the most sold umts/hsdpa modems across eu and
many people run it under linux as well (there are no drivers from
the vendor provided except windows and mac).
i'm pretty sure there is some "message" or anything else which will
render this device switching to serial mode.
there is some code, which i found (doesn't compile/run under freebsd)
which "puts" this device in pure serial mode. maybe someone out there
is able to tell me, how/if this can be done on freebsd as well?
(btw, i'm not a c-guru)

do you (or anybody else reading this) have an idea, how to get this
device working and put it in serial mode "completely" ?

regards...

THIS IS THE C CODE WHICH WORKS (ANYHOW) ON LINUX:


===
1st: huaweiAktBbo.c
===


/* HUAWEI E220 3G HSDPA modem - Aktivator modemu = aktivuje ttyUSB0 tty USB1
  bobovsky 11.12.2006
  dalej sa uz pouzije usbserial a usb-storage
  cc huaweiAktBbo.c -lusb  (resp -I. -L.)
  armeb-linux-gcc huaweiAktBbo.c -L. -I. -lusb
  Copyright (C) 2006 bobovsky [EMAIL PROTECTED]  GPL
  This program is free software; you can redistribute it and/or modify it 
under the terms of the GNU General Public License2.

*/
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#if 0
#include 
#define LIBUSB_AUGMENT
#include "libusb_augment.h"
#endif

struct usb_dev_handle *devh;

void release_usb_device(int dummy) {
   int ret;
   ret = usb_release_interface(devh, 0);
   if (!ret)
printf("failed to release interface: %d\n", ret);
   usb_close(devh);
   if (!ret)
printf("failed to close interface: %d\n", ret);
   exit(1);
}

void list_devices() {
   struct usb_bus *bus;
   for (bus = usb_get_busses(); bus; bus = bus->next) {
struct usb_device *dev;

for (dev = bus->devices; dev; dev = dev->next)
printf("0x%04x 0x%04x\n",
dev->descriptor.idVendor,
dev->descriptor.idProduct);
   }
}

struct usb_device *find_device(int vendor, int product) {
   struct usb_bus *bus;

   for (bus = usb_get_busses(); bus; bus = bus->next) {
struct usb_device *dev;

for (dev = bus->devices; dev; dev = dev->next) {
if (dev->descriptor.idVendor == vendor
 && dev->descriptor.idProduct == product)
 return dev;
}
   }
   return NULL;
}

void print_bytes(char *bytes, int len) {
   int i;
   if (len > 0) {
for (i=0; iprintf("interface 0 already claimed by driver \"%s\", attempting to detach 
it\n", buf);

ret = usb_detach_kernel_driver_np(devh, 0);
printf("usb_detach_kernel_driver_np returned %d\n", ret);
   }
   ret = usb_claim_interface(devh, 0);
   if (ret != 0) {
printf("claim failed with error %d\n", ret);
 exit(1);
   }

   ret = usb_set_altinterface(devh, 0);
   assert(ret >= 0);
*/
// BBO typ 1 = DEVICE
ret = usb_get_descriptor(devh, 0x001, 0x000, buf, 0x012);
//printf("1 get descriptor returned %d, bytes: ", ret);
//print_bytes(buf, ret);
//printf("\n");
usleep(1*1000);
// BBO typ 2 = CONFIGURATION
ret = usb_get_descriptor(devh, 0x002, 0x000, buf, 0x009);
//printf("2 get descriptor returned %d, bytes: ", ret);
//print_bytes(buf, ret);
//printf("\n");
usleep(1*1000);
// BBO typ 2 = CONFIGURATION
ret = usb_get_descriptor(devh, 0x002, 0x000, buf, 0x020);
//printf("3 get descriptor returned %d, bytes: ", ret);
//print_bytes(buf, ret);
//printf("\n");
usleep(1*1000);
/*
ret = usb_release_interface(devh, 0);
if (ret != 0) printf("failed to release interface before set_configuration: 
%d\n", ret);

ret = usb_set_configuration(devh, 0x001);
printf("4 set configuration returned %d\n", ret);
ret = usb_claim_interface(devh, 0);
if (ret != 0) printf("claim after set_configuration failed with error %d\n", 
ret);

ret = usb_set_altinterface(devh, 0);
printf("4 set alternate setting returned %d\n", ret);
usleep(50*1000);
ret = usb_set_altinterface(devh, 0);
printf("5 set alternate setting returned %d\n", ret);
usleep(62*1000);
*/
ret = usb_control_msg(devh, USB_TYPE_STANDARD + USB_RECIP_DEVICE, 
USB_REQ_SET_FEATURE, 0001, 0, buf, 0, 1000);

printf("4 set feature request returned %d\n", ret);
/*
ret = usb_release_interface(devh, 0);
assert(ret == 0);
*/
ret = usb_close(devh);
assert(ret == 0);
printf("Prepnute-OK,

Re: huawei e220 hsdpa on freebsd 6.3-BETA2

2007-12-06 Thread [EMAIL PROTECTED]@mgedv.net




Can you make your modem show up like "ugen" by loading "ugen" before 
plugging

your device.



here it is ;)

Standard Device Descriptor:
 bLength18
 bDescriptorType01
 bcdUSB 0110
 bDeviceClass   00
 bDeviceSubClass00
 bDeviceProtocol00
 bMaxPacketSize 64
 idVendor   12d1
 idProduct  1003
 bcdDevice  
 iManufacturer  1
 iProduct   2
 iSerialNumber  0
 bNumConfigurations 1

Configuration 0:
Standard Configuration Descriptor:
  bLength 9
  bDescriptorType 02
  wTotalLength32
  bNumInterface   1
  bConfigurationValue 1
  iConfiguration  0
  bmAttributesa0 (remote-wakeup)
  bMaxPower   250 (500 mA)

Standard Interface Descriptor:
  bLength9
  bDescriptorType04
  bInterfaceNumber   0
  bAlternateSetting  0
  bNumEndpoints  2
  bInterfaceClass08
  bInterfaceSubClass 06
  bInterfaceProtocol 50
  iInterface 0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 83 (in)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   64
  bInterval0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 04 (out)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   64
  bInterval0

Codes Representing Languages by the Device:
 bLength  4
 bDescriptorType  03
 wLANGID[0]   0409

String (index 1): HUAWEI Technologies

String (index 2): HUAWEI Mobile



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


huawei e220 hsdpa on freebsd 6.3-BETA2

2007-12-06 Thread [EMAIL PROTECTED]@mgedv.net


hi folks,

i've got a huawei e220 hsdpa modem, which is connected
to a hp nx8220 notebook (ICH6 usb controller) w. 6.3-BETA2.
i tried GENERIC as well as custom kernels.

this is my current situation:

- custom kernel with just [u,o,e]hci and usb(4) support.
(removed all other usb device support except keyb/mouse)
- patched "ubsa" as beyond
- loaded ucom(4)
- loaded ubsa(4)
- left out umass(4) or loaded it AFTER ubsa/ucom

dmesg-cut when plugging in the E220 in this scenario:
ucom0: HUAWEI Technologies HUAWEI Mobile, Rev 1.10/0.00, addr 2
ucom0: Could not find interrupt in
device_attach: ucom0 attach returned 6

the patches (/usr/src/sys/dev/usb is base-dir):

--- usbdevs.pre 2007-11-04 03:28:31.0 +
+++ usbdevs 2007-12-06 12:14:46.0 +
@@ -1044,6 +1044,7 @@

/* HUAWEI products */
product HUAWEI MOBILE  0x1001 Huawei Mobile
+product HUAWEI E220  0x1003 Huawei E220 HSDPA USB Modem

/* IBM Corporation */
product IBM USBCDROMDRIVE 0x4427 USB CD-ROM Drive

--- ubsa.c.pre 2007-06-17 09:38:26.0 +
+++ ubsa.c 2007-12-06 12:18:55.0 +
@@ -232,6 +232,8 @@
 { USB_VENDOR_OPTION, USB_PRODUCT_OPTION_GT3GQUAD },
 /* Huawei Mobile */
 { USB_VENDOR_HUAWEI, USB_PRODUCT_HUAWEI_MOBILE },
+ /* Huawei Mobile E220 */
+ { USB_VENDOR_HUAWEI, USB_PRODUCT_HUAWEI_E220 },
 { 0, 0 }
};

usbdevs -v shows the device as:
full speed, power 500mA, config 1, VENDOR 0x12d1, PROD: 0x1003

i really NEED this device to work with freebsd so is
there anybody out there who had such a problem and
solved it?

thx in advance :)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /bin/sh vi mode command line editing and the period

2007-08-29 Thread [EMAIL PROTECTED]@mgedv.net

i just do the following:

clear
/bin/sh
EDITOR=vi
export EDITOR
set -o $EDITOR
echo 1
echo 2
echo 3
echo 4



I tested the command sequence you gave and the result was as you
explained. What caught my attention, however, was that all the
commands were builtin. I tested with non-builtin commands (eg.
/bin/echo instead of echo) and ESC-. did nothing. In fact unless the
last command was a builtin, ESC-. just repeated the last _editing_
action.
This is not a desired behaviour however IMO, to repeat the last
command (if builtin) upon a ESC-. on an empty line.
Please correct me if I'm wrong.



well, now i did this:
/bin/sh
EDITOR=vi
export EDITOR
set -o $EDITOR
echo 1 >>foo
echo 2 >>foo
cat foo >>foo1
cat foo1 >>foo
cat foo


with this result:
test# /bin/sh
test# EDITOR=vi
test# export EDITOR
test# set -o $EDITOR
test# echo 1 >>foo
test# echo 2 >>foo
test# cat foo >>foo1
test# cat foo1 >>foo
test# cat foo
1
2
1
2
test#
test# echo 2 >>foo
test# cat foo >>foo1
test# cat foo1 >>foo
test# cat foo
1
2
1
2
2
1
2
1
2
1
2
2
test#

i took care that foo and foo1 did not exist prior to testing!
but i'm still not sure whether i should file a PR or not.
my assumption and expectance for ESC-. would be:
(regardless whether the input line is empty or not)
- ignore the key completely
- execute the last executed command again (ignoring the content
in the input buffer)

still, it's risky, maybe the command should not get executed but
pasted into the commandline like with ESC-- (minus).
executing should also be fine - if it's just the last command and
not the whole history. this is not a feature - for me it seems to
be much more than senseless.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /bin/sh vi mode command line editing and the period

2007-08-29 Thread [EMAIL PROTECTED]@mgedv.net

I wasn't able to reproduce what you explained...maybe I missed something?



i just do the following:

clear
/bin/sh
EDITOR=vi
export EDITOR
set -o $EDITOR
echo 1
echo 2
echo 3
echo 4


and this is the output:
test# /bin/sh
test# EDITOR=vi
export EDITOR
set -o $EDITOR
echo 1
echo 2
echo 3
echo 4
test# test# test# echo 1
1
test# echo 2
2
test# echo 3
3
test# echo 4
4
test#
test#
test# echo 2
2
test# echo 3
3
test# echo 4
4
test#
test#


interestingly, echo 1 is not re-executed but the other commands are.
dunno what's going on here, but i really find it somewhat dangerous
as a default root shell for a unix system (of course, in vi mode)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /bin/sh vi mode command line editing and the period

2007-08-28 Thread [EMAIL PROTECTED]@mgedv.net



As far as I know, ESC-. (in fact hitting '.' when in command mode)
repeats your very last action whether it was an editing action or
executing a command.


yes, that's true for vi, but not for /bin/sh in vi-mode. at least
on my 6.2-RELEASE.
;)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


/bin/sh vi mode command line editing and the period

2007-08-27 Thread [EMAIL PROTECTED]@mgedv.net

hi folks,

when someone uses set -o vi to put /bin/sh into vi-mode
for command line editing, he for example could use the
"ESC-minus" sequence for editing the last executed command.

but there's another bug/feature: "ESC-." (period).
when i (of course by mistake) hit this "feature",
all commands in the history IMMEDIATELY get executed
without even pressing enter.

is this a bug or a feature and how can i avoid this
to happen - even with being in vi mode and in /bin/sh.

from my point of view, this is a really dangerous thing,
because commands like rm -rf or kill could easily get
executed when they shouldn't!

the documentation for vi shows that "." should be used
to edit the whole history and not to parse and execute it!
(allocated to cmdline editing).

cu / regards

ps: just reply to the list, i'm on it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


freebsd black-listed on dsbl...

