Problem with vlans on igb (was: fsck problem FreeBSD 8.3)

2012-04-11 Thread KES


 Пересылаемое сообщение  
11.04.2012, 13:14, "KES" :

10.04.2012, 08:50, "Da Rock" :

>  On 04/10/12 05:02, Коньков Евгений wrote:
>>   Yes, I have tested.
>>   and on this hardware on this OS it works from  Fri Feb 24 17:07:48 UTC 2012
>>   but last two days:
>>   reboot   ~ Mon Apr  9 19:50
>>   reboot   ~ Mon Apr  9 18:30
>>   reboot   ~ Sun Apr  8 20:55
>>   reboot   ~ Sun Apr  8 20:00
>>   reboot   ~ Sun Apr  8 19:49
>>   reboot   ~ Sun Apr  8 17:43
>>   reboot   ~ Sun Apr  8 10:58
>>   reboot   ~ Sat Apr  7 21:13
>>   reboot   ~ Sat Apr  7 16:37
>>   reboot   ~ Sat Apr  7 16:07
>>
>>   I remembered. One thing changed.
>>   I add vlans to igb2, but no traffic flow on that devices yet.
>  Perhaps you should test removing the vlans and see if things improve?

I have removed vlans, two day server works without reboots

>>   Before this I have use: igb0, igb1, igb3
>>   igb0@pci0:1:0:0:    class=0x02 card=0x00018086 chip=0x15218086 
>> rev=0x01 hdr=0x00
>>    vendor = 'Intel Corporation'
>>    class  = network
>>    subclass   = ethernet
>>   igb1@pci0:1:0:1:    class=0x02 card=0x00018086 chip=0x15218086 
>> rev=0x01 hdr=0x00
>>    vendor = 'Intel Corporation'
>>    class  = network
>>    subclass   = ethernet
>>   igb2@pci0:1:0:2:    class=0x02 card=0x00018086 chip=0x15218086 
>> rev=0x01 hdr=0x00
>>    vendor = 'Intel Corporation'
>>    class  = network
>>    subclass   = ethernet
>>   igb3@pci0:1:0:3:    class=0x02 card=0x00018086 chip=0x15218086 
>> rev=0x01 hdr=0x00
>>    vendor = 'Intel Corporation'
>>    class  = network
>>    subclass   = ethernet
>>
>>   ifconfig_vlan100="inet  192.168.0.1 netmask 255.255.255.0 vlan 100 vlandev 
>> igb2" #nALL
>>   ifconfig_vlan101="inet  192.168.1.1 netmask 255.255.255.0 vlan 101 vlandev 
>> igb2" #n2 p24
>>   ifconfig_vlan102="inet  192.168.2.1 netmask 255.255.255.0 vlan 102 vlandev 
>> igb2" #n1 p23
>>   ifconfig_vlan103="inet  192.168.3.1 netmask 255.255.255.0 vlan 103 vlandev 
>> igb2" #n3 p22
>>   ifconfig_vlan104="inet  192.168.4.1 netmask 255.255.255.0 vlan 104 vlandev 
>> igb2" #n7,9 p21
>>   ifconfig_vlan105="inet  192.168.5.1 netmask 255.255.255.0 vlan 105 vlandev 
>> igb2" #n11 p20
>>   ifconfig_vlan106="inet  192.168.6.1 netmask 255.255.255.0 vlan 106 vlandev 
>> igb2" #n13 p19
>>   ifconfig_vlan107="inet  192.168.7.1 netmask 255.255.255.0 vlan 107 vlandev 
>> igb2" #n223 p18
>>   ifconfig_vlan108="inet  192.168.8.1 netmask 255.255.255.0 vlan 108 vlandev 
>> igb2" #n225 p17
>>   ifconfig_vlan109="inet  192.168.9.1 netmask 255.255.255.0 vlan 109 vlandev 
>> igb2" #n221 p16
>>   ifconfig_vlan110="inet 192.168.10.1 netmask 255.255.255.0 vlan 110 vlandev 
>> igb2" #n229 p15
>>   ifconfig_vlan111="inet 192.168.11.1 netmask 255.255.255.0 vlan 111 vlandev 
>> igb2" #n233 p14
>>   ifconfig_vlan112="inet 192.168.12.1 netmask 255.255.255.0 vlan 112 vlandev 
>> igb2" #n231 p13
>>   ifconfig_vlan113="inet 192.168.13.1 netmask 255.255.255.0 vlan 113 vlandev 
>> igb2" #n237 p12
>>   ifconfig_vlan114="inet 192.168.14.1 netmask 255.255.255.0 vlan 114 vlandev 
>> igb2" #n424 p11
>>   ifconfig_vlan115="inet 192.168.15.1 netmask 255.255.255.0 vlan 115 vlandev 
>> igb2" #
>>
>>   PAP>  Nothing logged in /var/log/* or crashes that exist in /var/crash
>>   PAP>  would indicate to me some sort of hardware related problem.
>>   PAP>  Have you tested your hardware lately and know that it is in 
>> operational order?
>>
>>   PAP>  ~Paul
>>
>>   PAP>  On Mon, Apr 09, 2012 at 09:36:54PM +0300, ??? ??? wrote:
>>>>   Hi.
>>>>
>>>>   Apr  9 19:51:58 fsck: /dev/ad8s1e: UNEXPECTED INCONSISTENCY, CANNOT RUN 
>>>> FAST FSCK
>>>>   Apr  9 19:51:58 fsck:
>>>>   Apr  9 19:51:58 fsck:
>>>>   Apr  9 19:51:58 fsck: /dev/ad8s1e: UNEXPECTED INCONSISTENCY

ipfw FreeBSD 10

2012-04-11 Thread KES
building kernel with this options:
options IPFIREWALL  #enable ipfw
options IPFIREWALL_VERBOSE  #enable log
options IPFIREWALL_FORWARD  #enable fwd
options IPDIVERT
options LIBALIAS
options IPFIREWALL_NAT  #enable nat

do not enable IPFW

When doing 
ipfw show
it shows
000  93874234  23402394820384 any to any
and stops
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


vmcore

2011-12-28 Thread KES
I am have vmcore files but kernel has compiled without -g

can I take any usefull information about 'why this problem occour'?


cat info.0 info.1 info.2

Dump header from device /dev/ad0s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 380215296B (362 MB)
  Blocksize: 512
  Dumptime: Wed Dec 28 14:17:48 2011
  Hostname: flux
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 9.0-CURRENT #4: Fri Jun 10 01:30:12 UTC 2011
@:/usr/obj/usr/src/sys/PAE_KES
  Panic String: double fault
  Dump Parity: 435437143
  Bounds: 2
  Dump Status: good

Dump header from device /dev/ad0s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 493899776B (471 MB)
  Blocksize: 512
  Dumptime: Wed Dec  7 17:56:01 2011
  Hostname: flux
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 9.0-CURRENT #4: Fri Jun 10 01:30:12 UTC
2011
@:/usr/obj/usr/src/sys/PAE_KES
  Panic String: double fault
  Dump Parity: 2760491868
  Bounds: 1
  Dump Status: good

Dump header from device /dev/ad0s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 449695744B (428 MB)
  Blocksize: 512
  Dumptime: Sat Nov 12 14:54:01 2011
  Hostname: flux
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 9.0-CURRENT #4: Fri Jun 10 01:30:12 UTC 2011
@:/usr/obj/usr/src/sys/PAE_KES
  Panic String: double fault
  Dump Parity: 2619940699
  Bounds: 0
  Dump Status: good
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


problems with IRQ

2011-10-06 Thread KES
system work fine, but systat -v show wrong results in compare with vmstat -i
seems counter overflow or so..

systat -v
2 usersLoad  0.95  1.13  1.15  Oct  6 17:36

Mem:KBREALVIRTUAL   VN PAGER   SWAP PAGER
Tot   Share  TotShareFree   in   out in   out
Act  3425966396   813716 9244 1395872  count
All  527128   10356  300289639336  pages
Proc:Interrupts
  r   p   d   s   w   Csw  Trp  Sys  Int  Sof  Flt 31 cow254k total
 50  557k 2614  14k 237k 4028  449127 zfodatkbd0 1
2 ozfod12 ata0 14
 9.1%Sys  21.7%Intr  1.6%User  0.0%Nice 67.6%Idle   1%ozfod  221k ehci0 16
|||||||||||   daefr 2 ehci1 23
=++>   37 prcfr  4130 cpu0:timer
42 dtbuf  314 totfr 15799 re0 256
Namei Name-cache   Dir-cache142271 desvn  react  4131 cpu1:timer
   Callshits   %hits   % 87941 numvn  pdwak  4129 cpu3:timer
61585762  94 35563 frevn  pdpgs  4130 cpu2:timer
  intrn
Disks   ad0   da0 pass0298480 wire
KB/t  18.79  0.00  0.00193600 act
tps  12 0 0   2103500 inact
MB/s   0.22  0.00  0.00  9180 cache
%busy 0 0 0   1386692 free


# vmstat -i
interrupt  total   rate
irq1: atkbd02536  0
irq14: ata0  8516926  9
irq16: ehci0  2233740154   2585
irq23: ehci1 2594742  3
cpu0:timer3562265448   4122
irq256: re0   2291967374   2652
cpu1:timer3562481709   4123
cpu3:timer3479157511   4026
cpu2:timer3555645238   4115
Total18696371638  21638

thank you.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: IPFW missing feature

2009-04-16 Thread KES
Здравствуйте, Lowell.

Вы писали 16 апреля 2009 г., 15:22:31:

LG> KES  writes:

>>  The tablearg feature provides the ability to use a value, looked up in
>>  the table, as the argument for a rule action, action parameter or rule
>>  option.  This can significantly reduce number of rules in some 
>> configura-
>>  tions.  If two tables are used in a rule, the result of the second (des-
>>  tination) is used.  The tablearg argument can be used with the following
>>  actions: nat, pipe, queue, divert, tee, netgraph, ngtee, fwd, skipto
>>  action parameters: tag, untag, rule options: limit, tagged.
>>
>>
>> Why tablearg cannot be used with setfib?

LG> Because tables are a feature of IPFW, and the FIB isn't.

setfib is also feature of ipfw. see man:

 setfib fibnum
 The packet is tagged so as to use the FIB (routing table) fibnum
 in any subsequent forwarding decisions. Initially this is limited
 to the values  0 through 15. See setfib(8).  Processing continues
 at the next rule.

There is no any difficulties to use 'tablearg' as 'fibnum'

ipfw add 3 setfib 2 all from 192.168.0.0/16 to any in recv 
ipfw add 3 setfib tablearg all from table() to any in recv 

but now this is not mistake to write 'setfib tablearg'. IPFW just replace 
tablearg in rule with 0
It seems like a bug. because of it MUST work in proper way or DO NOT
work at all. IMHO

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: How to check which FIB has a given process

2009-04-16 Thread KES
Здравствуйте, Anton.

Вы писали 16 апреля 2009 г., 15:19:43:

AY> On Wed, 15 Apr 2009 20:04:38 +0300, KES wrote:
K>> Hi, Freebsd-questions.
K>> 
K>> I can set process to have some FIB
K>> setfib X /some/programm
K>> 
K>> How to check which FIB has some process?
K>> 

AY> It is not easy, but possible via kgdb.

AY> under root run:

AY> cd /usr/obj/usr/src/sys/GENERIC
AY> (if you use custom kernel replace GENERIC by kernel name)
AY> make gdbinit
AY> kgdb kernel.debug /dev/mem
AY> (kgdb) ps

AY> find interesting process, than copy proc address (2-nd column)

AY> (kgdb) set $pp = (struct proc*) 0xff000fff3000

AY> And see FIB for this process:

AY> (kgdb) p $pp.p_fibnum
AY> $1 = 0x0


It is really not easy.
I expected something like:
checkfib 
=)

Thank you for answer
-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


IPFW missing feature

2009-04-15 Thread KES
Здравствуйте, Freebsd-questions.

 The tablearg feature provides the ability to use a value, looked up in
 the table, as the argument for a rule action, action parameter or rule
 option.  This can significantly reduce number of rules in some configura-
 tions.  If two tables are used in a rule, the result of the second (des-
 tination) is used.  The tablearg argument can be used with the following
 actions: nat, pipe, queue, divert, tee, netgraph, ngtee, fwd, skipto
 action parameters: tag, untag, rule options: limit, tagged.


Why tablearg cannot be used with setfib?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


IPFW, KERNEL, sysctl: has no effect changing DUMMYNET.io_fast

2009-04-15 Thread KES
Hi, Freebsd-questions.

This change
sysctl net.inet.ip.dummynet.io_fast=1
has no effect for packet flow, bug man says:
Fast mode allows certain packets to bypass dummynet scheduler if packet flow 
does not exceed pipe's bandwidth

flow does not exceed pipe limit, but packet flow latency is affected


ipfw pipe 1 config bw 64kbit/s
ipfw add 1 pipe 1 all from any to any

No any trafic except ping:
ping some.lan.machine

with rules above ping is about 8ms, without them <1ms

Does I understand corrent "Fast mode"
when I ping I do flow less than 64Kbit/s so packet must bypass
scheduler and must have latency <1ms?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


How to check which FIB has a given process

2009-04-15 Thread KES
Hi, Freebsd-questions.

I can set process to have some FIB
setfib X /some/programm

How to check which FIB has some process?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


IPFW: table approvement

2009-04-15 Thread KES
Hi.

Is it right place to post ideas?

If it is lets suggest next approvement

IPFW has 'table' command
each table entry has some 'tablearg'

There are situations when you need each entry has multiple values.
For example:


#NAT
table 1 add 10.0.1.0/24 1
table 1 add 10.0.2.0/24 2

#PIPE
table 2 add 10.0.1.0/24 3
table 2 add 10.0.2.0/24 4

#tag
table 3 add 10.0.1.0/24 7
table 4 add 10.0.2.0/24 9

ipfw add XXX tag  tablearg all from table(1) to any
ipfw add XXX nat  tablearg all from table(2) to any
ipfw add XXX pipe tablearg all from table(3) to any


I will be best if it can be optimized as next:
table 1 add 10.0.1.0/24 1 3 7
table 1 add 10.0.2.0/24 2 4 9

#user can name columns as:
table 1 columns nat pipe tag

#1. compatibility: first column can be used as usual
ipfw add XXX tag tablearg all from table(1) to any

#2. you may use value from second column of table entry as:
ipfw add XXX nat tablearg(2) all from table(1) to any

#3. you may use value by name
ipfw add XXX pipe tablearg(pipe) all from table(1) to any

#4. finally it will be good to apply multiple commands to one rule:
ipfw add XXX pipe tablearg(pipe) nat tablearg(2) tag tablearg all from table(1) 
to any

What do you think?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[5]: FreeBSD 7.1, routing tables, rc.conf

2009-03-17 Thread KES
Здравствуйте, KES.

