Re: Secure apache with php

2009-07-09 Thread Mister Olli
Hi, I'm currently using mpm-itk (on debian, but should be replaced with freebsd soon ;-)). I'm quite happy with the solution as it's easy to setup many user accounts for web without ugly access right stuff and all that. apache never made a problem after setup :-) unfortunately I've never had

Re: FreeBSD HA file cluster possibilities

2009-07-07 Thread Mister Olli
Hi, I'm curious about your solution. Let me know if you have one :-) I'm wondering if d) is possible in FreeBSD as from my view it would be the best solution. Wether you use synchronous (assuming you have sufficient bandwith) or asynchronous writes. A wonderful solution would be if AFS would

ZFS and block device replication

2009-06-19 Thread Mister Olli
Hi, I'm starting digging into FreeBSD and ZFS and came up with a question which is bothering me. I'm thinking about placing block device replication (e.g. via DRDB or NDB) under a ZFS/ ZVOL. It would improve replication as it's done immediately, not within a time-frame (as the 'zfs

Re: Samba3 domain controller howto?

2009-06-08 Thread Mister Olli
hi, yes, you are mis-understanding samba itself is a NT4-type domain. not quite right. It depends on the samba version your using. - samba3 only provides NT4-type domains - samba4 provides active directory domain types including GPO (I have such a setup running in 7.SOMETHING with around 10

RE: Samba3 domain controller howto?

2009-06-08 Thread Mister Olli
directory i'd like to try it. And get it all going, with samba3 as well. Thanks. Dave. -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Mister Olli Sent: Monday, June 08, 2009 7:18 AM To: Tim Judd Cc: Olivier

Re: Samba3 domain controller howto?

2009-06-08 Thread Mister Olli
hi, Where did you get samba4? How did you download? How did you compile on FreeBSD? You can share your ./configure args? have a look into the mail I just posted on freebsd-questions, it includes links to the samba wiki where installation is explained in detail. And your smb.conf and loop

Re: Assign IP address and hostname via kernel parameter

2009-06-08 Thread Mister Olli
the kernel parameters. Setting this to 'true' would simply fire up the shell script to do all the stuff. Any suggestions or hints on this??? Regards, --- Mr. Olli On Wed, 2009-05-06 at 17:52 +0100, Bob Bishop wrote: Hi, On 6 May 2009, at 16:20, Mister Olli wrote: is there a way

Re: FreeBSD Software RAID

2009-05-25 Thread Mister Olli
Hi, I remember building a RAID5 on gvinum with 3 500GB hard drives some months ago, and it took horribly long to initialize the raid5 (several hours). It seems to be a one-time job, cause since the raid finished it's initialization the machine starts up/ reboots within normal times. The

Re: Assign IP address and hostname via kernel parameter

2009-05-11 Thread Mister Olli
, On 6 May 2009, at 16:20, Mister Olli wrote: is there a way to configure IP address and hostname on freebsd systems via kernel command line parameters? [etc] When running diskless, the loader sets kernel variables like: boot.netif.gateway=192.168.198.1 boot.netif.hwaddr=00:15:17:47:14

Assign IP address and hostname via kernel parameter

2009-05-06 Thread Mister Olli
Hi, is there a way to configure IP address and hostname on freebsd systems via kernel command line parameters? I have some freebsd systems in as xen domU's and it would be really great to be able to set the ip address hostname within the configuration file for the domU. I'm aware that I could

Re: Sorting out owner and group permissions...

2009-04-21 Thread Mister Olli
hi, I have the same problem on some fileservers I do the administration for. But in my case the users send the files via SSH to the server. A solution for this, based on some OS mechanism would be really great :-) Anyone ever had to solve that problem? Regards, --- Mr. Olli On Mo, 2009-04-20

Re: Sorting out owner and group permissions...

2009-04-21 Thread Mister Olli
hi, no does not work, since using SSH / SFTP does not involve starting a shell. so umask settings don't work. Regards, --- Mr. Olli On Di, 2009-04-21 at 14:36 +0200, Mel Flynn wrote: On Tuesday 21 April 2009 11:17:40 Mister Olli wrote: hi, I have the same problem on some fileservers I

Re: Sorting out owner and group permissions...

2009-04-21 Thread Mister Olli
:13:47 Mister Olli wrote: no does not work, since using SSH / SFTP does not involve starting a shell. so umask settings don't work. Then you're using the wrong system for the task. The OS can't make assumptions about what the ownership/modes of a file should really be, if an application

Re: Execute and lock a user into a program upon login

2009-03-15 Thread Mister Olli
hi... have a look here: http://docs.hp.com/en/5991-7517/ch01s04.html I think the cleanest solution would be to create a match block for your user, and apply the forcecommand within that block... -- Olli On Fr, 2009-03-13 at 21:50 -0400, Steve Bertrand wrote: Jonathan Chen wrote: On