2006-09-23 Thread [EMAIL PROTECTED]@mgedv.net

hey guys,

dunno whether this is the correct list, but if there's
someone feeling responsible for that, please try to fix ;-)

> In:  MAIL FROM:<[EMAIL PROTECTED]> SIZE=4342
> Out: 521 Service unavailable; Sender address
> [EMAIL PROTECTED] blocked using list.dsbl.org

br & cu...



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Upgrading Included GCC

2006-07-10 Thread [EMAIL PROTECTED]@mgedv.net

> 
> I've already installed it, I should have mentioned 
> that--sorry. What I mean is 
> there a way to where when I type 'gcc' or 'g++' it uses gcc41 
> or g++41? I 
> know I could use symlinks but that would entail removing the 
> gcc 3.4.2 
> binaries which I'm afraid might be insecure.

i don't know what you want to do with it, but if you
compile some standards-aware software, you'd be able
to set CC and CPP, CXX as environment variable to the
binaries you installed

export CC="/usr/local/gcc41/bin/gcc" for example.
maybe this works. dunno for sure, but worth a try ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: shared library loader configuration

2006-07-10 Thread [EMAIL PROTECTED]@mgedv.net
 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Giorgos Keramidas
> Sent: Friday, July 07, 2006 3:46 PM
> To: [EMAIL PROTECTED]
> Cc: freebsd-questions@freebsd.org
> Subject: Re: shared library loader configuration
> 
> On 2006-07-07 14:58, "[EMAIL PROTECTED]@mgedv.net" <[EMAIL PROTECTED]> wrote:
> >Giorgos Keramidas wrote:
> >>On 2006-07-07 14:22, "[EMAIL PROTECTED]@mgedv.net" <[EMAIL PROTECTED]> 
> >>wrote:
> >>> dunno, if it's a misunderstanding, but my only question 
> "how to tell
> >>> the system where to load libraries and in which order to prefer
> >>> paths" seems to be still open.
> >>>
> >>> anyway, thx for the reply ;-)
> >>>
> >>> ps: i already RdTFM ;-)
> >>
> >> You don't.  Unless you modify the /etc/rc.d/ldconfig 
> script manually,
> >> /lib and /usr/lib will always be the first to search.
> >>
> >> I'm still not convinced that "telling the system where to load
> >> libraries from" is the solution to you problem, but I 
> don't know what
> >> the problem is.  You have to describe first *WHAT* the real problem
> >> is and *WHY* you think modifying the library path is a solution.
> >
> > i found the ldconfig rc-script but i thought there might be a
> > "cleaner" way of telling the system where the shared 
> libraries are to
> > be found.
> >
> > any way to tell the system: take /usr/local/lib first w.o.  changing
> > the ldconfig rc-scripts or developing own startup scripts 
> that achieve
> > that?  no way of changing some default configuration file that is
> > avail. for that purpose?
> 
> No.  For a very good reason too.  If you change the default 
> loader path
> to use /usr/local/lib first then *ALL* the programs are 
> affected.  Even
> those that are part of the base system.  This is, in general, 
> a very bad
> idea as the base-system programs may depend on particular versions of
> the libraries to work correctly and those libraries are in 
> /lib:/usr/lib.
> 
> > some additional thoughts (a little bit of phil.):
> >
> > i wonder, that anybody scripts such hardcoded stuff into a script
> > because the environment /etc/ld*conf* exists, and at least 
> for a clear
> > and proper way for the admin to define what to load from where it
> > should be possible, to override a default configuration via the
> > config-files, and not with modifications to rc-scripts 
> which are gone
> > by default after each upgrade.
> 
> There's a reason why /lib:/usr/lib take precedence over /usr/local.
> 
> Don't change that, or be prepared to debug all the potential bugs that
> may start appearing.
> 
> > to satisfy your couriosity :-)
> 
> This description is much better.
> 
> > i'd like to compile openssl 0.9.8 and a newer zlib for testing some
> > software that does crypto & compression using these libs.  and i
> > wanted to keep the servers as clean as possible from changing
> > rc-scripts, etc... to ensure we're able to transfer the outcoming
> > piece of program to other boxes w'out much effort.  i know 
> it's inside
> > the ports but the problem is, we'd like to tes some sort of code
> > that's not enabled by default in the ports.
> 
> You can always install your own version of openssl and zlib and use an
> explicit -R option to tell the linker where to find libraries.  There
> are two steps involved in linking and distributing an executable:
> 
> * Build-time linking, where the compiler/linker has to be 
> explicitly
>   pointed at teh right place with -L/foo/lib paths.
> 
> * Runtime linking, where the runtime linker-loader has to 
> lookup and
>   locate the library.
> 
> You can affect the first one with explicit -L/foo/lib 
> options.  You can
> also hardcode one or more paths to the binary -- solving the second
> problem too -- if you use -R/distrib/lib options while building.
> 
> Your problems are only a matter of using the proper build options.
> 
> See for example the ldd output near the end of the following log:
> 
> # [EMAIL PROTECTED]:/home/giorgos/tmp/foo# make cleandir
> # ===> lib (cleandir)
> # ===> lib/libz (cleandir)
> # rm -f a.out foo.o foo.o.tmp
> # rm -f foo.po  foo.po.tmp
> # rm -f foo.So foo.so foo.So.tmp
> # rm -f libz.so
> # rm -f libz.so.* libz.so
> # rm -f libz.a libz_p.a libz.so.1
> # rm -f .depend GPATH GRTAGS GSYMS GTAGS
> # ===>

RE: shared library loader configuration

2006-07-07 Thread [EMAIL PROTECTED]@mgedv.net
 

> -Original Message-
> From: Giorgos Keramidas [mailto:[EMAIL PROTECTED] 
> Sent: Friday, July 07, 2006 2:28 PM
> To: [EMAIL PROTECTED]
> Cc: freebsd-questions@freebsd.org
> Subject: Re: shared library loader configuration
> 
> On 2006-07-07 14:22, "[EMAIL PROTECTED]@mgedv.net" <[EMAIL PROTECTED]> wrote:
> > dunno, if it's a misunderstanding, but my only question "how to tell
> > the system where to load libraries and in which order to 
> prefer paths"
> > seems to be still open.
> >
> > anyway, thx for the reply ;-)
> >
> > ps: i already RdTFM ;-)
> 
> You don't.  Unless you modify the /etc/rc.d/ldconfig script manually,
> /lib and /usr/lib will always be the first to search.
> 
> I'm still not convinced that "telling the system where to 
> load libraries
> from" is the solution to you problem, but I don't know what 
> the problem
> is.  You have to describe first *WHAT* the real problem is 
> and *WHY* you
> think modifying the library path is a solution.
> 

i found the ldconfig rc-script but i thought there might
be a "cleaner" way of telling the system where the shared
libraries are to be found.

any way to tell the system: take /usr/local/lib first w.o.
changing the ldconfig rc-scripts or developing own startup
scripts that achieve that?
no way of changing some default configuration file that is
avail. for that purpose?

some additional thoughts (a little bit of phil.):

i wonder, that anybody scripts such hardcoded stuff into
a script because the environment /etc/ld*conf* exists,
and at least for a clear and proper way for the admin to
define what to load from where it should be possible, to
override a default configuration via the config-files,
and not with modifications to rc-scripts which are gone
by default after each upgrade.

to satisfy your couriosity :-)
i'd like to compile openssl 0.9.8 and a newer zlib for testing
some software that does crypto & compression using these libs.
and i wanted to keep the servers as clean as possible from
changing rc-scripts, etc... to ensure we're able to transfer
the outcoming piece of program to other boxes w'out much effort.
i know it's inside the ports but the problem is, we'd like to
tes some sort of code that's not enabled by default in the ports.

my (very subjective) point of view currently is, that the
dynamic loading environment could rely on just one (or 2
if you care for elf/aout anymore) configuration file, which
is being taken care of the libexec-stuff.
i exactly don't see the need for caching all "found" libs
inside another config in var (even this can speed up things
a little bit), a need for the ldconfig command (which renders
things to do twice and which - maybe i don't get it (plz. no
flame-wars ;-) ) - doesn't really take care for the config-
files from /etc as well.

and assume the following:
you're compiling ~10 libraries in series (all go to /usr/local)
and they're some sort of connected to each other, you'll always
have to exec ldconfig -blabla... to ensure, the loader knows
about the new lib?
it's like the crazieness of the windows registry: i need 10ths
of entries for one library to really make it avail in the os
and for progs relying on it.

hey, i'm not a real developer (as you can see) and i really
am sure that there was a reason for developing that way.
i'm also sure, that you can explain good reasons for doing
it that way (and i wouldn't ever say "i don't care 'bout that!")

but from a more or less "user's" point of view, it's admin-
overhead which could (theoretically) be avoided.

i'll STFU know - things are going too theoretically ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: shared library loader configuration

2006-07-07 Thread [EMAIL PROTECTED]@mgedv.net
 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Giorgos Keramidas
> Sent: Friday, July 07, 2006 2:03 PM
> To: [EMAIL PROTECTED]
> Cc: freebsd-questions@freebsd.org
> Subject: Re: shared library loader configuration
> 
> On 2006-07-07 13:22, "[EMAIL PROTECTED]@mgedv.net" <[EMAIL PROTECTED]> wrote:
> >
> > hi,
> >
> > can someone give me please a SIMPLE and CLEAR answer, what i exactly
> > have to do to achieve the following:
> >
> > i have (for example) installed a new compiled version of 
> libz.a/.so in
> > /usr/local.
> >
> > i want program (during runtime AND during compilation) to 
> compile and
> > run against the NEW and non-system libs.
> 
> In short, just don't.
> 
> The system programs have been tested, developed and debugged with the
> *SYSTEM* version of the libraries.  Blindly replacing these libraries
> with others is something you should do only with extreme care.
> 
> > what has to be set/changed, to have this setting as soon as the OS
> > starts?
> 
> LD_LIBRARY_PATH is probably what you mean here.
> 
> > i tried running ldconfig, i was playing around with some ld-so.conf
> > files, everything failed. the compilation does not even find the new
> > libraries, and if i use "ldd" to check what path the lib would use
> > it's always /lib or /usr/lib instead of /usr/local/lib.
> 
> All the compilers that I have to use for every day work and for my own
> stuff have options that can hardcode a 'runtime library path' 
> in the ELF
> binary.
> 
> What did you try to compile?
> 
> What do you mean by writing ``the compilation does not even 
> find the new
> libraries''?
> 
> > please don't tell me things about RTFM or weblinks
> 
> This is also a good way of learning new stuff though :)
> 
> > i just need ~3 simple lines of what the hell to do that i get a
> > persisting setting for compilations and runtimes
> 
> How do you know it is ``3 simple lines''?
> 

dunno, if it's a misunderstanding, but my only question
"how to tell the system where to load libraries and in
which order to prefer paths"
seems to be still open.

