About Transparent Superpages and Non-transparent superapges

2013-09-16 Thread Patrick Dung
Hello,

1.
Transparent Superpages was in FreeBSD for a few years.
I would like to know if there is any benchmark or real world performance 
experience about this setting.

2.
I have seen somewhere that non-transparent superpages was being developed in 
HEAD too.
Any insight on it? Please correct me if it is not the case.

Thanks and regards,
Patrick Dung
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: The logo at boot (Nakatomi Socrates BSD 9.2)

2013-09-05 Thread Patrick Dung



 
On Wed, 4 Sep 2013, Lowell Gilbert wrote: Patrick Dung patrick_dkt at 
yahoo.com.hk writes: Do you know what is this logo means, or the story 
behind it? I thought the BSD daemon (logo) has been around for many years in 
the past. It's a movie reference (Die Hard). The Beastie logo is still 
there, in the /boot directory, if you want it.  Or the standard orb, by 
setting it in /boot/loader.conf: 
loader_logo=orb 

Thanks for the info.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Question about those special (countdown numbers) at shutdown / sync

2013-09-05 Thread Patrick Dung
Hello!

I am curious about the special (count down numbers) at shutdown / sync.

Those nubmers is like 8 8 8 8 2 1 2 1 0 0 0 0.

Actually what do those numbers mean?

Thanks and regards,
Patrick Dung
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Question about those special (countdown numbers) at shutdown / sync

2013-09-05 Thread Patrick Dung
Thanks for the answer.

That is cool and unique.




 From: Polytropon free...@edvax.de
To: Patrick Dung patrick_...@yahoo.com.hk 
Cc: freebsd-questions@freebsd.org freebsd-questions@freebsd.org 
Sent: Thursday, September 5, 2013 9:42 PM
Subject: Re: Question about those special (countdown numbers) at shutdown / sync
 

On Thu, 5 Sep 2013 21:30:29 +0800 (SGT), Patrick Dung wrote:
 I am curious about the special (count down numbers) at shutdown / sync.
 
 Those nubmers is like 8 8 8 8 2 1 2 1 0 0 0 0.
 
 Actually what do those numbers mean?

Those numbers show you how many buffers have to be synced
until the system is ready to finally shut down and power off.
This makes sure no pending hard disk operations will be
left and forgotten in memory.

The important text displayed prior to the numbers is:

    Syncing disks, buffers remaining... 

You can find it here: /usr/src/sys/kern/kern_shutdown.c
around line 330 (8-STABLE/i386 here).




-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


The logo at boot (Nakatomi Socrates BSD 9.2)

2013-09-04 Thread Patrick Dung
Hello,

Do you know what is this logo means, or the story behind it?
I thought the BSD daemon (logo) has been around for many years in the past.

Thanks and regards,
Patrick Dung
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: The logo at boot (Nakatomi Socrates BSD 9.2)

2013-09-04 Thread Patrick Dung
Oh I see. I have found that the logo was mentioned in news group 
org.freebsd.freebsd-chat back in 1997.





 From: Lowell Gilbert freebsd-questions-lo...@be-well.ilk.org
To: Patrick Dung patrick_...@yahoo.com.hk 
Cc: freebsd-questions@freebsd.org freebsd-questions@freebsd.org 
Sent: Wednesday, September 4, 2013 11:45 PM
Subject: Re: The logo at boot (Nakatomi Socrates BSD 9.2)
 

Patrick Dung patrick_...@yahoo.com.hk writes:

 Do you know what is this logo means, or the story behind it?
 I thought the BSD daemon (logo) has been around for many years in the past.

It's a movie reference (Die Hard).

The Beastie logo is still there, in the /boot directory, if you want it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


About QUOTA support in stock kernel

2012-12-21 Thread Patrick Dung
Hi,

I would like to know why quota is not enabled in the stock kernel..

I remembered that it is not enabled since freebsd 3.5 or freebsd 4 generation.
Now in freebsd 9.0, it still neeed a kernel rebuild.

I have heard it has performance issue (GIANT lock) about quota.

Regards,
Patrick
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Any software that can do X windows screen capture (with mouse cursor)

2008-03-18 Thread Patrick Dung
Hello

As title, I have tried xwd, it can't capture mouse curosr.

Regards
Patrick


  

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Maximum number established TCP connection

2008-03-03 Thread Patrick Dung
Hello

I would like if there is a (countable) limit for the max TCP connection
of a Apache web server.

Suppose:
1. An apache web server serves a very big iso file.
2. 5000 people tried to connect to the apache server to get the iso
file.
3. They connect to the server gradually (not 5000 people starting at
the same moment). So that there will not be a problem caused by the TCP
backlog limit.
4. There will be 5000 established TCP connections.

