Re: Mutt Help

2007-09-30 Thread Daniel Bye
On Sun, Sep 30, 2007 at 05:54:37PM -0700, Rem P Roberti wrote:
> 
> Hi All...I am a newbie using Mutt, and I have Fetchmail running as daemon.  
> Fetchmail is doing its job, periodically retreiving my pop3 mail, but I am 
> so far unable to find the correct entry for the .muttrc file which will 
> result in Mutt automatically retrieving mail from fetchmail.  Any help 
> would be appreciated.

mutt can fetch mail from your POP3 server itself - without any need to
use fetchmail at all.

http://www.mutt.org/doc/manual/manual-4.html#ss4.10

If you need fetchmail for other reasons, then make sure it delivers 
messages to mutt's spoolfile.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpi4TGzQZtF9.pgp
Description: PGP signature


Re: using the date command

2007-10-01 Thread Daniel Bye
On Sun, Sep 30, 2007 at 07:54:48PM -0700, jekillen wrote:
> >
> >The removal of ntpdate is something I'll believe in when it happens.
> >ntpd -q is a superior drop-in replace for ntpdate when it's being run
> >from cron. OTOH if you run ntpd -q in place of ntpdate at boot (before
> >starting ntpd), it adds about 15 seconds to the boot-time for no
> >significant benefit.

Heheh! The threats do seem somewhat hollow these days...

> 
> Thanks for the info.
> So ntp, as I understand it, has to have time servers to reference, and 
> of course
> the system has to be connected to the  public network to contact the 
> time servers.
> Are there any security issues with ntp? Or, where can I find info on 
> security issues
> related to ntp?
> Update on original question related to the use of date in FreeBSD; I 
> finally brightened
> up and set the time in the bios.
> Jeff K

Provided you use sensible settings in your ntp.conf, you should come to no
harm using ntpd. Something like this works well for me:

driftfile /var/db/ntp.drift

restrict default ignore

restrict 127.0.0.1

server ip.ad.dre.ss
restrict ip.ad.dre.ss nomodify notrap nopeer noquery

restrict 10.37.125.0 mask 255.255.255.0 nomodify notrap


This config tells ntpd to use ip.ad.dre.ss as its synchronisation host,
and to restrict that host so that it cannot make any alterations to the
local machine's clock or to the state of the running ntpd. It also says
to allow hosts on my private network to synchronise against it, but 
again, to prevent them from making any changes to the state of the nptd
on the server.

There are many more options that may or may not be interesting - check out
www.ntp.org for plenty of useful information about configuring ntpd and
selecting a suitable set of synchronisation servers.

Dan

-- 
Daniel Bye

PGP Key: http://www.slightlystrange.org/pgpkey-dan.asc
PGP Key fingerprint: D349 B109 0EB8 2554 4D75  B79A 8B17 F97C 1622 166A


pgpn7YDpY40Pp.pgp
Description: PGP signature


Re: doing a minimal FreeBSD install

2007-10-02 Thread Daniel Bye
On Tue, Oct 02, 2007 at 01:59:55PM -0700, Rogelio Bastardo wrote:
> I'm looking to install only the bare essentials to FreeBSD and then
> install each program piece-by-piece afterwards.
> 
> To do this, do I just need the first FreeBSD 6 ISO?  Or can I get away
> with just the boot CD ISO and then install each port one-by-one?
> 
> (Basically, I just wanna build a Nagios server, and that requires
> very, very little)

A bit more work perhaps than you're willing or able to commit, but you
might be interested in MiniBSD - a set of scripts that enable you to 
pare down a base FreeBSD system to something very small indeed.

http://www.minibsd.org

It needs some practice to get it right, but the results are quite
useful when you get it right!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpmEA3YOb9Gg.pgp
Description: PGP signature


Re: What is affected by FreeBSD-SA-07:08.openssl ?

2007-10-04 Thread Daniel Bye
On Thu, Oct 04, 2007 at 10:32:20AM -0400, Duane Winner wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Alexandre Biancalana wrote:
> > Hi list,
> > 
> > A quick:
> > 
> > $ grep -lr SSL_get_shared_ciphers /usr/src 2> /dev/null
> > /usr/src/crypto/openssl/apps/s_client.c
> > /usr/src/crypto/openssl/apps/s_server.c
> > /usr/src/crypto/openssl/doc/ssleay.txt
> > /usr/src/crypto/openssl/doc/ssl/ssl.pod
> > /usr/src/crypto/openssl/ssl/ssl.h
> > /usr/src/crypto/openssl/ssl/ssl_lib.c
> > /usr/src/crypto/openssl/util/ssleay.num
> > /usr/src/secure/lib/libssl/man/ssl.3
> > 
> > Doesn't revel much about what is affected by this bug Have someone made
> > some deeper analysis about what is affected ?
> 
> Related question:
> 
> Would any ports which may have been built based on openssl libraries
> (apache, stunnel, etc.) need to be rebuilt after this openssl patch?

I would think it would be sufficient just to restart any such ports, 
rather than completely rebuild them, to ensure that the updated version
of the OpenSSL libs are loaded, and not the old broken ones.

However, it can't do any harm to rebuild, if you're that worried about it.

I'm sure someone will put me right if that's not the case, though.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpOhzBckvOyD.pgp
Description: PGP signature


Re: How to create a user account with the same permission as "root" ?

2007-10-11 Thread Daniel Bye
On Thu, Oct 11, 2007 at 07:34:54PM +0800, Erich Dollansky wrote:
> Hi,
> 
> FreeBSD is not Windows.
> 
> You cannot have another "root" in the system.

Yeah, you can. It's just a really bad idea. root and toor both have UID
and GID of 0 - giving them both superuser privileges. There is nothing
to prevent you from adding as many more UID/GID 0 users as your madness
compels you to. The only stricture is that they must all have different
names.

> 
> What you can do is the creation of the group "wheel" and put "william" 
> into this group.

Group wheel already exists - it is root's (and toor's) primary group.

William: log in as root and run this:

 # pw user mod -n william -G wheel

william will now be a member of wheel, and able to su root.

> Allow then all members of "wheel" to access the files needed by the 
> group "wheel".

This step shouldn't be necessary on a standard install, as membership
of group wheel confers access rights to all files owned by wheel.

> I would not do this as it creates many security wholes.

Er..? It is a standard technique for allowing certain users to su root
to perform system maintenance tasks. If I misunderstand your point,
Erich, please do explain.

> If you just want to do something as root without being root, use su.

For which, in FreeBSD, you need to be a member of group wheel anyway...
security/sudo doesn't have this prerequirement, and is a much more
flexible tool. But, that flexibility comes with a cost - you must 
configure it correctly, or you could end up shooting yourself in the
foot.

Dan

> 
> williamkow wrote:
> >Finally, I manage to setup X.org and then KDE 3.5.4 running on FreeBSD 
> >6.2-Release.
> >I created a user account named "william" and do not assign any group as 
> >I do not know what are the list of group name for me to select. To start 
> >KDE, i use command "kdm" but I can only logon using the newly created 
> >user name "william", but it do not have same permission/access rights as 
> >"root" account.
> >Please show on how to enable this user account, with the same permission 
> >as root ?
> >Thank you.

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpYtHYFFK7aX.pgp
Description: PGP signature


Re: apache mod_ssl chroot problem

2007-10-17 Thread Daniel Bye
On Wed, Oct 17, 2007 at 08:46:01PM +0700, Muhammad Reza wrote:
> Dear List.
> 
> I have problem running apache in chroot mode with ssl enable.
> Apache in chroot mode running fine without ssl enable, but when i try to
> start with mod_ssl enable, error occured with this message.
> 
> beastie#chroot /chroot/httpd /usr/local/apache2/bin/httpd
> Apache/2.2.6 mod_ssl/2.2.6 (Pass Phrase Dialog)
> Some of your private key files are encrypted for security reasons.
> In order to read them you have to provide the pass phrases.
> 
> Server beastie.mra.co.id:443 (RSA)
> Enter pass phrase:Apache:mod_ssl:Error: Private key not found.
> **Stopped
> 
> and with error log
> 
> [Wed Oct 17 13:37:25 2007] [error] Init: Private key not found
> [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218710120
> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
> [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218529960
> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
> [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218595386
> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
> [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218734605
> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
> [Wed Oct 17 13:38:32 2007] [error] Init: Private key not found
> [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218710120
> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
> [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218529960
> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
> [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218595386b
> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
> [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218734605
> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
> 
> If i escape from chrooted enviroment, apache with mod_ssl work fine 
> 
> beastie# /usr/local/apache2/bin/httpd
> Apache/2.2.6 mod_ssl/2.2.6 (Pass Phrase Dialog)
> Some of your private key files are encrypted for security reasons.
> In order to read them you have to provide the pass phrases.
> 
> Server www.example.com:443 (RSA)
> Enter pass phrase:
> 
> OK: Pass Phrase Dialog successful.
> 
> Is there something missing here, please enlight me.

The first thing that comes to mind - are your keys inside the chroot area
you want to run apache in?

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpi9bMgoI0Uh.pgp
Description: PGP signature


Re: Can login using root password, but not remotely with SSH

2007-10-22 Thread Daniel Bye
On Mon, Oct 22, 2007 at 02:21:04AM -0500, W. D. wrote:
> Brand new install of FreeBSD 6.2.  Can't log in with PuTTY.
> 
> Remote PuTTY:
> Access denied Using keyboard-interactive authentication. 
> 
> At computer terminal:
> PAM authentication error for root from 192.168.XXX.XXX 
> 
> Any ideas?

Default behaviour in FreeBSD is for SSH to disallow root login.
You can change that in /etc/ssh/sshd_config, but it's probably not a 
good idea. The sshd_config man page will tell you how, if you really 
want to.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpVlVemxEwG3.pgp
Description: PGP signature


Re: Dangers of using a non-base shell

2007-10-30 Thread Daniel Bye
On Mon, Oct 29, 2007 at 08:50:40PM +, Stephen Allen wrote:
> It's been drawn to my attention not to use bash from the ports 
> collection, because if one of it's dependencies (gettext or libiconv) 
> fails or is updated significantly, it could break, and prevent login. 

Hmm, I guess it *could* happen, but in the 8 years I have been using
bash on FreeBSD, it never *has* happened. Of course, that's not to say
that it never *will* happen... 

As long as you adopt a sensible approach to upgrading your installed
ports, then I don't think you'll go far wrong - portupgrade can be made
to rebuild dependent packages, so any significant change to libiconv 
can be picked up by all other packages that require it.

> The suggested solution was to use a base shell (such as sh) and append 
> 'bash -l' to .shrc to automatically enter bash.
> 
> The quite annoying side-effect is having to type 'exit' twice to get out 
> of a su shell or screen.

You could instead do something like this (untested!):

if (bash --version > /dev/null)
then
  exec bash
fi

which will replace your login shell with a bash, as long as bash can 
successfully run and display its version info. Then you only have one
shell to kill to log out.

> 
> Would it be a better idea to use the pre-compiled binary for bash?  And 
> if I did so, could I be alerted to updates as easy as using 'pkg_version 
> -v' when checking if any ports need updating?

Using a binary package will make no difference - it will still cause 
dependencies to be installed, just as if you built it from source. As
long as you take time to check which ports/packages need updating at any
particular time, and keep an eye on /usr/ports/UPDATING, then you shouldn't
go far wrong. If you are really worried about it, then you can build a
static bash, which you can then install on your / fs. Set WITH_STATIC_BASH
and you can put the resulting monolithic binary anywhere you like.

And yes, pkg_version -v will tell you which ports/packages are outdated,
whether you installed them from binary packages or from source. To get a
slightly clearer result, try

 # pkg_version -v | grep -v =

to only see outdated ports.

HTH

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Dangers of using a non-base shell

2007-10-30 Thread Daniel Bye
On Mon, Oct 29, 2007 at 08:50:40PM +, Stephen Allen wrote:
> It's been drawn to my attention not to use bash from the ports 
> collection, because if one of it's dependencies (gettext or libiconv) 
> fails or is updated significantly, it could break, and prevent login. 

Hmm, I guess it *could* happen, but in the 8 years I have been using
bash on FreeBSD, it never *has* happened. Of course, that's not to say
that it never *will* happen... 

As long as you adopt a sensible approach to upgrading your installed
ports, then I don't think you'll go far wrong - portupgrade can be made
to rebuild dependent packages, so any significant change to libiconv 
can be picked up by all other packages that require it.

> The suggested solution was to use a base shell (such as sh) and append 
> 'bash -l' to .shrc to automatically enter bash.
> 
> The quite annoying side-effect is having to type 'exit' twice to get out 
> of a su shell or screen.

You could instead do something like this (untested!):

if (bash --version > /dev/null)
then
  exec bash
fi

which will replace your login shell with a bash, as long as bash can 
successfully run and display its version info. Then you only have one
shell to kill to log out.

> 
> Would it be a better idea to use the pre-compiled binary for bash?  And 
> if I did so, could I be alerted to updates as easy as using 'pkg_version 
> -v' when checking if any ports need updating?

Using a binary package will make no difference - it will still cause 
dependencies to be installed, just as if you built it from source. As
long as you take time to check which ports/packages need updating at any
particular time, and keep an eye on /usr/ports/UPDATING, then you shouldn't
go far wrong. If you are really worried about it, then you can build a
static bash, which you can then install on your / fs. Set WITH_STATIC_BASH
and you can put the resulting monolithic binary anywhere you like.

And yes, pkg_version -v will tell you which ports/packages are outdated,
whether you installed them from binary packages or from source. To get a
slightly clearer result, try

 # pkg_version -v | grep -v =

to only see outdated ports.

HTH

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Undelivered Mail Returned to Sender

2007-10-30 Thread Daniel Bye
On Mon, Oct 29, 2007 at 05:14:44PM -0700, Rob Lytle wrote:
> >
> > From: "Rob Lytle" <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Date: Mon, 29 Oct 2007 16:21:41 -0700
> > Subject: Upgrading Xorg to 7.2- problems
> > Hi,
> >
> > I am sure I followed the /usr/port/Updating instructions to the letter.
> > But now when I try to bring up Xorg I get this error that it "cant find the
> > 'fixed font'" or no fixed font available, something like that.   I have
> > noticed that many of the fonts have somehow gone into oblivion.  They were
> > installed under /usr/X11R6/lib/X11/fonts, but they aren't under
> > /usr/local/lib/X11/fonts either.

You need to install x11-fonts/xorg-fonts (or a suitable subset). You should
be good to go after that.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpNdFlRY66Pb.pgp
Description: PGP signature


Re: ncftpput & ncftpget

2007-10-30 Thread Daniel Bye
On Tue, Oct 30, 2007 at 08:48:28AM -0400, Bill Banks wrote:
> What port should I make to get ncftpput?

ftp/ncftp3

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpLkDZpdZJmd.pgp
Description: PGP signature


Re: ssh

2007-10-31 Thread Daniel Bye
On Wed, Oct 31, 2007 at 03:23:57PM +0100, Michael Grant wrote:
> > Yeah, I misread your problem. Are you saying that you want to su to root,
> > but still have some variables set as they were on the account you sued from?
> > So you have a user named Michael, say, and you su to root, but when you ssh
> > you want Michael's .ssh to be the effective one?
> 
> Well sort of.  When I su, $HOME is set to my homedir and $USER set to
> mgrant.  This is fine.  However, ssh (when sued) doesn't read
> $HOME/.ssh, it reads /root/.ssh. And it's not defaulting to logging
> into the remote machine as $USER, it tries to log in as root.  It does
> this because it's hardwired in the code more or less as follows (I've
> extracted the relevant code from ssh.c):
> 
> original_real_uid = getuid();
> pw = getpwuid(original_real_uid);
> sprintf(buf, "%s/%s", pw->pw_dir, "ssh-config");
> read_config_file(buf);
> options.user = strdup(pw->pw_name);
> 
> Like I said, it seems like a bug to me.  Personally I would have done
> a getenv("HOME") and getenv("USER") myself instead of depending on the
> userid.  Probably they had good reason for doing it the way they did
> it.