anyway, thx for the reply ;-)

ps: i already RdTFM ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


shared library loader configuration

2006-07-07 Thread [EMAIL PROTECTED]@mgedv.net

hi,

can someone give me please a SIMPLE and CLEAR answer,
what i exactly have to do to achieve the following:

i have (for example) installed a new compiled version
of libz.a/.so in /usr/local.

i want program (during runtime AND during compilation)
to compile and run against the NEW and non-system libs.

what has to be set/changed, to have this setting as soon
as the OS starts?

i tried running ldconfig, i was playing around with some
ld-so.conf files, everything failed. the compilation does
not even find the new libraries, and if i use "ldd" to
check what path the lib would use it's always /lib or
/usr/lib instead of /usr/local/lib.

please don't tell me things about RTFM or weblinks, i just
need ~3 simple lines of what the hell to do that i get
a persisting setting for compilations and runtimes, which
i don't have to e.g. export everytime i want it to work
(talking 'bout LD_LIBRARY_PATH or CFLAGS/LDFLAGS). this
cannot be a good solution, as soon as i start with a clean
environment, there has to be a way to tell the os, MAN load
it from there first!

many thx in advance for not flaming me & telling me how's
it meant to be ;-)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: shell scripting: help appreciated

2006-07-04 Thread [EMAIL PROTECTED]@mgedv.net
> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Parv
> Sent: Monday, July 03, 2006 7:50 PM
> To: [EMAIL PROTECTED]@mgedv.net
> Cc: freebsd-questions@freebsd.org
> Subject: Re: shell scripting: help appreciated
> 
> in message <[EMAIL PROTECTED]>,
> wrote [EMAIL PROTECTED]@mgedv.net thusly...
> >
> > /bin/sh stops working correctly with a content-controlled do-loop.
> > 
> > the shell-script layout is as follows:
> > (it's not that trivial, just to show the meaning)
> > ---
> > /test/foo.conf (originally ~60 lines):
> > test1 testval1optional_testval1
> > test2 testval2optional_testval2
> > 
> > /test/foo.sh (this is the original loop code):
> > cat "$g_dir_etc/compile.lst"|\
> ...
> ( some pipeline )
> ...
> > while read gh_name gh_src gh_srcdir
> > do
> >   
> >   /bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
> >   
> > done;
> > 
> > /test/foo_sub.sh:
> > 
> > ---
> > 
> > if i change the line
> >   /bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
> > to
> >   echo /bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
> > the program loops for all records in the foo.conf correctly.
> > 
> > if i remove the "echo" keyword, the sub-script get's executed,
> > but the shell terminates as if there were lesser records in
> > the foo.conf file!
> > i scripted as many debug messages as possible, for every loop
> > they get executed and there are no errors/etc... happening.
> > and interestingly, the execution stops always on the same record!
> > if i comment out some records of my foo.conf, the sub-shell gets
> > executed for more records.
> 
> So, what is it exactly in the records (and/or values given to
> subprogram.sh) where the execution stops?
> 

it's not depending on the record. the layout of each record is 2
fixed an one variable field of data which is then put together to
directory/file-names inside the subprogram.
the subprogram just simply should loop for each record inside the
controlfile, which is done correctly if i change the subprogram to
an just "say hello" script.
if i run the really program, the loop stops (not immediately after
calling the subprogram, it just normal finishes the loop) after
working on lesser records as there are inside the .conf file.

no idea of what's going on.

btw., for each record - after the subprogram has successfully worked
on it a "done" flag is set and the subprogram is not called again
for this record.
looping the main program again and again renders the subprogram to
get executed for the other records as well.
it looks like, if there is heavy execution inside the subprogram,
the main program "forgets" about some data inside the loop.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: shell scripting: help appreciated

2006-07-04 Thread [EMAIL PROTECTED]@mgedv.net
 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Atom Powers
> Sent: Monday, July 03, 2006 5:40 PM
> Cc: freebsd-questions@freebsd.org
> Subject: Re: shell scripting: help appreciated
> 
> On 7/3/06, [EMAIL PROTECTED]@mgedv.net <[EMAIL PROTECTED]> wrote:
> 
> >
> > if i change the line
> > /bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
> > to
> > echo /bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
> > the program loops for all records in the foo.conf correctly.
> >
> > if i remove the "echo" keyword, the sub-script get's executed,
> > but the shell terminates as if there were lesser records in
> > the foo.conf file!
> 
> 
> try:
> 
> eval /bin/sh -c "subprogram.sh $h_val1 $h_val2 $h_opt1";
> 
> 

well, even changing to "/bin/sh -c subprogram.sh" without passing
any parameters (everything is taken now from the environment, the
program still stops after reading lesser records from the input
file as there are :-(
the shell returnvalue is being checked after the subprogram returns
and i get all the messages after the subprogram inside the loop, too.
so it's not an error-exit or something like that. it's just as if there
were lesser records for the input to the loop.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


shell scripting: help appreciated

2006-07-03 Thread [EMAIL PROTECTED]@mgedv.net

short and weird problem description (from my point of view):
/bin/sh stops working correctly with a content-controlled do-loop.


the shell-script layout is as follows:
(it's not that trivial, just to show the meaning)
---
/test/foo.conf (originally ~60 lines):
test1   testval1optional_testval1
test2   testval2optional_testval2

/test/foo.sh (this is the original loop code):
cat "$g_dir_etc/compile.lst"|\
sed -e 's-^ *--g'|\
sed -e 's-^ *--g'|\
grep -v '^#'|\
sed -e 's-#.*$--g'|\
grep -v '^$'|\
while read gh_name gh_src gh_srcdir
do

/bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;

done;

/test/foo_sub.sh:

---

if i change the line
/bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
to
echo /bin/sh -c subprogram.sh $h_val1 $h_val2 $h_opt1;
the program loops for all records in the foo.conf correctly.

if i remove the "echo" keyword, the sub-script get's executed,
but the shell terminates as if there were lesser records in
the foo.conf file!
i scripted as many debug messages as possible, for every loop
they get executed and there are no errors/etc... happening.
and interestingly, the execution stops always on the same record!
if i comment out some records of my foo.conf, the sub-shell gets
executed for more records.
it seems like something with a buffer or somewhat, but i'm not
a debugger/c-guru, so i don't know where to start here... maybe
i'm using a wrong technique for looping?

some facts:
conf-file is readable and doesn't change during execution
the scripts also don't change during exec
we're running on 6.1-RELEASE with 2GB RAM and a XEON 2.8
no errors/warnings during exec-time from kernel or daemons
fs is fine, fsck is happy! everything runs /bin/sh.
the whole scripts runs currently ~45min.
if i change the subshell to an empty script with just "hi i'm here"
and "exit 1;" the loop works for all records in the .conf file.

any ideas, what the hell is going on here?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: a secure equivalent to rcmd() and rexec() ?

2006-06-30 Thread [EMAIL PROTECTED]@mgedv.net
> I need to send data to a command line on another machine, but 
> popen-ing an ssh 
> session seems like a rather inferior method, because there is 
> no way to 
> (portably) access the command's stderr...
> 
not sure if this is the answer you want, but:
what if you tunnel the rcmd/rexec commands through an
encrypted tunnel? you could use pf and stunnel to redirect
traffic, maybe that helps. it's obviously not a development
solution but an administrative, maybe working one ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: /etc/ttys typo?

2006-06-29 Thread [EMAIL PROTECTED]@mgedv.net
> 
> # status Must be on or off.  If on, init will run the getty program on
> #the specified port.  If the word "secure" appears, this tty
> #allows root login.
> #
> 
> 
> but isn't it like, if i change from secure to insecure, that root
> is NOT allowed to log in anymore directly from this terminal?
> (of course, i ran into that problem and had to cd-boot ;-) )
> 

/rollback!

i'll stop drinking, sorry for the noise (man, it's 28°C in here...)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


/etc/ttys typo?

2006-06-29 Thread [EMAIL PROTECTED]@mgedv.net


# status Must be on or off.  If on, init will run the getty program on
#the specified port.  If the word "secure" appears, this tty
#allows root login.
#


but isn't it like, if i change from secure to insecure, that root
is NOT allowed to log in anymore directly from this terminal?
(of course, i ran into that problem and had to cd-boot ;-) )

have fun & code!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: need help w/ simple bash script

2006-06-27 Thread [EMAIL PROTECTED]@mgedv.net
 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of dw
> Sent: Tuesday, June 27, 2006 2:02 PM
> To: freebsd-questions@freebsd.org
> Subject: need help w/ simple bash script
> 
> Hi all,
> 
> I am trying to write a simple bash script that will collate 
> pkg_version 
> reports from all of my servers to generate centralized HTML 
> reports. To 
> format the output, I am trying:
> 
> # REPORT=`pkg_version -v`
> 
> But when I "echo $REPORT", I get:
> 
> Xaw3d-1.5E_1 = up-to-date with port apr-db42-1.2.7_1 = 
> up-to-date with 
> port autoconf-2.13.000227_5 = up-to-date with port autoconf-2.59_2 = 
> up-to-date with port automake-1.9.6 = up-to-date with port 
> bash-3.1.17 = 
> up-to-date with port cvsup-without-gui-16.1h_2 = up-to-date with port 
> db41-4.1.25_3 = up-to-date with port.
> 
> When what I want is:
> 
> Xaw3d-1.5E_1 = up-to-date with port
> apr-db42-1.2.7_1 = up-to-date with port
> autoconf-2.13.000227_5 = up-to-date with port
> autoconf-2.59_2 = up-to-date with port
> automake-1.9.6 = up-to-date with port
> bash-3.1.17 = up-to-date with port
> cvsup-without-gui-16.1h_2 = up-to-date with port
> db41-4.1.25_3 = up-to-date with port
> ...
> ...
> ...
> 
> 
> I've also tried:
> 
> for LINE in `pkg_version -v`; do echo $LINE; done
> 
> but that's even worse; then I get:
> 
> Xaw3d-1.5E_1
> =
> up-to-date
> with
> port
> apr-db42-1.2.7_1
> =
> up-to-date
> with
> port
> autoconf-2.13.000227_5
> =
> up-to-date
> with
> port
> autoconf-2.59_2
> =
> up-to-date
> with
> port
> ...
> ...
> ...
> 
> I know I figured out a technique once before, but I'm banging my head 
> against a wall right now. Thanks for any help.
> 
> -DW
> 
> 
> 


why not just try

pkg_version -v |while read h_line
do
echo "$h_line" >TO SOMEWHERE
done;


you'd be even able to do something like
pkg_version -v |grep -v 'up-to-date with port'|while read h_line
do
blah
done;


have fun ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


random(4) confusions

2006-06-19 Thread [EMAIL PROTECTED]@mgedv.net

hi,

if i run man 4 random, i'll get the following:

 The kern.random.sys.burst variable instructs the kernel thread that
pro-
 cesses the harvest queue to tsleep(9) briefly after that many events
have
 been processed.  This helps prevent the random device from being so
com-
 pute-bound that it takes over all processing ability.  A value of 0
 (zero) is treated as infinity, and will only allow the kernel to pause
if
 the queue is empty.  Only values in the range [0..20] are accepted.

if i try to read/set this setting, sysctl returns:
sysctl: unknown oid 'kern.random.sys.burst'

what's wrong, my kernel or the manpage?
[6.1-RELEASE/i386]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Getting Source Code after Installing the Software

2006-06-19 Thread [EMAIL PROTECTED]@mgedv.net

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Mayo, Richard A RDECOM CERDEC STCD SRI
> Sent: Monday, June 19, 2006 2:14 PM
> To: 'freebsd-questions@freebsd.org'
> Subject: RE: Getting Source Code after Installing the Software
> 
> Can you simply tell me the name of the tar ball on the CD?
> 


DID ANYBODY LOOK ON THE SENDER ADDRESS OF THIS ORIGINAL POSTING!? 
--> [EMAIL PROTECTED] <--

I BET THERE ARE SEVERAL GUYS WHO KNOW HOW TO
INSTALL THE SOURCE OF FREEBSD AT THE US ARMY!

