Re: [OpenIndiana-discuss] Swap/stack space continuously shrinking

2018-02-21 Thread Markus Wernig
4.98G 1%/etc/svc/volatile swap 4.98G48K 4.98G 1%/var/run) best /markus On 21.02.2018 12:27, Markus Wernig wrote: > Hi all > > I have 2 OI installations in kvm/qemu virtual machines. Both are showing > the same symptom: The available swap/stack spac

[OpenIndiana-discuss] Swap/stack space continuously shrinking

2018-02-21 Thread Markus Wernig
Hi all I have 2 OI installations in kvm/qemu virtual machines. Both are showing the same symptom: The available swap/stack space is continuously decreasing, up to the point (roughly every 6-7 weeks) where none is left and no new processes can be forked. Meaning a forced reboot, as also no login sh

Re: [OpenIndiana-discuss] various dnssec-* commands missing from network/dns/bind@9.10.6-2017

2018-01-19 Thread Markus Wernig
Hi On 18.01.2018 11:12, Alexander Pyhalov wrote: >> Missing (as compared to self-compiled bind): >> dnssec-checkds, dnssec-keymgr, dnssec-settime, dnssec-verify, >> dnssec-importkey, dnssec-revoke >> > > Hi. > Fixed in pkg://openindiana.org/network/dns/bind@9.10.6.1-2017.0.0.1 > pkg://openindian

[OpenIndiana-discuss] various dnssec-* commands missing from network/dns/bind@9.10.6-2017

2018-01-17 Thread Markus Wernig
Hi all I just noticed that various dnssec related BIND commands are not available on hipster (illumos-cd964fce75 from december 2017). Present: dnssec-dsfromkey, dnssec-keyfromlabel, dnssec-keygen, dnssec-signzone Missing (as compared to self-compiled bind): dnssec-checkds, dnssec-keymgr, dnssec-

Re: [OpenIndiana-discuss] apache24 suexec: cannot get current working directory

2017-12-05 Thread Markus Wernig
On 06.12.2017 00:10, Markus Wernig wrote: > suexec log: > [2017-12-05 21:52:48]: uid: (100/$user) gid: (100/$group) cmd: scriptname > [2017-12-05 21:52:48]: cannot get current working directory Aah ... found it. There was a path component above the cwd that was indeed not readable by

[OpenIndiana-discuss] apache24 suexec: cannot get current working directory

2017-12-05 Thread Markus Wernig
Hi all I have apache24 (installed from the oi repos) with mpm_prefork (and thus mod_cgi), and need to have cgi scripts executed with suexec within virtual hosts. All the usual prerequisites [1] are met imo, but still I get an error: apache log: [Tue Dec 05 21:52:48.324331 2017] [cgi:error] [pid 9

Re: [OpenIndiana-discuss] OI IPv4 Stack setting DF flag on fragmented UDP packets

2017-12-05 Thread Markus Wernig
On 04.12.2017 23:11, James Carlson wrote: > This is normal behavior for IPv4 in Solaris; it's part of Path MTU > Discovery. I'm not sure setting the DF bit on a fragment is really useful apart from the very first fragment. All subsequent fragments will not have enough information (like port etc

Re: [OpenIndiana-discuss] OI IPv4 Stack setting DF flag on fragmented UDP packets

2017-12-05 Thread Markus Wernig
On 04.12.2017 20:28, Till Wegmüller wrote: > Nice to see you on the List :) Yeah, finally started migrating :-) > The First question will be who does the fragmenting and what kind of > fragment are we talking about. Well, the problem is not so much the fact that the packet is fragmented, but that

Re: [OpenIndiana-discuss] OI IPv4 Stack setting DF flag on fragmented UDP packets

2017-12-04 Thread Markus Wernig
>   http://whiteboard.ping.se/Networking/DnsTcp Yes, I can force BIND to switch to TCP by setting max-udp-size 1440, but that's just giving in ... > Regardless, I expect that DNS 'named' is reponsible for setting the DF > flag. Hm. On Solaris, this was also a BIND named, compiled from source wi

[OpenIndiana-discuss] OI IPv4 Stack setting DF flag on fragmented UDP packets

2017-12-04 Thread Markus Wernig
Hi all I'm in the process of migrating from Solaris 11 to OpenIndiana, of which I do not have much experience. Pleae bear with me. I switched our DNS from Sol 11.3 to OI illumos-cd964fce75. After that, I noticed that some reply packets sent by the new server would no longer get through the firewa