Re: 7.2 Release kills my XP Dual Boot

2009-05-28 Thread Graham Bentley

Is there any resolution to this? I had the same problem upgrading from
7.0 - 7.2. I've been running FreeBSD dual-boot for over 10 years w/o
this problem in the past.

I re-ran my fdisk script from an old 6.x boot disk  recovered the XP
partitions, but can't boot 7.2. Re-installing 7.2 kills XP.

My system disk has 3 partitions: ad0s2 is first (XP recovery). Next is
ad0s1 (XP) followed by FreeBSD.

Thanks for any input.


Kent,

I tried for two days every recovery tool I could lay my hands
on both open source and proprietary I still could not recover
my mangled - well, whatever  bootsec / mbr / partable

In could even do an XP repair, fixmbr, fixboot and almost
every disc checker said there was no issues with the sata disc.

I have P1[XP-NTFS], EXT1[NTFS], P2[3BSD]

I ended up doing a re-install of everything. I then took
an image of my boot sector / mbr and partables and
held on to my plumbs whilst trying to install 7.2 a second
time (I dont like to be defeated!)

This time, no probs although I have noticed BTX labled
the EXT1 as ? and not DOS as it used to.

Currently I cant get £ signs at the console or X but thats
another 7.2 story. I only have limited time and may well go
back to Slitaz !!!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: UK Keyboard in 7.2 console and xorg

2009-05-28 Thread Graham Bentley

The xorg-server port has an option not to use hal. But it is enabled by
default.


Thanks for the info however that doesnt help me on uk currency key
on the console which still eludes me. I suspect in my case, if I could 
figure

out how to fix the console keyboard issue it would actually work in x
even with hald (which btw is working fine with rest of keys and mouse!)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Problems with IPv6 CARP Interface in PF

2009-05-28 Thread Matthew Seaman

Michael K. Smith - Adhost wrote:

Hello:

I'm having reachability problems with a CARP interface set up on two 7.1
boxes with an uplink to Cisco routers.  However, the inside CARP address
on the same set of PF boxes are reachable with no trouble.  Here's the
config.

Cisco   Cisco
   HSRP Gateway
|
   CARP Interface 1
PF Box   PF Box
   CARP Interface 2
|
  Server

When I try to ping CARP Interface 1 above from the Internet, I get no
response.  When I ping the CARP Interface 2, which has a route set from
the Cisco's to CARP Interface 1, it works.  Here's what I see in my
logs.

00:38:45.763975 IP6 fe80::203:6cff:fef9:2c00  ff02::1:ff00:7: ICMP6,
neighbor solicitation, who has 2001:4970:::7, length 32

... with no response.

Here is the ifconfig from one box.

carp0: flags=49UP,LOOPBACK,RUNNING metric 0 mtu 1500
inet6 2001:4970:::6 prefixlen 64
inet6 2001:4970:::7 prefixlen 64
carp: MASTER vhid 1 advbase 1 advskew 100
carp1: flags=49UP,LOOPBACK,RUNNING metric 0 mtu 1500
inet6 2001:4970::::1 prefixlen 64
carp: MASTER vhid 2 advbase 1 advskew 100

and the other shows appropriately as BACKUP.  There is no change if I
run with just one PF box.

Any help would be greatly appreciated.


* Do you have PF rulesets written to take account of the CARP interfaces
 and IPs correctly?  You can say things like:

   pass in on carp0 proto icmp6 from any to { carp0 carp1 } keep state 


 You may not need carp specific rules if the carp IP is from the same
 network as the IPs on the front interfaces of those PF boxes, and your
 rules are written to filter traffic crossing those interfaces by network
 (say) rather than by specific IP numbers.  

 A good debugging trick is to make sure that all pf rules that block 
 packets have a log clause, and then tcpdump pflog0 while doing your

 connectivity tests.  Immediately tells you if its PF blocking things
 rather than some other problem.

* I'm sure this is far too obvious, but in case you've tripped over this
 one accidentally:

   pass ... proto inet 

 only allows IPv4.  Either drop the proto clause altogether, or add explicit
 'proto inet6' rules.

* Have you tried tcpdump on the various physical and carp interfaces on those
 machines while trying to ping?  Probably the most interesting data to be 
gleaned
 from that is if there are ping responses being sent, and what IP they originate
 from.

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: Canon printer and TurboPrint

2009-05-28 Thread Polytropon
On Wed, 27 May 2009 17:09:05 +0100, Chris Rees utis...@googlemail.com wrote:
 Seriously, why give up on something because it takes an hour or two
 out of your day, and carry on the ~seven minute
 reboot-to-'Windows'-cycle out of laziness? Sounds counter-productive
 and defeatist.

The idea is that doing such complicated things in FreeBSD (and
in UNIX in general) teaches things, gives experiences and helps
solving oter problems on one's own later.

I've often seen similar situations where my solution would be
called too complex, but after that, I *learned* things, and this
gave me the ability do do things better (faster!) now. So I
may say: It's not always the final result that counts, but the
way leading to it.

Of course, to the average user, learning doesn't count. He
is not interested in (1) how things work, (b) how things are
done or (3) how things might be done better. He just wants
the final result, and he wants it now (or yesterday). :-)

I my own printer journey, I had help from the de- list.
With the upgrade to 7, apsfilter stopped working as intended.
Functions A, B working; C D not working anymore. The help
from the list made me have C and D, but A and B stopped
then. Finally, I could combine apsfilter settings and
several options for gs. Voila! A, B, C and D working again
(as in FreeBSD 5).

Would I have ever been able to solve such problems without
having the need to learn something before? Definitely not.

I'm happy I can read such long instructions about how to
get stupid non-printers working with a standard compliant
operating system, and I always save such instructions
locally, because one day, I can solve a problem that the
printer manufacturer can't (because he originated it by
his lack of standard compliance).



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: rsync approach

2009-05-28 Thread Wojciech Puchar

we have 2 static ip addresses with a machine running 7.2 connected to
each.

one is the primary server, while the other does only dns and receives
bkp dumps from the first.

we want to set things up so the 2nd can be brought on line at a moment's
notice.

therefore, we are thinking of rsync to duplicate 1st  2nd (with the
exception of rc.conf and a few other files of course because we don't
want them to be absolutely identical).

we plan to allow root login and have disabled all password access so
that rsync can preserve permissions.


i don't catch why disabling password access will allow rsync to preserve 
permission. It will preserve just when you give proper option



is this a good way to accomplish the bkp job?


yes it is.

There is another way too - having both adventage and disadventage.

1) make an option in FreeBSD loader menu to run ramdisk-freebsd (ramdisk 
from file). Put on that cutdown ramdisk system only startup of ggated with 
a disk


2) on main machine run ggatec and gmirror. you will get network mirrored 
hard disk. make this procedure conditional so it runs only on first 
machine (for eg check MAC address of your network interface)



in case of machine 1 fail, you just run second with normal, instead of 
ramdisk mode.


It has adventage of full realtime replication, but it's disadventage in 
the same time.


For example if you run rsync once per 2 hours, and you by accident delete 
a lots of things, you can recover.


with gmirror way it is instantly replicated so you can't recover
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Is this a gmirror bug?

2009-05-28 Thread Wojciech Puchar

that do zcat [partition image.gz] /dev/partition


We have a two step process. First we run a script that creates the
master image as a tgz. The image is created at an alternate root using
the -C option of pkg_add and the DESTDIR option of the various OS
install scripts. We only run this script when we need to make a change
to the master image.

We use this image to create bootable USB sticks, and when a system is
booted from one of these sticks there is automatic startup logic that
clones the disk onto the target hard drive of the box (configuring the


good but seems quite overcomplex expecially this pkg_add.

why just not to compress whole filesystem(s) by tar+gzip?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Flamewar ( was: Sponsoring FreeBSD)

2009-05-28 Thread Wojciech Puchar

anyway, i reread the original sponsoring offer and i think i understand
well. so - if FreeBSD team like to accept donations that way, my 100$ is
still waiting :)


I am afraid you still do not understand it. This sponsorship offer was NOT
directed to you.

did you really read my sentence.

I TOO OFFER 100$ for getting my advert on FreeBSD webpage, as he did. If 
FreeBSD core team accept this, 200$ is ready.


But i think you simply don't really want to read what i write, you better 
like to repeat the same sentences over and over again.


hope it will change
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ANNOUNCE: OpenOffice.org 3.1 (i386) packages now available

2009-05-28 Thread Paul B. Mahol
On 5/23/09, Manolis Kiagias sonic200...@gmail.com wrote:
 Hey all,

 This is a continuation of an effort to offer pre-built packages  for
 OpenOffice, that started with this post:

 http://lists.freebsd.org/pipermail/freebsd-questions/2009-April/195997.html

 With the release of OpenOffice 3.1, the new package and all dependencies
 were rebuilt, and are hosted on the same location as before:

 http://freebsd.dev-urandom.com/packages/openoffice/

 The main package to download is:

 http://freebsd.dev-urandom.com/packages/openoffice/openoffice.org-3.1.0.tbz

 Everyone who installed the 3.01 packages should be able to easily
 upgrade to this version.  It would be best to have an otherwise upgraded
 system before installing this package.

 Users who do not have any version of openoffice already installed, are
 advised to read the instructions in the post linked above.
 Please note these packages were built for 7.2-RELEASE, i386.
 You are of course welcome to send any comments, problems etc, either by
 mail or by replying to this thread.

 Thanks!
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Are extensions working for you?

-- 
Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Polytropon
On Wed, 27 May 2009 13:37:06 -0400, Jerry ges...@yahoo.com wrote:
 2) The technology exists, as demonstrated by Microsoft, to easily
 configure a printer.

It's because MICROS~1 are part of the system that builds the
concepts for the printers, and the printers itself. Because
of their monopoly positzion, they can say: If you build a
printer, make drivers for our 'Windows', and it will sell
well. If you make drivers for FreeBSD, which doesn't exist,
then it won't sell.

By the way, having to use CDs or DVDs to install printer
drivers anlong with loads of crapware (that is usually
included) doesn't make the situation better. I prefer the
system that FreeBSD uses: You install ONE (!) printer
system that supports all (standard compliant) printers,
and you don't have to do any more work. On a system with
no printer, you install nothing. On a system where the
printer is changed, you don't need to deinstall driver A
and install driver B, you simply alter the printer system's
setting.



 Having to perform Herculean tasks, load extra
 software; i.e. cups for instance, etc is not productive.

CUPS isn't extra software in my opinions. Printer drivers are.
Because they are required to make a thing working that does
not conform to standards that would have made it work out
of the box.



 4) My time is valuable. I don't feel like wasting it trying to get a
 printer to work correctly when it is easier to do on a Win32 box. It
 is not time well spent.

Time spent learning is always worth spending. Remember that we
who have learned to get things working are always called when
troubles arise, and we are paid to do so. :-)




-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Formatted text conversion

2009-05-28 Thread Polytropon
On Wed, 27 May 2009 08:41:56 -0700, Kelly Jones kelly.terry.jo...@gmail.com 
wrote:
 I have e-books in several formats (DOC, LIT, PDF, RTF, HTML, TXT,
 etc). Is there a Unix command-line tool that converts between these
 formats?

As it has been mentioned before, there's not the one tool for
everything, but you can easily use OpenOffice to process most
of them, and finally turn them into plain text, either by using
OO's export function (save as text), or ^A ^C, change to your
favourite text editor, ^V ^S.

There are of course command line tools that let you do this
without interaction, which is great when you want to process
a bunch of files.

 If not, is there at least a tool that converts these formats to TXT?