Is it true that FreeBSD could handle 'unlimited' established TCP
connections as long as it has enough CPU power and memory?

Regards
Patrick


  

Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Maximum number established TCP connection

2008-03-03 Thread Patrick Dung
--- Bill Moran [EMAIL PROTECTED] wrote:

 In response to Matthew Seaman [EMAIL PROTECTED]:
 
  Bill Moran wrote:
   In response to Patrick Dung [EMAIL PROTECTED]:
   
   Hello
  
   I would like if there is a (countable) limit for the max TCP
 connection
   of a Apache web server.
  
   Suppose:
   1. An apache web server serves a very big iso file.
   2. 5000 people tried to connect to the apache server to get the
 iso
   file.
   3. They connect to the server gradually (not 5000 people
 starting at
   the same moment). So that there will not be a problem caused by
 the TCP
   backlog limit.
   4. There will be 5000 established TCP connections.
  
   Is it true that FreeBSD could handle 'unlimited' established TCP
   connections as long as it has enough CPU power and memory?
   
   The FreeBSD limit on the number of open TCP connections is
 significantly
   higher than the Apache limit on the number of concurrent HTTP
 sessions.
   I believe Apache has a hard limit of 256.
  
  That's a compile-time option in apache-1.3.x -- you can set
  APACHE_HARD_SERVER_LIMIT in /etc/make.conf to override the default
 of
  512 if required.
  
  However in apache-2.2.x it seems the limits are imposed entirely by
  the MPM settings in httpd.conf -- at least, I cannot find any
 tunables
  in the port Makefiles.
 
 Interesting.  I found this:
 http://httpd.apache.org/docs/2.0/mod/mpm_common.html#serverlimit
 Which claims the hard limit is 20,000.  So I guess my information is
 a bit out of date.
 
 -- 
 Bill Moran
 http://www.potentialtech.com
 

Hello

I have checked the link and dig deeper.

For prefork model: One connection should be served by one httpd child
process. The default limit, as most of you had said, it should be
MaxClients or ServerLimit (default is 256 described in apache manual).

If worker model is used, the max connection limit should still be
MaxClients, but there are other related parameters  which affect the
limit. (ThreadsLimit, ServerLimit, ThreadsPerChild).

ps: Each directive (eg. ServerLimit) may have different meanings in
different MPM. 

I hope my understanding is correct and please correct me if I am wrong.

Regards
Patrick


  

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bash script to find out the summary of user memory usage [not working]

2007-12-17 Thread Patrick Dung
I have correction with the script but still doesn't work:

#!/usr/local/bin/bash
for user in `ps -A -o user | sort | uniq | tail +2`
 do
echo user: $user

   ps aux -U $user | tail +2 | while read line
   do

mem=`echo $line | awk {'print $4'}`
echo mem: $mem
TMPSUMMEM=`awk -v x=$mem -v y=$TMPSUMMEM 'BEGIN{printf
%.2f\n,x+y}'`
echo summem: $TMPSUMMEM
   done
echo finalsummem: $SUMMEM
export SUMMEM=$TMPSUMMEM
 done

echo finalsummem: $SUMMEM

 #!/usr/local/bin/bash
 
 for user in `ps -A -o user | sort | uniq | tail +2`
  do
 echo user: $user
 
ps aux -U $user | tail +2 | while read line
do
 
 mem=`echo $line | awk {'print $4'}`
 echo mem: $mem
 TMPSUMMEM=`awk -v x=$mem -v y=$TMPSUMMEM 'BEGIN{printf
 %.2f\n,x+y}'`
 echo summem: $TMPSUMMEM
done
 echo finalsummem: $TMPSUMMEM


--- Patrick Dung [EMAIL PROTECTED] wrote:

 Hello, any idea about why below script is not working?
 The final sum is empty..
 
 #!/usr/local/bin/bash
 
 for user in `ps -A -o user | sort | uniq | tail +2`
  do
 echo user: $user
 
ps aux -U $user | tail +2 | while read line
do
 
 mem=`echo $line | awk {'print $4'}`
 echo mem: $mem
 TMPSUMMEM=`awk -v x=$mem -v y=$TMPSUMMEM 'BEGIN{printf
 %.2f\n,x+y}'`
 echo summem: $TMPSUMMEM
done
 echo finalsummem: $SUMMEM
  [EMAIL PROTECTED]
 
 
  


 Looking for last minute shopping deals?  
 Find them fast with Yahoo! Search. 

http://tools.search.yahoo.com/newsearch/category.php?category=shopping
 



  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Bash script to find out the summary of user memory usage [not working]

2007-12-14 Thread Patrick Dung
Hello, any idea about why below script is not working?
The final sum is empty..

