Re: pw create home dir issue

2008-04-22 Thread Jonathan McKeown
On Tuesday 22 April 2008 12:54, Unga wrote:
 --- Peter Boosten [EMAIL PROTECTED] wrote:
 
  I use [pw] without the slash:
 
  adduser -d /home -q -s /usr/local/bin/rzsh
 
  Works like charm

 There is no keyword adduser to the pw(8) :)

From the manpage:

 The first one or two keywords provided to pw on the command line provide
 the context for the remainder of the arguments.  The keywords user and
 group may be combined with add, del, mod, show, or next in any order.
 (For example, showuser, usershow, show user, and user show all mean the
 same thing.)  This flexibility is useful for interactive scripts calling
 pw for user and group database manipulation. 

Please verify that what you're saying is right before posting: people rely on 
this list.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OpenLDAP/FreeBSD: How to implement attribute HOST without STRUCTURAL account?

2008-04-30 Thread Jonathan McKeown
On Wednesday 30 April 2008 11:00, O. Hartmann wrote:
 O. Hartmann wrote:
  Jonathan Chen wrote:
  On Tue, Apr 29, 2008 at 10:07:44AM +, O. Hartmann wrote:
  Hello out there,
  my question may sound a bit weird, but the situation is as follows:
 
  I use OpenLDAP 2.4 for authetication purposes within our lab's net
  and every user's account is of the objectclass 'posixAccount'. As we
  know, this class does not contain the attribute 'host', which belongs
  to structural class 'account' and both posixAccount and account  are
  of type structural and therefore can not be mixed.
 
  Is there really such a rule?

It's true that an object can only belong to one structural class (although it 
can belong to many auxiliary classes).

I use the auxiliary class extensibleObject, which allows you to add any 
attribute to an LDAP object. My user accounts have three object classes: 
inetOrgPerson (the structural class), posixAccount and extensibleObject. The 
rules for the first two are still enforced, but I am able to add the Host: 
attribute.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OpenLDAP/FreeBSD: How to implement attribute HOST without STRUCTURAL account?

2008-04-30 Thread Jonathan McKeown
On Wednesday 30 April 2008 16:43, David Robillard wrote:
  On Wednesday 30 April 2008 11:00, O. Hartmann wrote:

 [ --- 8 --- SNIP! --- 8 --- ]

  It's true that an object can only belong to one structural class
  (although it can belong to many auxiliary classes).
 
  I use the auxiliary class extensibleObject, which allows you to add any
  attribute to an LDAP object. My user accounts have three object classes:
  inetOrgPerson (the structural class), posixAccount and extensibleObject.
  The rules for the first two are still enforced, but I am able to add the
  Host: attribute.
 
  Jonathan

 That sounds very interesting Jonathan. Could you please share with us
 the complete LDIF data used to create such a user?

This is live from my LDAP server:

# jfm, group, hst.org.za
dn: cn=jfm,ou=group,dc=hst,dc=org,dc=za
objectClass: posixGroup
gidNumber: 1001
cn: jfm

# jfm, people, hst.org.za
dn: uid=jfm,ou=people,dc=hst,dc=org,dc=za
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: extensibleObject
sn: McKeown
cn: Jonathan McKeown
uidNumber: 1001
gidNumber: 1001
mail: [EMAIL PROTECTED]
loginShell: /usr/local/bin/bash
host: charlotte.hst.org.za
host: clare.hst.org.za
uid: jfm
homeDirectory: /home/jfm

There is, of course, also a userPassword attribute in the user account. (You 
didn't expect me to show you that, did you?!)

Using posixGroup, the attribute for adding additional members to a group is 
memberUid.

There's a bit more to getting this all working: configuring slapd.conf with 
appropriate schemas, installing and configuring pam_ldap and nss_ldap, and 
setting up PAM correctly. I can go into excruciating detail if you like...

My only irritation is that although passwd(1) in 6.3 has the code within it to 
allow it to be controlled by PAM, it's all currently diked out, so that you 
can't use passwd(1) transparently with LDAP users. (As far as I know this 
hasn't changed in 7.0).

inetOrgPerson gives you a huge number of optional fields for other 
information, up to and including a JPEG photo. It inherits from 
organizationalPerson which inherits from person, so you need to combine all 
three sets of attributes to get the complete spec for inetOrgPerson (note the 
only MUST attributes are sn and cn from person):

NAME 'inetOrgPerson'
DESC 'RFC2798: Internet Organizational Person'
SUP organizationalPerson
STRUCTURAL
MAY (   audio $ businessCategory $ carLicense $ departmentNumber $
displayName $ employeeNumber $ employeeType $ givenName $
homePhone $ homePostalAddress $ initials $ jpegPhoto $
labeledURI $ mail $ manager $ mobile $ o $ pager $
photo $ roomNumber $ secretary $ uid $ userCertificate $
x500uniqueIdentifier $ preferredLanguage $
userSMIMECertificate $ userPKCS12 )

NAME 'organizationalPerson'
DESC 'RFC2256: an organizational person'
SUP person
STRUCTURAL
MAY (   title $ x121Address $ registeredAddress $
destinationIndicator $
preferredDeliveryMethod $ telexNumber $
teletexTerminalIdentifier $ telephoneNumber $
internationaliSDNNumber $ facsimileTelephoneNumber $
street $ postOfficeBox $ postalCode $
postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l )

NAME 'person'
DESC 'RFC2256: a person'
SUP top STRUCTURAL
MUST ( sn $ cn )
MAY ( userPassword $ telephoneNumber $ seeAlso $ description )

We're hardly using any of these, but it seemed to make more sense to build it 
in, in case.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Question about a recent installation

2008-05-06 Thread Jonathan McKeown
On Tuesday 06 May 2008 00:08, Mario Vazquez wrote:
 I have been using different Linux distributions for some years, and decided
 to give FreeBSD a try.  The install was successful, but have a question
 about how the root account is made.  Found that the root folder was created
 with the user/group privileges root:wheel.  Is not that a kind of security
 risk?  I know that usually only the account used by the administrator is
 the one, in addition to root, that belongs to the wheel group.  But also I
 know that sometimes admins get lazy and give for limited time extra
 privileges just to allow someone to do something, and that's where the
 danger can come.  Btw, that's just my opinion.

