Re: mysql connection through ssl tunnel

2008-10-20 Thread John Almberg
On Sep 23, 2008, at 10:09 AM, Vincent Hoffman wrote: John Almberg wrote: I have two FreeBSD machines. One is a application server, the other a database server running mysql. These machines are in two different locations. I'd like to allow the application server to access mysql through an SSH

Fwd: mysql connection through ssl tunnel

2008-10-20 Thread John Almberg
with 'kill -1 1'. This looks dangerous... -- John Websites and Marketing for On-line Collectible Dealers Identry, LLC John Almberg (631) 546-5079 [EMAIL PROTECTED] www.identry.com

Re: mysql connection through ssl tunnel

2008-10-20 Thread John Almberg
On Oct 20, 2008, at 4:50 PM, John Almberg wrote: After a few hours of work today, I have all this working perfectly. I'm using autossh to automatically create and monitor the ssh tunnel, and I can make mysql connections through the tunnel with no problems. Very cool. And that's

Re: mysql connection through ssl tunnel

2008-10-20 Thread John Almberg
On Oct 20, 2008, at 5:21 PM, Jeremy Chadwick wrote: On Mon, Oct 20, 2008 at 03:25:23PM -0400, John Almberg wrote: On Sep 23, 2008, at 10:09 AM, Vincent Hoffman wrote: John Almberg wrote: I have two FreeBSD machines. One is a application server, the other a database server running mysql

Re: mysql connection through ssl tunnel

2008-10-21 Thread John Almberg
On Oct 20, 2008, at 11:09 PM, Peter Boosten wrote: John Almberg wrote: I tried this, and not surprisingly, it didn't work. Now I'm trying to debug it... Maybe some mixup in the keys? In my example ssh tries to read the private key of root on the connecting server, so the server where

Re: mysql connection through ssl tunnel

2008-10-21 Thread John Almberg
On Oct 21, 2008, at 3:44 AM, Matthew Seaman wrote: John Almberg wrote: I do know that Mysql supports SSL... somehow this got discounted early in the discussion, perhaps mistakenly? I believe the thinking was that although MySQL claims to support SSL, it does in fact make a pretty bodge

Re: mysql connection through ssl tunnel

2008-10-21 Thread John Almberg
Now I just need to figure out how to start it on reboot, but that is something I've been meaning to learn, anyway, so I don't mind. I hope you guys will bear with me just a little more... I have spent the day trying to figure out how to create an rc script for autossh. Very cool, and not

Re: mysql connection through ssl tunnel

2008-10-22 Thread John Almberg
Now I just need to figure out how to start it on reboot, but that is something I've been meaning to learn, anyway, so I don't mind. I hope you guys will bear with me just a little more... I have spent the day trying to figure out how to create an rc script for autossh. Very cool, and not

Re: mysql connection through ssl tunnel

2008-10-22 Thread John Almberg
Answering my own question (probably the best way)... I solved this problem by figuring out how to execute the command inside the rc script as a non-root user. Like so: autossh_start() { echo ${command} ${command_args} su admin -c ${command} ${command_args} echo started autossh } This

Re: Question on creating a video server

2008-11-08 Thread John Almberg
On Nov 8, 2008, at 1:40 PM, Ted Mittelstaedt wrote: Hi All, OK, I'm just asking for opinions here on some application software. Like most people we have a nice big 21 TV set that will be obsolete in Feb. I have been thinking about replacing this with a big screen TV set but the prices

Re: Disallowing ssl2

2008-11-11 Thread John Almberg
On Nov 11, 2008, at 8:50 AM, John Almberg wrote: My server got an audit for PCI compliance and was red-flagged for allowing SSL2 connections, which they have some problem with. They want the server to use SSL3 or TLS: Synopsis : The remote service encrypts traffic using a protocol

Disallowing ssl2

2008-11-11 Thread John Almberg
My server got an audit for PCI compliance and was red-flagged for allowing SSL2 connections, which they have some problem with. They want the server to use SSL3 or TLS: Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service

Re: Disallowing ssl2

2008-11-11 Thread John Almberg
It's certainly possible to insist on SSLv3 or TLSv1 for SSL connections, and nothing[*] will break. The client and server will negotiate to find a mutually acceptable cipher and protocol level at the point of making the connection. This seems to be less painful than I was anticipating...