#!/usr/local/bin/bash

for user in `ps -A -o user | sort | uniq | tail +2`
 do
echo user: $user

   ps aux -U $user | tail +2 | while read line
   do

mem=`echo $line | awk {'print $4'}`
echo mem: $mem
TMPSUMMEM=`awk -v x=$mem -v y=$TMPSUMMEM 'BEGIN{printf
%.2f\n,x+y}'`
echo summem: $TMPSUMMEM
   done
echo finalsummem: $SUMMEM
 [EMAIL PROTECTED]


  

Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


question about floating point calcuation with shell script / bc

2007-11-12 Thread Patrick Dung
Hi

I have a file with numbers in each line.
Each number is a decimal number.
My task is to add them up and get the final answer.

I have searched with the search engine.
I found bash cannot handle floating point calculation.

I tried to use 'bc' and found if the final answer is  1 (eg. 0.2)
It display .2 instead of 0.2 (no leading zero).

Any suggestion or other methods?
I know ksh could do floating point calculation
but I am now familiar with ksh.

Regards
Patrick

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: question about floating point calcuation with shell script / bc

2007-11-12 Thread Patrick Dung
Hello Peter

Thanks, it work.

Regards
Patrick

--- Peter Boosten [EMAIL PROTECTED] wrote:

 On Mon, November 12, 2007 14:01, Patrick Dung wrote:
  Hi
 
 
  I have a file with numbers in each line.
  Each number is a decimal number.
  My task is to add them up and get the final answer.
 
 
  I have searched with the search engine.
  I found bash cannot handle floating point calculation.
 
 
  I tried to use 'bc' and found if the final answer is  1 (eg. 0.2)
  It display .2 instead of 0.2 (no leading zero).
 
 
  Any suggestion or other methods?
  I know ksh could do floating point calculation
  but I am now familiar with ksh.
 
 
 Try awk
 
 awk '{sum += $1} END {printf %.2f\n, sum}' file
 
 assuming the file consists only of numbers in the first column.
 
 Peter
 
 
 -- 
 http://www.boosten.org
 
 
 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ISC bind9 with dynamic DNS update (chroot problem)

2007-07-29 Thread Patrick Dung
Thanks for reply.

Your suggestion solved my problem, thanks.

Yes, /etc/init.d/named is a typo.

Regards
Patrick

--- Doug Barton [EMAIL PROTECTED] wrote:

 Patrick Dung wrote:
  Hi
  
  I use FreeBSD 6.2 and the base bind9.
  For dynamic DNS update, bind9 automatically generate the journal
 file
  (end in .jnl).
  The default config is to use chroot and the running user as 'bind'.
  
  The problem is that after named is started (/etc/init.d/named
 start),
 
 Are you sure you're doing this on FreeBSD? We have rc.d, not initd.
 Assuming that was just a typo ...
 
  the default chroot directory /var/named/etc/named
 
 The default directory is /etc/namedb, which is a symlink to
 /var/named/etc/namedb.
 
  permission will be reset to own by root. So the named daemon (run
  as user 'bind') cannot create the journal file and complain:
 
 You shouldn't be creating journal files in the config directory
 anyway.
 
  One temp fix is to use chroot and run as root, any suggestions?
 
 Yeah, don't run named as root. Ever. :)
 
 Assuming that you are actually running FreeBSD, and that you have not
 turned off the mtree option, you should have the following
 directories
 in /etc/namedb:
 
 drwxr-xr-x  2 bind  wheel512 Jul 23 00:47 dynamic/
 drwxr-xr-x  2 root  wheel512 Jul 13 22:33 master/
 drwxr-xr-x  2 bind  wheel512 Jul 27 14:05 slave/
 
 The dynamic directory is obviously designed to hold dynamic zones,
 and
 it (like the slave directory) is chowned to user bind so that named
 can write to it after it drops privileges.
 
 hth,
 
 Doug
 
 -- 
 
 This .signature sanitized for your protection
 



   

Get the free Yahoo! toolbar and rest assured with the added security of spyware 
protection.
http://new.toolbar.yahoo.com/toolbar/features/norton/index.php
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ISC bind9 with dynamic DNS update (chroot problem)

2007-07-27 Thread Patrick Dung
Hi

I use FreeBSD 6.2 and the base bind9.
For dynamic DNS update, bind9 automatically generate the journal file
(end in .jnl).
The default config is to use chroot and the running user as 'bind'.

