from:"Vladimir"


Hello everyone.
We'v noticed some strange situation. After reboot and login, system 
didn't ask for password while switchig with su -l.


In details, there was root login from terminal and one from ssh.
Terminal login was directly as root(via ip-console), and ssh was as 
user, then attemped switch to root with su -l, and there were NO 
password request,no prompt at all. At the same time login from terminal 
accepted root password, first I thought that means password wasn't 
empty, but system even with empty password should print Password:..and 
that time it was nothing absolultey. We even logged out and then su -l 
again.


And It looked such way:

%su -l
St-serv#
St-serv# exit
%su -l
St-serv#

We'v been shocked and hurried a bit and changed root password without 
/etc/master.passwd backup for explorations.

After chagning password we cant no reprocude such behaviour.

It's also should be noticed that system was booting after unsafe power 
shutdown, and there was fs-check running in background(accroding to 
logs), corrected cleared some files(searching by inum resulted to nothing).


sysctl -a gave such string:
118Starting background file system checks in 60 seconds.
118

and in /var/log/messages we could see:
Jun 15 14:57:39 St-serv kernel: em0: link state changed to UP
Jun 15 14:57:49 St-serv login: ROOT LOGIN (root) ON ttyv0
Jun 15 14:58:47 St-serv fsck: /dev/ad0s1e: 71 files, 11 used, 2538508 
free (84 frags, 317303 blocks, 0.0% fragmentation)
Jun 15 15:02:31 St-serv fsck: /dev/ad0s1f: 264646 files, 1378041 used, 
60368113 free (43545 frags, 7540571 blocks, 0.1% fragmentation)

Jun 15 15:03:31 St-serv su: zimmer to root on /dev/ttyp0
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: INCORRECT BLOCK COUNT 
I=1931747 (897632 should be 897600) (CORRECTED)
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: INCORRECT BLOCK COUNT 
I=1931748 (1865184 should be 1865120) (CORRECTED)
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: INCORRECT BLOCK COUNT 
I=2284637 (4 should be 0) (CORRECTED)
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: INCORRECT BLOCK COUNT 
I=2284713 (4 should be 0) (CORRECTED)
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: UNREF FILE I=23557  
OWNER=root MODE=100644
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: SIZE=0 MTIME=Jun  9 18:51 
2012  (CLEARED)
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: UNREF FILE I=1931319  
OWNER=root MODE=100640
Jun 15 15:03:43 St-serv fsck: /dev/ad0s1d: SIZE=728 MTIME=Jul 26 17:37 
2011  (CLEARED)

...


I'v googled and found only one thread with su didnt'asking for password, 
that one was abut jails, but this time we have a 100% garanty that we 
didnt put any virtual enviroments.


So the thing that scares is, mb this is symptop of server rootkit? (We'v 
found nothing unusual in logs but it means nothing...) Or there is some 
other explanation why su could not ask password?



Thanks in advance

PS Duplicated question to freebsd-questions and freebsd-security because 
unsure which one it should be send.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: (Free 7.2) su -l didnt prompt password.Is it possbile?


18.06.2012 18:02, Mike Tancsa написал:

On 6/18/2012 9:31 AM, Budnev Vladimir wrote:

And It looked such way:

%su -l

Before you enter this command, post the output of
id
Unfortunately, we can not flashback or reproduce that step now, cause 
we'v hurried and changed root password to avoid such strange free 
logins. And changing it back didnt change a thing. It was...and't went. 
We had only buffered console output :(
But mb you can point in what case there is possibility to make su -l 
without any prompt. I suppose you mean that user has gid=0 or smthng 
like that but it hasn't. And as i mentioned changin root password to 
another and backwards doesn't allow to reproduce discribed behaviour.


---Mike




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: (Free 7.2) su -l didnt prompt password.Is it possbile?


18.06.2012 18:32, Chris Rees ???:



On Jun 18, 2012 2:34 PM, Budnev Vladimir vladimir.bud...@gmail.com 
mailto:vladimir.bud...@gmail.com wrote:


 Hello everyone.
 We'v noticed some strange situation. After reboot and login, system 
didn't ask for password while switchig with su -l.


 In details, there was root login from terminal and one from ssh.
 Terminal login was directly as root(via ip-console), and ssh was as 
user, then attemped switch to root with su -l, and there were NO 
password request,no prompt at all. At the same time login from 
terminal accepted root password, first I thought that means password 
wasn't empty, but system even with empty password should print 
Password:..and that time it was nothing absolultey.


Empty password behaviour is for no prompt, so what you are seeing is 
normal, and means that you did indeed have a empty password.


Interesintg could it be that master.passwd file corrupted (after power 
shutdown) and fsck corrected in background.. which resulted in such 
behaviour.


The strange thing with possibly empty password is that login from 
ip-console accepted correct password. So dont sure about empty...It 
seems like su was accepting any password at that time.


Check your logs very carefully over the past few weeks to make sure no 
one has broken in.


Yeah, seems we are forced to mount disks to another system and check for 
changes in critical system tools. Arghand then anyway redeploy system.


Chris



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: (Free 7.2) su -l didnt prompt password.Is it possbile?


18.06.2012 18:37, Mike Tancsa написал:

On 6/18/2012 10:24 AM, Budnev Vladimir wrote:

But mb you can point in what case there is possibility to make su -l
without any prompt.

If the uid is 0, you wont need to enter a passwd
Yeah i realized that you mean things came that way, but as I mentioned 
in prev mail, no gid or uid were 0, and we can not reproduce situation 
after password changing (we DID not changed any other system users)


---Mike




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Base compiler and amdfam10 - anybody/anything? (fwd)

2011-11-20 Thread Vladimir Kushnir

Sorry for crossposting but since no one on hackers@ seems to be 
interested...


-- Forwarded message --
Date: Wed, 16 Nov 2011 12:30:35 +0200 (EET)
From: Vladimir Kushnir vkush...@bigmir.net
To: hack...@freebsd.org
Subject: Base compiler and amdfam10 - anybody/anything?

Hi,
Are there any attempts to bring to -CURRENT newer AMD chips support? 
Personally, I've just tried to apply the patches from openSUSE's gcc-4.2.1 
SRPM. With slight adaptation they've applied and gave rather significant boost 
in resulting code speed. At least, testfcpy by Alexander Konovalenko 
(http://daemon.safety.sci.kth.se/~kono/testfcpu) gave me ~20% (!) speedup with 
-march=amdfam10 compared to our -march=athlon64-sse3 on Phenom II 970.
Unfortunately, the patched compiler with -march=amdfam10 fails in buildworld 
(internal compiler error's while compiling clang). The buildworld was 
successful with patched compiler and -march=athlon64-sse3 but since this is my 
main working system... Well, I had to come back to our unpatched compiler :-(
If anyone is interested, the patches were taken from 
gcc42-4.2.1_20070724-17.src.rpm (actually, I applied all the patches marked as 
AMD stuff), the resulting patches towards our src/contrib/gcc and 
share/mk/bsd.cpu.mk are attached (or I can send them by email), and I am quite 
ready to test what comes out of it.


WBR,
Vladimir

gcc-amdfam10.diff.gz
Description: Binary data


bsd.cpu.mk.amdfam10.gz
Description: Binary data
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Custom compiler/{C,CXX,F}FLAGS and /etc/make.conf - how to?

2011-11-09 Thread Vladimir Kushnir


Dear ALL,
The subject says it all. I'm trying to push out of my box every ounce of 
performance, perhaps even with (yet experimental) path64 compiler. So my 
question is as simple as that: what is the precise spell to put in 
make.comf to get (while not disrupting the ports infrastructure!) 
-march=amdfam10 if compiler is lang/gcc46 and -march=barcelona for path64 
(perhaps yet another flags as well if toolchain supports them)?


TIA,
Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: AMD 850/950 support?

2011-09-03 Thread Vladimir Kushnir


Hi Rob

On Fri, 2 Sep 2011, Rob wrote:

Anyone know if FreeBSD 8.2 supports the AMD 850 and/or 950 southbridge?  I've 
been looking on the web without much luck (unusual) and the hardware docs for 
the release for the ata driver only mentions 5 amd chipsets.  Is there 
perhaps a different chipset I should be looking for to determine ata support 
for those southbridges?


Rob


Not sure about 8.x. As far as I'm concerned SB850 seems to be supported 
fairly well under -CURRENT. My present setup:

Phenom II 970;
AsRock 890GX Extreme4 (it's AMD 890GX/SB850, SATA-3, USB3 etc.);
SATA-3 HDD (Hitachi);
FreeBSD amd64-CURRENT updated some every 2-3 weeks since the last May.
So far everything seems to work properly.

WBR,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: trouble mounting USB digital camera

2010-07-13 Thread Vladimir Kushnir


Hi Anton.

On Tue, 13 Jul 2010, Anton Shterenlikht wrote:


I'm trying to mount USB digital camera
to FBSD -current (either i386 or amd64).

I get to

ugen1.2: Eastman Kodak Company at usbus1

in dmesg, but no block device appears,
so I'm not sure how to mount this device.

Does the procedure for mounding USB camera
devices differ from that form USB flash drives?



Yes it looks like your camera uses PTP protocol (precisely like mine 
Kodak C340 does). In this case you don't mount it at all and use 
graphics/libgphoto2 based photo transfer/management programs instead (they 
are: console graphics/gphoto2, KDE3 based graphics/digikam, KDE4 
graphics/digikam-kde4, GTK+ graphics/gtkam, MONO graphics/f-spot and so on 
- make your choice)


Regards,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

HW recommendation

2010-07-12 Thread Vladimir Kushnir


Hi!

Please folks, I need some help. I'm in desperate need to upgrade my 
AMD64 (s939) box - need much more CPU/RAM power to do both CPU- 
and memory-intensive computations.
So here is my obvious question: which are the last supported chipsets/CPU 
and so on (I'm thinking along the line of AM3 AMD-based MB plus Phenom II 
- they seem to be a bit cheeper)? Is there any sence to look for the 
newest (AMD8xx) based MB, 6-core Phenoms, SATA III, USB-3 or they aren't 
going to work?


TIA,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

About libc6-dev on FreeBsd

2009-08-29 Thread Vladimir M


   Hello,
   I'm using FreeBsd 6.3 and I trying to build APE-Server from
   [1]http://www.ape-project.org.
   To compile APE -Server its riquire:
   - GCC
   - libc6-dev

   Could you please give me any suggestion about howto install libc6-dev
   on FreeBsd?

   Thank you.
   Best regards,
   Vladimir M

References

   1. http://www.ape-project.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

ATI Radeon X600: no DRI upon X restart :-(

2009-02-21 Thread Vladimir Kushnir

Hi,
Here's a problem. I start X from console via startx. For a long while DRI
gets initialized only if X is started practically immediately after boot
and only for the first time. Otherwise (if X is closed, then restarted,
or something has been done prior to startx) I get :

(EE) RADEON(0): [pci] Out of memory (-12)
(EE) RADEON(0): [pci] PCI failed to initialize. Disabling the DRI.

This is amd64-CURRENT,
uname -a:
FreeBSD kushnir1.kiev.ua 8.0-CURRENT FreeBSD 8.0-CURRENT #1: Wed Feb  4
08:15:51 EET 2009 r...@kushnir1.kiev.ua:/usr/obj/usr/src/sys/KUSHNIR
amd64

NForce4 based MB (s939) Asus A8N SLI, Athlon 3000+, 512 MB RAM, Radeon
X600 PCIE.

Any suggestions?

TIA,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Off-topic: Java Reflection/Generics/Collections question

2008-12-26 Thread Vladimir Tsvetkov

What you try to do is not a valid operation in type-safe language as Java.
You can't convert Coll to CollItemType,
but you can cast Coll? to CollWhatever.

Don't know if this is OK with the problem you're trying to solve

Merry Christmas!

On Fri, Dec 26, 2008 at 4:20 PM, Frank Staals franksta...@gmx.net wrote:

 Not realy a FreeBSD-specific question but I was not sure where I could find
 what I was looking for elseware (Googling did not manage to dig up much
 info):

 The problem:

 I want to set the type of objects some Collection object holds on runtime.
 In other wors I have an object C with: C extends AbstractCollection, I have
 the Class object T specifying what type of objects C should hold and I have
 a method M which takes a CT as an argument. I made a generic version of C
 (without the type) and now I have to set it so it can only carry objects of
 type T. Does anyone know how to do this ?

 Information in programming style:

 C extends AbstractCollection myCollection;
 Class itemType;


 public void myMethod(CitemType myCollectionArgument)

 How do I convert myCollection from being a C to a CitemType  on runtime
 so I can call myMethod(myCollection) ?

 I hope the explanation of my problem makes sense and someone can help me.

 Regards,


 --

 - Frank

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: flash9 checklist

2008-10-30 Thread Vladimir Grebenschikov

On Wed, 2008-10-29 at 19:05 +0100, Gary Jennejohn wrote:

 I don't have flashblock installed, but http://www.mtvmusic.com/ hangs
 firefox 100% of the time.  Strangely enough, under Linux it works just
 fine and I have pretty much the same version of flash and firefox installed
 on both systems.

It is strange, that exactly same site works fine for me with native ff3
under 8-CURRENT.

 Gary Jennejohn
--
Vladimir B. Grebenchikov
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: flash9 checklist

2008-10-29 Thread Vladimir Grebenschikov

On Wed, 2008-10-29 at 10:11 -0400, Steve Polyack wrote:
   
 Thanks for this.  I was able to get linux-flashplugin9 working in
 native 
 Firefox 3.0.3 on FreeBSD 7-STABLE i386.  The only additional thing I
 had 
 to do was copy 
 /usr/X11R6/lib/browser_plugins/npwrapper.libflashplayer.so into 
 ~/.mozilla/plugins/ for Firefox to recognize the plugin.  After that 
 Youtube, google video, and google maps (incl. street view) work fine, 
 but slow.  A friend of mine with a very similar setup was not so
 lucky 
 and still has problems with flash9 locking up FF.