K> As I said it be handy to have:
K> apache_enable="YES"
K> apache_fib="1"

K> named_enable="YES"
K> named_fib="2"
K> etc
patch to allow to setup fib for service running from rc.conf


/etc/rc.conf

# setup the full command to run
#
+++_fib=
+++if [ "${name}_fib" ]; then
+++eval _fib=\$${name}_fib
+++_fib="/usr/sbin/setfib $_fib"
+++fi

echo "Starting ${name}."
if [ -n "$_chroot" ]; then
_doit="\
${_nice:+nice -n $_nice }\
chroot ${_user:+-u $_user }${_group:+-g $_group }${_groups:+-G $_groups }\
---$_chroot $command $rc_flags $command_args"
+++$_chroot $_fib $command $rc_flags $command_args"
else
_doit="\
${_chdir:+cd $_chdir && }\
--- $command $rc_flags $command_args"
+++ $_fib $command $rc_flags $command_args"


Вы писали 29 января 2009 г., 19:02:45:

K> Здравствуйте, Arjan.

K> Yes, it is possible to use 'setfib'. As I write:
AvdO>> Then I do manually:
AvdO>> setfib 0 route add default 
AvdO>> setfib 1 route add default 

K> Also to run services, I can edit /etc/rc.d scripts, but this is ugly,
K> very ugly.

K> As I said it be handy to have:
K> apache_enable="YES"
K> apache_fib="1"

K> named_enable="YES"
K> named_fib="2"
K> etc


K> Вы писали 29 января 2009 г., 18:33:53:

AvdO>> Funny, I wasn't aware of this new option in 7.1, hence my
AvdO>> question. From what I see some stuff is already modified to use
AvdO>> this new option (like ipfw), but others require the setfib
AvdO>> utility. I'm not sure if you can add routes directly from
AvdO>> rc.conf, but why not try 'setfib - route add xxx' ?

AvdO>> (http://www.freebsd.org/releases/7.1R/errata.html)

AvdO>> -- 

AvdO>> -Original Message-
AvdO>> From: KES [mailto:kes-...@yandex.ru] 
AvdO>> Sent: donderdag 29 januari 2009 17:26
AvdO>> To: Arjan van der Oest
AvdO>> Cc: questi...@freebsd.org
AvdO>> Subject: Re[2]: FreeBSD 7.1, routing tables, rc.conf

AvdO>> Здравствуйте, Arjan.

AvdO>> I mean:
AvdO>> options ROUTETABLES=2


AvdO>> Then I do manually:
AvdO>> setfib 0 route add default 
AvdO>> setfib 1 route add default 

AvdO>> in rc.conf I can do for FIB0:
AvdO>> defaultrouter=""

AvdO>> How to do same thing for other routing tables?

AvdO>> I exepct next feature to exists:
AvdO>> defaultrouter_fib1=""



AvdO>>> What exactly do you mean with two routing tables?

AvdO>>> -- 
AvdO>>> Met vriendelijke groet / Kind Regards,
AvdO>>> Worldmax Operations B.V.
AvdO>>>  
AvdO>>> Arjan van der Oest
AvdO>>> Network Design Engineer
AvdO>>>  
AvdO>>> T.: +31 (0) 88 001 7912
AvdO>>> F.: +31 (0) 88 001 7902
AvdO>>> M.: +31 (0) 6 10 62 58 46
AvdO>>>  
AvdO>>> GPG: https://keyserver.pgp.com/ (Key ID: 07286F78) fingerprint:
AvdO>>> 2E9F 3AE2 0A8B 7579 75A9  169F 5D9E 5312 0728 6F78
AvdO>>> -Original Message-
AvdO>>> From: owner-freebsd-questi...@freebsd.org
AvdO>>> [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of KES
AvdO>>> Sent: donderdag 29 januari 2009 17:00
AvdO>>> To: questi...@freebsd.org
AvdO>>> Subject: FreeBSD 7.1, routing tables, rc.conf

AvdO>>> Здравствуйте, Questions.

AvdO>>> I have two routing tables.
AvdO>>> How to setup two default routes for each routing table in rc.conf?










-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


WIFI duplex link

2009-02-11 Thread KES
Здравствуйте, Freebsd-questions.

Is there analog in FreeBSD like Microtic Nstreme?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[4]: FreeBSD 7.1, routing tables, rc.conf

2009-01-29 Thread KES
Здравствуйте, Arjan.

Yes, it is possible to use 'setfib'. As I write:
AvdO> Then I do manually:
AvdO> setfib 0 route add default 
AvdO> setfib 1 route add default 

Also to run services, I can edit /etc/rc.d scripts, but this is ugly,
very ugly.

As I said it be handy to have:
apache_enable="YES"
apache_fib="1"

named_enable="YES"
named_fib="2"
etc


Вы писали 29 января 2009 г., 18:33:53:

AvdO> Funny, I wasn't aware of this new option in 7.1, hence my
AvdO> question. From what I see some stuff is already modified to use
AvdO> this new option (like ipfw), but others require the setfib
AvdO> utility. I'm not sure if you can add routes directly from
AvdO> rc.conf, but why not try 'setfib - route add xxx' ?

AvdO> (http://www.freebsd.org/releases/7.1R/errata.html)

AvdO> -- 

AvdO> -Original Message-
AvdO> From: KES [mailto:kes-...@yandex.ru] 
AvdO> Sent: donderdag 29 januari 2009 17:26
AvdO> To: Arjan van der Oest
AvdO> Cc: questi...@freebsd.org
AvdO> Subject: Re[2]: FreeBSD 7.1, routing tables, rc.conf

AvdO> Здравствуйте, Arjan.

AvdO> I mean:
AvdO> options ROUTETABLES=2


AvdO> Then I do manually:
AvdO> setfib 0 route add default 
AvdO> setfib 1 route add default 

AvdO> in rc.conf I can do for FIB0:
AvdO> defaultrouter=""

AvdO> How to do same thing for other routing tables?

AvdO> I exepct next feature to exists:
AvdO> defaultrouter_fib1=""



AvdO>> What exactly do you mean with two routing tables?

AvdO>> -- 
AvdO>> Met vriendelijke groet / Kind Regards,
AvdO>> Worldmax Operations B.V.
AvdO>>  
AvdO>> Arjan van der Oest
AvdO>> Network Design Engineer
AvdO>>  
AvdO>> T.: +31 (0) 88 001 7912
AvdO>> F.: +31 (0) 88 001 7902
AvdO>> M.: +31 (0) 6 10 62 58 46
AvdO>>  
AvdO>> GPG: https://keyserver.pgp.com/ (Key ID: 07286F78) fingerprint:
AvdO>> 2E9F 3AE2 0A8B 7579 75A9  169F 5D9E 5312 0728 6F78
AvdO>> -Original Message-
AvdO>> From: owner-freebsd-questi...@freebsd.org
AvdO>> [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of KES
AvdO>> Sent: donderdag 29 januari 2009 17:00
AvdO>> To: questi...@freebsd.org
AvdO>> Subject: FreeBSD 7.1, routing tables, rc.conf

AvdO>> Здравствуйте, Questions.

AvdO>> I have two routing tables.
AvdO>> How to setup two default routes for each routing table in rc.conf?







-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[3]: Can not set up two ADSL link to provider

2009-01-29 Thread KES
Здравствуйте, KES.

Вы писали 27 января 2009 г., 21:23:57:

K> Здравствуйте, Chuck.

K> Вы писали 27 января 2009 г., 1:57:10:

CS>> On Jan 26, 2009, at 3:34 PM, KES wrote:
>>> I can not setup two ADSL PPPoE Links to same provider.
>>> Because of imposibility to setup route for second connection
>>> First connection gets:
>>> ng0: flags=88d1  
>>> metric 0 mtu 1492
>>>inet 92.113.94.215 --> 195.5.5.203 netmask 0x
>>>
>>> Second can not be established because of:
>>> Jan 27 01:27:55 kes mpd: [UKR_B4] IFACE: Add address  
>>> 92.113.94.249/32->195.5.5.203 to ng1
>>> Jan 27 01:27:55 kes mpd: [UKR_B4] IFACE: Adding IPv4 address to ng1  
>>> failed: File exists

CS>> You should talk to your network provider and ask them whether they  
CS>> want you to do multilink PPP or IEEE 802.3ad link aggregation.  Either
CS>> way, the bonding of the two connections should give you a single  
CS>> virtual network interface (tunX for the first, probably, and laggX in
CS>> the second case) which has only a single route.

CS>> For example:
CS>> 
http://www.juniper.net/techpubs/software/erx/junose80/swconfig-physical/html/ethernet-config14.html

CS>> ...talks about "After you configure the LAG bundle, you can route IP  
CS>> traffic over it, create a VLAN over it, or route PPPoE traffic over it."

K> I do not want to aggregate links. I want use them as standalone
K> I had two servers, two lans and two ADSLs. Now I have one server, four
K> NICs: first LAN1, second LAN2, third ADSL1, forth ADSL2
K> I want to route LAN1 through ADSL1, LAN2 through ADSL2. LAN1/LAN2 must
K> not interact with each other. For each LAN I use its own FIB (routing
K> table).
K> Only one problem: I can not run setup two PPPoE link if for second
K> link is leased same gateway as for first

K> So, is it possible to workaround this problem?


In any case I is impossible to talk to my provider. It will change
nothing. This is country wide provider. They said: "if you can not
configure that on one machine then you must use two.. "

Also NOTICE: when I setup second PPPoE connection I setfib 1 (second
routing table). So route must be added to second routing table and
must not conflict with first, but it does


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[3]: FreeBSD 7.1, routing tables, rc.conf

2009-01-29 Thread KES
Здравствуйте, KES.

far more. How to run services in order they use some routing tables?

for example: I want that bind use FIB1 instead of FIB0
By default all programms use FIB0.

It will be handy If it will possible to configure that in rc.conf like
this:
apache_enable="YES"
apache_fib="1"

named_enable="YES"
named_fib="2"

No matter why I need this.
If FreeBSD has such major feature as multiple routing tables than this
must be configureable. In this case, I think, in rc.conf


Вы писали 29 января 2009 г., 18:25:53:

K> Здравствуйте, Arjan.

K> I mean:
K> options ROUTETABLES=2


K> Then I do manually:
K> setfib 0 route add default 
K> setfib 1 route add default 

K> in rc.conf I can do for FIB0:
K> defaultrouter=""

K> How to do same thing for other routing tables?

K> I exepct next feature to exists:
K> defaultrouter_fib1=""



AvdO>> What exactly do you mean with two routing tables?

AvdO>> -- 
AvdO>> Met vriendelijke groet / Kind Regards,
AvdO>> Worldmax Operations B.V.
AvdO>>  
AvdO>> Arjan van der Oest
AvdO>> Network Design Engineer
AvdO>>  
AvdO>> T.: +31 (0) 88 001 7912
AvdO>> F.: +31 (0) 88 001 7902
AvdO>> M.: +31 (0) 6 10 62 58 46
AvdO>>  
AvdO>> GPG: https://keyserver.pgp.com/ (Key ID: 07286F78) fingerprint:
AvdO>> 2E9F 3AE2 0A8B 7579 75A9  169F 5D9E 5312 0728 6F78
AvdO>> -Original Message-
AvdO>> From: owner-freebsd-questi...@freebsd.org
AvdO>> [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of KES
AvdO>> Sent: donderdag 29 januari 2009 17:00
AvdO>> To: questi...@freebsd.org
AvdO>> Subject: FreeBSD 7.1, routing tables, rc.conf

AvdO>> Здравствуйте, Questions.

AvdO>> I have two routing tables.
AvdO>> How to setup two default routes for each routing table in rc.conf?







-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: FreeBSD 7.1, routing tables, rc.conf

2009-01-29 Thread KES
Здравствуйте, Arjan.

I mean:
options ROUTETABLES=2


Then I do manually:
setfib 0 route add default 
setfib 1 route add default 

in rc.conf I can do for FIB0:
defaultrouter=""

How to do same thing for other routing tables?

I exepct next feature to exists:
defaultrouter_fib1=""



AvdO> What exactly do you mean with two routing tables?

AvdO> -- 
AvdO> Met vriendelijke groet / Kind Regards,
AvdO> Worldmax Operations B.V.
AvdO>  
AvdO> Arjan van der Oest
AvdO> Network Design Engineer
AvdO>  
AvdO> T.: +31 (0) 88 001 7912
AvdO> F.: +31 (0) 88 001 7902
AvdO> M.: +31 (0) 6 10 62 58 46
AvdO>  
AvdO> GPG: https://keyserver.pgp.com/ (Key ID: 07286F78) fingerprint:
AvdO> 2E9F 3AE2 0A8B 7579 75A9  169F 5D9E 5312 0728 6F78
AvdO> -Original Message-
AvdO> From: owner-freebsd-questi...@freebsd.org
AvdO> [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of KES
AvdO> Sent: donderdag 29 januari 2009 17:00
AvdO> To: questi...@freebsd.org
AvdO> Subject: FreeBSD 7.1, routing tables, rc.conf

AvdO> Здравствуйте, Questions.

AvdO> I have two routing tables.
AvdO> How to setup two default routes for each routing table in rc.conf?




-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


FreeBSD 7.1, routing tables, rc.conf

2009-01-29 Thread KES
Здравствуйте, Questions.

I have two routing tables.
How to setup two default routes for each routing table in rc.conf?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[3]: IPFW DUMMYNET: Several pipes after each other

2009-01-28 Thread KES
Здравствуйте, Ian.

Вы писали 28 января 2009 г., 18:01:45:

IS> On Wed, 28 Jan 2009, KES wrote:

 >> , Ian.
 >> 
 >> May be this will be usefull for you

IS> Yes, but I need to read it more times :)  Nicely answers the question 
IS> about stats per flow/queue anyway, not too hard to parse for logging.

 >> #1. ping -D -S 10.10.16.16 -s 1472 -i 0.01 10.0.16.1
 >> #2. ping -S 10.10.16.17 10.0.16.1

IS> Results suggest that #1 was -S 10.10.16.19 ?  A script running the same
IS> number of #2 before killing #1 (or such) would make comparisons between
IS> different runs easier to follow maybe?