The problem is that after named is started (/etc/init.d/named start),
the default chroot directory /var/named/etc/named permission will be
reset to own by root. So the named daemon (run as user 'bind') cannot
create the journal file and complain:

Jul 27 21:06:54 fbsd62 named[2862]: general: localdomain.db.jnl:
create: permission denied

One temp fix is to use chroot and run as root, any suggestions?

Regards
Patrick


   

Be a better Globetrotter. Get better travel answers from someone who knows. 
Yahoo! Answers - Check it out.
http://answers.yahoo.com/dir/?link=listsid=396545469
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 6.2 default bind9, question about customize logging [re-post] (solved)

2007-07-11 Thread Patrick Dung

--- Doug Barton [EMAIL PROTECTED] wrote:

  On Sunday,  8 July 2007 at 12:06:26 -0700, Patrick Dung wrote:
  I am using FreeBSD 6.2 with the default bind (not ports).
  By default chroot is used.
 
 It's not a major issue, but it's probably worth pointing out that
 whatever code base you use (base or ports) the behavior such as
 chroot, logging, etc. is controlled by the combination of
 /etc/rc.d/named and your named.conf options. Therefore this
 discussion
 applies equally well either way.

I use FreeBSD 6.2 with the named come with the base.

/etc/rc.conf
named_enable=YES   # Run named, the DNS server (or NO).
named_program=/usr/sbin/named # path to named, if you want a
different one.
#named_flags= # Flags for named
named_pidfile=/var/run/named/pid # Must set this in named.conf as
well
named_uid=bind# User to run named as
named_chrootdir=/var/named# Chroot directory (or  not to
auto-chroot it)
named_chroot_autoupdate=YES   # Automatically install/update chrooted
# components of named. See
/etc/rc.d/named.
named_symlink_enable=YES  # Symlink the chrooted pid file

 
  When named start or stop, it does have log in /var/log/messages.
  But for example, when some do domain transfer successfully, that
 is not
  logged (zone transfer denied is logged).
 
 I have intentionally avoided adding more complex logging to the
 default named.conf because it's very hard to decide which way to land
 on this to make the most people happy (and/or the least people mad).
 I
 am of course always open to suggestions. :)

I need to log successful domain transfer for debugging purpose (which
slave/client has done domain transfer at what time).

 
  So I tried to add this part in named.conf (enabled local0.* in
  syslog.conf) , but still no luck. Any suggestions?
 
 The obvious ones, did you HUP the daemon after you changed the conf,
 and did you pre-create any new files that syslogd is supposed to
 write
 to for the local0 facility? Can you share your syslog.conf line for
 this? Do you get any joy when you try 'logger -plocal0.info blah' ?
 
  logging {
  channel named-log {
 
 While I don't see that it's explicitly forbidden to use a - in a
 channel name, every example I've ever seen or used myself uses an
 underscore instead (named_log).
 
  //syslog daemon;
  syslog local0;
  severity info;
  print-category yes;
  };
   category default { named-log; };
   category xfer-in { named-log; };
   category xfer-out { named-log; };
   category unmatched { null; };
  };
 
 This all looks good (modulo the - issue I mentioned above), and I use
 something similar myself, so once you're sure you can write to the
 syslog facility, you should be able to get this to work.
 
 I should probably also point out that unless you really need this to
 go to syslog, you're probably better off writing to a file channel
 instead (less overhead, especially on a busy server). Either way
 there
 is information in the ARM that will help you,
 /usr/share/doc/bind9/arm.
 

After furher testing, I got my problem solved.
1. I found named-log is ok to use.
2. I did not need to change my previous named.conf.
3. The problem is in /etc/syslog.conf

With the default /etc/syslog.conf, I have add a line:
local0.*/var/log/messages
There is a difference on where I put it, if I put it at the bottom of
the file, even `logger -p local0.info test` will not work.
If it put that line on the top-most of syslog.conf, everything is
working fine...

BTW, could anyone explain why putting local0.* /var/log/messages at the
bottom of syslog.conf will not work?

Regards
Patrick

 
 hth,
 
 Doug
 
 -- 
 
 This .signature sanitized for your protection
 



   

Looking for a deal? Find great prices on flights and hotels with Yahoo! 
FareChase.
http://farechase.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 6.2 default bind9, question about customize logging [re-post]

2007-07-08 Thread Patrick Dung
I am using FreeBSD 6.2 with the default bind (not ports).
By default chroot is used.

When named start or stop, it does have log in /var/log/messages.
But for example, when some do domain transfer successfully, that is not
logged (zone transfer denied is logged).

