Re: NFS setup
n dhert ndhert...@gmail.com wrote: I try to set up NFS between two freebsd-8.1 systems. ... # ps -jaxw | grep rpcbind root 747 1 747 7470 Ss??0:00.01 /usr/sbin/rpcbind ... client# mount server.subdomain.topdomain:/home /mnt (or client# mount XXX.YYY.ZZZ.SSS:/home /mnt) hangs, and after trying for about a minute, responds [tcp] server.subdomain.topdomain:/home: RPCPROG_NFS: RPC: Port mapper failure - RPC: Timed out what is missing to make this work? Any chance a firewall is blocking RPC? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: NFS setup
On 18 November 2010 09:03, per...@pluto.rain.com wrote: n dhert ndhert...@gmail.com wrote: I try to set up NFS between two freebsd-8.1 systems. ... # ps -jaxw | grep rpcbind root 747 1 747 7470 Ss??0:00.01 /usr/sbin/rpcbind ... client# mount server.subdomain.topdomain:/home /mnt (or client# mount XXX.YYY.ZZZ.SSS:/home /mnt) hangs, and after trying for about a minute, responds [tcp] server.subdomain.topdomain:/home: RPCPROG_NFS: RPC: Port mapper failure - RPC: Timed out what is missing to make this work? Any chance a firewall is blocking RPC? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org checkout hosts.allow/deny as well ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
disk recovery problem(s)
Dear all: I have a very similar problem as Roland Smith almost two years ago. My hard drive got corrupted (I do not really know why) and when running fsck the first error message is ROOT INODE UNALLOCATED (the full output of fsck is given below. I can then type y and it looks like that fsck is doing something. But in phase 3, when it tries to reconnect the inodes and put them in the lost+found directory, this directory cannot be created. If I mount the file system, there is still no root directory on the drive (no . and .. or anything else) and if I run fsck again, the exact same error massages occur again. If I only perform the ALLOCATE? and answer all the other questions with no, I get a . and .. in the root directory but nothing more. Running again fsck destroys everything again. Does anyone have an idea why fsck is not able to perform the recovery or why the changes are undone at one point? Is there a chance to get the data back? I do not know if it is important but the file system is on a raid5. Any help would be highly appreciated. Best, Thomas Full fsck output: nas1:/mnt# /sbin/fsck -t ufs -f /dev/raid5/nasraid1p1 ** /dev/raid5/nasraid1p1 ** Last Mounted on /mnt/nasraid1 ** Phase 1 - Check Blocks and Sizes ** Phase 2 - Check Pathnames ROOT INODE UNALLOCATED UNEXPECTED SOFT UPDATE INCONSISTENCY ALLOCATE? [yn] y BAD TYPE VALUE I=2 OWNER=root MODE=40755 SIZE=2048 MTIME=Nov 16 17:21 2010 DIR=/ UNEXPECTED SOFT UPDATE INCONSISTENCY FIX? [yn] y BAD TYPE VALUE I=2 OWNER=root MODE=40755 SIZE=2048 MTIME=Nov 16 17:21 2010 DIR=/ UNEXPECTED SOFT UPDATE INCONSISTENCY FIX? [yn] y BAD TYPE VALUE FOR '..' I=151745536 OWNER=root MODE=40755 SIZE=512 MTIME=Oct 19 17:19 2010 DIR=? UNEXPECTED SOFT UPDATE INCONSISTENCY FIX? [yn] y BAD TYPE VALUE I=2 OWNER=root MODE=40755 SIZE=2048 MTIME=Nov 16 17:21 2010 DIR= UNEXPECTED SOFT UPDATE INCONSISTENCY FIX? [yn] y BAD TYPE VALUE FOR '..' I=301465600 OWNER=root MODE=40755 SIZE=19968 MTIME=Nov 12 09:16 2010 DIR=? UNEXPECTED SOFT UPDATE INCONSISTENCY FIX? [yn] y BAD TYPE VALUE I=2 OWNER=root MODE=40755 SIZE=2048 MTIME=Nov 16 17:21 2010 DIR= UNEXPECTED SOFT UPDATE INCONSISTENCY FIX? [yn] y ** Phase 3 - Check Connectivity UNREF DIR I=151745536 OWNER=root MODE=40755 SIZE=512 MTIME=Oct 19 17:19 2010 RECONNECT? [yn] y NO lost+found DIRECTORY CREATE? [yn] y SORRY. CANNOT CREATE lost+found DIRECTORY UNEXPECTED SOFT UPDATE INCONSISTENCY UNREF DIR I=301465600 OWNER=root MODE=40755 SIZE=19968 MTIME=Nov 12 09:16 2010 RECONNECT? [yn] y NO lost+found DIRECTORY CREATE? [yn] y SORRY. CANNOT CREATE lost+found DIRECTORY UNEXPECTED SOFT UPDATE INCONSISTENCY UNREF DIR I=151745536 OWNER=root MODE=40755 SIZE=512 MTIME=Oct 19 17:19 2010 RECONNECT? [yn] y NO lost+found DIRECTORY CREATE? [yn] y SORRY. CANNOT CREATE lost+found DIRECTORY UNEXPECTED SOFT UPDATE INCONSISTENCY ** Phase 4 - Check Reference Counts ** Phase 5 - Check Cyl groups SUMMARY INFORMATION BAD SALVAGE? [yn] y BLK(S) MISSING IN BIT MAPS SALVAGE? [yn] y 35257960 files, 1247115068 used, 171932417 free (5559497 frags, 20796615 blocks, 0.4% fragmentation) * FILE SYSTEM MARKED CLEAN * * FILE SYSTEM WAS MODIFIED * -- Dr. Thomas E. Exner Juniorprofessur Theoretische Chemische Dynamik Fachbereich Chemie Universität Konstanz 78457 Konstanz Tel.: +49-(0)7531-882015 Fax: +49-(0)7531-883587 Email: thomas.ex...@uni-konstanz.de ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: porting software to FreeBSD, what to do if Makefile lacks?