I've seen temporary FF lockups with flashblock FF plugin enabled.
After disabling it lockups disappear.
Probably it is such case ?

-- 
Vladimir B. Grebenschikov
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Fetchmail: Error message in maillog [SOLVED]

2008-07-20 Thread Vladimir Botka

Hello,

fetchmail: connection to localhost:smtp [::1/25] failed: Connection
refused.

Just for the record. The problem is solved with these few lines in
the  /usr/local/etc/postfix/main.cf

#
inet_interfaces = 192.168.1.6, 127.0.0.1, [::1]
smtp_bind_address = 0.0.0.0
smtp_bind_address6 = ::
inet_protocols = all
#

Have fun,

-vlado
Vladimir Botka
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Bus error: 10 (core dumped) on FreeBSD 7.0

2008-03-16 Thread Vladimir Ch.

After upgrading to FreeBSD 7.0 some of the programs stopped working: when
trying to launch emacs or sbcl I am getting Bus error: 10.
Searching the internet revealed that this could be hardware problem - but
6.2, 6.3 ran the same box before without any errors. Windows XP also works
on the same computer.
I use GENERIC kernel.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: evolution slow on 7.0

2007-11-17 Thread Vladimir Grebenschikov


On Fri, 2007-11-16 at 16:38 -0600, Matt wrote:
 On Nov 14, 2007 4:45 PM, James [EMAIL PROTECTED] wrote:
  Hi folks,
 
  first, I know the subject line is a goldmine for jokes, but I couldn't
  think of a better way to phrase it.
 
  Ever since I moved to FreeBSD 7.0, the evolution mail client has become
  ridiculously slow for me. It takes two or three minutes to start up,
  right clicking on a folder takes several minutes to display a context
  menu etc

Same here on sched_4bsd.
Also I can say, that problem appears earlier than last release of gnome.
And it becomes worse with last update.

(same bits: startup, right-click on attachment, move message to folder,
change sort order /that only on last evolution/).




  My install process was as follows:
 
  1. backup my home directory from a FreeBSD 6.2 install
  2. Format the hard drive
  3. Install 7.0 beta 1.5
  4. csup sources and install beta 2.0
  5. pkg_add xorg, gnome etc -- evolution was slow as a dog from this
  6. portsnap fetch extract
  7. follow the instructions in UPDATING for updating gnome
 
  I tried cd /usr/ports/mail/evolution  make deinstall  make
  reinstall, to see if something had simply gone wrong during the build,
  but nothing changed.
 
  Any ideas?
 
  James
 
 I've also experienced this since moving to 7-CURRENT (and tracking
 through to the current 7.0-BETA2) and have been unable to figure out
 why.  Startup takes between 30 and 40 seconds, during with the
 evolution process consumes 100% of one of the cores of the dual-core
 processor.  After startup, various actions (including right-clicking
 on attachments) take approximately 10 seconds to complete the first
 time the action is done, this time with the evolution-data-server
 process consuming 100% of one core.  Running ktrace against the
 evolution process during startup shows large amounts of apparently
 random information, but I don't have a pre-7 system to compare it to.
 
 I use SCHED_ULE and have had no other noticeable system slowdowns.
 All ports have been built from source with no extra settings in
 /etc/make.conf.
 
 $ cat /var/db/ports/evolution/options
 
 # This file is auto-generated by 'make config'.
 # No user-servicable parts inside!
 # Options for evolution-2.12.1_3
 _OPTIONS_READ=evolution-2.12.1_3
 WITHOUT_PILOT=true
 WITHOUT_LDAP=true
 WITHOUT_SPAMASSASSIN=true
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-gnome
 To unsubscribe, send any mail to [EMAIL PROTECTED]
-- 
Vladimir B. Grebenschikov
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problems with www.freebsd.org

2007-10-01 Thread Vladimir Tsvetkov

Hi,
The problem is not in the FreeBSD site. The problem is in yout TV set, I
suppose.
I've experienced the same problem when I was using PPPoE and haven't
configured the MTU correctly.
If you're using PPPoE, to learn more check this out:
http://66.249.93.104/search?q=cache:eOfdxb4tmkoJ:renaud.waldura.com/doc/freebsd/pppoe/+Renaud+Waldura+%2B+PPPoEhl=enclient=firefox-a
and search the mailing list previous thread, such as: *PPPoE Link Problems*
.
Best regards,
Vladimir

On 01/10/2007, Fernando Apesteguía [EMAIL PROTECTED] wrote:

 Hi all,

 I'm having some problems with the FreeBSD site. Basically, when I type
 www.freebsd.org in the address bar in Firefox I can't access the web.
 I get always a timeout.

 The funny thing is that I can do ping and if I use the IP address I
 can access the main page, but then most of the links are not working
 for me.


 I wrote an email to the contact address that is showed in the page,
 but I haven't gotten any answer so far. This is the reason because I'm
 asking help here. I already deleted all the cookies and data of my
 browser and tried again but it didn't work.

 Any clues?

 Thanks in advance
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: About FreeBSD installation

2007-07-04 Thread Vladimir Tsvetkov


It depends on what you really want. If you don't want 64-bit version OS, I
don't think you'll have problems at all. Recently, my PC got fucked up, I've
changed the mother board, switched from 32 bit AMD Athlon to a 64 bit AMD
Turion, and successfully booted from the previously installed FreeBSD
4.9Release on the hard drive.
If you want the 64 bit version of the OS, further investigation from you are
needed.
Check this out:
http://www.freebsd.org/platforms/amd64.html

Best Regards,
Vladimir

On 04/07/07, Yordan Yordanov [EMAIL PROTECTED] wrote:


Hello

I want to install the last stable release of FreeBSD Unix on my desktop
machine with AMD64 processor. Are there any differences in the FreeBSD ports
for these two platform: FreeBSD/i386 and amd64? In the FreeBSD handbook I
saw a workaround which should be applied to set up FreeBSD for  some
chipsets. If I have such a problem can I try to install i386 version
on my machine. There is no reason not to work, but I want to be sure that
this is possible.

Greetings from Bulgaria

Yordan



-
С бензин в кръвта!
http://auto-motor-und-sport.bg/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Java on the BSD Desktop?

2007-05-30 Thread Vladimir Tsvetkov


On 30/05/07, Vladimir Tsvetkov [EMAIL PROTECTED] wrote:


When we talk about portability of User Interface applications with rich
interactivity we must also put into disscusion Adobe Flash and Adobe Flex
applications.
Adobe is working on its Apollo platform (huge part of it is open source -
http://www.podtech.net/home/2827/the-architecture-of-flash), which should
bring RIA into the desktop as a front end technology and leave to us the
choice among the diverse flavours of back end technologies.

To my oppinion Java is more suitable for  back end solutions. The level of
interractivity of Java GUI apps is around the standard for the most wide
spread applications, but it is still way to far from being competitive to
the richness in human-computer interaction, that we can design and use with
Flash/Flex apps.

I would like to see a native FreeBSD Flash player.

This is the main reason I'm getting into this disscussion.

There is a Flash player for the Macs and for the Linuxes, we need also a
native Flash player.

Best Regards,
Vladimir Tsvetkov,
http://www.gugga.com/

On 30/05/07, n j  [EMAIL PROTECTED] wrote:

  I guess if everyone here on this list gives his/her two cents to this
  topic we're having a nice java advocacy flame war. ;-)

 The main characteristic of a flame war is to disparage other people's
 arguments while maintaining that your arguments are the best, no?
 That's why I'm not going to try and talk anyone out of their poison
 :-), be it C, Python, Perl or C#/Mono.

 Rather, I would like to continue a constructive discussion by speaking
 from a personal experience. I apologize in advance if this is OT even
 though it is FreeBSD-related and this list does see a lot of
 shell/perl/... questions, so I don't see why a Java question should be
 illegitimate.

 First off, in my company we had a Java app (simple app, working with
 database and e-mails) written for Windows. And then, there came
 company decision to make Linux the default desktop solution. Java app
 worked like a charm with no changes whatsoever.

 Second, I'm running a custom-written Java server app on a FreeBSD
 server for over half a year in production plus many months before that
 in development. It works rock solid on Diablo JDK. Of course, we also
 have a GUI desktop app that connects to this server that works on both
 Windows and Ubuntu.

 I completely agree that Sun's licence is a hassle. Fortunately, in a
 year or two, we're going to have an open source Java platform meaning
 there will be no hassle with manual download while installing JRE/JDK.
 Combined with the great API, object-oriented nature of the language,
 free IDE for serious development (Eclipse and specifically Netbeans
 with a very capable Swing GUI visual editor) - this combination
 strikes me as something only Microsoft can compete with.

 Another .02,
 --
 Nino
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

FlashPlugin for Mozilla FireFox

2007-05-16 Thread Vladimir Strezhnev



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re[2]: New kernel and jail

2007-04-17 Thread Vladimir

OP On Fri, Apr 13, 2007 at 09:36:20AM +0400, Vladimir wrote:
 Hi all.

OP Hi Vladimir,
 
 I have FreeBSD 5.4 installed. There is a working jail. 
 I am trying to rebuild a kernel to enable quota support. Therefore
 i?ve added options QUOTA to config file (all other options
 are from GENERIC). When booting with this new kernel jail does not
 start. When i issue at the command prompt:
 jail /opt/jails/www.myhost.ru/ www.myhost.ru xxx.xxx.xxx.xxx /bin/sh
 i get:
 jail: jail: Invalid argument  
 
 There is no messages in log files regarding jail.
 After rebooting with old kernel everything is normal.

OP I can not say much about your problem - but 5.4 is a little bit
OP outdated. Is it possible for you to make an update to a newer release?
OP 6.2 would be a good deal.
OP There are very cute rc-scripts to start/restart/stop your jail(s), too.

No, it is not possible :(

Do i need to perform any actions with the jail when upgrading a kernel
or the jail must work without any changes?
Is there some sort of a Howto about this?

-- 
Regards,
 Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

New kernel and jail

2007-04-13 Thread Vladimir

Hi all.

I have FreeBSD 5.4 installed. There is a working jail. 
I am trying to rebuild a kernel to enable quota support. Therefore
i’ve added options QUOTA to config file (all other options are from GENERIC). 
When booting with this new kernel jail does not start. When i issue at the 
command prompt:
jail /opt/jails/www.myhost.ru/ www.myhost.ru xxx.xxx.xxx.xxx /bin/sh 
i get:
jail: jail: Invalid argument  

There is no messages in log files regarding jail.
After rebooting with old kernel everything is normal.

Please help.


-- 
Best regards,
 Vladimir

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problems compiling : libtool: link: cannot find the library `/usr/X11R6/lib/libpangocairo-1.0.la'

2006-10-26 Thread Vladimir Kushnir




On Thu, 26 Oct 2006, Tuc at T-B-O-H.NET wrote:


Hi,

Trying to compile wireshark (Which I had running
previously) and I get :

libtool: link: cannot find the library `/usr/X11R6/lib/libpangocairo-1.0.la' or 
unhandled argument `/usr/X11R6/lib/libpangocairo-1.0.la'

The reason it can't find it is its in /usr/local/lib
now. But why is wireshark thinking its in /usr/X11R6/lib? I
saw something about GNOME trying to change the location of libraries,
but I don't know what it is that might be telling it the wrong
location.

Thanks, Tuc


You've got some pre-GNOME-2.16 librar{y/ies} which references 
/usr/X11R6/lib/libpangocairo-1.0.la. Just check which one (I had some 
non-port and had to use grep: 
grep -l /usr/X11R6/lib/libpango `find /usr/X11R6/lib /usr/local/lib -name 
*.la`
) and reinstall it. BTW, you can get this error with other libs (GTK2, 
for one) as well.


Hope this helps,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Installing Oracle Client 10g on FreeBSD

2006-10-17 Thread Vladimir Terziev


No irony, i was serious!

According to my experience, Boris is right, that's way i was serious.

Using flash plugin with native Firefox is based on flashplugin-wrapper. 
As i know there is no such wrapper for Oracle Linux instantclient, that's way 
i'm interested to know a new solution, if any.

Vladimir


On Tue, 17 Oct 2006 09:44:56 +0400
Boris Samorodov [EMAIL PROTECTED] wrote:

 On Tue, 17 Oct 2006 00:00:57 +0200 Martin Hudec wrote:
  Vladimir Terziev wrote:
 I'll be very thankful if you provide working instructions how to 
   intermix FreeBSD and Linux libraries.
 Thanks in advance!
 
  I sense bit of irony here, but I hope I just have wrong feeling :).
  Mixing BSD and Linux libs? Well - what do you say on using native
  Firefox with linux flash plugin? Works too.
 
  I will try to do it, and let's hope I'll be able to get oracle
  connection to test simple perl script as without it I am bit lost (I
  used only client stuff, not full oracle database).
 
 Just a note: you can't mix FreeBSD and linux libraries at one
 application. Those processes may interact via stdin/stdout, sockets
 etc. just fine. But if you try to mix _libraries_ you'll get EFF OS
 ABI errors.
 
 
 WBR
 -- 
 Boris Samorodov (bsam)
 Research Engineer, http://www.ipt.ru Telephone  Internet SP
 FreeBSD committer, http://www.FreeBSD.org The Power To Serve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Installing Oracle Client 10g on FreeBSD

2006-10-16 Thread Vladimir Terziev


I'll be very thankful if you provide working instructions how to 
intermix FreeBSD and Linux libraries.

Thanks in advance!