Probably to do with the fact that both $HOME and $USER can be set by the
user to any arbitrary value:

[EMAIL PROTECTED]:~] --->$ echo $USER $HOME
daniel /home/daniel
[EMAIL PROTECTED]:~] --->$ USER=root
[EMAIL PROTECTED]:~] --->$ HOME=/root
[EMAIL PROTECTED]:/home/daniel] --->$ echo $USER $HOME
root /root
[EMAIL PROTECTED]:/home/daniel] --->$ cd
[EMAIL PROTECTED]:~] --->$ pwd
/root

Not so good for security!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpExmK4LDZ7U.pgp
Description: PGP signature


Re: Determining the number of files in a directory

2007-11-03 Thread Daniel Bye
On Sat, Nov 03, 2007 at 05:27:06AM -0700, White Hat wrote:
> This is probably a dumb question; however, I never let a little thing like 
> that bother me in the past.

Heheh! You and many more, my friend, myself absolutely included!

> Using FreeBSD-6.2 and Bash, how do I determine the number of files in a 
> given directory? I have tried all sorts of combinations using different 
> flags with the 'ls' command; however, none of them displays the number of 
> files in the directory.

 $ ls | wc -l

will show you how many files and directories in the current (target)
directory. To count just files, and exclude directories, you could try
something like

 $ find /target/directory -type f -print | wc -l

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpfFHUz0Kapy.pgp
Description: PGP signature


Re: Determining the number of files in a directory

2007-11-03 Thread Daniel Bye
On Sat, Nov 03, 2007 at 12:41:51PM +, Daniel Bye wrote:
> On Sat, Nov 03, 2007 at 05:27:06AM -0700, White Hat wrote:
> > This is probably a dumb question; however, I never let a little thing like 
> > that bother me in the past.
> 
> Heheh! You and many more, my friend, myself absolutely included!
> 
> > Using FreeBSD-6.2 and Bash, how do I determine the number of files in a 
> > given directory? I have tried all sorts of combinations using different 
> > flags with the 'ls' command; however, none of them displays the number of 
> > files in the directory.
> 
>  $ ls | wc -l
> 
> will show you how many files and directories in the current (target)
> directory. To count just files, and exclude directories, you could try
> something like
> 
>  $ find /target/directory -type f -print | wc -l

Except of course, that would descend into the subdirectories you're trying
not to count... Sorry - an object lesson in not hitting send before you've
tested what you scribbled.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpxwNPZjXDGB.pgp
Description: PGP signature


Re: fsck and memory filesytems (fsck_mfs: No such file or directory)

2007-11-05 Thread Daniel Bye
On Mon, Nov 05, 2007 at 05:00:06PM +, Christopher Key wrote:
> The problem is, I'm sure, is essentially identical to that described in,
> 
> http://www.mail-archive.com/[EMAIL PROTECTED]/msg21675.html
> 
> namely that the entry for the memory filesystem, /tmp, in /etc/fstab is 
> confusing fsck.  My /etc/fstab looks like,
> 
> # cat /etc/fstab
> # DeviceMountpoint  FStype  Options Dump
> Pass#
> /dev/ad8s1b noneswapsw  0   0
> /dev/ad8s1a /   ufs rw  1   1
> md  /tmpmfs rw,-s64m
> 2  2
> /dev/ad8s1f /usrufs rw  2   2
> /dev/ad8s1e /varufs rw  2   2
> /dev/ad8s1d /var/tmpufs rw  3   3
> /dev/mirror/gm0s1d  /svnufs rw  2   2
> /dev/mirror/gm0s2d  /data   ufs rw  2   2
> /dev/mirror/gm0s3d  /music  ufs rw  2   2
> 
> I can get the system to boot quite happily by carrying on into single 
> user mode and exiting, but I still get the same behaviour next reboot.
> 
> Does anyone have any suggestions?

mount_mfs(8), in the EXAMPLES section, says this:

 Create and mount a 32 megabyte swap-backed file system on /tmp:

   mdmfs -s 32m md /tmp

 The same file system created as an entry in /etc/fstab:

   md /tmp mfs rw,-s32m 2 0

Try setting the passno field (the last one) to 0, and see how that works.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpw4z8mZSrkD.pgp
Description: PGP signature


Re: strange error when building cups

2007-11-09 Thread Daniel Bye
On Fri, Nov 09, 2007 at 03:18:20PM +, Adam J Richardson wrote:
> Aryeh M. Friedman wrote:
> >-BEGIN PGP SIGNED MESSAGE-
> >Hash: SHA1
> >
> >Can some tell me what this means and how to fix it:
> >
> >===>   cups-pstoraster-8.15.4_1 depends on shared library: cups.2 -
> >not found
> >===>Verifying install for cups.2 in /usr/ports/print/cups-base
> >===>  cups-base-1.3.3 is forbidden: remote execution of arbitrary code.
> >*** Error code 1
> >
> >Stop in /FreeBSD/FreeBSD-current/ports/print/cups-base.
> >*** Error code 1
> >
> >Stop in /FreeBSD/FreeBSD-current/ports/print/cups-pstoraster.
> >*** Error code 1
> >
> >Stop in /FreeBSD/FreeBSD-current/ports/print/cups.
> >
> 
> Hi Aryeh,
> 
> I can't tell you about the error, but:
> 
> %pkg_info | grep cups
> cups-base-1.3.3 Common UNIX Printing System
> cups-pstoraster-8.15.4_1 Postscript interpreter for CUPS printing to 
> non-PS printers
> 
> Looks like the same versions. They do build ok. Perhaps a "make clean 
> distclean" will shake out the bugs?
> 
> 'Remote execution' is interesting. Do you use some sort of load balancer?

This means that there is a security flaw outstanding with the print/cups-base
package. It could potentially be exploited by an attacker to run arbitrary
code on your print server. 

The warning is being emitted by the following line in the print/cups-base 
Makefile:

FORBIDDEN=  remote execution of arbitrary code

The fix would be to find the vulnerability and patch it, or failing that,
contact the maintainer and see what he says. As a workaround, if you don't
care about the vulnerability, you can set NO_IGNORE in the make environment
and try again. ports(7) has more detail.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpi7uPpLhiOQ.pgp
Description: PGP signature


watchdog timeout (missed Tx interrupts) on 7-BETA2(i386)

2007-11-12 Thread Daniel Bye
Hi all,

$ uname -a
FreeBSD torus.slightlystrange.org 7.0-BETA2 FreeBSD 7.0-BETA2 #0: Sun Nov 11 
00:34:39 GMT 2007 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/TORUS  i386

nfe0:  port 0xe400-0xe407 mem 
0xf0105000-0xf0105fff irq 10 at device 10.0 on pci0

I'm seeing a lot of these:

nfe0: watchdog timeout (missed Tx interrupts) -- recovering

when the system is under heavy network load (my ports distfiles are NFS
mounted from another box, so trying to extract, e.g., the OpenOffice
source, is enough to cripple the box). When the demand for network
resources has calmed down again, it usually comes back up without any
further intervention.

My kernel is simply a pared-down version of GENERIC (that is, I have only
removed drivers that I don't need, and have added nothing to it). 

The same device worked adequately under 6.2-RELEASE with the nve
driver. It is only since moving to 7-BETA2 and its default nfe driver
that the problem has manifested.

Google shows that other people have had similar problems with the nfe
driver, but under 6.2-RELEASE on i386 and amd64, and no real solutions
are offered up in the archives (none that I found, anyway).

I saw a couple of suggestions that it might be down to the device sharing
and interrupt channel, but that's not the case here:

vmstat -i
interrupt  total   rate
irq0: clk2709144   1000
irq1: atkbd0   10079  3
irq5: nvidia0+192988 71
irq6: fdc011  0
irq8: rtc 346692128
irq10: nfe0+3300  1
irq11: pcm0 ohci0+ 93174 34
irq15: ata1   22  0
Total3355410   1239

If they're of any use or interest:

dmesg  -  http://catflap.slightlystrange.org/dmesg.txt
pciconf -vl-  http://catflap.slightlystrange.org/pciconf-l-v.txt
kernel config  -  http://catflap.slightlystrange.org/kernel.txt
sysctl -a  -  http://catflap.slightlystrange.org/sysctl-a.txt

I would appreciate any insights or hints as to what I might do to 
fix this.

Many thanks for your time,

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpvQY4Lfxq55.pgp
Description: PGP signature


Re: mysql ports

2007-11-23 Thread Daniel Bye
On Thu, Nov 22, 2007 at 10:23:01AM -0800, jekillen wrote:
> Hello;
> I have installed mysql51-client,  mysql51-server, and  mysql51-scripts.
> I looked for pkg_message in mysql51-scripts but there is none.
> Where do I get info on what this port has and what it does?

Take a look at the port's directory under /var/db/pkg. It should contain
files called `+COMMENT', `+CONTENTS' and `+DESC', which will tell you 
what you want to know.

HTH

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: RELENG_6_1 to RELENG_6_2 upgrade question

2007-11-26 Thread Daniel Bye
On Mon, Nov 26, 2007 at 11:20:39AM +, Bob Richards wrote:
> 
> I am currently running:
> FreeBSD 6.1-RELEASE-p20 #2
> 
> After reading the docs, it appears the procedure to upgrade from 6.1 to
> 6.2 is the following:
> 
> 1) Change:  default release=cvs tag=RELENG_6_1  to tag=RELENG_6_2
> in /usr/local/etc/cvsup/cvsupfile
> 
> 2) run cvsup /usr/local/etc/cvsup/cvsupfile to get the new base and
> kernel sources
> 
> 3) run portsnap fetch update to update the ports tree
> 
> 4) go through the procedure outlined in:
> file:///usr/share/doc/handbook/makeworld.html
> 
> This will leave me with  FreeBSD 6.2-RELEASE at the latest patch
> level for that release yes? 

Yes. You might prefer to wait a little while longer, and go straight
to 6.3, which is on its way soon.

> 
> I do NOT need to portupgrade -a since this is a minor version upgrade
> right?

Take a look at both /usr/src/UPDATING and /usr/ports/UPDATING before
you start - if there are any special cases, they will be noted here.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpaSaKRNVYGm.pgp
Description: PGP signature


Re: What does RELEASE-p8 mean?

2007-11-27 Thread Daniel Bye
On Tue, Nov 27, 2007 at 01:01:03PM -0600, Paul Schmehl wrote:
> Is there a page on the site that explains the version numbering system? 
> I'm trying to find out what RELEASE-p8 means (specifically what the -p8 
> means), and I can't seem to figure out where to find it.

I guess you're talking about 6.2-RELEASE-p8? It refers to the security
patch level - -p8 is the eighth patch to have been issued for 6.2-RELEASE.

Subscribe to security-notifications@ to be kept informed of when a new 
security patch is issued.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpqkkVWvq3Ox.pgp
Description: PGP signature


Re: dansguardian at boot time. +gateway server

2007-11-27 Thread Daniel Bye
On Tue, Nov 27, 2007 at 09:27:02PM +0530,   wrote:
> Hello
> I installed dansguardian , gave it's entry in my /etc/rc.conf
> squid_enable="YES"
> dansguardian_enable="YES"
> 
> I am getting error at the boot time dansguardian couldn't connected to
> parent proxy.  Whereas squid starts without error.
> I am running squid over port 3121 and dansguardian on port 8080.
> 
> After logging in and giving command "dansguardian" it starts without any 
> error.

It sounds as though they're either starting in the wrong order, or 
dansguardian is starting before squid has had a chance to settle.

You can check what order they're starting in by doing

 # rcorder /etc/rc.d* /usr/local/etc/rc.d/*

and looking through the output for squid and dansguardian. Squid should
appear earlier in the list. If they are starting in the correct order,
try turning on squid's debugging to see why it is taking so long to 
start.

If they're starting in the wrong order, you can either rename the
control scripts as Mark suggested, or you can utilise the rcorder(8)
mechanism. In the squid control script, you should have this block near
the top:

# PROVIDE: squid
# REQUIRE: LOGIN
# KEYWORD: shutdown

And in the dansguardian control script, you should have this:

# PROVIDE: dansguardian
# REQUIRE: NETWORKING SERVERS squid
# KEYWORD: shutdown


> Plus in linux I have /etc/rc.local configuration file which i use to
> run special commands after my linux boots,
> How to do the same with FreeBSD.

You can create /etc/rc.local if you want, and it will run at the right
time. However, it is lightly deprecated these days in favour of 
/usr/local/etc/rc.d, as used by the ports. For each custom startup job
you want to run at boot time, create an rcorder(8) style script in 
/usr/local/etc/rc.d. rcorder(8) gives you great flexibility over the
start order.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpE9k6Fsf8ta.pgp
Description: PGP signature


Re: Getting DHCP to 'update' DNS records locally

2007-11-29 Thread Daniel Bye
On Thu, Nov 29, 2007 at 03:09:00PM -0800, Clint Olsen wrote:
> Apologies if this isn't the correct forum.  I'd like to configure DNS on my
> home network but make it work simultaneously with DHCP.  So, when hosts are
> plugged into the network and issued an IP, DNS is updated to reflect the
> hostnames.  That way I can refer to all my machines by name in all
> databases and I can avoid hardcoding IP addresses.  I know Windows allows
> name-based recognition even in the instance you're using DHCP, but I'd like
> it to work more generally with any type of machine on the network.
> 
> The problem is, when I search for terms related to this, I get hits for
> DynDNS and all that stuff which is /not/ what I want.  I'm not trying to
> update a remote DNS record.  This is just a local thing.
> 
> If there's a lightweight DNS server that comes with a DHCP daemon, that
> would be fine too.  I just need to know where to start.

dns/dnsmasq does exactly what you want.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpUtxtTtfcmT.pgp
Description: PGP signature


Re: serious problems

2007-11-30 Thread Daniel Bye
On Fri, Nov 30, 2007 at 07:48:30AM +0100, Jack Raats wrote:
> Hi
> 
> While running make installworld my computer crashed. (FreeBSD 6.2-p9 kernel)
> At this moment the system misses some of the elf libs. Running in single 
> user mode and running make installworld again gives all kind of errors
> 
> Any leads to solve this problem??

It would be helpful to know what errors you are seeing. 

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpjPTEkgiCJh.pgp
Description: PGP signature


Re: What's the point of the shell choice in single user mode?

2007-12-01 Thread Daniel Bye
On Sat, Dec 01, 2007 at 02:15:26PM +0100, Erik Trulsson wrote:
> On Sat, Dec 01, 2007 at 04:44:27AM +, John Murphy wrote:
> > I've just successfully done the world and kernel upgrade from 7 beta2
> > to beta3. I've always had a mergemaster phobia, but it didn't seem too
> > bad this time. I thought I'd broken it after choosing /bin/tcsh as my
> > shell in single user mode. It grumbled about termcap (I think) and
> > then gave me a "simple shell" with a % prompt.
> > 
> > fsck and mount were unknown commands and even though I could change
> > directory to /usr or /home they were (apparently) empty! Scary!
> > I now realise it was because they were not mounted of course.
> > 
> > I'll know to always accept the suggested /bin/sh in future, but I was
> > wondering if the only reason a choice of a different shell is offered
> > is to scare the unwary.
> 
> On possible scenario is that /bin/sh has - somehow - been corrupted, deleted
> or otherwise made unusable.  In that situation it is very nice to be able to
> choose some other shell so you can at least try to fix the problem.

And some individuals even seem to prefer [t]csh over sh! I know, what's
that all about? ;-P (runs to a safe distance to watch the fireworks...)

John - you would have had the same experience had you selected sh -
only the root file system is mounted if you come up into single user,
which is why the installworld instructions tell you to mount all your
other local file systems. As for fsck and mount being unknown, I suspect
that's due to a very conservative initial PATH under tcsh, but as I
don't use it, I don't know for sure. And the termcap grumble is 
because /etc/termcap is actually a symlink to /usr/share/misc/termcap,
which on your system is evidently not on your / fs.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp70mFQf4TXJ.pgp
Description: PGP signature


Re: FreeBSD7 - PAE and nVidia

2007-12-02 Thread Daniel Bye
On Sat, Dec 01, 2007 at 06:19:36PM +0200, David Naylor wrote:
> Thanks for the info.  Also from what I can see PAE does not support
> USB.  The reason why I am using i386 is because I'm not going to
> sacrifice my gaming :-) which means nvidia.
> 
> Thanks
> 
> David
> 
> p.s. I'm volunteering to do any testing for an amd64 version of the
> nvidia driver...