On 11/18/10 03:12, Rob Farmer wrote: On Wed, Nov 17, 2010 at 16:58, O. Hartmann ohart...@mail.zedat.fu-berlin.de wrote: Thanks. I got it. But it seems that my first porting task run into some difficulties for the advanced porters, since there is no autotool environment. By the way, the global environment variable ${CSH} seems to be noneexistent, instead ${SH} exists. Interesting - I assumed it would be listed in bsd.commands.mk, but it seems to not be. Most of the base system tools are. In any case, glad to hear you got it working. Well, in this case, it would really be a 'nice to have', maybe this is worth a PR? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
FreeBSD and large harddrives
Hi, I'm going to build a server that's intended to store uncompressed videofiles (where 1 hour film equals about 500GB). I plan on using Western Digital 2TB or 3TB SATA harddrives. Total storage in version 1 of this server will probably be 8-12 TB. Harddrive speed is not so important so a 5400rpm drive would be OK. Seems like the green line of WD harddrives use both 5400rpm and 7200rpm. I will use RAID 5. The processor will be a 64bit capable Intel processor and I plan on using a Highpoint Rocketraid or 3ware Raid controller. So now my questions: 1. Which FreeBSD version should I install? (it must support large drives). I'm currently using the standard FreeBSD 8.1 (STABLE) on several servers, but this is a 32bit version, right? I suppose I need a 64bit version when I use large harddrives? 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?). The Highpoint controller I'm not so sure of, but I've had good experience with these on a few Windows servers and on one FreeBSD server. My setup would be to use the entire disk for both operating system and filestorage (in version 1). How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? Thanks for your help. I might have follow-up questions as my project make progress. Best, Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/11/2010, at 22:46, Andy Wodfer wrote: Hi, I'm going to build a server that's intended to store uncompressed videofiles (where 1 hour film equals about 500GB). I plan on using Western Digital 2TB or 3TB SATA harddrives. Total storage in version 1 of this server will probably be 8-12 TB. Harddrive speed is not so important so a 5400rpm drive would be OK. Seems like the green line of WD harddrives use both 5400rpm and 7200rpm. I will use RAID 5. The processor will be a 64bit capable Intel processor and I plan on using a Highpoint Rocketraid or 3ware Raid controller. So now my questions: 1. Which FreeBSD version should I install? (it must support large drives). I'm currently using the standard FreeBSD 8.1 (STABLE) on several servers, but this is a 32bit version, right? I suppose I need a 64bit version when I use large harddrives? Freebsd has been 64 bit for a long time. It supports multiple architectures. You want amd64 (yes, even on an intel 64bit) 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?). The Highpoint controller I'm not so sure of, but I've had good experience with these on a few Windows servers and on one FreeBSD server. My setup would be to use the entire disk for both operating system and filestorage (in version 1). How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? You can use vinum or ZFS. Thanks for your help. I might have follow-up questions as my project make progress. Best, Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org William Brown pgp.mit.edu -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iQIcBAEBAgAGBQJM5RpXAAoJEHF16AnLoz6JCdQP/06Sne+m2b3xKg9p1FQzK6vi vcE4rnWvA6EJNTc6I4R1ftv824CryKMpOtmy4HIySbGIoljx/1cAacQtUQr00oS0 GBR8IMJF3UaH3dUd+5nAuNJLhrHwJcDDT1bKF79zut8n4YiJ7a9d4ad9QZt4kkdr pNrDQgEZSvTYPKxREevutrmy723u0y979c8S1H7B8WT0MigQ7JwIK6zS9WhveMNt ONUxToppQxL0BhD8SP8lwUHF37WUJ11bUaGgNtEK38c3871vVZmEwfjfx1N9rbrt Skg9DulDnFM01iCuav1RTmKChlFXdvS6CcKt9SjeiEu3IvnYHoD8KW7OXnOfKssy UT5i4lYXYepjcObwBpcIJuqNlBPX+kV1GDLJ7Fu0crQwI251sOJknJlAP2RkkfLw NMax7kd1IvAlN/AoFQcSeGsdoFvqM+KZDSi5h6OO3A53Qqx0/MFQ6mneL01Fbxhx rDgpjKN0acuKEENasUDcCvhXA5Ffpvf3ih/+gH23xD1TEFuYZ4owNzmkefI69clH 3s/dYL5Qt0cj3gB/TiABojZbrr8SA1BfXUmDekY+LnTH62s8CVJ0ypkyL8tWcWSj TGzOyfJELpvLEGWyzfP593lCD2aTtpMkGc+BVivfDAu710qzPMBMWXFxBY5izF4N QMjpiI6PFs2oewbsP9XN =KFw3 -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
[snip] 1. Which FreeBSD version should I install? (it must support large drives). I'm currently using the standard FreeBSD 8.1 (STABLE) on several servers, but this is a 32bit version, right? I suppose I need a 64bit version when I use large harddrives? Freebsd has been 64 bit for a long time. It supports multiple architectures. You want amd64 (yes, even on an intel 64bit) Thanks! I didn't know I could use amd64 on Intel servers. Then my next questions will be: How about the ports collection - does the 64bit version have most of the ports? I need ffmpeg, php, apache, mysql, imagemagick, ghostscript, exiftools and a few more small ones. 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?). The Highpoint controller I'm not so sure of, but I've had good experience with these on a few Windows servers and on one FreeBSD server. My setup would be to use the entire disk for both operating system and filestorage (in version 1). How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? You can use vinum or ZFS. Excellent. I'm using ZFS on a FreeNAS installation. Is ZFS still considered experimental on FreeBSD or is it now production ready? What tool or command is used to partition/format/create a large ZFS drive? Thanks and best regards, Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/11/2010, at 23:12, Andy Wodfer wrote: [snip] 1. Which FreeBSD version should I install? (it must support large drives). I'm currently using the standard FreeBSD 8.1 (STABLE) on several servers, but this is a 32bit version, right? I suppose I need a 64bit version when I use large harddrives? Freebsd has been 64 bit for a long time. It supports multiple architectures. You want amd64 (yes, even on an intel 64bit) Thanks! I didn't know I could use amd64 on Intel servers. Then my next questions will be: How about the ports collection - does the 64bit version have most of the ports? I need ffmpeg, php, apache, mysql, imagemagick, ghostscript, exiftools and a few more small ones. Yes, it has largely the same ports. 64bit support has been very good for a long time, i use it on all my servers, production and dev. 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?). The Highpoint controller I'm not so sure of, but I've had good experience with these on a few Windows servers and on one FreeBSD server. My setup would be to use the entire disk for both operating system and filestorage (in version 1). How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? You can use vinum or ZFS. Excellent. I'm using ZFS on a FreeNAS installation. Is ZFS still considered experimental on FreeBSD or is it now production ready? What tool or command is used to partition/format/create a large ZFS drive? Thanks and best regards, Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org William Brown pgp.mit.edu -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iQIcBAEBAgAGBQJM5SEuAAoJEHF16AnLoz6J1fQP/jvPKWwQwKNffF4VGvjH/xN/ kFZ7jPCGY9hUamZjw7XpXbS7rmlVQzhUBHNI4og+K/wfn7eCtVE78cKYYWofOJ7S OsboIRRFWIHEL+Ob1MlTxlP+zCKE3ZFM8dy8ZDTqAkX2kEroj2tUrQl63+1uaJeJ 0fJ67Svsv36zVYjIRCJteaWgGARqZSKz8zVl6OfLuedcEh2ui571AWggMdnVtZ+S Y+T6kM9ZP5cYsbX7lruCJRdzM1H1GCaAClwrzpzK5Wedf/TQq07qtbcCohFhhtvw T/cr+KXm+bvOsUbMI/++mXfAxs6JB2mjl1Y0gi8ePFluC3FSwmI7jsdOEhpcY2CD vU27CIIC7bUyY8d0Q77rufVb8CpgcqELUEzejdfP6inBM9sQ+5Ds4M1420EXlGMo w0HXLoK5fYhXpQvBhYwT6gbcrJ/l4vUANa6YwP53igFU3JVXnmgRgA7iDZWyeG3N Ub5tdjcJpUCxUP7W0BMHdOa5/wkwv8vXhBTACRVK0Nrq0gbFTCqUJn2jhEOa2P1x FbrhlWMSXmZ2PlSKro7sqcYg3EeXH8zlPuAWO88ZPufBTxnTqsDY+rBYsM4HFN1S bKcsKWkkF8GoYs0yg407r/GhNt4+GvpQnU9JQJPQVHgwyapvcDT9uIZ/Q9dw1ps6 xL1pUajo//OKwSGBIi2c =S+nL -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On Thu, 18 Nov 2010 13:42:14 +0100 Andy Wodfer wod...@gmail.com wrote: Thanks! I didn't know I could use amd64 on Intel servers. Then my next questions will be: How about the ports collection - does the 64bit version have most of the ports? I need ffmpeg, php, apache, mysql, imagemagick, ghostscript, exiftools and a few more small ones. amd64 is well supported now. It used to be that lots of ports didn't work, but I think that's mostly (totally?) been fixed now. Excellent. I'm using ZFS on a FreeNAS installation. Is ZFS still considered experimental on FreeBSD or is it now production ready? What tool or command is used to partition/format/create a large ZFS drive? The stability has greatly improved over the last year but it can still have issues. Apparently if something goes wrong you'll normally have to restore from backups since fixing filesystem errors isn't something you can normally do. There's a guide to installing FreeBSD on zfs at http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot . Note that even if you have a 'legacy' BIOS you can still use GPT - if you use the MBR scheme you'll be limited to a maximum partition of 2TB. -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: porting software to FreeBSD, what to do if Makefile lacks?