Re: (no subject)

2008-11-14 Thread John Almberg
Perhaps you should try the linux distros first to get a bit of a feel of *nix variants? FreeBSD can be daunting to the first time user, but is one hell of a production system once you know how to handle it properly. Several people in this thread have made this recommendation... I disagree

snmpd strangeness

2008-11-19 Thread John Almberg
I just noticed something odd and am looking for ideas... As you can see from the top snippet below, snmpd is getting hammered by something. As a comparison, the load averages for this quad-core box are usually close to zero. I'm not even sure I'm using snmpd for anything... not even sure

Re: snmpd strangeness

2008-11-19 Thread John Almberg
On Nov 19, 2008, at 11:49 AM, Jeremy Chadwick wrote: On Wed, Nov 19, 2008 at 10:57:50AM -0500, John Almberg wrote: I just noticed something odd and am looking for ideas... As you can see from the top snippet below, snmpd is getting hammered by something. As a comparison, the load averages

Re: snmpd strangeness

2008-11-19 Thread John Almberg
taking up 2621MBytes of memory (RSS), BTW, after restarting, the process was a much more reasonable size. Another indicator that something had gone seriously wrong with it. 41659 root1 960 23072K 6636K select 0 0:05 0.34% snmpd Luckily, Monit alerted me to the problem

Re: snmpd strangeness

2008-11-19 Thread John Almberg
Now I'm curious about snmp, so perhaps I'll try to figure out how to get it to something useful. This machine has 8 hard drives, and is located in Manhattan, so I would certainly like to be informed if one of the raid drives went on the blink. That was one of the things he was trying to

Re: snmpd strangeness

2008-11-19 Thread John Almberg
This machine has an Intel motherboard and a hardware raid controller. From what I can tell, there is some Intel software installed on the machine that makes hardware faults visible to snmp. That would require Net-SNMP to be linked to that software (or library) directly. Two things can't just

Re: snmpd strangeness

2008-11-19 Thread John Almberg
The card in the box is a Intel 18E PCI-Express x8 SAS/SATA2 Hardware ROMB RAID with 128MB Memory Module and 72 Hour Battery Backup Cache $625 as shown on the packing list, so I hope it's a good one. Ah, I think it's hardware RAID, and PCIe to boot. Yes, I would recommend keeping that!

Re: snmpd strangeness

2008-11-19 Thread John Almberg
On Nov 19, 2008, at 4:09 PM, Ott Köstner wrote: John Almberg wrote: If not, how would I find the driver info? Typical line in fstab: /dev/mfid0s1a / ufs rw 1 1 Hey! # mount to see what is mounted I did this, but /dev/mfid0s1a didn't

rsync throwing odd error

2008-11-21 Thread John Almberg
This is the week for strange problems... I use rsync to copy tinydns data files to backup name servers. This has been working for about a year with no problem. Suddenly, I am getting odd errors: /usr/local/bin/rsync -az -e 'ssh ' data.cdb [EMAIL PROTECTED]:/usr/

Re: rsync throwing odd error

2008-11-21 Thread John Almberg
On Nov 21, 2008, at 12:50 PM, John Almberg wrote: This is the week for strange problems... I use rsync to copy tinydns data files to backup name servers. This has been working for about a year with no problem. Suddenly, I am getting odd errors: /usr/local/bin/rsync -az -e 'ssh ' data.cdb

Re: rsync throwing odd error

2008-11-21 Thread John Almberg
A... a reverse DNS problem! Nope... wasn't that. Reverse DNS was working fine. I just didn't know how to check it properly. Well, that was a good idea. Time to find another one! - John ___ freebsd-questions@freebsd.org mailing list

Re: FreeBSD on a Mac Mini Intel?