To ASCII text:  DOC: catdoc
RTF: unrtf, rtfx
PDF: pdftotext
HTML: lynx -dump



 My goal is to read these books on my Kindle, even if it means losing
 some formatting/bells/whistles.

If the Kindle does support PDF (I don't know if it does), wouldn't
that be a better alternative, because it lets you keep the format
of the document?



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: A FreeBSD program that rotates text

2009-05-28 Thread Polytropon
On Wed, 27 May 2009 11:43:21 -0700, Charlie Kester corky1...@comcast.net 
wrote:
 Why not use Postscript (ghostscript) for this?  

Yes, why not? :-) Allthough I did a lecture at university about
Postscript, this didn't come into my mind. I'm aware now that 
PS can be used to draw the circles as well, and do the clipping
of the drawing inside the inner circle. Maybe it can even to
the outlines of the letters, this seems to depend on the text
font used.

Thank you, I will keep this in mind, as well as the solution
based on Inkscape.



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-28 Thread Polytropon
On Wed, 27 May 2009 22:43:51 +0200, herbert langhans herbert.raim...@gmx.net 
wrote:
 Hi Daemons,
 a short question: 
 
 I can delete the .tar.gz files from /usr/ports/distfiles - is this correct?

These are used for compiling purposes by the ports system.
They are fetched if needed. If you delete them, and want to
compile a port later, the needed version will be fetched
again.

So: Yes, you can delete them.



 Not that some port tree management goes crazy (dependencies or such)..

As it has been mentioned, it depends on the tool you use
for this. the make update method employing cvsup / csup
doesn't seem to be interested in distfiles/, maybe
portupgrade or portmaster is. (I'm using portupgrade
tools, and I've not found myself in a difficult situation.)




-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: RTL8111-GR driver for FreeBSD6.4

2009-05-28 Thread Wojciech Puchar

says it support RTL8111

but i have FreeBSD 7.1


I have a 6.4 machine (about to be retired). On that machine, man 4 re says it 
supports the RTL8111S, but does not mention the RTL8111GR. My guess is that


in 7.1 it too says only about S, i assumed that S and GR are only 
different chip revisions/different functionality, maybe one have builtin 
PHY other external etc. etc. but it's software compatible.


That's usual naming scheme of chips, but of course there may be 
exceptions.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Wojciech Puchar

could only do this, or stop being moderator.

If rules would allow any discussion if moderator should or should not delete
post, then rules are wrong and must be fixed.

moderator can not have any power to resolve personal things through it.


I read what you posted carefully. I'm asking you to play pretend . .
. if you were the moderator of the list you suggest, do you think that
the response you gave to the OP, as a non-developer, is acceptable.
That is, do you think that that those who have no responsibility as
far as what is done with $$ donated to the fBSD cause (i.e., you)
should respond to to those who wish to donate?
For a minute there, I was hoping that it was a language issue (BTW - I
think your English is quite good),

  ^^^

not so sure, because now i'm not sure if i understand these above well.

If i would be a moderator (or anyone else - there will be just rules to 
conform) i would for sure delete sponsoring offer no matter if it offered 
100 or 1E6$


But i will reply to the sender that contacts for FreeBSD core team are on 
the webpage, and that i forwarded his/her mail to them.


it's quite clear i think
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Wojciech Puchar


FreeBSD developers know enough to avoid speaking 'on behalf' of anyone,
unless they are explicitly asked to do so and it makes sense.  We usually
just point the users gently towards an appropriate resource: a webpage, a
mailing list, or a team of more knowledgeable folks, etc.

Boris did the right thing IMO by pointing at the donations pages.  Two of


Exactly. but it for sure wasn't what original sponsoring offer wanted. 
He wanted banner/logo advert on mine webpage.



a) We generally accept all donations, regardless of how small they are.
  Even donations of a single RAM chip for nearly obsolete platforms are
  welcome and we try to find someone who will make good use of it.


But you don't put advert for this. As you said - there is separate webpage 
for listing sponsors, and that's excellent.



b) The donations team acts as a gateway for incoming stuff, and they have
  enough experience to discern genuine offers for a donation from spammy
  please link to my personal web site and I will make you rich scamming
  schemes.


So what's wrong with my answer for such spammy offer?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-28 Thread Jerry
On Thu, 28 May 2009 03:22:07 +0100
RW rwmailli...@googlemail.com wrote:

On Wed, 27 May 2009 21:34:58 -0400
Robert Huff roberth...@rcn.com wrote:

[snip]

That's what I used to think until I  deleted some java distfiles, and
had to go though the rigmarole  of getting all the various files
manually. There's also the possibility that a distfile gets rerolled
and local copy is the only one that matches the port checksums. Disk
space is cheap, the extra files don't add up to much in practice. The
real advantage of cleaning comes from not have ten copies of kdebase
and the like.

That is why I keep a backup of all the 'java' src files in ~/java just
so I can replace them in /usr/ports/distfiles if required. Other than
for the 'java' files. I completely delete all files in the 'distfiles'
directory. They server no useful purpose and can always be downloaded
again if required.

-- 
Jerry
ges...@yahoo.com

Any clod can have the facts, but having opinions is an art.

Charles McCabe


signature.asc
Description: PGP signature


Re: Canon printer and TurboPrint

2009-05-28 Thread Wojciech Puchar

2) The technology exists, as demonstrated by Microsoft, to easily
configure a printer.


It's because MICROS~1 are part of the system that builds the
concepts for the printers, and the printers itself. Because
of their monopoly positzion, they can say: If you build a
printer, make drivers for our 'Windows', and it will sell
well. If you make drivers for FreeBSD, which doesn't exist,
then it won't sell.


indeed. actually if printers would simply support standards like PCL or 
postscript and standard USB protocol it would not be need for ANY drivers 
both for windoze and FreeBSD.


The problem is that most buyers are more happy when they get added value 
for free like tons of CD's


Manufacturers do what market required, no matter how dumb it is. Those who 
didn't already failed.


But again it wouldn't be that hard to make printer conforming to standard 
AND produce (click-generate) few gigs of add on software for windows.


As windows user may get scared hearing the word unix, even in context 
like supports both windows and unix, they could sell the same printer as 
2 products - printer for windows (bundled with this few gigs of addons) 
and printer for unix, bundled with 1 page instruction with an example how 
to make ghostscript filter and how to configure lpd.



included) doesn't make the situation better. I prefer the
system that FreeBSD uses: You install ONE (!) printer


actually i never used things like cups, turboprint, whatever.

i just run lpr to print postscript file, or print directly from programs 
through lpr



system that supports all (standard compliant) printers,
and you don't have to do any more work. On a system with


There are lot of compliant second-hand printers for 100$.

For example i have HP LaserJet 4, which printed 85000 pages when i bought 
it, and i printed over 15000.


And it works flawlessy, so i don't have new printer every year.


Having to perform Herculean tasks, load extra
software; i.e. cups for instance, etc is not productive.


CUPS isn't extra software in my opinions. Printer drivers are.


exactly. it's not needed for printing.

In unix many many years ago printing subsystem was already written.
it's called lpd, and it has support for filters that can be considered 
drivers.



4) My time is valuable. I don't feel like wasting it trying to get a
printer to work correctly when it is easier to do on a Win32 box. It
is not time well spent.


assuming someone has windows box handy. one more computer just to print 
doesn't make much sense :)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Giorgos Keramidas
On Thu, 28 May 2009 11:12:16 +0200 (CEST), Wojciech Puchar 
woj...@wojtek.tensor.gdynia.pl wrote:
 FreeBSD developers know enough to avoid speaking 'on behalf' of
 anyone, unless they are explicitly asked to do so and it makes sense.
 We usually just point the users gently towards an appropriate
 resource: a webpage, a mailing list, or a team of more knowledgeable
 folks, etc.

 Boris did the right thing IMO by pointing at the donations pages.
 Two of

 Exactly. but it for sure wasn't what original sponsoring offer
 wanted. He wanted banner/logo advert on mine webpage.

 a) We generally accept all donations, regardless of how small they are.
Even donations of a single RAM chip for nearly obsolete platforms are
welcome and we try to find someone who will make good use of it.

 But you don't put advert for this. As you said - there is separate
 webpage for listing sponsors, and that's excellent.

 b) The donations team acts as a gateway for incoming stuff, and they
have enough experience to discern genuine offers for a donation
from spammy please link to my personal web site and I will make
you rich scamming schemes.

 So what's wrong with my answer for such spammy offer?

Dunno, I saw too many messages in the thread to remember if there *was*
anything wrong.  I'm not saying that there was something wrong with what
you wrote.  I just liked what Boris (bsam) replied to the OP's message.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Remotely edit user disk quota

2009-05-28 Thread Olivier Nicole
Hi,

I am writing a Perl script to run on our web server. This script will
be used to create user accounts.

I can do almost every thing on the web server:

- create the home directory
- add a user in LDAP
- create the MySQL database for that user

The only thing I cannot do is to set the disk quota: the home
directory is NFS mounted from another machine acting as file server,
the quota must be edited on the file server.

How could I nicely and securely connect from the script on the web
server to the file server, in order to edit the quota? It should be
nice and secure and without password.

TIA

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

- create the MySQL database for that user

The only thing I cannot do is to set the disk quota: the home
directory is NFS mounted from another machine acting as file server,
the quota must be edited on the file server.

How could I nicely and securely connect from the script on the web
server to the file server, in order to edit the quota? It should be


use rsh and .rhosts :)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Wojciech Puchar


Dunno, I saw too many messages in the thread to remember if there *was*
anything wrong.  I'm not saying that there was something wrong with what


so look back, as there wasn't.

I think you just followed trend to criticize my just because, while you 
didn't start it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Giorgos Keramidas
On Thu, 28 May 2009 12:36:10 +0200 (CEST), Wojciech Puchar 
woj...@wojtek.tensor.gdynia.pl wrote:
 Dunno, I saw too many messages in the thread to remember if there
 *was* anything wrong.  I'm not saying that there was something wrong
 with what

 so look back, as there wasn't.

 I think you just followed trend to criticize my just because, while
 you didn't start it.

Not really.  I tried to phrase what I wrote very carefully, to only
point out what I liked.  I don't follow trends, but I will reserve my
right to point out both what I like and what I don't :D

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Olivier Nicole
  How could I nicely and securely connect from the script on the web
  server to the file server, in order to edit the quota? It should be
 use rsh and .rhosts :)

I do that already, not really what I call secure ;) As I put up a new
machine, I'd prefer something else.

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

use rsh and .rhosts :)


I do that already, not really what I call secure ;)


Could you please explain why it is not secure in your case?

I don't know exactly the environment in your case so i can't answer for 
sure, but most probably it's perfectly secure.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Chris Rees
2009/5/28 Olivier Nicole o...@cs.ait.ac.th:
  How could I nicely and securely connect from the script on the web
  server to the file server, in order to edit the quota? It should be
 use rsh and .rhosts :)

 I do that already, not really what I call secure ;) As I put up a new
 machine, I'd prefer something else.

 Olivier

You could use ssh and ssh keys. That's what I use in my scripts.

rsh and ssh are so similar in use there's really no point in using rsh
at all any more. The security gained by ssh is so great that any (very
small) overhead is well worth it.

Chris


-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Olivier Nicole
  use rsh and .rhosts :)
 
  I do that already, not really what I call secure ;)
 
 Could you please explain why it is not secure in your case?
 
 I don't know exactly the environment in your case so i can't answer for 
 sure, but most probably it's perfectly secure.

