Re: Suggestion: usbd.conf uses rc.conf for options

2002-10-28 Thread Dominic Mitchell
Baldur Gislason wrote:

I agree, that would be a nice feature in usbd, but a workaround to gain the same functionality would be:

attach /usr/sbin/moused `/usr/bin/perl -e 'while() { $foo = $_ . $foo; } if($foo =~ /^moused_flags=(.*?)$/im) { print $1; }'  /etc/rc.conf` -p /dev/${DEVNAME} -I /var/run/moused.${DEVNAME}.pid


Why not just:

  attach . /etc/rc.conf; /usr/bin/moused ${moused_flags} -p 
/dev/${DEVNAME} -I /var/run/moused.${DEVNAME}.pid

(untested)

-Dom

--
| Semantico: creators of major online resources  |
|   URL: http://www.semantico.com/   |
|   Tel: +44 (1273) 72   |
|   Address: 33 Bond St., Brighton, Sussex, BN1 1RD, UK. |


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message


PAM (was: Re: MAIL set by whom?)

2001-01-22 Thread Dominic Mitchell

On Sun, Jan 21, 2001 at 04:45:50PM +0100, Roelof Osinga wrote:
 Grand gesture. Laudable even. Yeah, that PAM sure seems to've
 become popular. The Courier IMAP port also insisted upon its
 installation. Insisted in that fiddling with the makefile only
 resulted in failure to configure. But that's a whole different
 story.

Would it be a good idea to start using /etc/pam.d ala RedHat, instead of
the monolithic /etc/pam.conf?

As far as I can see the support is already there, it's just not being
used due to the presence of the /etc/pam.conf.

This would make installing PAM entries far easier for the ports.

-Dom


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: ports security advisories..

2000-03-21 Thread Dominic Mitchell

On Mon, Mar 20, 2000 at 09:46:14PM -, Dave McKay wrote:
 Is it really necessary to post the ports security advisories?
 The exploitable programs are not part of the FreeBSD OS, they
 are third party software.  I think the proper place for these
 is the Bugtraq mailing list on securityfocus.com.  Also to add
 to the arguments, most of the advisories are not FreeBSD
 specific.

Just to add a point here, some of the problems noted in these advisories
*have* been FreeBSD specific, due to the way that a port has modified
the default install, or suchlike.  So it's definitely up to us to point
this out.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

``Putting the doh! into dot-com.''


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Command-line editing [was NetWare client in -current]

1999-09-15 Thread Dominic Mitchell

On Tue, Sep 14, 1999 at 03:54:50PM -0700, Parag Patel wrote:
 Anyway, command-line apps have been obsolete for years, so I guess we
 should go on and find better things to argue about.  :)

Heh.

So far, I've only found one GUI that I would really miss without X
Windows:  SWAT in netscape.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"vi has two modes the one in which it beeps and the one in which it doesnt."
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Command-line editing [was NetWare client in -current]

1999-09-15 Thread Dominic Mitchell
On Tue, Sep 14, 1999 at 03:54:50PM -0700, Parag Patel wrote:
 Anyway, command-line apps have been obsolete for years, so I guess we
 should go on and find better things to argue about.  :)

Heh.

So far, I've only found one GUI that I would really miss without X
Windows:  SWAT in netscape.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

vi has two modes the one in which it beeps and the one in which it doesnt.
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Command-line editing [was NetWare client in -current]

1999-09-14 Thread Dominic Mitchell
On Mon, Sep 13, 1999 at 08:34:59PM -0700, Parag Patel wrote:
 On Mon, 13 Sep 1999 09:23:36 BST, Dominic Mitchell wrote:
 
 On Fri, Sep 10, 1999 at 11:15:12AM -0700, Parag Patel wrote:
  Growing up programming on a KL-10, I still think the correct place for
  line-editing is in the driver.  Hell - it's already doing basic
  erase/kill line editing as it is.  Then you don't have to hack every
  command-line app to get line-editing.
 
 Yeah, but how do you specify completion then?
 
 Same way termcap/termlib would be handled. :)

Would that allow for the flexibility of, say zsh's programmable
completion?  And then combined with my right hand side prompt?

It gets complicated very quickly.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

vi has two modes the one in which it beeps and the one in which it doesnt.
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: NetWare client in -current

1999-09-13 Thread Dominic Mitchell

On Fri, Sep 10, 1999 at 11:15:12AM -0700, Parag Patel wrote:
 Growing up programming on a KL-10, I still think the correct place for
 line-editing is in the driver.  Hell - it's already doing basic
 erase/kill line editing as it is.  Then you don't have to hack every
 command-line app to get line-editing.

Yeah, but how do you specify completion then?

Unix went here a long time ago and backed out of it.  Have a look at the
paper http://www.cs.princeton.edu/~jlk/kornshell/doc/vhll.ps.gz (linked
from www.kornshell.com) in particular, the history section.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"vi has two modes the one in which it beeps and the one in which it doesnt."
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: More press

1999-09-13 Thread Dominic Mitchell

On Sun, Sep 12, 1999 at 03:22:55PM +0200, Dag-Erling Smorgrav wrote:
 Dirk GOUDERS [EMAIL PROTECTED] writes:
  Oh, sorry -- my "browse-url-at-mouse" function made
  
  http://www.zdnet.com/zdtv/screensavers/answerstips/story/02c36562c23246242c00.html
  
  of it...
 
 Netscape uses commans to separate parameters to the OpenURL command.
 Fortunately, the API is open and documented, so there's nothing to
 stop someone from writing a small command-line util that does the
 equivalent of "netscape -remote" except faster and better.