Re: Monitoring geom

2009-03-06 Thread Mister Olli
Michael Lucas' Absolute FreeBSD book page 550: FreeBSD can include a status check of your mirrored disks in its daily periodic(8) run. Just add the line daily_status_gmirror_enable=YES to /etc/periodic.conf. Not sure about other raid types beyond mirrors. On 3/5/09, Mister Olli

Re: Monitoring geom

2009-03-06 Thread Mister Olli
Hi, thanks for the tip, but somehow nagios is completly overdosed for the customer I'm installing this thing for... Seems like there's no way than coding it myself... greetz olli Am Freitag, den 06.03.2009, 07:21 +0100 schrieb Frederique Rijsdijk: Mister Olli wrote: Hi hi... What

Monitoring geom

2009-03-05 Thread Mister Olli
Hi hi... What is the best way to monitor geom software raids (gmirror gvinum raid5)??? The solution I'm searching for should be a kind of script which checks the status, and drops me an email if something is wrong. I found a nagios plugin, but currently I'm unable to invest enough time to get

Re: sysctl machdep.independent_wallclock

2009-01-15 Thread Mister Olli
hi... what is the exact function of this sysctl setting? I'm guessing it's something to do with Xen, having seen a few references in Linux for xen.machdep.independent_wallclock. Have a look here: http://docs.xensource.com/XenServer/4.0.1/guest/ch04s06.html yeah, I know that

sysctl machdep.independent_wallclock

2009-01-14 Thread Mister Olli
hi... what is the exact function of this sysctl setting? I couldn't find any documentation on it. greetz olli ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Problems with FreeBSD 8-CURRENT as Xen domU

2009-01-13 Thread Mister Olli
hi... I've managed to compile and setup a paravirtualized domU with FreeBSD 8 (SVN snapshot from 'head'). Currently I'm running into two mayor problems: - The system time is not behaving as expected. Example: I fired the domain up at 01:43 in the morning and

Re: Which FreeBSD is best for my PC?

2008-12-01 Thread Mister Olli
hi... Which version and GUI will work best on the internet with my AT Pentium II 350MHz x86-based PC? Some web sites require Flash Player 8 or higher, and some require 128-bit encryption I think, but doesn't 40-bit encryption process data 3 times faster? How many bit encryption is the

Re: analyzing freebsd core dumps

2008-10-08 Thread Mister Olli
06.10.2008, 13:45 -0400 schrieb Jerry McAllister: On Mon, Oct 06, 2008 at 10:18:09AM -0700, Jeremy Chadwick wrote: On Mon, Oct 06, 2008 at 08:04:07AM +0200, Mister Olli wrote: hi list... I have a freebsd maschine running for more 6 months without any problems. the machine's only

analyzing freebsd core dumps

2008-10-06 Thread Mister Olli
hi list... I have a freebsd maschine running for more 6 months without any problems. the machine's only service is to be an openvpn gateway for a hand of users. 2 weeks ago the first problems started. the openvpn exited with signal 11 and 4 and core dumps were written. the same happend

Re: Enforce minimal file/ dir permissions

2008-06-21 Thread Mister Olli
16.06.2008, 08:21 -0400 schrieb Bill Moran: In response to Mister Olli [EMAIL PROTECTED]: Hi... on my filer I have to enforce minimal file permission of 664 for files and 755 for directorys. no user should be able to change them to a value less than that. any ideas how to do

Re: Enforce minimal file/ dir permissions

2008-06-17 Thread Mister Olli
hi Am Montag, den 16.06.2008, 08:51 -0500 schrieb Jeffrey Goldberg: On Jun 16, 2008, at 7:21 AM, Bill Moran wrote: Look at MAC and the bsdextended module (filesystem firewall): http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html

Enforce minimal file/ dir permissions

2008-06-16 Thread Mister Olli
Hi... on my filer I have to enforce minimal file permission of 664 for files and 755 for directorys. no user should be able to change them to a value less than that. any ideas how to do this? greetz olli ___ freebsd-questions@freebsd.org mailing

Re: Running with a readonly root partition

2008-06-13 Thread Mister Olli
hi... do you have some kind of installation/setup manual? that would be really interesting to see your steps, and try that myself. I have some questions too: - how do you handle updates/ installation of new software? - how do you prevent someone who hacked the machine to remount '/' as

Re: force file permission

2008-05-18 Thread Mister Olli
hi... [SNIP] but not the access via SSH/SCP. Is there any way to accomplish this? the solution needs to cover the following: - files created on the fileserver itself (during SSH session) need to have the permissions - files copied to the fileserver via SCP/SFTP need to have the

Re: VPN setup question

2008-05-18 Thread Mister Olli
hi... Hi everyone. I'm looking for a tutorial on how to setup a VPN server on Freebsd. Since I'm unfamiliar with VPN, a guide that is as simple as possible would be preferred. Thanks in advance for any help you can offer. first you should consider the following questions: - what

force file permission

2008-05-15 Thread Mister Olli
hi list... I have to administrate a fileserver based on freebsd-7 where users have access to via SMB and SSH. my permission setup is configured, so that a user needs to be in a special group to have access to certain files. for that all file must have permissions set to 660 and directories to