So I tried to add this part in named.conf (enabled local0.* in
syslog.conf) , but still no luck. Any suggestions?

logging {
channel named-log {
//syslog daemon;
syslog local0;
severity info;
print-category yes;
};
 category default { named-log; };
 category xfer-in { named-log; };
 category xfer-out { named-log; };
 category unmatched { null; };
};

Thanks
Patrick


   

Be a better Heartthrob. Get better relationship answers from someone who knows. 
Yahoo! Answers - Check it out. 
http://answers.yahoo.com/dir/?link=listsid=396545433
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 6.2 default bind9, question about customize logging

2007-07-07 Thread Patrick Dung
I am using FreeBSD 6.2 with the default bind (not ports).
By default chroot is used.

When named start or stop, it does have log in /var/log/messages.
But for example, when some do domain transfer successfully, that is not
logged (zone transfer denied is logged).

So I tried to add this part in named.conf (enabled local0.* in
syslog.conf) , but still no luck. Any suggestions?

logging {
channel named-log {
//syslog daemon;
syslog local0;
severity info;
print-category yes;
};
 category default { named-log; };
 category xfer-in { named-log; };
 category xfer-out { named-log; };
 category unmatched { null; };
};

Thanks
Patrick


  

Park yourself in front of a world of choices in alternative vehicles. Visit the 
Yahoo! Auto Green Center.
http://autos.yahoo.com/green_center/ 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


password againg and other policy enforcement

2007-06-30 Thread Patrick Dung
I have some question about password policy in FreeBSD:

1. Administrator can enforce password expire in /etc/login.conf
Is there any tool that can check when the password will expire for the
users?

2. Any good way to enforce minimum password length and other
restriction(like password need at least 2 numbers, 2 special char)?

3. Any ways to prevent user reuse old password?

Regards
Patrick


  

Park yourself in front of a world of choices in alternative vehicles. Visit the 
Yahoo! Auto Green Center.
http://autos.yahoo.com/green_center/ 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: password againg and other policy enforcement

2007-06-30 Thread Patrick Dung
Thanks for reply.

pam_passwdqc has feature to enforce min password length, and the
combination. Also it can check the similarity with the current and new
password.

But tools to check when users password will expire is missing.
Also it cannot keep password history (password that the user had used).
The user can use password A, then user change to password B and then
change back to password A...

Regards
Patrick

--- Manolis Kiagias [EMAIL PROTECTED] wrote:

 Patrick Dung wrote:
  I have some question about password policy in FreeBSD:
 
  1. Administrator can enforce password expire in /etc/login.conf
  Is there any tool that can check when the password will expire for
 the
  users?
 
  2. Any good way to enforce minimum password length and other
  restriction(like password need at least 2 numbers, 2 special char)?
 
  3. Any ways to prevent user reuse old password?
 
  Regards
  Patrick

 These options have been moved to PAM (Pluggable Authentication
 Modules).
 Have a look at /etc/pam.d
 You will find a file called passwd
 Edit it and uncomment the line:
 
 passwordrequisite   pam_passwdqc.so
 
 Change the options you require per the manual page
 
 (man 8 pam_passwdqc)
 
 A lot of restrictions can be placed on the password (history,
 complexity, number of chars / symbols and so on).
 
 Manolis
 
 



   
Ready
 for the edge of your seat? 
Check out tonight's top picks on Yahoo! TV. 
http://tv.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Question about the difference of with and without SGID on directory

2007-05-31 Thread Patrick Dung
Hi

I found Free/Net/OpenBSD semantic is different from Linux/Solaris.

Suppose there is a directory called 'directory,
With owner www, and group www and permission 0777.

Then I touch a file:
$ touch file
$ ls -la
total 4
drwxrwxrwx  2 www   www512 May 31 17:14 .
drwxrwxrwt  8 root  wheel  512 May 31 17:14 ..
-rw-r--r--  1 patrick   www  0 May 31 17:14 file
^^^
The file created will have a group owner of the owner of the directory
not the creator.

So I have two questions here:
1. So is there a difference with SGID on directory?
2. Any idea about why it is different from SYSV (Linux/Solaris)?

Thanks
Patrick


   
Ready
 for the edge of your seat? 
Check out tonight's top picks on Yahoo! TV. 
http://tv.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to clear strage route in routing table?