Not sure why it would be a security risk. wheel is the group for people who 
are allowed to su to root, so you should probably expect members of group 
wheel to have (or be able to get) root privs anyway.

I'm not sure whether by ``root folder'' you mean / or /root , but in either 
case the wheel group doesn't have write access, at least on my system,and 
root's umask is 022, so created files aren't writable by members of wheel 
either.

Lazy admins, of course, are a security risk. No-one should ever be given more 
privileges than they need, and as others have pointed out, sudo is a good 
answer to this problem. (In fact the first four ports that go on every box I 
set up, before I even think about what the box is for, are www/lynx, 
sysutils/screen, ports-mgmt/portupgrade and security/sudo ).

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: chmod operation on directories / files

2008-05-07 Thread Jonathan McKeown
On Wednesday 07 May 2008 13:56, Zbigniew Szalbot wrote:

 How do I chmod separately files and directories?

 If I use chmod -R 644 then it will go through all the subdirectories
 assigning everything 644 permissions, directories including.

Use the symbolic form for permissions and use X, which is true if any of the 
execute bits is currently set, or if the argument is a directory.

chmod -R =r,u+w,+X .

(set read for all, add user write, add all execute bits if required) should 
give you 644 on files, 755 on directories and executables.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: slapd won't start with nss_ldap.conf

2008-05-09 Thread Jonathan McKeown
On Friday 09 May 2008 14:36, Robert Fitzpatrick wrote:
 On a FreeBSD 6.1 with openldap-server-2.3.39, I have setup nss_ldap and
 pam_ldap, but cannot get slapd to start as long as I have nss_ldap.conf
 present, it just hangs and nothing in the messages or debug logs. I just
 copied ldap.conf to nss_ldap.conf, see contents below.

To try and identify the problem, can I ask - when you say slapd doesn't start, 
how long have you waited?

There is a chicken-and-egg problem with slapd on a host which is running 
nss_ldap. To start a process, the system has to adopt the user and group 
privileges of the process owner, which means enumerating all the groups for 
that user from every source of group information - including LDAP on a system 
running nss_ldap.

So, to start slapd, the system needs the group info for user ldap - from 
slapd. It times out and retries a few times, and eventually starts slapd 
using the group information from /etc/passwd and /etc/group, but the timeout 
and retry options by default take several minutes.

The delay can be even longer depending how many other services are being 
started first and therefore how many nss_ldap lookup timeouts occur during 
boot.

There are a number of possible solutions depending which version of nss_ldap 
you're running - searching for nss_ldap bind_policy nss_reconnect_tries will 
produce a number of suggestions and ``problem reports''.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: slapd won't start with nss_ldap.conf

2008-05-09 Thread Jonathan McKeown
On Friday 09 May 2008 23:09, Robert Fitzpatrick wrote:
 On Fri, 2008-05-09 at 22:44 +0200, Jonathan McKeown wrote:
  On Friday 09 May 2008 14:36, Robert Fitzpatrick wrote:
   On a FreeBSD 6.1 with openldap-server-2.3.39, I have setup nss_ldap and
   pam_ldap, but cannot get slapd to start as long as I have nss_ldap.conf
   present, it just hangs and nothing in the messages or debug logs. I
   just copied ldap.conf to nss_ldap.conf, see contents below.
 
  So, to start slapd, the system needs the group info for user ldap - from
  slapd. It times out and retries a few times, and eventually starts slapd
  using the group information from /etc/passwd and /etc/group, but the
  timeout and retry options by default take several minutes.

 Seems my core problem is something wrong with the openldap setup on that
 box. I had taken the slave ldap server up to 2.3.41 and it was not
 having this slapd/nss_ldap startup problem. I don't know if it is bad
 with a synrepl slave earlier version that the master, but I just didn't
 want to mess with the master until it proved OK and all seems perfectly
 great on the slave except my boot order issue

It depends what else you upgraded while changing the openldap server. Earlier 
versions of nss_ldap had much shorter timeouts, I believe, which means the 
problem only manifested itself after a certain version of nss_ldap.

 Thanks for the response, and yes, the openldap list owner finally
 rejected my message and gave me the pointer to start slapd with the
 owner and group by id instead of name. After reading the start script to
 get the owner and group by id in the rc.conf file, I am now starting the
 process in that way. While doing that I realize that I can handle boot
 order by name of the file and gave it a prefix of 001.

Errr, not sure what you're talking about here: man rcorder will tell you the 
normal way to control startup order on a recent FreeBSD. I think you'd have 
to be doing something rather unusual to force the old behaviour you seem to 
be talking about... As far as starting up with a numeric id rather than a 
user name, I'm not sure that will stop the lookup of group information which 
is actually causing the problem.

Good luck.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Ports best practice (was Re: Imagemagick port seems broken....)

2008-05-13 Thread Jonathan McKeown
On Tuesday 13 May 2008 01:04, Johan  Dowdy wrote:
 Just as a best practice you might want to consider running a weekly cvsup
 out of cron.

I'm not sure I'd call this best practice in all cases, having taken over a 
network where every server OS install, and every port, used whatever had been 
the latest and greatest that day (at one stage I think I was running every 
release from 4.8 to 6.0, plus a couple of boxes running given snapshots of 
-STABLE).

I can do without the irritation of having to check, every time I log in to a 
different machine, whether the command I'm about to run or the config file 
I'm about to edit supports the option I'm hoping to use.

I now have most of the servers running the same OS release, and running the 
same version of each port, all installed from a central build server with 
locally-built packages where possible.

When something needs to be upgraded, we follow a documented procedure to make 
sure that there are no problems or regressions and that everything stays more 
or less in step.

Yes, it means our ports tree is often three months or so out of date. You'd be 
surprised how seldom that causes a problem. You'd be astonished how much 
easier it makes my life knowing every setup is the same.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unexepcted behavior from read and cat

2008-05-13 Thread Jonathan McKeown
On Monday 12 May 2008 20:59, Paul Schmehl wrote:
 I created a small list of IPs that I wanted to do digs on (because I'm lazy
 and don't want to do them one at a time.)
[snip]
 WTF?  Why do these utilities, which usually read all the lines in a file
 now only work once when run through dig?  Is there a way to feed dig a list
 of IPs and have it return each and every one of them?