IS> Thanks, lots of useful info; hoping to try some weighted queueing soon.

Yes, you are right -S 10.10.16.19.
both ping are run simulteneously

I have experimented with pipes after pipes. With dummy it is possible
to do next: put two flows to pipe 512Kbit, pipe will be devided by
equal parts: 256. in case the only one flow is active it will be 320Kbit

pipe 1 bw 512kbit
queue 1 pipe 1
pipe 2 bw 320kbit

ipfw add 1 pipe 2 all from any to any
ipfw add 2 queue 1 all from any to any
First of all packets will be piped to 320Kbit/s then they will be
queued to 512Kbit. Because of flow of 320 is less then 512kbit packets
will leave queue with speed of 320. In case two flows both will be
piped to 320 kbit in sum this will be 640kbit, Because of queue bw is
512kbit some packets will be droped. This will down each flow speed to 256
NOTICE:
A) you must create its own pipe for each flow so you must use mask 0x.
I use:  pipe 1 config bw 512k mask src-ip 0x gred 0.002/10/30/0.1
pipe 2 config bw 320k mask src-ip 0x gred 0.002/10/30/0.1
B) you must put all flows to one queue so they share available bw so
you must use mask 0x
I use: queue 1 config pipe 1 mask src-ip 0x gred 0.002/10/30/0.1

keep in mind IPFW.man:
 In practice, pipes can be used to set hard limits to the bandwidth that a
 flow can use, whereas queues can be used to determine how different flow
 share the available bandwidth.

So when you give user some bandwidth to user you must put its flow to pipe
If users will share some bandwidth then put their flows to queue



Suggestion: What queue inherit from pipe?
It seems queue inherit only bandwidth parameter from pipe. If so then
it is boring to create useless pipe to inherit only bw parameter. It
will be handy directly write this parameter in queue and remove
DEPRECATED (I think so) 'pipe' opts from queue. In any case this is
"black box" how pipe is coupled with queue. This is unclear section in
man.



Also I notice next BUG:
 There are two modes of dummynet operation: normal and fast.  Normal mode
 tries to emulate real link: dummynet scheduler ensures packet will not
 leave pipe faster than it would be on real link with given bandwidth.
 Fast mode allows certain packets to bypass dummynet scheduler (if packet
 flow does not exceed pipe's bandwidth). Thus fast mode requires less cpu
 cycles per packet (in average) but packet latency can be significantly
 lower comparing to real link with same bandwidth. Default is normal mode,
 fast mode can be enabled by setting net.inet.ip.dummynet.io_fast
 sysctl(8) variable to non-zero value.


kes# ping 10.10.16.18
PING 10.10.16.18 (10.10.16.18): 56 data bytes
64 bytes from 10.10.16.18: icmp_seq=0 ttl=128 time=18.441 ms
64 bytes from 10.10.16.18: icmp_seq=1 ttl=128 time=11.501 ms
64 bytes from 10.10.16.18: icmp_seq=2 ttl=128 time=11.516 ms
64 bytes from 10.10.16.18: icmp_seq=3 ttl=128 time=11.557 ms
64 bytes from 10.10.16.18: icmp_seq=4 ttl=128 time=11.534 ms
^C
--- 10.10.16.18 ping statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 11.501/12.910/18.441/2.766 ms
#ipfw pipe 1 show
1:  65.536 Kbit/s0 ms5 sl. 12 queues (64 buckets)
  GRED w_q 0.001999 min_th 10 max_th 30 max_p 0.01
mask: 0x00 0x/0x -> 0x/0x
BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
kes# ipfw add 1 pipe 1 all from 10.10.16.1 to 10.10.16.18
1 pipe 1 ip from 10.10.16.1 to 10.10.16.18
kes# ping -s 1472 10.10.16.18
PING 10.10.16.18 (10.10.16.18): 1472 data bytes
1480 bytes from 10.10.16.18: icmp_seq=0 ttl=128 time=192.354 ms
1480 bytes from 10.10.16.18: icmp_seq=1 ttl=128 time=184.393 ms
1480 bytes from 10.10.16.18: icmp_seq=2 ttl=128 time=184.614 ms
1480 bytes from 10.10.16.18: icmp_seq=3 ttl=128 time=184.217 ms
1480 bytes from 10.10.16.18: icmp_seq=4 ttl=128 time=184.402 ms
^C
--- 10.10.16.18 ping statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 184.217/185.996/192.354/3.181 ms

As I describe earlier:
bw capability of this pipe is 8Kbytes/sec. It means 8Kb will be
trasfered with timeout of 1sec.
1500bytes will be trasfered with timeout: 1500/

Re[2]: IPFW DUMMYNET: Several pipes after each other

2009-01-28 Thread KES
cmp out xmit nfe0
#c add 11 queue 2 proto icmp in recv nfe0
#c queue 1 config mask src-ip 0x gred 0.002/10/30/0.1
#c queue 2 config mask dst-ip 0x gred 0.002/10/30/0.1





###   ---   ###   ---   ###   ---   ###   ---   ###   ---   ###   ---   
#   888
###   ---   ###   ---   ###   ---   ###   ---   ###   ---   ###   ---   
#Put flows to different queues
#1 does not affect 2.
#c add 10 queue 1 proto icmp out xmit nfe0
#c add 11 queue 2 proto icmp in recv nfe0
#c pipe 1 config mask src-ip 0x gred 0.002/10/30/0.1
#c pipe 2 config mask dst-ip 0x gred 0.002/10/30/0.1
#c queue 1 config pipe 1 mask src-ip 0x gred 0.002/10/30/0.1
#c queue 2 config pipe 2 mask dst-ip 0x gred 0.002/10/30/0.1

#1: unlimited0 ms   50 sl. 0 queues (64 buckets)
#  GRED w_q 0.001999 min_th 10 max_th 30 max_p 0.01
#2: unlimited0 ms   50 sl. 0 queues (64 buckets)
#  GRED w_q 0.001999 min_th 10 max_th 30 max_p 0.01
#q1: weight 1 pipe 1   50 sl. 2 queues (64 buckets)
#  GRED w_q 0.001999 min_th 10 max_th 30 max_p 0.01
#mask: 0x00 0x/0x -> 0x/0x
#BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
# 40 ip   10.10.16.17/0 0.0.0.0/0   39 3276  00   0
# 44 ip   10.10.16.19/0 0.0.0.0/0 3805  5707500  00   0
#q2: weight 1 pipe 2   50 sl. 2 queues (64 buckets)
#  GRED w_q 0.001999 min_th 10 max_th 30 max_p 0.01
#mask: 0x00 0x/0x -> 0x/0x
#BKT Prot ___Source IP/port Dest. IP/port Tot_pkt/bytes Pkt/Byte Drp
#  5 ip   0.0.0.0/0 10.10.16.17/0   27 2268  00   0
#  7 ip   0.0.0.0/0 10.10.16.19/0 3198  4797000  00   0




###   ---   ###   ---   ###   ---   ###   ---   ###   ---   ###   ---   
#   999
###   ---   ###   ---   ###   ---   ###   ---   ###   ---   ###   ---   
#Put flows to same queues
#1 does not affect 2. EXPECTED: 1 affect 2.
#Thoughts: 2 is not affected because of capability of device nfe0
#c add 10 queue 1 proto icmp out xmit nfe0
#c add 11 queue 2 proto icmp in recv nfe0
#c pipe 1 config mask src-ip 0x gred 0.002/10/30/0.1
#c pipe 2 config mask dst-ip 0x gred 0.002/10/30/0.1
#c queue 1 config pipe 1 mask src-ip 0x gred 0.002/10/30/0.1
#c queue 2 config pipe 2 mask dst-ip 0x00000000 gred 0.002/10/30/0.1







-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: Can not set up two ADSL link to provider

2009-01-27 Thread KES
Здравствуйте, Chuck.

Вы писали 27 января 2009 г., 1:57:10:

CS> On Jan 26, 2009, at 3:34 PM, KES wrote:
>> I can not setup two ADSL PPPoE Links to same provider.
>> Because of imposibility to setup route for second connection
>> First connection gets:
>> ng0: flags=88d1  
>> metric 0 mtu 1492
>>inet 92.113.94.215 --> 195.5.5.203 netmask 0x
>>
>> Second can not be established because of:
>> Jan 27 01:27:55 kes mpd: [UKR_B4] IFACE: Add address  
>> 92.113.94.249/32->195.5.5.203 to ng1
>> Jan 27 01:27:55 kes mpd: [UKR_B4] IFACE: Adding IPv4 address to ng1  
>> failed: File exists

CS> You should talk to your network provider and ask them whether they  
CS> want you to do multilink PPP or IEEE 802.3ad link aggregation.  Either
CS> way, the bonding of the two connections should give you a single  
CS> virtual network interface (tunX for the first, probably, and laggX in
CS> the second case) which has only a single route.

CS> For example:
CS> 
http://www.juniper.net/techpubs/software/erx/junose80/swconfig-physical/html/ethernet-config14.html

CS> ...talks about "After you configure the LAG bundle, you can route IP  
CS> traffic over it, create a VLAN over it, or route PPPoE traffic over it."

I do not want to aggregate links. I want use them as standalone
I had two servers, two lans and two ADSLs. Now I have one server, four
NICs: first LAN1, second LAN2, third ADSL1, forth ADSL2
I want to route LAN1 through ADSL1, LAN2 through ADSL2. LAN1/LAN2 must
not interact with each other. For each LAN I use its own FIB (routing
table).
Only one problem: I can not run setup two PPPoE link if for second
link is leased same gateway as for first

So, is it possible to workaround this problem?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: IPFW DUMMYNET: Several pipes after each other

2009-01-27 Thread KES
Здравствуйте, Sebastian.

Вы писали 26 января 2009 г., 12:16:18:

SM> Ian Smith wrote:
SM> On Thu, 22 Jan 2009 08:10:09 +0100 (CET)
>>  >
>>  > So far I've got those rules:
>>  >
>>  > in_if="em0"
>>  > out_if="em1"
>>  > management_if="em2"
>>  > in_ip="100.100.100.1"
>>  > out_ip="200.200.200.1"
>>  > management_ip="172.16.0.201"
>>  > client1_subnet="192.168.5.0/26"
>>  > client2_subnet="192.168.6.0/26"
>>  > server_subnet="192.168.7.0/24"
>>  >
>>  > download_bandwidth="6144Kbit/s"
>>  > upload_bandwidth="1024Kbit/s"
>>  > delay="0"
>>  > queue_size="10"
>>
>> 10 slots ie packets is likely too small a queue size at these rates.
>> You want to check the dropped packet stats from 'ipfw pipe show' re
>> that; see the section in ipfw(8) about calculating sizes / delays.
>>

SM> I had a look at the ipfw howto on the freebsd site [1], but I'm not 100%
SM> sure how to choose a "good" value for the queue size.

SM> If I choose the default (50 packets) it means that it takes approx. 100ms
SM> (600kbits / 6144kbits) to fill the queue.
SM> So the question is: Which value to choose for the queue?

>> I suggest using 'in recv' and 'out xmit' rather than via for these, for
>> the sake of clarity.  'in recv' and 'in via' come to the same thing, as
>> only the receive interface is known on inbound packets, but 'out via'
>> applies to packets that were *received* on the specified interface as
>> well as those going out on that interface after routing, which can lead
>> to surprising results sometimes, and being more specific never hurts ..

SM> Thanks for the hint.
SM> I'll change that.

>>  > But when I have a look at the pipes with 'ipfw show' I can only see
>>  > packets go through the pipe 50 and nothing goes through the other pipes
>>  > (which makes sense actually since IPFW work that way?).
>>
>> IPFW works that way if you (likely) have net.inet.ip.fw.one_pass=1 .. so
>> that packets exiting from pipes aren't seen by the firewall again.  If
>> you set one_pass=0, packets are reinjected into the firewall at the rule
>> following the pipe (or queue) action, which is what you want to do here.

SM> Actually this is also described in the manpage of ipfw(8).
SM> Shame on me ;-)

>> And you'll surely need a much larger queue for this pipe, at 100Mbit/s.
>>

SM> As already asked above:

SM> How do I know the queue is large or small enough for my needs?

How calculate queue length for your link speed:
suggest link speed is 64kbit/s = 8KB/s
50pkts in queue is 75000bytes (50*1500) ~73KB
73KB/8KB = 9sec

so for bandwidth 64kbit you will have timeout 9000ms if queue is full.
For example you want to have only 1000ms timeouts (ping)
1 * 8KB = 8KB. This max information transmited before queue will
overflow for given timeout.
8Kb/1500= 5 -- value for your queue size

For links with speed > 512Kbit your queue size 50
I use next values for queues:

c pipe 1 config bw 65536bit/s queue 5 mask src-ip 0x gred 
0.002/10/30/0.1
c pipe 2 config bw 65536bit/s queue 5 mask dst-ip 0x gred 
0.002/10/30/0.1
c queue 1 config pipe 1 queue 5 mask src-ip 0x gred 0.002/10/30/0.1
c queue 2 config pipe 2 queue 5 mask dst-ip 0x gred 0.002/10/30/0.1


c pipe 3 config bw 131072bit/s mask src-ip 0x gred 0.002/10/30/0.1
c pipe 4 config bw 131072bit/s mask dst-ip 0x gred 0.002/10/30/0.1
c queue 3 config pipe 3 queue 10 mask src-ip 0x gred 0.002/10/30/0.1
c queue 4 config pipe 4 queue 10 mask dst-ip 0x gred 0.002/10/30/0.1

c pipe 5 config bw 262144bit/s mask src-ip 0x gred 0.002/10/30/0.1
c pipe 6 config bw 262144bit/s mask dst-ip 0x gred 0.002/10/30/0.1
c queue 5 config pipe 5 queue 20 mask src-ip 0x gred 0.002/10/30/0.1
c queue 6 config pipe 6 queue 20 mask dst-ip 0x gred 0.002/10/30/0.1

c pipe 7 config bw 524288bit/s mask src-ip 0x gred 0.002/10/30/0.1
c pipe 8 config bw 524288bit/s mask dst-ip 0x gred 0.002/10/30/0.1
c queue 7 config pipe 7 queue 40 mask src-ip 0x gred 0.002/10/30/0.1
c queue 8 config pipe 8 queue 40 mask dst-ip 0x gred 0.002/10/30/0.1

c pipe 9 config bw 1048576bit/s mask src-ip 0x gred 0.002/10/30/0.1
c pipe 10 config bw 1048576bit/s mask dst-ip 0x gred 0.002/10/30/0.1
c queue 9 config pipe 9 queue 50 mask src-ip 0x gred 0.002/10/30/0.1
c queue 10 config pipe 10 queue 50 mask dst-ip 0x gred 0.002/10/30/0.1

c pipe 11 config bw 2097152bit/s mask src-ip 0x gred 0.002/10/30/0.1
c pipe 12 config bw 2097152bit/s mask dst-ip 0x gred 0.002/10/30/0.1
c queue 11 config pipe 11 queue 50 mask src-ip 0x gred 0.002/10/30/0.1
c queue 12 config pipe 12 queue 50 mask dst-ip 0x gred 0.002/10/30/0.1

WARNING!!! you must use own queue/pipe for in/out traffic. In case you put in
and out traffic to one pipe/queue you will simulate asyncrounous
link!!!