There are plenty of people who fall into that category! However, nVidia
have already said that due to internal implementation details of the
FreeBSD amd64 kernel, they're  unable to produce an amd64 driver just yet.
There was some discussion of it a while ago - check out the archives for
more details and links. I don't recall if it was this list, or amd64@
so try them both.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpfaVGr0lG4j.pgp
Description: PGP signature


Re: jabberd will not start on reboot, only starts manually

2007-12-04 Thread Daniel Bye
On Mon, Dec 03, 2007 at 10:04:16PM +, Pollywog wrote:
> I am running FreeBSD 6.2 with Jabberd installed from ports:
> jabberd-2.1.18
> 
> 
> When I reboot the machine, jabberd will not start, but it will start if I 
> manually restart it with /usr/local/etc/rc.d/jabberd restart
> 
> /var/log/messages shows:
> 
> jabberd/c2s[989]: mysql: connection to database failed: Can't connect to 
> local 
> MySQL server through socket '/tmp/mysql.sock' (2)
> jabberd/c2s[989]: failed to initialize auth module 'mysql'
> 
> I added 'mysql' to the REQUIRED line in the startup script for jabberd but 
> this did not solve the problem.  It still appears as though jabberd attempts 
> to connect to mysql before mysql is ready for the connection.
> 
> Can anyone assist with this problem?

Try removing the # BEFORE: LOGIN line from the jabberd control script.
I haven't tested it, but from a cursory glance at the respective control
scripts, it feels like a sane first guess...

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpQ83qp4MHpn.pgp
Description: PGP signature


Re: jabberd will not start on reboot, only starts manually

2007-12-04 Thread Daniel Bye
On Tue, Dec 04, 2007 at 06:06:00PM +, Pollywog wrote:
> On Tuesday 04 December 2007 15:11:32 Daniel Bye wrote:
> 
> >
> > Try removing the # BEFORE: LOGIN line from the jabberd control script.
> > I haven't tested it, but from a cursory glance at the respective control
> > scripts, it feels like a sane first guess...
> 
> What exactly does this do?  It worked.
> 
> I first tried adding 'sleep 2' to the script as suggested in another reply.  
> I 
> thought that would work, but it did not.
> 
> thanks to all who replied.

Check out the manual for rcorder(8), and look at the CAPITALISED files in
/etc/rc.d. 

Essentially, LOGIN is a dummy service - it is used to control startup 
of services that should start late in the boot process. The jabberd control
script told rcorder(8) that it should run *before* the LOGIN service,
but the MySQL control script tells rcorder(8) that it wants to run
*after* the LOGIN service. So although you had REQUIRE: mysql in jabberd's
script, it was still getting run before MySQL. I guess. ;-)

You can determine what order things get run by doing

 # rcorder /etc/rc.d/* /usr/local/etc/rc.d/*

Anyway, glad it worked. You might want to get in touch with the jabberd
maintainer and see if he is willing to make the change permanent.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpn564oY0mJv.pgp
Description: PGP signature


Re: Freebsd filesystem ( hard reboot )

2007-12-06 Thread Daniel Bye
On Thu, Dec 06, 2007 at 11:42:22AM -0500, Randy Ramsdell wrote:
> Oh, Is there a way to not receive 2 messages for every reply to this thread?

Something like this in ~/.procmailrc

:0 Wh: msgid.lock
| $FORMAIL -D 8192 msgid.cache

or like this in ~/.mailfilter

`reformail -D 8000 duplicate.cache`
if ( $RETURNCODE == 0 )
  exit


I'm sure other delivery agents will have similar functionality.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgprdY468w5SZ.pgp
Description: PGP signature


Re: How to find out when a package is installed?

2007-12-08 Thread Daniel Bye
On Sat, Dec 08, 2007 at 05:44:00PM -0800, Simon Gao wrote:
> Hi,
> 
> Is there a command that can help find out when a package is
> installed/compiled? Or what options should I give to pkg_info to find
> out installation date?

I don't think there is such a command - I've never come across it, in 
any event. However, you might be able to something useful by inspecting
the mtimes of +COMMENTS and +DESC files in /var/db/pkg/*/

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp0TqCEw2SD3.pgp
Description: PGP signature


Re: question about ordering of lines in rc.conf

2007-12-09 Thread Daniel Bye
On Sun, Dec 09, 2007 at 05:31:59PM +, Pollywog wrote:
> It appears that the order of the *_enable="YES" lines in /etc/rc.conf is 
> important.  I am looking at a HOWTO for HPLIP in which the author suggests 
> adding two lines in a certain order.

Which two lines? It shouldn't matter - any script that relies on variables
in /etc/rc.conf should read the entire file for anything it's interested
in *before* doing anything with those values. The first line of any
such script should be something like

. /etc/rc.subr

/etc/rc.subr defines a function called load_rc_config() which is responsible
for reading /etc/rc.conf (among other things), and making all the
variables in /etc/rc.conf available to the calling script. It (the calling
script) is then responsible for checking the values of any it is interested
in.

Some older style rc scripts don't source /etc/rc.subr or call the 
load_rc_config function, but handle finding their settings in a different
way, but one which still finds all the necessary settings before doing
any processing.

> 
> Since I recently had a problem with jabberd starting before myslq was ready 
> to 
> accept connections and I just found that  jabberd_enable="YES" precedes 
> mysql_enable="YES" in my rc.conf, I am wondering whether order is important.
> Can anyone provide an answer?

No - it is the values of the rcorder(8) block in each script that determines
the order in which things are run. For older style scripts that don't 
conform to the rcorder standard, the name of the file determines when
it is run, not the order that variables are defined in /etc/rc.conf.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpwrB4WzdWul.pgp
Description: PGP signature


Re: RELENG_7 and diablo-jdk

2007-12-12 Thread Daniel Bye
On Wed, Dec 12, 2007 at 07:06:13AM -0300, Daniel Molina Wegener wrote:
> 
> Hello,
> 
> ??Is there any problem if I run diablo-jdk-1.5_07 under RELENG_7?
> I mean, ??is the diablo-jdk binary compatible with RELENG_7?

It's working here fine:

--->$ uname -a
FreeBSD torus.slightlystrange.org 7.0-BETA4 FreeBSD 7.0-BETA4 #10: Fri Dec  7 
16:06:58 GMT 2007 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/TORUS  i386
--->$ java -version
java version "1.5.0"
Java(TM) 2 Runtime Environment, Standard Edition (build diablo-1.5.0-b01)
Java HotSpot(TM) Client VM (build diablo-1.5.0_07-b01, mixed mode)

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpLRFeKu56c4.pgp
Description: PGP signature


Re: Suggestions please for what POP or IMAP servers to use

2007-12-12 Thread Daniel Bye
On Wed, Dec 12, 2007 at 01:31:11PM -0700, Andrew Falanga wrote:
> Hi,
> 
> I'm working on setting up a server for both WWW and e-mail.  We're using
> apache 2.2 w/PHP support (for phpWebSite) and for e-mail I'd like to stay
> with sendmail for the MTA, but I've not used any servers that will allow for
> POP and IMAP.  What in the ports would be good suggestions from those here
> who've used them?

dovecot is excellent - easy setup, stable and reliable, provides IMAP
and POP support and works well with e.g. squirrelmail. It's not as full
featured as the Cyrus or courier IMAP servers, but if you don't need
shared mailboxes etc, it's definitely worth a look.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpvHk8JxXtmQ.pgp
Description: PGP signature


Re: Suggestions please for what POP or IMAP servers to use

2007-12-13 Thread Daniel Bye
On Thu, Dec 13, 2007 at 09:40:50AM -0700, Andrew Falanga wrote:
> sounds like everyone is sold on dovecot.  Great!.  I've a few questions.  I
> went and looked it up on freshports.org and found the main web site.  Can
> anyone explain to me what problems they have with mail clients attaching?
> See http://wiki.dovecot.org/Clients .  This shows some interesting problems
> and I'd like to know if everyone using dovecot sees these problems.

I use mutt 1.4.2.3i, which works without problems. I have also used 
Thunderbird with it, as does my business partner, and spotted no issues
there either. 

> 
> Second, how do programs like dovecot manage users?  Does each user of the
> e-mail system need to be a user of the FreeBSD system (installed locally)?

As Gerard said, dovecot can handle virtual users. There are several ways
to do this - probably the most scalable will be SQL and LDAP, although
you can use passwd-file as well. There's some good documentation on the
web site, particularly http://wiki.dovecot.org/Authentication.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp6jDohN9QhC.pgp
Description: PGP signature


Re: login.conf password options

2007-12-13 Thread Daniel Bye
On Thu, Dec 13, 2007 at 07:30:21PM +0100, Peter Boosten wrote:
> Quoting James Harrison <[EMAIL PROTECTED]>:
> 
> >:passwordtime=150d:\
> >:warnpassword=150d:
> 
> Is it me, or did you forget the backslash here?

No, that's correct. It's the last line of a class definition. The backslash
is used as a line continuation character, and is not necessary on the last
line. In fact, it must not be included, else it will cause the system to
interpret the next line as part of the same class definition, rather than
the start of the next.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpIF5pu7AMAP.pgp
Description: PGP signature


Re: login.conf password options

2007-12-13 Thread Daniel Bye
On Thu, Dec 13, 2007 at 07:51:48PM +0100, Peter Boosten wrote:
> Quoting Daniel Bye <[EMAIL PROTECTED]>:
> 
> >On Thu, Dec 13, 2007 at 07:30:21PM +0100, Peter Boosten wrote:
> >>Quoting James Harrison <[EMAIL PROTECTED]>:
> >>
> >>>:passwordtime=150d:\
> >>>:warnpassword=150d:
> >>
> >>Is it me, or did you forget the backslash here?
> >
> >No, that's correct. It's the last line of a class definition. The backslash
> >is used as a line continuation character, and is not necessary on the last
> >line. In fact, it must not be included, else it will cause the system to
> >interpret the next line as part of the same class definition, rather than
> >the start of the next.
> >
> 
> Very good answer, *if* it were the last line of the class definition.  
> I cut the last two lines from the original description from OP.

Quite right. My apologies for being an unobservant, trigger-happy nit!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpi9DHgLFY83.pgp
Description: PGP signature


Re: kernel compile e branches

2008-09-16 Thread Daniel Bye
On Tue, Sep 16, 2008 at 02:40:51PM +0200, Gian Paolo Buono wrote:
> Hi,
> I have upgrade my distro and kernel..with following steps:
> 
> 1) cd /usr/src ; make update
> 2) edit /usr/src/sys/i386/conf/GENERIC file for the kernel

I usually copy the GENERIC config and edit the copy. That way, I always
have a GENERIC config to refer/revert to, should the need arise.

> 3) make buildkernel KERNCONF=GENERIC
> 4) make installkernel KERNCONF=GENERIC

You don't need to specify KERNCONF if you are using GENERIC. If you make
a copy and build from it, you can set KERNCONF in /etc/make.conf

> 5) shutdown -r now
> 6) mergemaster -p
> 7) make installworld
> 8) mergemaster -cvsi
> 9) shutdown -r now
> 
> now my kernel is FreeBSD 7.1-PRERELEASE.
> For server in produciton which is the branches reccomended ? RELEASE ...
> STABLE ...

For production use, go with RELEASE. It is very stable, with the only changes
being seciruty or other critical updates. STABLE, on the other hand, is a
somewhat more conservative development branch than CURRENT, so is prone to
change more than you might expect from day to day. However, it is very rare
that anything is actually broken.

> And where set the branche to use ?

This is determined by settings in your csup config file. This could be in
/usr/share/examples/cvsup/standard-supfile, but I make a copy and put it
in /etc/csup.system. Then set these variables in /etc/make.conf:

SUP_UPDATE= YES
SUPFILE= /etc/csup.system
SUPHOST= cvsup..freebsd.org  # Pick a cvsup host near to you
SUP= /usr/bin/csup

(These allow you to cd /usr/src && make update)

Now check /etc/csup.system. Look for RELENG_7:

*default tag=RELENG_7  # This will get you STABLE. The tag won't change 
   # during the lifetime of the 7 branch.

or

*default tag=RELENG_7_0 # This is for 7.0 RELEASE. When 7.1 RELEASE is
    # announced, change it to RELENG_7_1 to keep up.

HTH

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpu0onmfTGZL.pgp
Description: PGP signature


Re: FSJ clone

2008-09-21 Thread Daniel Bye
On Sun, Sep 21, 2008 at 03:25:44PM -0400, Tsu-Fan Cheng wrote:
> Hi,
>is there a similar program like FSJ, file split/join tool on
> freebsd? thanks!!

split(1) and cat(1)

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgplzQMR6i9DW.pgp
Description: PGP signature


Re: Where I can download the full source tree for Freebsd (MISA processor)

2008-09-21 Thread Daniel Bye
On Sun, Sep 21, 2008 at 12:36:57PM -0700, jack wang wrote:
> HI,
> 
> Please refer me the web page to download the full source tree for freebsd 
> (MIPS processor), that I could download and compile the source tree for mips 
> cpu specific

http://www.freebsd.org/platforms/mips.html

Don't expect too much, unless you want to help with the port.

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpw1eeDDibdq.pgp
Description: PGP signature


Re: OpenGL things crash X in FB7-Stable, nVidia Card

2008-09-26 Thread Daniel Bye
On Fri, Sep 26, 2008 at 04:58:10PM +0100, Kemian Dang wrote:
> Hi all,
> 
> I have a FreeBSD 7 Stable box with a nVidia 6150 Go Graphic Card.
> Everything was OK sometime before, but after a series updated on ports, 
> ( I am not sure about the time, I have not use OpenGL stuff for long 
> time) running a program with OpenGL will cause the X crashed.

[ -- snip -- ]

> The last crash is when I choose a OpenGL screensaver.
> 
> The ports is updated nearly daily, and I think this may happen after 
> sometime after I updated the latest nVidia-driver.
> 
> Any ideas about this problem?

Try reinstalling the nVidia driver port. It installs its own GL libs,
which may have been replaced by another port, depending on the order in
which your ports were updated. Reinstalling should ensure you have the
correct libs in the correct place...

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpl7fI2jxNPv.pgp
Description: PGP signature


Re: neon28 fails, conflicts with neon26

2008-09-27 Thread Daniel Bye
On Sat, Sep 27, 2008 at 01:28:47PM -0400, Eduardo Cerejo wrote:
> 
> Here's what it says above that line, I just don't see any more errors above 
> that line, it only says it conflicts with neon26.
> 
> [Updating the pkgdb  in /var/db/pkg ... - 1001 packages 
> found (-1 +0) (...) done]
> --->  Installing the new version via the port
> ===>  Installing for neon28-0.28.3
> ===>   neon28-0.28.3 depends on shared library: expat.6 - found
> ===>   neon28-0.28.3 depends on shared library: intl - found
> ===>   Generating temporary packing list
> ===>  Checking if www/neon28 already installed
> ** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portupgrade.1108.0 
> env UPGRADE_TOOL=portupgrade UPGRADE_PORT=neon26-0.26.4_1 
> UPGRADE_PORT_VER=0.26.4_1 make reinstall
> --->  Restoring the old version
> pkg_add: package 'neon26-0.26.4_1' conflicts with neon28-0.28.2_1
> pkg_add: -f specified; proceeding anyway
> ** Fix the installation problem and try again.
> [Updating the pkgdb  in /var/db/pkg ... - 1002 packages 
> found (-0 +1) . done]
> ** Listing the failed packages (-:ignored / *:skipped / !:failed)
> ! www/neon28 (neon26-0.26.4_1)  (install error)

I remember I manually removed neon26 when I upgraded subversion. It'll
probably work fine, but check to see what other ports, if any, have a
dependency on neon26 so you can upgrade them as well.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpyZpETwbdIs.pgp
Description: PGP signature


Re: OpenGL things crash X in FB7-Stable, nVidia Card

2008-09-28 Thread Daniel Bye
On Fri, Sep 26, 2008 at 11:14:05PM +0100, Kemian Dang wrote:
> Daniel Bye wrote:
> >On Fri, Sep 26, 2008 at 04:58:10PM +0100, Kemian Dang wrote:
> >>Hi all,
> >>
> >>I have a FreeBSD 7 Stable box with a nVidia 6150 Go Graphic Card.
> >>Everything was OK sometime before, but after a series updated on ports, 
> >>( I am not sure about the time, I have not use OpenGL stuff for long 
> >>time) running a program with OpenGL will cause the X crashed.
> >
> >[ -- snip -- ]
> >
> >>The last crash is when I choose a OpenGL screensaver.
> >>
> >>The ports is updated nearly daily, and I think this may happen after 
> >>sometime after I updated the latest nVidia-driver.
> >>
> >>Any ideas about this problem?
> >
> >Try reinstalling the nVidia driver port. It installs its own GL libs,
> >which may have been replaced by another port, depending on the order in
> >which your ports were updated. Reinstalling should ensure you have the
> >correct libs in the correct place...
> >
> >Dan
> >
> 
> Thanks for reply Daniel.
> 
> I have re-installed the nvidia-driver and tested OpenGL - Crash again.
> So it seems not the case...

