Re: number of partitions

2008-05-16 Thread Robert Jesacher


On 15.05.2008, at 19:09, Roland Smith wrote:

On Thu, May 15, 2008 at 09:36:06AM -0600, [EMAIL PROTECTED]  
wrote:


looks like I cannot create more than 8 partitions at boot time on a  
single

disk.
how to overcome this problem ?
thanks


Use fdisk to make up to 4 slices on the disk; e.g. ad0 gets ad0s1 to  
ad0s4.

you can then create up to 6 usable partitions on each slice.

Roland


if you are on 7.0 and your box is equipped for it (memory) you could -  
and probably should - give ZFS a try.
I use it w/o troubles and it really eliminates the partitioning (and  
other) hassles. Simply put: it is the next

big thing in storage ;-)

Have a look here: http://wiki.freebsd.org/ZFS

take care,
Robert
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: AAC driver. No kernel error messages for failed raid5?

2008-05-16 Thread Robert Jesacher


On 06.05.2008, at 22:02, Ed Maste wrote:


On Tue, May 06, 2008 at 12:44:02PM -0700, Chris St Denis wrote:


I pulled out one of the raid5 drives to test the functionality and
noticed that FreeBSD didn't seem to notice the disk failure at all. I
was expecting kernel messages about it, but got nothing.


This is missing functionality in the aac(4) driver.  For now about
the best you can do is regularly poll the status using Adaptec's CLI
tool arcconf.

-ED


The tool you need to look into is: sysutils/aaccli . I think arctool  
is only for arcmsr-devices.
unfortunately aaccli doesn't provide the possibility to use it with  
parameters, so you probably

need to use it with an expect-script.

On the adaptec 2410SA I activated the alarm feature in the  
controller bios, which helps me,
because its a home server but this will not help you if your server is  
sitting somewhere else.


Because of this limitation (and a few other things with the  
controller) I'm certainly looking for
an other solution. In my case a ZFS-based software RAID will suffice,  
but this might not be

desirable for you.

Take care  good luck,
Robert
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ZFS + gmirror: how?

2008-04-28 Thread Robert Jesacher
On 27/04/2008 20:44 Guus Houtzager wrote:
 Hi,
 
 I'm rather new to FreeBSD and I'm having trouble with ZFS and gmirror.
 I've used this guide to install FreeBSD 7 on ZFS:
 http://www.ish.com.au/solutions/articles/freebsdzfs
 This goes flawless, however, the /bootdir is still just /dev/ad01sa (in
 my case), so if that disk breaks, I still can't boot from ad1. So I
 thought I could just make a gmirror containing /dev/ad0s1a and ad1s1a
 and use that for /bootdir. This however does not work.
 What I did is:
 - gmirror load
 - gmirror label -v -b round-robin gm0 /dev/ad1s1a
 - newfs /dev/mirror/gm0
 - mount /dev/mirror/gm0 /mnt/tmp
 - dump -L -0 -f- /bootdir | (cd /mnt/tmp  restore -r -v -f-)
 - edit /etc/fstab and /mnt/root/etc/fstab: change all references to
 ad0s1a by /dev/mirror/gm0
 - echo 'geom_mirror_load=YES'  /boot/loader.conf
 - echo 'geom_mirror_load=YES'  /mnt/tmp/boot/loader.conf
 - reboot
 However: I can see the bootprocess starting first ZFS followed by a
 message saying it's waiting for GEOM gmirror to start, which it does
 after a little while and then I get a prompt where I can manually tell
 the system where the root filesystem is. And if I tell it
 zfs:system/root it does not work (my zpool is named system).
 Anyone know what I'm doing wrong and what's the best way to do this?
 Thanks in advance!
 
 PS: please CC me in any reply, as I'm not subscribed to this list. Thanks!
 
 Regards,


I'm not sure if this is the cause, but it looks like
/boot/zfs/zpool.cache might not be up to date or missing.

Once I had the same issue. You should boot up somehow (you can even use
the 7.0 install CD). Make sure you have the directory /boot/zfs and do a
zpool import. After this you should have a valid zpool.cache file
which you need to copy to your mirror device.