If you follow the link from "netscape -help", you end up at:

http://home.netscape.com/newsref/std/remote.c

Which is a small C program to do just that.  I really should turn it
into a port...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"vi has two modes the one in which it beeps and the one in which it doesnt."
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: More press

1999-09-13 Thread Dominic Mitchell

On Mon, Sep 13, 1999 at 07:59:03AM -0700, Duane H. Hesser wrote:
 You probably already have it, as
 /usr/src/contrib/global/gozilla/remote.c

Blimey!
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"vi has two modes the one in which it beeps and the one in which it doesnt."
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: NetWare client in -current

1999-09-13 Thread Dominic Mitchell
On Fri, Sep 10, 1999 at 11:15:12AM -0700, Parag Patel wrote:
 Growing up programming on a KL-10, I still think the correct place for
 line-editing is in the driver.  Hell - it's already doing basic
 erase/kill line editing as it is.  Then you don't have to hack every
 command-line app to get line-editing.

Yeah, but how do you specify completion then?

Unix went here a long time ago and backed out of it.  Have a look at the
paper http://www.cs.princeton.edu/~jlk/kornshell/doc/vhll.ps.gz (linked
from www.kornshell.com) in particular, the history section.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

vi has two modes the one in which it beeps and the one in which it doesnt.
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: More press

1999-09-13 Thread Dominic Mitchell
On Sun, Sep 12, 1999 at 03:22:55PM +0200, Dag-Erling Smorgrav wrote:
 Dirk GOUDERS h...@musashi.et.bocholt.fh-ge.de writes:
  Oh, sorry -- my browse-url-at-mouse function made
  
  http://www.zdnet.com/zdtv/screensavers/answerstips/story/02c36562c23246242c00.html
  
  of it...
 
 Netscape uses commans to separate parameters to the OpenURL command.
 Fortunately, the API is open and documented, so there's nothing to
 stop someone from writing a small command-line util that does the
 equivalent of netscape -remote except faster and better.

If you follow the link from netscape -help, you end up at:

http://home.netscape.com/newsref/std/remote.c

Which is a small C program to do just that.  I really should turn it
into a port...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

vi has two modes the one in which it beeps and the one in which it doesnt.
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: More press

1999-09-13 Thread Dominic Mitchell
On Mon, Sep 13, 1999 at 07:59:03AM -0700, Duane H. Hesser wrote:
 You probably already have it, as
 /usr/src/contrib/global/gozilla/remote.c

Blimey!
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

vi has two modes the one in which it beeps and the one in which it doesnt.
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: src/etc/rc.sysctl installation

1999-09-07 Thread Dominic Mitchell

On Mon, Sep 06, 1999 at 09:31:01PM -0600, Warner Losh wrote:
 In message [EMAIL PROTECTED] Brian Somers writes:
 : Is it time to install src/etc/rc.sysctl now ?  I certainly think it's 
 : a good idea :-]
 
 No.  I don't think we want to install rc.sysctl for an installworld.
 It would spam changes that others make to them.

Possibly installing it as /etc/defaults/rc.sysctl?
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"vi has two modes the one in which it beeps and the one in which it doesnt."
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: src/etc/rc.sysctl installation

1999-09-07 Thread Dominic Mitchell
On Mon, Sep 06, 1999 at 09:31:01PM -0600, Warner Losh wrote:
 In message 199909070023.baa29...@keep.lan.awfulhak.org Brian Somers writes:
 : Is it time to install src/etc/rc.sysctl now ?  I certainly think it's 
 : a good idea :-]
 
 No.  I don't think we want to install rc.sysctl for an installworld.
 It would spam changes that others make to them.

Possibly installing it as /etc/defaults/rc.sysctl?
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

vi has two modes the one in which it beeps and the one in which it doesnt.
-- Anon.


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Proposal: Add generic username for 3rd-party MTA's

1999-09-03 Thread Dominic Mitchell

On Fri, Sep 03, 1999 at 10:49:35AM +0100, Wood, Richard wrote:
  -Original Message-
  From: Josef Karthauser [mailto:[EMAIL PROTECTED]]
  Sent: 03 September 1999 10:41
 
  Don't use 'mailman' please.  We've already got it assigned across
  site for the MailMan mailing list software. :)
 
 I vote for 'Pat' and any other mail software could use 'Jess'.

I'm sorry, but that'd throw out anybody already running PP at their
site.  :-)

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"Ordinary folks who don't understand computers don't deserve to be
 mocked. Ordinary people who want to use their computers but refuse to
 learn anything about them do." -- slashdot comment


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Proposal: Add generic username for 3rd-party MTA's

1999-09-03 Thread Dominic Mitchell
On Fri, Sep 03, 1999 at 10:49:35AM +0100, Wood, Richard wrote:
  -Original Message-
  From: Josef Karthauser [mailto:j...@pavilion.net]
  Sent: 03 September 1999 10:41
 
  Don't use 'mailman' please.  We've already got it assigned across
  site for the MailMan mailing list software. :)
 
 I vote for 'Pat' and any other mail software could use 'Jess'.

I'm sorry, but that'd throw out anybody already running PP at their
site.  :-)

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

Ordinary folks who don't understand computers don't deserve to be
 mocked. Ordinary people who want to use their computers but refuse to
 learn anything about them do. -- slashdot comment


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: StarOffice giveaway of source code

1999-09-01 Thread Dominic Mitchell

On Wed, Sep 01, 1999 at 04:53:42PM +0800, Stephen Hocking-Senior Programmer PGS Perth 
wrote:
 Now that Sun is apparently planning to give away the source to StarOffice, I 
 wonder when the first port to FreeBSD will happen?