 I tried dig +short -x -f iplist, but that returns nothing at all.

 Sure, I can edit the file and prepend +short -x to each line, but by then I
 might as well just do them individually.

 What am I missing?

The comedy solution:

lam -s '-x ' trydata | xargs dig +short

Any other ways to do this?

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unexepcted behavior from read and cat

2008-05-13 Thread Jonathan McKeown
On Tuesday 13 May 2008 18:23, Jonathan McKeown wrote:

 The comedy solution:

 lam -s '-x ' trydata | xargs dig +short

and of course I meant iplist, not trydata: this was a cut'n'paste, and trydata 
is my scratch test data filename (often providing input to a script called 
try. Why isn't it called testdata?)

J
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unexepcted behavior from read and cat

2008-05-13 Thread Jonathan McKeown
[respecting Time's arrow]

On Tuesday 13 May 2008 20:55, Johan Dowdy wrote:

 On 5/12/08 1:55 PM, RW [EMAIL PROTECTED] wrote:
 
  cat iplist | xargs -n1 dig +short -x

 I think this one wins for brevity.

It can be made shorter:

iplist xargs -n1 dig +short -x

but it fires off multiple dig processes.

Compare

lam -s-x\  iplist|xargs dig +short

which, even with a certain amount of cheating, is still 3 characters longer 
but only invokes dig once.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Now what would you expect this to print out?

2008-05-19 Thread Jonathan McKeown
On Monday 19 May 2008 11:46, Jonathan Chen wrote:
 On Mon, May 19, 2008 at 01:49:35AM -0700, Garrett Cooper wrote:
  Riddle for the day for folks that have source trees... what would you
  expect this to print out (ask yourself the question and then execute the
  command)?
 
   find /usr/src -name Makefile -or -name '*.mk' -print
 
  The expected output and what actual output differed in my mind, but maybe
  somebody else can shed some light on the logic behind what happened

 It's a problem that catches many young players with find(1). One has
 to remember from reading the man-page that all directives have an
 implicit AND operator on it; and that includes the -print directive.
 So to get what you want, you have to introduce brackets:

 find /usr/src \( -name Makefile -or -name '*.mk' \) -print

Or, slightly bizarrely, just leave the -print off altogether - as the manpage 
says,

If none of -exec, -ls, -print0, or -ok is specified, the given
expression shall be effectively replaced by ( given expression ) -print.

[Note the parens around given expression]

I forget where I saw this quote first, but the last five words always make me 
think of the find command:

Real Programmers consider what you see is what you get to be just as
bad a concept in Text Editors as it is in women. No, the Real Programmer
wants a you asked for it, you got it text editor - complicated, cryptic,
powerful, unforgiving, dangerous.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Now what would you expect this to print out?

2008-05-20 Thread Jonathan McKeown
On Tuesday 20 May 2008 02:41, RW wrote:
 On Mon, 19 May 2008 21:46:03 +1200

 Jonathan Chen [EMAIL PROTECTED] wrote:
  On Mon, May 19, 2008 at 01:49:35AM -0700, Garrett Cooper wrote:
   Riddle for the day for folks that have source trees... what would
   you expect this to print out (ask yourself the question and then
   execute the command)?
  
find /usr/src -name Makefile -or -name '*.mk' -print
  
   The expected output and what actual output differed in my mind, but
   maybe somebody else can shed some light on the logic behind what
   happened
 
  It's a problem that catches many young players with find(1). One has
  to remember from reading the man-page that all directives have an
  implicit AND operator on it; and that includes the -print directive.
  So to get what you want, you have to introduce brackets:
 
  find /usr/src \( -name Makefile -or -name '*.mk' \) -print

 Why does that make a difference, when print always evaluates to true?

 x AND true   =   x

 so

 (a OR b) AND true   =   a OR b
  a OR (b AND true)  =   a OR b

It makes a difference (as in programming) because -print is used for its 
side-effect rather than its value, and the binding order influences when the 
side-effect happens.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Now what would you expect this to print out?

2008-05-21 Thread Jonathan McKeown
On Tuesday 20 May 2008 16:44, RW wrote:
 On Tue, 20 May 2008 11:33:50 +0200

 Jonathan McKeown [EMAIL PROTECTED] wrote:
  On Tuesday 20 May 2008 02:41, RW wrote:
   On Mon, 19 May 2008 21:46:03 +1200
  
   Jonathan Chen [EMAIL PROTECTED] wrote:
find /usr/src \( -name Makefile -or -name '*.mk' \) -print
  
   Why does that make a difference, when print always evaluates to
   true?
  
   x AND true   =   x
  
   so
  
   (a OR b) AND true   =   a OR b
a OR (b AND true)  =   a OR b
 
  It makes a difference (as in programming) because -print is used for
  its side-effect rather than its value, and the binding order
  influences when the side-effect happens.

 That's still a bit counter-intuitive because in normal programming
 languages the binding order modifies side-effects via the evaluation
 order. And in both cases the evaluation order would be expected to be
 left-to-right, with -print running last.

Yes. I'm actually talking rubbish. find evaluates its argument expression 
left-to-right, and the ``precedence'' actually applies to term grouping 
rather than evaluation order. (This does affect the outcome, but not in the 
way I glibly said it did).

What I should have said is that like a lot of programming languages, find is 
lazy when it comes to Boolean expressions: when it gets a TRUE in an -or or a 
FALSE in an -and, the value of the whole expression must be TRUE or FALSE 
respectively, regardless of what the remaining terms are, so why bother 
evaluating them? (It's usually referred to as short-circuiting).

 I guess what you are saying is that the side-effect of print is based-on
 a Boolean running-value. And without the brackets, the first test  has
 been evaluated, but not yet ORed into that running-value, by the time
 that print runs.