BUT IF NOT [i'll prepare a bill for bush upon that if he comes to town ;-)]:

put the correct cd into your ATA-CDROM and then:

mkdir -p /cdrom
mount /dev/acd0 /cdrom
cd /cdrom/`uname -r`/src
export DESTDIR=/
./install.sh
cd /
umount /cdrom

and now there should be more in /usr/src.

have fun and don't threaten anybody or spy on anybody with these systems!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


mtree(8): bug/compatibility with flags

2006-06-12 Thread [EMAIL PROTECTED]@mgedv.net

hi,

played around with mtree to save/restore directory/file
permissions/owner/flags on demand.

current "save" method is:
mtree -c -i -n -x -p $h_dir -k type,flags,mode,uid,gid,link >$h_file;

current "restore" method is:
mtree -U -e -n -q -x -p $h_dir -k type,flags,mode,uid,gid,link <$h_file;

save works perfectly, changing back uids and modes works, too.

the problem: if you do this after you saved the mtree:
chflags schg /any_mtree_file

you have to run the mtree-restore twice, because mtree tries to set
the mode 1st (which fails because of schg), and then removes the schg flags.
so on the 2nd run, the mode would be set, but this is odd ;-)

could it be better if mtree restores the permissions as they are
listed by the keywords?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


/dev nodes population errors with GELI/bsdlabel

2006-06-11 Thread [EMAIL PROTECTED]@mgedv.net

well. i'm quit sure, it's a little bit complicated to explain
what i did and what i figured out while i was doing it ;-), but:

short description:
attach->mount->umount->detach->attach->mount of GELI-encrypted
filesystems does not work correctly if the fs is on a bsdlabel-
partition inside the geli-provided device (/dev/???.eli).
after detach, the bsdlabel-created devicefiles /dev/???.elia
are left and after re-attach, they get duplicated (SAME NAME)
inside /dev.

the long version:

the hardware is as follows:
intel P4, 2.4, 768MB RAM
ad0 (my root disk): a SEAGATE 40GB UDMA-100 disk
ad4 (my test disk): a HITACHI 400GB UDMA-133 disk

i installed 6.1-RELEASE on ad0 as follows:
ad0s1a: /
ad0s1b:  (not used currently)

the test-disk i originally configured using:

dd if=/dev/random of=/dev/ad4 bs=1m;
dd if=/dev/random of=/ad4.key bs=1024 count=256;
geli init -v -P -a AES -l 256 -K /ad4.key -s 4096 /dev/ad4;
geli attach -p -k /ad4.key /dev/ad4;
bsdlabel -w /dev/ad4.eli;
newfs -m 0 -o space /dev/ad4.elia;
mount -o rw,noatime /dev/ad4.elia /test

now, without storing any data on /test, everything seemed
to be ok. df showed the ~373GB being available on /test, nice.
playing around with the volume i also mounted/unmounted it.

umount /test;
geli detach /dev/ad4;

works fine. /dev/ad4.eli and /dev/ad4.elia were removed.

attaching the disk again with (with auto-detach enabled!):
geli attach -d -p -k /ad4.key /dev/ad4

and mounting it with:
mount -o rw,noatime /dev/ad4.elia /test

and finally again unmounting it with:
umount /test;

should automatically detach the device.
and indeed, this action is being logged to console/dmesg
from GELI as soon as i unmount it.

now, checking the files in /dev i STILL find a /dev/ad4.elia,
but /dev/ad4.eli is gone.

if i try to re-attach the GELI-disk, i get the file
/dev/ad4.eli back and i get 2 instances of /dev/ad4.elia,
which renders the device unusable.

this behaviour cannot be corrected until a reboot.

changing the /test disk from bsdlabel-layout to:
dd if=/dev/random of=/dev/ad4 bs=1m;
dd if=/dev/random of=/ad4.key bs=1024 count=256;
geli init -v -P -a AES -l 256 -K /ad4.key -s 4096 /dev/ad4;
geli attach -p -k /ad4.key /dev/ad4;
newfs -m 0 -o space /dev/ad4.eli;
mount -o rw,noatime /dev/ad4.eli /test

works fine and attach->mount->umount->detach (manual and auto)
behaves well and can be performed many times...

if there's some further interest on that by someone, i probably
can add some outputs/geli-debugs later. (box not networked now)


ps: don't cc me, i'm on the list...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Recommendation for 1000BASE-SX card?

2006-06-01 Thread [EMAIL PROTECTED]@mgedv.net
> ATM, we are using the onboard controller (Broadcom BCM5704C 
> wired to the

just a hint: be really careful of what kind of broadcom-chip
you'll get - some are could be not/bad supported by bge(4)/bce(4).
(check the archives/PRs on that).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


HELP! booting usb-flashdisk fails

2006-05-31 Thread [EMAIL PROTECTED]@mgedv.net

whenever i boot from my self-created bootable
usb-stick, it fails with the following error
from boot2:

-
Invalid label
Invalid label
No /boot/loader

FreeBSD/i386 boot
Default: 0:fd(0,a)/boot/kernel/kernel
Invalid Label
No /boot/kernel/kernel
-

i also tried the paths
0:da(0,a)/boot/kernel/kernel
0:ad(0,a)/boot/kernel/kernel
without success.

hardware used: (FreeBSD 6.1-RELEASE):
Motherboard: GigaByte GA-8SIMLP
Flash-Disk0: Kingston Data Traveler 2.0 256MB
Flash-Disk1: Corsair Water-Resist Flash 512MB

created a bootable usb-drive using:
fdisk -BI /dev/da0
bsdlabel -w -B /dev/da0s1
newfs -m 0 -o space -n /dev/da0s1a

then i installed the base-package and the GENERIC
kernel into /dev/da0s1a, and ensured that the
kernel is really to be found at /boot/kernel/kernel.

i also tried this with the same errors:
bsdlabel -w -B /dev/da0
newfs -m 0 -o space -n /dev/da0a
(os installation the same as above)

i tried this with both usb-sticks, both of them fail.
trying them on a HP-Server works perfectly to the root-
login.

the bios supports booting from:
USB-FDD, USB-ZIP, USB-CDROM and USB-HDD.
i tried all of them. also, i set the boot-priorities
to only boot HDD-0 and removed all other drives.
obviously, no success.

btw, booting from a real hdd/cdrom works.

any really smart ideas on this?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


pf: changing tables with rules

2006-05-21 Thread [EMAIL PROTECTED]@mgedv.net

is it possible to write pf.conf rules, that will add matching
packets to tables? if yes, can someone post an example for me?

thx in advance ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


pf: changing tables with rules

2006-05-20 Thread [EMAIL PROTECTED]@mgedv.net

is it possible to write pf.conf rules, that will add matching
packets to tables? if yes, can someone post an example for me?

thx in advance ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: /bin/sh: wildcard expansion fails

2006-05-19 Thread [EMAIL PROTECTED]@mgedv.net
> Incidentally, it is operating as documented (pathname expansion isn't
> listed as performed on redirection targets), and explicitly allowed by
> the POSIX standard.

but /bin/sh could accept <*txt until there's more than one file matching
after expansion. if that's the case, an error like <*blabla: invalid
argument
could be raised.

not that i see this as a real problem, it's just a convenience-thing ;-)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


/bin/sh: wildcard expansion fails

2006-05-16 Thread [EMAIL PROTECTED]@mgEDV.net

i know things like "cat *lst|wc", but i don't want to type them.
when i try to use wildcards with "<" or ">" in /bin/sh, it fails:

my input (only one file with this name exists in the current dir):
wc <*lst

/bin/sh's output:
cannot open *lst: No such file or directory

is there a way to configure /bin/sh for "more/better" expansion?
btw, with csh it works fine ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Trimming Whitespace From Beginning and end of Text Lines

2006-05-12 Thread [EMAIL PROTECTED]@mgEDV.net
 
> > sed -i -e 's/^[[:space:]]*' -e 's/[[:space:]]*$//' file ...

why not use just (you can change the "-" separator to "/" as above):
sed -e 's-^ *--g' -e 's- *$--g'

usage examples:
-> cat file| sed ... >file1
-> echo $variable| sed ... |grep xy
-> if [ "`echo $xy|sed ...`" = "blabla bla" ]; then ...

cu...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


kern.randompid: jot generation senseful?

2006-05-09 Thread [EMAIL PROTECTED]@mgEDV.net
[asked on -security before, but no answer, maybe here's more traffic ;-)]

hi,

is a random pid generation really a security enhancement?

if yes, would it make sense to setup something like:
--> sysctl kern.randompid=`jot -r 1 500 2000`
in cron to be executed every X mins/hrs?

and finally, what are the recommended minimum (security)
and maximum (performance) values for kern.randompid?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Logs not being saved (/var/log/messages, etc)?

2006-05-09 Thread [EMAIL PROTECTED]@mgEDV.net

> The usual system logs such as /var/log/messages are not being saved.
> /var/log/messages does not exist, but /var/log/messages.0 
> (the old rotated
> version) does.
if theres a rotated log, there should be a source for, too.
check permissions on /var/log (eg. schg-flag) maybe there's
some odd reason for syslogd not being able to write to it.
also, try creating an empty file (touch /var/log/messages;
chmod o-r /var/log/messages) and restarting syslogd.
you can test logging with the logger-command.

if your box is not private (for you only):
did you check, if someone removed the file? check for logins,
network sessions, strange users with uid 0 in master.passwd,
change-date of files in at least /etc. if anything looks strange,
change your root-pw, shutdown unnecessary daemons, and take the
box off the net if it's possible ,-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Shared Library Error

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net

> I did "ldconfig -R" and "ldconfig -m /usr/local/lib" but I still get
> the error message.

> So, how would you explicitly do with that if you get:
> [EMAIL PROTECTED] ~]$firefox
> /libexec/ld-elf.so.1: Shared object "libgmodule-2.0.so.600" not found,
> required by "libgtk-x11-2.0.so.600"

if an executable is linked dynamically, it needs loading shared libraries.
ldconfig is a way to define, where and in which order to find and load them.
also have a look on ldd (man ldd).

eg. you can do ldd libgtk-x11-2.0.so.600 in the dir where it resides,
and find out, which files are missing. then check the other library
for correctness and if it's really a shared library (not a symlink
or somethink like that).

try researching it a little bit ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Shared Library Error

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net

> How do I check/modify ldconfig settings? Would you give me some 
> examples?

! man ldconfig
ldconfig -r
ls -l /etc/ld*
ls -l /var/run/ld*
echo $LD_LIBRARY_PATH

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FTPd recommendation?