Where sun are involved, I wouldn't get your hopes up until you actually
see source or something.  And I wouldn't exactly call them quick,
either.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"Ordinary folks who don't understand computers don't deserve to be
 mocked. Ordinary people who want to use their computers but refuse to
 learn anything about them do." -- slashdot comment


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: StarOffice giveaway of source code

1999-09-01 Thread Dominic Mitchell
On Wed, Sep 01, 1999 at 04:53:42PM +0800, Stephen Hocking-Senior Programmer PGS 
Perth wrote:
 Now that Sun is apparently planning to give away the source to StarOffice, I 
 wonder when the first port to FreeBSD will happen?

Where sun are involved, I wouldn't get your hopes up until you actually
see source or something.  And I wouldn't exactly call them quick,
either.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

Ordinary folks who don't understand computers don't deserve to be
 mocked. Ordinary people who want to use their computers but refuse to
 learn anything about them do. -- slashdot comment


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: user mount f/s with kld's

1999-08-19 Thread Dominic Mitchell

On Thu, Aug 19, 1999 at 10:12:52AM +0100, Cillian Sharkey wrote:
 I just setup my system so that "Joe" user can mount
 /dev/fd0 on a mountpoint "Joe" owns..grand no problem..
 
 ..BUT it only works when the f/s code for that f/s type is
 available (ie. compiled into the kernel or has been previously
 loaded as a module)
 
 however if it's not compiled into the kernel, or already
 loaded as a module, user "Joe" can't mount the disk because
 the module for that f/s type won't be loaded dynamically..
 
 I presume this is because root is only allowed to use
 kldload.. ?

Yes.  To get around this, I preloaded any FS modules I thought I would
need in /boot/loader.conf.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"Finally, when replying to messages only quote the parts of the message
 your will be discussing or that are relevant. Quoting whole messages
 and adding two lines at the top is not good etiquette." -- Elias Levy


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: user mount f/s with kld's

1999-08-19 Thread Dominic Mitchell
On Thu, Aug 19, 1999 at 10:12:52AM +0100, Cillian Sharkey wrote:
 I just setup my system so that Joe user can mount
 /dev/fd0 on a mountpoint Joe owns..grand no problem..
 
 ..BUT it only works when the f/s code for that f/s type is
 available (ie. compiled into the kernel or has been previously
 loaded as a module)
 
 however if it's not compiled into the kernel, or already
 loaded as a module, user Joe can't mount the disk because
 the module for that f/s type won't be loaded dynamically..
 
 I presume this is because root is only allowed to use
 kldload.. ?

Yes.  To get around this, I preloaded any FS modules I thought I would
need in /boot/loader.conf.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

Finally, when replying to messages only quote the parts of the message
 your will be discussing or that are relevant. Quoting whole messages
 and adding two lines at the top is not good etiquette. -- Elias Levy


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: BSD XFS Port BSD VFS Rewrite

1999-08-16 Thread Dominic Mitchell

On Sat, Aug 14, 1999 at 12:23:00PM -0400, Brian F. Feldman wrote:
 On Sat, 14 Aug 1999, James Howard wrote:
  I heard somewhere that Linux was released under a slightly modified GPL to
  permit the inclusion of BSD code.  I assumed they did this to steal the IP
  stack.
 
 Most likely.

Nope.  Linux has always had it's own IP stack.  That's where the
"Linux's network performance is poor" arguments came from.  Of course,
it's a lot better these days.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"Finally, when replying to messages only quote the parts of the message
 your will be discussing or that are relevant. Quoting whole messages
 and adding two lines at the top is not good etiquette." -- Elias Levy
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: BSD XFS Port BSD VFS Rewrite

1999-08-16 Thread Dominic Mitchell
On Sat, Aug 14, 1999 at 12:23:00PM -0400, Brian F. Feldman wrote:
 On Sat, 14 Aug 1999, James Howard wrote:
  I heard somewhere that Linux was released under a slightly modified GPL to
  permit the inclusion of BSD code.  I assumed they did this to steal the IP
  stack.
 
 Most likely.

Nope.  Linux has always had it's own IP stack.  That's where the
Linux's network performance is poor arguments came from.  Of course,
it's a lot better these days.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

Finally, when replying to messages only quote the parts of the message
 your will be discussing or that are relevant. Quoting whole messages
 and adding two lines at the top is not good etiquette. -- Elias Levy
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Solution for mail pseudo-users?

1999-08-01 Thread Dominic Mitchell

On Sun, Aug 01, 1999 at 02:43:28AM -0700, Mike Hoskins wrote:
 I like the 'keeping it real' idea as well.
 
 Then again, doesn't 3.2R+ support SecureRPC?  Isn't this the sort of thing
 NIS+ was invented for?  A centralized db of users that you can then export
 to various machines with differing characteristics?  I.e. couldn't you
 import the NIS db to your mail box(es) with /nonexistent home directory
 and /sbin/nologin shell?  Name and password pairs would still exist,
 allowing any SMTP/POP3 daemons I know of to work without change.

We support NIS, and secure RPC, but not NIS+.  Bill Paul was working on
it some time back, but I'm not sure if he still is...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Solution for mail pseudo-users?

1999-08-01 Thread Dominic Mitchell
On Sun, Aug 01, 1999 at 02:43:28AM -0700, Mike Hoskins wrote:
 I like the 'keeping it real' idea as well.
 