2008-11-23 Thread John Almberg
On Nov 21, 2008, at 11:42 PM, Ian Jefferson wrote: Is anyone running FreeBSD on a Mac Mini Intel? I don't know the answer to your question, but don't think it's a crazy one. One of the most interesting things I've seen, lately, is a hosting company that uses stacks of Mac Minis running

How to find files that are eating up disk space

2008-12-17 Thread John Almberg
Here is another newbie question that is driving me crazy, but is probably a laughable situation to an experienced admin... I've got a smallish server that is suddenly out of disk space in the '/' partition. Probably some log files have gotten out of hand. I am going to start looking for

Re: How to find files that are eating up disk space

2008-12-17 Thread John Almberg
Is there a command line tool that will help me figure out where the problem is? I should probably have mentioned that what I currently do is run du -h -d0 / and gradually work my way down the tree, until I find the directory that is hogging disk space. This works, but is not

Re: How to find files that are eating up disk space

2008-12-17 Thread John Almberg
Is there a command line tool that will help me figure out where the problem is? I should probably have mentioned that what I currently do is run du -h -d0 / and gradually work my way down the tree, until I find the directory that is hogging disk space. This works, but is not

Re: How to find files that are eating up disk space

2008-12-17 Thread John Almberg
On Dec 17, 2008, at 1:53 PM, Karl Vogel wrote: On Wed, 17 Dec 2008 12:16:57 -0500, John Almberg jalmb...@identry.com said: J Is there a command line tool that will help me figure out where the [disk J space] problem is? I run a script every night to handle this. snip exit 0

Re: Suitability question

2008-12-18 Thread John Almberg
On Dec 18, 2008, at 4:25 PM, Patrick Baldwin wrote: Usually I'm asking questions for work related things. This one is more personal. My father has this tendency to end up wrecking his computer if he uses the Internet much. Computers are basically magic boxes to him, so education is of

How do I configure PHP to use curl?

2008-12-30 Thread John Almberg
I just ran into something that has me stumped. It's probably a real newbie question, but I can't figure it out... I'm trying to add curl support to my PHP installation, but when I run 'make config' in the /usr/ports/lang/php5 directory, curl is not one of the very small set of options

Re: How do I configure PHP to use curl?

2008-12-30 Thread John Almberg
On Dec 30, 2008, at 1:26 PM, Michael Powell wrote: John Almberg wrote: I just ran into something that has me stumped. It's probably a real newbie question, but I can't figure it out... I'm trying to add curl support to my PHP installation, but when I run 'make config' in the /usr/ports/lang

Re: How do I configure PHP to use curl?

2008-12-30 Thread John Almberg
On Dec 30, 2008, at 1:36 PM, Glen Barber wrote: On Tue, Dec 30, 2008 at 1:35 PM, Glen Barber glen.j.bar...@gmail.com wrote: On Tue, Dec 30, 2008 at 1:16 PM, John Almberg jalmb...@identry.com wrote: I just ran into something that has me stumped. It's probably a real newbie question, but I

Re: Web server password management

2009-01-02 Thread John Almberg
On Jan 2, 2009, at 2:36 AM, stan wrote: I am setting up an Aoache2 webserver, and I want to require authenticon for some of it's contents. I am thinking of using htaccess. Is there a package that I can install that will allow users to request that various account management tasks be done.

Old user can't log in

2009-02-12 Thread John Almberg
Just ran into a strange problem... I have a long-standing user account on my FreeBSD box that no longer works. She can't ssh into the box, and I can't even su to her account. $ su jessica Password: su: setusercontext: Invalid argument Doing some googling, I did find people with similar

Re: Old user can't log in

2009-02-12 Thread John Almberg
On Feb 12, 2009, at 7:19 PM, Chuck Swiger wrote: On Feb 12, 2009, at 3:14 PM, John Almberg wrote: Just ran into a strange problem... I have a long-standing user account on my FreeBSD box that no longer works. She can't ssh into the box, and I can't even su to her account. $ su jessica

Re: Old user can't log in

2009-02-13 Thread John Almberg
On Feb 13, 2009, at 1:21 AM, Da Rock wrote: On Thu, 2009-02-12 at 21:52 -0800, Chuck Swiger wrote: On Feb 12, 2009, at 8:52 PM, Da Rock wrote: With reasonable organization, and appropriate use of sudo or setgid binaries for things like people who use SVN or CVS, there generally isn't reason

tab-delimited to csv

2009-02-16 Thread John Almberg
Can anyone suggest a way to convert a tab-delimited file to csv using standard unix utilities? I could whip up a Ruby script to do it, but I hate to reinvent the wheel. Thanks: John ___ freebsd-questions@freebsd.org mailing list