Vladimir

On Mon, 16 Oct 2006 17:51:01 +0200
Martin Hudec [EMAIL PROTECTED] wrote:

 Hello,
 
 
 Scott T. Hildreth wrote:
I didn't either, but I am going to try. :-)
  
Martin, how did you do this?
 
 Well, as I've already had linux compatibility present in the system, 
 I've installed instantclient for linux and built DBD::Oracle.
 
 Currently I have it uninstalled as it is no longer needed for me, but I 
 can try it and provide with instructions.
 
 DBD::Oracle was being used by CMS system of my previous employer, and 
 that CMS was based on native perl stuff, not linux perl stuff.
 
 
 Martin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Installing Oracle Client 10g on FreeBSD

2006-10-16 Thread Vladimir Terziev


I'm also interested of mixing native FreeBSD libraries and Linux once, 
if it's possible ...

I tryed to install a DBD::Oracle module with natively build FreeBSD 
perl and Linux Oracle Instantclient. After some hacking of DBD::Oracle's make 
file, i managed to build native Oracle.so linked against Instantclient's 
libcltnsh.so library.

When i tryed use DBD::Oracle in a perl script i got Segmentation 
fault.
I don't think it's possible to intermix native FreeBSD libraries and 
Linux once used by a native FreeBSD executable.

Vladimir


On Mon, 16 Oct 2006 08:55:45 -0500
Scott T. Hildreth [EMAIL PROTECTED] wrote:

 On Sun, 2006-10-15 at 11:30 +0200, Martin Hudec wrote:
  Hello,
  
  Scott T. Hildreth wrote:
  He can't, DBD::Oracle uses oci underneath so he needs the Oracle 
   client to get the shared 
  libraries.   Mike you also need to compile or install a linux perl and 
   then install DBI  DBD::Oracle
  with the linux perl.  You could use DBD::Proxy instead of installing 
   DBD::Oracle.  It installed
   with DBI.  Type 'perldoc DBD::Proxy' to see the docs.  If you need 
   help, you can email me 
  or join the [EMAIL PROTECTED]
  
  Not fully correct - when I wanted to use DBD::Oracle, I did not need to 
  install linux-perl - just instantclient (linux compatibility enabled) as 
  Martinko mentioned. And it worked. And DBD::Oracle has been used with 
  native perl.
 
   Interesting, I have not used the instantclient.  I always have a full 
   Oracle install, since I need the database.  I will try that, 
   DBD::Oracle must not be linking with the libcltnsh.so.
 
 
  
  
  Martin
  ___
  [EMAIL PROTECTED] mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-database
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 -- 
 Scott T. Hildreth [EMAIL PROTECTED]
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-database
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: sound not work on Intel D945GNTL

2006-07-14 Thread Vladimir


You could use oss drivers.
http://4front-tech.com/
This drivers work good on my laptop.

 Hi.
 
 I've Intel D945GNTL S775 i945G mb. Driver snd_ich not work.
 I try Ariff's patch, but no effect.
 
 kernel:
 device sound
 device snd_ich
 
 uname -a:
 FreeBSD papa.home 7.0-CURRENT FreeBSD 7.0-CURRENT #4: Tue Jul 11
 18:23:38 VLAST 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/Neko  i386
 
 dmesg:  pci0: multimedia at device 27.0 (no driver attached)
 
 pciconf -vl:
 [EMAIL PROTECTED]:27:0:class=0x040300 card=0x02028086
 chip=0x27d88086 rev=0x01 hdr=0x00
 vendor   = 'Intel Corporation'
 device   = '82801G (ICH7 Family) High Definition Audio'
 class= multimedia
 
 FreeBSD will maintain this hardware? What me to do now?
 
 ---
 With best regards, Valeriy Klimentiev.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]


-- 
С Уважением Крупенченков В.В.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Why are so many people using 4.x?

2006-03-29 Thread Vladimir Tsvetkov

2006/3/29, Vaaf [EMAIL PROTECTED]:
 FreeBSD, and UNIX for that matter, is based off 30-year-old concepts.
 Noboy can deny this. That being said, you can compare the development
 of FreeBSD to building a skyscraper on shallow grounds. Naturally, the more
 you build the more building is likely to collapse. This is now the case with
 the old FreeBSD (in which a couple of smart guys decided to savior into
 DragonFly) versus the new FreeBSD. I think the same thing is happening
 with Windows versus Vista. As OS development progresses, this little
 theory of mine will become more and more obvious. If anyone on this list can
 contribute with facts and observations to strenghten this theory, I would
 really appreciate it.

30 years of development and continual introduction of new features
build on top of existing ones is considered a very good design. And
FreeBSD is still extensible and growing, despite of its age.
And FreeBSD is not a skyscraper neigther literally, nor metaphorically
- it's more like a spaceship - a very robust one - gives you the means
and tools to save your life in deep space when a threat to your life
appears and there is noone around.
Before even starting talking about design, we should give proper
definition for this concept.
What is good design?
How do we measure one design against an alternative one?
The widespread notion of good desing is related to the ability to
maintain, extent and comprehend easily some complex system.
30 years... You do the math!
I'm not sure you're ready to present a new and revolutionary design
(you should start a new threat on that). It's more like you're in
search of volunteers to your FreeBSD Critisism Project.
Revolutionary design means starting from scratch  - this would be a
huge, tremendous investment of time and efforts(choose a platform, a
language, write a compiler for it, start building a kernel, write
completely new device drivers - Microsoft have its Singularity
Research Project - an operating system written entirely in C#, but
they don't share the tools - the C# compiler and linker they use to
build that system, neighter the code - you can get just a couple of
PowerPoint presentions, an interview, and a short 50 page long paper,
about the features that this system will introduce - on the other hand
you can get all of the FreeBSD source code, tones and tones of
documentation, and hundreds of ready to help you people - FOR FREE).
And there's no guarantee that this new design would last even 5 years.
At some point in time this will probably happen, but it won't be
FreeBSD. FreeBSD is not a vendor - it's an existing and evolving
operating system and a commited community of FreeBSD users. The
emphasis is on evolving.
If we want to stick to FreeBSD, the new design should be evolutionary
one, which is pretty different in concept - we would start from a
familiar code base and would slowly integrate changes (just like the
DragonFly project) into this base, thus creating a new BSD branch of
development.

Best Regards,
Vladimir Tsvetkov
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

ipfw2+divert; why divert rule is ignored?

2006-03-09 Thread Vladimir

FreeBSD 5.4

Specifically, I can't figure out why rule 3800 is ignored...  :confused: 
If you have idea - just give clue abt it Thanks...
Regular NAT is working properly, but I can't configure NAPT to services on 
server in LAN

Interface to LAN is also untrusted -that's why so many details in config...
tun0 - interface to Internet
vr1 - interface to LAN
212.42.xxx.xxx - my external IP

firewall rules [#ipfw -de sh] 
[CODE]
0380000 divert 6893 log logamount 100 tcp from 192.168.0.1 80 to 
any out via tun0
040000  0 check-state
044000  0 allow log logamount 100 tcp from 212.42.xxx.xxx 80 to any out 
via tun0
04700   25   1554 divert 6893 log logamount 100 tcp from any to 212.42.xxx.xxx 
dst-port 80 in via tun0
05000  150   6816 allow log logamount 100 tcp from any to 192.168.0.1 dst-port 
80 in via tun0 setup keep-state
## Dynamic rules (14):
05000   17768 (0s) STATE tcp 212.112.117.70 1212 - 192.168.0.1 80
...[/CODE]

/var/log/security
[CODE]...
Mar  9 14:40:23 free kernel: ipfw: 4700 Divert 6893 TCP 212.112.117.70:1212 
212.42.xxx.xxx:80 in via tun0
Mar  9 14:40:23 free kernel: ipfw: 5000 Accept TCP 212.112.117.70:1212 
192.168.0.1:80 in via tun0
Mar  9 14:40:23 free kernel: ipfw: 5000 Accept TCP 212.112.117.70:1212 
192.168.0.1:80 out via vr1
Mar  9 14:40:23 free kernel: ipfw: 5000 Accept TCP 192.168.0.1:80 
212.112.117.70:1212 in via vr1
#^this is O'k - packet is ready to be caught by rule 3800 but that rule is 
ignored and pachet processed by dymamic rule  :confused: 
Mar  9 14:40:23 free kernel: ipfw: 5000 Accept TCP 192.168.0.1:80 
212.112.117.70:1212 out via tun0
...[/CODE]

natd is started by 
[CODE]natd -log_denied -s -m -p 6893 -dynamic -n tun0 -redirect_port tcp 
192.168.0.1:80 80 -log_ipfw_denied -l[/CODE]
  

-- 
Best regards,
 Vladimir  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

quotas + jail ?

2006-01-11 Thread Vladimir Dvorak

Hello,

I have simple question - is possible to use quotas in jail(8) environment ?

I set up my system as follows:
1. this is setting in main environment
cat /etc/fstab | grep VSERVERS
/dev/ad3s1f /VSERVERS   ufs
rw,noatime,groupquota=/VSERVERS/machine1/quotagroup,userquota=/VSERVERS/machine1/quotauser

2   2

2. this is setting in jail(8)
/dev/ad3s1f  /ufs
rw,noatime,soft-updates,groupquota=/quotagroup,userquota=/quotauser

But still cannot use quotas in jail. I thought if I have access to
quotagroup and quotauser files, I can simply use quotas advantages.

I try

[EMAIL PROTECTED] /etc/rc.d/quota restart
quotaoff: /: Operation not permitted
quotaoff: /: Operation not permitted
Checking quotas: done.
Enabling quotas:quotaon: using /quotagroup on
quotaon: /: Operation not permitted
quotaon: using /quotauser on
quotaon: /: Operation not permitted
 done.


It seems to be impossible ( some kernel restriction ). :-( Is there some
way to allow this ? My last idea was to replicate users and groups to
main system and use quotas from it - but it is not good solution if we
have several hundreds users in jail(8).

Thank you !

Vladimir Dvorak

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: quotas + jail ?

2006-01-11 Thread Vladimir Dvorak

Björn König wrote:

 Vladimir Dvorak schrieb:

 I have simple question - is possible to use quotas in jail(8)
 environment ?
 [...]

 It seems to be impossible ( some kernel restriction ). :-( Is there some
 way to allow this ? My last idea was to replicate users and groups to
 main system and use quotas from it - but it is not good solution if we
 have several hundreds users in jail(8).


 You don't need to replicate users and groups, just use UIDs and GIDs.
 There is a serious disadvantage: if you set quota for a specific UID
 then it affects all users with the same UID in different jails and
 even at the host; I guess this is not what you want.

 If you want to restrict the space that can be consumed by a jail then
 you might use memory devices, i.e.

 # create 1 GiB file
 $ dd if=/dev/zero of=myjail321 count=16k bs=64k
 $ mdconfig -af myjail321
 md321
 $ mkdir /jail/myjail321
 $ mount /dev/md321 /jail/myjail321
 $ cd /usr/src
 $ make installworld DESTDIR=/jail/myjail321

 and so on ...


 Regards
 Björn

Thank you Björn,

I thing it is possible. I will shift existing UIDs ( in jail) to higher
values (5- ) and apply quotas on them. I will try to eliminate UID
mixing.

Thank you for your suggestion.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Which is the best open source C/C++ IDE out there?

2006-01-08 Thread Vladimir Tsvetkov

 This is obviously a trick question, because real
 programmers don't use IDEs. Case Closed.

I'm not a real programmer, but UNIX is a great developer environment.
It's a tool based environment.
Small tools, strong cohesion in what they are designed for, easy ways
to combine them to form more complex tasks.
Good documentation too.
Actually you don't need anything else, you don't need a colourfull IDE. But...
Maybe only few, really exceptional people can benefit and grok the
power of this kind of environments.
To me the ideal IDE is actually a toolkit:
- Source Editor, preferably with a object browser or other kind of a
source browser. An autocomplete functionallity could increase
productivity too - this could increase quality if we measure quality
of code by the low number of syntax mistakes, but this could also be a
threat to quality letting the programmer write without reading
carefully what is written - code bloating.
- Compiler with a debugger. We must discuss about the pros. and cons.
of a grafic debugger versus a text-mode debugger. The things are
getting really messy when it comes up to debugging multithreading code
and I really don't know what is the ultimate tool for this task.
- A build tool. Ant or make will suffice.
- Source control tools. CVS, SVN etc.
- Documentation tools. POD, Doxygen, Javadoc or something else.
- Unit testing framework. This is not always a tool. This could be a
language extension, or  a testing API.
- Other tools.

You don't need to put everything together in a single swissknife-tool,
but this could be convenient in some cases.

IDE vs. Toolbased Environments ???

Which is more productive and how to measure productiveness?

Best Regards,
Vladimir Tsvetkov
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

6.0-RELEASE problems with terminal

2005-12-09 Thread Vladimir Woelfl


Hi

Okay, i've read the docsmans to the extent possible without finding 
anything about this, i've searched the whole net upside down,
finally i edited the termcap manually, fixed nd to ^? in cons25 
def., made cap_mkdb on the termcap, and i still can't get the DEL key 
to behave as forward-delete.
I succeeded for VI which gets it okay, but in the shells BKSP and 
DEL still act identically. Now, as i remember a few years ago this was 
the same, with FreeBSD 4.2 or 4.3... except at that time this didn't 
bother me at all. Now the problem is i have a lot of people who work in 
the shell on a daily basis, and they are used to
DEL being forward delete, and BKSP being backward delete. Also, when 
i think a little bit further about this, i don't get the point of having 
two keys with the same function? Any help would be most appreciated.


ThanksBest Regards,
Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: sk0: watchdog timeout

2005-11-28 Thread Vladimir Dvorak

Bernhard Fischer wrote:

If you change hardware settings, you should also maintain the same
settings on both ends of the wire, i.e. at the computer *and* the
ethernet switch.
  