 Then again, doesn't 3.2R+ support SecureRPC?  Isn't this the sort of thing
 NIS+ was invented for?  A centralized db of users that you can then export
 to various machines with differing characteristics?  I.e. couldn't you
 import the NIS db to your mail box(es) with /nonexistent home directory
 and /sbin/nologin shell?  Name and password pairs would still exist,
 allowing any SMTP/POP3 daemons I know of to work without change.

We support NIS, and secure RPC, but not NIS+.  Bill Paul was working on
it some time back, but I'm not sure if he still is...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Mentioning RFC numbers in /etc/services

1999-07-29 Thread Dominic Mitchell

On Thu, Jul 29, 1999 at 09:04:20AM +0100, Josef Karthauser wrote:
 A question that always baffled me (I'm fairly easy to baffle) is why we've
 got some numbers defined as both udp and tcp when the service type is only
 one or the other. Does anyone know?

Probably because the IANA specifies them that way.  I think that they
try to keep both UDP and TCP ports the same, "just in case".  There
might be a better explanation in rfc1700 (assigned numbers), or whatever
it's latest edition is.

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Mentioning RFC numbers in /etc/services

1999-07-29 Thread Dominic Mitchell
On Thu, Jul 29, 1999 at 09:04:20AM +0100, Josef Karthauser wrote:
 A question that always baffled me (I'm fairly easy to baffle) is why we've
 got some numbers defined as both udp and tcp when the service type is only
 one or the other. Does anyone know?

Probably because the IANA specifies them that way.  I think that they
try to keep both UDP and TCP ports the same, just in case.  There
might be a better explanation in rfc1700 (assigned numbers), or whatever
it's latest edition is.

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Pasting data between terminals

1999-07-26 Thread Dominic Mitchell

On Mon, Jul 26, 1999 at 08:01:22PM +0200, Krzysztof Krawczyk wrote:
 Maybe this is a wrong list, so tell me about it, but I think you can help
 me :)
 
 I have small problem. I own two virtual terminals, eg. ttyp1 and ttyp2.
 Under ttyp1 I run a program. Now I need to transport big count of datas
 from terminal ttyp2 to ttyp1.
 When I do:
 echo "blah blah" /dev/ttyp1
 text "blah blah" appear in virtual terminal ttyp1, but only as a text of
 "message". I need ttyp1 count those datas as a "command typed by hand",
 not just a text displayed in this term as info. I must transport lots of
 data between these terminals. Have you any ideas?

1) Try freebsd-questions in future.

2) Try expect.  See http://expect.nist.gov/ .
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: yet more ways to attack executing binaries (was Re: deny ktrace without read permissions? )

1999-07-26 Thread Dominic Mitchell
On Mon, Jul 26, 1999 at 04:16:28AM -0700, jko...@freebsd.org wrote:
 LD_LIBRARY_PATH, LD_PRELOAD and LD_DEBUG are ignored for setuid executables
 in FreeBSD.

But the point being made is that they are not ignored for executables
which have no read access.  And from there, read access can be gained,
because at that point, you have code running in the process's address
space.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Pasting data between terminals

1999-07-26 Thread Dominic Mitchell
On Mon, Jul 26, 1999 at 08:01:22PM +0200, Krzysztof Krawczyk wrote:
 Maybe this is a wrong list, so tell me about it, but I think you can help
 me :)
 
 I have small problem. I own two virtual terminals, eg. ttyp1 and ttyp2.
 Under ttyp1 I run a program. Now I need to transport big count of datas
 from terminal ttyp2 to ttyp1.
 When I do:
 echo blah blah /dev/ttyp1
 text blah blah appear in virtual terminal ttyp1, but only as a text of
 message. I need ttyp1 count those datas as a command typed by hand,
 not just a text displayed in this term as info. I must transport lots of
 data between these terminals. Have you any ideas?

1) Try freebsd-questions in future.

2) Try expect.  See http://expect.nist.gov/ .
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-23 Thread Dominic Mitchell

On Thu, Jul 22, 1999 at 10:58:59PM -0700, John Polstra wrote:
 In article [EMAIL PROTECTED],
 Dominic Mitchell  [EMAIL PROTECTED] wrote:
  On Thu, Jul 22, 1999 at 04:59:59PM +0700, Max Khon wrote:
   
   PAM is also "using masses of weird shared objects" but nevertheless it's
   quite usable
  
  By statically linked binaries?
 
 Our PAM implementation works for static binaries too.  See the
 sources for the gory details.  Basically it creates a library that
 includes all the possible modules, and selects the right one at
 runtime.  There's some linker set magic involved.

Ooh!  Cunning!

 Concerning "masses of weird shared objects," you'd really better get
 used to it.  It was the wave of the future 10 years ago.  It's not
 going away.  Dynamic linking provides flexibility and modularity that
 you just can't get from static linking.

Very right.  I didn't say it was a bad thing, just confused me for a
while when I first saw it...

However, I still (personally) prefer the idea of a filesystem
interface...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-23 Thread Dominic Mitchell
On Thu, Jul 22, 1999 at 10:58:59PM -0700, John Polstra wrote:
 In article 19990722111605.c49...@palmerharvey.co.uk,
 Dominic Mitchell  dom.mitch...@palmerharvey.co.uk wrote:
  On Thu, Jul 22, 1999 at 04:59:59PM +0700, Max Khon wrote:
   
   PAM is also using masses of weird shared objects but nevertheless it's
   quite usable
  
  By statically linked binaries?
 
 Our PAM implementation works for static binaries too.  See the
 sources for the gory details.  Basically it creates a library that
 includes all the possible modules, and selects the right one at
 runtime.  There's some linker set magic involved.

Ooh!  Cunning!