PLMK if this works for you as this is also my desired setup. I only
need to make the gmirror step tough ;-)

br,
Robert


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SCSI network

2008-03-31 Thread Robert Jesacher


On 31.03.2008, at 21:53, Walt Pawley wrote:

On 3/29/08 1:17 PM +0100, Wojciech Puchar wrote on SCSI network


they are all adaptec (ahc driver) controllers - manual says it can be
target as well as initiator


Others have been discussing the potential speed of such an
arrangement. I'm more concerned about SCSI bus addressing being
a problem. Perhaps the statement above means that each card can
have a distinct ID on the bus. My experience with SCSI is
pretty much limited to systems where the host computer is
hardwired as device 0. If these cards are like that, they'll
likely be pretty confused about who's who.


Usually you should be able to change the Host-ID (which is 7 per  
default), but
the real issue with SCSI is, that there is always an initiator which  
connects to
a target, although this can change (as you state) its not as easy as  
opening an

other network port.

Think of it as usb, you cannot hook 2 PC's together without some  
special device
in between (ok SCSI is a bit more flexible tough). The only things  
that popped up
on google were pretty much outdated (around 1998), so this will not  
really help
you. It looks like the guys played with this to overcome the fast- 
ethernet limit.


If you really need something fast, grab some used FC switches  
(Brocade) with
GBIC's equipped and some cheap HBA's (e.g. emulex or qlogic). In this  
scenario
you can run FC-IP which works well. There you can choose between  
1/2/4G per

sec depending on the money you want to spend (4G is way off limits!)

Personally I think this is a little overkill, although nice to play  
with. :-) If you need
a cheap solution why don't you equip you PC's with FireWire cards? But  
ask

somebody about the limitations there (IMHO you can make some sort of bus
connection, but  worst case it would be one-to-one connections).

br,
Robert
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Quick+easy port redirect

2008-03-29 Thread Robert Jesacher


On 29.03.2008, at 01:25, Tuc at T-B-O-H.NET wrote:

Hi,

Is there a quick/easy (cookbook?) way to do port
redirects. Basically I want that anything that leaves
a specific interface to any ip on port 80 go to
192.168.0.1 port 87.

I'm using ipfw for some other things so it has to
work and play well with that.

Thanks, Tuc



In case you want to try transparent proxying you need to look into  
firewalling.

I can only tell you how this would work with OpebBSD's PF since I use it
myself and quite like it. :-)

Have a look at pf.conf(5), but it should work like this (in /etc/ 
pf.conf):

+
int_if = em0

rdr on $int_if proto tcp from $int_if:network port { 80 } -  
192.168.0.1 port 87

+
In this example you need to specify your network interface as int_if  
(in my case it is em0)


If this doesn't suit your situation, you probably need to give us more  
information: The
kind of network setup you use (eg internal - firewall - external)  
and what needs to connect
to and from where. do you have a firewall solution in place (PF,  
ipfilter, ipfw)? And what do

you need to achieve?

br  good luck,
Robert
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Understanding Flags, Refs, Use, Expire in Routing Table

2008-03-28 Thread Robert Jesacher

Hi Daniel,

you find mostl of you questions answered in man netstat (the  
relevant passage is posted below)
The missing part is the expiry, which IMHO are the seconds, the ARP  
entry is valid (after this time a new arp request would be issued)


I hope this is the information you needed.

br,
Robert

+++
The routing table display indicates the available routes and their sta-
 tus.  Each route consists of a destination host or network, and  
a gateway
 to use in forwarding packets.  The flags field shows a  
collection of
 information about the route stored as binary choices.  The  
individual
 flags are discussed in more detail in the route(8) and route(4)  
manual

 pages.  The mapping between letters and flags is:

 1RTF_PROTO1   Protocol specific routing flag #1
 2RTF_PROTO2   Protocol specific routing flag #2
 3RTF_PROTO3   Protocol specific routing flag #3
 BRTF_BLACKHOLEJust discard pkts (during updates)
 bRTF_BROADCASTThe route represents a broadcast address
 CRTF_CLONING  Generate new routes on use
 cRTF_PRCLONINGProtocol-specified generate new routes on  
use

 DRTF_DYNAMIC  Created dynamically (by redirect)
 GRTF_GATEWAY  Destination requires forwarding by  
intermediary

 HRTF_HOST Host entry (net otherwise)
 LRTF_LLINFO   Valid protocol to link address translation
 MRTF_MODIFIED Modified dynamically (by redirect)
 RRTF_REJECT   Host or net unreachable
 SRTF_STATIC   Manually added
 URTF_UP   Route usable
 WRTF_WASCLONEDRoute was generated as a result of cloning
 XRTF_XRESOLVE External daemon translates proto to link  
address