[SNIP]

I just forced it to use 100baseTX /
full-duplex which I think was used before I forced it as well.



That's exactly what I ment. If you force your sk0 to 100-full do the same with 
your switch. If you set sk0 to auto-config -- do it with your switch.

Watch your interface-counters: 

netstat -I sk0 -b -d -t

If the hardware (cards, cabeling, plugs, ...) is ok, there shouldn't be any 
errors for days or even weeks!

Regards,
bh
  

Hi Bernhard,

thanks for your message. I suppose we all know something about
networking, but this is hardware/driver related problem ( with the
highest probability ). I used my server in two different environments -
at home and now at serverhouse. No difference.
Still getting (from time to time ):

sk0: watchdog timeout
sk0: link state changed to DOWN
sk0: watchdog timeout
sk0: link state changed to UP
sk0: watchdog timeout
sk0: link state changed to DOWN
sk0: watchdog timeout
sk0: link state changed to UP
sk0: watchdog timeout
sk0: link state changed to DOWN

messages. But server still running. I am out of ideas how can we solve
our problem and I am about to buy new network card, because this
stressfull situation is not good. ;-)

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: sk0: watchdog timeout

2005-11-28 Thread Vladimir Dvorak

Danial Thom wrote:

--- Vladimir Dvorak [EMAIL PROTECTED] wrote:

  

Bernhard Fischer wrote:



If you change hardware settings, you should
  

also maintain the same


settings on both ends of the wire, i.e. at
  

the computer *and* the


ethernet switch.
 

  

[SNIP]

I just forced it to use 100baseTX /
full-duplex which I think was used before I


forced it as well.


   



That's exactly what I ment. If you force your
  

sk0 to 100-full do the same with 


your switch. If you set sk0 to auto-config --
  

do it with your switch.


Watch your interface-counters: 

netstat -I sk0 -b -d -t

If the hardware (cards, cabeling, plugs, ...)
  

is ok, there shouldn't be any 


errors for days or even weeks!

Regards,
bh
 

  

Hi Bernhard,

thanks for your message. I suppose we all know
something about
networking, but this is hardware/driver related
problem ( with the
highest probability ). I used my server in two
different environments -
at home and now at serverhouse. No difference.
Still getting (from time to time ):

sk0: watchdog timeout
sk0: link state changed to DOWN
sk0: watchdog timeout
sk0: link state changed to UP
sk0: watchdog timeout
sk0: link state changed to DOWN
sk0: watchdog timeout
sk0: link state changed to UP
sk0: watchdog timeout
sk0: link state changed to DOWN

messages. But server still running. I am out of
ideas how can we solve
our problem and I am about to buy new network
card, because this
stressfull situation is not good. ;-)

Vladimir



There are generally 2 cases in which you'll get a
watchdog timeout message on a network card
driver. 

1) Your machine is in livelock (ie overrun)
2) There is a problem with the interrupts

Clearly you should know if 1) was occurring. With
2), it could be a driver or hardware problem or
both.

DT

  

Hi,

thanks for reply. The first case ( overrun ) is impossible, the server
has (for now) very low traffic ( load is 0.00 almost all the time ). The
second case is right answer. ;-) I suspect driver related problem.
Before FreeBSD 6.0, there were Linux Debian and I didn`t mentioned any
problem. I had there for several days FreeBSD 5.4  and watchdogs appear
too.

Vladimir


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: sk0: watchdog timeout

2005-11-27 Thread Vladimir Dvorak

Hans Nieser wrote:

 Nicolas Blais wrote:

 On November 26, 2005 09:15 am, Hans Nieser wrote:
  

 A long, long time ago Vladimir Dvorak wrote:
   

 Hello,

 I have a problem with network card. From time to time kernel says

 sk0: watchdog timeout
 

 I just ran into the same issue. I have an ASUS A8N-SLI Deluxe in my
 desktop machine which runs FreeBSD 6.0+Xorg+Gnome. It has two on-board
 NICs, the nvidia one and a Marvel one. The nvidia was one big
 disaster and
 was giving me device timeouts so I never bothered with that one again.
   


 I have an sk0 too on one of my computer's onboard A8V-DX which will
 timeout once in a while too.  I found a way to reduce down time by
 modifying my rc.conf to force 'full-duplex 100Mbps'.  Now, even when
 it goes into a watchdog timeout, I quickly get back my link within
 that second.

 This is what my rc.conf line looks like:

 ifconfig_sk0=inet 192.168.1.100 media 100baseTX mediaopt full-duplex
 netmask 255.255.255.0
  

I found some other solution here:
http://sources.zabbadoz.net/freebsd/if_sk.html

There is recommended to use correct on-chip RAM size:

6. use correct on-chip RAM size; committed to HEAD
http://lists.freebsd.org/pipermail/cvs-src/2004-November/035293.html

Can some of you know how ?

Thank you.

Vladimir Dvorak

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

SQUID + antivirus content filter

2005-11-18 Thread Vladimir Dvorak

Hello *,

I would like to secure network against themselves with proxy and
antivirus solution.

My prerequisities are:
SQUID, CLAMAV

What software would you recommend for such things ? ( I unsuccesfully
tried Viralator in combination with SquidGuard. )
There are other projects like Dansguardian or squid-vscan (which is
neccessary to patch squid sources and this is the last step on my
production server ).
Do you know some good howto, solution ?

Thank you,

Vladimir


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Why my Freebsd 4.11 box keeps rebooting ?

2005-11-18 Thread Vladimir Dvorak

Jian Guo wrote:

Hi,

My Freebsd 4.11 boxes is used as a firewall and proxy
server.(ipfilter 3.4.35, squid 2.5 stable 7 is
intalled on Dell Poweredge700). 

On 11/11/2005 and only on that day, the box keep
rebooting  every 20 mins to several hours. After the
first reboot, I diable the proxy server and only let
firewall run.( another service is sshd and no other
service). After 20 mins it rebooted again, so I
swithed to a backup firewall, the same configuration
4.11 only sshd ipfilter and no proxy, but different
hardware. Then 30 mins later it rebooted again.

Then I swithed back the original box(only firewall)
and try find any log errors, but I could find nothing
wrong and the system was runnig normal,no over load,
no much traffic. And it kept rebooting for several
times. In the everning, it remained stable, and keeps
running without problems until now(for a week). 

I am so confused with it. I am the only one that
managed the box, and I checked the login files ,
nobody just me.

Any body has some clues about it?


Thanks,

Jian

Name: Jian Guo
Email: [EMAIL PROTECTED]

  

Hello Jian,

isn`t it electricity infrastructure problem ? Do you have stable UPS ?

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: SQUID + antivirus content filter

2005-11-18 Thread Vladimir Dvorak

Vladimir Dvorak wrote:

Hello *,

I would like to secure network against themselves with proxy and
antivirus solution.

My prerequisities are:
SQUID, CLAMAV

What software would you recommend for such things ? ( I unsuccesfully
tried Viralator in combination with SquidGuard. )
There are other projects like Dansguardian or squid-vscan (which is
neccessary to patch squid sources and this is the last step on my
production server ).
Do you know some good howto, solution ?

Thank you,

Vladimir

  


I found relatively interesting solution HAVP too:
http://www.server-side.de/documentation.htm

Vladimir


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Jail and priority

2005-11-15 Thread Vladimir Dvorak

Hello all,

simple question: is possible to decrease or increate priority for whole
jail without making script which parses all jail processes ?

Thank you,

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

system lacks resources

2005-11-14 Thread Vladimir Dvorak

Hello list,

I have problem with loaded Postfix server.  I use Postfix, Amavis,
Spamassassin, Cyrus-Imap.
When the server is under mail load, these messages appears in logs:

(host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1
port 10025, Net::SMTP: connect: Operation not permitted (Operation not
permitted) at /usr/local/sbin/amavisd line 4323, GEN4 line 839.,
MTA([127.0.0.1]:10025), id=63072-10 (in reply to end of DATA command))

When the load decreases, these messages are delivered.

I thing this is problem related to allowed system resources. Has anyone
met this problem ? How can I increase or where to tune system variables
? /etc/login.conf ?

Thank you,

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: sk0: watchdog timeout

2005-11-04 Thread Vladimir Dvorak

Nicolas Blais wrote:

On November 3, 2005 06:37 pm, martinko wrote:
  

Vladimir Dvorak wrote:


Hello,

I have a problem with network card. From time to time kernel says

sk0: watchdog timeout

It has (probably) random behavior.

I use FreeBSD 5.4-RELEASE-p8, motherboard is ASUS A8V Deluxe (AMD64,
Athlon64XP 3200+) and internal network card from pciconf -v -l

[EMAIL PROTECTED]:10:0: class=0x02 card=0x811a1043 chip=0x432011ab 
rev=0x13
hdr=0x00
vendor   = 'Marvell Semiconductor (Was: Galileo Technology Ltd)'
device   = '88E8001 Gigabit 32-bit Ethernet Controller with
Integrated PHY'
class= network
subclass = ethernet


This machine should be sent to serverhouse and I am not sure, if it is
ready. :-( Can anyone tell me what is the solution ? To buy another
netcard ?

Thank you,

Vladimir Dvorak




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
  

the same chip here and i see the messages from time to time too.
not sure what's the problem or if there is any at all.
so far card has been working alright, or at least i haven't noticed any
issues.

m.




Same here too:

sk0: watchdog timeout
sk0: watchdog timeout
sk0: watchdog timeout

with occasional :
sk0: discard frame w/o leading ethernet header (len 10 pkt len 10)
sk0: discard frame w/o leading ethernet header (len 11 pkt len 11)

Network is running fine, though sometimes accessing the internet takes 2-3 
seconds (as if the DNS was not responding) but then is fine. 

  

Yes, the same feeling. This error is independend on load. I downloaded
tens of GB and nothing happend, but usually after boot this error
occures ( I do not know if it is really error).
Tonight I tested small pings on this machine from several stations in
network, no watchdog timeout message.
Once I mentioned 1-2 seconds networking break, when I 'dmesg'
immediatelly after that, the watchdog was there.
Im not sure if I can put it as production server :-(. But   I will
try. ;-)

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

cannot jkill JAIL

2005-11-04 Thread Vladimir Dvorak

Hi,

cannot jkill jail.

I have in /etc/rc.conf this:

jail_enable=yes
jail_list=firma1
jail_set_hostname_allow=NO

jail_firma1_rootdir=/mnt/JAILS/10.0.0.166
jail_firma1_hostname=company1.domain.com
jail_firma1_ip=10.0.0.166
jail_firma1_exec_start=/bin/sh /etc/rc
jail_firma1_exec_stop=/bin/sh /etc/rc.shutdown
jail_firma1_exec_devfs_enable=YES

After boot process I ssh to host system and look for jail like this:

[EMAIL PROTECTED] jls
   JID  IP Address  Hostname  Path
 1  10.0.0.166  company1.domain.com  
/mnt/JAILS/10.0.0.166

And the problem ? I cannot jkill this jail

[EMAIL PROTECTED] jkill -r 1
jkill: couldn't connect to kernel: bad namelist - no kernbase
[EMAIL PROTECTED] jkill -k 1
jkill: couldn't connect to kernel: bad namelist - no kernbase
[EMAIL PROTECTED] jkill -f -k 1
jkill: couldn't connect to kernel: bad namelist - no kernbase

No chance. :-( ( but as you can see, jls reports jail running and I can
via SSH connect to)

What I am doing wrong ?

Thank you,

Vladimir


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cannot jkill JAIL

2005-11-04 Thread Vladimir Dvorak

Vladimir Dvorak wrote:

Hi,

cannot jkill jail.

I have in /etc/rc.conf this:

jail_enable=yes
jail_list=firma1
jail_set_hostname_allow=NO

jail_firma1_rootdir=/mnt/JAILS/10.0.0.166
jail_firma1_hostname=company1.domain.com
jail_firma1_ip=10.0.0.166
jail_firma1_exec_start=/bin/sh /etc/rc
jail_firma1_exec_stop=/bin/sh /etc/rc.shutdown
jail_firma1_exec_devfs_enable=YES

After boot process I ssh to host system and look for jail like this:

[EMAIL PROTECTED] jls
   JID  IP Address  Hostname  Path
 1  10.0.0.166  company1.domain.com  
/mnt/JAILS/10.0.0.166

And the problem ? I cannot jkill this jail

[EMAIL PROTECTED] jkill -r 1
jkill: couldn't connect to kernel: bad namelist - no kernbase
[EMAIL PROTECTED] jkill -k 1
jkill: couldn't connect to kernel: bad namelist - no kernbase
[EMAIL PROTECTED] jkill -f -k 1
jkill: couldn't connect to kernel: bad namelist - no kernbase

No chance. :-( ( but as you can see, jls reports jail running and I can
via SSH connect to)

What I am doing wrong ?

Thank you,

Vladimir

  

Now it is solved.

I should mount devfs into the jail also. ('mount_devfs devfs
/mnt/JAILS/10.0.0.167/dev')

Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

sk0: watchdog timeout

2005-11-03 Thread Vladimir Dvorak

Hello,

I have a problem with network card. From time to time kernel says

sk0: watchdog timeout

It has (probably) random behavior.

I use FreeBSD 5.4-RELEASE-p8, motherboard is ASUS A8V Deluxe (AMD64,
Athlon64XP 3200+) and internal network card from pciconf -v -l

[EMAIL PROTECTED]:10:0: class=0x02 card=0x811a1043 chip=0x432011ab rev=0x13
hdr=0x00
vendor   = 'Marvell Semiconductor (Was: Galileo Technology Ltd)'
device   = '88E8001 Gigabit 32-bit Ethernet Controller with
Integrated PHY'
class= network
subclass = ethernet


This machine should be sent to serverhouse and I am not sure, if it is
ready. :-( Can anyone tell me what is the solution ? To buy another
netcard ?