2007-01-12 Thread Patrick Dung
[EMAIL PROTECTED] ~]# ifconfig -a
lnc0: flags=108843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,NEEDSGIANT
mtu 1500
inet6 fe80::20c:29ff:fec4:3bd3%lnc0 prefixlen 64 scopeid 0x1
inet 172.16.21.62 netmask 0xff00 broadcast 172.16.21.255
ether 00:0c:29:c4:3b:d3
lnc1: flags=108802BROADCAST,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
ether 00:0c:29:c4:3b:dd
plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff00
[EMAIL PROTECTED] ~]# route add 192.168.3.0 255.255.255.0 172.16.21.1
add net 192.168.3.0: gateway 255.255.255.0
[EMAIL PROTECTED] ~]# netstat -nr
Routing tables

Internet:
DestinationGatewayFlagsRefs  Use  Netif
Expire
default172.16.21.1UGS 1  338   lnc0
127.0.0.1  127.0.0.1  UH  0  426lo0
128.0.10xac101501 255.255.255.0  UGS 00   lnc0
172.16.21/24   link#1 UC  00   lnc0
172.16.21.100:50:56:c0:00:08  UHLW211381   lnc0  
1152
172.16.21.62   00:0c:29:c4:3b:d3  UHLW1   26lo0

Internet6:
Destination   Gateway   Flags  
   Netif Expire
::1   ::1   UH 
lo0
fe80::%lnc0/64link#1UC 
   lnc0
fe80::20c:29ff:fec4:3bd3%lnc0 00:0c:29:c4:3b:d3 UHL
lo0
fe80::%lo0/64 fe80::1%lo0   U  
lo0
fe80::1%lo0   link#4UHL
lo0
ff01:1::/32   link#1UC 
   lnc0
ff01:4::/32   ::1   UC 
lo0
ff02::%lnc0/32link#1UC 
   lnc0
ff02::%lo0/32 ::1   UC 
lo0
[EMAIL PROTECTED] ~]# route delete 192.168.3.0 255.255.255.0
route: writing to routing socket: No such process
delete net 192.168.3.0: gateway 255.255.255.0: not in table
[EMAIL PROTECTED] ~]# route delete 192.168.3.0 255.255.255.0 172.16.21.1
route: writing to routing socket: No such process
delete net 192.168.3.0: gateway 255.255.255.0: not in table
[EMAIL PROTECTED] ~]# route delete -net 192.168.3.0 255.255.255.0 172.16.21.1
route: writing to routing socket: No such process
delete net 192.168.3.0: gateway 255.255.255.0: not in table
[EMAIL PROTECTED] ~]# route delete 128.0.10xac101501 255.255.255.0
route: bad address: 128.0.10xac101501
[EMAIL PROTECTED] ~]# route delete 128.0.1 255.255.255.0
route: writing to routing socket: No such process
delete host 128.0.1: gateway 255.255.255.0: not in table


--- Oliver Fromme [EMAIL PROTECTED] wrote:

 Patrick Dung wrote:
   Suppose I have mistype a command:
   # route add 192.168.3.0 255.255.255.0 192.168.3.1
 
 So you swapped gateway and netmask.  Nasty mistake.  :-)
 
 It's usually better to use CIDR notation (with a slash
 followed by the number of network bits), to avoid any
 confusion.  It's also less typing.
 # route add 192.168.3.0/24 192.168.3.1
 
   There is a strange routing table and I am unable to remove it
 unless
   reboot:
   
   192.168.00xc0a80301 255.255.255.0  UGS 0   86  
 fxp0
 
 How did you try to remove it (exact comand line, please),
 and what was the error message that you got?  You should
 enter exactly the same line you used to add the route,
 only replace add with delete.
 
 It works fine for me, so I assume you did a syntax error
 when trying to remove it.
 
 Best regards
Oliver
 
 -- 
 Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
 Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
 Any opinions expressed in this message may be personal to the author
 and may not necessarily reflect the opinions of secnetix in any way.
 
 The last good thing written in C was
 Franz Schubert's Symphony number 9.
 -- Erwin Dieterich
 



 

Sucker-punch spam with award-winning protection. 
Try the free Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/features_spam.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to clear strage route in routing table?

2007-01-12 Thread Patrick Dung
Thanks Nikos for reply

I have figure out how to remove that route
It was consider 192.168.3.0 as host instead of net

[EMAIL PROTECTED] ~]# route add 192.168.3.0 255.255.255.0 192.168.3.1
add net 192.168.3.0: gateway 255.255.255.0
[EMAIL PROTECTED] ~]# route delete -net 192.168.3.0
route: writing to routing socket: No such process
delete net 192.168.3.0: not in table
[EMAIL PROTECTED] ~]# route delete -host 192.168.3.0
delete host 192.168.3.0

--- Nikos Vassiliadis [EMAIL PROTECTED] wrote:

 On Thursday 11 January 2007 19:01, Patrick Dung wrote:
  Hi
  
  Suppose I have mistype a command:
  # route add 192.168.3.0 255.255.255.0 192.168.3.1
  
  There is a strange routing table and I am unable to remove it
 unless
  reboot:
  
  192.168.00xc0a80301 255.255.255.0  UGS 0   86  
 fxp0
  
  Any ideas?
 