 Concerning masses of weird shared objects, you'd really better get
 used to it.  It was the wave of the future 10 years ago.  It's not
 going away.  Dynamic linking provides flexibility and modularity that
 you just can't get from static linking.

Very right.  I didn't say it was a bad thing, just confused me for a
while when I first saw it...

However, I still (personally) prefer the idea of a filesystem
interface...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-22 Thread Dominic Mitchell

On Thu, Jul 22, 1999 at 04:59:59PM +0700, Max Khon wrote:
 On Mon, 19 Jul 1999, Dominic Mitchell wrote:
  Lovely.  Sounds like a much better way to do the Solaris/Linux (and
  NetBSD?) /etc/nsswitch.conf stuff.  On Solaris at least, this is
  implemented using masses of weird shared objects...
 
 PAM is also "using masses of weird shared objects" but nevertheless it's
 quite usable

By statically linked binaries?
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-22 Thread Dominic Mitchell

On Thu, Jul 22, 1999 at 11:19:35PM +0930, Kris Kennaway wrote:
 On Thu, 22 Jul 1999, Dominic Mitchell wrote:
 
   PAM is also "using masses of weird shared objects" but nevertheless it's
   quite usable
  
  By statically linked binaries?
 
 This is also an issue for a modularized libcrypt(). Peter Wemm suggested
 having the library fork and exec a static helper binary module and
 communicate via a pipe. So essentially you'd have two files for each
 module, one which is a shared library and loaded via dlopen() and one
 which is the same code with a small amount of wrapper (main() etc) to make
 it into a standalone binary.

This is starting to get icky.  This is also where the earlier idea of a
userspace filesystem would probably fare better, in terms of both
performance and simplicity.

 Solaris seem to be deprecating static libraries; you cannot have a fully
 static libc and they have to resort to keeping (a copy of) libdl (and
 presumably the run-time linker) under /etc so it's available on the root
 partition.

Solaris hasn't supported static linking for some time.  If you have a
look at Casper Dik's FAQ, it goes into more detail.  They do keep stuff
on the root partition:

admin# ls -l /etc/lib
total 644
-rwxr-xr-x   1 bin  bin   155060 Jul  1  1998 ld.so.1*
-rwxr-xr-x   1 bin  bin 4284 Jul  1  1998 libdl.so.1*
-rwxr-xr-x   1 bin  bin25468 Jul 16  1997 nss_files.so.1*
lrwxrwxrwx   1 root root  17 Sep 14  1998 pam_authen.so - 
./pam_authen.so.1*
-rwxr-xr-x   1 root sys14516 Jul 16  1997 pam_authen.so.1*
lrwxrwxrwx   1 root root  16 Sep 14  1998 pam_entry.so - ./pam_entry.so.1*
-rwxr-xr-x   1 root sys11540 Jul 16  1997 pam_entry.so.1*
lrwxrwxrwx   1 root root  17 Sep 14  1998 pam_extern.so - 
./pam_extern.so.1*
-rwxr-xr-x   1 root sys11044 Jul 16  1997 pam_extern.so.1*
lrwxrwxrwx   1 root root  16 Sep 14  1998 pam_pwmgt.so - ./pam_pwmgt.so.1*
-rwxr-xr-x   1 root sys85764 Jul 16  1997 pam_pwmgt.so.1*
lrwxrwxrwx   1 root root  18 Sep 14  1998 pam_session.so - 
./pam_session.so.1*
-rwxr-xr-x   1 root sys 4748 Jul 16  1997 pam_session.so.1*

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: arpresolve: can't allocate llinfo for 255.255.255.0rt

1999-07-22 Thread Dominic Mitchell

On Thu, Jul 22, 1999 at 09:30:28AM -0400, Jung, Michael wrote:
 I started getting these messages in the daily security output.
 
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt

I get those after a long run of nmap on our /16 network.  At this point,
I just kill nmap and the problem goes away.  I didn't bother looking
into the routing table though.  Maybe it's time to see what the PC
support monkeys have plugged into my network again.  :-)
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-22 Thread Dominic Mitchell
On Thu, Jul 22, 1999 at 04:59:59PM +0700, Max Khon wrote:
 On Mon, 19 Jul 1999, Dominic Mitchell wrote:
  Lovely.  Sounds like a much better way to do the Solaris/Linux (and
  NetBSD?) /etc/nsswitch.conf stuff.  On Solaris at least, this is
  implemented using masses of weird shared objects...
 
 PAM is also using masses of weird shared objects but nevertheless it's
 quite usable

By statically linked binaries?
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-22 Thread Dominic Mitchell
On Thu, Jul 22, 1999 at 11:19:35PM +0930, Kris Kennaway wrote:
 On Thu, 22 Jul 1999, Dominic Mitchell wrote:
 
   PAM is also using masses of weird shared objects but nevertheless it's
   quite usable
  
  By statically linked binaries?
 
 This is also an issue for a modularized libcrypt(). Peter Wemm suggested
 having the library fork and exec a static helper binary module and
 communicate via a pipe. So essentially you'd have two files for each
 module, one which is a shared library and loaded via dlopen() and one
 which is the same code with a small amount of wrapper (main() etc) to make
 it into a standalone binary.

This is starting to get icky.  This is also where the earlier idea of a
userspace filesystem would probably fare better, in terms of both
performance and simplicity.

 Solaris seem to be deprecating static libraries; you cannot have a fully
 static libc and they have to resort to keeping (a copy of) libdl (and
 presumably the run-time linker) under /etc so it's available on the root
 partition.