Thank you,

Vladimir Dvorak




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Swap space

2005-11-01 Thread Vladimir Tsvetkov

 Hi,

 I just bought 4 servers with 4 gigs of ram, the documentation
 proposes to use 2 to 3 times the amount of ram for swap... I don't
 think 12 gigs of swap would be useful lol, but do I really need to
 put 4 gigs of ram. (It might be useful for kernel dump but...)

 What do you guys do with swap space in this scenario ?


It depends on how big is the address space for your machines.
32-bit machines can address 4GB of memory, so it's reasonable to use 2
or 3 times the amount of RAM space (if you hawe 256MB or 512MB - the
swap should be 768MB or 1GB), but if you have 32bit machines with 4GB
of memory there is no need to use more than 4GB for swap.
64-bit machines can address 2^64 bytes which is a very big address
space, so you should use the guidelines in the documentation (FreeBSD
Handbook).

Best regards,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

make.conf - question

2005-10-31 Thread Vladimir Dvorak

Hello,

where can I found ALL parameters suited for /etc/make.conf ? For
example, I wanted install some software from ports without X11, but

man 5 make.conf

doesn`t include WITHOUT_X11 option.

Fortunatelly I found this page

http://www.gsp.com/cgi-bin/man.cgi?section=5topic=make.conf

and included some necessary parameters into my make.conf.

Ok, I found this

--- man make.conf ---
The purpose of make.conf is not to run commands or perform compilation
 actions directly.  Instead, it is included by the various makefiles in
 /usr/src, /usr/ports and /usr/doc which conditionalize their internal
 actions according to the settings found there.
--- cut ---

in man page, but im not sure where exactly should I look ?

(OS: 5.4-RELEASE FreeBSD 5.4-RELEASE )

Thank you,

Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Apache::DBI Problems

2005-10-27 Thread Vladimir Tsvetkov

 I'm having some major issues with perl site I'm trying to get working.
 I'm running FreeBSD 5.4 stable using Apache 2.0.55 and perl 5.8.7.  The
 error I'm getting is:
 Can't locate object method connect_on_init via package Apache::DBI
 (perhaps you forgot to load Apache::DBI?)

 I do have
 LoadModule perl_module libexec/apache2/mod_perl.so
 PerlModule Apache::DBI
 in my httpd.conf file.  I'm pretty new to perl and have no idea what
 I've done wrong.  Any help would greatly be appreciated.  If you need
 more info from me, don't hesitate to ask.

Maybe you should inspect the Perl script you're trying to run, and you
should look for the following Perl statement:

use Apache::DBI;

I think it's also good to read the documentation for the Apache::DBI
module in CPAN:
http://search.cpan.org/~pgollucci/Apache-DBI-0.9901/DBI.pm
You could also try to add

PerlModule Apache::DBI  # this comes before all other modules using DBI

to start.pl. You should pay attention to the comment!!!
THIS MODULE SHOULD BE LOADED BEFORE ALL OTHER MODULES USING DBI.

What can you do next if you had configured everything correctly and
the Perl scripts are OK?
Maybe you just dont't have the Apache::DBI module installed on your
machine, and you should download it and install it then:

% perl -MCPAN -e shell

install Apache::DBI

Best Regards,
CASIUS
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: .wma music files

2005-10-16 Thread Vladimir Kushnir




On Sun, 16 Oct 2005, Mark Kane wrote:


Bill Schoolcraft wrote:

At Sun, 16 Oct 2005 it looks like Mark Kane composed:


Bill Schoolcraft wrote:


Gr, is there a list of all the ports that don't work on
AMD64 machines?  I just attempted to install the above :(



http://pointyhat.freebsd.org/errorlogs/

I checked there for the xmms-wma port although I did not find it. Post the 
errors that occurred and someone may be able to help.


-Mark



Thanks Mark,

Here is all that happened:

#

[EMAIL PROTECTED] /usr/ports/audio/xmms-wma]- make install

===  xmms-wma-1.0.4_2 is only for i386, and you are running amd64.

#



Oh okay. See what Andrew said then (that it's only for i386). I guess it 
won't work, sorry :(


-Mark


Sorry for intrusion but it DOES work (with some of WMAs, at least). What 
I've done was comment out ONLY_FOR_ARCHS line and then make CC='cc -fpic 
-DPIC' was all. BTW, mplayer and ffplayer (from ffmpeg - or perhaps 
ffmpeg-devel - port) also can play WMAs.


Regards,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Port perl 5.8.7 on FreeBSD 4.10

-- Forwarded message --
From: Vladimir Tsvetkov [EMAIL PROTECTED]
Date: 2005-10-6 13:46
Subject: Re: Port perl 5.8.7 on FreeBSD 4.10
To: Olivier Nicole [EMAIL PROTECTED]

2005/10/6, Olivier Nicole [EMAIL PROTECTED]:
  What kind of script are you trying to execute?

 No script, perl it self is not running.

  What options did you use for building that port?
  Are you using  THREADS and ITHREADS ?

 All default, make, make install

  Could you apply in your nex mail the output of this command:

  # perl -V

  or even this leads to the same error-message?

 Same error message.

Let me see the output of:

# echo $LD_LIBRARY_PATH

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Port perl 5.8.7 on FreeBSD 4.10

-- Forwarded message --
From: Vladimir Tsvetkov [EMAIL PROTECTED]
Date: 2005-10-6 14:05
Subject: Re: Port perl 5.8.7 on FreeBSD 4.10
To: Olivier Nicole [EMAIL PROTECTED]

  Does this fix the problem?

 It does, now I have to figure out what is the problem in the library.

 Both machines have the same LD_LIBRARY_PATH...

 Thanks, I should be able to work it out now.

This happens to be a common problem.
You might want to look at:
http://www.freebsd.org/cgi/getmsg.cgi?fetch=1630529+0+/usr/local/www/db/text/2003/freebsd-questions/20031214.freebsd-questions
There is an explanation for this problem and recommendations what is
the correct way to configure ld(1).

Best Regards,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Fwd: Port perl 5.8.7 on FreeBSD 4.10

-- Forwarded message --
From: Vladimir Tsvetkov [EMAIL PROTECTED]
Date: 2005-10-6 13:57
Subject: Re: Port perl 5.8.7 on FreeBSD 4.10
To: Olivier Nicole [EMAIL PROTECTED]


2005/10/6, Olivier Nicole [EMAIL PROTECTED]:
 fw2on: env | grep LIBRA
 LD_LIBRARY_PATH=/lib:/usr/lib:/usr/X11R6/lib:/usr/local/lib:/usr/lib/compat:/usr/local/firebird/lib:/usr/local/lib/mysql:/usr/local/lib/pth:/usr/local/lib/kde3

 OK part of it may be useless :)


Backup the value of LD_LIBRARY_PATH (just copy the string in a text
editor or somewhere else, so after this experiment you could set this
environment variable again) and now unset LD_LIBRARY_PATH variable.
Does this fix the problem?

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problems with Acroread7 port

06 Oct 2005 08:58:34 -0400, Lowell Gilbert
[EMAIL PROTECTED]:
 Vladimir Tsvetkov [EMAIL PROTECTED] writes:

  Now acroread7 runs, but during start it prints in an error-message
  dialog the following message:
 
  There was an error while loading the plug-in 'PPKLite.api.'
  The plug-in failed to initialize.
 
  Oddly, this message is shown only when I start Acroread7 under root.
  Another problem is the behaviour of Firefox + Acroread Plug-in. When I
  try to access ot to load from the disk *.PDF documents, Firefox
  freezes when the initialization window of Acroread7 stops on:
 
  Loading EWH.api...
 
  Than the firefox window is not responding.
  What causes this problem?

 It's probably an environment setting; my guess would be PATH.

 But my advice would be not to run X as root anyway.

In order to start an X application as root, you do not need to run X
as root. I simply use su, and start the application from the command
line as root.

When I use Acroread7 as a standalone application (not as a plug-in to
Firefox), it works just file, despite the error message dialog above
informing about the problems with the incorrect loading of those APIs.

I could be a PATH problem, but it also could be a lack of a required
library. First, I should assure that all the reguired ports for
Acroread7 are installed correctly and up-to-date.

Solving the problems with those stale dependencies looks more like a
intuitive work, and I'm still on the stage Try and Error. Maybe
gaining the experience will formalize that process, but it would be of
great help to me, if you could supply some heuristics for solving this
kind of problems. Unfortunatelly, I couldn't find much on this topic.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problems with Acroread7 port

2005-10-05 Thread Vladimir Tsvetkov

Now acroread7 runs, but during start it prints in an error-message
dialog the following message:

There was an error while loading the plug-in 'PPKLite.api.'
The plug-in failed to initialize.

Oddly, this message is shown only when I start Acroread7 under root.
Another problem is the behaviour of Firefox + Acroread Plug-in. When I
try to access ot to load from the disk *.PDF documents, Firefox
freezes when the initialization window of Acroread7 stops on:

Loading EWH.api...

Than the firefox window is not responding.
What causes this problem?

Best Regards,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problems with Acroread7 port

2005-10-04 Thread Vladimir Tsvetkov

   I meant that you need the X version of libfreetype.
 
  I've just installed /usr/ports/emulators/linux_base-8 port, but happen
  also to break my acroread5 port, and neither acroread5 nor acroread6
  works.

 I haven't had acroread6 installed in a long time, but acroread5 still
 works for me (in a very carefully controlled environment, because its
 security bugs are both serious and unlikely to be fixed).

I meant 7 (SEVEN) :).
I reinstalled acroread with
# portinstall acroread
and this fixed the problem with the Acroread5.

  # acroread
  /compat/linux/usr/local/Adobe/Acrobat7.0/Reader/intellinux/bin/acroread:
  error while loading shared libraries: libXext.so.6: cannot open shared
  object file: No such file or directory
 
  I looked for libXext.so.6:
  # find /usr -name libXext.so.*
  /usr/X11R6/lib/libXext.so.6
 
  It appears to be right in place, but still acroread doesn't work.

 That's *not* the right place.  The right place would be
 /usr/compat/linux/usr/X11R6/lib/libXext.so.6.
 The one you found will only help you with FreeBSD binaries, not Linux ones.

Now, I understand. The problem with the Linux version of FreeType is solved.
This time I am getting a different message about another missing
library. But I hope I'm going to fix this too.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Fwd: FreeBSD + Firefox + Flash Problems

2005-10-03 Thread Vladimir Tsvetkov

-- Forwarded message --
From: Vladimir Tsvetkov [EMAIL PROTECTED]
Date: 2005-10-3 11:02
Subject: Re: FreeBSD + Firefox + Flash Problems
To: RW [EMAIL PROTECTED]

The Flash problem is solved!!!
The problem was in step 2:

 2. Install linuxpluginwrapper:
 # cd /usr/ports/www/linuxpluginwrapper
 # make WITHOUT_PLUGINS=yes install clean

I just explored the /usr/ports/www/linuxpluginwrapper/Makefile and I saw this:

.if !defined(WITHOUT_PLUGINS)
RUN_DEPENDS=${X11BASE}/lib/linux-flashplugin6/libflashplayer.so:${PORTSDIR}/
www/linux-flashplugin6
RUN_DEPENDS+=   ${X11BASE}/lib/linux-mozilla/plugins/nphelix.so:${PORTSDIR}/mult
imedia/linux-realplayer
#RUN_DEPENDS+=  ${LINUXBASE}/usr/local/Adobe/Acrobat7.0/Browser/intellinux/nppdf
.so:${PORTSDIR}/print/acroread7

.if ${OSVERSION}  50
USE_MOTIF=  yes
.endif

.endif

I had defined WITHOUT_PLUGINS=yes, which meant that the nested .if
expession about using Motif on my system was not executed. My system
needs Motif to get the Flash plugin running. So I deinstalled it, and
installed it without defining this configuration variable:

# cd /usr/ports/www/linuxpluginwrapper
# make install clean

Now, Flash works!!!

You can see also that I've commented out the line that will install
Acroread7 as a dependency, because I thought that Acroread5 will work
just fine for me. Obviously I am mistaken, because I still can't open
*.PDF in an embeded browser. And now, I'm just going to try another
install and maybe will use Acroread7.

Best Regards,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Problems with Acroread7 port

2005-10-03 Thread Vladimir Tsvetkov

I had no problems with the make install clean with this port,
but when I try to start acroread7, I got the following message:

# acroread7
/compat/linux/usr/local/Adobe/Acrobat7.0/Reader/intellinux/bin/acroread:
error while loading shared libraries: libfreetype.so.6: cannot open
shared object file: No such file or directory

I've searched for the libfreetype.so.6 shared object on my machine and
I got the following:

# find /usr -name libfreetype.so.*
/usr/local/lib/libfreetype.so.9

Maybe I have a newer version of libfreetype.so.*.
I tried with a symbolic link:

# ln -s /usr/local/lib/libfreetype.so.9 /usr/local/lib/libfreetype.so.6

And then again:
# acroread7
/compat/linux/usr/local/Adobe/Acrobat7.0/Reader/intellinux/bin/acroread:
error while loading shared libraries: libfreetype.so.6: cannot open
shared object file: No such file or directory

So, this method doesn't work.
Any suggestions?
Thanks in advance!

Best Regards,
Vladimir Tsvetkov

p.s. This message was also sended to the port maintainer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problems with Acroread7 port

2005-10-03 Thread Vladimir Tsvetkov

 You need the Linux version (as acroread is a Linux X executable).
 On my -STABLE system, it was installed as part of linux_base-8,
 as a dependency.

I believe I have exactly the linux version:
/usr/ports/print/acroread7
And it was installed as part of the linuxpluginwrapper port as a dependency.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

FreeBSD + Firefox + Flash Problems

2005-10-02 Thread Vladimir Tsvetkov

I did everything like it was described in the how-to's about
installing plugins for native Firefox on FreeBSD. I use FreeBSD 4.9
Release, which at this moment is unsupported.