Re: tab-delimited to csv

2009-02-16 Thread John Almberg
On Feb 16, 2009, at 12:16 PM, Adam Vande More wrote: John Almberg wrote: Can anyone suggest a way to convert a tab-delimited file to csv using standard unix utilities? I could whip up a Ruby script to do it, but I hate to reinvent the wheel. Thanks: John

Re: tab-delimited to csv

2009-02-16 Thread John Almberg
On Feb 16, 2009, at 12:55 PM, Roland Smith wrote: On Mon, Feb 16, 2009 at 11:55:50AM -0500, John Almberg wrote: Can anyone suggest a way to convert a tab-delimited file to csv using standard unix utilities? I could whip up a Ruby script to do it, but As long as the files don't contain

Re: tab-delimited to csv

2009-02-16 Thread John Almberg
On Feb 16, 2009, at 1:25 PM, Adam Vande More wrote: John Almberg wrote: On Feb 16, 2009, at 12:55 PM, Roland Smith wrote: On Mon, Feb 16, 2009 at 11:55:50AM -0500, John Almberg wrote: Can anyone suggest a way to convert a tab-delimited file to csv using standard unix utilities? I could

Battery powered, SBC that can run BSD

2009-03-05 Thread John Almberg
Hope this isn't too off topic... And I'm not sure of my terminology... I'm looking for a small, single board computer that can run for a week or two on batteries (so very low power drain), topped up by solar cells when the sun is out, and that can run some sort of unix... preferably one of

Re: Battery powered, SBC that can run BSD

2009-03-05 Thread John Almberg
On Mar 5, 2009, at 9:12 AM, George Davidovich wrote: soekris.com Nice. Thanks. -- John ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: / partition full

2009-03-13 Thread John Almberg
On Mar 13, 2009, at 8:46 AM, Bill Moran wrote: In response to Wojciech Puchar woj...@wojtek.tensor.gdynia.pl: good lesson to NOT make multiple partitions :) And when a rogue app fills up /var and kills 4 other apps that could have kept going ... are we then learning conflicting lessons?

links vs real directories

2009-03-16 Thread John Almberg
I always thought that links to real directories were pretty much the same as real directories, but I've just discovered a situation where they are not and I'm wondering if I'm doing something wrong... I have a Ruby on Rails application running on a FreeBSD server. All Rails apps use the

Re: links vs real directories

2009-03-16 Thread John Almberg
On Mar 16, 2009, at 11:22 AM, John Almberg wrote: I always thought that links to real directories were pretty much the same as real directories, but I've just discovered a situation where they are not and I'm wondering if I'm doing something wrong... I have a Ruby on Rails application

Re: links vs real directories

2009-03-16 Thread John Almberg
On Mar 16, 2009, at 11:39 AM, Erik Trulsson wrote: On Mon, Mar 16, 2009 at 11:22:13AM -0400, John Almberg wrote: I always thought that links to real directories were pretty much the same as real directories, but I've just discovered a situation where they are not and I'm wondering if I'm

Re: links vs real directories

2009-03-16 Thread John Almberg
On Mar 16, 2009, at 11:47 AM, John Almberg wrote: On Mar 16, 2009, at 11:39 AM, Erik Trulsson wrote: On Mon, Mar 16, 2009 at 11:22:13AM -0400, John Almberg wrote: I always thought that links to real directories were pretty much the same as real directories, but I've just discovered

utility that scans lan for client?

2009-03-23 Thread John Almberg
I've tried googling for this, but I guess I don't know the name of a utility such as this... What I'm looking for is a utility that can scan a LAN for attached clients... i.e., computers that are attached to the LAN. I have one box (an appliance that I have no access to), that is on the

Re: utility that scans lan for client?