2010/11/18 O. Hartmann ohart...@zedat.fu-berlin.de: Well, in this case, it would really be a 'nice to have', maybe this is worth a PR? Try asking on the ports@ list. I'm not sure what the criteria is for something being listed there - if something isn't going to be used by very many ports, it may not be worth adding, from a bloat point of view. I would say it is probably safe for your port to assume csh is /bin/csh, though. -- Rob Farmer ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sorry missed the ZFS part. 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?). The Highpoint controller I'm not so sure of, but I've had good experience with these on a few Windows servers and on one FreeBSD server. My setup would be to use the entire disk for both operating system and filestorage (in version 1). How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? You can use vinum or ZFS. Excellent. I'm using ZFS on a FreeNAS installation. Is ZFS still considered experimental on FreeBSD or is it now production ready? What tool or command is used to partition/format/create a large ZFS drive? ZFS has its own command set and management tools. There are a number of talks about production readiness of ZFS. I have never had issues with it, but my own personal experiences are not true of the world. http://wiki.freebsd.org/ZFSQuickStartGuide i avoid using the raw block devices, and use gpart and create a partition the size of the device, and then use the /dev/gpart/label devices. see http://blogs.freebsdish.org/lulf/2008/12/16/setting-up-a-zfs-only-system/ for some ideas about gpart and this. Thanks and best regards, Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org William Brown pgp.mit.edu -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) iQIcBAEBAgAGBQJM5SHQAAoJEHF16AnLoz6JPZIQALgW/gs0YlkVKxMkcMqwJe2q /g3Sbb0xqp9Zuo0cwMv5KxZQKhaY2FZ1UD7ynSxB7lwxGEkNFPRUwS/CpXg4lJpK 6WbYEGfN2AAZKW2raE9Ufhb17xBuya5Z02EBnIBWVO9ts4wAiBT3AQ3PGQSuZu+A auO6HRsBcDmd6c/U2Q+Xg4yFXm4Y2RTh8mFzSFsGtKcbiRxPL7GD+isi1+ShbXCH KxNHkW2dub9Udn6cyA/9vCpdLV1SBL69MDh3ihDChI3g+QFgqnMzw2OWDusSxad5 Ub4Ox5dP8X06AYL6jiFThk9Wg51pxLlLj/+DuCvc9dwg0nqZfHca7fWkNQiRleQH kvOMq1OjWY2/E4Jz7qRe3/y7Yy9wrwIs+3w490p/1xtqE8b2d+Lr3g8OZgbkASoJ WWFJhEz5xVlkEusN/hbQpgn0eNOP4E4p7cVWiAf/YcCEDIJOufuIkgLlpBsjXEhP IO3ybMEDnpxVjDbumpUMLaYgXoVG3XDgKtBltb/vexdcvM0tKXNf9mvrAIIuc9dB XvrLXHU04YfggXj6Nakw8wRQqIDQI7JcJsejJNiiQVaBmIkIhoIDVfe4bOxpvrJw JMDWAejiAwqLpN3vgCkF9ohpiXrSwTOFNCAOBYZ+WubODJNfjGFrUdL7Dz+GZlPO Ehv6uu2QbF7SszSc5mHl =sTvS -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On Thu, 18 Nov 2010 12:51:13 + Bruce Cran br...@cran.org.uk wrote: There's a guide to installing FreeBSD on zfs at http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot . Note that even if you have a 'legacy' BIOS you can still use GPT - if you use the MBR scheme you'll be limited to a maximum partition of 2TB. To answer the question - you use gpart to partition the drive and zpool to format it. e.g. for a single disk with no zraid: gpart create -s gpt devicenode gpart add -t freebsd-zfs -l label devicenode zpool create poolname /dev/gpt/label -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Thanks.
Hello. Thank you very much. I want make a new community of FreeBSD for my country, i think i must serve a domain like you tell me. if i serve a domain, second step what is it? i want have a email account with freebsd.org like users in this page http://www.freebsd.org/community/mailinglists.html what should i do? I thankful if you guide me. Thanks. Best Regards. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: porting software to FreeBSD, what to do if Makefile lacks?
On 11/18/10 13:52, Rob Farmer wrote: 2010/11/18 O. Hartmannohart...@zedat.fu-berlin.de: Well, in this case, it would really be a 'nice to have', maybe this is worth a PR? Try asking on the ports@ list. I'm not sure what the criteria is for something being listed there - if something isn't going to be used by very many ports, it may not be worth adding, from a bloat point of view. I would say it is probably safe for your port to assume csh is /bin/csh, though. I'll do, thanks ;-) Oliver ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On 11/18/2010 7:16 AM, Andy Wodfer wrote: Hi, I'm going to build a server that's intended to store uncompressed videofiles (where 1 hour film equals about 500GB). I plan on using Western Digital 2TB or 3TB SATA harddrives. Total storage in version 1 of this server will probably be 8-12 TB. Harddrive speed is not so important so a 5400rpm drive would be OK. Seems like the green line of WD harddrives use both 5400rpm and 7200rpm. I will use RAID 5. I would stay away from the green series hard drives for this application. There have been a number of reports of issues with the drive's power saving design causing problems when used in raid arrays. Search the list for more details. Use their black series instead. The processor will be a 64bit capable Intel processor and I plan on using a Highpoint Rocketraid or 3ware Raid controller. I would use FreeBSD 8.2 ( a contemporary RELENG_8 snapshot in other words) that is AMD64. eg ftp://ftp.freebsd.org/pub/FreeBSD/snapshots/201011/FreeBSD-8.1-STABLE-201011-amd64-dvd1.iso Use ZFS for the file system. Snapshots for backup and data integrity. 3Wares are great controllers, but a decent MB with 6 SATA ports and then an additional eSata controller with external drive cage like this one. http://www.addonics.com/products/host_controller/adsa3gpx8-4e.asp see the man page for ahci on what is supported. Booting off zfs is a bit tricky. If you already have the 3ware card, a pair of smaller / cheaper drives for the base OS and then all your zfs drives for data storage is the least painful way to go right now. I do this for my backup server. 10TB of storage, but the box boots off a 3ware raid card in raid1 mirror for the base OS. ZFS is a bit of a different beast at first, but its very worth while to get to know and understand. ---Mike ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Escaping from shell-scripts