1. Install firefox:
# cd /usr/ports/www/firefox ; make install clean

2. Install linuxpluginwrapper:
# cd /usr/ports/www/linuxpluginwrapper
# make WITHOUT_PLUGINS=yes install clean

I use WITHOUT_PLUGINS=yes, because I don't need acroread7 - I have
acroread5 and it perfectly fits my needs.
I got the following message:

Please enable libmap.conf(5) feature for rtld(1).
4-stable user:
You can get a following patch.
http://people.FreeBSD.org/~nork/libmap_4stable.diff
   Please apply on /usr/src and make install on /usr/src/libexec/rtld-elf:
   # cd /usr/src ; patch -p0  /tmp/libmap_4stable.diff
   # cd libexec/rtld-elf ; make clean all install
5.1-RELEASE user:
Please see /usr/src/libexec/rtld-elf/Makefile.
*** Error code 1

Stop in /usr/ports/www/linuxpluginwrapper.

3. Patching:
I've downloaded the patch:
http://people.FreeBSD.org/~nork/libmap_4stable.diff and than I tried
to apply it:
# cd /usr/src ; patch -p0  /tmp/libmap_4stable.diff

I got the following message:
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--
|diff -urN libexec/rtld-elf.old/Makefile libexec/rtld-elf/Makefile
|--- libexec/rtld-elf.old/Makefile  Sun Jun 23 06:32:35 2002
|+++ libexec/rtld-elf/Makefile  Wed Oct  8 02:50:10 2003
--
File to patch:

Obviously, I don't have /usr/src/libexec sources installed.

4. Install the libexec sources:
I put the FreeBSD 4.9 Release installation CD in the CD-ROM.
# /stand/sysinstall
Configure-Distributions-src-libexec

5. Patch again:
# cd /usr/src ; patch -p0  /tmp/libmap_4stable.diff
# cd libexec/rtld-elf ; make clean all install

This now works.

6. Another try to install linuxpluginwrapper:
# cd /usr/ports/www/linuxpluginwrapper
# make WITHOUT_PLUGINS=yes install clean

No problems at all.

7. Install linux-flashplugin6:
# cd /usr/ports/www/linux-flashplugin6
# make install clean

No problems at all.

8. Editing /etc/libmap.conf:
# /etc/libmap.conf for FreeBSD 4.x

# Flash6 with Mozilla Firefox
[/usr/X11R6/lib/linux-flashplugin6/libflashplayer.so]
libpthread.so.0 pluginwrapper/flash6.so
libdl.so.2  pluginwrapper/flash6.so
libz.so.1   libz.so.2
libstdc++-libc6.2-2.so.3libstdc++.so.3
libm.so.6   libm.so.2
libc.so.6   pluginwrapper/flash6.so

# Acrobat5 with Mozilla Firefox
[/usr/X11R6/Acrobat5/Browsers/intellinux/nppdf.so]
libc.so.6   pluginwrapper/acrobat.so

# Helix RealPlayer with Mozilla Firefox
[/usr/X11R6/lib/linux-mozilla/plugins/nphelix.so]
libstdc++-libc6.2-2.so.3libstdc++.so.3
libc.so.6   pluginwrapper/realplayer.so

I've checked every single Shared Object that is listed in my /etc/libmap.conf.

But there are no indications at all, that Firefox is using the
installed plugins. Still Firefox continues to inform me about missing
plugins.
I tried also, to configure Konqueror (3.1.4) to use the new plugins:
Settings-Configure Konqueror..-Plugins-Scan for new plugins
And I got the following error message:

The nspluginscan executable cannot be found. Netscape plugins will
not be scanned.

I searched the web for this problem and I found this on the
freebsd-questions maillist:
http://lists.freebsd.org/pipermail/freebsd-questions/2004-July/053298.html

You have to compile /usr/ports/x11/kdebase3 with motif support. Run
'make config' to change that option, then recompile and install it.

I tried this, but the message above is outdated (Thu Jul 22 02:13:13
PDT 2004). Currently in the configuration of the kdebase3 port there
is only one option:

[X] Suid wrapper for aRts, req'd for realtime prio

I am aware that the version of FreeBSD that I use is no longer
supported, but is there any way to workaround the necessity of moving
to 4Stable, and to get a working plugins for the Firefox browser?

Best Regards,
Vladimir Tsvetkov
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

proftpd + disable reverze UID/GID mapping

2005-09-15 Thread Vladimir Dvorak

Hello *,

I am using ProFTPd with MySQL authentication. Is possible to disable
UID/GID mapping ?

I can log into existing ftp account but when I use for example ftp
command 'ls', connection is immediatedly terminated. The reason of
termination is, that proftpd is trying to map UID/GID number to
user/group names. In proftpd.conf I have:

SQLUserInfoftp login password id + 1 as uid 1 as
gid path NULL

The error is obvious in SQL query ( /var/log/mysql.log ):

Query   SELECT login, password, id + 1 as uid, 1
 as gid, path FROM ftp WHERE (id + 1 as uid = 0) LIMIT

Is possible to disable this mapping ? 'PersistentPasswd off' seems
doesn`t work.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: proftpd + disable reverze UID/GID mapping

2005-09-15 Thread Vladimir Dvorak

Vladimir Dvorak wrote:

Hello *,

I am using ProFTPd with MySQL authentication. Is possible to disable
UID/GID mapping ?

I can log into existing ftp account but when I use for example ftp
command 'ls', connection is immediatedly terminated. The reason of
termination is, that proftpd is trying to map UID/GID number to
user/group names. In proftpd.conf I have:

SQLUserInfoftp login password id + 1 as uid 1 as
gid path NULL

The error is obvious in SQL query ( /var/log/mysql.log ):

Query   SELECT login, password, id + 1 as uid, 1
 as gid, path FROM ftp WHERE (id + 1 as uid = 0) LIMIT

Is possible to disable this mapping ? 'PersistentPasswd off' seems
doesn`t work.

Vladimir
  

If there is directory, which has the same uid as user logged in, its ok.
Problem occures when this directory has another uid - then proftpd
uid/gid subsystem tries to query mysql to find out proper name to
uid/gid number.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 Only cyrus-imap22 or later supports virtual domains, I assume you use
 this version. It should be supported by default.


 I am using 2.1.18 version.

 There should be VirtualDomains supported too: (since 2.1.x)
 http://asg.web.cmu.edu/cyrus/download/imapd/changes.html


 No, I think you read it wrong: Changes to the Cyrus IMAP Server since
 2.1.x  meaning that these changes are since the 2.1.x branch and are
 supported in 2.2.0 and higher.

 Same document, 2.2.0:

 * A large number of bugs involving virtual domain support have been
   fixed

 (meaning that even if I'm wrong about it for 2.1.x, better upgrade
 beyond 2.2.0 to get past those bugs).

 I suggest you upgrade, anyway, since I don't use that version and
 things has changed significantly, I can't really give you the advice
 will work - only what works for 2.2.x.

 Cheers, Erik

Yes, you are right. Now I am using 2.2.12 and virtdomains seem to be
working. But I found another strange problem:

devel:/var/run# cyradm -u [EMAIL PROTECTED] localhost
IMAP Password:
localhost.localdomain cm user.test

^^^ it works; user test is included into defaultdomain.

But when I try:
localhost.localdomain cm [EMAIL PROTECTED]
createmailbox: Invalid mailbox name

Cyrus is strange software, isn`t it ? :-)

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 Yes, you are right. Now I am using 2.2.12 and virtdomains seem to be
 working. But I found another strange problem:

 devel:/var/run# cyradm -u [EMAIL PROTECTED] localhost
 IMAP Password:
 localhost.localdomain cm user.test

 ^^^ it works; user test is included into defaultdomain.

 But when I try:
 localhost.localdomain cm [EMAIL PROTECTED]
 createmailbox: Invalid mailbox name

 Cyrus is strange software, isn`t it ? :-)


 No, by loging in as [EMAIL PROTECTED] you get access to mailboxes under the
 devel domain, point is that different virtual domains can have
 different admins. You specify this in the imapd.conf.

 Try loging in just as cyrus:

   # cyradm -u cyrus localhost

 Cheers, Erik

Erik, we both are about to solve the problem. ;-) Yes, you are probably
right. When I cyradm -u cyrus, I have in maillog:

Sep 14 09:08:37 devel imap[9491]: badlogin: localhost.localdomain
[127.0.0.1] plaintext [EMAIL PROTECTED] SASL(-13): user not found:
checkpass failed

When I add [EMAIL PROTECTED], it will manage 'localdomain' users and I
will be on the same place (probably, for now not tried). :-( Erik, how
can I log as cyrus without domain ?

Thank you!

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 Yes, you are right. Now I am using 2.2.12 and virtdomains seem to be
 working. But I found another strange problem:

 devel:/var/run# cyradm -u [EMAIL PROTECTED] localhost
 IMAP Password:
 localhost.localdomain cm user.test

 ^^^ it works; user test is included into defaultdomain.

 But when I try:
 localhost.localdomain cm [EMAIL PROTECTED]
 createmailbox: Invalid mailbox name

 Cyrus is strange software, isn`t it ? :-)


 No, by loging in as [EMAIL PROTECTED] you get access to mailboxes under the
 devel domain, point is that different virtual domains can have
 different admins. You specify this in the imapd.conf.

 Try loging in just as cyrus:

   # cyradm -u cyrus localhost

 Cheers, Erik

You are right. I can create

localhostcm  [EMAIL PROTECTED]

when I has been connected as [EMAIL PROTECTED] Its not good to have admin for
each domain in database ( because it will be huge; all auth and other
information are stored in MySQL backend ). I need some _super-cyrus_
user, which will be able to create arbitrary mailbox with domain.
Several month ago I set it up on Linux Gentoo system and there it was
simple and it behaves as I required - cyrus user was able to create and
delete all mailboxes what he want.

Vladimir
  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 Erik, we both are about to solve the problem. ;-) Yes, you are probably
 right. When I cyradm -u cyrus, I have in maillog:

 Sep 14 09:08:37 devel imap[9491]: badlogin: localhost.localdomain
 [127.0.0.1] plaintext [EMAIL PROTECTED] SASL(-13): user not found:
 checkpass failed

 When I add [EMAIL PROTECTED], it will manage 'localdomain' users and I
 will be on the same place (probably, for now not tried). :-( Erik, how
 can I log as cyrus without domain ?


 Please post your imapd.conf (remove comments) - I posted mine
 yesterday.  Check the content of the admins entry, does it specify
 domain?

 I think that cyradm authenticates against sasldb and not system
 password (or maybe falls back on system password) - this I understand
 - is to separate ordinary users and administrators - but can also be
 quite annoying.

 If you have added an entry to sasldb with saslpasswd2 then it could be
 for the devel realm.

 You can try to rename sasldb and see what happens, then if it doesn't
 work create it with new entries where you make sure not to specify realm:

   # saslpasswd2 cyrus

 Also, reading above there may be a difference between:

   # cyradm -u cyrus

 and

   # cyradm -u cyrus localhost

 Cheers, Erik

config is in attachement

configdirectory: /var/lib/cyrus
defaultpartition: default
partition-default: /var/spool/cyrus/mail-new
partition-news: /var/spool/cyrus/news
newsspool: /var/spool/news
altnamespace: no
unixhierarchysep: yes 
admins: cyrus
allowanonymouslogin: no
popminpoll: 1
autocreatequota: 0
umask: 077
sieveusehomedir: false
sievedir: /var/spool/sieve
hashimapspool: true
allowplaintext: yes
sasl_auto_transition: no
tls_cert_file: /etc/cyrus-global.pem
tls_key_file: /etc/cyrus-global.key
tls_ca_path: /etc/ssl/certs
tls_session_timeout: 1440
tls_cipher_list: TLSv1:SSLv3:SSLv2:!NULL:!EXPORT:!DES:!LOW:@STRENGTH
lmtpsocket: /var/run/cyrus/socket/lmtp
idlesocket: /var/run/cyrus/socket/idle
notifysocket: /var/run/cyrus/socket/notify
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sql
sasl_sql_engine: mysql
sasl_mech_list: PLAIN LOGIN
sasl_sql_user: mysqluser 
sasl_sql_passwd: xyxyxy
sasl_sql_database: hosting
sasl_sql_hostnames: localhost   
sasl_sql_select: SELECT password FROM email WHERE address = '[EMAIL PROTECTED]'
virtdomains: yes 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 Erik, we both are about to solve the problem. ;-) Yes, you are probably
 right. When I cyradm -u cyrus, I have in maillog:

 Sep 14 09:08:37 devel imap[9491]: badlogin: localhost.localdomain
 [127.0.0.1] plaintext [EMAIL PROTECTED] SASL(-13): user not found:
 checkpass failed

 When I add [EMAIL PROTECTED], it will manage 'localdomain' users and I
 will be on the same place (probably, for now not tried). :-( Erik, how
 can I log as cyrus without domain ?


 Please post your imapd.conf (remove comments) - I posted mine
 yesterday.  Check the content of the admins entry, does it specify
 domain?

 I think that cyradm authenticates against sasldb and not system
 password (or maybe falls back on system password) - this I understand
 - is to separate ordinary users and administrators - but can also be
 quite annoying.

 If you have added an entry to sasldb with saslpasswd2 then it could be
 for the devel realm.

 You can try to rename sasldb and see what happens, then if it doesn't
 work create it with new entries where you make sure not to specify realm:

   # saslpasswd2 cyrus

 Also, reading above there may be a difference between:

   # cyradm -u cyrus

 and

   # cyradm -u cyrus localhost

 Cheers, Erik

Heureeka Erik! :-)

Now I can log as cyrus without @localdomain - modified /etc/hosts. ;-)

Thank you very much for your support!!!