That's not quite how it works. Rewriting

find /usr/src -name Makefile -or -name '*.mk' -print

using extra parens to emphasise the implicit grouping, and including the 
implicit -and, gives:

find /usr/src -name Makefile -or \( -name '*.mk' -and -print \)

in other words, an -or with two terms, one of which happens to be an 
expression.

If -name Makefile is true, the -or is satisfied, so nothing else is evaluated, 
and find goes on to the next filename.

Otherwise, the expression in the second term has to be evaluated. If -name 
'*.mk' is false, the -and is satisfied (which also satisfies the -or) and 
find moves to the next filename. If it's true, the -and can't be satisfied 
without evaluating the -print. The end result is that only files matching 
'*.mk' are printed.

Rewriting the other case,

find /usr/src \( -name Makefile -or -name '*.mk' \) -and -print

If the first expression is false, the -and is satisfied and the -print is not 
evaluated. If the first expression is true (meaning either of the -name 
arguments is true), then the -and can't be satisfied without evaluating the 
-print.

The last case is

find /usr/src -name Makefile -or -name '*.mk'

find quickly analyses this, finds no output action, and converts it to the 
second form above, internally placing parens around the whole expression and 
an -and -print after it.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


rc script REQUIRE-ing a service on another host

2008-05-21 Thread Jonathan McKeown
We had a power failure last night, and this morning I found that imapproxyd 
(running on a webserver which provides webmail) had failed to start because 
it depends on imapd (running on the mailserver, a different host), and 
imapproxyd had won the startup race.

I need to prevent the race by making one service depend on another service 
running remotely. While I sketch out some horribly untidy fix, can the 
Lazyweb tell me if there is already a neat solution for this?

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Circumstance leading up to removal of perl from base?

2008-06-21 Thread Jonathan McKeown
On Saturday 21 June 2008 01:02, Dan Mahoney, System Admin wrote:
 Hello all,

 I know it was a long time ago, but I was talking with a co-worker about
 why perl was removed from the base in v5 -- I seem to recall a discussion
 on some mailing list about either the number of arguments or the format of
 the arguments and/or output of a base perl function having changed between
 5.005 and 5.6.1.

 Thing is, that's a very vague thing to try to google for, and I can't seem
 to find it.  Are there any old-timers who remember the system call in
 question?

As I remember it, the debate revolved around the regression testing and 
porting effort of updating the (then very outdated) system Perl, and the 
large space requirements, especially as more and more CPAN modules were 
absorbed into the Perl core: there was some discussion about producing a 
lightweight version by leaving out core modules not used in the base system - 
at which the Perl people, not unreasonably in my view, invoked the Principle 
of Least Astonishment, saying that being available in every installation was 
rather the point of core modules.

The conclusion, which made an awful lot of sense, was that the FreeBSD 
developers would replace the last few scripts in the base system that 
required Perl, so that Perl could be removed from the base system. This meant 
that Perl users could use the port, which tracks the current release of Perl 
more closely than the (properly) rather conservative update cycle Perl had 
had as part of the FreeBSD base.

At the time, the discussion generated controversy among people not directly 
involved, although the discussion itself was amicable and rational, from what 
I remember of it.

The release notes for FreeBSD 5.0 seem to be dated Jan 2003, so I would 
imagine digging through mailing lists for 2002 would shed more light - 
certainly googling for perl removed freebsd gave me a number of links to 
use.perl.org (for the Perl community's view), Slashdot and various other 
places.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what www perl script is running?

2009-08-24 Thread Jonathan McKeown
On Monday 24 August 2009 10:07:50 Olivier Nicole wrote:
  Is there a command like fuser or lsof which can be used to determine
  what files this perl instance is using? Any other ideas on how to figure
  out what is going on here?

 lsof is in the ports.


and fstat(1) is in the core.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Jonathan McKeown
On Wednesday 26 August 2009 15:44:41 Adam Vande More wrote:

[450 lines including multiple signatures and twelve levels of quoting, all to 
say:]

 Specifically what am I confused on?  Or are you just going to continue
 with the personal attacks?  You've offered no technical rebuttal, simply
 insults.

Please, take it to email - or at least learn to trim (ideally both).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SUID permission on Bash script

2009-08-28 Thread Jonathan McKeown
On Friday 28 August 2009 10:54:19 Giorgos Keramidas wrote:
 On Fri, 28 Aug 2009 09:24:35 +0100, Jeronimo Calvo 
jeronimocal...@googlemail.com wrote:
  Hi folks!
 
  Im trying to set up a reaaallly basic scrip to allow one user to shutdown
  my machine without root permisions, seting up SUID as follows:

[snip]

 The good thing is that you don't need a shell script to do that.  You
 can install `sudo' and give permission to the specific user to run:

 sudo shutdown -p now

Or (assuming it doesn't grant too many other privileges) just put the user in 
group operator.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: questions about FreeBSD

2009-09-01 Thread Jonathan McKeown
On Monday 31 August 2009 17:00:07 Jerry McAllister wrote:
 Same response.   Do your homework.

The nature of the OP's questions strongly suggested that we are doing his 
homework. I'm surprised so many people spoonfed the answers rather than 
pointing to resources like the handbook, as the first responder did.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: remove newlines from a file

2009-09-02 Thread Jonathan McKeown
[Agghh. To list this time]

On Tuesday 01 September 2009 20:03:19 Paul Schmehl wrote:
 I found a sed tutorial once that did this, but I can't seem to find it
 again. I have a file with multiple lines, each of which contains a single
 ip followed by a /32 and a comma.  I want to combine all those lines into a
 single line by removing all the newline characters at the end of each line.

 What's the best/most efficient way of doing that in a shell?

I'd use rs(1).

inputfile rs -C\

(The \ is escaping a space delimiter.)

unless I was worried about maximum length of output lines, in which case

inputfile xargs

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Killfiles (was Re: reporter on deadline seeks comment about reported security...)