Because rsh/rlogin etc. is unsecure in any case. I don't remember the
details, I think it has to do with the way it checks (or do not check)
that the hosts are the one they pretend they are.


Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD in a cloud

2009-05-28 Thread Iv Ray

Does anyone know a place to host FreeBSD in a cloud?

Rackspace offer quite interesting cloud servers via www.mosso.com -  
but they claim they run only Linux.


We have had FreeBSD with Rackspace for over 5 years (though they  
refuse to officially support it) and I cannot understand if they  
cannot or do not want to run it in the cloud.


Iv
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ANNOUNCE: OpenOffice.org 3.1 (i386) packages now available

2009-05-28 Thread Paul B. Mahol
On 5/28/09, Paul B. Mahol one...@gmail.com wrote:
 On 5/23/09, Manolis Kiagias sonic200...@gmail.com wrote:
 Hey all,

 This is a continuation of an effort to offer pre-built packages  for
 OpenOffice, that started with this post:

 http://lists.freebsd.org/pipermail/freebsd-questions/2009-April/195997.html

 With the release of OpenOffice 3.1, the new package and all dependencies
 were rebuilt, and are hosted on the same location as before:

 http://freebsd.dev-urandom.com/packages/openoffice/

 The main package to download is:

 http://freebsd.dev-urandom.com/packages/openoffice/openoffice.org-3.1.0.tbz

 Everyone who installed the 3.01 packages should be able to easily
 upgrade to this version.  It would be best to have an otherwise upgraded
 system before installing this package.

 Users who do not have any version of openoffice already installed, are
 advised to read the instructions in the post linked above.
 Please note these packages were built for 7.2-RELEASE, i386.
 You are of course welcome to send any comments, problems etc, either by
 mail or by replying to this thread.

 Thanks!
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org


 Are extensions working for you?

After little exploration this is already known problem: ports/129308

-- 
Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

rsh and ssh are so similar in use there's really no point in using rsh
at all any more.


there is a point. Just try to think why instead of simply repeating a 
phrase ssh is secure, rsh is not, don't use it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Chris Rees
2009/5/28 Wojciech Puchar woj...@wojtek.tensor.gdynia.pl:
 rsh and ssh are so similar in use there's really no point in using rsh
 at all any more.

 there is a point. Just try to think why instead of simply repeating a phrase
 ssh is secure, rsh is not, don't use it.


rlogin has several serious security problems:

* All information, including passwords, is transmitted unencrypted
(making it vulnerable to interception).
* The .rlogin (or .rhosts) file is easy to misuse (potentially
allowing anyone to login without a password) - for this reason many
corporate system administrators prohibit .rlogin files and actively
search their networks for offenders.
* The protocol partly relies on the remote party's rlogin client
providing information honestly (including source port and source host
name). A corrupt client is thus able to forge this and gain access, as
the rlogin protocol has no means of authenticating other machines'
identities, or ensuring that the rlogin client on a trusted machine is
the real rlogin client.
* The common practice of mounting users' home directories via NFS
exposes rlogin to attack by means of fake .rhosts files - this means
that any of NFS's security faults automatically plague rlogin.

Due to these serious problems rlogin was rarely used across untrusted
networks (like the public internet) and even in closed deployments it
has fallen into relative disuse (with many Unix and Linux
distributions no longer including it by default). Many networks which
formerly relied on rlogin and telnet have replaced it with SSH and its
rlogin-equivalent slogin.

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Flamewar ( was: Sponsoring FreeBSD)

2009-05-28 Thread Chris Rees
2009/5/28 Wojciech Puchar woj...@wojtek.tensor.gdynia.pl:
 anyway, i reread the original sponsoring offer and i think i understand
 well. so - if FreeBSD team like to accept donations that way, my 100$ is
 still waiting :)

 I am afraid you still do not understand it. This sponsorship offer was NOT
 directed to you.

 did you really read my sentence.

 I TOO OFFER 100$ for getting my advert on FreeBSD webpage, as he did. If
 FreeBSD core team accept this, 200$ is ready.

 But i think you simply don't really want to read what i write, you better
 like to repeat the same sentences over and over again.

 hope it will change

Actually he said:

QUOTE 
href=http://www.opensubscriber.com/message/freebsd-questions@freebsd.org/12268152.html
What we ask for in return for our sponsorships is a short mentioning
on the site somewhere with a link to our website.
/QUOTE


I took that to mean on the Sponsors' page, not the main page, and even
if it does, it is _not your place_ to tell sponsors that their
donations aren't 'good' enough.

Now please read this question and answer it:

Why did you reply to the message?

Chris



-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

sure, but most probably it's perfectly secure.


Because rsh/rlogin etc. is unsecure in any case. I don't remember the


very bad you don't remember the details.

Let i give you an example.

I throw 1000$ on my table in my flat.

Is this money insecure?

The answer is - maybe, it's just as secure as my doors and windows cause 
you have to enter my flat first to get it.


Other case - i put this 1000$ into hardened steel coffer.

Is it secure?

The answer is - The coffer provides EXTRA security over just throwing it 
on table.


The question - do i need an extra cost of coffer? the answer depends again 
of how good my 
doors and windows are!



Same with rsh. If your servers are connected by LAN and there are only 
your servers there, there are not possible to:


1) sniff your traffic as potential sniffer isn't in LAN
2) cheat from outside your inside's IP.


So you simply don't need a coffer. As coffer is an extra cost, ssh is an 
extra cost.


Actually great cost of unneeded encryption and RSA/DSA negotiation on 
startup.




The other case: i have secure tunnels between some of my servers and my 
home computer.


I do use rsh/rlogin for everything as the communication is already 
secured!



The difference between human and monkeys is that human can think himself 
instead of just learning and blindly repeating.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

Due to these serious problems rlogin was rarely used across untrusted networks


Good you finally pointed out the most important thing

rlogin/rsh is insecure across untrusted network

This is QUITE a difference between this and rsh is insecure. period

rsh is as secure as the communication channel. If it can be considered 
secure - DO USE rsh, because it's fastest as it doesn't have any 
encryption overhead.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Chris Rees
2009/5/27 Jerry ges...@yahoo.com:
 On Wed, 27 May 2009 17:09:05 +0100
 Chris Rees utis...@googlemail.com wrote:

Seriously, why give up on something because it takes an hour or two
out of your day, and carry on the ~seven minute
reboot-to-'Windows'-cycle out of laziness? Sounds counter-productive
and defeatist.

 1) You are assuming that the same PC contains both Windows  FBSD.

So you suggest leaving one computer running 'Windows' on solely as a
print server? Is that an efficient use of power, space and hardware?

Chris

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Flamewar ( was: Sponsoring FreeBSD)

2009-05-28 Thread Wojciech Puchar


Actually he said:

QUOTE 
href=http://www.opensubscriber.com/message/freebsd-questions@freebsd.org/12268152.html
What we ask for in return for our sponsorships is a short mentioning
on the site somewhere with a link to our website.


so if you believe it means that he will be happy with being on list, i can 
get him back if you like ;)



I took that to mean on the Sponsors' page, not the main page, and even
if it does, it is _not your place_ to tell sponsors that their


it's UNMODERATED mailing list, so i can share my opinion.

And you are really the last person i care about when presenting my 
opinion.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Chris Rees
2009/5/28 Wojciech Puchar woj...@wojtek.tensor.gdynia.pl:
 Due to these serious problems rlogin was rarely used across untrusted
 networks

 Good you finally pointed out the most important thing

 rlogin/rsh is insecure across untrusted network

 This is QUITE a difference between this and rsh is insecure. period

 rsh is as secure as the communication channel. If it can be considered
 secure - DO USE rsh, because it's fastest as it doesn't have any encryption
 overhead.




But the encryption overhead is almost nothing.

The best security comes in layers.

Also, I think it's a bad idea to leave money lying round like that.
That's why we have banks. More layers.

Chris


-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

Also, I think it's a bad idea to leave money lying round like that.
That's why we have banks. More layers.


like most people today you like overcomplexity, layers etc.

But there are still people that prefer simplicity. You should have some 
respect to them.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-28 Thread RW
On Thu, 28 May 2009 07:49:12 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Thursday 28 May 2009 03:13:46 RW wrote:
  On Wed, 27 May 2009 22:56:10 +0200
 
  Roland Smith rsm...@xs4all.nl wrote:
   Using e.g. 'portmaster --clean-distfiles-all' only removes those
   distfiles that do not belong to installed ports.
 
  I've not used it myself, but there is also a shell script called
  distviper in bsdadminscripts which supports both of distclean's
  modes without the ruby dependence.
 
 What ruby dependence in portmaster? He said portMASTER not
 portUPGRADE.

I wrote: supports both of distclean's modes without the ruby
dependence. 

Portmaster only supports one of the modes, distclean has a ruby
dependence.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Jon Radel

Wojciech Puchar wrote:



Also, I think it's a bad idea to leave money lying round like that.
That's why we have banks. More layers.


like most people today you like overcomplexity, layers etc.

But there are still people that prefer simplicity. You should have some 
respect to them.


Some.  But zero sympathy the day it all blows up in their faces due to 
just one little configuration error or, oops, exploit they didn't know 
about.


In any case, I believe we've had the Wojciech can do all sorts of 
advanced things as he doesn't have to protect himself from any junior 
admins on shift 3 or comply with any best practices that he thinks are 
silly because it's all about him on his network conversation on this 
list before.  A rehash would be tedious.


--

--Jon Radel
j...@radel.com


smime.p7s
Description: S/MIME Cryptographic Signature


Re: removing distfiles?

2009-05-28 Thread Mel Flynn
On Thursday 28 May 2009 13:24:30 RW wrote:
 On Thu, 28 May 2009 07:49:12 +0200

 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
  On Thursday 28 May 2009 03:13:46 RW wrote:
   On Wed, 27 May 2009 22:56:10 +0200
  
   Roland Smith rsm...@xs4all.nl wrote:
Using e.g. 'portmaster --clean-distfiles-all' only removes those
distfiles that do not belong to installed ports.
  
   I've not used it myself, but there is also a shell script called
   distviper in bsdadminscripts which supports both of distclean's
   modes without the ruby dependence.
 
  What ruby dependence in portmaster? He said portMASTER not
  portUPGRADE.

 I wrote: supports both of distclean's modes without the ruby
 dependence.

 Portmaster only supports one of the modes, distclean has a ruby
 dependence.

I'm still not sure what ruby dependence you go on about. Could you point me to 
the line in portmaster that invokes ruby or a ruby script?
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-28 Thread RW
On Thu, 28 May 2009 12:24:30 +0100
RW rwmailli...@googlemail.com wrote:

 On Thu, 28 May 2009 07:49:12 +0200
 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
 
  On Thursday 28 May 2009 03:13:46 RW wrote:
   On Wed, 27 May 2009 22:56:10 +0200
  
   Roland Smith rsm...@xs4all.nl wrote:
Using e.g. 'portmaster --clean-distfiles-all' only removes those
distfiles that do not belong to installed ports.
  
   I've not used it myself, but there is also a shell script called
   distviper in bsdadminscripts which supports both of distclean's
   modes without the ruby dependence.
  
  What ruby dependence in portmaster? He said portMASTER not
  portUPGRADE.
 
 I wrote: supports both of distclean's modes without the ruby
 dependence. 
 
 Portmaster only supports one of the modes, distclean has a ruby
 dependence.


Sorry, that should have been portsclean not distclean.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

respect to them.