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

cyrus-imap + virtualdomains

Hi *,

I get stucked in this problem for serveral hours and now I am out of any
ideas.

I add
   
virtdomains: yes
loginrealms: devel testdomain.org

into imapd.conf, then I created mailbox using following commands:

devel~: cyradm -u [EMAIL PROTECTED] localhost
Password: 
localhost cm [EMAIL PROTECTED]

Now, I can authenticate and work with this mailbox.

But problem occurs, when I create for example

localhostcm [EMAIL PROTECTED]

and try to login. In maillog appears

plaintext [EMAIL PROTECTED] SASL(-13): authentication failure:
cross-realm login [EMAIL PROTECTED] denied

It is clear - when I put test2domain.org behind the loginrealms item, it
works.

My question is: is possible to allow * domains to loginrealms ( because
this server will serve a lot of domains and adding domain items is not
effective) ?

Thank you very much!

Vladimir



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 I add
virtdomains: yes
 loginrealms: devel testdomain.org

 into imapd.conf, then I created mailbox using following commands:

 devel~: cyradm -u [EMAIL PROTECTED] localhost
 Password: 
 localhost cm [EMAIL PROTECTED]

 Now, I can authenticate and work with this mailbox.

 But problem occurs, when I create for example

 localhostcm [EMAIL PROTECTED]

 and try to login. In maillog appears

 plaintext [EMAIL PROTECTED] SASL(-13): authentication failure:
 cross-realm login [EMAIL PROTECTED] denied

 It is clear - when I put test2domain.org behind the loginrealms item, it
 works.

 My question is: is possible to allow * domains to loginrealms ( because
 this server will serve a lot of domains and adding domain items is not
 effective) ?


 There are a few things that comes into mind: First, you write your
 login realms as devel testdomain.org - I don't see test2domain.org
 anywhere.

 Second, depending on you mail client you may have to separate login
 name and realm with a % instead of @.

 Third, the newly created mailbox may have wrong permissions - check.

 Finally:

 In my config I have only:

   defaultdomain: mydefaultdomain.org
   virtdomains: yes

 and no list of loginrealms. Adding a virtual domain is as simple as
 adding a mailbox as you did:  cm [EMAIL PROTECTED]

 I use sasl to authenticate against the system password so myuser
 (@mydefaultdomain.org) and myuser%myvirtualdomain.org is the same user.

 Since cyrus does not deliver mail (is not an MTA) cyrus can safely
 assume that incoming mail matching user/domain is destined for storage
 in that users mailbox. For this reason I guess, there should be no
 need to specify realms in the config.

 Cheers, Erik

Ok, I followed you instructions and my config looks:

defaultdomain: devel
virtdomains: yes

Now I login as admin cyrus and try to create mailbox:

devel:~# cyradm -u cyrus localhost
IMAP Password:
  localhost.localdomain cm [EMAIL PROTECTED]
createmailbox: Permission denied

In maillog is nothing, what permissions I should increace ? Do you have
any idea ?

Thank you.

Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Vladimir Dvorak wrote:

Erik Norgaard wrote:

  

Vladimir Dvorak wrote:



I add
   virtdomains: yes
loginrealms: devel testdomain.org

into imapd.conf, then I created mailbox using following commands:

devel~: cyradm -u [EMAIL PROTECTED] localhost
Password: 
localhost cm [EMAIL PROTECTED]

Now, I can authenticate and work with this mailbox.

But problem occurs, when I create for example

localhostcm [EMAIL PROTECTED]

and try to login. In maillog appears

plaintext [EMAIL PROTECTED] SASL(-13): authentication failure:
cross-realm login [EMAIL PROTECTED] denied

It is clear - when I put test2domain.org behind the loginrealms item, it
works.

My question is: is possible to allow * domains to loginrealms ( because
this server will serve a lot of domains and adding domain items is not
effective) ?
  

There are a few things that comes into mind: First, you write your
login realms as devel testdomain.org - I don't see test2domain.org
anywhere.

Second, depending on you mail client you may have to separate login
name and realm with a % instead of @.

Third, the newly created mailbox may have wrong permissions - check.

Finally:

In my config I have only:

  defaultdomain: mydefaultdomain.org
  virtdomains: yes

and no list of loginrealms. Adding a virtual domain is as simple as
adding a mailbox as you did:  cm [EMAIL PROTECTED]

I use sasl to authenticate against the system password so myuser
(@mydefaultdomain.org) and myuser%myvirtualdomain.org is the same user.

Since cyrus does not deliver mail (is not an MTA) cyrus can safely
assume that incoming mail matching user/domain is destined for storage
in that users mailbox. For this reason I guess, there should be no
need to specify realms in the config.

Cheers, Erik



Ok, I followed you instructions and my config looks:

defaultdomain: devel
virtdomains: yes

Now I login as admin cyrus and try to create mailbox:

devel:~# cyradm -u cyrus localhost
IMAP Password:
  localhost.localdomain cm [EMAIL PROTECTED]
createmailbox: Permission denied

In maillog is nothing, what permissions I should increace ? Do you have
any idea ?

Thank you.

Vladimir

  

It seems to be working but

localhost.localdomain cm [EMAIL PROTECTED]
createmailbox: Permission denied
localhost.localdomain cm [EMAIL PROTECTED]
localhost.localdomain cm [EMAIL PROTECTED]

Why I cannot create [EMAIL PROTECTED] directly ? Because of cyrus`s directory
structure ? Or when I need mailbox with 'dot' : [EMAIL PROTECTED] ?

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 Ok, I followed you instructions and my config looks:

 defaultdomain: devel
 virtdomains: yes

 Now I login as admin cyrus and try to create mailbox:

 devel:~# cyradm -u cyrus localhost
 IMAP Password:
   localhost.localdomain cm [EMAIL PROTECTED]
 createmailbox: Permission denied

 In maillog is nothing, what permissions I should increace ? Do you have
 any idea ?


 Since you don't have any working mailboxes yet, it might be wise to
 delete what is and start over just to avoid any hanging problems.

 I just tried:

 localhost cm [EMAIL PROTECTED]
 localhost lam [EMAIL PROTECTED]
 [EMAIL PROTECTED] lrswipcda

 I have no testuser (so I haven't tested login) nor a virtualdomain.org
 in my dns or elsewhere.

 Which versions do you use? Admittedly, I spent about a week getting
 things to work last year - now most is forgotten :-) - try to
 subscribe also to the cyrus list for better support.

 Keep up :-)
 Erik

Thank you Erik. ;-)

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 It seems to be working but

 localhost.localdomain cm [EMAIL PROTECTED]
 createmailbox: Permission denied
 localhost.localdomain cm [EMAIL PROTECTED]
 localhost.localdomain cm [EMAIL PROTECTED]

 Why I cannot create [EMAIL PROTECTED] directly ? Because of cyrus`s directory
 structure ? Or when I need mailbox with 'dot' : [EMAIL PROTECTED] ?


 Try to be a bit systematic, clear up any previous mess, stop cyrus and
 check the file permissions on the directories, if they are ok, start
 cyrus again.

 On my server mailboxes in the default domain are stored in
 /var/imap/spool/user while virtial domain mail boxes are in
 /var/imap/spool/domain with one subdir for each domain.

And here is the problem (probably ). I have no 'domain' directory. :-(
It doesn`t seem that 'virtdomain: yes' has some effect. Is there need to
compile cyrus-imap with virtualdomains support ?

 So, if you have got file permissions wrong on that directory cyrus
 won't create any mailboxes.

 After creating a mailbox use lm to see what mailboxes are created, and
 then lam mailbox to check the permissions. Include that in your next
 mail.

 I just looked back in the archive from the cyrus mailing list and
 cyrus imap does some stuff with reverse dns and if it fails strange
 things may occur:

 Aparently, cyrus-imap does a reverse lookup of the ip on the inter-
 face that recieves the connection. This must resolve to a host
 under the defaultdomain.

 So, adding the line '192.168.0.4 top.example.com' to /etc/hosts
 solved the problem.

 This is my imapd.conf:

 configdirectory: /var/imap
 partition-default: /var/imap/spool
 altnamespace: yes
 userprefix: common
 sharedprefix: shared
 defaultdomain: example.com
 virtdomains: yes
 allowplaintext: yes
 allowplainwithouttls: no
 admins: cyrus root
 defaultacl: anyone lrs
 sieveusehomedir: false
 sievedir: /var/imap/sieve
 sasl_pwcheck_method: saslauthd
 sasl_mech_list: plain
 tls_cert_file: /var/imap/ssl/mail.crt
 tls_key_file: /var/imap/ssl/mail.pem
 tls_ca_file: /var/imap/ssl/ca.crt
 lmtpsocket: /var/imap/socket/lmtp

 /var/imap/spool and everything under that path is:
 drwx--  11 cyrus mail   512 13 Sep 12:10 spool


All permissions are ok, I am sure. Its default installation.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: cyrus-imap + virtualdomains

Erik Norgaard wrote:

 Vladimir Dvorak wrote:

 On my server mailboxes in the default domain are stored in
 /var/imap/spool/user while virtial domain mail boxes are in
 /var/imap/spool/domain with one subdir for each domain.


 And here is the problem (probably ). I have no 'domain' directory. :-(
 It doesn`t seem that 'virtdomain: yes' has some effect. Is there need to
 compile cyrus-imap with virtualdomains support ?


 Only cyrus-imap22 or later supports virtual domains, I assume you use
 this version. It should be supported by default.

I am using 2.1.18 version.

There should be VirtualDomains supported too: (since 2.1.x)
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html

 Take a look into the pkg-plist file for cyrus-imap22 and see what
 comes with it, there may be some binary that fixes the directory
 structure - reconstruct maybe?. Otherwise try to create the directory
 manually and set permissions.

 Cheers, Erik


Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

OpenOffice+AMD64

2005-08-23 Thread Vladimir Dvorak


Hello *,

does anybody know what is the status of OpenOffice for AMD64 
architecture ? Is possible to install OO in some chroot lib32 
environment ? Or this cause is wasting the time for now ?


Thank you.

Vladimir

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: OpenOffice+AMD64

2005-08-23 Thread Vladimir Dvorak


Mark Kane wrote:


Vladimir Dvorak wrote:

does anybody know what is the status of OpenOffice for AMD64 
architecture ? Is possible to install OO in some chroot lib32 
environment ? Or this cause is wasting the time for now ?



Hi. I am not sure the status of it for AMD64, but I do know it 
requires Java. Unfortunately there is no Java for AMD64 yet.


I found this link, but I didn't think Linux binary compatibility was 
possible in the amd64 version. Every time I try to install a port that 
requires Java such as Azureus on my FreeBSD/amd64 machine, it says 
something like Only for i386, and you are running amd64.


http://people.freebsd.org/~tjr/linux32.html

For an alternative, look at AbiWord for word processing and Gnumeric 
for spreadsheets. I'm sure there are others as well.


-Mark


Thank you Mark.

OOfice are possible to build without JAVA support (make -DWITHOUT_JAVA). 

I use Abiword and Gnumeric instead of OO now, but there is no 
connectivity with OO sxw files - which I have a lot (from times when I 
used i386/Linux).


Thank you for that link I will look at it.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Alcatel Speedtouch PC ADSL Modem

2005-08-15 Thread Vladimir Botka


Hi,
here is the scheme
(ADSL)- Speedtouch 510i -(ETHERNET)- PC(FreeBSD)
As long as you use ethernet there is no difference in what OS you have on 
PC. Speedtouch has a firewall/NAT capability so you can decide where to 
filter/masquerade. It costs ~ $100 new. I have no experience with DSL 
cards. Cheers, Vladimir.


On Sat, 13 Aug 2005, Bsderss wrote:




--- Vladimir Botka [EMAIL PROTECTED] wrote:


Hi,
I am running Speedtouch 510i, which is defacto
router with some small unix
system inside. You can login with telnet and
configure it from command
line or use the web interface or load the
configuration file. I dont
think that USB and pppoa is here the best choice.
You just connect the
Speedtouch to the ADSL and use the Speedtouch
ethernet to connect it to
your LAN. Cheers, Vladimir.


Hi, thanks for the suggestion. Is this a normal DSL
Modem with an ethernet at its back connect to your
desktop or an router? How much did you pay for it? If
it is cheap enuf, I think it is worth to get it as a
standalone DSL  modem.

The reason I want to install freebsd in one of these
DSL modem is because here in Australia ISPs do not
lease out their DSL modem to end user. User will end
up purchase expensive crapy DSL Modem (eg. Netgear)
from computer shop.

As I have a freebsd gateway used to dail-up pppoe thru
an external DSL modem when I was in another country, I
want to reconfigure this freebsd router to make it
able to handle DSL modem communication. But I need to
purchase a DSL modem card for it. If an external DSL
modem like Speedtouch is cheap enuf and provide stable
system enviornment in the DSL Bridge mode, I would
like to purchase one as an external DSL modem.

On the other hand, if you know how to configure
freebsd with a DSL Modem card in freebsd, please let
me know how to do that. And if you also know where to
purchase a barebone DSL Modem (without a system) for
development  purpose (eg. Speedtouch), please also let
me know.

Thanks
Sam


On Sat, 13 Aug 2005, Bsderss wrote:


Hi,

I want to purchase a USB Alcatel Speedtouch PC

ADSL

Modem and connection freebsd to it. There is a pkg

in

the Ports
/usr/ports/net/pppoa written for the Alcatel
Speedtouch. I wonder how to use this pkg with the
Alcatel Speedtouch PC ADSL Modem. Correct me if I

m

wrong, this modem does not have a system running
itside, it is just an external device have a USB

port

connect to the FreeBSD system. As I browsed thru

the

Speedtouch website, I don't know which modem does

not

have a system and allow me to do this setup.