Hi, I'm planning a service with a login-user-interface. Thus, I want to restrict the user somehow to this script and to do nothing else. The straight-forward way would be to write this script, have all input parsed by read and then let the script act according to this input (let's assume that these tools are secure, it's just cp'ing and writing to non-sensitive files. Are there possibilities to escape from such a script down to a prompt? On the other hand, if I would take python for this, so a python-script is executed, are there ways to get to a generic python-prompt? The restriction to that script would be done by either setting the login-shell to that script, setting the ssh-command for that account/key (and ensuring that it can't be altered), or both. All in all, this is a more general question I have for quite a time: Can you use shell-scripts for security-relevant environments? Does an attacker have the possibility to escape from a script down to a prompt? I'm not that into shell-programming and there are too many legacies about terminals (some time ago, I had to cope with termcap...) and shells which one just can't all know. E.g., it was just a few days ago I found out what a terminal-stop means and that it is still interpreted by screen, though using it for several years now. Regards, Julian signature.asc Description: PGP signature
Re: Escaping from shell-scripts
I can't speak directly to your question, but also consider proper base security, so IF someone can get outside your script they're limited. Ie; proper user/group assignments, perms, etc. - file sysems, ulimit, et al. Maybe chroot. - Original Message - From: owner-freebsd-questi...@freebsd.org owner-freebsd-questi...@freebsd.org To: freebsd-questions@freebsd.org freebsd-questions@freebsd.org Sent: Thu Nov 18 07:52:39 2010 Subject: Escaping from shell-scripts Hi, I'm planning a service with a login-user-interface. Thus, I want to restrict the user somehow to this script and to do nothing else. The straight-forward way would be to write this script, have all input parsed by read and then let the script act according to this input (let's assume that these tools are secure, it's just cp'ing and writing to non-sensitive files. Are there possibilities to escape from such a script down to a prompt? On the other hand, if I would take python for this, so a python-script is executed, are there ways to get to a generic python-prompt? The restriction to that script would be done by either setting the login-shell to that script, setting the ssh-command for that account/key (and ensuring that it can't be altered), or both. All in all, this is a more general question I have for quite a time: Can you use shell-scripts for security-relevant environments? Does an attacker have the possibility to escape from a script down to a prompt? I'm not that into shell-programming and there are too many legacies about terminals (some time ago, I had to cope with termcap...) and shells which one just can't all know. E.g., it was just a few days ago I found out what a terminal-stop means and that it is still interpreted by screen, though using it for several years now. Regards, Julian font size=1 div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in' /div This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system. /font ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Thanks.
On Thu, Nov 18, 2010 at 7:55 AM, Mohsen Mostafa Jokar mohsenjo...@gmail.com wrote: Hello. Thank you very much. I want make a new community of FreeBSD for my country, i think i must serve a domain like you tell me. I admire your enthusiasm but you have to do your homework before you post again. Understand this: Your community is independent from the FreeBSD project it will have no direct connection with FreeBSD.org except for the fact that they just ___might___ list you in the usergroups and mailing list pages, probably once you have demonstrated that your community deserves it. You will have to set-up you own mailing list server (I suggest mailman), and people will subscribe to that list with their own e-mails just like you did to this list. You will not have a mail account with freebsd.org unless you become a long-term and proven collaborator of the project, and even then it's unlikely that you will get such a mail or even need one, and really it's not the goal of the great majority of collaborators in any Open Source project. From your questions I think you have a lot to read before attempting to form a community. Community building is from the ground-up, it's not like you put a server on the Internet and it happens magically overnight and you become famous. On the contrary, it will be a very hard and usually not appreciated by anyone, nor it will gain you any recognition in the short term. I suggest that before you do anything, just attempt to contact the other FreeBSD users in your community and have a face-to-face meeting to discuss the formation of the Iranian BSD community. Maybe in your university or other universities and institutes you can gain enough mass and interest. Contact the person that owns freebsd.ir and ask him what his plans are with the domain. If you are able to round up these people in person I'm sure that within those meetings you will find many of the answers to your questions. if i serve a domain, second step what is it? i want have a email account with freebsd.org like users in this page http://www.freebsd.org/community/mailinglists.html That is just a list of the mailing lists in languages other than English, but each one is maintained independently from the FreeBSD project. what should i do? I thankful if you guide me. Contact every FreeBSD user you can find and have a meeting in person. Discuss with them your ideas and be prepared for a lot of hard work. Contact the people at IRNIC (nic.ir I copied their info below), I am sure that people in their IT department will guide you with this. Their Web site uses Apache 2.2.3 on CentOS, so they are probably familiar with Open Source and may direct you to other Open Source communities which will most probably help you and guide you in making your FBSD community there. Using a simple google search I found that on February 3rd, 2010 Abbas Farahmand posted on the FreeBSD forums about translating to Persian, he will surely be of help and will most likely support your cause: http://forums.freebsd.org/showthread.php?p=65925#post65925 Here is the info of your local NIC domain: nic.ir ascii: nic.ir remarks:(Domain Holder) Dot-IR (.ir) ccTLD Registry, Institute for Studies in Theoretical Physics and Mathematics (IPM) remarks:(Domain Holder Address) Shahid Bahonar (Niavaran) Sq., Tehran, Tehran, IR org:Dot-IR (.ir) ccTLD Registry, Institute for Studies in Theoretical Physics and Mathematics (IPM) e-mail: i...@nic.ir address:Shahid Bahonar (Niavaran) Sq., Tehran, Tehran, IR phone: +98 21 2229 0306 fax-no: +98 21 2229 5700 source: IRNIC # Filtered nic-hdl:as51-irnic person: Alireza Saleh e-mail: alir...@mini.nic.ir source: IRNIC # Filtered ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Thanks.