Some.  But zero sympathy the day it all blows up in their faces due to just 
one little configuration error or, oops, exploit they didn't know about.


what configuration error could you imagine. In my opinion there is bigger 
change to make a configuration error in more sophisticated config than in 
simple.


and higher chance for security bug in more complex program than in simple.

rshd is damn simple program compared to sshd.


My rule is - if you can do more simple, DO IT more simple.

If this make me very advanced administrator it's just a proof that it's 
easy to become advanced administrator, you just have not to repeat blindly

what's said everywhere.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ANNOUNCE: OpenOffice.org 3.1 (i386) packages now available

2009-05-28 Thread Manolis Kiagias
Paul B. Mahol wrote:

 Are extensions working for you?
 

 After little exploration this is already known problem: ports/129308

   


Haven't tried extensions (rarely use any) but thanks for letting us know.
Was this working on 3.01?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Flamewar ( was: Sponsoring FreeBSD)

2009-05-28 Thread Chris Rees
2009/5/28 Wojciech Puchar woj...@wojtek.tensor.gdynia.pl:

 Actually he said:

 QUOTE
 href=http://www.opensubscriber.com/message/freebsd-questions@freebsd.org/12268152.html
 What we ask for in return for our sponsorships is a short mentioning
 on the site somewhere with a link to our website.

 so if you believe it means that he will be happy with being on list, i can
 get him back if you like ;)

 I took that to mean on the Sponsors' page, not the main page, and even
 if it does, it is _not your place_ to tell sponsors that their

 it's UNMODERATED mailing list, so i can share my opinion.

 And you are really the last person i care about when presenting my opinion.


So are you going to answer my question?

Why did you answer his question?

Chris


-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Flamewar ( was: Sponsoring FreeBSD)

2009-05-28 Thread Wojciech Puchar

it's UNMODERATED mailing list, so i can share my opinion.

And you are really the last person i care about when presenting my opinion.



So are you going to answer my question?

Why did you answer his question?


already did.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Jerry
On Thu, 28 May 2009 12:13:42 +0100
Chris Rees utis...@googlemail.com wrote:

So you suggest leaving one computer running 'Windows' on solely as a
print server? Is that an efficient use of power, space and hardware?

1) You are assuming it is only one PC. Actually, there are several.

2) Considering FLASH support in FBSD sucks, I find that I regularly need
the use of a Win PC. There are also numerous applications that I just
do not have available on an X-desktop.

While FBSD has many fine uses, primarily in the server department, it
is solely lacking as a full service desktop replacement for me. I
realize that Xorg is a major cause of that problem, but that is not my
concern.

By the way, using a headless Win PC as a print server takes up virtually
no space, its power consumption is inconsequential, and I am not even
sure what other hardware, perhaps a UPS, you are referring to.
Considering that I can have any number of printers hooked up easily
and get higher print quality, I find it an extremely useful option. For
the record, I only have three printers hooked up at my residency at
present. Two of them being wireless. Attempting to get them working
under FBSD became a real exercise in pain. In Windows, it was a simple
two minute operation.

If I am at work, and they are willing to pay me to play with something,
that is one thing. However, I will be damned if I am going to waste my
time when a simpler and more efficient method is available.

In any case, Sulum ut suus or chacun a son gout if you prefer.

-- 
Jerry
ges...@yahoo.com

The chief enemy of creativity is good sense.

Picasso


signature.asc
Description: PGP signature


Re: Canon printer and TurboPrint

2009-05-28 Thread Wojciech Puchar

2) Considering FLASH support in FBSD sucks, I find that I regularly need


there are no flash support in FreeBSD as there are no support for internet 
explorer or Wojtek's super-ultra-super software (if that exist ;).

It's not FreeBSD job at all, but programmer job of that software.

It's an operating system that allow running ANY 
programs, with the only requirement to be in FreeBSD ELF format and using 
.so libraries and system calls that are in base system.


Taking into account how simple is to port any program from linux to 
FreeBSD, and that Adobe Flash already runs linux, it's simple that Adobe 
simply don't want to extends their userbase to FreeBSD for almost free.


So as they don't want me to use it, i don't use it.

If i would consider flash so important to have separate computer for this, 
and in the same time accept how Adobe treats me, i will just buy it.


But it have nothing to do with FreeBSD support.

Sorry for long post about it, but i DO HAVE to correct your wrong 
statement.



the use of a Win PC. There are also numerous applications that I just
do not have available on an X-desktop.


What you mean X desktop? You mean X Window System?


While FBSD has many fine uses, primarily in the server department, it
is solely lacking as a full service desktop replacement for me. I


As usual it depends on needs - for me it provides all i need for operating 
system. But it's really off-topic



By the way, using a headless Win PC as a print server takes up virtually
no space, its power consumption is inconsequential, and I am not even


anyway buing standard-compliant printer seems like simpler and cheaper 
solution for me.


Even if it would be slightly more expensive, i would prefer it, to keep 
things simple.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Need sed to do something which sounds simple

2009-05-28 Thread Manish Jain


Hi,

I need sed to do something which sounds simple, but I can't figure out 
the right command. All I need to do is insert a blank after a '}' at the 
end of a line if the next line begins immediately afterwards (i.e. with 
no blank line between).


//abc.cpp :
int myclass::fx(int * arg)
{
if(! (isValid()))
{
return -1;
}
return ptr-fx(arg);
}

//what-i-want.cpp :
int myclass::fx(int * arg)
{
if(! (isValid()))
{
return -1;
}

return ptr-fx(arg);
}

The commands I have tried are :

i)
sed -e 's/\(}$\)\n\(^[[:space:]]*[[:alpha:]]\+\)/\1\n\n\2/' \
abc.cpp  what-i-want.cpp

ii)
sed -e 's/\(}$\)\(^[[:space:]]*[[:alpha:]]\+\)/\1\n\2/' \
abc.cpp  what-i-want.cpp

but obviously neither works, which is why posting this message.

Can anybody please tell me what the correct command would be like ?


Thank you 
--
Regards
Manish Jain
invalid.poin...@gmail.com
+91-96500-10329

Laast year I kudn't spell Software Engineer. Now I are won.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


superpages?

2009-05-28 Thread Wojciech Puchar

maybe not new news but i just found this:

http://www.h-online.com/open/FreeBSD-7-2-released-now-with-Superpages--/news/113204

It says about pages 4KB and 4MB and that it's done 
automatically.


Two questions:

1) is it on all architectures including amd64? As amd64 supports 4KB, 2MB 
and 1GB pages it sounds inconsistent with the above.


2) how does this automatic selection work. By just having program with 
large continous data space (like squid proxy) will it put that data on 2MB 
pages.


if it's true i would be enough reason to upgrade to 7.2 on 2 computers.

thanks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Jerry
On Thu, 28 May 2009 14:42:31 +0200 (CEST)
Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote:

 2) Considering FLASH support in FBSD sucks, I find that I regularly
 need

there are no flash support in FreeBSD as there are no support for
internet explorer or Wojtek's super-ultra-super software (if that
exist ;). It's not FreeBSD job at all, but programmer job of that
software.

It's an operating system that allow running ANY 
programs, with the only requirement to be in FreeBSD ELF format and
using .so libraries and system calls that are in base system.

Taking into account how simple is to port any program from linux to 
FreeBSD, and that Adobe Flash already runs linux, it's simple that
Adobe simply don't want to extends their userbase to FreeBSD for
almost free.

So as they don't want me to use it, i don't use it.

If i would consider flash so important to have separate computer for
this, and in the same time accept how Adobe treats me, i will just buy
it.

But it have nothing to do with FreeBSD support.

Sorry for long post about it, but i DO HAVE to correct your wrong 
statement.

Actually, you are a troll. 

 the use of a Win PC. There are also numerous applications that I just
 do not have available on an X-desktop.

What you mean X desktop? You mean X Window System?

 While FBSD has many fine uses, primarily in the server department, it
 is solely lacking as a full service desktop replacement for me. I

As usual it depends on needs - for me it provides all i need for
operating system. But it's really off-topic

Now that is a truly stupid statement. The usefulness of any OS or
applications is directly proportionate to the end users intended
purpose.

 By the way, using a headless Win PC as a print server takes up
 virtually no space, its power consumption is inconsequential, and I
 am not even

anyway buing standard-compliant printer seems like simpler and cheaper 
solution for me.

Even if it would be slightly more expensive, i would prefer it, to
keep things simple.

First it is simpler and cheaper' then 'more expensive'. Nothing like a
firm commitment to ambiquity.

The bottom line is that using a Win PC box for a print server saves me
countless hours of frustration. I know that I can purchase virtually
any printer on the market today and have it up and running on the
Windows box in a few minutes. Can you say the same thing about a FBSD
box? Not even close. The idea behind any venture, be it personal or
business, is to find the cheapest and most efficient solution for a
given problem. I have found one that works just fine for me.


-- 
Jerry
ges...@yahoo.com

To envision how a 4-processor system running [SunOS] 4.1.x works, think
of four kids and one bathroom.

John DiMarco


signature.asc
Description: PGP signature


RE: Is this a gmirror bug?

2009-05-28 Thread Peter Steele
good but seems quite overcomplex expecially this pkg_add.

why just not to compress whole filesystem(s) by tar+gzip?

?

I think we must be talking about something different. In any event, what
we have works quite well and I'm not about to change the process at this
point...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Wojciech Puchar

this, and in the same time accept how Adobe treats me, i will just buy
it.

But it have nothing to do with FreeBSD support.

Sorry for long post about it, but i DO HAVE to correct your wrong
statement.


Actually, you are a troll.


thank you very much.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar



rsh is as secure as the communication channel. If it can be considered
secure - DO USE rsh, because it's fastest as it doesn't have any
encryption overhead.


Are you on a 386?

depends, between pentium I and core2 quad.

what's a difference?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Kirk Strauser
On Thursday 28 May 2009 08:53:23 am Wojciech Puchar wrote:

 depends, between pentium I and core2 quad.

 what's a difference?

Well, I can transfer 25MB/s between hosts on the LAN without my CPU ever 
breaking 10% CPU usage.  I'm of the opinion that most people don't need to 
optimize for CPU in such cases when the security payoffs are so great.
-- 
Kirk Strauser
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Kirk Strauser
On Thursday 28 May 2009 06:13:11 am Wojciech Puchar wrote:

 rsh is as secure as the communication channel. If it can be considered
 secure - DO USE rsh, because it's fastest as it doesn't have any
 encryption overhead.

Are you on a 386?
-- 
Kirk Strauser
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Flamewar ( was: Sponsoring FreeBSD)

2009-05-28 Thread Paul Schmehl
Would all the children fighting in this thread please go suck your binkies and 
leave the list alone.  This has gone on for far too long, has worn out any 
entertainment value it ever had and is clearly sucking up valuable bandwidth.


And yes, I'm well aware you'll feel compelled to respond, so all responses will 
go to /dev/null.


Grow up already.

--
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
***
Check the headers before clicking on Reply.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Failure to get past a PCI bridge

2009-05-28 Thread Josef Moellers

Hi,

I'm trying to install 7.2-RELEASE on a pretty new system (a Fujitsu 
RX300S5).
The first obstacle was the fact that while the system has an 
AT-Keyboard-Controller, it ist not used (keyboard and mouse are 
connected via USB) and I have found that I can get past that by specifying


set hint.atkbd.0.disabled=1
set hint.atkbdc.0.disabled=1

The install kernel then boots properly and reaches the Country Selection.
At that point, no keyboard input is accepted. An optical mouse is off, 
so I assume the keyboard to be off, too.