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net

 

>What are people using for their ftpd these days?   I am looking 
>for something
>easy to initiailize, configure, and is very secure.

you definitely look for vsftpd (vsftpd.beasts.org)
you'll find it in the ports ;-)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Shared Library Error

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net

> If I do
> [EMAIL PROTECTED]:~$locate libgmodule-2.0.so.600
> 
> then I get
> /usr/local/lib/libgmodule-2.0.so.600
> 
> but actually the "libgmodule-2.0.so.600" is not in that directory.

try running ldconfig -R to rescan the directories
and check you ldconfig settings

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: encrypted file sharing bsd<-->winxp/2k3 [SOLVED]

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net

[original post from 10/2005... better late than never!]
 
we have been searching for a proper solution to encrypt
filesharing data between a windows client and a freebsd
fileserver (because freebsd provides a good solution for
disk encryption --> GELI). we wanted to use them as simple
network drives (because somtimes software needs that).

vpn and hardware solutions (like encrypting NIC's) have
been ruled out because of the investment or the effort
and interoperability of these solutions. webdav, ftp,
etc... have been ruled out because of the amount of
services/configuration you need on the server and because
of the behaviour in windows (it's never acting as a real
network mapped filesharing folder).

our choices (after some test/research) are: SMB over SSL.

the solution is as simple as it should be with small
networks that still have an requirement to encrypt data:

on the fileserver you install samba, and let it bind only
to the loopback adapter (eg. 127.0.0.1:10139).
next you install stunnel on the server and let it tunnel
the real ip's port 139 (eg. 192.168.10.1:139) back to
127.0.0.1:10139/tcp.

on the client you have to install the microsoft loopback
network adapter and give it a real and static ip address,
that is NOT in your network (and hopefully will never be.
in our example 10.232.232.232).
for testing. remove all bindings except tcp/ip to this
adapter (like ms filesharing).
now install stunnel on your client, configure it like to
map as a client from the loopback adapter's (10.232.232.232:139)
to the fileservers ip/port (192.168.10.1:139).

define automatic startup for stunnel and samba on your
server and start the services. on your client you also
install the stunnel service to run on system startup.

finally, you have to map a network drive:
just use "net use X: \\10.232.232.232\"
and if everything went fine, you have a new drive X: like it
would have been shared by a windows box.

this configuration works perfectly for us! the only requirement
is that you know how stunnel and samba work (at least from the
administrator's view) and that you know your network.
we didn't use hostnames in this example only for readability.
if you want hostnames, don't forget to setup a proper hosts/dns.

oh yes, using port 445 was NOT working because as soon as ms
starts, it binds itself to 0.0.0.0:445 and therefore you can't
bind anything else to this port. (we didn't find a way to tell
ms to only bind port 445 to specific addresses, if someone knows
how, let us know!)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: wanted: hp-ux glance pendant [SOLVED]

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net
> > 
> > > Systat doesn't like it if it has no stdin; adding a "  > > to your commandline should make it behave.
> > 
> > adding your suggestion fixes the problem, but i'd like to run it w/o
> > enabling any user keystrokes/input to systat. tried /dev/null and an
> > empty file, obviously w/o success -(
> > any further ideas?

> Dump it to a file and "tail -f" the file in the console?

ok, but if i want this to be up at reboot, i again need some
real stdin i can give to systat, which then will dump/tail.

anyway, systat is (besides of it's behaviour when detached
from a terminal) definitely a glance pendant (not all the
nice functions, but at least the vmstat page gives an idea
of what's goin' on).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD 6.0 compat with DL320 G4

2006-05-04 Thread [EMAIL PROTECTED]@mgEDV.net
 
> You may get lucky and get a DL320 G4 that does not have the
> specific Broadcom chip in it.

not sure, but maybe you can specify at least the chipset you
DON'T want in your order (hp should be able to figure it out
using the serial#, and this no. is on the boxes.
the order way would be: check for avail., ask your dealer(s) for
some sn#'s for devices you want, let them check (or check on your
own with hp for the chipset) and order the box (i guess at least
a charge-no. should fit, they don't change the chips all 8hrs).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: 6.1-RC2: strange kernel panic! [SOLVED]

2006-05-03 Thread [EMAIL PROTECTED]@mgEDV.net
 
original error:
> panic: kmem_malloc(4096): kmem_map too small: 335544320 total allocated
kernel panic issue seems to be solved by changing our memory disk
from malloc(9) backed to a swap-backed disk.

thx 4 helpin', guys!

and yes, i could have tested it because this was already in the archives
(shame on me) ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: wanted: hp-ux glance pendant

2006-05-03 Thread [EMAIL PROTECTED]@mgEDV.net

> Systat doesn't like it if it has no stdin; adding a "  to your commandline should make it behave.

adding your suggestion fixes the problem, but i'd like to run it w/o
enabling any user keystrokes/input to systat. tried /dev/null and an
empty file, obviously w/o success -(
any further ideas?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: wanted: hp-ux glance pendant

2006-05-03 Thread [EMAIL PROTECTED]@mgEDV.net

> I'm not familiar with glance, but have a look at systat, specifically,
> the vmstat screen.

well, thx for the hint. the tool indeed looks nice, and curious as i am,
i monitored some action with it. i started it with
"systat -vmstat 1 >/dev/ttyv9 &"
to get the output to a non-shelled terminal and watch the stats on another
screen. right now, the only process currently still working on the system
is the monitor tool itself:

top output:
last pid: 51158;  load averages:  1.12,  1.03,  1.01
up 0+09:40:19  19:00:57
21 processes:  2 running, 19 sleeping
CPU states: 69.9% user,  0.0% nice, 30.1% system,  0.0% interrupt,  0.0%
idle
Mem: 297M Active, 1393M Inact, 137M Wired, 92M Cache, 104M Buf, 83M Free
Swap: 4096M Total, 500M Used, 3596M Free, 12% Inuse

  PID USERNAME  THR PRI NICE   SIZERES STATETIME   WCPU COMMAND
60297 root1 1260  1816K  1256K RUN221:45 99.02% systat
50917 root1  960  6088K  2348K select   0:00  0.00% sshd
  284 root1  960  1284K   684K select   0:00  0.00% syslogd
50921 root1  960  6088K  2408K select   0:00  0.00% sshd
50920 root1   80  1712K  1232K wait 0:00  0.00% sh
  590 root1   80  1304K   660K nanslp   0:00  0.00% cron
51109 root1   50  2016K  1740K ttyin0:00  0.00% vi
  538 root1  960  1212K   440K select   0:00  0.00% usbd
50924 root1   80  1712K  1224K wait 0:00  0.00% sh
51158 root1  960  2268K  1524K RUN  0:00  0.00% top
  581 root1  960  3356K  1328K select   0:00  0.00% sshd
51157 root1   50  1268K   904K ttyin0:00  0.00% getty
  632 root1   50  1268K   464K ttyin0:00  0.00% getty
  634 root1   50  1268K   464K ttyin0:00  0.00% getty
  631 root1   50  1268K   464K ttyin0:00  0.00% getty
  636 root1   50  1268K   464K ttyin0:00  0.00% getty
  635 root1   50  1268K   464K ttyin0:00  0.00% getty
  633 root1   50  1268K   464K ttyin0:00  0.00% getty
  630 root1   50  1268K   464K ttyin0:00  0.00% getty
51107 root1   80  1712K  1268K wait 0:00  0.00% sh
  256 root1  960   500K   284K select   0:00  0.00% devd


is this normal? it will at least render the figures inaccurate, not?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


wanted: hp-ux glance pendant

2006-05-03 Thread [EMAIL PROTECTED]@mgEDV.net

does anybody know some handy text-console-tools,
which run under freebsd and produce performance
outputs like glance does under hp-ux?
top isn't well covering things like disk-io,
memory usage, etc...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: 6.1-RC2: strange kernel panic!

2006-05-03 Thread [EMAIL PROTECTED]@mgEDV.net
 
> Don't you think you should test it instead of guessing? :-) I suggested
> it because it *is* a possibility (that is why I have it in my kernel).
yes, but doesn't it make sense to find memory consuming things
before adding more?
btw. how can we check for such things?

> Are you sure you are using swap backing and not malloc?
nope, i'm not sure if it was that, but -M was passed to mdmfs,
so malloc(9) was used. we changed the code to swap-based, let's
see if that fixes our problem.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD 6.0 compat with DL320 G4

2006-05-03 Thread [EMAIL PROTECTED]@mgEDV.net

> I have a DL320 G4 in the rack and the thing panics under 6.1-RC1
> when more than a few K of data is sent over the bge interface.  I
> haven't tried 6.0-RELEASE on it.  Just make sure you can return it
> if it doesen't work.

did you ever try to install win2k/2k3 on it and apply all fw-patches
from hp to the box? you also could try the fw-upgrade-cd, which is
avail as iso-download on hp.com. the NICs also have upgradeable fw,
check for this (if you didn't ;-))
further, you could check for some special settings, or boot your sys
from the cd, configure the NIC and run some tests (w/o installation
or customization).
what i also wouldn't rule out is a possible hw-defect on your box
(or an older/incompatible chipset revision) even if it works proper
under MS (you tried that, haven't you ;-)?).

beyond you can see some stats from our box so you're probably able to
compare your system to it. the box has been cold-booted before running
an ftp-transfer of 5 and 20mb as a GET and then a transfer to another
host using put (also 5 and 20mb). all run under 6.1-RC2.

ifconfig:
bge0: flags=8843 mtu 1500
options=1b
inet6 fe80::215:60ff:feaa:39d2%bge0 prefixlen 64 scopeid 0x1 
inet 192.168.134.3 netmask 0xffe0 broadcast 192.168.134.31
ether 00:15:60:aa:39:d2
media: Ethernet autoselect (1000baseTX )
status: active

some netstat's (i removed sections with all being 0):
tcp:
29512 packets sent
17196 data packets (24848556 bytes)
0 data packets (0 bytes) retransmitted
0 data packets unnecessarily retransmitted
0 resends initiated by MTU discovery
7228 ack-only packets (23 delayed)
0 URG only packets
0 window probe packets
5072 window update packets
16 control packets
25699 packets received
8647 acks (for 24848565 bytes)
7 duplicate acks
0 acks for unsent data
14825 packets (21555935 bytes) received in-sequence
0 completely duplicate packets (0 bytes)
0 old duplicate packets
0 packets with some dup. data (0 bytes duped)
2258 out-of-order packets (3296680 bytes)
0 packets (0 bytes) of data after window
0 window probes
0 window update packets
0 packets received after close
0 discarded for bad checksums
0 discarded for bad header offset fields
0 discarded because packet too short
9 connection requests
0 connection accepts
0 bad connection attempts
0 listen queue overflows
0 ignored RSTs in the windows
9 connections established (including accepts)
14 connections closed (including 0 drops)
4 connections updated cached RTT on close
4 connections updated cached RTT variance on close
0 connections updated cached ssthresh on close
0 embryonic connections dropped
8647 segments updated rtt (of 8473 attempts)
0 retransmit timeouts
0 connections dropped by rexmit timeout
0 persist timeouts
0 connections dropped by persist timeout
0 keepalive timeouts
0 keepalive probes sent
0 connections dropped by keepalive
8489 correct ACK header predictions
14785 correct data packet header predictions
0 syncache entries added
0 retransmitted
0 dupsyn
0 dropped
0 completed
0 bucket overflow
0 cache overflow
0 reset
0 stale
0 aborted
0 badack
0 unreach
0 zone failures
0 cookies sent
0 cookies received
0 SACK recovery episodes
0 segment rexmits in SACK recovery episodes
0 byte rexmits in SACK recovery episodes
0 SACK options (SACK blocks) received
2148 SACK options (SACK blocks) sent
0 SACK scoreboard overflow
udp:
17 datagrams received
0 with incomplete header
0 with bad data length field
0 with bad checksum
0 with no checksum
8 dropped due to no socket
7 broadcast/multicast datagrams dropped due to no socket
0 dropped due to full socket buffers
0 not for hashed pcb
2 delivered
11 datagrams output
ip:
25733 total packets received
0 bad header checksums
0 with size smaller than minimum
0 with data size < data length
0 with ip length > max ip packet size
0 with header length < data size
0 with data length < header length
0 with bad options
0 with incorrect version number
 

RE: 6.1-RC2: strange kernel panic!