Rats! Sorry that didn't help.

One other thing occurs to me - you mentioned you updated some ports. Have
you also updated your system source tree without doing a full buildworld
cycle? If so, chances are that your nVidia driver is built against a 
different version of the kernel source than the running kernel. Although
any differences will be minimal, there is a chance that something changed 
enough to upset the driver.

Failing that, all I can suggest is that you keep an eye on your console
and see if the driver emits any messages just before it chokes.

Good luck!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpvBaj88bPVt.pgp
Description: PGP signature


Re: FreeBSD and Nagios - permissions

2008-10-16 Thread Daniel Bye
On Thu, Oct 16, 2008 at 01:04:52AM -0700, Jeremy Chadwick wrote:
> On Thu, Oct 16, 2008 at 09:32:02AM +0200, Per olof Ljungmark wrote:
> > The nrpe daemon that handles the script runs as the "nagios" user and
> > the command needed is camcontrol:
> > 
> > camcontrol inquiry da0
> > 
> > The nagios user does not have a shell by default in FreeBSD:
> > nagios:*:181:181::0:0:Nagios pseudo-user:/var/spool/nagios:/usr/sbin/nologin
> > so the script will obviously fail.
> 
> I think the problem is probably more along the lines of: you can't
> run camcontrol as user "nagios", because root access is required to
> communicate with CAM (open /dev/xptX).
> 
> Two recommendations:
> 
> 1) Write wrapper program (this requires C) which calls "camcontrol
> inquiry da0".  The wrapper binary should be owned by root:nagios,
> and perms should be 4710 (so that individuals in the "nagios" group
> can run the binary, but no one else).  This C program is very, very
> simple.
> 
> 2) Use "sudo" and set up a ***VERY*** restrictive command list for user
> "nagios", meaning, only allowed to run /sbin/camcontrol.  I DO NOT
> recommend this method, as it's possible for someone to use nagios to
> run something like "camcontrol reset" or "camcontrol eject" as root,
> or even worse, "camcontrol cmd" (could induce a low-level format of
> one of your disks),

It is possible to configure sudo to run only exactly the required command
(including arguments) precisely to guard against this type of abuse -
I use it extensively in my own nagios setup.

This Cmnd_Alias in sudoers will do the trick:

Cmnd_Alias NAGIOS_CMNDS = /sbin/camcontrol inquiry da0

man sudoers for more information about what you can do with sudo.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpeTPtDTfHCY.pgp
Description: PGP signature


Re: FreeBSD and Nagios - permissions

2008-10-16 Thread Daniel Bye
On Thu, Oct 16, 2008 at 12:05:01PM +0100, Daniel Bye wrote:
> It is possible to configure sudo to run only exactly the required command
> (including arguments) precisely to guard against this type of abuse -
> I use it extensively in my own nagios setup.
> 
> This Cmnd_Alias in sudoers will do the trick:
> 
> Cmnd_Alias NAGIOS_CMNDS = /sbin/camcontrol inquiry da0
> 
> man sudoers for more information about what you can do with sudo.

I just realised this example is woefully incomplete - apologies for that.

There are a few ways you can set up /usr/local/etc/sudoers (make sure
you use visudo to edit it, as it will catch any syntax errors for you,
thus helping somewhat to prevent breaking your setup).

The simplest case will just be to allow nagios to run the command, as root,
without a password:

nagios ALL=(root) NOPASSWD: /sbin/camcontrol inquiry da0

If, as is quite possible, nagios should be able to run more than just
that one command, you can define a Cmnd_Alias, as above. To include more
than one command in the alias, simply separate them with a comma. You
can use `\' to escape newlines and make your file a little easier to read:

Cmnd_Alias NAGIOS_CMNDS = /sbin/camcontrol inquiry da0 \
  /sbin/camcontrol inquiry da1

and so on. Now, to use that alias, set the user's permissions to

nagios ALL=(root) NOPASSWD: NAGIOS_CMNDS

The sudoers man page has more information, and there is also a good
tutorial by M Lucas on O'Reilly's Big Scary Daemons (it's from 2002, but
still a good introduction):

http://www.onlamp.com/pub/a/bsd/2002/08/29/Big_Scary_Daemons.html?page=1

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgputr2fYSiXj.pgp
Description: PGP signature


Re: DHCP server

2008-10-24 Thread Daniel Bye
On Fri, Oct 24, 2008 at 11:43:32AM +0200, Svein Halvor Halvorsen wrote:
> Hi,
> 
> I'm not sure if this is an issue with my dhcp server or the client, but 
> since I seem to get troubles with two different clients, I'm thinking it 
> might be the server:
> 
> 
> I've got a FreeBSD 7.0-p4 machine running isc-dhcp3-server-3.0.5_2 
> serving my home network. When my Linux (Archlinux) client request
> a lease, this happens:
> 
> [EMAIL PROTECTED]:~]$ dhcpcd -n eth0
> eth0: dhcpcd 4.0.2 starting
> eth0: broadcasting for a lease
> eth0: offered 10.0.0.176 from 10.0.1.1 `mirrorball'
> eth0: checking 10.0.0.176 is available on attached networks
> 
> ... and then it times out, and does not configure the network. This 
> makes me think that there may be a client issue, since the DCHP server 
> does indeed offer an address. But I also have troubles with a Mac OS X 
> client (although it's a little more vague about the errors).

If the server is handing out /24 network prefixes, then once your clients
bind the offered address in 10.0.0/24, they can no longer communicate with 
the server in 10.0.1/24.

You can

a) give the DHCP server an alias IP address in 10.0.0/24 on the
   appropriate interface
b) change the network prefix to 16 bits, so that 10.0.0 and 10.0.1
   (and ALL other addresses with the prefix 10.0) are in the same 
   logical network space
c) renumber your DHCP pool

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpj91QEftOyE.pgp
Description: PGP signature


Re: How to restore a lost root password...

2008-10-26 Thread Daniel Bye
On Sun, Oct 26, 2008 at 09:18:25PM +0100, Rada alive wrote:
> > I have seen a "How to" about this but I have a problem, i set the console
> > to insecure, so when I try to do the step of the "how to" i get a message
> > to input the root password or Ctrl-D to enter in multiuser mode.
> 
> What happened to just booting into single-user mode and issuing passwd?

The OP made a point of letting us know that he has marked his console
`insecure' in /etc/ttys. In order to even get a shell in single user,
he needs the root password.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpdPWpeb3Vw7.pgp
Description: PGP signature


Re: Disabling boot messages

2008-11-12 Thread Daniel Bye
On Wed, Nov 12, 2008 at 06:40:29PM +0800, Fbsd1 wrote:
> Running a release 7.0 Xorg / Gdm / Xfce Desktop world. Would like to go 
> from powering on the PC directly to the Gdm login screen. Don't want the 
> users seeing all those boot message roll by.
> 
> Can this be done?

It can - see the FAQ:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/x.html#INSTALL-SPLASH

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpg0VnQJWOPv.pgp
Description: PGP signature


Re: Ruby on rails on freebsd 7

2008-11-28 Thread Daniel Bye
On Fri, Nov 28, 2008 at 11:30:20AM +0200, Robby Balona wrote:
> Has anybody managed to get Ruby on Rails 2 working on Freebsd 7 . I have
> tried for 3 day now . Done portupgrades and portsnaps but still cant
> seem to get it to work

Yes, I'm using it very successfully. The version of Rails in ports 
seems to have stuck at 1.2.6.

> 
> 
> I get the following error when I run rails
> 
> ../lib/rails_generator/options.rb:32:in default_options: undefined
> method write_inheritable_attribute
> 
> I googled this error and found very little to help except that it looks
> like its something to do with activesupport-1.4.2 not being install
> correctly...

rails 2.* ships with activsupport 2.*.

Your best bet will be to upgrade your installed gems:

$ sudo gem upgrade --system

(If that doesn't work, try `update_rubygems' instead)

Gems should now report its version as 1.3.1:

$ gem -v
1.3.1

Now you can simply use gems to install Rails and its dependencies:

$ sudo gem install rails --include-dependencies

If you really want version 2.0 or 2.1 instead of the recently released
2.2, include a --version=2.1 to the command. However, given the
enhancements, I'd go with the latest.

HTH,

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpb2OAo28bZi.pgp
Description: PGP signature


Re: Firewalls using a DNSbl (and distributed ssh attacks)

2008-12-03 Thread Daniel Bye
On Wed, Dec 03, 2008 at 07:43:26PM -0600, Jeffrey Goldberg wrote:
> It's not a big issue, but I'm wondering if there is a DNSBl that lists  
> IPs that are engaging in brute force ssh attacks.  And if there is  
> such a list, is there a way to integrate that information into a  
> firewall or sshd.
> 
> As I've said this really isn't a big issue for me, as the brute force  
> attempts at sshd are nothing but an annoyance as I review logs.
> 
> The attacks that I'm seeing appear to be coordinated and distributed.   
> That is, there will be one attempt on username "fred" from one IP  
> immediately followed by an attempt on "freddy" from another IP  
> followed by an attempt on "fredrick" from a third source and so on.

I don't know of any DNSbl type service, but I am using DenyHosts with
very great success. Its synchronisation feature allows participating
instances of the script to share IP addresses of misbehaving hosts,
so as soon as an address hits the database, it's only a matter of an
hour or so before your instance can start blocking it.

The basic setup uses TCP wrappers to block offending hosts, but I am
using the datafile it maintains as a file-based table in pf, which I
reload periodically from a cronjob.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpTYCn2NsJaz.pgp
Description: PGP signature


Re: migrating users from one machine to another machine

2009-10-02 Thread Daniel Bye
On Fri, Oct 02, 2009 at 06:45:12AM +0700, Olivier Nicole wrote:
> Hi,
> 
> > What is the best way of migrating users from one machine (FreeBSD
> > 6.3) to a new machine (FreeBSD 7.2)?
> 
> > I need to migrate their user account settings (shell, password,
> > expiry etc) and also their data that they have in their directories.
> 
> Basically:
> 
> - you need to vipw on both machine and copy the user accounts from the
>   old machine to the new machine, that is fast;

Or copy /etc/passwd from the old machine to the new one, and run 
pwd_mkdb, which is essentially what vipw does anyway.

And don't forget to sync your groups file as well!

Dan

> 
> - you need to copy the home directories of your users from one machine
>   to the other, that can take long time if you have a lot of users
>   with a lot of data.
> 
> To be sure that there is no change being made by the users while you
> are copying the data/accounts, you must disable any login during the
> copy process.
> 
> You can practice copying the accounts while the machines are online
> (login enabled); but be certain to do a final copy with the machine
> offline (login disabled).
> 
> If copying data would take too long time and you cannot afford to put
> the system offline for such a long period, you could install rsync on
> both machines.
> 
> - keep machines online and rsync the users data from the old machine
>   to the new one.
> 
> - repeat rsyncing indefinitely, this will continue copying file that
>   has changed.
> 
> - put the machine offline and do a last rsync: that one should not
>   take too long as it will only copy what has changed since the very
>   last run of rsync.
> 
> 
> Another way regarding the users' data, if they reside on a separate
> hard disk, you can simply physically mount that hard disk in the new
> machine.
> 
> Best regards,
> 
> Olivier
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpbqMzTvPJpt.pgp
Description: PGP signature


Re: Updating the ports collection

2009-10-07 Thread Daniel Bye
On Tue, Oct 06, 2009 at 09:07:07PM -0400, Chris Hill wrote:
> On Wed, 7 Oct 2009, Olivier Nicole wrote:
> 
> >Hi Chris,
> >
> >>The FreeBSD handbook section 4.5.1 describes several methods for
> >>obtaining the ports collection including CVSup, Portsnap, and sysinstall.
> >>
> >>Section 4.5.1 also describes how to update the ports collection, but
> >>only for the CVSup and Portsnap methods.
> >>
> >>Q1: How do I update the ports collection after using sysinstall to
> >>obtain it?
> >
> >I cannot speak for postsnap, but for cvsup:
> 
> csup works (almost?) the same as cvsup, and is in the base system 
> nowadays. I used to install cvsup, but now I only install fastest_cvsup; 
> it's just a utility to find the fastest server for you at the moment.
> 
> >Some may correct me, but I use a file that contains:
> >
> >*default tag=.
> >*default host=cvsup2.jp.FreeBSD.org
> >*default base=/var/db
> >*default prefix=/usr
> >*default release=cvs
> >*default delete use-rel-suffix
> >*default compress
> >ports-all
> 
> I do the same, and run csup as:
> 
> csup -g -h `/usr/local/bin/fastest_cvsup -Q -c us` /etc/supfile.ports

You can set 

SUPHOST= `/usr/local/bin/fastest_cvsup -Q -c us`
SUPFLAGS= -g

in /etc/make.conf and save yourself some typing.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpgwSQSo6iuQ.pgp
Description: PGP signature


gmirror, gjournal and glabel - which order?

2009-10-12 Thread Daniel Bye
Hi all,

I'm having a hard time trying to work out which order I should set up
gmirror, glabel and gjournal on a new system. I want to journal my
/home partition, label all the partitions for ease of reference, and
use gmirror to save me in the event a disk goes bad. I am struggling
to fit the pieces together conceptually in my mind. I understand the
processes involved in setting each part separately - my problem is in
trying to build this up in the right order so that it all makes sense.

So far, I have labelled the primary drive and set up the journal. I have
edited fstab to reflect the labels and journalled file system on /home.
If I now build a mirror, don't I need to alter fstab to mount that and
not the stuff in /dev/label? In which case, I guess I need to build the
mirror first, and then set up labels and journals?

I'm going round and round in circles here and none of the stuff I've
read on the web enlightens me... :-/

Any insights or suggestions would be taken as a great kindness!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpDBqKL2AYI3.pgp
Description: PGP signature


Re: gmirror, gjournal and glabel - which order?

2009-10-12 Thread Daniel Bye
On Tue, Oct 13, 2009 at 01:08:46AM +0300, Manolis Kiagias wrote:
> Daniel Bye wrote:
> > Hi all,
> >
> > I'm having a hard time trying to work out which order I should set up
> > gmirror, glabel and gjournal on a new system. I want to journal my
> > /home partition, label all the partitions for ease of reference, and
> > use gmirror to save me in the event a disk goes bad. I am struggling
> > to fit the pieces together conceptually in my mind. I understand the
> > processes involved in setting each part separately - my problem is in
> > trying to build this up in the right order so that it all makes sense.
> >
> > So far, I have labelled the primary drive and set up the journal. I have
> > edited fstab to reflect the labels and journalled file system on /home.
> > If I now build a mirror, don't I need to alter fstab to mount that and
> > not the stuff in /dev/label? In which case, I guess I need to build the
> > mirror first, and then set up labels and journals?
> >
> > I'm going round and round in circles here and none of the stuff I've
> > read on the web enlightens me... :-/
> >
> > Any insights or suggestions would be taken as a great kindness!
> >
> > Dan
> >
> >   
> When not mirroring,  I first create the journals and then label the
> resulting ad.journal devices
> In case you are doing a gmirror device, you would not really need the
> separate label step - the gm device name won't change and gmirror is not
> affected if the device names of the individual disks change (the disks
> are marked as part of a mirror and scanned at startup).
> When you are creating the composite gmirror device you are effectively
> labeling it anyway i.e. gmirror label gm0...
> Now if you follow the usual tutorials found in the web you would be
> using gm0 / gm1 but you actually name it any way you wish.
> If you really need to label the separate gmirrored partitions, do it
> after setting up the mirror.
> 
> Concerning the order of journals and mirroring, I  create the journals
> first, then mirror the result. This has always worked fine for me.