 Use route flush. And add your static routes again
 either by hand or with the help of /etc/rc.d/routing start
 
 Nikos
 



 

TV dinner still cooling? 
Check out Tonight's Picks on Yahoo! TV.
http://tv.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to clear strage route in routing table?

2007-01-11 Thread Patrick Dung
Hi

Suppose I have mistype a command:
# route add 192.168.3.0 255.255.255.0 192.168.3.1

There is a strange routing table and I am unable to remove it unless
reboot:

192.168.00xc0a80301 255.255.255.0  UGS 0   86   fxp0

Any ideas?


 

Any questions? Get answers on any topic at www.Answers.yahoo.com.  Try it now.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to clear strage route in routing table?

2007-01-11 Thread Patrick Dung
Hi

Suppose I have mistype a command:
# route add 192.168.3.0 255.255.255.0 192.168.3.1

There is a strange routing table and I am unable to remove it unless
reboot:

192.168.00xc0a80301 255.255.255.0  UGS 0   86   fxp0

Any ideas?


 

Need a quick answer? Get one in minutes from people who know.
Ask your question on www.Answers.yahoo.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD6 NATT L2TP IPSEC

2005-11-28 Thread Patrick Dung
Hi

I have ipsec-tools's freebsd6 natt patch on the kernel.
Run ipsec-tools(racoon with natt).

NATT should work (I see phase 2 message pass between client (XP) and
the FreeBSD server. Windows behind NAT (registry changed to do NATT)
It seems the l2tpd (from ports 0.69) does not start (which call pppd).

Has anyone get success with FreeBSD6+NATT+L2TP-IPSEC ?



__ 
Yahoo! Music Unlimited 
Access over 1 million songs. Try it free. 
http://music.yahoo.com/unlimited/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Resired features/wish list for FreeBSD

2004-10-28 Thread Patrick Dung
Hi

First of all, I know that most commiters or
contributors contribute their work in their free time.
I am not asking for any promise but I just want to
discuss possible improvement for FreeBSD.

OK, after using FreeBSD for some time, I would like to
see FreeBSD have these features/improvements:

1) OpenLDAP Integration
FreeBSD has OpenLDAP support in the ports, but I think
it would be great if FreeBSD support LDAP out of the
box (just like Solaris and most Linux distro)
There are areas to improve:
- nsswitch (it's in the ports)
But it only support passwd and group now.
- naming cache daemon (nscd)
Without this one, the workstation will query the LDAP
server everytime with just very simple command like
ls.
A lookupd is in the ports but it would be great if it
is integrated and/or improved.

2) A stable software raid implementation
To my knowledge, vinum is not very stable in 5.x.

3) Java improvement
It seems that the development has been stopped after
JDK 1.3.1/1.4.2 for a long time.
Java performance in FreeBSD is not very good.

4) Some nice ports are broken in 5.x
Like tripwire 2.3.1.2_3

Regards
Patrick

_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Resired features/wish list for FreeBSD

2004-10-28 Thread Patrick Dung
 --- Jeremy Faulkner [EMAIL PROTECTED] wrote
 On Thu, 2004-10-28 at 16:07, Patrick Dung wrote:

  1) OpenLDAP Integration
  FreeBSD has OpenLDAP support in the ports, but I
 think
  it would be great if FreeBSD support LDAP out of
 the
  box (just like Solaris and most Linux distro)
 
 Why? It's one thing to state your opinion (which
 you've done), and
 another to support it. I don't mean to be rude, but
 it does take a bit
 more to get something moved into the base install.
 It can't just be more
 convenient to you, it has to improve the system for
 the entire user base
 of FreeBSD, or at least the majority of those users
 that express their
 opinion.
 

Let me explain more.
The integeration with OpenLDAP is like the integration
of OpenPAM, OpenSSH, AMD automounter and Bind (what we
have now).
We have default opie support and  kerberos support
(requries recompile FreeBSD) in OpenPAM.
So lets discuss whether people find native ldap
authentication support in OpenPAM useful or not.

I haved tried Redhat.
Their installer has support for workstation ldap logon
authentication against the ldap server, which is
handy.

  
  3) Java improvement
  It seems that the development has been stopped
 after
  JDK 1.3.1/1.4.2 for a long time.
 
 I don't know what you define as a long time, but jdk
 1.5 was only
 recently released. I assume you didn't expect it to
 be ported before it
 was released.
 

OK, I should say:
No newer patchset has been released for a long time
for JDK 1.3.1/1.4.2.
I am not referring to JDK 1.5.

  Java performance in FreeBSD is not very good.
 
 Prove it. I'm sure java@ would be interested in
 seeing your proof and
 even more interested in seeing patches.
 