2009-03-23 Thread John Almberg
On Mar 23, 2009, at 3:10 PM, Mel Flynn wrote: On Monday 23 March 2009 19:59:36 John Almberg wrote: I've tried googling for this, but I guess I don't know the name of a utility such as this... What I'm looking for is a utility that can scan a LAN for attached clients... i.e., computers

Re: utility that scans lan for client?

2009-03-23 Thread John Almberg
On Mar 23, 2009, at 3:19 PM, David Kelly wrote: On Mon, Mar 23, 2009 at 02:59:36PM -0400, John Almberg wrote: I've tried googling for this, but I guess I don't know the name of a utility such as this... What I'm looking for is a utility that can scan a LAN for attached clients... i.e

Re: utility that scans lan for client?

2009-03-24 Thread John Almberg
I suspect that you don't have a switch that can port 'mirror' or 'span'. If you do, let us know. Otherwise, if you *really* want to find out what is on your switched Ethernet network, and nmap/arp etc. isn't enough, then I'd recommend an application called 'ettercap'. It runs on the CLI, and

how to recover after power outage

2009-04-05 Thread John Almberg
Blast... my beautiful FreeBSD servers were rudely switched off when my data had a power outage a couple hours ago. They restored power about 30 minutes later, and one box came up no problem. The other has a login prompt on the serial console, but my login does not work. I get a Login

Re: how to recover after power outage

2009-04-05 Thread John Almberg
On Apr 5, 2009, at 4:41 AM, Glen Barber wrote: On Sun, Apr 5, 2009 at 2:59 AM, John Almberg jalmb...@identry.com wrote: Blast... my beautiful FreeBSD servers were rudely switched off when my data had a power outage a couple hours ago. They restored power about 30 minutes later, and one

Re: how to recover after power outage

2009-04-05 Thread John Almberg
The main app is MySQL. I don't think it is running, but can't really tell unless I can log in. I have backups, and while NYI is trying to get this box running, I'm setting up a new database server, just in case... If you were lucky having the guys at NYI login to single user mode at the

Re: how to recover after power outage

2009-04-05 Thread John Almberg
On Apr 5, 2009, at 2:10 PM, Michael Powell wrote: John Almberg wrote: [snip] Okay, so the machine is back online and I can log in again. The hardware is only 18 months old or so... good quality stuff, so hopefully nothing is physically damaged. We'll see... Unfortunately, mysql isn't

Re: how to recover after power outage

2009-04-06 Thread John Almberg
Check the machine-hostname.err file when you manually try and start MySQL. Provided that you have mysql_enable=YES in /etc/rc.conf you should be able to manually attempt to start with /usr/local/etc/rc.d/mysql-server start (it seems to work reliably when you type out the entire command path-

How to remove all files with a certain extension

2009-04-06 Thread John Almberg
This is a real newbie question, but I can't figure it out... I want to remove all .tar files from a directory tree. I think something like the following should work, but I must have something wrong, because it doesn't: find . -name *.tar -exec rm /dev/null {} \; What am I doing wrong?

Re: How to remove all files with a certain extension

2009-04-06 Thread John Almberg
On Apr 6, 2009, at 4:57 PM, John Almberg wrote: This is a real newbie question, but I can't figure it out... I want to remove all .tar files from a directory tree. I think something like the following should work, but I must have something wrong, because it doesn't: find . -name *.tar

Re: How to remove all files with a certain extension

2009-04-06 Thread John Almberg
On Apr 6, 2009, at 5:11 PM, Dan Nelson wrote: In the last episode (Apr 06), John Almberg said: This is a real newbie question, but I can't figure it out... I want to remove all .tar files from a directory tree. I think something like the following should work, but I must have something

How big can a tar file get?

2009-04-06 Thread John Almberg
Because of a big problem I had this weekend, I need to do an emergency backup. I'm basically just creating a tar file of my /home directory. My question: how big can a file get on FreeBSD? This tar.gz file is already 5G. Hard drive space is no problem, but as I'm watching this file grow,

Re: How big can a tar file get?