Thanks much, Manoli. After posting, I came to more or less the same
conclusion, but it's good to get confirmation from someone who clearly
knows more about this stuff than I do!

I'd still be interested to hear what others think/do.

As ever, thanks for your time.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpH9gEpBAJ2C.pgp
Description: PGP signature


Re: Installation

2008-03-12 Thread Daniel Bye
On Wed, Mar 12, 2008 at 05:37:25PM +1100, dajaasge wrote:
> Hi there
> 
> As a relatively inexperienced user of FreeBSD I have little input to offer  
> the community as a whole save to suggest that offering a DVD iso image  
> from which to install would save the sometimes extreme tediousness of disc  
> swapping when adding packages. If I knew more about it I would make such  
> an image myself, however, having never had to do it before it is something  
> I will have to pen in for a later time.

I believe there are a few people/organisations who provide DVD
images - I'm sure Google will help you locate them.

I think it fair to say that most people will use ports to compile and
install software, rather than relying on the packages on the release
ISOs, for the simple reason that the ports tree is a moving target -
the packages included with any particular release are out of date
(as a set, if not individually) quite quickly, because the porters
do a fantastic job of adding new software and updating existing ports.

So, my suggestion (as an old hack who's been around for almost a 
decade ;-) would be to familiarise yourself with the ports tree 
and all its magic - you'll probably find yourself using it in
preference to precompiled packages. The handbook is the best place
to start, as ever.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpWrELcG3jQy.pgp
Description: PGP signature


Re: Installation

2008-03-12 Thread Daniel Bye
On Wed, Mar 12, 2008 at 10:09:12AM +, Mike Clarke wrote:
> On Wednesday 12 March 2008, Daniel Bye wrote:
> 
> > I think it fair to say that most people will use ports to compile and
> > install software, rather than relying on the packages on the release
> > ISOs, for the simple reason that the ports tree is a moving target -
> > the packages included with any particular release are out of date
> > (as a set, if not individually) quite quickly, because the porters
> > do a fantastic job of adding new software and updating existing ports.
> >
> > So, my suggestion (as an old hack who's been around for almost a
> > decade ;-) would be to familiarise yourself with the ports tree
> > and all its magic - you'll probably find yourself using it in
> > preference to precompiled packages. The handbook is the best place
> > to start, as ever.
> 
> I agree that there are advantages in using ports to ensure things are kept up 
> to date but using the packages supplied with the release can be an advantage 
> for a newcomer to FreeBSD.

Of course, a point I realised I missed in my original reply.

> The ports system can be quite daunting until one has become familiar with the 
> system especially if even just one of the ports fails to build. A new user 
> probably won't have the expertise to recognise and fix the cause of the 
> problem. Installing packages from the CD's pretty well ensures that the new 
> user can get a new system up and running without complication. Many new users 
> would prefer a slightly out of date system that works instead of struggling 
> to fix problems in a totally unfamiliar system. When I first started to use 
> FreeBSD I relied on the packages on the CDs, as I gained more familiarity I 
> was much more confident in using ports for the applications that weren't 
> available as precompiled packages.

Yes, of course; you make several good points, Mike. I hope my suggestion
didn't come over as sounding like ports is the only way - as you point
out below, packages are the sane option for most of us mortals for huge
collections of software like KDE.

Speaking for myself (it's all I'm qualified to do, after all), I will
say that I found the learning process in FreeBSD to be on the whole
straight forward and very enjoyable - I emigrated from Linuxland after
a particularly frustrating problem for which I got nothing but scorn for
being a n00b on the newsgroups (I know most Linux communities these days
are not like that - but back then, the one I went to for help most
certainly was). All I wanted to do was learn about something other than
Windows. So at the recommendation of a couple of colleagues, I tried
4.0-RELEASE, joined this mailing list, and never looked back. From the
first day, I can remember being blown away by how easy it was to install
from the ports - it resolves dependencies for you? Yeah, right... wait,
it's resolving dependencies for me! After wrestling with RPMs, who
wouldn't love that? (Again, I know a hell of a lot of work has gone
into the various software management tools available for Linuxes, but
I still haven't found one I like as much as our own ports.)

I could bang on for hours about how much I enjoy using FreeBSD (it has
been my primary desktop OS since 4.2, my business is based on FreeBSD
VPS services, I supply FreeBSD Internet appliances to my clients, blah
blah blah) and about how elegant and well thought out it is. It has
its glitches, sure, but it's a huge evolving system.  Such an immense
amount of intelligence and talent has gone into making FreeBSD what it 
is, and a good proportion of that intelligence and talent is available 
at first hand for free on the lists - in my experience, you just don't
get that very often.

Anyway - to the OP - my apologies for hijacking your thread, and welcome
aboard. Keep at it, you'll love it, I'm sure. Keep asking questions - 
this list is a fantastic resource for newcomers and more experienced
users alike.

> Although I'm now quite comfortable building from ports I still use 
> precompiled 
> packages where they are available because I've got a relatively low powered 
> PC which makes very heavy going with the bigger ports (e.g. gcc, firefox, 
> KDE)

Indeed. I'll never get back those days waiting for KDE and OO.o to
build...

Right, that's me done ;-)

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp8ZgKofywJN.pgp
Description: PGP signature


Re: nvidia driver 96.43.05 crashes Xorg

2008-03-17 Thread Daniel Bye
On Mon, Mar 17, 2008 at 01:56:53PM +0100, tesolarisc wrote:
> When I updated my ports lately the nvidia driver got updated.
> Since then I can't use openGL screensavers without crashing Xorg.
> 
> nvidia driver is 96.43.05
> Xorg server 1.4.0
> (FreeBSD 7.0-Release)
> 
> Do I have to downgrade to 96.43.(01?) again or is there a solution?

Is there any reason you're not using the latest driver? It's up to 
169.12 now (x11/nvidia-driver) 

Did you remember to update the nVidia driver port /after/ everything
else? If not, it's possible, depending on what other ports you upgraded,
you've got GL and GLX libs from somewhere other than the driver port. 
Try uninstalling and reinstalling it.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpIDdgvANHq7.pgp
Description: PGP signature


Re: Does softupdate help squid ?

2008-03-17 Thread Daniel Bye
On Mon, Mar 17, 2008 at 07:34:04PM +, Pollywog wrote:
> On Monday 17 March 2008 19:17:58 Wojciech Puchar wrote:
> > > Hello
> > >
> > > I'm setting up a squid cache (3.0.2) machine FreeBSD 7.0 based and I
> > > wonder if softupdates could help (make it faster ) or not the cache
> > > partition ?
> >
> > i would say it's absolutely needed.
> >
> > anyway - any reason to not use soft updates on every filesystem?
> 
> What exactly is a soft update?

It's a bit like a hard update, but it won't hurt your disks as much
if your system crashes... ;-P

On a more serious note, it's a technique for ensuring the integrity of
disks after a system crash or power failure.  Like journalling, they 
don't guarantee data won't be lost, but instead that the disks will be 
in a consistent state at recovery.

There are many many papers on the subject on the web, if you're 
interested.

Dan
 
-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpUrSxD2B4H7.pgp
Description: PGP signature


Re: Jittery PS/2 Mouse in 7.0-RELEASE

2008-03-20 Thread Daniel Bye
On Thu, Mar 20, 2008 at 09:11:55AM -0400, Alexander Dunn wrote:
> I am using a custom kernel, but this problem does not change even when I am
> using the GENERIC kernel.

Which kernel scheduler are you using? I had very similar symptoms on early
versions of 7 with the default SCHED_BSD. Switching to SCHED_ULE resulted
in a marked improvement.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp44UP9SrY7w.pgp
Description: PGP signature


Re: Accidently deleted the INDEX files out of my /usr/ports/

2008-04-01 Thread Daniel Bye
On Tue, Apr 01, 2008 at 08:38:47PM -0400, Eduardo Cerejo wrote:
> While trying to fix cyclic dependencies with pkgdb I deleted the INDEX 
> files out of my /usr/ports directory.  How can I fix it now?  cvsuping 
> won't do it.

cd /usr/ports && make fetchindex

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpObAM9T67wx.pgp
Description: PGP signature


Re: clean for kernel build

2008-04-23 Thread Daniel Bye
On Tue, Apr 22, 2008 at 04:00:42PM -0600, Andrew Falanga wrote:
> On Tue, Apr 22, 2008 at 3:17 PM, Fraser Tweedale <[EMAIL PROTECTED]> wrote:
> > `make buildkernel` in /usr/src does a clean before building.  You most
> > likely are missing something in your kernel config (i.e. a device that is
> > depended on by another device).
> >
> >  frase
> >
> >
> >
> 
> Thanks.  What options are needed in conjunction with IPSEC?  I have
> this in my config file:
> 
> options  IPSEC
> options  IPSEC_ESP # from the handbook
> 
> The IPSec & VPN page in the handbook says to use these.  However, the
> IPSEC_ESP errors out of the build with "unknown option."  What else is
> needed?  Also, if I'm not mistaken, the linker errors I'm seeing are
> dealing with the IPSEC implementation.  What kernel options are
> necessary for building a kernel with IPSec?

I'm not sure, as I don't user IPSEC, but this entry from /usr/src/UPDATING
might be of use:

20070704:
The new IPsec code is now compiled in using the IPSEC option.  The
IPSEC option now requires "device crypto" be defined in your kernel
configuration.  The FAST_IPSEC kernel option is now deprecated.


We have recently moved from the KAME Project's IPSEC to FAST_IPSEC.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpvzQrQ3wIeD.pgp
Description: PGP signature


Re: ntpd not starting at boot time

2008-04-24 Thread Daniel Bye
On Thu, Apr 24, 2008 at 06:39:46AM -0700, David Newman wrote:
> I've installed ntp-4.2.4p4 from ports on a FreeBSD 6.3/i386 system.
> 
> The ntpd process does not start at boot time. These lines exists in 
> /etc/rc.conf:
> 
> ntpd_enable="YES"
> ntpd_program="/usr/local/bin/ntpd"
> ntpd_flags="-c /etc/ntp.conf -p /var/run/ntpd.pid"
> ntpd_sync_on_start="YES"
> 
> Manually running '/etc/rc.d/ntpd start' produces this error:
> 
> Starting ntpd.
> ERROR:  only one configfile option allowed
> 
> I've pasted the contents of ntp.conf and /etc/rc.d/ntpd files below.
> 
> Thanks in advance for clues as to what's missing.



> 
> ##
> # BEGIN /etc/rc.d/ntpd
> ##
> 
> 
> # PROVIDE: ntpd
> # REQUIRE: DAEMON ntpdate cleanvar devfs
> # BEFORE:  LOGIN
> # KEYWORD: nojail
> 
> . /etc/rc.subr
> 
> name=ntpd
> rcvar=`set_rcvar`
> #command="/usr/sbin/${name}"
> command="/usr/local/bin/${name}"
> pidfile="/var/run/${name}.pid"
> start_precmd="ntpd_precmd"
> 
> load_rc_config $name
> 
> required_files="${ntpd_config}"
> 
> ntpd_precmd()
> {
> rc_flags="-c ${ntpd_config} ${ntpd_flags}"

You need to set ntpd_config to the path to your config file - as it is
now, you are also setting it in ntpd_flags, which the above line then
expands to something like this:

rc_flags="-c /path/in/ntpd_config -c /etc/ntp.conf"

So, remove it from your ntpd_flags definition and all should be well!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpSvxDE420O7.pgp
Description: PGP signature


Re: Ports Question

2008-04-27 Thread Daniel Bye
On Sun, Apr 27, 2008 at 01:19:57AM +0200, Roland Smith wrote:
> On Sat, Apr 26, 2008 at 04:40:58PM -0400, Grant Peel wrote:
> > Hi all,
> > 
> > What is the proper method to pass configure arguments when installing a 
> > port?
> 
> While you can supply arguments on the command line, it is hard to
> remember.
> 
> Therefore I think it is best to set arguments in make.conf. For example;
> 
> -- make.conf excerpt --
> .if ${.CURDIR:M*/graphics/xpdf}
> A4=yes
> .endif
> 
> .if ${.CURDIR:M*/mail/mutt-devel}
> WITH_MUTT_SLANG2=yes
> WITHOUT_MUTT_HTML=yes 
> WITHOUT_MUTT_XML=yes 
> WITHOUT_MUTT_COMPRESSED_FOLDERS=yes 
> WITHOUT_NLS=yes 
> NOPORTDOCS=yes
> .endif
> 
> .if ${.CURDIR:M*/print/cups*}
> CUPS_OVERWRITE_BASE=true
> .endif
> -- make.conf excerpt --
> 
> The '.if' statement ensures that the variables are only set when make is
> called from the praticular port direction.

I find the portconf method a little easier to manage - installing 
ports-mgmt/portconf adds some lines to your make.conf, which allow you
to set options for your ports in a file called /usr/local/etc/ports.conf.

For example,

mail/exim: WITH_MYSQL=1 | WITH_SPF=1

The file is honoured by manual builds, and by the likes of portinstall,
portmaster etc.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpZmDM7Pr4rr.pgp
Description: PGP signature


Re: Installing Xfce4: Request for help

2008-05-10 Thread Daniel Bye
On Sat, May 10, 2008 at 09:07:15PM +0530, Girish Kulkarni wrote:
> Hello,
> 
> I am trying in install Xfce4 in FreeBSD 7.0 on my laptop. I try to use
> the ports by saying:
> 
> -
> # cd /usr/ports/x11-wm/xfce4
> # make install clean
> -
> 
> But then I get the following error:
> 
> -
> ===>  Installing for xfce-4.4.2
> ===>   xfce-4.4.2 depends on file:
> /usr/local/lib/xfce4/mcs-plugins/ui_plugin.so - found
> ===>   xfce-4.4.2 depends on executable: xfwm4 - not found
> ===>Verifying install for xfwm4 in /usr/ports/x11-wm/xfce4-wm
> ===>  Patching for xfce4-wm-4.4.2
> ===>  Applying extra patch
> /usr/ports/x11-wm/xfce4-wm/files/extrapatch-src__events.c
> Ignoring previously applied (or reversed) patch.
> 1 out of 1 hunks ignored--saving rejects to src/events.c.rej
> *** Error code 1
> 
> Stop in /usr/ports/x11-wm/xfce4-wm.
> *** Error code 1
> 
> Stop in /usr/ports/x11-wm/xfce4-wm.
> *** Error code 1
> 
> Stop in /usr/ports/x11-wm/xfce4.
> -
> 
> I am clueless. Could somebody help?

Try running a make clean in x11-wm/xfce4-wm and have another go - it looks
like some kind of artefact from a previous, unsuccessful attempt to 
build it. 

portsclean, part of the portupgrade package, can help with things like 
this - run portsclean -CDD every so often to keep your workdirs clean,
and to remove distfiles for ports that aren't installed.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpvZ2YNE7Eo6.pgp
Description: PGP signature


Re: using dovecot, where is ICOMING mail stored?