I have hooked up a serial connection to log the kernel's output (some 
1000+ lines):


set boot_serial=1
set boot_verbose=1
set boot_multicons=1
set console=comconsole vidconsole

The following lines make me wonder if the kernel fails to get past PCI 
bridges and this can't reach the UHCI controllers:


pcib0: ACPI Host-PCI bridge on acpi0
pcib0: could not get PCI interrupt routing table for \_SB_.CPU0 - 
AE_NOT_FOUND

:
pcib1: ACPI Host-PCI bridge on acpi0
pcib1: could not get PCI interrupt routing table for \_SB_.CPU1 - 
AE_NOT_FOUND

:
pcib2: ACPI Host-PCI bridge port 0xcf8-0xcff on acpi0
pcib2: couldn't find _ADR
pcib2: trying bus number 2
pci2: ACPI PCI bus on pcib2
pci2: domain=0, physical bus=2

I talked to the guy who does the BIOS for the machine and he says that 
it makes no sense for the kernel to try and find the _PRT for \_SB_.CPU0 
or \_SB_.CPU1!


Can anyone help? I haven't been using FreeBSD since 4.2 and haven't dug 
through deep kernel functions for quite some time.


Josef

--
These are my personal views and not those of Fujitsu Technology Solutions!
Josef Möllers (Pinguinpfleger bei FTS)
If failure had no penalty success would not be a prize (T.  Pratchett)
Company Details: http://de.ts.fujitsu.com/imprint.html

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Jerry McAllister
On Thu, May 28, 2009 at 11:12:16AM +0200, Wojciech Puchar wrote:

 
 FreeBSD developers know enough to avoid speaking 'on behalf' of anyone,
 unless they are explicitly asked to do so and it makes sense.  We usually
 just point the users gently towards an appropriate resource: a webpage, a
 mailing list, or a team of more knowledgeable folks, etc.
 
 Boris did the right thing IMO by pointing at the donations pages.  Two of
 
 Exactly. but it for sure wasn't what original sponsoring offer wanted. 
 He wanted banner/logo advert on mine webpage.
 
 a) We generally accept all donations, regardless of how small they are.
   Even donations of a single RAM chip for nearly obsolete platforms are
   welcome and we try to find someone who will make good use of it.
 
 But you don't put advert for this. As you said - there is separate webpage 
 for listing sponsors, and that's excellent.
 
 b) The donations team acts as a gateway for incoming stuff, and they have
   enough experience to discern genuine offers for a donation from spammy
   please link to my personal web site and I will make you rich scamming
   schemes.
 
 So what's wrong with my answer for such spammy offer?

I think what most persons are reacting to are two things.

  1: Many (note all) of your posts in response to questions carry what
 we might call a snippy, kind of put down attitude toward the
 questioner.   Even when you are quite correct in information and
 criticism, it is not received well if you also say something that
 appears to ridicule the OP and/or other posters.   This is where I
 wonder if it is a language issue.   Do you realize that you are
 jamming people in the manner of your posts?   Take care of people's
 sensitivities when you post.   When in doubt about how something
 might be received, then don't put in those words - just stick to the 
 plain and dull technical information.

  2: Although I have seen a number of valuable responses posted under your 
 address (eg presumably helpfully posted by you), sometimes you seem to 
 jump in to a question or thread when you really do not know the answer 
 or really do not have anything to add.  This makes the forum look 
 foolish and it also tends to discourage those who have the answer or 
 can make some meaningful contribution from getting in to the foray.  
 They do not have the time or inclination to get in to a flame war.
 We all have read a question wrong or misunderstood it and made a 
 midguided response.  I certainly have gritted my teeth when reading 
 some responses I made as they came back from the list server.  But 
 you seem to have a penchant for making posts that have a decided 
 appearance of being just for the sake of saying something rather 
 than making a positive contribution to the topic of the OP.

So, while it is true that you have the right and freedom to post on this
unmoderated list, the adult thing to do is to take responsibility for
yourself, to think about the significance and quality of your post before 
sending it off.   Ask the question, 'does it improve the situation or will 
it just annoy people and contribute nothing of technical value'.  Then make 
the choice in a manner that will improve the quality of the exchange.  
Remember that we all screw up, some of us more often than most, but none 
of us need our noses rubbed in it or to be jeered at.

Thank you,

jerry

 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Vincent Hoffman
On 28/5/09 15:04, Kirk Strauser wrote:
 On Thursday 28 May 2009 08:53:23 am Wojciech Puchar wrote:

   
 depends, between pentium I and core2 quad.

 what's a difference?
 

 Well, I can transfer 25MB/s between hosts on the LAN without my CPU ever 
 breaking 10% CPU usage.  I'm of the opinion that most people don't need to 
 optimize for CPU in such cases when the security payoffs are so great.
   
There is also the option of the HPN patches
(http://www.psc.edu/networking/projects/hpn-ssh/ included as options in
the openssh-portable port) which allows a none cypher so you have the
security of the encrypted key authentication but no encryption overhead
for transferring files. However the OP doesnt seem to want to transfer
files over it so the encryption overhead will be pretty minimal anyway.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: superpages?

2009-05-28 Thread cpghost
On Thu, May 28, 2009 at 02:50:16PM +0200, Wojciech Puchar wrote:
 maybe not new news but i just found this:
 
 http://www.h-online.com/open/FreeBSD-7-2-released-now-with-Superpages--/news/113204
 
 It says about pages 4KB and 4MB and that it's done 
 automatically.
 
 Two questions:
 
 1) is it on all architectures including amd64? As amd64 supports 4KB, 2MB 
 and 1GB pages it sounds inconsistent with the above.
 
 2) how does this automatic selection work. By just having program with 
 large continous data space (like squid proxy) will it put that data on 2MB 
 pages.

The following excerpt from:
  http://www.freebsd.org/releases/7.2R/relnotes-detailed.html
may be helpful:

  [amd64, i386] The FreeBSD virtual memory subsystem now supports
  fully transparent use of superpages for application memory;
  application memory pages are dynamically promoted to or demoted from
  superpages without any modification to application code. This change
  offers the benefit of large page sizes such as improved virtual
  memory efficiency and reduced TLB (translation lookaside buffer)
  misses without downsides like application changes and virtual memory
  inflexibility. This is disabled by default and can be enabled by
  setting a loader tunable vm.pmap.pg_ps_enabled to 1.

 if it's true i would be enough reason to upgrade to 7.2 on 2 computers.

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Need sed to do something which sounds simple

2009-05-28 Thread Paul Schmehl
--On Thursday, May 28, 2009 07:48:36 -0500 Manish Jain 
invalid.poin...@gmail.com wrote:





Hi,

I need sed to do something which sounds simple, but I can't figure out
the right command. All I need to do is insert a blank after a '}' at the
end of a line if the next line begins immediately afterwards (i.e. with
no blank line between).

//abc.cpp :
int myclass::fx(int * arg)
{
if(! (isValid()))
{
return -1;
}
return ptr-fx(arg);
}

//what-i-want.cpp :
int myclass::fx(int * arg)
{
if(! (isValid()))
{
return -1;
}

return ptr-fx(arg);
}

The commands I have tried are :

i)
sed -e 's/\(}$\)\n\(^[[:space:]]*[[:alpha:]]\+\)/\1\n\n\2/' \
abc.cpp  what-i-want.cpp

ii)
sed -e 's/\(}$\)\(^[[:space:]]*[[:alpha:]]\+\)/\1\n\2/' \
abc.cpp  what-i-want.cpp

but obviously neither works, which is why posting this message.

Can anybody please tell me what the correct command would be like ?



Seems like this would work to add a space only to lines where the next line 
only has a new line :


sed  '  /\}$/ { N /}$\n\n/ { s/\}$\n/\} $\n/} } ' file

If the possibility exists that the new line might have spaces as well, you 
could do this:


sed  '  /\}$/ { N /}$\n\n/ { s/\}$\n[ ]?/\} $\n/} } '

Note: I haven't tested this, so it may require some modification.  Read this 
page on dealing with multiple lines in sed to gain further understanding - 
http://www.grymoire.com/Unix/Sed.html


--
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
***
Check the headers before clicking on Reply.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 12:09:57 +0200 (CEST), Wojciech Puchar 
woj...@wojtek.tensor.gdynia.pl wrote:
 The problem is that most buyers are more happy when they get added value 
 for free like tons of CD's

Even if they never use it.



 Manufacturers do what market required, no matter how dumb it is. Those who 
 didn't already failed.

The worst solution always prevails and People want crap,
they get crap seem to have established as laws of the market.



 As windows user may get scared hearing the word unix, [...]

No no, UNIX doesn't exist, and it's outdated anyway, just like
mainframes. :-)


 actually i never used things like cups, turboprint, whatever.

Me neither, just apsfilter.



 i just run lpr to print postscript file, or print directly from programs 
 through lpr

I'm happy to keep on doing so now, too. :-)



 There are lot of compliant second-hand printers for 100$.

I got two HP Laserjet 4000 duplex printers some years ago,
for 100 Euro (both together), including so much toner that
they're still working - and I'm printing a lot.



 For example i have HP LaserJet 4, which printed 85000 pages when i bought 
 it, and i printed over 15000.

My Laserjet 4000, my first own laser printer, has already
stopped couinting pages, it shows 1500 pages or so and doesn't
count any further. I've treated it very unkindly for more than
12 years now - and it keeps on working.



 And it works flawlessy, so i don't have new printer every year.

That's intended by the marked (because users intend so). Buying
new printers all day long is normal, so you always have a top
of the line printer. :-)



 exactly. [CUPS] not needed for printing.

At least for the many printers that don't conform to standards,
if makes printing a bit easier. Nice administration through
web interface, lots of autodetect... users like this. :-)

(On the other hand, it's problematic to add a parallel printer
with CUPS that isn't attached to the system - bad idea in my
opinion, just because the printer isn't available AT THE MOMENT
should not disable me to select it.)





-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 12:15:22 +0100, Chris Rees utis...@googlemail.com wrote:
 Also, I think it's a bad idea to leave money lying round like that.
 That's why we have banks. More layers.

No. We have benks because they make it easier to steal
people's money more silently, so they notice when it's
too late. Special offer from Lehmann brothers. :-)



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ANNOUNCE: OpenOffice.org 3.1 (i386) packages now available

2009-05-28 Thread Paul B. Mahol
On 5/28/09, Manolis Kiagias sonic200...@gmail.com wrote:
 Paul B. Mahol wrote:

 Are extensions working for you?


 After little exploration this is already known problem: ports/129308




 Haven't tried extensions (rarely use any) but thanks for letting us know.
 Was this working on 3.01?

Never tried(..) But it is know problem on =7.0 and there is at least two PR
related to such issue.

ports/127946 appears to have working solution.

-- 
Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 14:42:31 +0200 (CEST), Wojciech Puchar 
woj...@wojtek.tensor.gdynia.pl wrote:
  While FBSD has many fine uses, primarily in the server department, it
  is solely lacking as a full service desktop replacement for me. I
 
 As usual it depends on needs - for me it provides all i need for operating 
 system. But it's really off-topic

I may add that I'm using FreeBSD exclusively (!) on my desktop
since version 4.0 without any problems. I just don't describe
the use desktop with runs 'Flash' flawlessly. As Wojciech
siad, it completely depends on what you are going to do with
your system. The FreeBSD OS is just the basis for this, not
the entire means.



  By the way, using a headless Win PC as a print server takes up virtually
  no space, its power consumption is inconsequential, and I am not even
 
 anyway buing standard-compliant printer seems like simpler and cheaper 
 solution for me.