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd

Can not set up two ADSL link to provider

2009-01-26 Thread KES
Здравствуйте, Freebsd-questions.

I can not setup two ADSL PPPoE Links to same provider.
Because of imposibility to setup route for second connection
First connection gets:
ng0: flags=88d1 metric 0 mtu 
1492
inet 92.113.94.215 --> 195.5.5.203 netmask 0x

Second can not be established because of:
Jan 27 01:27:55 kes mpd: [UKR_B4] IFACE: Add address 
92.113.94.249/32->195.5.5.203 to ng1
Jan 27 01:27:55 kes mpd: [UKR_B4] IFACE: Adding IPv4 address to ng1 failed: 
File exists

My suggestion is that that FreeBSD can not establish two ptp links
with same gateway, cat it?


please help to resolve problem


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: 'top' shows wrong CPU usage

2009-01-21 Thread KES
Здравствуйте, Lowell.

Вы писали 21 января 2009 г., 23:01:30:

LG> KES  writes:

>> top shows often nonsense in CPU usage of a process, but totals are OK
>> and it seems that WCPU and CPU has no differences in results

LG> Why do you think it's nonsense?  It's averaged over a different time
LG> period than the "CPU:" line in the header, so I wouldn't expect it to
LG> match...

When I gzip some big files I see that 0% idle, but I can not obtain
from process list which process get all CPU.
I top -S for WCPU and top -S -C for CPU.
In both cases results are *useless*!

>> top -S
>> last pid: 66182;  load averages:  2.51,  2.15,  2.03 up 
>> 10+23:40:14  22:05:41
>> 798 processes: 6 running, 772 sleeping, 1 zombie, 18 waiting, 1 lock
>> CPU:  4.4% user,  0.0% nice, 14.8% system, 16.7% interrupt, 64.0% idle
>> Mem: 264M Active, 60M Inact, 147M Wired, 6968K Cache, 60M Buf, 9888K Free
>> Swap: 2048M Total, 1903M Used, 145M Free, 92% Inuse
>>
>>   PID USERNAMETHR PRI NICE   SIZERES STATETIME   WCPU COMMAND
>>11 root  1 171 ki31 0K 8K RUN104.1H 88.48% idle: cpu0
>> 66178 firebird  1  490 23120K  5828K select   0:00  1.37% 
>> fb_inet_server
>> 66159 firebird  1  480 23120K  5760K select   0:01  1.17% 
>> fb_inet_server
>>  5156 root  1  440  9024K   544K select  57:39  0.68% snmpd
>> 66182 root  1  440  4556K  2608K RUN  0:00  0.68% top
>> 66147 root  1   80  3124K   840K nanslp   0:00  0.59% monitord
>> 66138 firebird  1  440 23120K  5736K select   0:01  0.49% 
>> fb_inet_server
>> 75745 www   1  440 24628K  9500K select   5:05  0.29% python2.5
>> 66180 firebird  1  460 23120K  5852K select   0:00  0.10% 
>> fb_inet_server
>>
>>
>> #top -S -C
>> last pid: 66209;  load averages:  2.13,  2.10,  2.02 up 
>> 10+23:41:07  22:06:34
>> 814 processes: 6 running, 788 sleeping, 1 zombie, 18 waiting, 1 lock
>> CPU:  9.3% user,  0.0% nice, 13.4% system, 12.8% interrupt, 64.5% idle
>> Mem: 269M Active, 56M Inact, 148M Wired, 12M Cache, 60M Buf, 3700K Free
>> Swap: 2048M Total, 1903M Used, 145M Free, 92% Inuse
>>
>>   PID USERNAMETHR PRI NICE   SIZERES STATETIMECPU COMMAND
>>11 root  1 171 ki31 0K 8K RUN104.1H 92.29% idle: cpu0
>> 66138 firebird  1  490 23120K  5556K select   0:01  1.46% 
>> fb_inet_server
>> 66180 firebird  1  440 23120K  5612K select   0:01  0.59% 
>> fb_inet_server
>> 66209 root  1  440  4556K  2556K RUN  0:00  0.59% top
>> 66179 firebird  1  440 23120K  5624K select   0:01  0.49% 
>> fb_inet_server
>>  5156 root  1  440  9024K   544K select  57:39  0.39% snmpd
>> 66147 root  1   80  3124K   840K nanslp   0:01  0.39% monitord
>> 66178 firebird  1  440 23120K  5584K select   0:01  0.20% 
>> fb_inet_server
>>12 root  1 -44- 0K 8K WAIT   126.8H  0.00% swi1: net
>>42 root  1 -68- 0K 8K -  219:53  0.00% dummynet




-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


'top' shows wrong CPU usage

2009-01-21 Thread KES
Hello, Freebsd-questions.

top shows often nonsense in CPU usage of a process, but totals are OK
and it seems that WCPU and CPU has no differences in results

top -S
last pid: 66182;  load averages:  2.51,  2.15,  2.03 up 10+23:40:14 
 22:05:41
798 processes: 6 running, 772 sleeping, 1 zombie, 18 waiting, 1 lock
CPU:  4.4% user,  0.0% nice, 14.8% system, 16.7% interrupt, 64.0% idle
Mem: 264M Active, 60M Inact, 147M Wired, 6968K Cache, 60M Buf, 9888K Free
Swap: 2048M Total, 1903M Used, 145M Free, 92% Inuse

  PID USERNAMETHR PRI NICE   SIZERES STATETIME   WCPU COMMAND
   11 root  1 171 ki31 0K 8K RUN104.1H 88.48% idle: cpu0
66178 firebird  1  490 23120K  5828K select   0:00  1.37% fb_inet_server
66159 firebird  1  480 23120K  5760K select   0:01  1.17% fb_inet_server
 5156 root  1  440  9024K   544K select  57:39  0.68% snmpd
66182 root  1  440  4556K  2608K RUN  0:00  0.68% top
66147 root  1   80  3124K   840K nanslp   0:00  0.59% monitord
66138 firebird  1  440 23120K  5736K select   0:01  0.49% fb_inet_server
75745 www   1  440 24628K  9500K select   5:05  0.29% python2.5
66180 firebird  1  460 23120K  5852K select   0:00  0.10% fb_inet_server


#top -S -C
last pid: 66209;  load averages:  2.13,  2.10,  2.02 up 10+23:41:07 
 22:06:34
814 processes: 6 running, 788 sleeping, 1 zombie, 18 waiting, 1 lock
CPU:  9.3% user,  0.0% nice, 13.4% system, 12.8% interrupt, 64.5% idle
Mem: 269M Active, 56M Inact, 148M Wired, 12M Cache, 60M Buf, 3700K Free
Swap: 2048M Total, 1903M Used, 145M Free, 92% Inuse

  PID USERNAMETHR PRI NICE   SIZERES STATETIMECPU COMMAND
   11 root  1 171 ki31 0K 8K RUN104.1H 92.29% idle: cpu0
66138 firebird  1  490 23120K  5556K select   0:01  1.46% fb_inet_server
66180 firebird  1  440 23120K  5612K select   0:01  0.59% fb_inet_server
66209 root  1  440  4556K  2556K RUN  0:00  0.59% top
66179 firebird  1  440 23120K  5624K select   0:01  0.49% fb_inet_server
 5156 root  1  440  9024K   544K select  57:39  0.39% snmpd
66147 root  1   80  3124K   840K nanslp   0:01  0.39% monitord
66178 firebird  1  440 23120K  5584K select   0:01  0.20% fb_inet_server
   12 root  1 -44- 0K 8K WAIT   126.8H  0.00% swi1: net
   42 root  1 -68- 0K 8K -  219:53  0.00% dummynet

-- 
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


swap_pager_getswapspace(7): failed

2009-01-19 Thread KES
Здравствуйте, Questions.

Jan 19 17:00:01 kes kernel: swap_pager_getswapspace(7): failed
Jan 19 17:00:01 kes kernel: swap_pager_getswapspace(16): failed
Jan 19 17:00:01 kes kernel: swap_pager_getswapspace(16): failed
Jan 19 17:00:01 kes kernel: swap_pager_getswapspace(4): failed


How to detect which process "eat" all swap space?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


BUG or FEATURE

2009-01-16 Thread KES
Здравствуйте, Questions.

I have two routing tables, three LAN: one internal, two external.
I have connected VIA VPN to server through internal LAN.
if in firewall I add:
setfib 1 all from internal.lan.ip to any

The packet inside VPN tunnel is marked to have fib 1 and will leave router 
acording routing table 2 (fib 1)

If client IP is 10.0.0.2 and router IP is 10.0.0.1 and LAN interface is rl2
If VPN interface on router is ng0 and framed IP for VPN client is 192.168.0.2

it seems that
setfib 1 all from internal.lan.ip to any in recv rl2
is equivalent to
setfib 1 all from 192.168.0.2 to any in recv ng0

Is this feature or bug that packet inside tunnel is also marked to have same 
fib as tunnel/transport packet has?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


kernel: WARNING

2009-01-10 Thread KES
Здравствуйте, Questions.

Jan 10 22:26:13 kes kernel: WARNING: attempt to net_add_domain(netgraph) after 
domainfinalize()

Does this messages harmfull or not? How to solve this warning?


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: Best torrent client/server available for FreeBSD?

2009-01-10 Thread KES
Здравствуйте, Justin.

Вы писали 8 января 2009 г., 5:54:14:

>> I have found myself to like rtorrent, which is a very powerful console
>> torrent client.

JJ> I've been using transmission-daemon recently and I'm getting
JJ> comfortable with it. I like the fact that it can be controlled via a
JJ> web browser. Can be controlled from the CLI with transmission-remote
JJ> too.


I use torrent flux

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: How to do ping really quiet?

2009-01-05 Thread KES
Hello, Frederique.

FR> KES wrote:
>> Hello, Questions.
>> 
>> When I use
>> ping -q ya.ru
>> I get
>> ping: sendto: No route to host
>> 
>> How to make ping really quiet?
>> 


FR> Try:

FR> sh -c 'ping -q ya.ru > /dev/null 2>&1'

man ping
 -q  Quiet output.  Nothing is displayed except the summary lines at
 startup time and when finished.

That is mistake in Doc or in ping.

Thx. This help, but seems ugly. Because of I can miss other maybe
usefull errors ((
ping -q ya.ru  2>/dev/null

Any other suggestions?


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


How to do ping really quiet?

2009-01-05 Thread KES
Hello, Questions.

When I use
ping -q ya.ru
I get
ping: sendto: No route to host

How to make ping really quiet?


 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


tcpdump filter for out/in traffic

2009-01-04 Thread KES
Здравствуйте, Questions.

There will be very usefull to have options for tcpdump to monitor
incomint or outgoing traffic regardless of src/dst IPs or ports or protocol

For example:

kes# tcpdump -n -i rl4 out
EXPECTED: show traffic outgoing on rl4
ACTUAL: tcpdump: syntax error


kes# tcpdump -n -i rl4 in
EXPECTED: show traffic incoming on rl4
ACTUAL: tcpdump: syntax error


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Routing table for service

2009-01-02 Thread KES
Здравствуйте, Questions.

Is there any options to set routing table for service?

For example: rc.conf
named_enable="YES"
named_fib="2"

so it will be run as:
setfib 2 /usr/sbin/named -t /var/named -u bind
instead of
/usr/sbin/named -t /var/named -u bind

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: BUG! Performance loss with dynamic IPFW rules

2008-12-30 Thread KES
Здравствуйте, KES.

Вы писали 30 декабря 2008 г., 22:29:50:

K> Здравствуйте, KES.

K> Вы писали 30 декабря 2008 г., 21:47:40:

K>> Здравствуйте, Questions.


K>>  1 allow all from any to any via rl0
K>>  2 allow all from any to any via rl1

K>>  109 skipto 110 tcp from any to any 80 in recv $iface #split only http 
trafic
K>>  109 skipto 200 all from any to any #do not split all other trafic
K>>  110 check-state
K>>  111 prob 0.5 skipto 131 in recv rl2

K>>  121 skipto 122 keep-state in recv rl2
K>>  123 setfib 0 proto all in recv rl2
K>>  125 skipto 150 proto all in recv rl2

K>>  131 skipto 132 keep-state in recv rl2
K>>  133 setfib 1 proto all in recv rl2
K>>  135 skipto 150 proto all in recv rl2

K>> I am connected on rl1.
K>> INET is rl0, rl1 each 4Mbit/s

K>> When I open many connections I get performance loss:
K>>  1) Web pages are not opened (it seems flow at start goes through rl0
K>>  and then goes rl1. EXPECTED: it flows only through one channel until
K>>  closed)
K>>  2) I get about 2Mbit/s while downloading something


K>>  When I not open many flows I get 8Mbit/s while serfing


K>>  What is problem?



K> Also another interesting behaviour.
K> Packets with FIB 1 are outgoing through rl0 interface, but must out go
K> via rl1. Why?


I resolve problem!!!
I have mpd5 on both interfaces rl0 and rl1.
It starts PPPoE connection with my ISP. mpd5 has FIB 0. and has option
to NAT packets.