2011-03-10 Thread Daniel Bye
On Wed, Mar 09, 2011 at 05:23:34PM -0800, Gary Kline wrote:
> 
> Does anybody know about this obscure stuff?
> 
> In late DEcember, 2007 my FreeBSD server started having serious
> problems that were over my head.  I asked this list for help but no
> one could help me; long-story-short, a guy from the DFW area, a
> self-taught net-wizard came to my rescue.  Via the yahoo IM
> application and thanks to a fellow here with two strong arms, this
> network guy set me up with a pfSense firewall (on an old Kayak), and
> fixed/changed stuff on my server.  He  installed some mail tool
> called dovecot and deployed that on my server.  At the time I was
> running FreeBSD everywhere except one of my four other computers.
> He also found something to let me still use mutt.  I prefer CLI and
> text--8859-1 or ASCII.  Hand on keyboard; my should got destroyed
> many years ago so the less motion between keyboard and mouse, the
> better.
> 
> This morning I found the 15 or 20 messages in my incoming mail queue
> gone.  Vanished.  ---I do of course backup stuff in my ~/Maildir on
> my server.  I checked my bup.  Nothing.  Does anybody know what
> this dovecot does with its incoming mail files?  I only do one daily
> backup that it ccron'd for 03:00  [[along with a bunch of other
> critical directories, of course]]  

If you haven't changed the dovecot config file, look in it for the
mail_location setting. For example, mine is set to:

  mail_location = maildir:~/Maildir

From what you say above, about backups of ~/Maildir, I would expect you to
find something very similar.

If that's not what you find, try looking in the location it does point to.
If you still have no luck, look at your SMTP server's config and figure out
how it handles local deliveries. For example, my exim install is set up to
send messages for local delivery through a pipe to the maildrop program,
which in turn delivers them to folders under my ~/Maildir according to my
filtering rules.

Good luck!

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpz2bgjh8n5d.pgp
Description: PGP signature


Re: FreeBSD Python version

2011-05-25 Thread Daniel Bye
On Wed, May 25, 2011 at 07:58:56AM +0300, Patrick Brookings wrote:
> Hello,
> 
> Can you please tell me what standard version of Python comes with the
> latest FreeBSD?  And also, is it possible to upgrade to a newer version
> without breaking other functionalities?

FreeBSD doesn't have Python installed as part of the standard system - it is
available as a third party port.  The default port version was recently
upgraded to 2.7, and the entry for 20110304 in /usr/ports/UPDATING has clear
instructions on how to upgrade already installed Python packages.


> I am asking because more and more scripts require at least Python 2.5,
> whereas CentOS for example only comes with 2.4.3, and it's pretty much
> impossible to upgrade the system Python without breaking yum and things
> like that.

There is nothing in the base system that relies on Python, so following the
upgrade procedure will not break any essential standard tools.  If all your
currently installed Python packages were installed by means of the ports
system, the update should correctly update them all for you.  Anything
installed by any other means, though, will need to be dealt with manually.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp8dlu20T57b.pgp
Description: PGP signature


Re: /etc/rc.d/jail using new-style jail command?

2011-06-20 Thread Daniel Bye
On Sun, Jun 19, 2011 at 10:16:05PM -0400, Fbsd8 wrote: 
> Give the qjail port a try. It has the ability to reference jails by name 
> and create jails without starting them. Though it does not use the 
> new-style jail command.


zsh/2 1002 # make install
===>  Installing for qjail-1.0
===>   Generating temporary packing list
===>  Checking if sysutils/qjail already installed
install:
/data/portbuild/usr/ports/sysutils/qjail/work/qjail-1.0/qjail-jail2: No such
/ file or directory
*** Error code 71

Stop in /usr/ports/sysutils/qjail.


Any progress on getting the port fixed? I really like qjail, and find it
pretty intuitive, but the port hasn't worked properly since it was added to
the collection.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpmwu9g0nQln.pgp
Description: PGP signature


Re: /etc/rc.d/jail using new-style jail command?

2011-06-20 Thread Daniel Bye
On Mon, Jun 20, 2011 at 11:41:21AM -0400, Fbsd8 wrote:
> Daniel Bye wrote:
> >On Sun, Jun 19, 2011 at 10:16:05PM -0400, Fbsd8 wrote: 
> >>Give the qjail port a try. It has the ability to reference jails by name 
> >>and create jails without starting them. Though it does not use the 
> >>new-style jail command.
> >
> >
> >zsh/2 1002 # make install
> >===>  Installing for qjail-1.0
> >===>   Generating temporary packing list
> >===>  Checking if sysutils/qjail already installed
> >install:
> >/data/portbuild/usr/ports/sysutils/qjail/work/qjail-1.0/qjail-jail2: No 
> >such
> >/ file or directory
> >*** Error code 71
> >
> >Stop in /usr/ports/sysutils/qjail.
> >
> >
> >Any progress on getting the port fixed? I really like qjail, and find it
> >pretty intuitive, but the port hasn't worked properly since it was added to
> >the collection.
> >
> >Dan
> >
> 
> 
> Dan,
> qjail installs fine for me. You have something mis-configured
> on your system.
> /data/portbuild/ is invalid path which is not part of an normal install.

My system is set up just fine, thanks. My ports tree is located on a single
server, and shared via NFS.  To avoid hitting the rather slow disks in the
host machine, each client sets WRKDIRPREFIX so that ports build locally. 
This is fully supported by the ports system, and should not cause a
well-behaved port to break.[1] And indeed, this configuration has been
working flawlessly now for well over 6 years, and it is not the source of
the problem now.

This is what happens when I try to install qjail on the host where the ports
tree lives:


zsh/3 1001 # make install
===>  Installing for qjail-1.0
===>   Generating temporary packing list
===>  Checking if sysutils/qjail already installed
install: /usr/ports/sysutils/qjail/work/qjail-1.0/qjail-jail2: No such file
or directory
*** Error code 71

Stop in /usr/ports/sysutils/qjail.


zsh/3 1007 # ls /usr/ports/sysutils/qjail/work/qjail-1.0/qjail-jail2
ls: /usr/ports/sysutils/qjail/work/qjail-1.0/qjail-jail2: No such file or
directory


The file isn't there.

Bah! Scratch that. Just ran make distclean && make install and it works.

My apologies, Joe, I should have tried that much sooner...  I can only
assume it happened because I installed the port by hand shortly after you
announced its release a few months ago, before it was formally accepted as
part of the tree. I guess I forgot to clean up after that manual test
install and grab the latest version from the ports.

To the originator of this thread - do give qjail a try - it's very good.

~runs away and hides

Dan


1
http://www.freebsd.org/doc/en/books/porters-handbook/porting-wrkdirprefix.html
-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpla2mVd79lP.pgp
Description: PGP signature


Re: fetchmail in "system-wide mode"

2011-09-06 Thread Daniel Bye
On Tue, Sep 06, 2011 at 03:10:50PM +0200, Xavier FreeBSD questions wrote:
> Hello,
> 
> On the Internet there are some sites where they say to start fetchmail(1) in
> "system-wide" should put these two options in rc.conf(5) :
> 
> fetchmail_enable="YES"
> fetchmail_polling_interval="60"

This has worked for me in the past when I've needed fetchmail(1).

> 
> Although the second is optional and at first has little to do with this
> question because this question is addressed rather to the first option.
> 
> I searched in /etc/defaults/rc.conf and rc.conf(5) manual and find no
> reference to these two options.

This is to be expected. fetchmail(1) is a port, not part of the base system.


> 
> I have them in my rc.conf(5) but fetchmail(1) does not start automatically.
> 
> In /usr/src/UPDATING not found any reference to it.

Again, what you'd expect.

> 
> Which is the correct way to start fetchmail(1) in "system-wide"?

Is fetchmail installed on your system? If so, and you still can't get it to
start automatically, try this:

 # script fetchmail_startup sh -x /usr/local/etc/rc.d/fetchmail start

You'll now have a file called `fetchmail_startup' which will contain a
record of exactly what the fetchmail rc script did as it executed, which may
or may not prove informative.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpqwPjWkYetD.pgp
Description: PGP signature


Re: fetchmail in "system-wide mode"

2011-09-07 Thread Daniel Bye
On Wed, Sep 07, 2011 at 05:25:50AM +0200, Xavier FreeBSD questions wrote:
> On Tue, Sep 06, 2011 at 03:19:36PM +0100, Daniel Bye wrote: 
> I paste the fetchmail_startup in: http://pastebin.com/vFqdhwfg
> 
> For you, the answer of why don't worked for me fetchmail is lines 502 and
> 503 ?

Looks like a permissions problem on the fetchmail config file,
/usr/local/etc/fetchmailrc. What do you get when you run

 $ ls -l /usr/local/etc/fetchmail*

? 

I have just freshly installed fetchmail on a new system, and I see this:

 -rw---  1 fetchmail  fetchmail  130  7 Sep 21:24 - 
/usr/local/etc/fetchmailrc
 -rw-r--r--  1 fetchmail  fetchmail  130  7 Sep 21:24 - 
/usr/local/etc/fetchmailrc.sample

If you see something different, try setting the permissions and ownership to
what you see here, or try reinstalling the port.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp7g4H3AKS9O.pgp
Description: PGP signature


Re: fetchmail in "system-wide mode"

2011-09-07 Thread Daniel Bye
On Wed, Sep 07, 2011 at 11:17:15PM +0200, Xavier FreeBSD questions wrote:
> 2011/9/7 Daniel Bye 
> 
> Hi Daniel,
> 
> On Wed, Sep 07, 2011 at 05:25:50AM +0200, Xavier FreeBSD questions wrote:
> > > On Tue, Sep 06, 2011 at 03:19:36PM +0100, Daniel Bye wrote:
> > > I paste the fetchmail_startup in: http://pastebin.com/vFqdhwfg
> > >
> > > For you, the answer of why don't worked for me fetchmail is lines 502 and
> > > 503 ?
> >
> > Looks like a permissions problem on the fetchmail config file,
> > /usr/local/etc/fetchmailrc. What do you get when you run
> >
> >  $ ls -l /usr/local/etc/fetchmail*
> >
> > ?
> >
> > I have just freshly installed fetchmail on a new system, and I see this:
> >
> >  -rw---  1 fetchmail  fetchmail  130  7 Sep 21:24 -
> > /usr/local/etc/fetchmailrc
> >  -rw-r--r--  1 fetchmail  fetchmail  130  7 Sep 21:24 -
> > /usr/local/etc/fetchmailrc.sample
> >
> > If you see something different, try setting the permissions and ownership
> > to
> > what you see here, or try reinstalling the port.
> >
> >
> I don't have the /usr/local/etc/fetchmailrc because I use a user local file.

Well, there you go, then. The system global operation requires that file.
You'll need to run per-user daemons, which can be set up by following the
instructions in /usr/local/etc/rc.d/fetchmail. In particular, pay attention
to `fetchmail_users'.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpjHgB8dCSYF.pgp
Description: PGP signature


Re: kvm_getenw

2011-11-24 Thread Daniel Bye
On Thu, Nov 24, 2011 at 07:49:21AM -0600, ajtiM wrote:
> Hi!
> 
> I had the same problem on FreeBSD 8.2 Release as I have now on
> 9.0-RC2 FreeBSD 9.0-RC2 #0: Sat Nov 12 18:09:11 UTC 2011 
> r...@obrian.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386:
> 
> console-kit-daemon[1800]: WARNING: kvm_getenvv failed: cannot open /proc
> /84597/mem 
> 
> In /etc/fstab I have a line:
> 
> # Device Mountpoint  FStype   Options  Dump Pass
> # -  --  ---  ---  -
> linproc  /compat/linux/proc  linprocfsrw   00
> 
> and in /etc/rc.conf is linux_enable="YES"
> 
> "mount" shows: 
> linprocfs on /compat/linux/proc (linprocfs, local)
> 
> I use KDE4 not GNOME. How is possiblle to correct the problem, please?

Try mounting the native procfs, as well:

procfs  /proc   procfs  rw  0   0

The linprocfs is for binaries running under the Linux subsystem, which
almost certainly does not include your (native) KDE apps.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp7v7yEuJHXZ.pgp
Description: PGP signature


Re: Enabling FTP and Telnet access for root and users

2011-12-15 Thread Daniel Bye
On Thu, Dec 15, 2011 at 06:26:09AM -0600, Daniel Lewis wrote:
> How do I enable Telnet and ftp access for root and users?
>  I turned on ftp and telnet in inetd but when at telenet or ftp prompt
> access is denied.

Can we see the error message? Are you sure inetd is running? Using the right
username/password combination?

In all honesty, you're better off enabling sshd instead, which encrypts your
communication, and offers numerous other security enhancements over plain
telnet and ftp.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp4YL4cuTyVV.pgp
Description: PGP signature


Re: premission denied executing a script

2006-01-09 Thread Daniel Bye
On Sun, Jan 08, 2006 at 01:11:07PM -0500, RJ wrote:
> Thanks Ceri but, it didn't solve my problem.
> The script starts with "#!/usr/src/bin/sh" and I've tried changing it to
> "#!/bin/sh" (no quotes). The end result is still permission denied.
> 
>  Does the system log what the script is trying to do? I can't find anything
> so far.

Well, that depends on whether or not the author included logging
functionality - without seeing the script, it's hard to tell...

How about trying to run the script with xtrace turned on?

 # sh -x /the/script

It causes each command to be echoed to STDERR as it executes, and may
help you home in on the problem.

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpkcygPzb9lT.pgp
Description: PGP signature


Re: Samba port

2006-02-14 Thread Daniel Bye
On Tue, Feb 14, 2006 at 03:31:02PM -0500, Ugo Bellavance wrote:
> Hi,
> 
>   I'm rather new to FreeBSD (I usually use linux and I'm trying Fbsd.  I
> upgraded my samba port yesterday, but after, I couldn't reconnect to it.
>  I found out that the upgrade (using cvsup/portupgrade) removed smb.conf
> and stopped smb and cups?  Why is it this way?  It is not the only port
> that gets stopped on an upgrade.  Is that normal?  Shouldn't it at least
> try to restart?

portupgrade (and portmanager) will try to restart upgraded daemons
(smbd, exim, or whatever) in order that they run the new code.  As far
as I am aware, an upgraded port should not touch an existing config
file.  Did you upgrade from version 2 to version 3?  This might account
for it, but I can't remeber if I had similar problems making that
particular journey.

Anyway, for clues, you can try starting samba directly:

 # /usr/local/etc/rc.d/samba.sh start

and see what debuggibg you get.

Welcome to FreeBSD, btw.  Hope you stick around!

HTH,

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpwsBBUReM9C.pgp
Description: PGP signature


Re: automount external usb hard drive?

2006-02-14 Thread Daniel Bye
On Tue, Feb 14, 2006 at 08:01:44PM -0500, Peter wrote:
> Hi, is it possible to have an external USB hard drive automounted once
> connected?  

It certainly is - you need to create a hook for for your device in
/etc/usbd.conf.  To find out the required details, run usbd from the
command line:

 # /etc/rc.d/usbd stop
 # usbd -dv

Connect your device, and take a note of the values for the device-attach
event.  For example, this is what I get when connecting a Disgo Lite USB
key drive.

usbd: device-attach event at 1139967116.311696000, disgo, vendor 0x08ec:
  vndr=0x08ec prdct=0x0008 rlse=0x0100 clss=0x subclss=0x prtcl=0x
  device names: umass0

This is what the corresponding entry in /etc/usbd.conf looks like:

device "Disgo Lite USB Key"
   devname "umass[0-9]+"
   vendor 0x08ec
   product 0x0008
   release 0x0100
   attach "sleep 3; mount -t msdosfs /dev/`camcontrol devlist | awk
'/disgo/ {print $NF}' | sed -e 's/(\(.*\))/\1s1/'` /mnt/disgo"

Note the "attach" command must be one continuous line - you can't break
up long commands to prettify the file.  The attach command here works for 
me - you might need something else, depending on your specific 
requirements.  For example, if you regularly attach more than one
storage device, you will certainly want a smarter way of handling them!

Of course, you will need to make sure you explicitly unmount the file
system before detaching the device.

man usbd, man usbd.conf and man camcontrol for more details.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpCXv2MEtuTj.pgp
Description: PGP signature


[OT] Re: software recommendation

2006-04-04 Thread Daniel Bye
On Tue, Apr 04, 2006 at 07:26:07PM -0300, Duane Whitty wrote:
> Try googling (can this really be a word :) ) browser automation name_of 
> browser.

According to Dictionary.com, yes.  It gives three definitions, two of
which are listed as verbs.  Therefore, the present participle "googling"
is an acceptable word in English.  Good enough for me!

I wonder - do other languages have similar neologisms?

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 6.1-PRERELEASE CVSUP tag=???