2006-05-02 Thread [EMAIL PROTECTED]@mgEDV.net
 
> Your kernel ran out of memory.  Either you are using a workload that
> is too heavy for your current settings, or there is a memory leak
> somewhere in a kernel subsystem you are using.
> Try to increase VM_KMEM_SIZE_MAX in your kernel, e.g.
> options VM_KMEM_SIZE_MAX=524288000  #500MB
> You may need to increase it further.

i'm not sure, but probably this does not solve our problem. this system
is used as a compilation host only (currently) and therefore there are
no permanently running things like databases, huge daemons, etc... only
ssh and syslog is up in userland. so the main question to me is, where
the memory goes on this server, and how i can prevent this type of leak.
(and even maybe help you fixin' it ;-)

our current settings are (default in GENERIC):
vm.kmem_size: 335544320
vm.kmem_size_max: 335544320

the compilation system uses a 350MB swap-based memory-disk for compilation,
the whole disks are encrypted using GELI (AES256). network traffic is low
(only ssh commandline stuff, no huge transfers).

when i issued the "du -sk" the panic occurred.

5min ago, the system panic'd again, this time some more was logged:
(originally, there have been >200 of these messages, numbers change,
error=same)
g_vfs_done():md0[WRITE(offset=346742784, length=6144)]error = 28
g_vfs_done():md0[WRITE(offset=346750976, length=8192)]error = 28
g_vfs_done():md0[WRITE(offset=346761216, length=6144)]error = 28
g_vfs_done():md0[WRITE(offset=346767360, length=6144)]error = 28
g_vfs_done():md0[WRITE(offset=346773504, length=6144)]error = 28

this time the panic occurred while transferring data from the hdd's to
the md-device:

panic: kmem_malloc(4096): kmem_map too small: 335544320 total allocated
Uptime: 1h13m18s

is there any way (which is suitable for a non-c-guru like me) how i can
at least monitor, which statements cause the memory leaks? givin' it more
memory could only raise the uptime, because at this time there are no
permanently running processes except the os and ssh.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Intel SE7520BD2 motherboard

2006-05-02 Thread [EMAIL PROTECTED]@mgEDV.net

> - Second integrated NIC: Marvell Yukon EC88E8050 - nothing about this  
<..>
we're using the same driver (from marvell directly) under 6.1-RC2 and
it works smoothly. you only have to cp if_myk.ko to your kernel dir,
and load it with loader.conf or later on with kldload... (we have an
intel SE7320VP2D2 board, should be exactly the same chipset from marvell).

take care for the following issue: intel has some ipmi-remote-lan-console
stuff, which configures an ip address and sends arp-requests if you
activate it or not. there are non-public ipmi-tools available from 
intel support, if you encounter such behaviour.

- Intel ICH5R SATA controller. Also not explicitly noted in hardware  
notes, at least not in 'Disk controllers' section. Couldn't find  
anything definitive by googling. I'm not interested in possible RAID  
features, would it work if I just connected a single SATA disk to this  
controller?
it's not really supported, but you can use atacontrol to write good
metadata (again, thx 2 soren ;-)) and get this thing running (sw-raid).
we have an ICH6R inside of a hp dl320 g4, works well, except pulling
hdd's and replacing them while being up, will render the new disk unknown
until a reboot has occurred (raid sync has to be done manually, but works).

our board works fine (except a current issue with a malloc-panic, but i'm
sure that's an issue of configuration, not supported hardware ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


6.1-RC2: strange kernel panic!

2006-05-02 Thread [EMAIL PROTECTED]@mgEDV.net

hi together!

this is the 4th time the server died since last week (and the 1st time we
catched the error!).
it happened during an "du -sk ." of some large directory structure.

panic: kmem_malloc(4096): kmem_map too small: 335544320 total allocated

any ideas on this? this system should go live soon, so we definitely need to
fix this!


the dmesg/bootlog of the system:

/boot/kernel/kernel text=0x4a8ee8 data=0x97ae0+0x4eb0c
syms=[0x4+0x63aa0+0x4+0x7b0d7]
/boot/kernel/umass.ko text=0x5034 data=0x488+0x4 syms=[0x4+0x7f0+0x4+0x811]
/boot/kernel/if_myk.ko text=0x2c738 data=0x13c8+0x4
syms=[0x4+0x1d00+0x4+0x198]
loading required module 'libmbpool'
/boot/kernel/libmbpool.ko text=0xd2c data=0x10c syms=[0x4+0x390+0x4+0x2f4]
/boot/kernel/geom_eli.ko text=0x8bf4 data=0x3a8+0x10
syms=[0x4+0xc50+0x4+0xd31]
loading required module 'crypto'
/boot/kernel/crypto.ko text=0x16df8 data=0x6d8+0x1ac
syms=[0x4+0x13e0+0x4+0x12d8]
loading required module 'zlib'
/boot/kernel/zlib.ko text=0x70bc data=0x410+0x19d0
syms=[0x4+0x7e0+0x4+0x67a]
/
Booting [/boot/kernel/kernel]...   
/boot/kernel/acpi.ko text=0x42ed4 data=0x2280+0x10f0
syms=[0x4+0x7ad0+0x4+0xa709]
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.1-RC2 #0: Sun Apr 30 09:42:38 UTC 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
module_register: module uhub/umass already exists!
Module uhub/umass failed to register: 17
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Xeon(TM) CPU 2.80GHz (2793.01-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf43  Stepping = 3
 
Features=0xbfebfbff
  Features2=0x641d>
  AMD Features=0x2010
  Logical CPUs per core: 2
real memory  = 2147274752 (2047 MB)
avail memory = 2096517120 (1999 MB)
ACPI APIC Table: 
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 24-47 on motherboard
kbd1 at kbdmux0
acpi0:  on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0:  on acpi0
acpi_throttle0:  on cpu0
pcib0:  port 0xcf8-0xcff on acpi0
pci0:  on pcib0
pci0:  at device 0.1 (no driver attached)
pcib1:  irq 16 at device 2.0 on pci0
pci1:  on pcib1
pcib2:  irq 16 at device 3.0 on pci0
pci2:  on pcib2
myk0:  port
0xdf00-0
xdfff mem 0xdedfc000-0xdedf irq 16 at device 0.0 on pci2
myk0: Ethernet address: 00:0e:0c:6a:a6:40
pcib3:  at device 28.0 on pci0
pci3:  on pcib3
amr0:  mem 0xddff-0xddff irq 24 at device
1.0 on pci3
amr0:  Firmware 713Q, BIOS G401,
64MB RAM
uhci0:  port 0xcf00-0xcf1f irq 16 at device
29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0:  on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1:  port 0xcf80-0xcf9f irq 19 at device
29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1:  on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
pci0:  at device 29.4 (no driver attached)
pci0:  at device 29.5 (no driver
attached)
ehci0:  mem 0xdecffc00-0xdecf irq 23
at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
usb2: EHCI version 1.0
usb2: companion controllers, 2 ports each: usb0 usb1
usb2:  on ehci0
usb2: USB revision 2.0
uhub2: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 4 ports with 4 removable, self powered
umass0: Kingston DataTraveler 2.0, rev 2.00/1.00, addr 2
pcib4:  at device 30.0 on pci0
pci4:  on pcib4
pci4:  at device 2.0 (no driver attached)
em0:  port
0xee80-0xeebf mem 0xdefa-0xdefb irq 17 at device 3.0 on pci4
em0: Ethernet address: 00:0e:0c:6a:a6:41
isab0:  at device 31.0 on pci0
isa0:  on isab0
atapci0:  port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.1 on pci0
ata0:  on atapci0
ata1:  on atapci0
pci0:  at device 31.3 (no driver attached)
acpi_button0:  on acpi0
atkbdc0:  port 0x60,0x64 irq 1 on acpi0
atkbd0:  irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on
acpi0
sio0: type 16550A, console
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
fdc0:  port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on
acpi0
fdc0: [FAST]
pmtimer0 on isa0
orm0:  at iomem 0xc-0xc7fff on isa0
ppc0: parallel port not found.
sc0:  at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x100>
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
Timecounter "TSC" frequency 2793013356 Hz quality 800
Timecounters tick every 1.000 msec
acd0: CDROM  at ata1-slave UDMA33
amrd0:  on amr0
amrd0: 381469MB (781248512 sectors) RAID 1 (optimal)
amrd1:  on amr0
amrd1: 381469MB (78124

RE: FreeBSD 6.0 compat with DL320 G4

2006-05-02 Thread [EMAIL PROTECTED]@mgEDV.net

> What was your experience like with 6.0-RELEASE and the dl320 g4? I've
> had a quote back on that model so could be near to actually getting
> some hardware for once :)

we didn't really run 6.0-RELEASE on the system, as the 6.1-BETAs had
been out when we bought the server. therefore not really man exp. on
this.

for ted's request, here's the dmesg ;-)

-
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.1-RC2 #0: Sun Apr 30 09:42:38 UTC 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
ACPI APIC Table: 
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz (3391.52-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf43  Stepping = 3
 
Features=0xbfebfbff
  Features2=0x649d>
  AMD Features=0x2000
  Logical CPUs per core: 2
real memory  = 1073688576 (1023 MB)
avail memory = 1041743872 (993 MB)
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 24-47 on motherboard
ioapic2  irqs 48-71 on motherboard
kbd1 at kbdmux0
acpi0:  on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x908-0x90b on acpi0
cpu0:  on acpi0
pcib0:  on acpi0
pci0:  on pcib0
pcib0: no PRT entry for 0.31.INTA
pcib1:  at device 1.0 on pci0
pci5:  on pcib1
pcib2:  at device 0.0 on pci5
pci6:  on pcib2
bge0:  mem
0xfdff-0xfdff irq 24 at device 1.0 on pci6
miibus0:  on bge0
brgphy0:  on miibus0
brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX,
1000baseTX-FDX, auto
bge0: Ethernet address: 00:15:60:aa:39:d2
bge1:  mem
0xfdfe-0xfdfe irq 25 at device 1.1 on pci6
miibus1:  on bge1
brgphy1:  on miibus1
brgphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX,
1000baseTX-FDX, auto
bge1: Ethernet address: 00:15:60:aa:39:d1
pcib3:  at device 0.2 on pci5
pci9:  on pcib3
pcib4:  at device 28.0 on pci0
pci2:  on pcib4
uhci0:  port
0x1000-0x101f irq 16 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0:  on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1:  port
0x1020-0x103f irq 17 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1:  on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2:  port
0x1040-0x105f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
usb2:  on uhci2
usb2: USB revision 1.0
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3:  port
0x1060-0x107f irq 19 at device 29.3 on pci0
uhci3: [GIANT-LOCKED]
usb3:  on uhci3
usb3: USB revision 1.0
uhub3: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0:  mem 0xfbef-0xfbef03ff
irq 16 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4:  on ehci0
usb4: USB revision 2.0
uhub4: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
umass0: USB Flash Disk, rev 2.00/2.00, addr 2
pcib5:  at device 30.0 on pci0
pci1:  on pcib5
pci1:  at device 2.0 (no driver attached)
pci1:  at device 2.2 (no driver attached)
pci1:  at device 3.0 (no driver attached)
isab0:  at device 31.0 on pci0
isa0:  on isab0
atapci0:  port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x500-0x50f irq 7 at device 31.1 on pci0
ata0:  on atapci0
ata1:  on atapci0
atapci1:  port
0x1080-0x1087,0x1088-0x108b,0x1090-0x1097,0x1098-0x109b,0x10a0-0x10af mem
0xfbee-0xfbee03ff irq 17 at device 31.2 on pci0
ata2:  on atapci1
ata3:  on atapci1
acpi_tz0:  on acpi0
atkbdc0:  port 0x60,0x64 irq 1 on acpi0
atkbd0:  irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0:  irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model Generic PS/2 mouse, device ID 0
sio0:  port 0x2f8-0x2ff irq 3 flags 0x10 on acpi0
sio0: type 16550A
fdc0:  port 0x3f2-0x3f5 irq 6 drq 2 on acpi0
fdc0: [FAST]
pmtimer0 on isa0
orm0:  at iomem
0xc-0xc7fff,0xc8000-0xcc7ff,0xee000-0xe on isa0
ppc0: parallel port not found.
sc0:  at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
Timecounter "TSC" frequency 3391523707 Hz quality 800
Timecounters tick every 1.000 msec
acd0: CDROM  at ata0-master UDMA33
ad4: 76319MB  at ata2-master SATA150
ad6: 76319MB  at ata3-master SATA150
ar0: 76319MB  status: READY
ar0: disk0 READY (master) using ad4 at ata2-master
ar0: disk1 READY (mirror) using ad6 at ata3-master
Trying to mount root from ufs:/dev/ar0s1a