When I send packet from rl2 to INET it is:
tcpdump -n -i rl1
22:51:40.917666 IP 192.168.9.80.3113 > 205.188.8.85.5190: P 1:27(26) ack 1461 
win 65535

I add counters for 192.168.9.80 to ipfw
05500711 54217 count ip from any to any out xmit rl1
05510711 54217 count tag 1 ip from 192.168.9.80 to any out xmit rl1
05515  0 0 deny log ip from any to any out xmit rl1 not tagged 1
05890711 54217 allow untag 1 ip from any to any out xmit rl1 tagged 1
05899  0 0 deny log ip from any to any via rl1
05899  0 0 skipto 65000 ip from any to any


Then packet is NATed by mpd (it runned with FIB 0) and out via rl0! instead of 
rl1 =(
I think packet changes its FIB after NATing by process with different FIB
than packet itself =(



look tcpdump.


kes# ifconfig rl0
rl0: flags=88d1 metric 0 mtu 
1492
inet 92.113.11.221 --> 195.5.5.202 netmask 0x
kes# ifconfig rl1
rl1: flags=88d1 metric 0 mtu 
1492
inet 91.124.184.62 --> 195.5.5.209 netmask 0x

tcpdump -n -i rl0
23:00:39.013565 IP 91.124.184.62 > 68.147.56.238: ICMP 91.124.184.62 udp port 
59344 unreachable, length 36
23:00:39.043593 IP 91.124.184.62 > 69.251.246.7: ICMP 91.124.184.62 udp port 
59344 unreachable, length 36
23:00:39.675315 IP 91.124.184.62 > 71.30.187.17: ICMP 91.124.184.62 udp port 
10758 unreachable, length 36
23:00:39.818931 IP 91.124.184.62 > 117.11.167.163: ICMP 91.124.184.62 udp port 
10758 unreachable, length 36
23:00:41.865974 IP 91.124.184.62 > 67.177.215.23: ICMP 91.124.184.62 udp port 
10758 unreachable, length 36
23:00:43.289822 IP 91.124.184.62 > 88.84.178.189: ICMP 91.124.184.62 udp port 
10758 unreachable, length 36


tcpdump -n -i rl1
23:00:39.013133 IP 68.147.56.238.23877 > 91.124.184.62.59344: UDP, length 103
23:00:39.042899 IP 69.251.246.7.46602 > 91.124.184.62.59344: UDP, length 103
23:00:39.675293 IP 71.30.187.17.61710 > 91.124.184.62.10758: UDP, length 103
23:00:39.818910 IP 117.11.167.163.12312 > 91.124.184.62.10758: UDP, length 98
23:00:41.865952 IP 67.177.215.23.24147 > 91.124.184.62.10758: UDP, length 98
23:00:43.289801 IP 88.84.178.189.60799 > 91.124.184.62.10758: UDP, length 101
23:00:43.419409 IP 93.80.208.87.61523 > 91.124.184.62.10758: S 
3219801041:3219801041(0) win 8192 mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Performance loss with dynamic IPFW rules

2008-12-30 Thread KES
Здравствуйте, KES.

Вы писали 30 декабря 2008 г., 21:47:40:

K> Здравствуйте, Questions.


K>  1 allow all from any to any via rl0
K>  2 allow all from any to any via rl1

K>  109 skipto 110 tcp from any to any 80 in recv $iface #split only http trafic
K>  109 skipto 200 all from any to any #do not split all other trafic
K>  110 check-state
K>  111 prob 0.5 skipto 131 in recv rl2

K>  121 skipto 122 keep-state in recv rl2
K>  123 setfib 0 proto all in recv rl2
K>  125 skipto 150 proto all in recv rl2

K>  131 skipto 132 keep-state in recv rl2
K>  133 setfib 1 proto all in recv rl2
K>  135 skipto 150 proto all in recv rl2

K> I am connected on rl1.
K> INET is rl0, rl1 each 4Mbit/s

K> When I open many connections I get performance loss:
K>  1) Web pages are not opened (it seems flow at start goes through rl0
K>  and then goes rl1. EXPECTED: it flows only through one channel until
K>  closed)
K>  2) I get about 2Mbit/s while downloading something


K>  When I not open many flows I get 8Mbit/s while serfing


K>  What is problem?



Also another interesting behaviour.
Packets with FIB 1 are outgoing through rl0 interface, but must out go
via rl1. Why?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Performance loss with dynamic IPFW rules

2008-12-30 Thread KES
Здравствуйте, Questions.


 1 allow all from any to any via rl0
 2 allow all from any to any via rl1

 109 skipto 110 tcp from any to any 80 in recv $iface #split only http trafic
 109 skipto 200 all from any to any #do not split all other trafic
 110 check-state
 111 prob 0.5 skipto 131 in recv rl2

 121 skipto 122 keep-state in recv rl2
 123 setfib 0 proto all in recv rl2
 125 skipto 150 proto all in recv rl2

 131 skipto 132 keep-state in recv rl2
 133 setfib 1 proto all in recv rl2
 135 skipto 150 proto all in recv rl2

I am connected on rl1.
INET is rl0, rl1 each 4Mbit/s

When I open many connections I get performance loss:
 1) Web pages are not opened (it seems flow at start goes through rl0
 and then goes rl1. EXPECTED: it flows only through one channel until
 closed)
 2) I get about 2Mbit/s while downloading something


 When I not open many flows I get 8Mbit/s while serfing


 What is problem?


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: can not start SVNserve

2008-12-27 Thread KES
Здравствуйте, Mel.

Вы писали 25 декабря 2008 г., 20:13:32:

M> On Tuesday 23 December 2008 13:50:59 KES wrote:
>> Здравствуйте, KES.
>>
>> Вы писали 21 декабря 2008 г., 13:49:04:
>>
>> K> Здравствуйте, Mel.
>>
>> K> Вы писали 21 декабря 2008 г., 13:10:47:
>>
>> M>> On Thursday 18 December 2008 09:03:54 KES wrote:
>> >>> Здравствуйте, Mel.
>> >>>
>> >>> Вы писали 18 декабря 2008 г., 9:05:35:
>> >>>
>> >>> M> On Wednesday 17 December 2008 21:02:07 KES wrote:
>> >>> >> Здравствуйте, Mel.
>> >>> >>
>> >>> >> Вы писали 17 декабря 2008 г., 9:11:19:
>> >>> >>
>> >>> >> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>> >>> >> >> Здравствуйте, Polytropon.
>> >>> >> >>
>> >>> >> >> Вы писали 14 декабря 2008 г., 15:11:35:
>> >>> >> >>
>> >>> >> >> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>> >>> >> >>
>> >>> >> >> P>  wrote:
>> >>> >> >> >> > su: Sorry
>> >>> >> >> >> >
>> >>> >> >> >> >
>> >>> >> >> >> > kes# pw user mod svn -s /bin/bash
>> >>> >> >> >> > kes# pw user show svn
>> >>> >> >> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> >>> >> >> >> > kes# /usr/local/etc/rc.d/svnserve start
>> >>> >> >> >> > Starting svnserve.
>> >>> >> >> >> > su: Sorry
>> >>> >> >> >>
>> >>> >> >> >> try to change directory to existent
>> >>> >> >>
>> >>> >> >> P> (1) What's /bin/bash? Check existing shell.
>> >>> >> >>
>> >>> >> >> P> (2) As you said: Check existing directory.
>> >>> >> >>
>> >>> >> >> P> (3) Regarding su, check for wheel group inclusion.
>> >>> >> >>
>> >>> >> >> home# uname -a
>> >>> >> >> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug
>> >>> >> >> 12 02:11:24 EEST 2008
>> >>> >> >> k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386 home# pw
>> >>> >> >> user show svn
>> >>> >> >> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>> >>> >> >>
>> >>> >> >> As you can see on 'home' machine svn user has no valid shell also
>> >>> >> >> it has not valid home directory and it is not included into wheel
>> >>> >> >> group
>> >>> >> >>
>> >>> >> >> But svnserve is started and works fine. With same settings
>> >>> >> >> svnserve does not work on
>> >>> >> >> kes# uname -a
>> >>> >> >> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun
>> >>> >> >> Nov 23 17:19:12 EET 2008
>> >>> >> >> k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386
>> >>> >>
>> >>> >> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>> >>> >> M> /usr/local/etc/rc.d/svnserve start
>> >>> >>
>> >>> >> M> Show output from /var/log/messages.
>> >>> >>
>> >>> >> kes# kes# /usr/local/etc/rc.d/svnserve start
>> >>> >> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is
>> >>> >> set to YES. Starting svnserve.
>> >>> >> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn
>> >>> >> -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690
>> >>> >> --foreground -r /var/db/trunk"' su: Sorry
>> >>>
>> >>> M> Does this command work from the command line?
>> >>> M> If not, does it work if called as su -fm rather then su -m?
>> >>> M> If that does not work, does the primary group svn is supposed to be

Re[3]: can not start SVNserve

2008-12-23 Thread KES
Здравствуйте, KES.

Вы писали 21 декабря 2008 г., 13:49:04:

K> Здравствуйте, Mel.

K> Вы писали 21 декабря 2008 г., 13:10:47:

M>> On Thursday 18 December 2008 09:03:54 KES wrote:
>>> Здравствуйте, Mel.
>>>
>>> Вы писали 18 декабря 2008 г., 9:05:35:
>>>
>>> M> On Wednesday 17 December 2008 21:02:07 KES wrote:
>>> >> Здравствуйте, Mel.
>>> >>
>>> >> Вы писали 17 декабря 2008 г., 9:11:19:
>>> >>
>>> >> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>>> >> >> Здравствуйте, Polytropon.
>>> >> >>
>>> >> >> Вы писали 14 декабря 2008 г., 15:11:35:
>>> >> >>
>>> >> >> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>>> >> >>
>>> >> >> P>  wrote:
>>> >> >> >> > su: Sorry
>>> >> >> >> >
>>> >> >> >> >
>>> >> >> >> > kes# pw user mod svn -s /bin/bash
>>> >> >> >> > kes# pw user show svn
>>> >> >> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>> >> >> >> > kes# /usr/local/etc/rc.d/svnserve start
>>> >> >> >> > Starting svnserve.
>>> >> >> >> > su: Sorry
>>> >> >> >>
>>> >> >> >> try to change directory to existent
>>> >> >>
>>> >> >> P> (1) What's /bin/bash? Check existing shell.
>>> >> >>
>>> >> >> P> (2) As you said: Check existing directory.
>>> >> >>
>>> >> >> P> (3) Regarding su, check for wheel group inclusion.
>>> >> >>
>>> >> >> home# uname -a
>>> >> >> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>>> >> >> 02:11:24 EEST 2008
>>> >> >> k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386 home# pw user
>>> >> >> show svn
>>> >> >> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>>> >> >>
>>> >> >> As you can see on 'home' machine svn user has no valid shell also it
>>> >> >> has not valid home directory and it is not included into wheel group
>>> >> >>
>>> >> >> But svnserve is started and works fine. With same settings svnserve
>>> >> >> does not work on
>>> >> >> kes# uname -a
>>> >> >> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov
>>> >> >> 23 17:19:12 EET 2008
>>> >> >> k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386
>>> >>
>>> >> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>>> >> M> /usr/local/etc/rc.d/svnserve start
>>> >>
>>> >> M> Show output from /var/log/messages.
>>> >>
>>> >> kes# kes# /usr/local/etc/rc.d/svnserve start
>>> >> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set
>>> >> to YES. Starting svnserve.
>>> >> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c
>>> >> 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r
>>> >> /var/db/trunk"' su: Sorry
>>>
>>> M> Does this command work from the command line?
>>> M> If not, does it work if called as su -fm rather then su -m?
>>> M> If that does not work, does the primary group svn is supposed to be in
>>> exist?
>>>
>>>
>>> kes# su -m svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690
>>> --foreground -r /var/db/trunk"' su: Sorry
>>> kes# su -fm svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690
>>> --foreground -r /var/db/trunk"' su: Sorry
>>> kes# pw group show svn
>>> svn:*:1005:
>>> kes# cat /etc/group | grep svn
>>> svn:*:1005:
>>> kes# pw user show svn
>>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>>
>>> As you see it does not work also with -fm option
>>>
>>>
>>> Also I notice next differences between FreeBDS 7.0 and 7.1 (detail below)
>>> Notice that on both system a

May I load DLL same as SO in FreeBSD?

2008-12-23 Thread KES


Is it possible to load DLL?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: can not start SVNserve

2008-12-21 Thread KES
Здравствуйте, Mel.

Вы писали 21 декабря 2008 г., 13:10:47:

M> On Thursday 18 December 2008 09:03:54 KES wrote:
>> Здравствуйте, Mel.
>>
>> Вы писали 18 декабря 2008 г., 9:05:35:
>>
>> M> On Wednesday 17 December 2008 21:02:07 KES wrote:
>> >> Здравствуйте, Mel.
>> >>
>> >> Вы писали 17 декабря 2008 г., 9:11:19:
>> >>
>> >> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>> >> >> Здравствуйте, Polytropon.
>> >> >>
>> >> >> Вы писали 14 декабря 2008 г., 15:11:35:
>> >> >>
>> >> >> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>> >> >>
>> >> >> P>  wrote:
>> >> >> >> > su: Sorry
>> >> >> >> >
>> >> >> >> >
>> >> >> >> > kes# pw user mod svn -s /bin/bash
>> >> >> >> > kes# pw user show svn
>> >> >> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> >> >> >> > kes# /usr/local/etc/rc.d/svnserve start
>> >> >> >> > Starting svnserve.
>> >> >> >> > su: Sorry
>> >> >> >>
>> >> >> >> try to change directory to existent
>> >> >>
>> >> >> P> (1) What's /bin/bash? Check existing shell.
>> >> >>
>> >> >> P> (2) As you said: Check existing directory.
>> >> >>
>> >> >> P> (3) Regarding su, check for wheel group inclusion.
>> >> >>
>> >> >> home# uname -a
>> >> >> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>> >> >> 02:11:24 EEST 2008
>> >> >> k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386 home# pw user
>> >> >> show svn
>> >> >> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>> >> >>
>> >> >> As you can see on 'home' machine svn user has no valid shell also it
>> >> >> has not valid home directory and it is not included into wheel group
>> >> >>
>> >> >> But svnserve is started and works fine. With same settings svnserve
>> >> >> does not work on
>> >> >> kes# uname -a
>> >> >> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov
>> >> >> 23 17:19:12 EET 2008
>> >> >> k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386
>> >>
>> >> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>> >> M> /usr/local/etc/rc.d/svnserve start
>> >>
>> >> M> Show output from /var/log/messages.
>> >>
>> >> kes# kes# /usr/local/etc/rc.d/svnserve start
>> >> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set
>> >> to YES. Starting svnserve.
>> >> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c
>> >> 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r
>> >> /var/db/trunk"' su: Sorry
>>
>> M> Does this command work from the command line?
>> M> If not, does it work if called as su -fm rather then su -m?
>> M> If that does not work, does the primary group svn is supposed to be in
>> exist?
>>
>>
>> kes# su -m svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690
>> --foreground -r /var/db/trunk"' su: Sorry
>> kes# su -fm svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690
>> --foreground -r /var/db/trunk"' su: Sorry
>> kes# pw group show svn
>> svn:*:1005:
>> kes# cat /etc/group | grep svn
>> svn:*:1005:
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>
>> As you see it does not work also with -fm option
>>
>>
>> Also I notice next differences between FreeBDS 7.0 and 7.1 (detail below)
>> Notice that on both system account is locked, has no valid shell and
>> home directory
>> on FreeBSD 7.0 when I try to login with svn user it says: This account is
>> currently not available. on FreeBSD 7.1 when I try to login with svn user
>> it says: su: Sorry Maybe there is a problem with su on FreeBSD 7.1?
>>
>>
>>
>> home# pw user show svn
>> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>> home# su svn
>> This account is currently not available.
>>
>>
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> kes# su svn
>> su: Sorry
>> kes# pw user mod svn -s /usr/bin/nologin
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/usr/bin/nologin
>> kes# su svn
>> su: Sorry

M> The problem is elsewhere. Probably in pam(3) on the faulty machine. The only
M> change to su.c from 7.0 to 7.1 is fixing a compiler warning. There are 3
M> instances where su exits with "Sorry". All occasions are logged to syslog.
M> Can you dig those log entries up?