2009-09-17 Thread Jonathan McKeown
On Wednesday 16 September 2009 16:59:27 Paul Schmehl wrote:
 --On Wednesday, September 16, 2009 06:08:50 -0500 Jerry ges...@yahoo.com

The backscatter is useful in a way, in that it confirms that my original 
reasons for applying an ignore filter on Jerry's email address still apply, 
but I wish a few more people would just ignore him as well. If he's not 
trolling for angry responses, I find it hard to see what he's doing here at 
all, given how little good he has to say about FreeBSD or the people involved 
with it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: NTP Client synchronization with a Windows 2003/2008

2009-10-14 Thread Jonathan McKeown
On Tuesday 13 October 2009 18:44:57 Jon Radel wrote:
 Jacques Henry wrote:
  I commented the commands involved and nothing changed... (with only 10
  minutes of time difference)

 The 19 minutes between when I sent my suggestions and you responded is
 hardly enough time to see if ntpd was slewing the time.  Slewing 587
 seconds takes days.

  I even tried to force the sync:
 
  U450XA0A0800650nstop ntp
  U450XA0A0800650ntpd -x -n -q -c /var/ntp.conf
  U450XA0A0800650nstart ntp

 Are you sure that -x in there, telling ntpd to not step unless the
 offset is over 600 sec, doesn't override what you're trying to do with
 the -q?  How about you try simple:

 ntpdate the_windows_server

 and see what that does?  After that look in /var/log/messages.

   In fact I am still quite convinced that the MS implementation isn't
  totally compliant with the client...

 Could be, but ntpq was showing that your ntpd was accepting time data
 from the Windows server at least on some level.

Alternatively, from the commandline try

ntpd -g -q -c /etc/ntp.conf

The -g flag allows ntpd to set the clock once regardless of the offset and 
the -q causes it to quit after setting the time.

In /etc/rc.conf, all you should need is

ntpd_enable=YES
ntpd_sync_on_start=YES

The second option adds -g to the ntpd flags, allowing it to set the clock at 
startup and continue running.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: NTP Client synchronization with a Windows 2003/2008

2009-10-15 Thread Jonathan McKeown
On Wednesday 14 October 2009 18:04:41 Jacques Henry wrote:

  Alternatively, from the commandline try
 
  ntpd -g -q -c /etc/ntp.conf
 
  The -g flag allows ntpd to set the clock once regardless of the offset
  and the -q causes it to quit after setting the time.

 I tried this command without success...  I can see the NTP packets (client
 and server) but the clock is never set

Are you running with an elevated securelevel?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why is sendmail is part of the system and not a package?

2009-10-27 Thread Jonathan McKeown
On Monday 26 October 2009 21:29:27 Yuri wrote:
 It's in /usr/sbin/sendmail.

 How many people actually use it? Very few.
 Why isn't it moved to ports?

What is this anti-sendmail obsession people have?

Almost everyone I've ever spoken to about why they dislike sendmail trots out 
a bunch of cliches based on sendmail 8.8. People, we're up to sendmail 8.14 
now. Get over it!

Just as a matter of interest, if you want to rip sendmail out of the base 
system, which MTA would you like to replace it with? Or are you suggesting 
the system ship with no way to handle mail?

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Merging Related Information from 2 Tables

2009-10-30 Thread Jonathan McKeown
On Thursday 29 October 2009 20:44:12 Martin McCormick wrote:
 Giorgos Keramidas writes:
  You should use a Perl or Python script, and a hash...
 
  If you show us a few sample lines from the input file and how you want
  the output to look, it shouldn't be too hard to quickly hack one of those
  together.

The alternative is to use join(1).

   A records look like:

 hydrogen.cis.osu. 43200   IN  A   192.168.2.123

 Text or TXT records look similar [...]

 hydrogen.cis.osu. 5   IN  TXT cordell-north,009,192.168.2.123

This will work well since the default join field is the first field in the 
line.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why is sendmail is part of the system and not a package?

2009-10-30 Thread Jonathan McKeown
On Thursday 29 October 2009 21:58:54 Lars Eighner wrote:
 On Thu, 29 Oct 2009, Ruben de Groot wrote:
  sendmail is NOT a legacy application. It's actively being developed
  ON FreeBSD. Actually, the maintainer(s) are doing a great job

 Bullshit.

 Why does sendmail call up the internet during boot?  If it needs to know
 who it is, why can't it look in hosts?  Since it cannot be trusted to send
 mail, what does it need to know from the internet?  It has been horribly
 broken for the 15 years or so that I have run FBSD, and this m4 stuff is a
 pile of crap.  There is no documentation whatsoever.  Unless you buy a book
 from O'Reilly and line the pockets of the maintainer(s).  Why can't it be
 a option to configure the system without it?  Not any money in that, is
 there?

This is exactly the sort of ill-informed religious rant that always comes up 
when sendmail is discussed, and makes me wonder why some people are so 
vehemently anti-sendmail that they feel the need to say things which are only 
marginally true if that.

My laptop boots quite happily without an Internet connection, so it's simply 
not true to say that sendmail always calls the Internet during boot.

Have a look at /usr/share/sendmail/cf/README, and 
at /usr/src/contrib/sendmail/doc/op (where you can make the sendmail 
operations guide in a variety of formats including pdf) and you'll realise 
that your claim that there's no documentation is also flat-out false. I've 
got the Bat book (in fact I've got *looks at bookshelf* the 2nd and 3rd 
editions). I almost never look at them any more because I can find what I 
need in the documentation provided with sendmail.

No-one is asking you to use sendmail, or even to like it, but please don't lie 
about it; and if you don't want sendmail in the base system, do as several 
people have suggested, pull your finger out and do the work to fix it.

Jonathan
(Just in case, I should probably point out explicitly that, as usual, I don't 
speak for my employer: this is an entirely personal opinion).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: [] confession...

2009-11-23 Thread Jonathan McKeown
On Tuesday 24 November 2009 09:15:43 Gary Kline wrote:
   it's time to come clean an admit that i have never taken
   advantage of the option that lets you press [???], then press
   other keys in order so the result is like pressing multiple
   keys at once.

   i have never made a big deal over having but one useful hand
   simply because in my line as a hacker, one hand was enough.
   programming at 95mph was never the goal.  everybody on this
   list has learned that forethought and planning beat typing
   speed!  ---still, when my shoulder began to dislocate in 1999,
   typing thr number-shift keys [like '*', '', '^', and the rest
   became harder [*].  i'm ready to set up the multi-key stuff that's
   built in to at least KDE.

   appreciate a  pointer to a url or tutorial on this...  and/or
   to know what this feature is even called.  it's time to get
   practical.  i am stubborn, just not particular stupid.  maybe
   slow :_)

If you're using KDE3.5, look for Regional and Accessibility|accessibility 
under the Control Centre.