Solaris hasn't supported static linking for some time.  If you have a
look at Casper Dik's FAQ, it goes into more detail.  They do keep stuff
on the root partition:

admin# ls -l /etc/lib
total 644
-rwxr-xr-x   1 bin  bin   155060 Jul  1  1998 ld.so.1*
-rwxr-xr-x   1 bin  bin 4284 Jul  1  1998 libdl.so.1*
-rwxr-xr-x   1 bin  bin25468 Jul 16  1997 nss_files.so.1*
lrwxrwxrwx   1 root root  17 Sep 14  1998 pam_authen.so - 
./pam_authen.so.1*
-rwxr-xr-x   1 root sys14516 Jul 16  1997 pam_authen.so.1*
lrwxrwxrwx   1 root root  16 Sep 14  1998 pam_entry.so - 
./pam_entry.so.1*
-rwxr-xr-x   1 root sys11540 Jul 16  1997 pam_entry.so.1*
lrwxrwxrwx   1 root root  17 Sep 14  1998 pam_extern.so - 
./pam_extern.so.1*
-rwxr-xr-x   1 root sys11044 Jul 16  1997 pam_extern.so.1*
lrwxrwxrwx   1 root root  16 Sep 14  1998 pam_pwmgt.so - 
./pam_pwmgt.so.1*
-rwxr-xr-x   1 root sys85764 Jul 16  1997 pam_pwmgt.so.1*
lrwxrwxrwx   1 root root  18 Sep 14  1998 pam_session.so - 
./pam_session.so.1*
-rwxr-xr-x   1 root sys 4748 Jul 16  1997 pam_session.so.1*

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: arpresolve: can't allocate llinfo for 255.255.255.0rt

1999-07-22 Thread Dominic Mitchell
On Thu, Jul 22, 1999 at 09:30:28AM -0400, Jung, Michael wrote:
 I started getting these messages in the daily security output.
 
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt
  arpresolve: can't allocate llinfo for 255.255.255.0rt

I get those after a long run of nmap on our /16 network.  At this point,
I just kill nmap and the problem goes away.  I didn't bother looking
into the routing table though.  Maybe it's time to see what the PC
support monkeys have plugged into my network again.  :-)
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Will FreeBSD ever see native IPv6 ??

1999-07-21 Thread Dominic Mitchell

On Wed, Jul 21, 1999 at 12:16:22PM -0700, Julian Elischer wrote:
 
 FreeBSD will have native IPV6 within a matter of weeks at this stage.. 
 the code is being readied as we speak.  see www.kame.net . 3 sets of
 developers for FreeBSD IPV6 have merged their efforts and the result of
 this should be available by the end of summer (Northern).  (which isn't
 far away now..) 


Wicked.  I can't wait to exercise our firewall's IPsec capabilities...
Congratulations to all parties involved, and good luck with the final
mile!
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Will FreeBSD ever see native IPv6 ??

1999-07-21 Thread Dominic Mitchell
On Wed, Jul 21, 1999 at 12:16:22PM -0700, Julian Elischer wrote:
 
 FreeBSD will have native IPV6 within a matter of weeks at this stage.. 
 the code is being readied as we speak.  see www.kame.net . 3 sets of
 developers for FreeBSD IPV6 have merged their efforts and the result of
 this should be available by the end of summer (Northern).  (which isn't
 far away now..) 


Wicked.  I can't wait to exercise our firewall's IPsec capabilities...
Congratulations to all parties involved, and good luck with the final
mile!
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-20 Thread Dominic Mitchell
On Mon, Jul 19, 1999 at 12:55:19PM -0700, Jason Thorpe wrote:
 On Mon, 19 Jul 1999 20:44:18 +0100 
  Dominic Mitchell dom.mitch...@palmerharvey.co.uk wrote:
 
   Lovely.  Sounds like a much better way to do the Solaris/Linux (and
   NetBSD?) /etc/nsswitch.conf stuff.  On Solaris at least, this is
   implemented using masses of weird shared objects...
 
 The plan for NetBSD is that things will also be handled with dynamic
 modules, but those dynamic modules will be glued into a `nscd'[*] (if you
 use Solaris, you're familiar with the name :-).
 
 [*] We are planning on not having all of the problems that the Solaris
 nscd has, and that people often complain about.
 
 This will allow libc to simply make a call to nscd (or fallback onto
 traditional `files' lookup), and nscd will handle all but the `files'
 case.  This allows system-wide caching, and puts all of the complexity
 in one place.

How will you get around one of the major bugbears of the Solaris
implementation, that is nscd serialises access to these databases?  I
understand that the caching will allow you to return most responses
quickly, but on a busy system (web cache doing dns requests?) it might
well bog down...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-19 Thread Dominic Mitchell

On Mon, Jul 19, 1999 at 12:29:48PM -0400, David E. Cross wrote:
 I thought now would be a good time to chime in on some of my wild schemes...
 
 The reason I am interested in 'userfs' is to enable me to write a version
 of 'nsd'.  Those of you familiar with Irix  will recognize it.  For others,
 what it does is to present the name-space on a machine as filespace.
 The advantages of this is that we can greatly simplify out libc to use the
 file/namespace that nsd provides.  For example 'getpwent()' now becomes
 file accesses to /ns/.local/passwd/NAME.  Another advantage that this
 abstraction provides is that it allows transparent alterations of the
 databases in use, even to the extent of NOT having to restart each client
 that may be using a specific database.

Lovely.  Sounds like a much better way to do the Solaris/Linux (and
NetBSD?) /etc/nsswitch.conf stuff.  On Solaris at least, this is
implemented using masses of weird shared objects...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: PAM LDAP in FreeBSD, and userfs too.