Can anyone please help?

Thanks
Sam


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam

protection around

http://mail.yahoo.com
___
freebsd-current@freebsd.org mailing list




http://lists.freebsd.org/mailman/listinfo/freebsd-current

To unsubscribe, send any mail to

[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list


http://lists.freebsd.org/mailman/listinfo/freebsd-questions

To unsubscribe, send any mail to
[EMAIL PROTECTED]




__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Alcatel Speedtouch PC ADSL Modem

2005-08-13 Thread Vladimir Botka


Hi,
I am running Speedtouch 510i, which is defacto router with some small unix 
system inside. You can login with telnet and configure it from command 
line or use the web interface or load the configuration from file. I dont 
think that USB and pppoa is here the best choice. You just connect the 
Speedtouch to the ADSL and use the Speedtouch ethernet to connect it to 
your LAN. Cheers, Vladimir.


On Sat, 13 Aug 2005, Bsderss wrote:


Hi,

I want to purchase a USB Alcatel Speedtouch PC ADSL
Modem and connection freebsd to it. There is a pkg in
the Ports
/usr/ports/net/pppoa written for the Alcatel
Speedtouch. I wonder how to use this pkg with the
Alcatel Speedtouch PC ADSL Modem. Correct me if I m
wrong, this modem does not have a system running
itside, it is just an external device have a USB port
connect to the FreeBSD system. As I browsed thru the
Speedtouch website, I don't know which modem does not
have a system and allow me to do this setup.

Can anyone please help?

Thanks
Sam


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: wrap sshd

2005-06-11 Thread Vladimir Dvorak

Osmany Guirola Cruz wrote:

Hi
 i am trying to restrict the ssh access to my machine from a specific
machine and i am using hosts.allow but does not wor for me this is
my /etc/hosts.allow file


sshd : capella.cigb.edu.cu : deny

then i restart the sshd daemon and doe not work i still have access from
this machine ...

Thanks
  

You have better to deny everything and allow several certain hosts or networks. 
It is much more secure schema, than have tone of records of bad guy`s hosts in 
your tcp-wrappers config file.

But I admit, that in some cases sense of your question is relevant. But I am 
not sure in which cases ? :-)

Vladimir Dvorak

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: make installkernel fails instantly w/ signal 11

2005-06-11 Thread Vladimir Dvorak

Keyser wrote:

In an effort to get the simplest of compiled c++ programs (compiled with g++)
to actually run without a segfault on my box I'm trying to update everything.
So I cvsup'd src-all and ports-all. Then I did:

make -j4 buildworld (which worked)
make -DALWAYS_CHECK MAKE buildkernel (which also worked)

However, then when I try to installkernel I get a signal 11 immediately as
shown below. I've tried it in single user mode with the same result. Not
sure what I'm doing wrong? I've read signal 11 is usually caused by hardware
issues but it seems strange this box could build both world and kernel without
any problems if that were the case.

vitoc# cd /usr/src
vitoc# pwd
/usr/src
vitoc# ls
COPYRIGHT UPDATINGgnu rescue usr.bin
LOCKS bin include sbinusr.sbin
MAINTAINERS contrib kerberos5 secure
Makefilecrypto lib share
Makefile.inc1 etc libexec sys
README games release tools
vitoc# make -DALWAYS_CHECK_MAKE installkernel
--

Making hierarchy

--
cd /usr/src; MAKEOBJDIRPREFIX=/usr/obj MACHINE_ARCH=i386 MACHINE=i386
CPUTYPE= GROFF_BIN_PATH=/usr/obj/usr/src/tmp/legacy/usr/bin
GROFF_FONT_PATH=/usr/obj/usr/src/tmp/legacy/usr/share/groff_font
GROFF_TMAC_PATH=/usr/obj/usr/src/tmp/legacy/usr/share/tmac
PATH=/usr/obj/usr/src/tmp/legacy/usr/sbin:/usr/obj/usr/src/tmp/legacy/usr/bin:/usr/obj/usr/src/tmp/legacy/usr/games:/usr/obj/usr/src/tmp/usr/sbin:/usr/obj/usr/src/tmp/usr/bin:/usr/obj/usr/src/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin
/usr/obj/usr/src/make.i386/make -f Makefile.inc1 hierarchy
cd /usr/src/etc;/usr/obj/usr/src/make.i386/make distrib-dirs
mtree -eU -f /usr/src/etc/mtree/BSD.root.dist -p /
mtree -eU -f /usr/src/etc/mtree/BSD.var.dist -p /var
*** Signal 11

Stop in /usr/src/etc.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
vitoc#

I've literally done everything by the book but maybe I've missed something
obvious to someone else?

Cut and pasted from /usr/src/Makefile
- - - CUT - - -
# Make sure we have an up-to-date make(1). Only world and buildworld
# should do this as those are the initial targets used for upgrades.
# The user can define ALWAYS_CHECK_MAKE to have this check performed
# for all targets.
#
- - - CUT - - -

Try make and install kernel without -DALWAYS_CHECK_MAKE.

Vladimir Dvorak

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: netstat problem

2005-06-11 Thread Vladimir Dvorak

Nicolas Salvo wrote:

Hi
 Maybe this is a stupid question but.. After an upgrade from 5.3 to
5.4 the output of the netstat comand doesn't show anything about tcp
or the services running with tcp. Any ideas?
  

You haven`t  apparently world and kernel synchronized. In other words:
build kernel and world from 5.4 and install them again.

I am true if it helps. ;-)

 Vladimir Dvorak


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

A8N-SLI (not Deluxe) + Radeon X600 + Xorg - anybody?

2005-06-02 Thread Vladimir Kushnir


Hi,
Please, folks, how do I run X on amd64 RELENG_5 with this combination? So 
far whatever I do - X hangs system hard practically immediately :-(


TIA,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Postfix and Queues

2005-03-25 Thread Vladimir Dvorak

Hi *,
I have little, but not annoying problem with Postfix and queuing 
management. When two or more big (understand 2 MB) emails are in active 
queue, Postfix is trying to deliver them simultaneously. But moth ago 
began to apear following message in /var/log/mail :

5BCED8EFE3* 4534286 Fri Mar 25 14:25:35  [EMAIL PROTECTED]
(lost connection with mailserver.domain.com [aa.bb.cc.dd] while sending 
message body)

^^ this message is in defer queue and wait for its time, when next try 
to deliver comes. During this time comes another big email from local 
user, which get stucked in defer queue too. The link start to have very 
high load of outgoing mail traffic, but all of them are unsuccesfully 
delivered.

Well, is there any chance to reduce queue to one mail in active queue ?
The system runs postfix-19991231pl08-29 - I know its very old.
Thank you in advance.
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Postfix and Queues

2005-03-25 Thread Vladimir Dvorak

Vladimir Dvorak wrote:
Hi *,
I have little, but not annoying problem with Postfix and queuing 
management. When two or more big (understand 2 MB) emails are in 
active queue, Postfix is trying to deliver them simultaneously. But 
moth ago began to apear following message in /var/log/mail :

5BCED8EFE3* 4534286 Fri Mar 25 14:25:35  [EMAIL PROTECTED]
(lost connection with mailserver.domain.com [aa.bb.cc.dd] while 
sending message body)

^^ this message is in defer queue and wait for its time, when next try 
to deliver comes. During this time comes another big email from local 
user, which get stucked in defer queue too. The link start to have 
very high load of outgoing mail traffic, but all of them are 
unsuccesfully delivered.

Well, is there any chance to reduce queue to one mail in active queue ?
The system runs postfix-19991231pl08-29 - I know its very old.
Thank you in advance.

I found solution.
There is (in front of this mailserver) OpenBSD firewall with scrub in 
all. Problem appears, when this messages are targeted to Microsoft MX. 
MS servers badly handle with IP headers and sets Dont fragment bit, 
when this packet is fragmented. :-)

Excerpt from man pf.conf:
Some operating systems are known to generate fragmented packets with 
the dont-fragment bit set. 

If you want to avoid this problem, leave scrub in all and use scrub 
in no-df.

If you have another solution, you are welcome! :-)
Vladimir Dvorak
--
* VDSOFT.ORG   [EMAIL PROTECTED]  *
* (+420) 602 944 941 http://www.vdsoft.org *
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Fonts problem with Linux progs

2005-03-21 Thread Vladimir Kushnir

Hi all,
The $SUBJ sais it all. After installation linux_base-8 + linux-XFree86 
libs no Linux program using fontconfig library can find fonts and asks to 
configure fontconfig properly. What's the proper configuration for it? 
I tried to put both real (/usr/X11R6/lib/X11/fonts/TT and so on) and 
chrooted (/compat/linux/... and so on) into 
/compat/linux/etc/fonts/fonts.conf, put fonts (or links to them) under 
/compat/linux/usr/{X11R6... of share..., or local...} to no avail. What am 
I to do?
Environement: FreeBSD-CURRENT, xorg-6.8.1, KDE (CVS) as primary 
desktop.

TIA,
Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

SSH with Kerberos authentication

Hi *,
I get stucked for several hours with configuring SSH authentication via Kerberos. I tested the same configuration on Linux and there was no problem.
I suspect pam_krb5.so. 

My requisities:
FreeBSD  5.3-RELEASE-p5
Kerberos comming with base system (heimdal implementation (Heimdal 0.6.1))
in /etc/krb5.conf
[libdefaults]
  default_realm = ATREY
[realms]
   ATREY = {
   kdc = 172.16.10.1
   kpasswd_server = 172.16.10.1
   }
[logging]
  kdc = FILE:/var/log/kdc.log
  kdc = SYSLOG:DEBUG
  default = SYSLOG:DEBUG:USER
[appdefaults]
   kinit = {
   forwardable= true
   }
[kdc]
   database = {
   realm = ATREY
   }
require-preauth = no
v4-realm= ATREY
key-file = /var/heimdal/heimdal.mkey

in /etc/pam.d/sshd have:
authsufficient  pam_krb5.so  try_first_pass  debug
authrequiredpam_unix.so
account  required  pam_krb5.so debug
session   optional   pam_krb5.so  debug
password   sufficient  pam_krb5.so  debug
From client view :

debug1: Authentications that can continue: 
publickey,gssapi-with-mic,password,keyboard-interactive
debug1: Next authentication method: gssapi-with-mic
debug1: Authentications that can continue: 
publickey,gssapi-with-mic,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/dvorakv/.ssh/identity
debug1: Trying private key: /home/dvorakv/.ssh/id_rsa
debug1: Trying private key: /home/dvorakv/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
Password:
pam_krb5: pam_sm_authenticate: Kerberos 5 error
pam_krb5: pam_sm_authenticate: Kerberos 5 refuses you
At server site in /var/log/auth.log there is notning to public. :-( In 
/var/log/kdc.log :

What more - debug parameter standing after pam_krb5.so doesn`t increase 
verbosity of output.
Here is my configuration method:
1.kstash 
Password: 

2. edit /etc/krb5.conf
3. kadmin -l
kadmin init ATREY
..
4. add principals
kadmin add dvorakv

5. run kdc,kpasswd,kadmind
/etc/rc.d/{kerberos,kadmind,kpasswd} start
6. test if i can get a ticket 
kinit dvorakv
password: 
[EMAIL PROTECTED]:~$ kinit dvorakv
[EMAIL PROTECTED]'s Password: 
kinit: NOTICE: ticket renewable lifetime is 1 week
   
 everything ok, but SSH and PAM! :-(

And the last remark - this server runs in jail(8) - but there shouldn`t be a 
problem.
Any ideas ? Is /etc/pam.d/sshd correct ? Is there anything what I am 
missing ? Is there anything special in FreeBSD besides Linux.
Thank you, Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: inode

Gert Cuykens wrote:
What is a inode ? I installed freebsd 5.3 on a 2gb harddisk and it
tells me there are not enough inodes ? Aldo there is diskspace
availeble ?
Does it mean there are to many directories ? Can you fix this ?
 

I suppose there is no disk space available on some partition. When this 
message apears ? Or, you can check it out bu df -h command.

Vladimir
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: no route to host - urgent problem

Laszlo Zsolt Nagy wrote:
Hi All!
I could compile a new kernel (4.8 p27). It logs in to an ADSL line 
with ppp (tun0 created). But I cannot ping even myself.
This is a router, the other device is connected to a local network 
172.16.0/20

messiasping 127.0.0.1
ping:sendto:no route to host
messiasnetstat -nr
Destination  Gateway  Flags   Refs   Use   NetifExpire
127.0.0.1  127.0.0.1  UH  1  3  lo0
172.16.0/20   link#2   UC   3   0   rl0
I dot see the gateway here  (Flags: G) but it should work for 
127.0.0.1 without it.

ARP is also working, the physical connection is okay on the LAN:
messiasarp 172.16.0.26
? (172.16.0.26) at 00:50:1d:5f:18:20 on rl0 [ethernet]
I also tried this:
messiasroute add default 172.16.0.1
The default gateway  became 172.16.0.1  UGSc rl0. Despite this:
messiasping 172.16.0.26
PING 172.16.0.26 (172.16.0.26): 56 data bytes
ping: sendto: No route to host
named does not work either. It is started but when I start nslookup 
it says 'No response from server'.

Is it a missing 'options' from the kernel config? The same machine was 
working before with the same setting
but a different kernel (GENERIC). Unfortunately, I need to do this 
within 1 hour. Employees are coming
and they will cut my neck

  Laci
Try to turn off your firewall first. ( pfctl -d or something similar if 
using ipfw ) I hope this helps.

Vladimir
Vladimir Dvorak
--
* VDSOFT.ORG   [EMAIL PROTECTED]  *
* (+420) 602 944 941 http://www.vdsoft.org *
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: no route to host - urgent problem