Dec 21 13:47:54 kes su: kes to root on /dev/ttyp5
Dec 21 13:47:58 kes kes: /r/svnserve: DEBUG: checkyesno: svnserve_enable is set 
to YES.
Dec 21 13:47:58 kes kes: /r/svnserve: DEBUG: run_rc_command: doit: su -m svn -c 
'sh -c "/usr/local/bin/svnserve -d
--listen-port=3690 --foreground -r /var/db/trunk"'
Dec 21 13:47:58 kes su: pam_acct_mgmt: authentication error

Yeah, there is problem with pam. Why pam restrict root to run command
under other user?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Fwd: Re: Re[4]: can not start SVNserve

2008-12-19 Thread KES
Здравствуйте, .



-- Пересылаемое письмо --
От:  David Weintraub 
К:   KES 
А также к:   us...@subversion.tigris.org
Время создания:  Thu, 18 Dec 2008 14:30:51 -0500
Тема:can not start SVNserve
Прикрепленные файлы: 

The problem is the "su" command. For some reason, it is refusing to
execute the svnserve command. You can try to figure out why "su" isn't
working or you can switch to "sudo".

I don't think we can give you any more help with this list.

On Thu, Dec 18, 2008 at 1:57 PM, KES  wrote:
> Здравствуйте, David.
>
>
> DW> On Thu, Dec 18, 2008 at 3:03 AM, KES  wrote:
>>> Здравствуйте, Mel.
>>>
>>> Вы писали 18 декабря 2008 г., 9:05:35:
>>>
>>> M> On Wednesday 17 December 2008 21:02:07 KES wrote:
>>>>> Здравствуйте, Mel.
>>>>>
>>>>> Вы писали 17 декабря 2008 г., 9:11:19:
>>>>>
>>>>> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>>>>> >> Здравствуйте, Polytropon.
>>>>> >>
>>>>> >> Вы писали 14 декабря 2008 г., 15:11:35:
>>>>> >>
>>>>> >> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>>>>> >>
>>>>> >> P>  wrote:
>>>>> >> >> > su: Sorry
>>>>> >> >> >
>>>>> >> >> >
>>>>> >> >> > kes# pw user mod svn -s /bin/bash
>>>>> >> >> > kes# pw user show svn
>>>>> >> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>>>> >> >> > kes# /usr/local/etc/rc.d/svnserve start
>>>>> >> >> > Starting svnserve.
>>>>> >> >> > su: Sorry
>>>>> >> >>
>>>>> >> >> try to change directory to existent
>>>>> >>
>>>>> >> P> (1) What's /bin/bash? Check existing shell.
>>>>> >>
>>>>> >> P> (2) As you said: Check existing directory.
>>>>> >>
>>>>> >> P> (3) Regarding su, check for wheel group inclusion.
>>>>> >>
>>>>> >> home# uname -a
>>>>> >> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>>>>> >> 02:11:24 EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7
>>>>> >> i386 home# pw user show svn
>>>>> >> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>>>>> >>
>>>>> >> As you can see on 'home' machine svn user has no valid shell also it
>>>>> >> has not valid home directory and it is not included into wheel group
>>>>> >>
>>>>> >> But svnserve is started and works fine. With same settings svnserve
>>>>> >> does not work on
>>>>> >> kes# uname -a
>>>>> >> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23
>>>>> >> 17:19:12 EET 2008
>>>>> >> k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386
>>>>>
>>>>> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>>>>> M> /usr/local/etc/rc.d/svnserve start
>>>>>
>>>>> M> Show output from /var/log/messages.
>>>>>
>>>>> kes# kes# /usr/local/etc/rc.d/svnserve start
>>>>> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set to
>>>>> YES. Starting svnserve.
>>>>> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c 
>>>>> 'sh
>>>>> -c "/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r
>>>>> /var/db/trunk"' su: Sorry
>>>
>>> M> Does this command work from the command line?
>>> M> If not, does it work if called as su -fm rather then su -m?
>>> M> If that does not work, does the primary group svn is supposed to be in 
>>> exist?
>>>
>>>
>>> kes# su -m svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 
>>> --foreground -r /var/db/trunk"'
>>> su: Sorry
>>> kes# su -fm svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 
>>> --foreground -r /var/db/trunk"&#

Re[4]: can not start SVNserve

2008-12-18 Thread KES
Здравствуйте, David.


DW> On Thu, Dec 18, 2008 at 3:03 AM, KES  wrote:
>> Здравствуйте, Mel.
>>
>> Вы писали 18 декабря 2008 г., 9:05:35:
>>
>> M> On Wednesday 17 December 2008 21:02:07 KES wrote:
>>>> Здравствуйте, Mel.
>>>>
>>>> Вы писали 17 декабря 2008 г., 9:11:19:
>>>>
>>>> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>>>> >> Здравствуйте, Polytropon.
>>>> >>
>>>> >> Вы писали 14 декабря 2008 г., 15:11:35:
>>>> >>
>>>> >> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>>>> >>
>>>> >> P>  wrote:
>>>> >> >> > su: Sorry
>>>> >> >> >
>>>> >> >> >
>>>> >> >> > kes# pw user mod svn -s /bin/bash
>>>> >> >> > kes# pw user show svn
>>>> >> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>>> >> >> > kes# /usr/local/etc/rc.d/svnserve start
>>>> >> >> > Starting svnserve.
>>>> >> >> > su: Sorry
>>>> >> >>
>>>> >> >> try to change directory to existent
>>>> >>
>>>> >> P> (1) What's /bin/bash? Check existing shell.
>>>> >>
>>>> >> P> (2) As you said: Check existing directory.
>>>> >>
>>>> >> P> (3) Regarding su, check for wheel group inclusion.
>>>> >>
>>>> >> home# uname -a
>>>> >> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>>>> >> 02:11:24 EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7
>>>> >> i386 home# pw user show svn
>>>> >> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>>>> >>
>>>> >> As you can see on 'home' machine svn user has no valid shell also it
>>>> >> has not valid home directory and it is not included into wheel group
>>>> >>
>>>> >> But svnserve is started and works fine. With same settings svnserve
>>>> >> does not work on
>>>> >> kes# uname -a
>>>> >> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23
>>>> >> 17:19:12 EET 2008
>>>> >> k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386
>>>>
>>>> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>>>> M> /usr/local/etc/rc.d/svnserve start
>>>>
>>>> M> Show output from /var/log/messages.
>>>>
>>>> kes# kes# /usr/local/etc/rc.d/svnserve start
>>>> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set to
>>>> YES. Starting svnserve.
>>>> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c 'sh
>>>> -c "/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r
>>>> /var/db/trunk"' su: Sorry
>>
>> M> Does this command work from the command line?
>> M> If not, does it work if called as su -fm rather then su -m?
>> M> If that does not work, does the primary group svn is supposed to be in 
>> exist?
>>
>>
>> kes# su -m svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 
>> --foreground -r /var/db/trunk"'
>> su: Sorry
>> kes# su -fm svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 
>> --foreground -r /var/db/trunk"'
>> su: Sorry
>> kes# pw group show svn
>> svn:*:1005:
>> kes# cat /etc/group | grep svn
>> svn:*:1005:
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>
>> As you see it does not work also with -fm option
>>
>>
>> Also I notice next differences between FreeBDS 7.0 and 7.1 (detail below)
>> Notice that on both system account is locked, has no valid shell and
>> home directory
>> on FreeBSD 7.0 when I try to login with svn user it says: This account is 
>> currently not available.
>> on FreeBSD 7.1 when I try to login with svn user it says: su: Sorry
>> Maybe there is a problem with su on FreeBSD 7.1?
>>
>>
>>
>> home# pw user show svn
>> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>> home# su svn
>> This account is currently not available.
>>
>>
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> kes# su svn
>> su: Sorry
>> kes# pw user mod svn -s /usr/bin/nologin
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:SVN user:/nonexistent:/usr/bin/nologin
>> kes# su svn
>> su: Sorry
>>


DW> Why don't you setup "sudo" and see if that will work for you? I've
DW> always found sudo much less troublesome than "su".

DW> Then, you can modify your startup script to use sudo instead of "su".


Why maintainer of rc.subr use 'su' instead of 'sudo'? Maybe su has
some benefit I do not know. If I edit standart rc.subr to use sudo
instead of 'su' there maybe other sripts will not sturtup.




-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[4]: can not start SVNserve

2008-12-18 Thread KES
Здравствуйте, David.


DW> Is user "svn" a member of the group "wheel"? See
DW> 
http://lists.freebsd.org/pipermail/freebsd-questions/2004-November/063649.html

It is not required to be member of group wheel to low process rights from root.
wheel group is requierd only if I want to rise my rights to root.

Also notice that on both systems 'home' and 'kes' there is svn group
and user. The svn user is not member of wheel group. On both systems
user svn has not home directory and has not valid shell (because of it
is not required to login as svn user, this is just user to start
svnserve process)

On FreeBSD 7.0 svnserve startsup normally, on 7.1 it can not

Error is described earlier.


DW> On Wed, Dec 17, 2008 at 3:02 PM, KES  wrote:
>> Здравствуйте, Mel.
>>
>> Вы писали 17 декабря 2008 г., 9:11:19:
>>
>> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>>>> Здравствуйте, Polytropon.
>>>>
>>>> Вы писали 14 декабря 2008 г., 15:11:35:
>>>>
>>>> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>>>>
>>>> P>  wrote:
>>>> >> > su: Sorry
>>>> >> >
>>>> >> >
>>>> >> > kes# pw user mod svn -s /bin/bash
>>>> >> > kes# pw user show svn
>>>> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>>>> >> > kes# /usr/local/etc/rc.d/svnserve start
>>>> >> > Starting svnserve.
>>>> >> > su: Sorry
>>>> >>
>>>> >> try to change directory to existent
>>>>
>>>> P> (1) What's /bin/bash? Check existing shell.
>>>>
>>>> P> (2) As you said: Check existing directory.
>>>>
>>>> P> (3) Regarding su, check for wheel group inclusion.
>>>>
>>>> home# uname -a
>>>> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>>>> 02:11:24 EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7
>>>> i386 home# pw user show svn
>>>> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>>>>
>>>> As you can see on 'home' machine svn user has no valid shell also it
>>>> has not valid home directory and it is not included into wheel group
>>>>
>>>> But svnserve is started and works fine. With same settings svnserve
>>>> does not work on
>>>> kes# uname -a
>>>> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23
>>>> 17:19:12 EET 2008 k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7
>>>> i386
>>
>> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>> M> /usr/local/etc/rc.d/svnserve start
>>
>> M> Show output from /var/log/messages.
>>
>> kes# kes# /usr/local/etc/rc.d/svnserve start
>> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set to 
>> YES.
>> Starting svnserve.
>> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c 'sh 
>> -c "/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r 
>> /var/db/trunk"'
>> su: Sorry
>>
>>
>> --
>> С уважением,
>>  KES  mailto:kes-...@yandex.ru
>>
>>






-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


BUG can not add address to interface

2008-12-18 Thread KES
Здравствуйте, Archie.

mpd5.conf has:

 set link max-redial 0


 mpd5 does not try to redial if connection is successfull but
 interface adress change is fail:


8 02:50:14 kes mpd: [UKR_B4] IPCP: LayerUp
8 02:50:14 kes mpd: [UKR_B4]   92.113.72.242 -> 195.5.5.203
8 02:50:14 kes mpd: [UKR_B4] IFACE: Connecting NAT
8 02:50:14 kes mpd: [UKR_B4] IFACE: Add address 92.113.72.242/32->195.5.5.203 
to ng1
8 02:50:14 kes mpd: [UKR_B4] system: /usr/local/etc/mpd5/adsl1.up ng1 inet 
92.113.72.242/32 195.5.5.203 '-'
8 02:50:14 kes mpd: [UKR_B4] IFACE: Up event
8 02:50:14 kes mpd: [UKR_B4] IFACE: Change interface flags: -0 +1


8 03:49:29 kes mpd: [UKR_B3] IFACE: Add address 92.113.89.194/32->195.5.5.203 
to ng0
8 03:49:29 kes mpd: [UKR_B3] IFACE: Adding IPv4 address to ng0 failed: File 
exists
8 03:49:29 kes mpd: [UKR_B3] IFACE: IfaceChangeAddr() error, closing IPCP
8 03:49:29 kes mpd: [UKR_B3] IPCP: parameter negotiation failed
8 03:49:29 kes mpd: [UKR_B3] IPCP: state change Opened --> Stopping
8 03:49:29 kes mpd: [UKR_B3] IPCP: SendTerminateReq #16
8 03:49:29 kes mpd: [UKR_B3] IPCP: LayerDown
8 03:49:29 kes mpd: [UKR_B3] IFACE: Remove address 
92.113.89.194/32->195.5.5.203 from ng0
8 03:49:29 kes mpd: [UKR_B3] IFACE: Removing IPv4 address from ng0 failed: 
Can't assign requested address
8 03:49:29 kes mpd: [UKR_B3] IPCP: rec'd Terminate Ack #16 (Stopping)


I have two ADSL connection to my provider. For both connections I have
same gateway.