On Thu, 18 Nov 2010 16:25:31 +0330, Mohsen Mostafa Jokar mohsenjo...@gmail.com wrote: Hello. Thank you very much. You are welcome :) I want make a new community of FreeBSD for my country, i think i must serve a domain like you tell me. if i serve a domain, second step what is it? i want have a email account with freebsd.org like users in this page http://www.freebsd.org/community/mailinglists.html what should i do? I thankful if you guide me. The mailing lists hosted at lists.FreeBSD.org are managed by our postmaster team. So you have to go through the normal process before you create a mailing list there. This means that: a) You have to talk to postmaster and convince them that there is a very real need for another mailing list. b) You have to come up with a 'charter' for the mailing list: a short blurb that describes what the list topic will be, who is allowed to post there, etc. c) Once you get approval from postmaster, your list will be created and you can go on using it. I am not sure what you mean by serve a domain. Do you already have a web site or other community-related place where people can join and talk about FreeBSD-related material? If yes, what is the name of the web site? Can you briefly describe the community itself? Cheers, Giorgos ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Escaping from shell-scripts
Julian Fagir wrote: Hi, I'm planning a service with a login-user-interface. Thus, I want to restrict the user somehow to this script and to do nothing else. The straight-forward way would be to write this script, have all input parsed by read and then let the script act according to this input (let's assume that these tools are secure, it's just cp'ing and writing to non-sensitive files. Are there possibilities to escape from such a script down to a prompt? On the other hand, if I would take python for this, so a python-script is executed, are there ways to get to a generic python-prompt? The restriction to that script would be done by either setting the login-shell to that script, setting the ssh-command for that account/key (and ensuring that it can't be altered), or both. All in all, this is a more general question I have for quite a time: Can you use shell-scripts for security-relevant environments? Does an attacker have the possibility to escape from a script down to a prompt? I'm not that into shell-programming and there are too many legacies about terminals (some time ago, I had to cope with termcap...) and shells which one just can't all know. E.g., it was just a few days ago I found out what a terminal-stop means and that it is still interpreted by screen, though using it for several years now. Regards, Julian Your should think about JAILS and qjail in particular, http://sourceforge.net/projects/qjail/ If you don't have to many users just allocate a jail for each user id or all those users in a single jail and then you don't need any of the script stuff you are talking about. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On Nov 18, 2010, at 6:16 AM, Andy Wodfer wrote: Hi, I'm going to build a server that's intended to store uncompressed videofiles (where 1 hour film equals about 500GB). I plan on using Western Digital 2TB or 3TB SATA harddrives. Total storage in version 1 of this server will probably be 8-12 TB. Harddrive speed is not so important so a 5400rpm drive would be OK. Seems like the green line of WD harddrives use both 5400rpm and 7200rpm. I will use RAID 5. As a user of such a system (1.5TB, though) I recommend that you NOT use the green drives. If you insist on WD go with the Black. I've had good luck with Hitachi, myself. The processor will be a 64bit capable Intel processor and I plan on using a Highpoint Rocketraid or 3ware Raid controller. I have the RR2320 and am happy. So now my questions: 1. Which FreeBSD version should I install? (it must support large drives). I'm currently using the standard FreeBSD 8.1 (STABLE) on several servers, but this is a 32bit version, right? I suppose I need a 64bit version when I use large harddrives? Running 8.1 for the AMD64. I'd run 64bit no matter what. You can always get 32bit to run in 64, but not v-v. 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?). The Highpoint controller I'm not so sure of, but I've had good experience with these on a few Windows servers and on one FreeBSD server. My setup would be to use the entire disk for both operating system and filestorage (in version 1). How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? Yes. I'm using UFS (at the recommendation 3 years ago of this list) and am quite happy. The 2320s are supporting both an 8x1TB RAID5 (6.3TB) and an 8x1.5TB RAID5 (~9.5TB) without issue. If you get it all going OK in the first run you have a web interface for the RR223x boards. Thanks for your help. I might have follow-up questions as my project make progress. Good luck, Andy. Best, Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Thanks.
On Thu, 18 Nov 2010 16:25:31 +0330, Mohsen Mostafa Jokar mohsenjo...@gmail.com wrote: Hello. Didn't Mohsen Mostafar Jokar post this same question last week? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Thanks.
On Thu, Nov 18, 2010 at 10:08 AM, Chris Brennan xa...@xaerolimit.net wrote: On Thu, 18 Nov 2010 16:25:31 +0330, Mohsen Mostafa Jokar mohsenjo...@gmail.com wrote: Hello. Didn't Mohsen Mostafar Jokar post this same question last week? Yes. This second one was an apparent follow-up, hopefully he will STFW and RTFM before posting again ;-) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Thanks.
On Nov 18, 2010, at 9:14 AM, Alejandro Imass wrote: On Thu, Nov 18, 2010 at 10:08 AM, Chris Brennan xa...@xaerolimit.net wrote: On Thu, 18 Nov 2010 16:25:31 +0330, Mohsen Mostafa Jokar mohsenjo...@gmail.com wrote: Hello. Didn't Mohsen Mostafar Jokar post this same question last week? Yes. This second one was an apparent follow-up, hopefully he will STFW and RTFM before posting again ;-) Assuming he knows what STFW and RTFM mean. :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Escaping from shell-scripts
On Thu, 18 Nov 2010, Julian Fagir wrote: Hi, I'm planning a service with a login-user-interface. Thus, I want to restrict the user somehow to this script and to do nothing else. The straight-forward way would be to write this script, have all input parsed by read and then let the script act according to this input (let's assume that these tools are secure, it's just cp'ing and writing to non-sensitive files. Are there possibilities to escape from such a script down to a prompt? On the other hand, if I would take python for this, so a python-script is executed, are there ways to get to a generic python-prompt? The restriction to that script would be done by either setting the login-shell to that script, setting the ssh-command for that account/key (and ensuring that it can't be altered), or both. All in all, this is a more general question I have for quite a time: Can you use shell-scripts for security-relevant environments? Does an attacker have the possibility to escape from a script down to a prompt? I'm not that into shell-programming and there are too many legacies about terminals (some time ago, I had to cope with termcap...) and shells which one just can't all know. E.g., it was just a few days ago I found out what a terminal-stop means and that it is still interpreted by screen, though using it for several years now. Regards, Julian If you make a program a shell AFAIK to escape is to logff. Bash has a chroot like facility that might work. However if you write a simple C program as a wrapper for your shell script and make that program a shell, I would think that is pretty secure. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Escaping from shell-scripts
On Thu, Nov 18, 2010 at 8:52 AM, Julian Fagir g...@physik.tu-berlin.dewrote: Hi, I'm planning a service with a login-user-interface. Thus, I want to restrict the user somehow to this script and to do nothing else. The straight-forward way would be to write this script, have all input parsed by read and then let the script act according to this input (let's assume that these tools are secure, it's just cp'ing and writing to non-sensitive files. Are there possibilities to escape from such a script down to a prompt? On the other hand, if I would take python for this, so a python-script is executed, are there ways to get to a generic python-prompt? The restriction to that script would be done by either setting the login-shell to that script, setting the ssh-command for that account/key (and ensuring that it can't be altered), or both. All in all, this is a more general question I have for quite a time: Can you use shell-scripts for security-relevant environments? Does an attacker have the possibility to escape from a script down to a prompt? I'm not that into shell-programming and there are too many legacies about terminals (some time ago, I had to cope with termcap...) and shells which one just can't all know. E.g., it was just a few days ago I found out what a terminal-stop means and that it is still interpreted by screen, though using it for several years now. Regards, Julian While I cannot answer your question fully, you could use python as the user's shell and call the python script in question by passing the script to the parser as login, how specifically that is done, I am not sure. I've never used py as a login shell but I am fairly certain it can be done ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Escaping from shell-scripts