2006-04-11 Thread Daniel Bye
On Tue, Apr 11, 2006 at 05:25:25PM -0600, Bryan Curl wrote:
> What is the cvsup tag for getting  6.1-PRERELEASE src?
> 
> I think it should be tag=RELENG_6_1 .
> 
> Can I use src-all for this revision to upgrade from where I am now?
> 
> Right now I am:   ...  6.0-RELEASE-p6 #0: Tue Apr  4 09:43:53 MDT 
> 2006 ...

Take a look at the announcement here:

http://lists.freebsd.org/pipermail/freebsd-hackers/2006-March/015730.html

The tag you want is RELENG_6.  It will become RELENG_6_1 when the
official release is made.

The transition from 6.0 to 6.1 went smoothly here, so you should be good
to go with the new src tree.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: D349 B109 0EB8 2554 4D75  B79A 8B17 F97C 1622 166A
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpWv1pwiP1Jv.pgp
Description: PGP signature


Re: 6.1-PRERELEASE CVSUP tag=???

2006-04-12 Thread Daniel Bye
On Tue, Apr 11, 2006 at 09:56:46PM -0500, Nikolas Britton wrote:
> the branch for 6.1 was cut on the 5th, you can cvsup to 6.1 now using
> the RELENG_6_1 tag... 

Oh yeah, so it was.  Missed that, thanks.

> at this point if you sync up with RELENG_6 you
> will drive passed 6.1.

Hmm, are you sure?

FreeBSD catflap.slightlystrange.org 6.1-RC FreeBSD 6.1-RC #5: Tue Apr 11
15:04:52 BST 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/CATFLAP  sparc64

This from RELENG_6 from two days ago...  Same story on my i386 machines
as well.

Anyway, thanks for the correction.  Am busily cvsupping to RELENG_6_1
now.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: D349 B109 0EB8 2554 4D75  B79A 8B17 F97C 1622 166A
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgphUFSFulUOn.pgp
Description: PGP signature


Linux Oracle 8.1.7.4 on FreeBSD 5.2.1-RELEASE-p9

2004-07-15 Thread Daniel Bye
Hi all, 

Anyone out there had any luck getting the Linux version of Oracle
8.1.7.4 running on FreeBSD 5.2.1-RELEASE-p9?  I have found a few docs on
the 'Net that talk about installing earlier versions, and one originally
in Russian that talks specifically about 8.1.7.4, but the only
translation of it I can get is machine-generated, and therefore misses
many points Russian usage, and leads to a, on the whole, brain-twisting
read...

If anyone has any hints, tips, tricks, I'd love to hear from you.

Thanks for your time, and sorry for the vagueness of the question.

Dan


pgpRd16NFq4UC.pgp
Description: PGP signature


Re: Any way to net boot the FreeBSD installer?

2004-07-26 Thread Daniel Bye
On Mon, Jul 26, 2004 at 02:16:35AM -0700, Donald Burr of Borg wrote:
[---snip---]
> Can anyone offer up some help, guidance, a "HOW TO" type guide, etc.?
> Thanks!

I used this HOWTO.  Fairly straight forward.

http://www.tnpi.biz/computing/freebsd/pxe-netboot.shtml

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpMYhF45lKXC.pgp
Description: PGP signature


Re: Updating local copy of documentation

2004-08-06 Thread Daniel Bye
On Fri, Aug 06, 2004 at 03:41:19PM +1200, Tom Munro Glass wrote:
> When you install FreeBSD, lots of useful documentation is installed in the 
> articles and books directories under /usr/share/doc/ including the essential 
> handbook.
> 
> Is there a way of automatically updating this documentation - I thought that 
> maybe this was done as a part of cvsup, make buildworld, etc, but apparently 
> not? I realise that I can download the latest version with FTP, but it would 
> be nice if this could be done as part of the normal maintenance tasks.

You can get the latest version of hte docs using CVSup.  This is the
CVSUP file I use for that very purpose:

## BEGIN
*default host=cvsup.uk.FreeBSD.org
*default base=/usr
*default prefix=/usr
*default release=cvs tag=.
*default delete use-rel-suffix
*default compress
doc-all
## END

Naturally, you will want to change the host= to one near to you.

To have the docs updated when you do a `make update', you need to ensure
that you have `DOCSUPFILE=/path/to/doc-supfile' set in /etc/make.conf.

To save time and disk space, you can also tell the build system to only
build docs in one language, using `DOC_LANG=en_US.ISO8859-1' in
/etc/make.conf

Once you have gotten the latest sources, 

# cd /usr/doc
# make all install clean

and all should be well.  Note that you will need to install the
textproc/docproj port to be able to build the docs from the source.  You
can get more info at
http://www.freebsd.org/doc/en_US.ISO8859-1/books/fdp-primer/

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgphYNnMWmak3.pgp
Description: PGP signature


Re: JDK14 fails to install

2004-12-10 Thread Daniel Bye
On Fri, Dec 10, 2004 at 09:57:04AM -0700, Tom Connolly wrote:
> Hello List,
> I'm trying to do a fresh install of the jdk14 port and I get the
> following error:
>  
> o linux-sun-jdk-1.4.2.05

[---snip---]

> gmake: *** [j2se-build] Error 2
> 
> *** Error code 2
>  
> Can anyone provide some help with this?

This has come up several times recently.

The Linux Sun JDK (which is used to bootstrap the build of the native
JDK) requires that the Linux procfs system is available.  Add this to
your /etc/fstab:

 linprocfs   /compat/linux/proc   linprocfs   rw   0  0

and then, as root:

kldload linprocfs
mount /compat/linux/proc

You can then restart the build of the native JDK.

FYI, this is mentioned in the linux-sun-jdk* ports' pkg-message files.
Once the native JDK is built and installed, you can remove the Linux
one, and you will no longer need to mount the linprocfs.

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp41i2oJzioD.pgp
Description: PGP signature


Re: swapfile

2004-12-13 Thread Daniel Bye
On Tue, Dec 14, 2004 at 10:35:49AM +0200, Nelis Lamprecht wrote:
> Hi,
> 
> Checked the manual but couldn't find anything regarding this. If you
> have created more than one swap file how do you specify them in your
> rc.conf file ? Manually it works fine but obviously when the machine
> boots I want them both to be used again.
> 
> swapfile="/mailstore/swap1"
> swapfile="/mailstore/swap2"
> 
> The above doesn't work, only the first one is used.

The rc script seems to be written to only allow for one additional
swapfile.  It should be trivial to rewrite to handle multiple files

This diff should apply to /etc/rc.d/addswap to make your setup work.

--- /etc/rc.d/addswap   Tue Dec 14 12:08:41 2004
+++ addswap Tue Dec 14 12:06:42 2004
@@ -22,10 +22,13 @@
[Nn][Oo] | '')
;;
*)
-   if [ -w "${swapfile}" -a -c /dev/mdctl ]; then
-   echo "Adding ${swapfile} as additional swap"
-   mdev=`mdconfig -a -t vnode -f ${swapfile}` && swapon 
/dev/${mdev}
+for sfile in ${swapfile} ]
+do
+   if [ -w "${sfile}" -a -c /dev/mdctl ]; then
+   echo "Adding ${sfile} as additional swap"
+   mdev=`mdconfig -a -t vnode -f ${sfile}` && swapon 
/dev/${mdev}
fi
+done
;;
esac
 }


Keep a copy of the original addswap somewhere!  You will need to specify
both swapfiles in the same declaration:

swapfile="/mailstore/swap1 /mailstore/swap2"

I have only done very basic testing, but it seems to work as you'd
expect.  However, I hereby disclaim any liability...  ;-)

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpK2QRDiAepH.pgp
Description: PGP signature


Re: ssmtp fails to open smtp server

2004-12-14 Thread Daniel Bye
On Mon, Dec 13, 2004 at 10:30:22PM -0800, Gary Schenk wrote:
> I need help, I'm out of ideas. I've just installed 5.3:
> 
> bash-2.05b$ uname -a
> FreeBSD fuzz.socal.rr.com 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Fri Nov  5 
> 04:19:18 UTC 2004 
> [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  i386
> 
> My email is working fine with Mozilla, however I'd like to get mutt 
> working. The problem is sending email with mutt. I first tried to make a 
> custom sendmail.cf file as outlined in the handbook vol.II page 334. I 
> wrote the file, and then tried to follow the instructions on page 332 to 
> make a valid sendamil.cf file. When I tried the command:
> 
> su-2.05b# cd /usr/src/usr.sbin/sendmail/cf/cf
> su: cd: /usr/src/usr.sbin/sendmail/cf/cf: No such file or directory

This is actually to be found in /usr/src/contrib/sendmail/cf/cf/

> The handbook on the web was no different. So that had me stuck. Reading 
> further I saw ssmtp might be the solution to my problems. As shown in 
> the handbook I installed ssmtp with 'make install replace clean' Then 
> did 'make replace' as per the message after installing. I then edited 
> the rc.conf file:
> 
[---snip---]
> sendmail_enable="NONE"
> 
> And then created a ssmtp.conf file thusly:
> 
> su-2.05b# more /usr/local/etc/ssmtp/ssmtp.conf
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> rewriteDomain=socal.rr.com
> hostname=fuzz.socal.rr.com
> 
> When I installed, I gave my machine a hostname that I thought might help 
> me fool sendmail into working for me.
> 
> su-2.05b# hostname
> fuzz.socal.rr.com
> 
> When I try to send mail from mutt I get these errors in /var/log/maillog:
> 
> Dec 13 21:55:44 fuzz sSMTP[525]: Unable to locate [EMAIL PROTECTED]
> Dec 13 21:55:44 fuzz sSMTP[525]: Cannot open [EMAIL PROTECTED]:25
> Dec 13 22:00:25 fuzz sSMTP[629]: Unable to locate [EMAIL PROTECTED]
> Dec 13 22:00:25 fuzz sSMTP[629]: Cannot open [EMAIL PROTECTED]:25
> 
> I've botched something up, but don't know what. Any ideas?

It looks to me as if mailhub should be an fqdn of a mail relay server,
not an email address...

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp2tJV4t31EV.pgp
Description: PGP signature


Re: ssmtp fails to open smtp server

2004-12-15 Thread Daniel Bye
On Tue, Dec 14, 2004 at 08:53:53PM -0800, Gary Schenk wrote:
> Yep, these typos are killing me. That got ssmtp working, and I'm sending 
> mail out quite nicely with mutt now. However, into each life a little 
> rain must fall. Fetchmail is no longer working. After googling the error 
>  message I found that fetchmail uses sendmail to deliver mail to my 
> mail spool, and I disabled sendmail after installing ssmtp. Hoepfully I 
> can find a way to get fetchmail to deliver directly to my spool. Back to 
> the man pages.

If you don't mind the added complexity, you can always tell fetchmail to
use procmail as your local delivery agent.  This gives you the
opportunity then to filter and sort mail as it comes in.

poll your.mail.host
   user '[EMAIL PROTECTED]' there with password '' is 'you' here 
   and wants mda /usr/local/bin/procmail

Just a thought.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpcg5nzzi5MR.pgp
Description: PGP signature


Re: FreeBSD 5.3 and BIND9 problems!

2004-12-20 Thread Daniel Bye
On Sun, Dec 19, 2004 at 03:26:26PM +0100, O. Hartmann wrote:
> Dear Sirs.
> Compiling PHP 5.0.3 from PHP.NET, PHP 5.0.2 from ./ports collection and 
> PHP5-SNAP from php.net fail in compiling in FreeBSD 5.3-STABLE 
> (cvsupdated and rebuilt today!) with an error that seems to be BIND9 
> specific:
> 
> ext/standard/dns.lo(.text+0x1d49): In function `.L166':
> : undefined reference to `res_ninit'
> ext/standard/dns.lo(.text+0x1db5): In function `.L166':
> : undefined reference to `res_nmkquery'
> ext/standard/dns.lo(.text+0x1de7): In function `.L166':
> : undefined reference to `res_nsend'
> ext/standard/dns.lo(.text+0x1f6a): In function `.L166':
> : undefined reference to `res_nclose'
> 
> I searched the web and mailing lists for this problem and I found out, 
> that PHP won't compile when FreeBSD 5.x lacks in BIND9. As I know, 
> FreeBSD 5.3 definitely has BIND9, but why is PHP not compiling the 
> expected way? /usr/include/resolv.h does not have any definitions for 
> the above mentioned routines and it seems to be a 'weird' failure, maybe 
> something I missed when installing 'world'?

You don't by any chance have NO_BIND set in /etc/make.conf?  I've been
caught out by a similar failure in the past...

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp1FMqjOURW0.pgp
Description: PGP signature


Re: Xorg-6.8.1 +glib +i810 +FreeBSD4.11-STABLE

2004-12-30 Thread Daniel Bye
On Wed, Dec 29, 2004 at 12:50:23PM -0800, mac tipper wrote:
> Has anyone found a fix for all the busted apps this
> "upgrade" has caused?
> 
> ~>uname -v
> FreeBSD 4.11-STABLE #0: Sat Dec 18 05:00:01 EST 2004  
>   [EMAIL PROTECTED]:/usr/obj/usr/src/sys/STABLE
> 
> ~>firefox
> expr: syntax error
> [: -eq: unexpected operator
> Segmentation fault
> 
> 
> : ~>gkrellm
> 
> GThread-ERROR **: file gthread-posix.c: line 137
> (g_thread_impl_init): error 'Invalid argument' during
> 'pthread_getschedparam (pthread_self(), &policy,
> &sched)'
> aborting...
> Abort
> 
> And the list goes on.
> 
> I saw one message
> http://docs.freebsd.org/cgi/getmsg.cgi?fetch=15110+0+current/freebsd-x11
>  that suggests, 
> "This seems to be due to applications using the weak
> symbols in for stub
> thread functions in libX11 rather than the real, but
> also weak, ones in libc_r.
> It can be temporarily worked around by building a
> libX11 with UIThrStubs.c removed
> and using LD_LIBRARY_PATH to direct the affected
> applications to it."
> 
> And another one that says switch back to Xfree, or
> downgrade, but I've not found info on cvsup and
> downgrading ports, or switching back to Xfree.

I've not seen the specific problems you mention, but have seen various
other oddnesses since upgrading.  So unusable is my machine now that I
have bitten the bullet and am downgrading to 6.7.0.  Check out
portdowngrade in sysutils/ - it has proven its worth on several
occasions.  

As someone mentioned yesterday, switching back to XFree86 is probably 
not to be recommended - Xorg is now the officially endorsed X11
implementation, and in time anyone still running XFree is likely to run
up against problems as the two code-trees diverge.

I intend to keep an eye on the lists and see what happens - I'm sure
that before long, the port maintainers will work their magic and fix the
brokenness anyway, and we can all upgrade safely.

HTH


-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgprB5UAdRicD.pgp
Description: PGP signature


Re: portupgrade dialogs...

2005-01-04 Thread Daniel Bye
On Tue, Jan 04, 2005 at 12:24:43PM +0100, Christian Tischler wrote:
> Hi,
> when I run portupgrade to get my server up to date (CVS of 
> 4.9-Release),  everything works fine and smooth, until any of the ports 
> pops up an dialog and asks me what I want to compile in (e.g. cups 
> asking me about what drivers I want to install and so on).
> 
> Now my question: Is there a way to work arround this? As my server does 
> not have a very decent CPU updating takes quite some time, and I do not 
> sit in front of my terminal all the time :-) and due to the dialogs 
> waiting for my input the update is running for three days by now...
> 
> So any suggestions?

In addition to what Stijn and Kent have already said, you can override
the defaults by setting an appropriate value in MAKE_ARGS in
/usr/local/etc/pkgtools.conf.  For example, I have this set for Samba:

MAKE_ARGS = {
'net/samba*' => [
'BATCH=yes',
'WITH_UTMP=yes',
'WITH_SYSLOG=yes',
'WITHOUT_CUPS=yes',
'WITH_RECYCLE=yes',
  ],
}

At each subsequent upgrade, the configured set of options will be passed
to the ports system.

I find this aspect of portupgrade very useful.

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpB5A0VaXzhu.pgp
Description: PGP signature


Re: my lame attempt at a shell script...