It's worth mentioning that you need to buy along with the
printer: the PC and the license for Windows. I'm not sure
what this costs altogether, but maybe it justifies buying
an office-class printer that is fully standard-compliant and
will serve you more years than a non-printer would.



 Even if it would be slightly more expensive, i would prefer it, to keep 
 things simple.

Doesn't even need to be more expensive. It just depends on
how much time (and here we are again) you spend on researching
and evaluating which product is the best for your particular
needs.


-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 09:09:41 -0400, Jerry ges...@yahoo.com wrote:
 Actually, you are a troll. 

Actually, I allow myself to tell you that this is untrue. :-)

He's right. FreeBSD is an advanced operating system that provides
basic means to drivers and applications (and to do some other
things). So it enables application programmers to write their
programs for this platform. If they refuse to, why blame the
system?

As it has truthfully been mentioned, it would be possible for
Adobe to release a native version of Flash for FreeBSD, even
if they don't put their sources into BSDL. But they don't want
to. (It's their right to do so, of course.)



 Now that is a truly stupid statement. The usefulness of any OS or
 applications is directly proportionate to the end users intended
 purpose.

No. The end user doesn't use the operating system, he uses his
application programs (which, of course, depend on the operating
system in many ways). That's how the usefulness of an application
can be judged.

The usefulness of an operating system is to be considered in
terms of how good it provides ressources, documentation, inter-
faces, standards, compatibility maybe. And in this case FreeBSD
is excellent.



 The bottom line is that using a Win PC box for a print server saves me
 countless hours of frustration.

Then it's completely fine for you, no disagreement.

The question is - if you're interested in it: What have you
learned? How does it help you in more difficult situations
where you are presented to a specific setting and have to
work with means on board (Bordmittel)?



 I know that I can purchase virtually
 any printer on the market today and have it up and running on the
 Windows box in a few minutes.

Until a new printer doesn't support your Windows version anymore,
or your new !Windows version doesn't support your printer anymore.


 Can you say the same thing about a FBSD
 box? Not even close.

This is intended to be that way. The printer manufactureres and
the majority of their customers decided it.



 The idea behind any venture, be it personal or
 business, is to find the cheapest and most efficient solution for a
 given problem. I have found one that works just fine for me.

Then again, it's okay for you, even if I don't consider it
cheap (exta PC purchase, PC running, license) or most
efficient (exta PC needed).



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is this a gmirror bug?

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 06:12:25 -0700, Peter Steele 
pste...@webmail.maxiscale.com wrote:
 good but seems quite overcomplex expecially this pkg_add.
 
 why just not to compress whole filesystem(s) by tar+gzip?
 
 ?
 
 I think we must be talking about something different. In any event, what
 we have works quite well and I'm not about to change the process at this
 point...

I think he's refering to dumping the partitions of an already
installed master system into files, and then restoring them
into the partitions of the other systems as intended. This
would surely be easier than to pkg_add the software needed on
the other systems...


-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 09:04:43 -0500, Kirk Strauser k...@strauser.com wrote:
 Well, I can transfer 25MB/s between hosts on the LAN without my CPU ever 
 breaking 10% CPU usage.  I'm of the opinion that most people don't need to 
 optimize for CPU in such cases when the security payoffs are so great.

As Wojciech pointed out correctly before, security is only as
good as the weakest point. Of course you can add security by
using SSH, and it's definitely indicated when doing things via
the Internet. As long as you are inside your own net, covered
from the Internet, with only trustworthy machines inside it,
you could even use telnet.

Connecting systems by a security tunnel that already adds means
of cryptography, and you consider this tunnel to be secure
enough, the above situation applies. But you can always SSH
inside a security tunnel, if you want. It just increases
security. The more the better. :-) At the point where this
the more generates so much overhead that things are lagging,
stalling or just work much too slow, or slower than they
should, you can re-thing the situation.



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Failure to get past a PCI bridge

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 16:24:00 +0200, Josef Moellers 
josef.moell...@ts.fujitsu.com wrote:
 The install kernel then boots properly and reaches the Country Selection.
 At that point, no keyboard input is accepted. An optical mouse is off, 
 so I assume the keyboard to be off, too.

Not neccessarily. Check the blinkenlights with caps lock,
num lock and scroll lock (if present).

If optical mouse doesn't have any light, it's nearly obvious
that it doesn't get power from the USB port. This doesn't
need to imply that the keyboard is off, too.





-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Chris Rees
2009/5/28 Polytropon free...@edvax.de:
 On Thu, 28 May 2009 09:04:43 -0500, Kirk Strauser k...@strauser.com wrote:
 Well, I can transfer 25MB/s between hosts on the LAN without my CPU ever
 breaking 10% CPU usage.  I'm of the opinion that most people don't need to
 optimize for CPU in such cases when the security payoffs are so great.

 As Wojciech pointed out correctly before, security is only as
 good as the weakest point. Of course you can add security by
 using SSH, and it's definitely indicated when doing things via
 the Internet. As long as you are inside your own net, covered
 from the Internet, with only trustworthy machines inside it,
 you could even use telnet.

 Connecting systems by a security tunnel that already adds means
 of cryptography, and you consider this tunnel to be secure
 enough, the above situation applies. But you can always SSH
 inside a security tunnel, if you want. It just increases
 security. The more the better. :-) At the point where this
 the more generates so much overhead that things are lagging,
 stalling or just work much too slow, or slower than they
 should, you can re-thing the situation.



 --
 Polytropon
 From Magdeburg, Germany
 Happy FreeBSD user since 4.0
 Andra moi ennepe, Mousa, ...

I know I sound like Theo, but security and reliability are ALWAYS more
important than overhead or speed. Always. Since the OP asked for

quote

How could I nicely and securely connect from the script on the web
server to the file server, in order to edit the quota? It should be
nice and secure and without password.

/quote

He even said 'secure' twice. There is a web server involved, meaning
possibility of compromise (we all know how secure web servers tend to
be), and then one has access to network traffic for sniffing. Also, if
this is for quotas, then surely the people accessing the server via
*NFS* are inside the network?

Chris

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread cpghost
On Thu, May 28, 2009 at 06:31:41PM +0200, Polytropon wrote:
 As it has truthfully been mentioned, it would be possible for
 Adobe to release a native version of Flash for FreeBSD, even
 if they don't put their sources into BSDL. But they don't want
 to. (It's their right to do so, of course.)

More likely, they simply decided that supporting our OS was not worth
it, because we don't have the user base of Win32 or Linux.

  Can you say the same thing about a FBSD
  box? Not even close.
 
 This is intended to be that way. The printer manufactureres and
 the majority of their customers decided it.

Basically put: you get what you pay for. Classic (non-win) printers do
have circuitry on board to process PCL or PostScript, whereas
el-cheapo win-printers come without this circuitry, and delegate
pagesetting to a software driver. Same for modems vs. win-modems.

Of course, all this is well-known for a long time now. But what's
worrying, is that economics of scale make it increasingly difficult to
locate classic printers (and modems). Fortunatly, they are still being
made here and there, but for how long? What will we do a few years
down the road in an environment where win-${device}s are ubiquitous?

Ultimately, we'll need a full-featured windowsolator a la NDISwrapper
et al., so that we can use the Windows-only drivers natively on
FreeBSD/{i386,amd64}. At least x86-based systems will then work,
although ARM and other platforms would still be left out in the cold.

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


MAC_PORTACL Not Allowing Non-Super User Access to Port

2009-05-28 Thread Jon Passki
Hello,

Full documentation here:
http://blog.cykyc.org/2009/05/macportacl-and-no-love.html

Gist of it is that I enabled MAC_PORTACL and MAC, rebuilt the kernel
and installed it for testing.  I was not able to get a non-super user
to open up a privileged port, though.

What am I doing wrong?

[2136] ~ sysctl -a security.mac
security.mac.max_slots: 4
security.mac.version: 3
security.mac.mmap_revocation_via_cow: 0
security.mac.mmap_revocation: 1
security.mac.portacl.rules:
security.mac.portacl.port_high: 1023
security.mac.portacl.autoport_exempt: 1
security.mac.portacl.suser_exempt: 1
security.mac.portacl.enabled: 1
[2136] ~ id
uid=1001(foo) gid=0(wheel) groups=0(wheel)
[2136] ~ sudo sysctl security.mac.portacl.rules=uid:1001:tcp:80
Password:
security.mac.portacl.rules:  - uid:1001:tcp:80
[2136] ~ nc -l 80
nc: Permission denied

TIA,

Jon
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: RTL8111-GR driver for FreeBSD6.4

2009-05-28 Thread Troy Beisigl
Yep. The 6.4 has the same thing. It looks like it did work. We had the  
Intel MB that had an Intel NIC and it was not supported on 6.4. I had  
ordered up the same MB with the Realtek NIC and just got it this  
morning. Seems to support it fine. Thanks for the posts.


Troy Beisigl




On May 28, 2009, at 2:14 AM, Wojciech Puchar wrote:


says it support RTL8111
but i have FreeBSD 7.1


I have a 6.4 machine (about to be retired). On that machine, man 4  
re says it supports the RTL8111S, but does not mention the  
RTL8111GR. My guess is that


in 7.1 it too says only about S, i assumed that S and GR are only  
different chip revisions/different functionality, maybe one have  
builtin PHY other external etc. etc. but it's software compatible.


That's usual naming scheme of chips, but of course there may be  
exceptions.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Is this a gmirror bug?

2009-05-28 Thread Peter Steele
I think he's refering to dumping the partitions of an already
installed master system into files, and then restoring them
into the partitions of the other systems as intended. This
would surely be easier than to pkg_add the software needed on
the other systems...

We do follow that general mechanism, as far as cloning an existing
system is concerned. You still have to create the original system
though, and that's what I was referring to...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: superpages?

2009-05-28 Thread RW
On Thu, 28 May 2009 17:17:38 +0200
cpghost cpgh...@cordula.ws wrote:


 The following excerpt from:
   http://www.freebsd.org/releases/7.2R/relnotes-detailed.html
 may be helpful:
 
   [amd64, i386] The FreeBSD virtual memory subsystem now supports
   fully transparent use of superpages for application memory;
   application memory pages are dynamically promoted to or demoted from
   superpages without any modification to application code. This change
   offers the benefit of large page sizes such as improved virtual
   memory efficiency and reduced TLB (translation lookaside buffer)
   misses without downsides like application changes and virtual memory
   inflexibility.

Just out of idle curiosity, how does it work at the page queue level.
Most of the references to superpages are in pmap.c and vm_reserv.c. I
don't see any special handling in the pageout daemon where the inactive
and active queues are handled. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 19:09:09 +0200, cpghost cpgh...@cordula.ws wrote:
 Basically put: you get what you pay for.

That was true in the past, but today, it's much more complicated
than just regularing an article's quality over the price. You
can - without any problems - get crap for (too) much money. You
pay for a brand name, or a standard's name, but you get crap.

I've seen a good example recently: A DVD recorder built (or
at least sold) by a company name most users are familiar with,
which quitted working after 1 year of regular use, and a
similar recorder by a manufacturer that's not so widely known,
which still works today. The known one was nearly 100 Euro
more expensive than the unknown one.



 Classic (non-win) printers do
 have circuitry on board to process PCL or PostScript, whereas
 el-cheapo win-printers come without this circuitry, and delegate
 pagesetting to a software driver.

Exactly. Even el-anachronismo dotmatrix printers could turn
simple text, transmitted to the parallel port, into printed
form. Today's el-stupido printers can't.