There are two options, and I think the one you need is called sticky-keys, 
which makes the modifier keys (shift, alt, ctrl) ``stay pressed'' until you 
press another key. In other words, you can type the old three-fingered salute 
by pressing and releasing ctrl, pressing and releasing alt, and then pressing 
and releasing del.

There's also an option called ``lock sticky keys''. If you choose this, the 
sequence of separate press-releases:

shift a b

results in Ab (the shift only applies to the next key pressed)

whereas the sequence

shift shift a b c shift d

results in ABCd (double-shift locks shift key on until it's pressed again).

(The other options, slow keys and bounce keys, apply if muscle control is 
impaired and cause a key to have to be held for a set time before it 
registers, and released for a certain time before registering a second 
key-press).

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: upgraded to 8, no mouse is broken

2009-12-11 Thread Jonathan McKeown
On Friday 11 December 2009 08:17:06 Polytropon wrote:
 On Thu, 10 Dec 2009 21:38:04 -0700 (MST), Warren Block wbl...@wonkity.com 
wrote:
  Please
  see the Handbook section on X11 configuration instead:
 
  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/x-config.html

 Just a side question: 5.4.2 Note 2 § 5 states:

   You will have to reboot your machine to force
   hald to read this file.

 which refers to /usr/local/etc/hal/fdi/policy/x11-input.fdi
 that re-enables Ctrl+Alt+Backspace to kill X.

 Is it really, really needed to reboot the machine? Can't
 HAL just be restarted? I always thought reboot to make
 a minor setting work was the domain of Windows...

At the risk of me-tooing, I also wondered about this.

It seems insane to have to restart the OS and hardware to reread a config 
file.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 8.0: OpenSSL stat()'s NLS 500+ times causing extreme system load

2009-12-16 Thread Jonathan McKeown
On Tuesday 15 December 2009 23:24:16 Linda Messerschmidt wrote:
 On Tue, Dec 15, 2009 at 12:53 PM, Dan Nelson dnel...@allantgroup.com 
wrote:
  It's defined in src/lib/libc/Makefile, so you should be able to remove
  that line, rebuild libc and reinstall, and see whether your performance
  issue goes away.

 I tried that and as you predicted, all the bogus stat calls went away.

 Unfortunately the performance issue did not. :(  Back to the drawing
 board for me!

 Upon further inspection, it seems as though for each check, Nagios
 spawns a process that spawns a process that spawns a process that runs
 the check.  I did ktrace -i -t w -p (nagiospid) on Nagios for 30
 seconds and the ktrace output contained records from 2365 different
 processes spawned in that 30 seconds.  During that time, I would
 expect about 800 checks to have run, so it does seem like it's right
 at 3 processes per check.

 I just don't think the system can keep up with all that fork()ing
 without going all out; it's just a limit of the Nagios plugin
 architecture.

You've probably already spotted this, but this behaviour is documented in 
largeinstallationtweaks.html:

``Normally Nagios will fork() twice when it executes host and service checks. 
This is done to (1) ensure a high level of resistance against plugins that go 
awry and segfault and (2) make the OS deal with cleaning up the grandchild 
process once it exits. The extra fork() is not really necessary, so it is 
skipped when you enable this option. As a result, Nagios will itself clean up 
child processes that exit (instead of leaving that job to the OS). This 
feature should result in significant load savings on your Nagios 
installation.''

It can also be enabled separately in nagios's main config file - 
child_processes_fork_twice is the option to look for.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: black hole test

2009-12-16 Thread Jonathan McKeown
On Wednesday 16 December 2009 22:05:06 Peter Wemm wrote:
 Daignostic message to trace mailing list processing, please ignore.

You have heard of freebsd-test@ , haven't you?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fwd: [#24525016] External USB drive causes system to hang completely

2010-05-31 Thread Jonathan McKeown
On Sunday 30 May 2010 22:29:14 Alejandro Imass wrote:
 Hi all,

 I sent a question regarding a problem with USB and I get this in reply.
 Can someone explain?

 Thanks,
 Alejandro Imass

Yes. There's a hosting company called MidPhase whose support queue (at 
mpcustomer.com) has been added (probably maliciously by some kiddie that 
thinks it's clever) to the mailing list.

They appear either not to know how to stop their ticketing system responding 
to list emails, or not to care. Either way, it's not a great advertisement 
for them, as this has been going on for several weeks now with no 
improvement.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: why does ps |grep sometimes not return itself?

2010-06-10 Thread Jonathan McKeown
On Thursday 10 June 2010 03:30:14 Pieter de Goeje wrote:
 On Wednesday 09 June 2010 09:34:40 Matthew Seaman wrote:
  On 09/06/2010 08:15:23, Eitan Adler wrote:
   Why do I sometimes see the grep in ps's output and sometimes not see
   it?
 
  When you run that pipeline the OS doesn't start both programs exactly
  simultaneously. [...]  It's a race condition.

 I would like to add that you can avoid the issue entirely by using this
 command:
 % ps aux -p `pgrep sh`
[output snipped due to bad wrapping]

Or the old trick:

ps | grep '[s]h'

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Midphase Hosting

2010-06-10 Thread Jonathan McKeown
So, it would appear that Midphase hosting are still incapable of working out 
why their ticketing system is sending replies with forged From: address to 
posters to the freebsd-questions mailing list. (Their support queue is at 
mpcustomer.com).

I'm assuming the list admins already have examples to work with, but here is a 
set of headers from the reply I got to my last list post, in case it's any 
help.