2009-04-06 Thread John Almberg
On Apr 6, 2009, at 7:28 PM, Adam Vandemore wrote: John Almberg wrote: Because of a big problem I had this weekend, I need to do an emergency backup. I'm basically just creating a tar file of my / home directory. My question: how big can a file get on FreeBSD? This tar.gz file is already

Re: How big can a tar file get?

2009-04-06 Thread John Almberg
With the default blocksize (16384) UFS2 can deal with files up to 128TB. However traditional tar only supports up to 8GB while the newer ustar format goes up to 64GB. It seems that at least on 7.x tar creates ustar archives by default Well, I'm already past 10GB, so good thing I'm on

Re: C programming question

2009-04-07 Thread John Almberg
On Apr 7, 2009, at 5:41 AM, Valentin Bud wrote: Hello community, I have built with a micro controller a system of power plugs that can be controlled through the serial port. I have 2 plugs that i can start/stop and check the status of them. This is accomplished by sending different

Re: low-level format before install?

2009-04-07 Thread John Almberg
On Apr 7, 2009, at 3:37 PM, Chuck Swiger wrote: On Apr 7, 2009, at 12:15 PM, John Almberg wrote: Well, I've got real problems with that database server that lost power over the weekend. We reloaded FreeBSD from scratch and then reinstalled mysql, and pf. I loaded up my database

low-level format before install?

2009-04-07 Thread John Almberg
Well, I've got real problems with that database server that lost power over the weekend. We reloaded FreeBSD from scratch and then reinstalled mysql, and pf. I loaded up my database and switched over all my customer's websites. The database server ran fine for about 2 minutes, and then

Re: low-level format before install?

2009-04-07 Thread John Almberg
Thanks for all the tips. At least I have something to start with. The guys in the data center reinstalled FreeBSD (the filesystem was totally corrupted again), and then ran what they called SMART test, which might be smartctl, and said the hard drives look good. I am now able to get back

How to diagnose hardware problem?

2009-04-13 Thread John Almberg
I have what looks like a hardware problem with an Intel 1U server, which I am using mainly as a mysql database server for some of my bigger website clients. The server went down last week with a badly corrupted file system. After spending a day trying to fix the file system, we gave up and

Re: How to diagnose hardware problem?

2009-04-13 Thread John Almberg
First things first; if the machine is still in warranty, don't mess with it but send it back to the manufacturer and demand a replacement. It is in warranty and I am following their process. I'm hoping to short-circuit that process by finding the problem on my own, if possible. Plus,

Fwd: How to diagnose hardware problem?

2009-04-13 Thread John Almberg
On Apr 13, 2009, at 2:32 PM, Wojciech Puchar wrote: The database ran well for about 2 minutes, then the server crashed again. The filesystem was again corrupted so badly that we could not even log in to look at the logs. did memtest? it looks like it's fine until you stress your hardware

where to grab source tarball?

2009-04-15 Thread John Almberg
I'm trying to upgrade FreeBSD from source, but my /usr/src directory is empty. Absolute FreeBSD glibly says to grab the source tarball from a FreeBSD mirror. I found a list of mirrors here: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors- ftp.html But it isn't clear to

Re: where to grab source tarball?

2009-04-15 Thread John Almberg
On Apr 15, 2009, at 4:10 PM, John Almberg wrote: I'm trying to upgrade FreeBSD from source, but my /usr/src directory is empty. Absolute FreeBSD glibly says to grab the source tarball from a FreeBSD mirror. Never mind. I figured out how to do this using csup, which will help with later

Upgrading from 6.3 to 7.1 -- how dangerous?

2009-04-19 Thread John Almberg
I need to upgrade a live, production server from 6.3 to 7.1. I can't afford to have any troubles with this server. I have Absolute FreeBSD and a few other BSD books, and the upgrade process looks fairly straightforward. That's the theory... Real world question: how scared should I be?

Sorting out owner and group permissions...

2009-04-20 Thread John Almberg
I have a directory called 'scans' that is owned by 'master', but I want to allow 'customer' to FTP images to that directory. This is the way I have permissions set: # ls -l drwxrwxr-x 5 master customer 251904 Apr 20 10:29 scans The problem is that when customer ftp's a file to the

Re: Sorting out owner and group permissions...