1999-07-19 Thread Dominic Mitchell
On Mon, Jul 19, 1999 at 12:29:48PM -0400, David E. Cross wrote:
 I thought now would be a good time to chime in on some of my wild schemes...
 
 The reason I am interested in 'userfs' is to enable me to write a version
 of 'nsd'.  Those of you familiar with Irix  will recognize it.  For others,
 what it does is to present the name-space on a machine as filespace.
 The advantages of this is that we can greatly simplify out libc to use the
 file/namespace that nsd provides.  For example 'getpwent()' now becomes
 file accesses to /ns/.local/passwd/NAME.  Another advantage that this
 abstraction provides is that it allows transparent alterations of the
 databases in use, even to the extent of NOT having to restart each client
 that may be using a specific database.

Lovely.  Sounds like a much better way to do the Solaris/Linux (and
NetBSD?) /etc/nsswitch.conf stuff.  On Solaris at least, this is
implemented using masses of weird shared objects...
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Swap overcommit (was Re: Replacement for grep(1) (part 2))

1999-07-16 Thread Dominic Mitchell
On Thu, Jul 15, 1999 at 09:57:31PM -0700, Matthew Dillon wrote:
 Something is weird here.  If the solaris people are using a 
 SWAPSIZE + REALMEM VM model, they have to allow the 
 allocated + reserved space go +REALMEM bytes over available swap 
 space.  If not they are using only a SWAPSIZE VM model.
 
 Wait - does Solaris normally use swap files or swap partitions?
 Or is it that weird /tmp filesystem stuff?  If it normally uses swap 
 files and allows holes then that explains everything.

No, swap is slice based in Solaris.  tmpfs is just a filesystem (much
like MFS) which uses swap as backing store.  I will admit to never quite
understanding the relationship of how much swap tmpfs is willing to
steal though...  Maybe I should go and read the answerbook
(http://docs.sun.com if you want a peek).
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: OpenBSD's strlcpy(3) and strlcat(3)

1999-07-16 Thread Dominic Mitchell
On Fri, Jul 16, 1999 at 10:12:29AM +0200, Jos Backus wrote:
 I just can't resist mentioning Dan Bernstein's implementation of a similar
 idea: stralloc - dynamically allocated strings.

Has he actually LICENSEd any of his code yet?
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: printing

1999-07-15 Thread Dominic Mitchell

On Thu, Jul 15, 1999 at 10:44:57AM +0100, Alex Knowles wrote:
 I hope this is the right place to post, sorry if it's not.
 I'm really sorry to post what is probably a repeat question, but I've just
 upgraded to freebsd 3.2-release and I'm having real problems getting the
 kernel to see my printer ports:
 
 here is my kernel
 device  ppc0at isa? port? flags 0x40 net irq 7
 controller  ppbus0
 device  lpt0at ppbus?
 device  plip0   at ppbus?
 device  ppi0at ppbus?
 
 and here is my dmesg output:
 ppc0 at 0x3bc irq 7 flags 0x40 on isa
 ppc0: Generic chipset (ECP/PS2/NIBBLE) in COMPATIBLE mode
 ppi0: generic parallel i/o on ppbus 0
 plip0: PLIP network interface on ppbus 0
 
 whenever I try to access lpt0 it says that the device is not configured.
 If I try and use the old configuration of lpt and I try and build the kernel
 I get a whole load of make errors.

Quick guess: Remove your device entries in /dev/  and recreate them with
/dev/MAKEDEV.  There may well be a different major/minor number for the
new device.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: printing

1999-07-15 Thread Dominic Mitchell
On Thu, Jul 15, 1999 at 10:44:57AM +0100, Alex Knowles wrote:
 I hope this is the right place to post, sorry if it's not.
 I'm really sorry to post what is probably a repeat question, but I've just
 upgraded to freebsd 3.2-release and I'm having real problems getting the
 kernel to see my printer ports:
 
 here is my kernel
 device  ppc0at isa? port? flags 0x40 net irq 7
 controller  ppbus0
 device  lpt0at ppbus?
 device  plip0   at ppbus?
 device  ppi0at ppbus?
 
 and here is my dmesg output:
 ppc0 at 0x3bc irq 7 flags 0x40 on isa
 ppc0: Generic chipset (ECP/PS2/NIBBLE) in COMPATIBLE mode
 ppi0: generic parallel i/o on ppbus 0
 plip0: PLIP network interface on ppbus 0
 
 whenever I try to access lpt0 it says that the device is not configured.
 If I try and use the old configuration of lpt and I try and build the kernel
 I get a whole load of make errors.

Quick guess: Remove your device entries in /dev/  and recreate them with
/dev/MAKEDEV.  There may well be a different major/minor number for the
new device.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



KLD documentation

1999-07-12 Thread Dominic Mitchell

Some hacking group has written an introduction to using KLDs under
FreeBSD.  It's not supposed to be a "normal" tutorial, but it may be
appreciated by a few people on this list.

http://thc.pimmel.com/files/thc/bsdkern.html
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: Keyboard mappings ...

1999-07-12 Thread Dominic Mitchell

On Mon, Jul 12, 1999 at 11:50:33AM -0300, The Hermit Hacker wrote:
   Attached is the output of 'tconv -b vt221' on our Solaris machine
 where this map'ng is required, but the output doesn't look anything like
 /etc/termcap :(

Try doing "infocmp -C vt221" to get termcap output.  What you have is
terminfo.  If you really want to understand terminfo, look at ncurses.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



KLD documentation

1999-07-12 Thread Dominic Mitchell
Some hacking group has written an introduction to using KLDs under
FreeBSD.  It's not supposed to be a normal tutorial, but it may be
appreciated by a few people on this list.

http://thc.pimmel.com/files/thc/bsdkern.html
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: Keyboard mappings ...