How to establish two ADSL connections with same gateway?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: can not start SVNserve

2008-12-18 Thread KES
Здравствуйте, Mel.

Вы писали 18 декабря 2008 г., 9:05:35:

M> On Wednesday 17 December 2008 21:02:07 KES wrote:
>> Здравствуйте, Mel.
>>
>> Вы писали 17 декабря 2008 г., 9:11:19:
>>
>> M> On Sunday 14 December 2008 16:11:17 KES wrote:
>> >> Здравствуйте, Polytropon.
>> >>
>> >> Вы писали 14 декабря 2008 г., 15:11:35:
>> >>
>> >> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>> >>
>> >> P>  wrote:
>> >> >> > su: Sorry
>> >> >> >
>> >> >> >
>> >> >> > kes# pw user mod svn -s /bin/bash
>> >> >> > kes# pw user show svn
>> >> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> >> >> > kes# /usr/local/etc/rc.d/svnserve start
>> >> >> > Starting svnserve.
>> >> >> > su: Sorry
>> >> >>
>> >> >> try to change directory to existent
>> >>
>> >> P> (1) What's /bin/bash? Check existing shell.
>> >>
>> >> P> (2) As you said: Check existing directory.
>> >>
>> >> P> (3) Regarding su, check for wheel group inclusion.
>> >>
>> >> home# uname -a
>> >> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>> >> 02:11:24 EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7
>> >> i386 home# pw user show svn
>> >> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>> >>
>> >> As you can see on 'home' machine svn user has no valid shell also it
>> >> has not valid home directory and it is not included into wheel group
>> >>
>> >> But svnserve is started and works fine. With same settings svnserve
>> >> does not work on
>> >> kes# uname -a
>> >> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23
>> >> 17:19:12 EET 2008
>> >> k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 i386
>>
>> M> echo 'rc_debug="YES"'>>/etc/rc.conf
>> M> /usr/local/etc/rc.d/svnserve start
>>
>> M> Show output from /var/log/messages.
>>
>> kes# kes# /usr/local/etc/rc.d/svnserve start
>> /usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set to
>> YES. Starting svnserve.
>> /usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c 'sh
>> -c "/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r
>> /var/db/trunk"' su: Sorry

M> Does this command work from the command line?
M> If not, does it work if called as su -fm rather then su -m?
M> If that does not work, does the primary group svn is supposed to be in exist?


kes# su -m svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 
--foreground -r /var/db/trunk"'
su: Sorry
kes# su -fm svn -c 'sh -c "/usr/local/bin/svnserve -d --listen-port=3690 
--foreground -r /var/db/trunk"'
su: Sorry
kes# pw group show svn
svn:*:1005:
kes# cat /etc/group | grep svn
svn:*:1005:
kes# pw user show svn
svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash

As you see it does not work also with -fm option


Also I notice next differences between FreeBDS 7.0 and 7.1 (detail below)
Notice that on both system account is locked, has no valid shell and
home directory
on FreeBSD 7.0 when I try to login with svn user it says: This account is 
currently not available.
on FreeBSD 7.1 when I try to login with svn user it says: su: Sorry
Maybe there is a problem with su on FreeBSD 7.1?



home# pw user show svn
svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
home# su svn
This account is currently not available.


kes# pw user show svn
svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
kes# su svn
su: Sorry
kes# pw user mod svn -s /usr/bin/nologin
kes# pw user show svn
svn:*:1005:1005::0:0:SVN user:/nonexistent:/usr/bin/nologin
kes# su svn
su: Sorry




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: can not start SVNserve

2008-12-17 Thread KES
Здравствуйте, Mel.

Вы писали 17 декабря 2008 г., 9:11:19:

M> On Sunday 14 December 2008 16:11:17 KES wrote:
>> Здравствуйте, Polytropon.
>>
>> Вы писали 14 декабря 2008 г., 15:11:35:
>>
>> P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
>>
>> P>  wrote:
>> >> > su: Sorry
>> >> >
>> >> >
>> >> > kes# pw user mod svn -s /bin/bash
>> >> > kes# pw user show svn
>> >> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> >> > kes# /usr/local/etc/rc.d/svnserve start
>> >> > Starting svnserve.
>> >> > su: Sorry
>> >>
>> >> try to change directory to existent
>>
>> P> (1) What's /bin/bash? Check existing shell.
>>
>> P> (2) As you said: Check existing directory.
>>
>> P> (3) Regarding su, check for wheel group inclusion.
>>
>> home# uname -a
>> FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12
>> 02:11:24 EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 
>> i386 home# pw user show svn
>> svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
>>
>> As you can see on 'home' machine svn user has no valid shell also it
>> has not valid home directory and it is not included into wheel group
>>
>> But svnserve is started and works fine. With same settings svnserve
>> does not work on
>> kes# uname -a
>> FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23
>> 17:19:12 EET 2008 k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7 
>> i386

M> echo 'rc_debug="YES"'>>/etc/rc.conf
M> /usr/local/etc/rc.d/svnserve start

M> Show output from /var/log/messages.

kes# kes# /usr/local/etc/rc.d/svnserve start
/usr/local/etc/rc.d/svnserve: DEBUG: checkyesno: svnserve_enable is set to YES.
Starting svnserve.
/usr/local/etc/rc.d/svnserve: DEBUG: run_rc_command: doit: su -m svn -c 'sh -c 
"/usr/local/bin/svnserve -d --listen-port=3690 --foreground -r /var/db/trunk"'
su: Sorry


-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


can not view which fib process is using

2008-12-17 Thread KES
Здравствуйте, Questions.

How to view which FIB process if use?

I cat setfib  
but I can not view later which fib use my 

FEATURE REEQUEST:
implement option to 'ps' to view which FIB process is using


Actually problem is next.
I use 'torrentflux' I change index.php line 88
$command = "cd " . $cfg["path"] . $owner . "; HOME=".$cfg["path"]."; export 
HOME;";
-$command.= "nohup " .$cfg["btphpbin"] . " ".$runtime." ".$sharekill." 
".$cfg["torrent_file_path"].$alias.".stat ".$owner." --response
+$command.= " setfib ". rand(0,1) ." nohup " .$cfg["btphpbin"] . " ".$runtime." 
20 ".$cfg["torrent_file_path"].$alias.".stat ".$owner.

Notice 'setfib'.

I use setfib here to run '/usr/local/libexec/btphptornado.py' to use
default route 0 or default route 1.

All instances of process that are using route 1 (setfib 1) are still go through
route 0.


kes# ifconfig ng0
ng0: flags=88d1 metric 0 mtu 
1492
inet 92.113.8.197 --> 195.5.5.202 netmask 0x
kes# ifconfig ng1
ng1: flags=88d1 metric 0 mtu 
1492
inet 92.113.72.242 --> 195.5.5.203 netmask 0x

kes# setfib 0 netstat -nr | less
Routing tables

Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
default195.5.5.202UGS 0 16327188ng0


kes# setfib 1 netstat -nr | less
Routing tables

Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
default195.5.5.203UGS 0  3347279ng1



Packets that must go through ng1 are going through ng0
kes# tcpdump -n -i ng0 src 92.113.72.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ng0, link-type NULL (BSD loopback), capture size 96 bytes
21:54:42.971565 IP 92.113.72.242.33695 > 92.101.188.147.3870: R 0:0(0) ack 
3977401380 win 0
21:54:43.027593 IP 92.113.72.242.40835 > 85.140.114.68.2800: R 0:0(0) ack 
3996727808 win 0
21:54:43.235059 IP 92.113.72.242.40835 > 91.203.63.6.3808: R 0:0(0) ack 
20527351 win 0
21:54:43.256561 IP 92.113.72.242.40835 > 193.109.129.226.2741: R 0:0(0) ack 
1518499679 win 0
21:54:43.532925 IP 92.113.72.242.33718 > 94.25.61.243.50889: R 0:0(0) ack 
3839853583 win 0
21:54:43.579555 IP 92.113.72.242.48509 > 82.170.130.251.59315: R 0:0(0) ack 
2768802435 win 0
21:54:43.677122 IP 92.113.72.242.48509 > 212.75.197.168.1212: R 0:0(0) ack 
3327449055 win 0
21:54:43.772060 IP 92.113.72.242.40835 > 80.240.220.152.53482: R 0:0(0) ack 
299780238 win 0
21:54:43.774576 IP 92.113.72.242.40835 > 94.178.211.178.3358: R 0:0(0) ack 
2300749243 win 0
21:54:43.884896 IP 92.113.72.242.33718 > 87.118.120.249.4667: R 0:0(0) ack 
597152031 win 0
21:54:43.888057 IP 92.113.72.242.40835 > 90.189.39.28.4046: R 0:0(0) ack 
407943006 win 0


And arriving through ng1
kes# tcpdump -n -i ng1 dst 92.113.72.242
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ng1, link-type NULL (BSD loopback), capture size 96 bytes
21:55:02.965381 IP 85.113.139.248.12442 > 92.113.72.242.49197: S 
3784250155:3784250155(0) win 65535 
21:55:03.016658 IP 78.106.238.247.33710 > 92.113.72.242.40835: UDP, length 67
21:55:03.072568 IP 91.90.15.36.2451 > 92.113.72.242.39402: S 
79361479:79361479(0) win 65535 
21:55:03.385356 IP 93.135.205.93.4432 > 92.113.72.242.40835: S 
1774379497:1774379497(0) win 32767 
21:55:03.429475 IP 69.9.105.209.50863 > 92.113.72.242.40835: S 
2727062150:2727062150(0) win 65535 
21:55:03.537588 IP 94.158.32.107.3004 > 92.113.72.242.48509: S 
1587739071:1587739071(0) win 16384 
21:55:03.853375 IP 86.57.159.146.29687 > 92.113.72.242.40835: S 
426526591:426526591(0) win 65535 
21:55:04.187938 IP 81.88.114.216.44433 > 92.113.72.242.40835: UDP, length 67
21:55:04.209383 IP 79.140.170.10.56778 > 92.113.72.242.40835: S 
124589897:124589897(0) win 64240 
21:55:04.247917 IP 193.17.174.6.3893 > 92.113.72.242.33718: S 
94220847:94220847(0) win 65535 
21:55:04.315516 IP 89.109.14.126.1319 > 92.113.72.242.40835: S 
2033078660:2033078660(0) win 65535 
21:55:04.453367 IP 194.187.50.165.1681 > 92.113.72.242.40835: S 
3973432781:3973432781(0) win 65535 
21:55:04.638606 IP 78.45.120.164.17477 > 92.113.72.242.48509: UDP, length 103



kes# ipfw show
140082372149 allow ip from any to any
65535   0  0 deny ip from any to any


It this BUG or I miss something?

-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


ambigious 'top' results

2008-12-16 Thread KES
Здравствуйте, Questions.

My system is overloaded, I run top to figure out which precess take
time. In both cases CPU/WCPU I do not see which process take all the
time. Which process take all processor time??

last pid: 24535;  load averages:  3.86,  3.07,  3.07up 1+13:34:28  17:25:19
193 processes: 5 running, 187 sleeping, 1 stopped
CPU: 95.1% user,  0.0% nice,  4.9% system,  0.0% interrupt,  0.0% idle
Mem: 172M Active, 171M Inact, 97M Wired, 23M Cache, 60M Buf, 25M Free
Swap: 2048M Total, 115M Used, 1933M Free, 5% Inuse

  PID USERNAMETHR PRI NICE   SIZERES STATETIME   WCPU COMMAND
 2942 mysql42   40 52412K 22132K sbwait   0:00 22.80% mysqld
88534 root  1 -580  3288K   616K bpf  1:22  0.00% ipguard
89345 root  1 -580  3288K   632K bpf  1:20  0.00% ipguard
  213 root  1  440  3180K   472K select   0:55  0.00% syslogd
  709 bind  4  440 58480K 23996K select   0:42  0.00% named
 4719 pgsql 1  440 42508K  1620K select   0:18  0.00% postgres


last pid:  2982;  load averages:  2.59,  3.37,  3.35up 1+13:23:39  17:14:30
196 processes: 5 running, 190 sleeping, 1 stopped
CPU: 94.8% user,  0.0% nice,  3.4% system,  0.0% interrupt,  1.9% idle
Mem: 129M Active, 168M Inact, 112M Wired, 11M Cache, 60M Buf, 68M Free
Swap: 2048M Total, 119M Used, 1929M Free, 5% Inuse, 8K In

  PID USERNAMETHR PRI NICE   SIZERES STATETIMECPU COMMAND
 2942 mysql41   40 50748K 21240K sbwait   0:00 13.23% mysqld
 2451 root  1  440  3532K  1924K RUN  0:01  0.10% top
 2254 root  1  960 11380K  6988K RUN  3:12  0.00% bzip2
66162 root  1  440  9192K  2396K RUN  1:26  0.00% verlihub
88534 root  1 -580  3288K   616K bpf  1:21  0.00% ipguard
89345 root  1 -580  3288K   632K bpf  1:19  0.00% ipguard
  213 root  1  440  3180K   472K select   0:54  0.00% syslogd
  709 bind  4  440 58480K 23036K select   0:42  0.00% named
 4719 pgsql 1  440 42508K  1620K select   0:18  0.00% postgres


#systat -v
4 usersLoad  2.71  2.75  3.02  16 дек 17:21

Mem:KBREALVIRTUAL   VN PAGER   SWAP PAGER
Tot   Share  TotShareFree   in   out in   out
Act  136916   11584   79968431004   29768  count
All  190728   13620  297186863628  pages
Proc:Interrupts
  r   p   d   s   w   Csw  Trp  Sys  Int  Sof  Flt   1656 cow2003 total
  1   5 186   11k 7340  75k4  35k 7189   4198 zfodatkbd0 1
  232 ozfod   sio1 irq3
54.6%Sys   0.0%Intr 45.4%User  0.0%Nice  0.0%Idle   5%ozfod   sio0 irq4
|||||||||||   daefr 4 ata0 irq14
===>>>>>>>>>>>>>>>>>>>>>>>   4405 prcfr  1999 cpu0: time
34 dtbuf 6486 totfr
Namei Name-cache   Dir-cache 35373 desvn  react
   Callshits   %hits   % 18913 numvn  pdwak
96679420  97  47   0  8279 frevn  pdpgs
  intrn
Disks   ad0   ad1  102212 wire
KB/t   0.00 15.67  136888 act
tps   0 5  230508 inact
MB/s   0.00  0.07   24388 cache
%busy 0 0    5384 free



  --
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Startup scipt

2008-12-15 Thread KES
Здравствуйте, Questions.