-

___
freebs

RE: FreeBSD 6.0 compat with DL320 G4

2006-04-30 Thread [EMAIL PROTECTED]@mgEDV.net

just for info: our dl320 g4 also has bge interfaces, and
they work very well under 6.1-RC1 (even BETA4 was ok).
but our server has been bought 2 months ago, maybe there's
a newer/different chipset in it.
we also have a dl320 g2 being heavily used as lan switches
monitor, this server also has bge interfaces and had no
problem since 1 year capturing and analyzing more than
26GB/day (avg) of nw-data on the 2nd interface and serving
more than 4GB/day (avg) on the primary one (both IPv4 only).

c ya ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


pkg_create: directory-permissions: bug or feature?

2006-04-28 Thread [EMAIL PROTECTED]@mgEDV.net

hi,

the packaging-system (pkg_create, pkg_add) uses the tar
file format for creating/installing packages and some
special files inside the tar.
everything is really fine for me, except the handling
of directories, especially if they're empty! these dir's
never get installed!
if they're not empty, their modes/owners are not being
taken care of and they get installed with the values from
the current user (mostly root) and the current umask.

because of any packaging getting really weird, it does not
make sense to issue hundreds of @mode or @exec chown commands
inside the packing-list. also, i know it's possible to write
install-scripts for everything which also changes the
permissions after installing, but if the stage is setup
correctly, why take care for this twice?

can someone explain, why file-owners/modes, which are set
inside the tarballs are being extracted correctly, and the
directories not?

br & cu...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD 6.0 compat with DL320 G4

2006-04-28 Thread [EMAIL PROTECTED]@mgEDV.net
 
> RAID support on the DL320 G4 is broken.  HP uses Adaptec
> firmware and Adaptec has not provided Soren programming info
> on their metadata format, as he requested.

hi,
we're using 6.1-RC1 on a DL320 G4 with raidctl, which perfectly
fit's our needs. the metadata being written by the bios-fw of the
onboard-controller (adaptec) is really not readable by the os, but
this doesn't prevent us from having our os being installed on raid1.
you only have to boot freebsd, go to the shell, use raidctl to create
an ar0 using ad4 and ad6 and then install the os directly onto ar0.
even booting is not an issue.
[->thx 2 soren, he pointed us in the right direction upon this :-)]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD 6.0 compat with DL320 G4

2006-04-27 Thread [EMAIL PROTECTED]@mgEDV.net

> Our vendor preference is HP, if anyone could share their experience
> with the following products (in regards of network/sata support and
> anything else mentioning):
>
> HP DL140 G2
> HP DL145 G2
> HP DL320 G4
> HP DL360 G4

we tried dl320 g2, g3, g4, dl380 g3 with sata/ciss drives,
1-4gb ram, P4/XEON, DUAL-XEON with freebsd 5 and 6.
as of the *bsd's, freebsd has the best support for the
hp DL*s. sata support is not given for all embedded raid-
controllers but you can still use raid 1 functionality
using raidctl. hdd failures can render the system hang for
3-5sec's on sata devices but after this timeout, everything's
fine. rebuild is sometimes only possible by os-command, pluggin'
in the new drive is sometimes not enough ;-)

nw/chipset support is working (at least on all machines we use).
no performance issues, except you configure as router and you use
many different irq's for all interfaces (only occurred on a machine
with 8 interfaces).

thermal zone / ipmi support is not really
close to the vendors ideas and sometimes produces wrong
numbers, but if you don't want to set fan-speed or check
temp. on all mentioned devices, it's fine.

also, system management like (red-power fail, red-fan fail, etc...)
is not really talking to the os and vice versa, therefore you'll
have to check for errors like this on your own.

furthermore, bios/fw upgrades can sometimes be really annoying,
if you don't have usb-boot-support you'd run into troubles because
hp only delivers them for some specific os's and freebsd is not on
the list.

btw. if somebody reads this and thinks: hey, bullshit i know a way
of doing this better and it works fine with my DL, please let me
know!

best regards and good luck w. the hw :-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: upcoming release 6.1: old version of some core components

2006-04-12 Thread [EMAIL PROTECTED]@mgEDV.net

did i ever mention "i love communities!" ;-) 
well, 1st of all, thx 2 all the people who gave it a whirl and
went deeper into cvs as i would ever do (i'm definitely not a
dev ;-), btw. that was my reason for asking this on the list )

2nd, the thing alex brought up is very confusing, because it
seems, that security fixes which are related to zlib 1.2.3 have
been applied to 1.2.2#FREEBSD-VERSION and the rest (?whatever it
is?) of the changes have not been applied (if the're any).
from my point of view (compatibility and transparence come to my
mind) shouldn't be the code as close as possible to the original
developed code for any library?
ok, we could discuss libjpeg here, but zlib should be a standard,
and it seems for some guys it's easier to implement the fixes instead
of upgrading to the new version.
i'm again sure, that the maintainer of fbsd-zlib knows why, but
to an "not-so-deep-in-c" guy like me, it's still confusing.
with openssl even i had problems replacing one version with another,
but looking at the security, i try to stay with some more or less
current version.

finally, for the userland stuff (goes into jails anyway, so no interference
with the os at all) i'll compile/get packages with newer versions, and
the os (hell, if someone is possible to insert malicious compressed
streams on my os, he can have the box at all ;-) ) stay's with the standards
being delivered with the release/stable versions.

does this sound smart for you?

ps: i had to stop writing this 3 times because of some odd customer,
please forgive some stupid wording in here ;-)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: upcoming release 6.1: old version of some core components

2006-04-11 Thread [EMAIL PROTECTED]@mgEDV.net
 
> I can't answer you main question, but I would say that you can bet your 
>shirt on the fact that there will be no known security issues in the 
> older packages.

> At least for openssl and openssh you can get latest versions through the 
> ports.  Not an option for everything -- I see no zlib for example and I 
> don't believe there's a standard cvs port either.

as for zlib i definitely know, that there are 2 security flaws, which can
lead to problems when invalid compressed data is feeded.

my problem also is not the installation of ports/packages/custom compiles,
it's more that the operating system components itself are linked against
these older libraries an therefore will contain bugs, which may have been
already solved.
i definitely don't want to install openssl twice on the same host, as this
make's no sense for me. if the os operates with the old version, security
is at that level at all, regardless of one or another userland-daemon having
a newer version being linked to.

whatever, i will use freebsd anyways, regardless of my main question getting
answered or not ;-)

br & cu...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


upcoming release 6.1: old version of some core components

2006-04-11 Thread [EMAIL PROTECTED]@mgEDV.net

hi together,

during testing the 6.1-BETA4 i found only one major thing
i really like to discuss on the list for my understanding.

why are some major parts of the os are not updated to the
current versions (see examples beyond)? code-improvements
and security-/functionality-fixes come to my mind here.

examples given:
zlib (v1.2.2, 10/2004; current 1.2.3, 07/2005)
openssl (v0.9.7e, 10/2004; current 0.9.7i, 10/2005)
openssh (v4.2p1, 01/2005, current 4.3p2 02/2006)

for openssh, the code-freeze of freebsd was before the
release of 4.3, this makes sense, but what about the rest?

br & cu...

ps: just reply 2 the list please...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: DL320 G3 Adaptec or Intel RAID?

2006-04-10 Thread [EMAIL PROTECTED]@mgEDV.net

> Feel free to correct me if I'm wrong here, the ICH6R is a software raid 
> controller and its not supported in FreeBSD. Atleast not in 5.X.

anyone working on a port/driver here or know something about it?
i've found a patch to ata-mk3 from Søren Schmidt (sos@) but i'm not sure,
what the state of this thing is and if it's the right stuff for me ;-(
also, i'd really appreciate loading modules instead of having custom
kernels on any of the machines (complicates upgrade-process)
br & cu

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


DL320 G3 Adaptec or Intel RAID?

2006-04-10 Thread [EMAIL PROTECTED]@mgEDV.net

hi,

we've got an hp proliant dl320 g3 with an embedded SATA-150
raid controller. loading 6.1B4 shows ad4 and ad6 as normal
disks but the RAID controller or the configured array is not
shown at all.

during POST the raid bios announces as:
"Adaptec Embedded SATA HostRAID BIOS V3.0-1 1255"

the embedded controller shows as:
"Controller #00: ICH6R HostRAID at PCI Bus: 00, Dev: 1F, Func: 02"

the configured array drive is shown something like:
"Array 0 - RAID 1: 76GB optimal"

can anyone tell if this adaptec/intel combination is supported
by freebsd in any way? the ICH6R is listed in the hw-section,
but the os doesn't find this special one.

br & cu

ps: just reply to the list, please.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


FU: mount_reiserfs: data corruption [was: GELI/UFS: strange datacorruption] [WORKAROUND]

2006-04-03 Thread [EMAIL PROTECTED]@mgEDV.net

well, it seems with some testing that the final solution
is to rsync the linux-station via network to the new box.
mount_reiserfs seems to mixup file contents while copying,
regardless of the tool used.
as i'm not a good c-developer, it doesn't make sense for
me and the community, to go deep into ddb/reiserfs stuff.
the versions being tested are:
FreeBSD-6.1-BETA4 and an P-ATA 400GB disk containing 2
reiserfs filesystems (s1, s3) created under SUSE8.2 using
reiserfs-tools v3.6.4.
br & cu...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


mount_reiserfs: data corruption [was: GELI/UFS: strange data corruption]

2006-04-03 Thread [EMAIL PROTECTED]@mgEDV.net

hi together, 1st the good news:
GELI is not the devil in the house!

testenvironment:
FreeBSD 6.1-BETA4 on Intel Server (X2.8, 2GB)

what has been done:
- created a new UFS2 partition on a intel SRCS16 w 400GB RAID1
- mount_reiserfs -o ro of a SuSE8.2 reiserfs-Partition (300GB data)
- copied some testdata

symptoms:
if i read the data with vi from the original disk (/dev/ad0s1)
which is mounted as reiserfs and read-only, the files are correct.
if i copy it with cpio -pdum to the local UFS2 fs, the data get's
corrupted.

tested with /etc/hosts on the original filesystem (get's mixed up
with contents of /etc/nsswitch.conf)

strange, uh? being very curious 'bout your ideas upon that ;_)

br & cu...

ps: extensive memory-tests have been done, hw seems to be ok.
really... i tell you!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: hunting for secure fileserver-connection!

