kerberized NFS

2012-01-27 Thread Giulio Ferro
I'm trying to setup a kerberized NFS system made of a server and a client (both freebsd 9 amd64 stable) I've tried to follow this howto: http://code.google.com/p/macnfsv4/wiki/FreeBSD8KerberizedNFSSetup But couldn't get much out of it. First question : is this howto still valid or something mor

Re: kerberized NFS

2012-01-28 Thread Giulio Ferro
I forgot to mentioned that I compiled both servers with option KGSSAPI and device crypto, and I enabled gssd on both. Is there anyone who was able to configure this setup? ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/list

Re: kerberized NFS

2012-01-28 Thread Giulio Ferro
Thank you to all of you for your replies. I'll try next week and let you know. My mail server was down for a few hours, but everything should be ok now... Giulio. ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/fre

kerberized NFS

2012-02-17 Thread Giulio Ferro
Thanks everybody again for your help with setting up a working kerberized nfsv4 system. I was able to user-mount a nfsv4 share with krb5 security, and I was trying to do the same as root. Unfortunately the patch I found here: http://people.freebsd.org/~rmacklem/rpcsec_gss.patch fails to apply c

Re: kerberized NFS

2012-02-19 Thread Giulio Ferro
On 02/19/2012 02:55 AM, Rick Macklem wrote: I just updated the patch: http://people.freebsd.org/~rmacklem/rpcsec_gss-9.patch If you already downloaded it, please do so again, because it had two arguments reversed in order and would not have worked. I think this one is correct, although I don

PF + BRIDGE still causes system freezing

2010-05-27 Thread Giulio Ferro
Months ago I reported a system freezing whenever bridge was used with pf. This still happens now in 8.1 prerelease: after several minutes to hours that the bridge is active the system becomes unresponsive. # uname -a FreeBSD firewall1 8.1-PRERELEASE FreeBSD 8.1-PRERELEASE #0: Thu May 27 18:03:

Re: PF + BRIDGE still causes system freezing

2010-05-28 Thread Giulio Ferro
On 28.05.2010 07:46, Giulio Ferro wrote: I've also tried to disable all filtering: net.link.bridge.pfil_onlyip=0 net.link.bridge.pfil_member=0 net.link.bridge.pfil_bridge=0 net.link.bridge.pfil_local_phys=0 net.link.bridge.ipfw=0 net.link.bridge.ipfw_arp=0 But to no avail. It always fr

Re: PF + BRIDGE still causes system freezing

2010-05-28 Thread Giulio Ferro
On 28.05.2010 07:46, Giulio Ferro wrote: Would it be a good idea to try netgraph bridge? Or the underlying implementation is the same as in if_bridge? Months ago I reported a system freezing whenever bridge was used with pf. This still happens now in 8.1 prerelease: after several minutes to

Re: PF + BRIDGE still causes system freezing

2010-05-30 Thread Giulio Ferro
Max Laier wrote: On Friday 28 May 2010 07:46:07 Giulio Ferro wrote: Months ago I reported a system freezing whenever bridge was used with pf. This still happens now in 8.1 prerelease: after several minutes to hours that the bridge is active the system becomes unresponsive. as I told

About zfs + nfs stability

2010-08-31 Thread Giulio Ferro
I have a 8.0 stable (last build around April 2010) which I use as a nfs server : amd64, 8GB RAM, ~7TB storage. I had a lot of grief with the (sadly) well know "kmem map too small" bug, which really compromised the quality of the service that server was deputed to. There wasn't (and there still

ZFS tuning

2010-10-11 Thread Giulio Ferro
I've got lost in all the posts concerning the nefarious kmem_size too small bug, and I'm going finally to upgrade my system (it's currently 8.0 stable 1st May). What is now (freebsd 8.1 last stable) the state of the art of the tuning I should do on my system (amd64, of course)? To put it as plai

nfsv4 with kgssapi

2010-10-12 Thread Giulio Ferro
I'm trying to setup a nfs server which uses the kerberized rpc header, so to overcome the problem with 16 groups: http://www.mail-archive.com/freebsd-stable@freebsd.org/msg109809.html FreeBSD 8 amd64 stable last (yesterday) Following the man page for nfsv4 I have compiled the kernel with -