Can't print easily, but pretend to be more than they are (in
terms of overall quality, to which I add support for standards
or at least existance of a proper BSD driver): The include
a printer, a scanner, a fax machine and who knows what else...



 Same for modems vs. win-modems.

Exacltly. Those leave more to do for the computer that controls
it, and generates much more work for the processor, while the
easier variant would just be to transfer the data to the
device and let it print, even if it's just PCL.



 Of course, all this is well-known for a long time now. But what's
 worrying, is that economics of scale make it increasingly difficult to
 locate classic printers (and modems).

Yes. In most cases, you stick to 2nd hand office-class equipment.
It's bigger, may make more noise, but the history teaches that
it makes you more happy. :-)



 Fortunatly, they are still being
 made here and there, but for how long?

Customers do control this. A nice example are the IBM model M
keyboards. There are manufacturers that provide the quality and
the layout (without advertising keys) of these keyboards. (I'm
glad to own some of the original IBM ones, they will live longer
than I will.)



 What will we do a few years
 down the road in an environment where win-${device}s are ubiquitous?

Scenario A is to keep using used older equipment and to keep it
running by adequate means.

Scenario B is to use means of emulation and virtualization.

But more likely, this won't happen.
History has told, future will tell.



 Ultimately, we'll need a full-featured windowsolator a la NDISwrapper
 et al., so that we can use the Windows-only drivers natively on
 FreeBSD/{i386,amd64}.

That would conform to scenario B, but I'm sure we won't have to
think about it very much, because Windows is not the world. :-)



 At least x86-based systems will then work,
 although ARM and other platforms would still be left out in the cold.

Does Windows run on ARM? I'm sure UNIX does.

With the upcoming interest in ARM-based Netbooks 'n stuff I think
it will be less and less important. Today, Linux is more interesting
to industry and to enterprises than Windows is. I do see this in
Germany: Windows is considered more and more to be old-fashioned
(not very much in fact, but slightly increasing).

I hope this trend continues, so printer manufacturers (and those
that built other stuff used together with computers) will change
their attitude towards interoperability and standards.



-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Polytropon
On Thu, 28 May 2009 18:04:23 +0100, Chris Rees utis...@googlemail.com wrote:
 [The OP] even said 'secure' twice. There is a web server involved, meaning
 possibility of compromise (we all know how secure web servers tend to
 be), and then one has access to network traffic for sniffing. Also, if
 this is for quotas, then surely the people accessing the server via
 *NFS* are inside the network?

Yes, I agree to that, but it doesn't stand in any contradiction to
what I said, or what Wojciech said.

So for the OP, security is needed. As it has been mentioned, using
encryption tunnels is one (valid) means to do this, SSH is another,
and both of them can even be combined. If the environment is that
insecure that it doesn't allow rsh / rlogin, then DO NOT USE IT.
But if it is, why not? At least, the OP's description involving
web servers doesn't justify using just rsh / rlogin, and not
telnet, of course. :-)


-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


character sets for file names on ufs?

2009-05-28 Thread Tom Worster
what character set/encoding is used for file names in freebsd when i have a
default ufs fs?

tom


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Chad Perrin
On Wed, May 27, 2009 at 06:00:56PM +0200, Fabian Keil wrote:
 Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote:
 
   3. Drafts for a possible redesign of your project's website
  
  current webpage is excellent - no need to :) Most important - it works in 
  every browser.
 
 Actually it's known to render poorly in a lot of browser configurations:
 http://www.freebsd.org/cgi/query-pr.cgi?pr=www/91539

My only problem has been that the FreeBSD site won't load if I'm using an
SSH proxy (even though both the local machine and the proxy machine are
FreeBSD systems, ironically).

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
Quoth Paul Graham: SUVs are gross because they're the solution to a
gross problem. (How to make minivans look more masculine.)


pgpZJzyqE4d3s.pgp
Description: PGP signature


Re: Sponsoring FreeBSD

2009-05-28 Thread Chad Perrin
On Wed, May 27, 2009 at 05:44:29PM +0100, Chris Rees wrote:
 2009/5/27 Wojciech Puchar woj...@wojtek.tensor.gdynia.pl:
 
  It is NOT an opinion that you were rude in your reply, and it is NOT
  an opinion that it's not your place to advise on how much constitutes
  an 'acceptable' or 'sufficient' donation.
 
  You were just plain wrong in doing so, and you should either quietly
  stop replying defending your actions, or even perhaps admit you were
  wrong and apologise.
 
  just another funny post - it's not an opinion, it's a fact BECAUSE YOU
  DECIDED SO.
 
 Why did you (attempt to) answer the question in the first place then?

Maybe he's trolling.  Look how successful he was at instigating a flame
war. . . .

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
Quoth Bill McKibben: The laws of Congress and the laws of physics have
grown increasingly divergent, and the laws of physics are not likely to
yield.


pgp51FXEmpwTC.pgp
Description: PGP signature


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar


Well, I can transfer 25MB/s between hosts on the LAN without my CPU ever
breaking 10% CPU usage.
probably true, i never checked actually. i just don't understand such 
reasoning that you have to waste (even small) CPU power without sense.


For example local private LAN or already-encrypted VPN network - which is 
common case in my case.


Actually i don't use ssh at all except rare cases when i help someone 
else.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: character sets for file names on ufs?

2009-05-28 Thread Dan Nelson
In the last episode (May 28), Tom Worster said:
 what character set/encoding is used for file names in freebsd when i have
 a default ufs fs?

Whatever you want; ufs filenames have no assumed character set.  zfs
defaults to the same rules, but can enforce only valid utf8 filenames if the
utf8only property is set.

-- 
Dan Nelson
dnel...@allantgroup.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Chad Perrin
On Wed, May 27, 2009 at 09:57:57PM +0200, Peter Boosten wrote:
 Wojciech Puchar wrote:
 
  exactly does. i just don't catch why he - while stopping using it
  because of forum - still read and posts here.
 
 None of your concern: this is just what everybody is writing about.
 Whether someone is using FreeBSD or not, and reading here or not, is
 irrelevant to most (and probably to all) discussions going on here, and
 it is my understanding (and my opinion, which is different than yours on
 this matter I suspect) that your commenting on this is mostly unappreciated.

Actually, that's technically your estimation -- not your opinion.  It may
be correct or incorrect (and if it's incorrect, then I'm incorrect too,
because I have come to the same conclusion), but the fact it's not a
settled matter doesn't mean it's opinion.  The term opinion has a very
specific meaning, and this isn't it.

Saying *you* don't appreciate it would be a matter of opinion.  Saying
you think most people don't appreciate it would be an estimation of the
popularity of a given opinion -- but not an opinion itself.

I don't mean to bust your balls on this, so to speak.  I just want to
offer my thoughts on the matter of what does and does not constitute
opinion so that people who disdain what others observe but cannot
necessarily prove will not find it as easy to dismiss things as mere
opinion.

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
Quoth Anonymous: Why do we never have time to do it right, but always
have time to do it over?


pgpdiGL52BNFa.pgp
Description: PGP signature


Re: MAC_PORTACL Not Allowing Non-Super User Access to Port

2009-05-28 Thread Jon Passki
Nevermind, forgot to set the following:
net.inet.ip.portrange.reservedlow: 0
net.inet.ip.portrange.reservedhigh: 0

With these set, portacl is working as expected.


On Thu, May 28, 2009 at 11:55 AM, Jon Passki jon.pas...@hursk.com wrote:
 Hello,

 Full documentation here:
 http://blog.cykyc.org/2009/05/macportacl-and-no-love.html

 Gist of it is that I enabled MAC_PORTACL and MAC, rebuilt the kernel
 and installed it for testing.  I was not able to get a non-super user
 to open up a privileged port, though.

 What am I doing wrong?

 [2136] ~ sysctl -a security.mac
 security.mac.max_slots: 4
 security.mac.version: 3
 security.mac.mmap_revocation_via_cow: 0
 security.mac.mmap_revocation: 1
 security.mac.portacl.rules:
 security.mac.portacl.port_high: 1023
 security.mac.portacl.autoport_exempt: 1
 security.mac.portacl.suser_exempt: 1
 security.mac.portacl.enabled: 1
 [2136] ~ id
 uid=1001(foo) gid=0(wheel) groups=0(wheel)
 [2136] ~ sudo sysctl security.mac.portacl.rules=uid:1001:tcp:80
 Password:
 security.mac.portacl.rules:  - uid:1001:tcp:80
 [2136] ~ nc -l 80
 nc: Permission denied

 TIA,

 Jon




-- 
Cheers,

Jon Passki, Partner
The Hursk Group, LLC

Obvia conspicimus, nubem pellente Mathesi.

e: jon.pas...@hursk.com
ph: 651/222.3020
cal: 
http://www.google.com/calendar/hosted/hursk.com/embed?src=jon.passki%40hursk.com
pgp: 1BB0 A946 927B 93C3 ED6A  0466 6692 6C2C 84BE 4122
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Chad Perrin
On Wed, May 27, 2009 at 06:12:11PM -0400, Jerry McAllister wrote:
 On Wed, May 27, 2009 at 02:38:46PM -0500, Neal Hogan wrote:
 
  On Wed, May 27, 2009 at 2:22 PM, Wojciech Puchar
  woj...@wojtek.tensor.gdynia.pl wrote:
  
   Of course - ban it!
  
  
   Just my 2c... Snotty comments like this in a public forum, is exactly why
   I
   no longer use FreeBSD.  Just about everything in these mailing lists 
   turns
  
   If you stopped using FreeBSD BECAUSE OF FORUM, congratulations ;)
  
   This means that OS functionality is not important for you at all!
  
  Well, that certainly doesn't follow.
 
 Actually, that one does.
 If you use FreeBSD because of the OS functionality/reliability, etc
 then trashy noise on the questions list wouldn't make a difference
 in your choice.   If you stop using it because you don't like the
 noise, then functionality is not your high priority.Maybe saying
 'at all' is over the top.But, anyway, the noise is getting tiresome - 
 even mine.

False dichotomy.

It is possible to value both the quality of the community support *and*
the characteristics of the OS, and for sufficient problems in one to
overcome the benefits of the other.  It's not a matter of *only* the
community discussion venue *or* the technical characteristics of the OS
to matter.  Both can matter and, when one fails spectacularly enough for
a particular person's needs, it is perfectly reasonable to expect that
person to choose a different OS based on a better (for his/her purposes)
combination of OS and community quality.

I, of course, tend to find the FreeBSD community quite wonderful, as OS
communities go -- aside from one particular fly in the ointment.  Combine
that with the excellence of the documentation and the technical (and
licensing) benefits of the OS itself, and I'm happy being here.  I can
understand how some of the failures in the community to be a perfect ray
of sunshine might put off some users, though, without immediately jumping
to the conclusion that those users don't give a crap about the quality of
the OS at all.

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
Quoth Joel Ryder: Ask Ren is definitely faster than Ask Jeeves.  Jeeves
doesn't give you an attitude though, so I guess it's a trade off.


pgpD3kAfnVc4X.pgp
Description: PGP signature


Re: Sponsoring FreeBSD

2009-05-28 Thread Neal Hogan
On Thu, May 28, 2009 at 1:56 PM, Chad Perrin per...@apotheon.com wrote:
 On Wed, May 27, 2009 at 09:57:57PM +0200, Peter Boosten wrote:
 Wojciech Puchar wrote:
 
  exactly does. i just don't catch why he - while stopping using it
  because of forum - still read and posts here.

 None of your concern: this is just what everybody is writing about.
 Whether someone is using FreeBSD or not, and reading here or not, is
 irrelevant to most (and probably to all) discussions going on here, and
 it is my understanding (and my opinion, which is different than yours on
 this matter I suspect) that your commenting on this is mostly unappreciated.