1999-07-12 Thread Dominic Mitchell
On Mon, Jul 12, 1999 at 11:50:33AM -0300, The Hermit Hacker wrote:
   Attached is the output of 'tconv -b vt221' on our Solaris machine
 where this map'ng is required, but the output doesn't look anything like
 /etc/termcap :(

Try doing infocmp -C vt221 to get termcap output.  What you have is
terminfo.  If you really want to understand terminfo, look at ncurses.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: how to start to be a hacker?

1999-07-02 Thread Dominic Mitchell
On Thu, Jul 01, 1999 at 08:17:59AM -0700, haodong...@netease.com wrote:
 I know the basic admin knowledge of UNIX,perl,cgi,c
 how to become a hacker?

Not everyone will agree with this, but you may want to look at:

http://www.tuxedo.org/~esr/faqs/index.html
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Postfix license update.

1999-07-01 Thread Dominic Mitchell

Just to let you all know, it appears that the termination clause has
been dropped, but it appears to have gained a gpl-like "must make source
available" clause.

http://msgs.securepoint.com/cgi-bin/get/postfix9906/103.html

(and where I found it)

http://www.lwn.net/1999/0701/a/postfix.html
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Postfix license update.

1999-07-01 Thread Dominic Mitchell
Just to let you all know, it appears that the termination clause has
been dropped, but it appears to have gained a gpl-like must make source
available clause.

http://msgs.securepoint.com/cgi-bin/get/postfix9906/103.html

(and where I found it)

http://www.lwn.net/1999/0701/a/postfix.html
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

In Mountain View did Larry Wall
Sedately launch a quiet plea:
That DOS, the ancient system, shall
On boxes pleasureless to all
Run Perl though lack they C.
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: tcpdump(1) additions.

1999-06-30 Thread Dominic Mitchell

On Wed, Jun 30, 1999 at 12:22:08AM -0700, Julian Elischer wrote:
 It would make sense except that the last time someone tried, some people
 complained that it made it too easy to sniff passwords etc.

Ok, so how about making it a compile time option, turned off by default?
That way, you have to recompile it from source.  I suppose it's a little
bit of "security through obscurity", though.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

"How Unix vendors can ship ancient shells with no job control and no cursor 
 editing by default and still wonder why people buy NT is beyond me." - Alan Cox
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



Re: tcpdump(1) additions.

1999-06-30 Thread Dominic Mitchell
On Wed, Jun 30, 1999 at 12:22:08AM -0700, Julian Elischer wrote:
 It would make sense except that the last time someone tried, some people
 complained that it made it too easy to sniff passwords etc.

Ok, so how about making it a compile time option, turned off by default?
That way, you have to recompile it from source.  I suppose it's a little
bit of security through obscurity, though.
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

How Unix vendors can ship ancient shells with no job control and no cursor 
 editing by default and still wonder why people buy NT is beyond me. - Alan Cox
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Cyclic stopping CVS development

1999-06-25 Thread Dominic Mitchell
This may have some bearing on FreeBSD...

http://www.lwn.net/daily/cyclic.html
-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

  Always think very hard before messing with TCP.  And then don't. -- MC
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message



Re: NIS Question

1999-06-24 Thread Dominic Mitchell
[ This is probably better aimed at -questions, but seeing as I'm here...  ]

On Thu, Jun 24, 1999 at 12:13:53AM -0400, Nick LoPresti wrote:
 Here's my situation:
 
 1.  I would like to set up NIS on my network.
 2.  I have one FreeBSD system(2.2.6)
 3.  I have many other flavors of Unix on this network
 4.  I would like the FreeBSD system to export it's passwd and group files to
 the other machines
 
 How do I achieve this?  Do I just run ypserv  ypbind?   Any FAQ's around???

Well, I've just been through the same problem (and spent around a day
figuring out the answer...).

Making your box a NIS server is easy.  Just do grep -i nis
/etc/defaults/rc.conf and plug the results into your /etc/rc.conf.  You
probably want to enable nis_server and yppasswdd.  You probably also
want to look at ypinit(8).  

The hard bit is making the other Unix hosts understand our password
file.  Beacuse we use MD5 encrypted passwords, instead of DES encrypted
ones, they won't understand them by default.  There's a couple of stages
to this:

1) Install the DES routines.  

   (easy) If you're still running -RELEASE, then try looking on your CD
   for the des packages.  

   (harder) If you've moved up to -STABLE, then you'll need to cvsup the
   secure-all stuff and rebuild the world.  When you've done that, you
   need to repoint the /usr/lib/libcrypt* symlinks to point at
   libdescrypt* instead of libscrypt*.  That last step took a while to
   figure out.  :-)

2) You need to set the UNSECURE variable in /var/yp/Makefile.

Most of this stuff is documented in the various manpages for yp...

One final word of warning.  You'd be best off not distributing your root
password over nis.  In fact, Sun reccomends that when setting up a nis
server, you keep a separate copy of the passwd file, without system
users in it.  This will make sharing the pasword file easier across
multiple vendors.  You may want to look at the Sun Answerbooks for some
more tips and ideas:  http://docs.sun.com/

-- 
Dom Mitchell -- Palmer  Harvey McLane -- Unix Systems Administrator

  Always think very hard before messing with TCP.  And then don't. -- MC
-- 
**
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they   
are addressed. If you have received this email in error please notify 
the system manager.

This footnote also confirms that this email message has been swept by 
MIMEsweeper for the presence of computer viruses.
**


To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-hackers in the body of the message