2009-04-20 Thread John Almberg
On Apr 20, 2009, at 2:48 PM, John Almberg wrote: I have a directory called 'scans' that is owned by 'master', but I want to allow 'customer' to FTP images to that directory. This is the way I have permissions set: # ls -l drwxrwxr-x 5 master customer 251904 Apr 20 10:29 scans

cvsup blues

2010-01-04 Thread John Almberg
I am trying to update my ports collection on a new server using cvsup. I've added a mirror site to my ports-supfile, but keep getting the following error message: on# csup -g -L 2 /root/ports-supfile Parsing supfile /root/ports-supfile Connecting to cvsup7.us.FreeBSD.org Cannot connect to

Re: cvsup blues

2010-01-04 Thread John Almberg
The csup servers do have a rate-limiting feature on them. However, I think it gives a different error message than that. Operating not permitted makes it seem more like a networking issue on the local machine. Can you ping the IP? Firewall blocking outgoing ports? I pinged a few of the mirror

Re: cvsup blues

2010-01-04 Thread John Almberg
John Almberg wrote: I am trying to update my ports collection on a new server using cvsup. I've added a mirror site to my ports-supfile, but keep getting the following error message: on# csup -g -L 2 /root/ports-supfile Parsing supfile /root/ports-supfile Connecting to cvsup7.us.FreeBSD.org

required apache22 modules

2010-01-07 Thread John Almberg
I'm installing Apache22 on a new server and for once, I'd like to install just the modules I need, instead of the default mess. I've been googling for this answer, but can't seem to find it: Are any apache modules *required*? Or can I just disable them all and then add them in as I need them?

Why does soft link in /var/log disappear?

2010-02-15 Thread John Almberg
I didn't make my /var partition big enough, way back when, and have had to move my /var/log/www directory to another partition. I did this by moving the directory, and then adding a soft link from /var/log to the moved directory, using something like: ln -s /home/wwwlog /var/log/www This

IP Address not working?

2011-03-25 Thread John Almberg
I have a Freebsd box that has had just one IP address for a long time. I am trying to add another to run a website with it's own IP, ssl cert, etc. I've added IP addresses to boxes before without problem, but either this box has a problem, or I've forgotten something important (probably the

Re: IP Address not working?

2011-03-25 Thread John Almberg
Well, I figured it out. There was another machine configured with the same address. I was pinging another machine, in other words. The address is in my address range, but it isn't one of my two machines in the rack, so I'm working with the colo guys to figure out what is sitting on my

Is it necessary to generate a new SSL request each year?

2009-04-29 Thread John Almberg
When buying a new SSL cert, I've been generating a new request each year... I am just about to buy another and it occurred to me that I'm entering the same info. Do I really need a new request file each year? Or can I just reuse the same one (presuming none of the info has changed.) --

Re: Is it necessary to generate a new SSL request each year?

2009-04-30 Thread John Almberg
You can reuse the old one. I'm not an expert on these, but it was my understanding that certificates carry in internal expiration date after which the application may respond as it pleases. Yes, but the *request* does not. Also, if using openssl, just set the defaults in /etc/ssl/

Re: [pure-ftpd] Security Scan question

2009-05-02 Thread John Almberg
On May 2, 2009, at 8:50 AM, Frank Denis wrote: Hello Josh, Le Fri, May 01, 2009 at 08:55:10AM -0500, Josh Trutwin ecrivait : Because I programmed a custom cart solution for one of my customers, their merchant account is doing a monthly server scan to check for known vulnerabilities.

Re: Backing up FreeBSD and other Unix systems securely

2009-05-18 Thread John Almberg
Is there any possibility of using your own media locally - such as tape or a large USB attached disk?If security is such a primary concern, I can't see sending the data to that type of offsite thing. Get a couple of large USB SATAs and use dump(8) to back the stuff up on them.Write them

Re: What server hardware are you buying from the big companies these days?