doug d...@fledge.watson.org writes: If you make a program a shell AFAIK to escape is to logff. Bash has a chroot like facility that might work. However if you write a simple C program as a wrapper for your shell script and make that program a shell, I would think that is pretty secure. As long as you don't call anything that can create an inferior shell. A common mistake when doing this kind of thing is to allow some file editing or mail reading, using programs that have a shell escape capability. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On 2010/11/18 at 3:16, wod...@gmail.com (Andy Wodfer) wrote: Total storage in version 1 of this server will probably be 8-12 TB. ... The processor will be a 64bit capable Intel processor and I plan on using a Highpoint Rocketraid or 3ware Raid controller. ... 1. Which FreeBSD version should I install? ... 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?)... How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? Just chiming in with my own experience... I built a cheap media storage server so I don't have to keep digging DVDs out of the pile and can just stream them from the server. 4x1.5TB Raid 5 disks. I haven't updated it to FreeBSD 8.2 yet, so: [media: ~] uname -a FreeBSD media 8.0-RELEASE FreeBSD 8.0-RELEASE #0: Sat Nov 21 15:48:17 UTC 2009 r...@almeida.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 (its a Pentium 4... cheap but effective hardware... the processor is hardly ever significantly used. Its just a file server). To ease booting problems, I used 3ware's drivers to create a booting volume out of the bigger unit. FYI: I used Seagate hard drives (I hear they are coming out with a 3TB internal drive any day now): ___ # tw_cli /c0 show all /c0 Driver Version = 3.70.05.001 /c0 Model = 9550SXU-4LP /c0 Available Memory = 112MB /c0 Firmware Version = FE9X 3.08.00.029 /c0 Bios Version = BE9X 3.10.00.003 /c0 Boot Loader Version = BL9X 3.02.00.001 /c0 Serial Number = L320912A9410199 /c0 PCB Version = Rev 032 /c0 PCHIP Version = 1.60 /c0 ACHIP Version = 1.90 /c0 Number of Ports = 4 /c0 Number of Drives = 4 /c0 Number of Units = 1 /c0 Total Optimal Units = 1 /c0 Not Optimal Units = 0 /c0 JBOD Export Policy = off /c0 Disk Spinup Policy = 1 /c0 Spinup Stagger Time Policy (sec) = 1 /c0 Auto-Carving Policy = off /c0 Auto-Carving Size = 2048 GB /c0 Auto-Rebuild Policy = on /c0 Rebuild Rate = 1 /c0 Verify Rate = 1 /c0 Controller Bus Type = PCIX /c0 Controller Bus Width = 64 bits /c0 Controller Bus Speed = 66 Mhz Unit UnitType Status %RCmpl %V/I/M Stripe Size(GB) Cache AVrfy -- u0RAID-5OK - - 64K 4190.92 ON OFF Port Status Unit SizeBlocksSerial --- p0 OK u0 1.36 TB 29302771689VS2Y6AV p1 OK u0 1.36 TB 29302771689VS2X5A2 p2 OK u0 1.36 TB 29302771689VS2VDDA p3 OK u0 1.36 TB 29302771689VS2X5P6 ___ Because I was using an older motherboard that doesn't have EFI, I needed a boot partition that was less than 2.2TB, so I used 3ware's bios utility to make 2 volumes: ___ # tw_cli /c0/u0 show Unit UnitType Status %RCmpl %V/I/M Port Stripe Size(GB) u0 RAID-5OK - - - 64K 4190.92 u0-0 DISK OK - - p3- 1396.97 u0-1 DISK OK - - p2- 1396.97 u0-2 DISK OK - - p1- 1396.97 u0-3 DISK OK - - p0- 1396.97 u0/v0Volume- - - - - 20 u0/v1Volume- - - - - 4170.92 ___ To partition the larger volume I used gpart: ___ # gpart show = 63 41942943 da0 MBR (20G) 63 419295871 freebsd [active] (20G) 41929650 13356 - free - (6.5M) = 0 41929587 da0s1 BSD (20G) 0524288 1 freebsd-ufs (256M) 524288 8388608 2 freebsd-swap (4.0G) 8912896 8388608 4 freebsd-ufs (4.0G) 17301504 8388608 5 freebsd-ufs (4.0G) 25690112 16239475 6 freebsd-ufs (7.7G) =34 8747055038 da1 GPT (4.1T) 34 87470550381 freebsd-ufs (4.1T) ___ Which turned out thusly: ___ # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/da0s1a248M163M 64M72%/ devfs 1.0K1.0K 0B 100%/dev /dev/da1p1 3.9T3.5T155G96%/media /dev/da0s1e3.9G 18K3.6G 0%/tmp /dev/da0s1f7.5G3.4G3.5G50%/usr /dev/da0s1d3.9G234M3.3G 6%/var ___ I just
Re: FreeBSD and large harddrives
On Nov 18, 2010, at 11:29 AM, Peter A. Giessel wrote: On 2010/11/18 at 3:16, wod...@gmail.com (Andy Wodfer) wrote: Total storage in version 1 of this server will probably be 8-12 TB. ... The processor will be a 64bit capable Intel processor and I plan on using a Highpoint Rocketraid or 3ware Raid controller. ... 1. Which FreeBSD version should I install? ... 2. I know that the 3ware Raid controller supports larger drives than 2TB (or was it 1TB?)... How can I create this huge partition/slice? I don't think the installer (atleast on the standard FreeBSD version) supports these large drives? Just chiming in with my own experience... I built a cheap media storage server so I don't have to keep digging DVDs out of the pile and can just stream them from the server. 4x1.5TB Raid 5 disks. I haven't updated it to FreeBSD 8.2 yet, so: [media: ~] uname -a FreeBSD media 8.0-RELEASE FreeBSD 8.0-RELEASE #0: Sat Nov 21 15:48:17 UTC 2009 r...@almeida.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 (its a Pentium 4... cheap but effective hardware... the processor is hardly ever significantly used. Its just a file server). To ease booting problems, I used 3ware's drivers to create a booting volume out of the bigger unit. FYI: I used Seagate hard drives (I hear they are coming out with a 3TB internal drive any day now): Yes, but a 5200-5400 RPM drive, I believe. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On 2010/11/18 at 8:44, ryan.cole...@cwis.biz (Ryan Coleman) wrote: FYI: I used Seagate hard drives (I hear they are coming out with a 3TB internal drive any day now): Yes, but a 5200-5400 RPM drive, I believe. From the OP: On 2010/11/18 at 3:16, wod...@gmail.com (Andy Wodfer) wrote: Harddrive speed is not so important so a 5400rpm drive would be OK. It would seem to me that a 5400 RPM very large drive is exactly what he is looking for. As he was being discouraged from using WD Greenline (which if the rumors are accurate is the only version the WD 3TB drive will be initially available in), the Seagate 3TB option may be useful to him. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Escaping from shell-scripts
On Nov 18, 2010, at 5:52 AM, Julian Fagir wrote: The straight-forward way would be to write this script, have all input parsed by read and then let the script act according to this input (let's assume that these tools are secure, it's just cp'ing and writing to non-sensitive files. Are there possibilities to escape from such a script down to a prompt? Yes; consider using something like: trap 2 3 18 ...prevent them from using control-C, control-Z, control-\ to play games with the script. All in all, this is a more general question I have for quite a time: Can you use shell-scripts for security-relevant environments? Yes, but you really shouldn't trust them any farther than you would trust a user with an interactive shell. It's just too easy to exploit $IFS, invoke command line utilities that provide shell escapes, etc. Python or C is likely to be more securable, but getting it right is trickier than it may appear. Start with never trusting user-supplied inputs, always validate against a whitelist of what is trusted rather than trying to blacklist bad stuff. Regards, -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Realtek 8111C support?
Does FreeBSD 8.1 have support for the Realtek 8111C GigE adapter chip? --Brett Glass ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On Nov 18, 2010, at 5:51 AM, Mike Tancsa wrote: On 11/18/2010 7:16 AM, Andy Wodfer wrote: Harddrive speed is not so important so a 5400rpm drive would be OK. Seems like the green line of WD harddrives use both 5400rpm and 7200rpm. I will use RAID 5. I would stay away from the green series hard drives for this application. There have been a number of reports of issues with the drive's power saving design causing problems when used in raid arrays. Search the list for more details. Use their black series instead. While the WDC green drives are unsuitable for any RAID application, and the WDC black series drives would be better, I'd only use them for a RAID-1 or RAID-10 setup. If the OP wants to use RAID-5 then you really need to go with the RE3/RE4 or RE-GP enterprise models due to TLER: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/std_adp.php?p_faqid=1397 Otherwise, you're quite likely to have a drive or two get dropped out of the array due to a single bad sector, and you might end up having the entire RAID-5 volume getting corrupted as a consequence Regards, -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Realtek 8111C support?