ZFS wrong size stats with amavis

2010-10-22 Thread Giulio Ferro
I've seen people discuss about this and it happened to me as well. Freebsd 8.1 stable 25th september amd64 This server has one single boot disk with ufs + 1 array (hardware, 3ware) which hold 2,7TB data. I've formatted the latter with ZFS. Things seemed to work ok until I upgraded the system. On

Re: ZFS wrong size stats with amavis

2010-10-22 Thread Giulio Ferro
On 10/22/2010 03:54 PM, Jeremy Chadwick wrote: On Fri, Oct 22, 2010 at 03:03:53PM +0200, Giulio Ferro wrote: [...snip; focusing specifically on this piece...] If I launch du -s under /zfs (host machine, not jail) I get a total space of about 750GB, but df -h always turns up with 2,7TB space

Fwd: Re: NFS Client error

2010-03-09 Thread Giulio Ferro
Thanks for your kind reply, I'm forwarding it there... Original Message Subject:Re: NFS Client error Date: Mon, 08 Mar 2010 23:59:29 +0100 From: vol...@vwsoft.com To: Giulio Ferro CC: freebsd-hack...@freebsd.org, freebsd-...@freebsd.org On 03/08/

Re: Fwd: Re: NFS Client error

2010-03-09 Thread Giulio Ferro
On 09.03.2010 10:14, Daniel Braniss wrote: Thanks for your kind reply, I'm forwarding it there... Original Message Subject:Re: NFS Client error Date: Mon, 08 Mar 2010 23:59:29 +0100 From: vol...@vwsoft.com To: Giulio Ferro CC: freebsd-hack...@freebs

Re: Bridge causes freezes

2010-03-15 Thread Giulio Ferro
I confirm this problem for another server: stable 8 amd64 + vlan + carp Whenever I join a bridge with a vlan interface: ifconfig bridge0 addm vlan35 The system soon or later freezes. This time it has happened after 3 days of normal behavior. No logs, no dump. On 03.03.2010 12:30, Giulio

NFS lockd problem

2010-03-26 Thread Giulio Ferro
Outset: 1 NFS server (with lockd) 2 NFS client (with lockd) The clients serve several jails with apache, whose data (www) resides on the server From time to time everything seem to freeze. Then, after one minute or so, the system works again as nothing had happened. In these occasions I get

NFS permission strangeness

2010-04-15 Thread Giulio Ferro
Here's the setup: server : NFS server machine (fb 8 stable amd64 ) client : NFS client machine (as above) server and client are both sharing the same permission database through ldap: Both have in /etc/nsswitch.conf ... group: files ldap ... passwd: files ldap This issue isn't related to ldap

Re: NFS permission strangeness

2010-04-16 Thread Giulio Ferro
On 16.04.2010 02:30, Rick Macklem wrote: login as "giulio", but when I try to access that same dir on the client machine I get: $ cd /path/to/root/dir/etc (ok) $ cd subdir2 subdir2/: Permission denied. What happens is that I can access "subdir2" on the server machine when I Yes, it should wor

Re: NFS permission strangeness

2010-04-16 Thread Giulio Ferro
On 16.04.2010 10:29, Sean wrote: Yes, I have more than 16 groups, 22 actually... Then there's nothing "wrong" per se, you're just hitting the fact that NFS v2 and v3 only support 16 groups on the wire. That's just the way the protocol is defined. Ops, I didn't know that... Is th

Freebsd 8.0 kmem map too small

2010-05-03 Thread Giulio Ferro
NFS server amd64 Freebsd 8.0 recent (2 days ago) This server has been running for several months without problems. Beginning last week, however, I'm experiencing panics (about 1 per day) with the error in the subject Current settings: vm.kmem_size_scale: 3 vm.kmem_size_max: 329853485875 vm.kme

Re: Freebsd 8.0 kmem map too small

2010-05-03 Thread Giulio Ferro
On 03.05.2010 13:01, Jeremy Chadwick wrote: On Mon, May 03, 2010 at 12:41:50PM +0200, Giulio Ferro wrote: NFS server amd64 Freebsd 8.0 recent (2 days ago) This server has been running for several months without problems. Beginning last week, however, I'm experiencing panics (about

Re: Freebsd 8.0 kmem map too small

2010-05-04 Thread Giulio Ferro
Giulio Ferro wrote: Thanks, I'll try these settings. I'll keep you posted. Nope, it's happened again... Now I've tried to rise vm.kmem_size to 6G... I'm really astounded at how unstable zfs is, it's causing me a lot of problem. Why isn't it stated i