Return-Path: freebsd-questions@freebsd.org
Received: from mx.ru.ac.za (mx.ru.ac.za [2001:4200:1010:0:250:56ff:fe8d:2ebb])
 by imap.ru.ac.za (Cyrus v###) with LMTPA;
 Thu, 10 Jun 2010 10:05:39 +0200
X-Sieve: CMU Sieve
Envelope-to: j.mcke...@ru.ac.za
Delivery-date: Thu, 10 Jun 2010 10:05:39 +0200
Received: from secure.mpcustomer.com ([208.43.146.75]:46852)
by mx.ru.ac.za with esmtp (Exim 4.69 (FreeBSD))
(envelope-from freebsd-questions@freebsd.org)
id 1OMcld-000Eww-H3
for j.mcke...@ru.ac.za; Thu, 10 Jun 2010 10:05:39 +0200
Received: by secure.mpcustomer.com (Postfix, from userid 99)
id 4841C1532997; Thu, 10 Jun 2010 02:46:31 -0500 (CDT)
To: Jonathan McKeown j.mcke...@ru.ac.za
Subject: [#24548754] Re: why does ps |grep sometimes not return itself?
Date: Thu, 10 Jun 2010 02:46:31 -0500
From: freebsd-questions@freebsd.org
Reply-To: supp...@mpcustomer.com
Message-ID: e436b556aafa1c4bd0f2c367a0097...@secure.mpcustomer.com
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version 2.0.4]
X-Uberinst: uber_phase-support
X-Mailer: Ubersmith
MIME-Version: 1.0
Content-Type: text/plain;
  charset=utf-8
Content-Transfer-Encoding: quoted-printable
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-10 Thread Jonathan McKeown
On Thursday 10 June 2010 14:06:46 Rob Farmer wrote:
 On Thu, Jun 10, 2010 at 4:24 AM, Matthias Fechner ide...@fechner.net 
wrote:
  Hi,
 
  Am 10.06.10 11:47, schrieb Jonathan McKeown:
  Subject: [#24548754] Re: why does ps |grep sometimes not return itself?
  Date: Thu, 10 Jun 2010 02:46:31 -0500
  From: freebsd-questions@freebsd.org
  Reply-To: supp...@mpcustomer.com
  Message-ID:e436b556aafa1c4bd0f2c367a0097...@secure.mpcustomer.com
 
  I suggest to block on the freebsd server the complete domain
  mpcustomer.com that should solve the problem.

 I haven't received any of the messages, but I think they are being
 sent directly to list posters (not via the list) so FreeBSD can't
 really do much about it. If mpcustomer.com refuses to deal with it you
 can always try complaining to their upstream provider, taking the line
 that since the messages are unsolicited and there is no way to
 unsubscribe the practice is probably illegal.

Well, yes, the message is being sent direct to list posters, but 
supp...@mpcustomer.com (or some address that's relaying to it) is presumably 
subscribed to the list (which I'm guessing was done maliciously), otherwise 
they wouldn't be receiving these messages.

I know it creates work for the admins, but couldn't their address be 
unsubscribed and banned, given that they have been creating a nuisance for at 
least the last several weeks now?

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-10 Thread Jonathan McKeown
On Thursday 10 June 2010 14:51:42 Rob Farmer wrote:
 On Thu, Jun 10, 2010 at 5:32 AM, Jonathan McKeown j.mcke...@ru.ac.za 
wrote:
[rant about midphase hosting and mpcustomer.com]

 They posted in a previous thread about this, saying they couldn't
 unsubscribe under their address, ie. somebody is relaying mail to
 them. They were told they need to provide headers so postmaster can
 determine what address is subscribed. They never replied (at least on
 list). I'm not an expert about such things but I think without their
 cooperation there's no real way to tell who the relay is.

So this is a hosting company that has had (assuming everyone else is having 
the same experience as I am, namely one ticket per posting) almost 500 junk 
tickets added to their support queue in the last ten days (476 messages on 
the freebsd-questions archive for June when I checked a moment ago), and 
either can't think of a way to address the issue, or doesn't actually care 
enough to do anything about it, all the while presumably having real support 
requests swamped in the noise?

I'd be jumping up and down looking for a solution by now (in fact I would have 
been weeks ago - can anyone remember how long this has been happening?).

Jonathan
(I should probably stress that I am not speaking on behalf of my employer and 
my opinions are entirely my own).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-10 Thread Jonathan McKeown
On Thursday 10 June 2010 15:04:53 Matthew Seaman wrote:

 The only other mechanism might be to tag each list e-mail with a unique
 value for each recipient in such a way that it is preserved in the
 message that mpcustomer.com's help system sends out.  That has severe
 problems of scale and load on the FreeBSD mail servers, but it might be
 possible.  There is a similar technique (whose name I have temporarily
 forgotten) that some mailing lists use where they tag the envelope
 sender address with the recipient name in order to identify addresses
 that are bouncing back the list e-mail.

Isn't that called VERP (variable envelope return path)? I agree - the load it 
would impose isn't worth it. I'm just shocked that midphase care so little 
about their reputation or the impression this is giving, on one of the more 
widely-archived mailing lists, of their competence and diligence.

I'll shut up now.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-11 Thread Jonathan McKeown
On Thursday 10 June 2010 18:30:52 Matthew Seaman wrote:
 On 10/06/2010 17:12:50, Jerry wrote:
  On Thu, 10 Jun 2010 15:12:48 +0200
 
  Jonathan McKeown j.mcke...@ru.ac.za articulated:
 
  Isn't that called VERP (variable envelope return path)? I agree - the
  load it would impose isn't worth it. I'm just shocked that midphase
  care so little about their reputation or the impression this is
  giving, on one of the more widely-archived mailing lists, of their
  competence and diligence.
 
  I have employed VERP with mailing lists that I controlled. I never
  noticed any adverse effects. I know of several technical lists
  like Dovecot that employ it. Obviously, they find it useful.

 VERP itself is reasonably lightweight, as it modifies the envelope
 sender address -- something that can be applied during processing by the
 MTA as part of sending the message.

 As far as mail delivery goes, that's a very different story -- it
 goes from one message with tens of thousands of recipients, to tens
 of thousands of messages each with one recipient.