On Thu, Nov 18, 2010 at 11:41 AM, Brett Glass br...@lariat.net wrote: Does FreeBSD 8.1 have support for the Realtek 8111C GigE adapter chip? Yes, it's in re(4) -- RTL8168/8111/8111c. The man page doesn't seem to specifically address it but it does work fine. I'm running stable on the box with these chips now but I'm pretty sure 8.1 RELEASE was on here at one point and ran fine. -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
BUG: wrong log messages
Hi, Freebsd-questions. Nov 18 20:27:54 meta-up kernel: Nov 18 20:29:11 meta-up kernel: 110ip11f0w: ipfw: 102 102D enyD enTyCP T1C9P 192.168.2.173:4425 192.168.168.155:445 out via re0 Nov 18 20:32:30 meta-up kernel: 110 iefw: 102 Deny UDP 192.168.2.90:54625 192.168.1.33:59306 out via re0 Nov 18 20:33:55 meta-up kernel: 1u0 ipa re0 Nov 18 20:42:07 meta-up kernel: Nov 18 20:47:34 meta-up kernel: 111010iippffww:: 110022 DDeennyy UUDDPP 118982..9136.86.23..41931::1500030698 11929.21.61868.. 21..91073::1417464787 oouutt vviiaa rree00 sources 17.11.2010 # uname -a FreeBSD meta-up 9.0-CURRENT FreeBSD 9.0-CURRENT #6: Wed Nov 17 17:35:17 EET 2010 a...@meta-up:/usr/obj/usr/src/sys/KES_KERN_v9 i386 -- С уважением, Коньков mailto:kes-...@yandex.ru ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Realtek 8111C support?
Thank you. Neither the 8.1 release notes nor the man page mentions the chip. They both should. --Brett Glass At 11:46 AM 11/18/2010, Adam Vande More wrote: On Thu, Nov 18, 2010 at 11:41 AM, Brett Glass mailto:br...@lariat.netbr...@lariat.net wrote: Does FreeBSD 8.1 have support for the Realtek 8111C GigE adapter chip? Yes, it's in re(4) -- RTL8168/8111/8111c. The man page doesn't seem to specifically address it but it does work fine. I'm running stable on the box with these chips now but I'm pretty sure 8.1 RELEASE was on here at one point and ran fine. -- Adam Vande More -- No virus found in this message. Checked by AVG - http://www.avg.comwww.avg.com Version: 10.0.1153 / Virus Database: 424/3264 - Release Date: 11/18/10 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: strange behaviour on FreeBSD 7.1
2010/11/18 Коньков Евгений kes-...@yandex.ru: Hi. Sometimes system goes to this situation: 0% idle and no processes take CPU time #top -SIHP last pid: 62813; load averages: 4.17, 3.64, 2.16 up 28+06:44:02 20:41:41 155 processes: 7 running, 129 sleeping, 19 waiting CPU: 99.3% user, 0.0% nice, 0.7% system, 0.0% interrupt, 0.0% idle Mem: 177M Active, 27M Inact, 124M Wired, 13M Cache, 60M Buf, 148M Free Swap: 2048M Total, 51M Used, 1997M Free, 2% Inuse PID USERNAME PRI NICE SIZE RES STATE TIME WCPU COMMAND #top last pid: 62852; load averages: 4.10, 3.67, 2.22 up 28+06:44:36 20:42:15 172 processes: 4 running, 168 sleeping CPU: 99.6% user, 0.0% nice, 0.4% system, 0.0% interrupt, 0.0% idle Mem: 203M Active, 27M Inact, 125M Wired, 13M Cache, 60M Buf, 121M Free Swap: 2048M Total, 51M Used, 1997M Free, 2% Inuse PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND 62817 root 36 -8 0 29696K 23276K piperd 0:00 7.62% perl5.8.8 If you look at the last pid between the 2 top-output snippets, you can see that approx 40 processes came and went in-between. This indiciates that you probably have some script running that's spawning a large number of short-lived processes. -- Jonathan Chen j...@chen.org.nz ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: BUG: wrong log messages
2010/11/19 Коньков Евгений kes-...@yandex.ru Hi, Freebsd-questions. Nov 18 20:27:54 meta-up kernel: Nov 18 20:29:11 meta-up kernel: 110ip11f0w: ipfw: 102 102D enyD enTyCP T1C9P 192.168.2.173:4425 192.168.168.155:445 out via re0 Nov 18 20:32:30 meta-up kernel: 110 iefw: 102 Deny UDP 192.168.2.90:54625 192.168.1.33:59306 out via re0 Nov 18 20:33:55 meta-up kernel: 1u0 ipa re0 Nov 18 20:42:07 meta-up kernel: Nov 18 20:47:34 meta-up kernel: 111010iippffww:: 110022 DDeennyy UUDDPP 118982..9136.86.23..41931::1500030698 11929.21.61868.. 21..91073::1417464787 oouutt vviiaa rree00 This particular bug of overlapping output from multiple-core machines has been around for years. I don't think it's going to get fixed anytime soon. -- Jonathan Chen j...@chen.org.nz ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
FreeBSD samba+winbind
Dear Sirs, I am having troubles with IDMapping users from Server 2003 AD to my FreeBSD 8.1 Samba 3.5. Well, most of Samba documentation should be considered outdated, I had total failure with RID backend for IDMap. The only working (so far) for me is the default: tdb. I have set nsswitch.conf, pam.d and so on correctly. And here is my problem: everything works almost fine, wbinfo shows my domain accounts, I am able to set these accounts and groups as owners of files. Commands like ls, chown, id show AD accounts correctly. pw, getent - show only local system accounts. I need Samba only for file sharing with ACLs, no PAM authentication or something more. So, technically, it works but since I can't see ALL accounts with getent I think something is wrong. IDMapped accounts are with uid and gid 1 I think I am missing something very small and simple, so I hope someone will help me! Thanks in advance, Ivo -- View this message in context: http://old.nabble.com/FreeBSD-samba%2Bwinbind-tp30252640p30252640.html Sent from the freebsd-questions mailing list archive at Nabble.com. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD and large harddrives
On 11/18/10 18:23, Chuck Swiger wrote: On Nov 18, 2010, at 5:51 AM, Mike Tancsa wrote: On 11/18/2010 7:16 AM, Andy Wodfer wrote: Harddrive speed is not so important so a 5400rpm drive would be OK. Seems like the green line of WD harddrives use both 5400rpm and 7200rpm. I will use RAID 5. I would stay away from the green series hard drives for this application. There have been a number of reports of issues with the drive's power saving design causing problems when used in raid arrays. Search the list for more details. Use their black series instead. While the WDC green drives are unsuitable for any RAID application From my own personal experience, I will not use WD Green drives again, be it for RAID or not. I have a one as my boot up and OS drive on a home server configured as a single drive in a ZFS pool (so none RAID). The load/unload cycle is rated at 300,000. Here is a copy from smartctl 9 Power_On_Hours 0x0032 092 092 000Old_age Always - 5958 193 Load_Cycle_Count0x0032 001 001 000Old_age Always - 885346 The drive has less than 250 days online, but is nearly at tripple the rated load/unload cycle. While the drive is still working, I have NO faith in it anymore and am just waiting for it to die. Paul ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: ejabberd won't startup