Re: Freebsd 8.0 kmem map too small

2010-05-05 Thread Giulio Ferro
On 05.05.2010 09:52, Jeremy Chadwick wrote: Nope, it's happened again... Now I've tried to rise vm.kmem_size to 6G... Did you set both vm.kmem_size and vfs.zfs.arc_max, setting the latter to something *less* than vm.kmem_size? Yes. After your suggestion, I set vfs.zfs.arc_max: 375809638

Re: Freebsd 8.0 kmem map too small

2010-05-05 Thread Giulio Ferro
On 05.05.2010 11:11, Simun Mikecin wrote: - Original Message I'm really astounded at how unstable zfs is, it's causing me a lot of problem. Why isn't it stated in the handbook that zfs isn't up to production yet? Why people responsible for

Problem with link aggregation + sshd

2012-08-21 Thread Giulio Ferro
Scenario : freebsd 9 stable (yesterday) amd64 on HP server with 4 nic (igb) 1 nic is connected standalone to the management switch, the 3 other nics are connected to a switch configured for aggregation. If I configure the first nic (igb0) there is no problem, I can operate as I normally do and s

Re: Problem with link aggregation + sshd

2012-08-25 Thread Giulio Ferro
No answer, so it seems that link aggregation doesn't really work in freebsd, this may help others with the same problem... I reverted back to one link for management and one for service, and ssh works as it should... On 08/21/2012 11:18 PM, Giulio Ferro wrote: Scenario : freebsd 9 s

Re: Problem with link aggregation + sshd

2012-08-27 Thread Giulio Ferro
| grep 22 On 25 Aug 2012, at 13:18, Damien Fleuriot wrote: I'll get back to you regarding link aggregation when I'm done with groceries. We use it here in production and it works flawlessly. On 25 Aug 2012, at 09:54, Giulio Ferro wrote: No answer, so it seems that link aggregati

Re: Problem with link aggregation + sshd

2012-08-29 Thread Giulio Ferro
ust in case, did you enable any firewall ? (PF, ipfw) As I already said, no. Nothing is working/active on this server, just sshd. Thank you. On 27 August 2012 21:22, Giulio Ferro wrote: Hi, thanks for the answer Here is what you asked for: # ifconfig igb0 igb0: flags=8843 metric 0

Re: Problem with link aggregation + sshd

2012-09-03 Thread Giulio Ferro
No idea anybody why this bug happens? Patches? On 08/29/2012 10:22 PM, Giulio Ferro wrote: On 08/28/2012 11:12 AM, Damien Fleuriot wrote: Hi Giulio, Just to clear things up: igb0: 192.168.9.60/24 lagg0: 192.168.12.21/24 Yes. Actually I notice now that the lagg0 address is different from

Issue with igb and lagg (was Re: Problem with link aggregation + sshd)

2012-09-11 Thread Giulio Ferro
d to get it working again is ifconfig down and up on one of the physical interfaces. This is on 8.1 On 3 September 2012 19:25, Giulio Ferro wrote: No idea anybody why this bug happens? Patches? On 08/29/2012 10:22 PM, Giulio Ferro wrote: On 08/28/2012 11:12 AM, Damien Fleuriot wrote

Re: Issue with igb and lagg (was Re: Problem with link aggregation + sshd)

2012-09-12 Thread Giulio Ferro
On 09/11/2012 11:34 PM, Freddie Cash wrote: On Sep 11, 2012 2:12 PM, "Giulio Ferro" mailto:au...@zirakzigil.org>> wrote: > > Well, there definitely seems to be a problem with igb and lagg. > > igb alone works as it should, but doesn't seem to work pro

Re: Issue with igb and lagg (was Re: Problem with link aggregation + sshd)

2012-09-13 Thread Giulio Ferro
On 09/12/2012 10:51 PM, Freddie Cash wrote: On Wed, Sep 12, 2012 at 1:48 PM, Jack Vogel wrote: On Wed, Sep 12, 2012 at 12:40 PM, Freddie Cash wrote: Thanks for checking. I've used lagg(4) with igb, just not on 9.x. You're right, it seems to be pointing to the igb(4) driver in 9.x compared t