2009-06-08 Thread John Almberg
Hi, I need to buy some new servers, and mgmt has decreed that we get them from someplace which will provide service contracts with on-site h/w suppport, which means HP, Dell, Sun, IBM, etc. I have two Intel servers that I like a lot. I don't have on-site support, but it might be

Re: PDF inventory software

2009-06-09 Thread John Almberg
On Jun 8, 2009, at 5:17 PM, Daniel Underwood wrote: I'm looking for a way to manage my personal collection of research articles. Ideally I'd like some way to keep records on authors, keywords, journals, and publication years of articles (PDF files) downloaded onto my local drive. In the

Re: Terminal / vim / shortcuts

2009-06-14 Thread John Almberg
I edit python code in vim using Terminal on xfce. I find myself, not surprisingly, having to exit insert mode and save changes frequently (when making code changes and wishing to test the immediate effects of the changes in a separate terminal). This requires pressing 4 keys: esc, :, w,

Compact Freebsd 'appliance'

2009-06-18 Thread John Almberg
I have a client who has an application that he wants to deploy in his customer's offices as a headless 'appliance'. Basically, just a black box that you can plug into a Lan, turn it on, and it runs. No floppy disk or CD, no monitor/keyboard, just remotely managed. This application won't

Re: Compact Freebsd 'appliance'

2009-06-18 Thread John Almberg
There was a discussion on this a few days ago. I happen to have one of these Atom based systems, a Shuttle X27D: CPU: Intel(R) Atom(TM) CPU 330 @ 1.60GHz (1596.01-MHz 686-class CPU) Origin = GenuineIntel Id = 0x106c2 Stepping = 2

Re: Compact Freebsd 'appliance'

2009-06-19 Thread John Almberg
On Jun 18, 2009, at 7:59 PM, Charlie Kester wrote: On Thu 18 Jun 2009 at 14:18:21 PDT Tim Judd wrote: I've read reports (and forgotten it's source since then) that some Intel Atom processors work well, some don't with FreeBSD. This was something I read within a couple months, so I would see

Re: Compact Freebsd 'appliance'

2009-06-19 Thread John Almberg
I have a couple of Via Artigo a2000 boxes, one running FreeBSD-STABLE (post 7.2) and the other running FreeNAS. Both work well. I've seen posts from one fellow who's tracking a bug with the vge interface under very heavy load, but both of mine stream music and do Time Machine backups via

Should DNS be on same server as webserver?

2009-07-13 Thread John Almberg
The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead, they are done locally. This makes sense to me, but I wonder if the

Re: Should DNS be on same server as webserver?

2009-07-13 Thread John Almberg
On Jul 13, 2009, at 3:05 PM, Mel Flynn wrote: On Monday 13 July 2009 08:36:42 John Almberg wrote: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups

Re: Should DNS be on same server as webserver?

2009-07-13 Thread John Almberg
On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: On Mon, 13 Jul 2009 13:03:24 -0400, Jon Radel j...@radel.com said: J Apache and Bind have both had their security issues over the years, and J there's something to be said for running them on different servers to J reduce both the all eggs

SSO solution in ports?

2009-07-16 Thread John Almberg
I am trying to build a set of web applications that are accessed through a web portal that uses a Single Sign On (SSO) solution. Problem is, there are MANY competing SSO solutions. Since building the client side of the SSO system is more than enough for me, I was wondering if there are any

Re: SSO solution in ports?

2009-07-17 Thread John Almberg
to John Almberg jalmb...@identry.com: I am trying to build a set of web applications that are accessed through a web portal that uses a Single Sign On (SSO) solution. Problem is, there are MANY competing SSO solutions. Since building the client side of the SSO system is more than enough for me, I

limit to number of files seen by ls?

2009-07-22 Thread John Almberg
I seem to have run into an odd problem... A client has a directory with a big-ish number of jpgs... maybe 4000. Problem is, I can only see 2329 of them with ls, and I'm running into other problems, I think. Question: Is there some limit to the number of files that a directory can

Re: limit to number of files seen by ls?

2009-07-26 Thread John Almberg
On Jul 26, 2009, at 4:45 AM, Mel Flynn wrote: On Saturday 25 July 2009 23:34:50 Matthew Seaman wrote: It's fairly rare to run into this as a practical limitation during most day to day use, and there are various tricks like using xargs(1) to extend the usable range. Even so, for really

  1   2   3   >