Hello Panagiotis and list, I believe we are facing the same issue. Our setup is ejabberd-2.1.5 in a FreeBSD 7.3 amd64 jail and the workaround we found is running an older version of erlang (erlang-r13b04_3,1). You can find the old erlang port files in the FreeBSD CVS repository or here: http://noc.ntua.gr/~christia/erlang.tgz it seems a solution came up to run Erlang 14B in a Jail. A few minutes ago, Michael from the Erlang tribe provied a quick patch for Erlang 14B to disable the checks causing the issue with erlang 14B in Jails. Here's his quick patch: diff --git a/erts/epmd/src/epmd_srv.c b/erts/epmd/src/epmd_srv.c index ef471a4..e2cc2dc 100644 --- a/erts/epmd/src/epmd_srv.c +++ b/erts/epmd/src/epmd_srv.c @@ -766,6 +766,9 @@ static int conn_open(EpmdVars *g,int fd) dbg_tty_printf(g,2,(s-local_peer) ? Local peer connected : Non-local peer connected); + /* XXX allow local messages from all clients */ + s-local_peer = EPMD_TRUE; + s-want = 0; /* Currently unknown */ s-got = 0; s-mod_time = current_time(g); /* Note activity */ He also announced to make a better patch in a few days. Also the Erlang folks might offer a future option to disable the check or provide another possibility to propperly run Erlang and Erlang programs (such as ejabberd) in a Jail. Hope this helps kind regards Tom ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Problem with Atheros under 8.1 on a HP DL180G6
I am having a problem with MikroTik/Atheros cards on a HP DL180G6. I suspect the problem is hardware/BIOS-interrupt related but I'm pretty confused as to what. Suggestions and pointers how to solve this problem are appreciated. I have the cards running under Debian 5.0.6 (Gigabyte GA-870A-UD3 RT) with compat-wireless (compat-wireless-2.6.36-rc5-2-s.tar.bz2), FreeBSD 8.1 on a HP ML350G5, and FreeBSD 8.1 on an old Lenovo Z60t . They work both as AP and supplicant. Hostapd, when configured and run, is what comes with FreeBSD on those systems and 0.7.3 on Debian. The cards are a MikroTik RouterBOARD R52 and R52n on a quad miniPCI to PCI adapter. http://www.routerboard.com/pricelist/download_file.php?file_id=96 http://www.routerboard.com/pricelist/download_file.php?file_id=170 http://www.routerboard.com/pricelist.php?showProduct=75 I don't have the part number for the riser used in the DL180G6 to old the adapter. On the DL180G6 under Debian in AP mode, there is no beacon; however, if I pass irqpoll on boot /some/ interrupts are delivered but performance and reliability are sketchy to say the least. Below is various outputs from the system. cat /var/run/dmesg.boot Copyright (c) 1992-2010 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 8.1-STABLE #0: Wed Nov 17 20:32:44 PST 2010 r...@homer:/usr/src/sys/amd64/compile/HOMER amd64 Timecounter i8254 frequency 1193182 Hz quality 0 CPU: Intel(R) Xeon(R) CPU E5504 @ 2.00GHz (2000.08-MHz K8-class CPU) Origin = GenuineIntel Id = 0x106a5 Family = 6 Model = 1a Stepping = 5 Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE Features2=0x9ce3bdSSE3,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT AMD Features=0x28100800SYSCALL,NX,RDTSCP,LM AMD Features2=0x1LAHF TSC: P-state invariant real memory = 4294967296 (4096 MB) avail memory = 4084613120 (3895 MB) ACPI APIC Table: HP ProLiant FreeBSD/SMP: Multiprocessor System Detected: 8 CPUs FreeBSD/SMP: 2 package(s) x 4 core(s) cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 2 cpu2 (AP): APIC ID: 4 cpu3 (AP): APIC ID: 6 cpu4 (AP): APIC ID: 16 cpu5 (AP): APIC ID: 18 cpu6 (AP): APIC ID: 20 cpu7 (AP): APIC ID: 22 ioapic0: Changing APIC ID to 1 ioapic1: Changing APIC ID to 3 ioapic0 Version 2.0 irqs 0-23 on motherboard ioapic1 Version 2.0 irqs 24-47 on motherboard kbd1 at kbdmux0 acpi0: HP ProLiant on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) acpi0: reservation of 0, a (3) failed acpi0: reservation of 10, bff0 (3) failed Timecounter ACPI-fast frequency 3579545 Hz quality 1000 acpi_timer0: 24-bit timer at 3.579545MHz port 0x808-0x80b on acpi0 cpu0: ACPI CPU on acpi0 cpu1: ACPI CPU on acpi0 cpu2: ACPI CPU on acpi0 cpu3: ACPI CPU on acpi0 cpu4: ACPI CPU on acpi0 cpu5: ACPI CPU on acpi0 cpu6: ACPI CPU on acpi0 cpu7: ACPI CPU on acpi0 pcib0: ACPI Host-PCI bridge port 0xcf8-0xcff on acpi0 pci0: ACPI PCI bus on pcib0 pcib1: ACPI PCI-PCI bridge at device 1.0 on pci0 pci12: ACPI PCI bus on pcib1 igb0: Intel(R) PRO/1000 Network Connection version - 2.0.1 port 0xe880-0xe89f mem 0xfbe6-0xfbe7,0xfbe4-0xfbe5,0xfbeb8000-0xfbebbfff irq 28 at device 0.0 on pci12 igb0: Using MSIX interrupts with 9 vectors igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: [ITHREAD] igb0: Ethernet address: 00:25:b3:ae:19:6e igb1: Intel(R) PRO/1000 Network Connection version - 2.0.1 port 0xec00-0xec1f mem 0xfbee-0xfbef,0xfbec-0xfbed,0xfbebc000-0xfbeb irq 40 at device 0.1 on pci12 igb1: Using MSIX interrupts with 9 vectors igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: [ITHREAD] igb1: Ethernet address: 00:25:b3:ae:19:6f pcib2: ACPI PCI-PCI bridge at device 3.0 on pci0 pci11: ACPI PCI bus on pcib2 pcib3: ACPI PCI-PCI bridge at device 7.0 on pci0 pci7: ACPI PCI bus on pcib3 pcib4: PCI-PCI bridge at device 0.0 on pci7 pci8: PCI bus on pcib4 pcib5: PCI-PCI bridge at device 2.0 on pci8 pci10: PCI bus on pcib5 em0: Intel(R) PRO/1000 Network Connection 7.0.5 port 0xd880-0xd89f mem 0xfbdc-0xfbdd,0xfbc8-0xfbcf irq 38 at device 0.0 on pci10 em0: Using MSI interrupt em0: [FILTER] em0: Ethernet address: 00:26:55:d8:45:09 em1: Intel(R) PRO/1000 Network Connection 7.0.5 port 0xdc00-0xdc1f mem 0xfbde-0xfbdf,0xfbd0-0xfbd7 irq 39 at device 0.1 on pci10 em1: Using MSI interrupt em1: [FILTER] em1: Ethernet address: 00:26:55:d8:45:08 pcib6: PCI-PCI bridge at device 4.0 on pci8 pci9: PCI bus on pcib6 em2: Intel(R) PRO/1000 Network Connection 7.0.5 port 0xc880-0xc89f