2006-04-03 Thread [EMAIL PROTECTED]@mgEDV.net

> If you don't trust CIFS/Samba enough to be secure against local sniffers,
and
> you won't run IPsec, you're left with odd things like Sun's SecureNFS
software,
> only I doubt that's available for a FreeBSD fileserver.
that's what i was afraid of. ipsec would be great, if it was possible to
have it
setup itself against the server each time you login (maybe windows logon)
but theres
always a client software needed, and in most cases, you're not able to
access other
networks smoothly if connected.

> If you've got 1.5TB of storage, perhaps you should talk to Auspex or
NetApp and
> see what the NAS folk have to offer...
maybe you're right on that, but currently, we have to test the FreeBSD
thing, and
set it up (because the hw is already here...)



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


GELI/UFS: strange data corruption

2006-04-03 Thread [EMAIL PROTECTED]@mgEDV.net

hi,

the environment:
- Intel Server w 1 x XEON 2.8 / 2GB
- HW-RAID1 (Intel SRCS16 w 2xSeagate NL35 400GB)
- FreeBSD 6.1-BETA4
- GELI encryption of whole amrd0 with Sector-Size 4096
- ufs2 filesystems w Softupdates and Sector-Size 4096

the source:
- SuSE 8.2 reiserfs (3.6?) filesystem mounted ro

the target:
- the ufs2 fs mentioned above

content: 300GB

what happened:
created a geli-device with AES256 on amrd0
setup 3 partitions with bsdlabel on it:
  amrd0.elia: 4096MB BSD-rootfs
  amrd0.elib: 4096MB swap
  amrd0.elib: ~350GB data (the rest of the sectors)
installed bsd w boot from usb-drive (because of geli)
  kernel/bootloader on USB
  root-fs get's mounted from HDD
tried copying the data from the reiserfs disk using
  cd /olddata &&  find . | sort -n | cpio -pdvum /newdata

this step took 9hrs to complete.

the problem:
the count of files is exactly the same
cpio/syslog/dmesg logged absolutely no errors (not even warnings)
the files contain almost the same data, but at the beginning and
at the end of the files there is content mixed up from other files
that have been copied!

i compared plain-text files as well as binary files (database, executables)
and they ALL differ. not even 1 file is binary the same!

any ideas!?

br & cu...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


hunting for secure fileserver-connection!

2006-04-02 Thread [EMAIL PROTECTED]@mgEDV.net

hi 2 all gurus!

the scenario:
- freebsd-fileserver with encrypted HDD's (GELI) (1.5TB)
- windows (sorry for that, it's a requirement) as client

the quest:
- securely mount shared filesystems from the server from
  the windows client w/o being open to sniffers/network
  hacks (non-weak encryption required)
- files should be accessible like with windows-fileserver
  shares through UNC and/or drive-name(s)
- server and clients should share the same network. (no
  tunnelling etc...)
- authentication should be done against local defined users

what we don't want:
- VPN/IPSEC/... between the hosts
- webdav

we've been looking on solutions like secure nfs over tcp,
samba, etc... but except making it slower, there have been
no real good solutions until yet.

anybody out there, who has a good advice on that?

br & cu...

ps: i know it's crazy, but it should be possible, nope?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


intel server board: strange LAN problem [SOLVED]

2006-03-31 Thread [EMAIL PROTECTED]@mgEDV.net

the original problem was:
NIC1 was "missing" at all and PXE boot from this nic also did not work.

the solution for those who are interested in:

Intel SE7320VP2/SE7320VP2D2 has 2 onboard NIC's:
NIC1 (Marvell Yukon-Chipset)
NIC2 (Intel-Chipset)

FreeBSD 6 by default recognizes the intel-nic, which is shown as em0.
the 2nd nic needs an additional module from marvel yukon (if_myk.ko),
which then will enable and show the nic to freebsd.

the following steps have been successfully tested:

- download the nic driver for freebsd from (www.marvell.com/drivers/)
- install the if_myk.ko to /boot/kernel
- load the module via /boot/loader.conf or kldload.
- configure the interface with ("ifconfig myk0")
- get a new, fine 1GBit Ethernet Connection working ,-)

cu & have fun
---> if you have this board, you definitely will ;-|

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: intel server board: strange LAN problem!

2006-03-29 Thread [EMAIL PROTECTED]@mgEDV.net
 

> Check the BIOS that both interfaces are enabled.

they are.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


intel server board: strange LAN problem!

2006-03-29 Thread [EMAIL PROTECTED]@mgEDV.net

hi together!

our intel server board SE7320VP2D2 has 2 onboard LAN interfaces.
HW address .:40 and .:41.
ifconfig -a on freebsd only shows the 2nd interface (:41) as em0
and the 1st interface is missing completely, as in the dmesg.

any ideas on this? we need both interfaces, and this soon!
and i definitely want to run freebsd on it ;-)

tested (same symptoms) on:
FreeBSD 6.0-RELEASE GENERIC
FreeBSD 6.0-RELEASE [custom kernel, some modules removed, crypto() added]
FreeBSD 6.1-BETA4 GENERIC

"dmesg" of the BETA4-GENERIC:
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.1-BETA4 #0: Tue Mar 14 13:59:38 UTC 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
ACPI APIC Table: 
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Xeon(TM) CPU 2.80GHz (2793.02-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf43  Stepping = 3
 
Features=0xbfebfbff
  Features2=0x641d>
  AMD Features=0x2000
  Hyperthreading: 2 logical CPUs
real memory  = 2147274752 (2047 MB)
avail memory = 2096422912 (1999 MB)
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 24-47 on motherboard
npx0: [FAST]
npx0:  on motherboard
npx0: INT 16 interface
acpi0:  on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0:  on acpi0
acpi_throttle0:  on cpu0
pcib0:  port 0xcf8-0xcff on acpi0
pci0:  on pcib0
pci0:  at device 0.1 (no driver attached)
pcib1:  irq 16 at device 2.0 on pci0
pci1:  on pcib1
pcib2:  irq 16 at device 3.0 on pci0
pci2:  on pcib2
pci2:  at device 0.0 (no driver attached)
pcib3:  at device 28.0 on pci0
pci3:  on pcib3
amr0:  mem 0xddff-0xddff irq 24 at device
1.0 on pci3
amr0:  Firmware 713Q, BIOS G401,
64MB RAM
uhci0:  port 0xcf00-0xcf1f irq 16 at device
29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0:  on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1:  port 0xcf80-0xcf9f irq 19 at device
29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1:  on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
pci0:  at device 29.4 (no driver attached)
pci0:  at device 29.5 (no driver
attached)
ehci0:  mem 0xdecffc00-0xdecf irq 23
at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
usb2: EHCI version 1.0
usb2: companion controllers, 2 ports each: usb0 usb1
usb2:  on ehci0
usb2: USB revision 2.0
uhub2: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 4 ports with 4 removable, self powered
umass0: Kingston DataTraveler 2.0, rev 2.00/1.00, addr 2
pcib4:  at device 30.0 on pci0
pci4:  on pcib4
pci4:  at device 2.0 (no driver attached)
em0:  port
0xee80-0xeebf mem 0xdefa-0xdefb irq 17 at device 3.0 on pci4
em0: Ethernet address: 00:0e:0c:6a:a6:41
isab0:  at device 31.0 on pci0
isa0:  on isab0
atapci0:  port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.1 on pci0
ata0:  on atapci0
ata1:  on atapci0
pci0:  at device 31.3 (no driver attached)
acpi_button0:  on acpi0
atkbdc0:  port 0x60,0x64 irq 1 on acpi0
atkbd0:  irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0:  irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model IntelliMouse, device ID 3
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on
acpi0
sio0: type 16550A
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
fdc0:  port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on
acpi0
fdc0: [FAST]
pmtimer0 on isa0
orm0:  at iomem
0xc-0xc7fff,0xca800-0xcb7ff,0xcb800-0xcc7ff on isa0
ppc0: parallel port not found.
sc0:  at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
Timecounter "TSC" frequency 2793015526 Hz quality 800
Timecounters tick every 1.000 msec
acd0: CDROM  at ata1-slave UDMA33
amrd0:  on amr0
amrd0: 381469MB (781248512 sectors) RAID 1 (optimal)
amrd1:  on amr0
amrd1: 381469MB (781248512 sectors) RAID 1 (optimal)
da0 at umass-sim0 bus 0 target 0 lun 0
da0:  Removable Direct Access SCSI-0 device 
da0: 40.000MB/s transfers
da0: 246MB (503808 512 byte sectors: 64H 32S/T 246C)
Trying to mount root from ufs:/dev/da0s1a

"ifconfig -a" output:
em0: flags=8802 mtu 1500
options=b
ether 00:0e:0c:6a:a6:41
media: Ethernet autoselect
status: no carrier
lo0: flags=8049 mtu 16384
inet6 ::1 prefixlen 128 
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 
inet 127.0.0.1 netmask 0xff00 




___
freebsd-questions@freebsd.org mailing list
h

RE: USB external drive size limitations?

2006-03-25 Thread [EMAIL PROTECTED]@mgEDV.net

> Haha, its full of my backups from my previous operating system (fedora)
and
> now im going to have a fun time getting those files onto my new FreeBSD
> server!  Can someone recommend a course of action for me here?  Google
isn't
> really turning up anything interesting relating to size of external
drives.

some ideas:

check the fs-type & if possible the version of the fs on your usb-hdd
(maybe compat probs?)

try attaching the drive b4 you power-on the box and boot

try to explicitly (mount_xy and mount-args) mount the drive (ro!)

check if the builtin hdd inside your drive can be attached directly
on the ata/s-ata/whatever bus inside your machine; copy directly

attach your usb-hdd to a working machine, copy via lan

check for bios/fw-updates for your hw, maybe usb-support get's better

hth & good luck!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: kernel optimization

2006-03-25 Thread [EMAIL PROTECTED]@mgEDV.net
> I was wondering what strategy people use to 'KNOW' which drivers and
options 
> can me commented out/deleted when configuring the kernel file. i.e. how
does 
> one "know" he does not need the 'amr' driver (I knowI don't need this one,

> but the idea relates to a number of other settings in the config).

some hints:

boot your machine with GENERIC, it won't load stuff it doesn't really need.
(yes, it may take more mem, but if you have more than 128MB RAM, ignore it
;-)
kernel compilation is usually done if you MISS something in GENERIC which is
for example a specific piece of hw, loadable modules (kldload,
loader.conf.local)
are also a good choice avoiding kernel compilation.

read your dmesg. all main drivers/systems loaded are listed here. take care
for their parents/childs (a disk is attached to a bus which resides on a
controller...)

read the man pages for the drivers (man amr shows what it was written for if
you
don't know it)

check the web for e.g.
http://www.google.com/search?hl=en&lr=&q=freebsd+man+amr
and read the doc's you can find.

br...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: favorite ATA/SATA hard disk brand?

2006-03-23 Thread [EMAIL PROTECTED]@mgEDV.net

well, we bought seagate NL35 series hdd's, because
they're meant to run 24h/d. AND... they give 5 years
warranty (which sounds much better for me than the usual
3 years from the others...)

whatever, good luck with your disks!


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"