 Actually, that's technically your estimation -- not your opinion.  It may
 be correct or incorrect (and if it's incorrect, then I'm incorrect too,
 because I have come to the same conclusion), but the fact it's not a
 settled matter doesn't mean it's opinion.  The term opinion has a very
 specific meaning, and this isn't it.

 Saying *you* don't appreciate it would be a matter of opinion.  Saying
 you think most people don't appreciate it would be an estimation of the
 popularity of a given opinion -- but not an opinion itself.

Huh?


 I don't mean to bust your balls on this, so to speak.  I just want to
 offer my thoughts on the matter of what does and does not constitute
 opinion so that people who disdain what others observe but cannot
 necessarily prove will not find it as easy to dismiss things as mere
 opinion.

 --
 Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
 Quoth Anonymous: Why do we never have time to do it right, but always
 have time to do it over?




-- 
www.nealhogan.net  www.lambdaserver.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Sponsoring FreeBSD

2009-05-28 Thread Gary Gatten
OMFG  Can someone PLEASE just shoot me now!!!  How much do I have to 
pay to make this thread and all the worthless babble therein go away forever?

-Original Message-
From: owner-freebsd-questi...@freebsd.org 
[mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Neal Hogan
Sent: Thursday, May 28, 2009 2:15 PM
To: freebsd-questions@freebsd.org
Subject: Re: Sponsoring FreeBSD

On Thu, May 28, 2009 at 1:56 PM, Chad Perrin per...@apotheon.com wrote:
 On Wed, May 27, 2009 at 09:57:57PM +0200, Peter Boosten wrote:
 Wojciech Puchar wrote:
 
  exactly does. i just don't catch why he - while stopping using it
  because of forum - still read and posts here.

 None of your concern: this is just what everybody is writing about.
 Whether someone is using FreeBSD or not, and reading here or not, is
 irrelevant to most (and probably to all) discussions going on here, and
 it is my understanding (and my opinion, which is different than yours on
 this matter I suspect) that your commenting on this is mostly unappreciated.

 Actually, that's technically your estimation -- not your opinion.  It may
 be correct or incorrect (and if it's incorrect, then I'm incorrect too,
 because I have come to the same conclusion), but the fact it's not a
 settled matter doesn't mean it's opinion.  The term opinion has a very
 specific meaning, and this isn't it.

 Saying *you* don't appreciate it would be a matter of opinion.  Saying
 you think most people don't appreciate it would be an estimation of the
 popularity of a given opinion -- but not an opinion itself.

Huh?


 I don't mean to bust your balls on this, so to speak.  I just want to
 offer my thoughts on the matter of what does and does not constitute
 opinion so that people who disdain what others observe but cannot
 necessarily prove will not find it as easy to dismiss things as mere
 opinion.

 --
 Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
 Quoth Anonymous: Why do we never have time to do it right, but always
 have time to do it over?




-- 
www.nealhogan.net  www.lambdaserver.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org





font size=1
div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'
/div
This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system.
/font

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Wojciech Puchar

Actually, you are a troll.


Actually, I allow myself to tell you that this is untrue. :-)


but i said thank you for such nomination. i feel proud :)
I'm waiting for certified professional FreeBSD Troll (TM) printed and 
laminated certificate! should i give a snail-mail address?



He's right. FreeBSD is an advanced operating system that provides
basic means to drivers and applications (and to do some other
things). So it enables application programmers to write their
programs for this platform. If they refuse to, why blame the
system?


I don't know. FreeBSD folks actually did A LOT OF WORK that they wasn't 
even supposed to do, and did it for free!


Instead of hearing Thank you, you made it at least 
partially working! they here FreeBSD FLASH support is a CRAP.


Not polite and really they deserve better reward.



As it has truthfully been mentioned, it would be possible for


...this parts removed as i fully agree and have nothing to add...


Until a new printer doesn't support your Windows version anymore,
or your new !Windows version doesn't support your printer anymore.


It was his problem, and just don't care about him. But i really hate that
such lazy people that prefer buying new computers instead of thinking - 
tries to TEACH others that it's the right way to go.


Being lazy is bad. Not thinking is bad. I am sometimes lazy and not always 
think as good as i would like, but i don't tell people it is OK!

It is not!


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: character sets for file names on ufs?

2009-05-28 Thread Pieter de Goeje
On Thursday 28 May 2009 19:51:45 Tom Worster wrote:
 what character set/encoding is used for file names in freebsd when i have a
 default ufs fs?

 tom

None.

UFS is 8 bit clean, so you can basically use it with any 8bit character set. 
No encoding is enforced and no conversion is ever applied to file names on 
UFS.

If you set your locale to UTF-8, you can use unicode characters in filenames.

For instance:

% touch ⡍⠜⠇⠑⠹ ⠺⠁⠎ ⠁⠎ ⠙⠑⠁⠙ ⠁⠎ ⠁ 
% ls
⡍⠜⠇⠑⠹ ⠺⠁⠎ ⠁⠎ ⠙⠑⠁⠙ ⠁⠎ ⠁
% rm ⡍⠜⠇⠑⠹\ ⠺⠁⠎\ ⠁⠎\ ⠙⠑⠁⠙\ ⠁⠎\ ⠁\
%

(I don't have a clue what that means btw)

-- 
Pieter de Goeje

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: www.freebsd.org problems (was: Sponsoring FreeBSD)

2009-05-28 Thread Fabian Keil
Chad Perrin per...@apotheon.com wrote:

 On Wed, May 27, 2009 at 06:00:56PM +0200, Fabian Keil wrote:
  Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote:
  
3. Drafts for a possible redesign of your project's website
   
   current webpage is excellent - no need to :) Most important - it works in 
   every browser.
  
  Actually it's known to render poorly in a lot of browser configurations:
  http://www.freebsd.org/cgi/query-pr.cgi?pr=www/91539
 
 My only problem has been that the FreeBSD site won't load if I'm using an
 SSH proxy (even though both the local machine and the proxy machine are
 FreeBSD systems, ironically).

Interesting. I'm reaching the website through SSH without problems:

Firefox - Privoxy - ssh - sshd - www.freebsd.org

In related news, I've been using a Privoxy filter to fix the
worst rendering issues for several years now, and I'm considering
adding it to the port as well.

After all it doesn't look like www/91539 is going to get fixed any
time soon. As the archives will show, the problems were already known
before the redesign went live, but nobody cared back then either.

Fabian


signature.asc
Description: PGP signature


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

good as the weakest point. Of course you can add security by
using SSH, and it's definitely indicated when doing things via
the Internet. As long as you are inside your own net, covered
from the Internet, with only trustworthy machines inside it,
you could even use telnet.


which i actually do. even more! i ALWAYS change configuration to allow
root login from telnet rsh and ssh which is disabled by default.

Even 15 seconds of thinking is enough to understand that logging to other 
user and then su - gives completely no extra security.


And yes - i do log as root by insecure rsh and telnet.

The only think you should be aware is to not do it when connection is from 
outside and insecure.


This case i actually don't use even ssh if it's not mine computer. How can 
i be sure that ssh is secure, but keylogging isn't installed?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Chad Perrin
On Thu, May 28, 2009 at 11:12:16AM +0200, Wojciech Puchar wrote:
 
 FreeBSD developers know enough to avoid speaking 'on behalf' of anyone,
 unless they are explicitly asked to do so and it makes sense.  We usually
 just point the users gently towards an appropriate resource: a webpage, a
 mailing list, or a team of more knowledgeable folks, etc.
 
 Boris did the right thing IMO by pointing at the donations pages.  Two of
 
 Exactly. but it for sure wasn't what original sponsoring offer wanted. 
 He wanted banner/logo advert on mine webpage.

That was not what was stated in the email that started this thread.  Why
do you relentlessly ignore not only the actual wording of the original
email, but also the corrections offered by others?

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
Quoth Yasir Arafat on religious wars: You're basically killing each
other to see who's got the better imaginary friend.


pgpUATjH6IVvu.pgp
Description: PGP signature


Re: Is this a gmirror bug?

2009-05-28 Thread Wojciech Puchar


?

I think we must be talking about something different. In any event, what
we have works quite well and I'm not about to change the process at this
point...


we already talked on priv and everything got explained :)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

I know I sound like Theo, but security and reliability are ALWAYS more
important than overhead or speed.


I really agree with You.

That's why every admin (and user too) should think about what is he/she 
doing, instead of repeating the same mantras about security/insecurity of 
something.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Wojciech Puchar

But if it is, why not? At least, the OP's description involving


some time ago i heard from linux user that rshd is removed at all because 
it's insecure. Just got another example how good decision i made moving 
away from it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Canon printer and TurboPrint

2009-05-28 Thread Wojciech Puchar

That was true in the past, but today, it's much more complicated
than just regularing an article's quality over the price. You
can - without any problems - get crap for (too) much money. You
pay for a brand name, or a standard's name, but you get crap.


HP products (printers, cameras, and other office equipment) are really 
perfect examples.


I mean new HP products, not those 10-20 years ago where HP was expensive 
but really good.



Exactly. Even el-anachronismo dotmatrix printers could turn
simple text, transmitted to the parallel port, into printed
form. Today's el-stupido printers can't.


I don't agree it's bad idea of removing processing hardware from printer.
It's good idea as such processing is a blink of eye for today computers.

The problem is that there is NO STANDARD for raw bitmap printers.
If it would - then just adding this to ghostscript would be few hours of 
work.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: character sets for file names on ufs?

2009-05-28 Thread Wojciech Puchar

what character set/encoding is used for file names in freebsd when i have a
default ufs fs?


it just write whatever program will give it. UFS does not recode anything.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Remotely edit user disk quota

2009-05-28 Thread Kirk Strauser
On Thursday 28 May 2009 02:34:02 pm Wojciech Puchar wrote:

 And yes - i do log as root by insecure rsh and telnet.

OK, I'm now promoting you to batshit insane.  Seriously, there's no excuse 
for running telnet - even in a secure (ha!) environment - when so much 
better alternatives exist.

Let me shoot you a hypothetical: your webserver gets compromised.  The 
intruder uses a little ARP poisoning to launch a MITM attack between your 
workstation and the database server.  He comes back a couple hours later and 
uses your plaintext root password to make a backup of your database for his 
personal use.

Oh, but that could never happen to you, because you run a PtP VPN between 
every pair of machines on your network, said network being separated from the 
Internet by a 2 meter air gap and a Doberman Pinscher.

Seriously, using telnet today is flat-out stupid, and I'd fire you in a second 
if you brought that level of bullheaded incompetence into my company.

/rant
-- 
Kirk Strauser
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Sponsoring FreeBSD

2009-05-28 Thread Wojciech Puchar


Actually it's known to render poorly in a lot of browser configurations:
http://www.freebsd.org/cgi/query-pr.cgi?pr=www/91539


My only problem has been that the FreeBSD site won't load if I'm using an
SSH proxy (even though both the local machine and the proxy machine are
FreeBSD systems, ironically).


could you please tell how do you set up ssh proxy for that?
while i don't use ssh proxy that way, i really see no reason why it may 
not work.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Sponsoring FreeBSD

2009-05-28 Thread Wojciech Puchar

OMFG  Can someone PLEASE just shoot me now!!!  How much do I have to 
pay to make this thread and all the worthless babble therein go away forever?


no way, but please think about financing, or even better gathering few 
people and convincing core team for setting up official MODERATED list.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


  1   2   >