Exactly - you can't batch up all the messages for users at the same domain 
because they now have different envelope senders. The impact of that on your 
mail delivery system (and the receiver's SMTP receiving system) depends on 
whether you have lots of individual subscribers, or several large groups.

Having said that, I looked up VERP last night to check that I was right about 
the extra load, and came across a reference to VERP being the idea of DJB, 
and being acceptable to qmail users because there's no penalty load - qmail 
never batches up messages for the same domain, always sending each one 
individually. Is that true? It seems an odd design decision to me.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Simulate CRON

2010-06-14 Thread Jonathan McKeown
On Monday 14 June 2010 13:39:15 Carmel wrote:
 On Mon, 14 Jun 2010 16:41:19 +0530

 Amitabh Kant amitabhk...@gmail.com articulated:
  On Mon, Jun 14, 2010 at 3:42 PM, Carmel carmel...@hotmail.com wrote:
   I saw a posting here months ago regarding a way to simulate running
   a script under CRON. I wrote it down and now cannot find it.
   Googling has not proved very useful either. I just cannot remember
   the program name.
  
   I hope I am explaining this sanely enough.
 
  Are you looking for a cron syntax check? If yes, then this site
  should be of some help:
 
  http://www.hxpi.com/cron_sandbox.php

 No, sorry. There was a command or program, I forgot which, that would
 allow a user to run a program under another environment, similar to the
 environment that a script under CRON would be running under.

env(1)?

From the manpage:

The env utility executes another utility after modifying the environment as 
specified on the command line.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Detecting fake library versions

2010-06-17 Thread Jonathan McKeown
On Thursday 17 June 2010 09:39:37 Matthew Seaman wrote:

 But what about hard links? I hear you ask.  Simple:

   find /usr/lib /lib -name '*.so.*' -links +2

+1 surely? + modifier in find(1) means ``more than'', not ``at least''.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to connect a jail to the web ?

2010-08-11 Thread Jonathan McKeown
On Wednesday 11 August 2010 03:07:32 Rocky Borg wrote:
 You should probably preface this by saying you're the author of Qjail
 and have been actively promoting it in a few places including the fbsd
 forums.

That's interesting, given that you're replying to Fbsd8 
fb...@a1poweruser.com. The announcement of qjail came from Aiza 
aiz...@comclark.com.

No reason why someone shouldn't use two email accounts, I guess; but I must 
admit I'd naively assumed fbsd8 was independently endorsing aiza's utility.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Grepping a list of words

2010-08-13 Thread Jonathan McKeown
On Friday 13 August 2010 15:47:38 Jack L. Stone wrote:

 The only thing it didn't do for me was the next step. My final objective
 was to really determine the words in the word.file that were not in the
 main.file. I figured finding matches would be easy and then could then
 run a sort|uniq comparison to determine the new words not yet in the
 main.file.

 Since I will have a need to run this check frequently, any suggestions for
 a better approach are welcome.

sort -u and comm(1)?

comm will compare two sorted files and produce up to three lists: of words 
only in file one, of words only in file 2 and of words common to both files. 
You can suppress any or all of the output lists.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: this is probably a little touchy to ask...

2010-09-15 Thread Jonathan McKeown
On Wednesday 15 September 2010 13:02:41 Jerry wrote:

 It took years, literally, before FreeBSD matured enough to get 64-bit
 drivers for nVidia working correctly on its platform. The failure to
 get the latest version(s) of Java working correctly on FreeBSD and
 thereby, at least in my case, make the latest version of Firefox fully
 usable, rests with the FreeBSD developers.

 I have not been able to ascertain exactly why Java cannot be made
 functional on a modern FreeBSD system. Other than receiving some
 useless suggestion about donating money to the Java foundation, or
 whatever it is called, nobody has responded with an answer.

 The bottom line is that Java appears to be functioning on other flavors
 of *.nix, but not FreeBSD. It would seem pretty obvious where the
 problem lies.

Yes. It lies with Sun and Oracle, and the licensing terms that prevent the 
FreeBSD project from distributing modified Java packages. More generally, the 
problem lies with companies who won't support FreeBSD but also prevent the 
project from supporting their product itself.

There are strong commercial interests in Linux - IBM, Red Hat, Oracle, to name 
three - which makes it worth spending some money supporting a product on 
Linux. (That goes for other products too: nvidia graphics card drivers, 
flash, wireless networking device drivers...) Even so there are products that 
have patchy support in Linux too.

FreeBSD isn't as attractive a commercial target, since it has no financially 
powerful backers (that I'm aware of), a small market share, and not much 
public awareness. Some companies are prepared to sink resources into 
supporting it anyway, and others are prepared to release the information 
needed for the FreeBSD project to support their products for them. There are 
other companies, as I said, that won't do either.

I don't think it's fair to blame the FreeBSD developers for that; nor indeed 
to expect the FreeBSD developers to be responsible for making Sun/Oracle's 
Java and the Mozilla Foundation's Firefox work.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: cksum entire dir??

2012-09-12 Thread Jonathan McKeown
On Wednesday 12 September 2012 08:31:45 Matthew Seaman wrote:
 On 12/09/2012 00:14, Polytropon wrote:
  % cksum directory
[snip]

 That will give you a checksum on the directory inode -- file names and
 associated metadata only, not file content.
[snip]
 Generally I find the best test for differences between old and new
 copies of a filesystem is 'rsync -avx -n ...'

Wouldn't suitable applications of mtree(8) also do what's wanted?

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: cksum entire dir??

2012-09-13 Thread Jonathan McKeown
On Wednesday 12 September 2012 22:29:45 Gary Kline wrote:

   how, with mtree, could I tell  whether dir1 == dir2 or not?

From the manpage:

``The mtree utility compares the file hierarchy rooted in the
current directory against a specification read from the standard
input.  Messages are written to the standard output for any files
whose characteristics do not match the specifications, or which
are missing from either the file hierarchy or the specification.''

So you run mtree twice, once against dir1 with the -c option to output the 
specification for the directory tree to stdout (which you can capture to a 
file, or pipe straight into the second invocation) and once against dir2 with 
the output of the first one as input (either in a pipeline, or by using -f 
with the filename of the captured output).

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


<    1   2   3