 Direct routes are created for each interface attached to the  
local host;
 the gateway field for such entries shows the address of the  
outgoing
 interface.  The refcnt field gives the current number of active  
uses of
 the route.  Connection oriented protocols normally hold on to a  
single
 route for the duration of a connection while connectionless  
protocols
 obtain a route while sending to the same destination.  The use  
field pro-
 vides a count of the number of packets sent using that route.   
The inter-

 face entry indicates the network interface utilized for the route.
+




On 28.03.2008, at 00:39, Daniel Dias Gonçalves wrote:

I would like an explanation on each field it command netstat - rn,  
example:

Flags,Refs,Use,Expire
In Flags: UGS, UC, UHLW, UH
Somebody can explain me ?

Thanks,
Daniel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED] 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: A general purpose LDAP solution?

2008-03-25 Thread Robert Jesacher
You could follow one of the general purpose samba-ldap documentations
out there, because AFAIK samba is the most influencing service to depend
on ldap. I cannot recall what I used but you can have a look at:

http://gentoo-wiki.com/HOWTO_LDAP_SAMBA_PDC_Basic_Setup
http://www.samba-ldap.de/samba-3-pdc-mit-ldap.html

the first one covers gentoo, the latter is written in german... but you
get the point.

One suggestion from my side is to use a OU base instead of DC based if
you are using multiple (internet-)domains.

To specify who can use what service, you can use ldap query-filters (eg.
for apache create a group webusers and so on)

At tme moment I use openldap for web, mail (Postfix  cyrus-imap), samba
and a per user address-book. Kerberos (heimdal) and radius is also
possible, but I do not use it at the moment.

If you require it, I can provide you with more information or even
relevant parts of the config-files.

br,
Robert Jesacher




On 25/03/2008 14:38 Outback Dingo wrote:
 As would I also like to
 
 On Tue, Mar 25, 2008 at 8:11 PM, Trey Sizemore [EMAIL PROTECTED] wrote:
 
 On Mon Mar 24, 2008 04:58PM, Tim Judd wrote:
 Jon Theil Nielsen wrote:
 I asked this on freebsd-net@ but got no replies. So now I ask the same
 question here.

 Hi list!

  
I have speculated a lot about implementation of (Open)LDAP on my
sever. By I haven't yet found the right (and logical) way to do it.
I'm running FreeBSD 7.0-Release with some different server
 applications
- Samba PDC
- Virtual mail server (Postfix, MySQL, Courier-IMAP)
- VPN (currently with mpd4)
- Apache-2.2.8 web server (with PHP and MySQL)
I would like to implement LDAP for:
- authentication of UNIX/login users
- authentication of Samba users
- authentication/authorization of virtual mail users
For the first part, I got useful information from a previsous
 thread
(
 http://unix.derkeiler.com/Mailing-Lists/FreeBSD/questions/2008-02/msg01047.html
 )
and for the second part, i guess there is sufficient howtos to make
 it
work.
My biggest question right now is if is possible to combine all
 three
things in one data structure. And which in which order I should
 make
the different implimentions.
Excuse my total lack of understanding, but is it possible to have a
structure with a superior unit such as OU=some organization which
could contain several virtual domains and the actual doamin for my
PDC?
  
--
   Jon Theil Nielsen

 Oh, i forgot one more thing: I would also like to be able to
  authenticate VPN users the same way.
  --
 Jon Theil Nielsen

 It's easy to find out if LDAP is a global solution for you.  See if LDAP
 is an available option in each port's config.

 I just finished setting up a LDAP-based email system.  Samba is capable,
 unix logins are capable.  There's a good chance everything is.

 I liked the virtual part of everything, so I stopped after getting email
 working.  I didn't want to open up my system to all sorts of unix/samba
 logins that might exploit or give me problems.

 The email system I documented isn't ready for publishing.  I'm having
 some select friends review it and proofread it first.

 If there's any interest here, I will provide a 2nd publishing to the
 general public as a draft.  Not to be used exclusively yet.

 Jon, you should be able to get most if not all of it working though.

 --Tim
 I would like to see the documentation as well.

 --
 Cheers,
 Trey
 

 The universe is change; our life is what our thoughts make it.
 --Antoninus, Marcus Aurelius

 Linux valkyrie 2.6.22.17-0.1-bigsmp i686 GNU/Linux
  9:10am  up  11:11,  7 users,  load average: 0.98, 0.98, 1.06
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]