2005-01-04 Thread Daniel Bye
On Mon, Jan 03, 2005 at 05:28:56PM -0600, Eric F Crist wrote:
> A couple more questions, then I'm done. Promise.
> 
> I need to verify whether or not there is an entry for grog_firewall_oif 
> and grog_firewall_iif in /etc/rc.conf.  If not, I want to exit with an 
> error.

Read /etc/rc.conf into your script's namespace using the syntax already
discussed in this thread (`. /etc/defaults/rc.conf'), and you can then
test for the existence of any variable it defines (or doesn't define): 

if [ -n "${grog_firewall_iif}" ]
then
# Do stuff if ${grog_firewall_iif} is set
else
# Do stuff if ${grog_firewall_iif} is NOT set
fi

Or, to reverse the logic, use [ -z "{grog_firewall_iif}" ]

if [ -z "${grog_firewall_iif}" ]
then
# Do stuff if ${grog_firewall_iif} is NOT set
else
# Do stuff if ${grog_firewall_iif} is set
fi

> Also, a little more advanced, I need to pull information from an 
> ifconfig output.  I need to pull network numbers for both the internal 
> interface, as well as external interface.  For example,
> 
> vr0: flags=8843 mtu 1500
> inet 192.168.1.5 netmask 0xff00 broadcast 192.168.1.255
> inet6 fe80::20e:a6ff:feb9:2d3d%vr0 prefixlen 64 scopeid 0x3
> ether 00:0e:a6:b9:2d:3d
> media: Ethernet autoselect (100baseTX )
> status: active
> 
> I don't actually need my own address, I need to be able to figure out 
> that the system, based on the above output, is on the 192.168.1.0/24 
> network.  This will be input into my firewall rulesets.
> 
> I imagine that there's a util or command around that can do this, or I 
> can code out the math, but there's got to be an easier way.

ipfw(8) can understand the netmask in hex format, so you can simply say:

ii_nw=$(ifconfig "${grog_firewall_iif}" | awk '/inet/ {print $2":"$4}')

${ii_nw} will now contain something like "192.168.37.23:0xff00",
which you can safely pass to ipfw(8):

(2)[EMAIL PROTECTED]:~]
---># ipfw add 900 allow ip from any to 192.168.37.23:0xff00
00900 allow ip from any to 192.168.0.0/24

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpzX8L4mvvFg.pgp
Description: PGP signature


Re: NFS export of evolution

2005-01-11 Thread Daniel Bye
On Sun, Jan 09, 2005 at 06:43:05PM -1000, Robert Marella wrote:
> 
> I have a SOHO set up with several computers running a mix of FreeBSD 5.3
> Release and Stable. I have an NFS server set up so that data can be
> shared at all of the computers.
> 
> I would like to have the ability to retrieve mail from any of the
> computers I happen to be logged into. I have tried various permutations
> of exporting /home, /home/reg-user, and /home/reg-user/.evolution and I
> always get the same error when trying to read mail.

If your main concern is being able to read/send email from any host on
the network, why not run an IMAP server?

I use use courier-imap from the ports on a machine that, among many
other things, also exports nfs file systems.  It's easy to get working, 
and works really well for a small setup.  If you don't run your own smtp
server, you can retrieve mail from your ISP's pop or imap servers using
fetchmail, passing messages to procmail, which can deliver them in a
format that courier-imapd can understand.

Just a thought.

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpaQSQ7aSHmg.pgp
Description: PGP signature


Re: setup of Bind9 on 5.3

2005-01-16 Thread Daniel Bye
On Sun, Jan 16, 2005 at 02:23:54PM -0600, J.D. Bronson wrote:
> I have cvs'd and built world and now I want to use the native bind9 to run 
> DNS.
> 
> I am very familiar with chrooting named, but for some reason I cannot get 
> this going
> 
> If I use ISC's bind 9 built from scratch, it will chroot just fine.
> 
> Does anyone have a sample named.conf for chrooting that shows
> loading of 1 zone and the hints file? (technically not needed with bind9, 
> but doesnt hurt)
> 
> In addition, the dir structure of /var/named would be nice to see.
> 
> normally I setup chroot jail for named like this:
> 
> /var/named:
> 
> drwxr-xr-x   2 root root 512 Aug 16 12:04 dev
> drwxr-xr-x   2 root named512 Aug 16 12:04 etc
> drwxrwx---   2 root named512 Sep  1  2003 log
> drwxr-xr-x   2 root root 512 Jan 16 10:02 master
> drwxrwx---   2 root named512 Jan 16 10:04 run
> drwxrwxr-x   2 root named   1024 Dec 30 19:40 slave
> drwxr-xr-x   2 root root 512 Apr  7  2004 standard
> 
> this approach does not seem to work with using STOCK named
> 
> any help will be appreciated!

Take a look at the new knobs in /etc/defaults/rc.conf for controlling
the supplied BIND9.

The rc scripts do a really good job of setting it all up for you.

As for the locations of your zone files, I think you will have more
success if you put them insude ./namedb/.  This how my /var/named/ is
laid out:

--->$ ls -R /var/named/ 
dev/etc/var/

/var/named/dev:
nullptyp2   ptyp4   random  ttyp2   ttyp4
ptyp1   ptyp3   ptyp5   ttyp1   ttyp3   ttyp5

/var/named/etc:
localtime   namedb/

/var/named/etc/namedb:
PROTO.localhost-v6.rev  named.conf  rndc.key
PROTO.localhost.rev named.conf.dist slave/
make-localhost  named.root
master/ rndc.conf

/var/named/etc/namedb/master:
0.168.192.in-addr.arpa  localhost.rev
localhost-v6.revslightlystrange.org

/var/named/etc/namedb/slave:

/var/named/var:
dump/   log/run/stats/

/var/named/var/dump:
named_dump.db

/var/named/var/log:
named.run

/var/named/var/run:
log=named/  named.pid

/var/named/var/run/named:

/var/named/var/stats:
named.stats

Note that most of these files will be created for you the first time you
inoke named by means of the rc script, /etc/rc.d/named.  You should
probably move aside any pre-existing config.

You can then load your zone files like this:

zone "." {
type hint;
file "named.root";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "master/localhost.rev";
};
zone "your.domain.org" {
type master;
file "master/your.domain.org";
};
zone "0.168.192.in-addr.arpa" {
type master;
file "master/0.168.192.in-addr.arpa";
};


HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpRaKgfQBl01.pgp
Description: PGP signature


Re: purpose of /var/backups

2005-01-17 Thread Daniel Bye
On Mon, Jan 17, 2005 at 04:04:52PM -0600, Doug Poland wrote:
> Hello,
> 
> On my 5.3-STABLE systems I have a directory in /var called backups.  A
> view of man hier says: 
> 
>backups/   miscellaneous backup files
> 
> with files like:
> 
>   aliases.bak
>   aliases.bak2
>   group.bak
>   group.bak2
>   master.passwd.bak
>   master.passwd.bak2
> 
> I'm curious, what process are writing these files to this directory?

periodic daily is at work here.

--->$ find /etc/periodic -name '*backup*'
/etc/periodic/daily/200.backup-passwd
/etc/periodic/daily/210.backup-aliases

> Does something depend on these files existing?

Potentially, your ability to recover your system should any of the files
backed up become corrupted or compromised.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpB1keN6ZLhg.pgp
Description: PGP signature


Re: Tab to Auto-Complete + ....

2005-01-18 Thread Daniel Bye
On Tue, Jan 18, 2005 at 08:30:52PM +1000, Warren wrote:
> What is need for me to add/do in order for the pressing of Tab to autcomplete 
> a name to work?  It works fine in root .. also when i press the up or down 
> arrow keys it dosent bring up the previous command issued ... 
> 
> im using FreeBSD5.3-STABLE

What shell are you using?  I guess you haven't installed any shells from
ports yet, and are using the system default, /bin/sh, which doesn't
support autocomplete or command history.  The root shell is csh, which
does have such things.  So, either set your user's shell to be
/bin/tcsh, or install one of the several shells in ports.

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpNQJPcSRsEC.pgp
Description: PGP signature


Re: Tab to Auto-Complete + ....

2005-01-18 Thread Daniel Bye
On Tue, Jan 18, 2005 at 11:52:16AM +, Mark Ovens wrote:
> 
> It does support command history and editing, though not auto-complete.
> 
> ''set -E'' or ''set -V'' at the prompt (or put either - they are 
> mutually exclusive - in ~/.profile) will enable command history with
> Emacs or vi style command editing respectively.

Live and learn!  Thanks for that.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpTm6W9OB9Kl.pgp
Description: PGP signature


Re: tuning

2005-01-18 Thread Daniel Bye
On Tue, Jan 18, 2005 at 12:16:34PM +0100, beangrinder wrote:
> Is there a general makefile which makes it possible to compile 
> applications for i686 instead of i386 ?

I believe you can set CPUTYPE in /etc/make.conf.  man make.conf will
tell you more, in any event.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp4jM32RkO7J.pgp
Description: PGP signature


Re: CVSUP del INDEX file in ports

2005-01-18 Thread Daniel Bye
On Tue, Jan 18, 2005 at 10:48:28PM +1000, Warren wrote:
> is there a particular reason why the ports INDEX file is del each time cvsup 
> is run and then re-d/l in a portupgrade ?

Because it's almost certainly quicker to download a new copy from FreeBSD 
than it is to let your ports system build it anew.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpBlk1TfHKnm.pgp
Description: PGP signature


Re: Tab to Auto-Complete + ....

2005-01-19 Thread Daniel Bye
On Wed, Jan 19, 2005 at 02:32:41PM +, RW wrote:
> On Tuesday 18 January 2005 12:10, Warren wrote:
> > I changed the shell type using:  chsh -s /bin/csh
> 
> I think you want /bin/tcsh/ which is the enhanced version of csh. Incidently 
> I 
It's the same thing:

--->$ ls -i /bin/csh /bin/tcsh 
24836 /bin/csh* 24836 /bin/tcsh*

> think tcsh is the default for root, not csh, which is probably why 
> auto-completion works for you in root.

root:*:0:0:Charlie &:/root:/bin/csh

File completion works because `set filec' is set in /.cshrc

> It's recommended that you stick to shells  in /bin for root, and tcsh is the 
> best of these. For non-root account you have more choice, bash and ksh are 
> popular.

This is true enough.  If you really want to use a different shell, then
you could probably write a conditional test to go in the default shell's
startup files.  For example, to run bash, put a conditional test in
.cshrc to check that bash can be invoked without errors.  If so, exec()
it.  If not, then just continue with csh.  Voila.  You have a bash shell, 
without having to change root's default shell.  I am afraid I can't help 
with the syntax, as I don't use csh.

HTH

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpwzbX4BhoLI.pgp
Description: PGP signature


Re: : Mrs. Butterworth vs Vermont Maid

2005-01-21 Thread Daniel Bye
On Wed, Jan 19, 2005 at 10:26:17PM +0100, Hexren wrote:
> 
> BT> Then don't waste ours, stupid fucktardo spic.
> 
> BT> Bash.
> 
> -
> 
> Please refrain from swearing at other list members, it is rude and
> beside that it is not helping. :(

Added to which, the racist content is certainly not called for - let's
just take a minute to think about what's going on here, and realise that
calling people names is really rather childish, and beneath us.  We are
capable of much better.

Mr AOL is annoying, but so are all the non-technical outbursts he has
elicited from other list members.  It's tough, but we should try not to
give him the satisfaction of responding.  If we ignore him, he might
well go away.  If not, just dump him.  We demean only ourselves by
playing along with him.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpJNfDQ0xALr.pgp
Description: PGP signature


Re: Upgrading perl 5.8

2005-02-28 Thread Daniel Bye
On Mon, Feb 28, 2005 at 01:34:30PM +0100, Stefan Cars wrote:
> Hi!
> 
> I'm upgrading perl 5.8 from the ports on a FreeBSD 5.3 machine, the 
> problem is that alot of my installed modules doesn't work after the 
> update (just a minor update from 5.8.2 to 5.8.6), probably becuase the 
> @INC changed and did not include the mach directory of 5.8.2. Is this 
> right ? Why can't it include the 5.8.2 mach dir ?

There's nothing to stop you adding the 5.8.2 directories to @INC.  But
the cleanest way to solve this is to upgrade everything else on your
system that depends on Perl.  Portmanager is really good for this sort
of task.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpTLd0dUgmHh.pgp
Description: PGP signature


Re: What am I doing wrong with MOUNT?

2005-02-28 Thread Daniel Bye
On Mon, Feb 28, 2005 at 09:15:23AM -0800, Gerald Lightsey wrote:
> Posted last night to newbies -(my mistake)
> 
> I'm brand new to FreeBSD and Unix world in general.  My son has an internet
> site supported by FreeBSD that uses MySQL.  I have set up a FreeBSD  version
> 5.3 system on my home network using an 80gb drive sliced and partitioned to
> the FreeBSD 5.3 defaults.  I installed MySQL version 3.23 from the ports
> because that is the version on my son's server.  I wanted to install a copy
> of his database that I had MySQL dump on his FreeBSD server and FTP'd it to
> my Windows PC and placed on a CD.  After directing the .SQL dump back to a
> like named database on my newly installed box I originally received a
> message that I was out of disk space.
> 
> I find that MySql is working in /var/db/mysql and that the default
> installation slice/partition of FreeBSD must be too small to handle the
> databases I want to play with.  So I read up on the file system and thought
> I understood that one can graft another drive onto a mount point on the
> system to add space at the mount point.  I purchased a 120gb drive for under
> $50 after rebates and partitioned it into one FreeBSD partition, (not
> dangerously dedicated).  I expected, from what I read, that if I mounted it
> at the /var mount point everything in the original /var directory would
> become unreachable/invisible.  I tried it and I got the results I expected.
> The reason I thought I would replace the ENTIRE /var directory was because
> if /var is too small for MySQL it would probably quickly be exposed to be
> too small for something else unexpected.  
> 
> I mounted the new drive 1 to a temporary mount point and used the cp command
> to copy each directory in /var to the drive.  I looked in all the new/old
> directories at the temporary mount point using ls -F and everything appeared
> to be there at the file level.  I used the umount command to unmount the new
> drive/partition from the temporary mount point and remounted it at /var.  I
> opened MySQL and created the named database I wanted and again started to
> collect the data from the CD by directing the .SQL file data to my database.
> Again, just like it did originally, after several minutes of creating tables
> the system reported that it had run out of space.
> 
> My surprise is that every indication I get after I regain control of the
> system is that the database tables are being built within the ORIGINAL /var
> directory structure rather than the 120gb drive mounted on the /var
> mountpoint.  If I use the df command while drive 1 is mounted it shows that
> /var on disk 0 is full and /var on disk 1 just has whatever I copied onto
> the drive when it was mounted to a temporary mount point.  Also by
> experimentation/confirmation  I find that simply creating a couple of new
> databases within MySQL while drive 1 is mounted on /var shows that the
> databases have been created on the original /var on disk 0 as directories
> after disk 1 is unmounted. 
> 
> What am I doing wrong or what don't I understand about a drive being mounted
> on /var where data is being written underneath it to the original
> /var/db/mysql/mydatabasename on disk 0 rather than onto the mounted disk 1?

Just a thought - each time you mounted the new disk at /var, the system
was already running in multi-user mode.  That means that all network
daemons etc have been started and are running /before/ you mount the
disk.  MySQL will continue to use the /original/ /var because it has open
filehandles on that fs.

Try stopping MySQL before mounting the new disk.  Start MySQL again, and
it should start up on the new fs.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgp4TuZRVGX1V.pgp
Description: PGP signature


Re: sshd

2005-03-02 Thread Daniel Bye
On Wed, Mar 02, 2005 at 02:31:16PM +0100, Stevan Tiefert wrote:
> Hello Eric,
> 
> that meens also to change the port at the ssh-client with "ssh -p ??",
> isn't it?

Alternatively, you can set up a Host section in your ~/.ssh/config file:

Host myhost
  Hostname FQDN.for.myhost
  Port 1221

Obviously, you would need to set this up on each client host you connect
from.

You can then just invoke ssh in the normal manner - it will pick up your
settings each time for you.

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpK0gRlBK4q3.pgp
Description: PGP signature


  1   2   3   4   5   6   >