I have tried this web site
http://rsb.info.nih.gov/nih-image/java/benchmarks/sieve.html
On the same machine, Linux gives me twice score over
FreeBSD.

 Hey Pat, I hope you don't mind if I call you Pat,
 this mailing list is
 questions@, do you have a question for the list?
 

I refer to http://docs.freebsd.org
It says:
When in doubt about what list to post a question to,
post to [EMAIL PROTECTED]

Patrick

_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Mount name length limit (MNAMELEN)

2004-08-05 Thread Patrick Dung
Hi

It seems that the constant is in /usr/sys/sys/mount.h.
The limit is already there since the initial import in
1995. (From 4.4BSD?)
I want to know what is the root cause preventing a
larger value.

PS: I have found some interesting links about
MNAMELEN:

http://leaf.dragonflybsd.org/mailarchive/kernel/2003-08/msg00194.html

http://www.secnetix.de/~olli/FreeBSD/mnamelen.hawk

From Compaq(HP) Tru64 UNIX 5.1 man pages, it seems
that Tru64 UNIX also have a restriction of 90
chars.(They also based on BSD?)
http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/V51B_HTML/MAN/MAN2/0114.HTM

_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Curious question about FreeBSD's TCP/IP and SMP locking

2004-08-01 Thread Patrick Dung
Hi

After browsing the *BSD cvsweb site, I have found that
FreeBSD-current's TCPIP code has added locking/mutex
in it.

I am not programmer but I want to know what is the use
of adding so much locks/mutex in the stack? Also,
would it make a newbie/beginner feel difficult to
understand the code (I mean the TCP/IP part)?

Thanks

_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpdump (/dev/bpf* permission) in FreeBSD-current

2004-07-11 Thread Patrick Dung
My last mail is waiting for the mailing list approval.
But it was already some days, so I sent it again.

--- Patrick Dung [EMAIL PROTECTED] 
--- Lowell Gilbert
 [EMAIL PROTECTED] 
 Patrick Dung [EMAIL PROTECTED] writes:
  
   Only /dev/bpf0 is there at boot time
   But when I run tcpdump, it automatically create
   /dev/bpf1 (I have multiple NIC).
   Running devfs at boot time cannot set the
  /dev/bpf1,
   which is not present.
  
  Running devfs(8) at boot time will set rules that
  will be
  automatically applied to bpf1 when it is created. 
  What do your devfs
  rules look like?
   
 
 own bpf*root:wheel
 permbpf*0660
 


_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpdump (/dev/bpf* permission) in FreeBSD-current

2004-07-09 Thread Patrick Dung
--- Lowell Gilbert
[EMAIL PROTECTED] 
Patrick Dung [EMAIL PROTECTED] writes:
 
  Only /dev/bpf0 is there at boot time
  But when I run tcpdump, it automatically create
  /dev/bpf1 (I have multiple NIC).
  Running devfs at boot time cannot set the
 /dev/bpf1,
  which is not present.
 
 Running devfs(8) at boot time will set rules that
 will be
 automatically applied to bpf1 when it is created. 
 What do your devfs
 rules look like?
  

own bpf*root:wheel
permbpf*0660

_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpdump (/dev/bpf* permission) in FreeBSD-current

2004-07-07 Thread Patrick Dung
Only /dev/bpf0 is there at boot time
But when I run tcpdump, it automatically create
/dev/bpf1 (I have multiple NIC).
Running devfs at boot time cannot set the /dev/bpf1,
which is not present.

--- Lowell Gilbert
[EMAIL PROTECTED] 
Patrick Dung [EMAIL PROTECTED] writes:
 
  There is no way to decided the user/group and
  permission of the device created. (/etc/devfs.conf
 can
  be used, but it had to be start after the device
 is
  created, where it is not created at boot time).
 
 devfs(8) rules should be automatically applied to
 all devices as
 they're created.  Setting up the rules at boot time
 should be exactly
 what you need.  Is this not happening?
 
 -- 
 Lowell Gilbert, embedded/networking software
 engineer, Boston area
   http://be-well.ilk.org:8088/~lowell/
  

_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


tcpdump (/dev/bpf* permission) in FreeBSD-current

2004-07-04 Thread Patrick Dung
Hi
nbsp;
For FreeBSD-stable, I can change the permission of the
/dev/bpf*.
But for FreeBSD-current, the bpf device is created at
runtime.
There is no way to decided the user/group and
permission of the device created. (/etc/devfs.conf can
be used, but it had to be start after the device is
created, where it is not created at boot time).
nbsp;
Patrick
Regards


_
...
  
http://us.rd.yahoo.com/evt=22281/*http://ringtone.yahoo.com.hk/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]