It there feature (option in rc.subr) to run multiple services at once?

For example I have 'service'
to run service with specific flags I want to do:

service_enable="YES"
service_instances="instance1 instance2"
service_instance1_flags="-flag 1 rl0"
service_instance2_flags="-flag 2 rl2"

so rc.subr will run:
service -flag 1 rl0
service -flag 2 rl2

It will be great to have this feature that will do all dirty work to
run multiple services.

So maintainers of startup scripts will be free to not to do next things:

for interface in ${arpwatch_interfaces}; do
if [ ! -e "${arpwatch_dir}/arp.${interface}.dat" ]; then
if [ -e "${arpwatch_dir}/arp.${interface}.dat-" ]; then
cp "${arpwatch_dir}/arp.${interface}.dat-" 
"${arpwatch_dir}/arp.${interface}.dat"
else
touch "${arpwatch_dir}/arp.${interface}.dat"
fi
fi
done


EXAMPLES:
ipguard_enable="YES"
ipguard_instances="rl0 rl1 rl2"
ipguard_rl0_interface="rl0"  #NOTICE: this instance are runned without flags
ipguard_rl1_interface="rl1"
ipguard_rl1_flags="-r -b 100 -f /etc/ethers"
ipguard_rl2_interface="rl2"
ipguard_rl2_flags="-u 300 -xz"

proftpd_enable="YES"
proftpd_instances="external internal"
proftpd_external_flags="-c external.conf"
proftpd_internal_flags="-c ftp_for_localnet.conf"

I do not know will be or not feature to on/off some instance:
for example:
ipguard_rl2_enable="NO"
proftpd_external_enable="NO"

By default all instances are enabled because of if user add second
instance it has first one already runned. And he add second instance
because of it is not enough to have only one instance. So
proftpd_enable="YES" will enable all instances
proftpd_enable="NO" will disable all instances
proftpd_external_enable="NO" will disable some instance

For example: user run three instances, but now want to disable one of
them. So it write __enable="NO"


What do you think about this improvement?
-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[4]: can not start SVNserve

2008-12-14 Thread KES
Здравствуйте, Polytropon.

Вы писали 14 декабря 2008 г., 15:11:35:

P> On Sun, 14 Dec 2008 12:58:55 +0100 (CET), Wojciech Puchar
P>  wrote:
>> > su: Sorry
>> >
>> >
>> > kes# pw user mod svn -s /bin/bash
>> > kes# pw user show svn
>> > svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
>> > kes# /usr/local/etc/rc.d/svnserve start
>> > Starting svnserve.
>> > su: Sorry
>> try to change directory to existent

P> (1) What's /bin/bash? Check existing shell.

P> (2) As you said: Check existing directory.

P> (3) Regarding su, check for wheel group inclusion.

home# uname -a
FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12 02:11:24 
EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7  i386
home# pw user show svn
svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin

As you can see on 'home' machine svn user has no valid shell also it
has not valid home directory and it is not included into wheel group

But svnserve is started and works fine. With same settings svnserve
does not work on
kes# uname -a
FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23 17:19:12 
EET 2008 k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7  i386



-- 
С уважением,
 KES  mailto:kes-...@yandex.ru

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: can not start SVNserve

2008-12-14 Thread KES
Здравствуйте, David.

I have
home# uname -a
FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12 02:11:24 
EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7  i386
on this machine sveserve startsup normally

>My confusion comes from the output of PW
home# pw user show svn
svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin
pw is utility to edit /etc/master.passwd
home# cat /etc/master.passwd | grep svn
svn:*:1003:1002::0:0:SVN user:/nonexistent:/usr/sbin/nologin

>showing me that user "svn" is a valid user
'svn' user is valid user


>Have you tried changing the "svn" user shell to /bin/bash
telling this:
 :/nonexistent:/usr/sbin/nologin
I point that anyone can not use this user to login to system. But
because of 'svn' is valid system user process can low his right to
'svn' user

On this HOME machine when I try run svnserve it is runned despite on 'su svn'
can not login me:
home# su svn
This account is currently not available.
home# /usr/local/etc/rc.d/svnserve start
Starting svnserve.
home# ps ax|grep svn
34209  ??  Ss 0:00,00 /usr/local/bin/svnserve -d --listen-port=3690 -r /usr
34211  p0  S+ 0:00,00 grep svn

But on other machine with same user I can not start svnserver
kes# pw user show svn
svn:*:1005:1005::0:0:SVN user:/nonexistent:/usr/sbin/nologin
kes# /usr/local/etc/rc.d/svnserve start
Starting svnserve.
su: Sorry


kes# pw user mod svn -s /bin/bash
kes# pw user show svn
svn:*:1005:1005::0:0:SVN user:/nonexistent:/bin/bash
kes# /usr/local/etc/rc.d/svnserve start
Starting svnserve.
su: Sorry


DW> Have you tried changing the "svn" user shell to /bin/bash and see if
DW> your startup script is working.
the differences between this machines only are next:
home# svnserve --version
svnserve, version 1.5.1 (r32289)
   compiled Aug  3 2008, 00:10:41
home# uname -a
FreeBSD home.kes.net.ua 7.0-STABLE FreeBSD 7.0-STABLE #0: Tue Aug 12 02:11:24 
EEST 2008 k...@kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7  i386

and
kes# svnserve --version
svnserve, version 1.5.2 (r32768)
   compiled Oct  8 2008, 21:55:55

kes# uname -a
FreeBSD kes.net.ua 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #: Sun Nov 23 17:19:12 
EET 2008 k...@home.kes.net.ua:/usr/obj/usr/src/sys/KES_KERN_v7  i386


DW> It would be helpful if you explained your system, setup, what you were
DW> doing, and the results instead of simply showing us the output of a
DW> couple of commands. It is hard to figure out exactly what you are
DW> trying to do and what you have done.
I try to run 'svnserve'. I just install svnserver and add user svn to
run svnserve under. I do same things on 'kes' as on 'home' machine.



Вы писали 14 декабря 2008 г., 7:22:39:

DW> I'm a bit confused by what you're asking. I believe PW is a command
DW> for editing groups and users on BSD, but I've never really used it.

DW> My confusion comes from the output of PW. A typical user line has
DW> seven fields, your output shows 11 fields. I am assuming that you're
DW> showing me that user "svn" is a valid user. However, the shell is
DW> setup to be /usr/sbin/nologin (which I assume is similar to setting
DW> the shell to /etc/false).

DW> Doing a "su svn" won't log you in becuase of the shell. I don't have
DW> the /usr/local/etc/rc.d/svnserve script in front of me, so I can't
DW> tell you what it is doing, but I suspect that since the "su svn"
DW> command doesn't work, the script also does a "su svn -c $command", and
DW> that is failing since your "svn" user is set to the "nologin" shell.

DW> Have you tried changing the "svn" user shell to /bin/bash and see if
DW> your startup script is working.

DW> At least, once you've changed your shell to "/bin/bash", you'll be
DW> able to sign on as user "svn", and try to start up the "svnserve"
DW> program manually. Then, we can determine if the problem is with
DW> "svnserve" or with your startup script.

DW> It would be helpful if you explained your system, setup, what you were
DW> doing, and the results instead of simply showing us the output of a
DW> couple of commands. It is hard to figure out exactly what you are
DW> trying to do and what you have done.

DW> In theory, your computer is doing exactly what you told it to do -- no
DW> more, no less, and thus there is no problem. Everything is working
DW> perfectly as programmed.

DW> What we need to know is what you *WANTED* it to do. Then we can figure
DW> out how to get your system setup to do just that.

DW> On Fri, Dec 12, 2008 at 3:13 AM, KES  wrote:
>> Здравствуйте, Users.
>>
>> What is wrong?
>> kes# pw user show svn
>> svn:*:1005:1005::0:0:S

Re[4]: bin/129027: ambigious output for top(1)

2008-12-09 Thread KES
Здравствуйте, Remko.

Вы писали 10 декабря 2008 г., 6:12:58:

RL> Send questions to [EMAIL PROTECTED]

RL> Thnx

RL> Verstuurd vanaf mijn iPhone

RL> Op 9 dec 2008 om 22:34 heeft KES <[EMAIL PROTECTED]> het volgende  
RL> geschreven:\

>> Здравствуйте, Remko.
>>
>> Вы писали 21 ноября 2008 г., 10:36:10:
>>
>> rFo> Synopsis: ambigious output for top(1)
>>
>> rFo> State-Changed-From-To: open->closed
>> rFo> State-Changed-By: remko
>> rFo> State-Changed-When: Fri Nov 21 08:36:09 UTC 2008
>> rFo> State-Changed-Why:
>> rFo> This is not a PR, this is a user question, which has an anwer  
>> already.
>> rFo> Thanks for reporthing this, though I will be closing the ticket.
>>
>> rFo> http://www.freebsd.org/cgi/query-pr.cgi?pr=129027
>> man top
>> ..
>>
>>   -C Toggle CPU display mode.  By default top displays  the   
>> weighted
>>  CPU  percentage  in the WCPU column (this is the same  
>> value that
>>  ps(1) displays as CPU).  Each time -C flag is passed  
>> it  toggles
>>  between  "raw  cpu"  mode  and  "weighted cpu" mode,  
>> showing the
>>  "CPU" or the "WCPU" column respectively.
>>
>> This is not descriptive enough. After reading this I have still have
>> questions:
>> 1. What is "weighted CPU  percentage"?
>> 2. What does "ps(1) display as CPU"
>>
>> ...
>>   (visible only on SMP systems), TIME is the number of  system   
>> and  user
>>   cpu  seconds  that  the  process has used, WCPU, when  
>> displayed, is the
>>   weighted cpu percentage (this is the same value that ps(1)  
>> displays  as
>>   CPU),  CPU  is  the  raw  percentage and is the field that is  
>> sorted to
>>   determine the order of the processes, and COMMAND is the   
>> name  of  the
>>
>> NOTICE:
>> this will be better to describe one parameter per paragraph
>> TIME the number of  system  and  user cpu  seconds  that  the   
>> process has used
>> WCPU the weighted cpu percentage (average CPU usage by process  
>> per minute)
>> CPU  the  momentary/instant?  percentage of CPU usage by process
>>  (Default sorted by this column)
>> COMMAND  .
>>
>>
>> 2. Here in both cases 0% idle. Neither CPU neither WCPU does not show
>> processes which take all processor time.
>> CPU: 92.2% user,  0.0% nice,  7.5% system,  0.4% interrupt,  0.0% idle
>> Mem: 258M Active, 95M Inact, 112M Wired, 15M Cache, 60M Buf, 8516K  
>> Free
>> Swap: 2048M Total, 748K Used, 2047M Free
>>
>>  PID USERNAMETHR PRI NICE   SIZERES STATETIMECPU  
>> COMMAND
>> 4686 mysql38   40 54716K 25944K sbwait   9:11 15.28%  
>> mysqld
>> 37959 root  1  960 15412K 12880K RUN  0:00  1.81%  
>> objcopy
>> 37956 root  1  960 21692K 19152K RUN  0:02  0.93% cc1
>> 37911 root  1  440  3532K  2080K RUN  0:00  0.20% top
>> 37957 root  1  -80  2912K  1236K piperd   0:00  0.05% as
>> 37951 root  1   80  3496K  1312K wait 0:00  0.05% sh
>>
>>
>> CPU: 93.7% user,  0.0% nice, 6.3% system,  0.0% interrupt,  0.0% idle
>> Mem: 256M Active, 92M Inact, 111M Wired, 15M Cache, 60M Buf, 13M Free
>> Swap: 2048M Total, 748K Used, 2047M Free
>> Displaying WCPU
>>  PID USERNAMETHR PRI NICE   SIZERES STATETIME   WCPU  
>> COMMAND
>> 4686 mysql38   40 54716K 25936K sbwait   9:11 20.31%  
>> mysqld
>> 37996 root  1  960 13572K 10644K RUN  0:00  0.63% cc1
>> 37983 root  1  -80  3936K  1692K piperd   0:00  0.54% as
>> 37911 root  1  440  3532K  2076K RUN  0:00  0.20% top
>> 37997 root  1  -80  2912K  1004K piperd   0:00  0.05% as
>>  212 root  1  440  3180K   980K select   7:40  0.00%  
>> syslogd
>> 46720 root  1  440  9192K  4520K RUN  3:48  0.00%  
>> verlihub
>>
>> Can you answer, which?
>>
>> -- 
>> С уважением,
>> KES  mailto:[EMAIL PROTECTED]
>>



-- 
С уважением,
 KES  mailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


problems with pam_ldap - ssh and file attributes

2003-09-26 Thread Miroslav Kes
Hi,

I just suceeded to install and configure pam_ldap authentication on my 
5.1Release box. Everything seems to work fine (ftp, telnet, samba, ...) 
except for ssh.
Any attempt to login (as user whose account is defined in the LDAP 
directory) from a remote host using ssh end up with the  error message: 
"Access denied". For users registered in /etc/passwd the ssh works fine. 
There is no problem when login via telnet, ftp works fine as well but 
the ssh doesn't.

The /etc/pam.d/sshd looks like:

# auth
authrequiredpam_nologin.so  no_warn
authsufficient  pam_opie.so no_warn 
no_fake_prompts
authrequisite   pam_opieaccess.so   no_warn allow_local
authsufficient  pam_ldap.so debug try_first_pass
authrequiredpam_unix.so no_warn 
try_first_pass

# account
account requiredpam_login_access.so
account sufficient  pam_ldap.so debug
account requiredpam_unix.so
# session
session requiredpam_permit.so
# password
passwordsufficient  pam_ldap.so debug
passwordrequiredpam_unix.so no_warn 
try_first_pass

--

Another problem is that commands like ls displays uid and gid as numbers 
for files owned by LDAP users. On the other hand ftp displays them 
correctly.

Any ideas how to fix that (especially in case of ssh) would be really 
helpfull.

Thanks

Mira

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


installation doesn't work with USB keyboard

2003-08-07 Thread Miroslav Kes
Hi!

I have Dell Precision 650 with USB keyboard and I have problem with 
sysinstall during the installation of 5.1 Release.
When the machine boots from the CD it responds to the keyboard (the menu 
that lets me select boot configuration works OK). Once the boot is 
finished and sysinstall gets started the keyboard is dead.
Is there any option I can use during the boot from CD that would fix 
that (other than using PS2 keyboard)?

Thanks

Mira

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"