Re: Firebird client fails port install

2008-12-15 Thread Lowell Gilbert
Da Rock rock_on_the_...@comcen.com.au writes:

 I'm trying to install php5-extensions (which includes firebird), but its
 failing with an error code 1 on firebird20-client. It does mention
 running make to build firebird, but not as root. So I've tried
 everything to get this to work: running make as my wheel group user,
 installing as a pkg instead.

 What could I be missing?

 (And before anybody asks: I ran portsnap fetch update twice yesterday -
 and I did run the update. I've learnt my lesson from last time...)

Unless you set variables to put the work directory somewhere non-standard,
the ports system will try to do its building under each port's directory,
which is normally not writable by regular users.  Similarly, installing a
port (or a package, for the same reasons) normally requires root
permissions for access to system directories and in many cases to let
programs installed by ports run as special-purpose users.

What is the reason you're trying to install ports as a different user?

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Da Rock
On Mon, 2008-12-15 at 14:29 -0500, Lowell Gilbert wrote:
 Da Rock rock_on_the_...@comcen.com.au writes:
 
  I'm trying to install php5-extensions (which includes firebird), but its
  failing with an error code 1 on firebird20-client. It does mention
  running make to build firebird, but not as root. So I've tried
  everything to get this to work: running make as my wheel group user,
  installing as a pkg instead.
 
  What could I be missing?
 
  (And before anybody asks: I ran portsnap fetch update twice yesterday -
  and I did run the update. I've learnt my lesson from last time...)
 
 Unless you set variables to put the work directory somewhere non-standard,
 the ports system will try to do its building under each port's directory,
 which is normally not writable by regular users.  Similarly, installing a
 port (or a package, for the same reasons) normally requires root
 permissions for access to system directories and in many cases to let
 programs installed by ports run as special-purpose users.
 
 What is the reason you're trying to install ports as a different user?
 

Because the first stop error occurs and it says to run make to build
firebird, but it also says Please do not build firebird as 'root'
because this may cause conflicts with SysV semaphores of running
services.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Lowell Gilbert
Da Rock rock_on_the_...@comcen.com.au writes:

 On Mon, 2008-12-15 at 14:29 -0500, Lowell Gilbert wrote:
 Da Rock rock_on_the_...@comcen.com.au writes:
 
  I'm trying to install php5-extensions (which includes firebird), but its
  failing with an error code 1 on firebird20-client. It does mention
  running make to build firebird, but not as root. So I've tried
  everything to get this to work: running make as my wheel group user,
  installing as a pkg instead.
 
  What could I be missing?
 
  (And before anybody asks: I ran portsnap fetch update twice yesterday -
  and I did run the update. I've learnt my lesson from last time...)
 
 Unless you set variables to put the work directory somewhere non-standard,
 the ports system will try to do its building under each port's directory,
 which is normally not writable by regular users.  Similarly, installing a
 port (or a package, for the same reasons) normally requires root
 permissions for access to system directories and in many cases to let
 programs installed by ports run as special-purpose users.
 
 What is the reason you're trying to install ports as a different user?
 

 Because the first stop error occurs and it says to run make to build
 firebird, but it also says Please do not build firebird as 'root'
 because this may cause conflicts with SysV semaphores of running
 services.

I can't see exactly what's happening (partly because you didn't show the
actual failure messages), but I do notice that php5-extensions can build
without firebird.  In fact, that's what it does by default, so you must
have explicitly told it to build that.  If you don't need it, you can go
back in and set the php5-extensions port options to not include
firebird, and you will avoid this particular problem.

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Da Rock
On Mon, 2008-12-15 at 15:49 -0500, Lowell Gilbert wrote:
 Da Rock rock_on_the_...@comcen.com.au writes:
 
  On Mon, 2008-12-15 at 14:29 -0500, Lowell Gilbert wrote:
  Da Rock rock_on_the_...@comcen.com.au writes:
  
   I'm trying to install php5-extensions (which includes firebird), but its
   failing with an error code 1 on firebird20-client. It does mention
   running make to build firebird, but not as root. So I've tried
   everything to get this to work: running make as my wheel group user,
   installing as a pkg instead.
  
   What could I be missing?
  
   (And before anybody asks: I ran portsnap fetch update twice yesterday -
   and I did run the update. I've learnt my lesson from last time...)
  
  Unless you set variables to put the work directory somewhere non-standard,
  the ports system will try to do its building under each port's directory,
  which is normally not writable by regular users.  Similarly, installing a
  port (or a package, for the same reasons) normally requires root
  permissions for access to system directories and in many cases to let
  programs installed by ports run as special-purpose users.
  
  What is the reason you're trying to install ports as a different user?
  
 
  Because the first stop error occurs and it says to run make to build
  firebird, but it also says Please do not build firebird as 'root'
  because this may cause conflicts with SysV semaphores of running
  services.
 
 I can't see exactly what's happening (partly because you didn't show the
 actual failure messages), but I do notice that php5-extensions can build
 without firebird.  In fact, that's what it does by default, so you must
 have explicitly told it to build that.  If you don't need it, you can go
 back in and set the php5-extensions port options to not include
 firebird, and you will avoid this particular problem.
 

I did that in the end, but that doesn't really solve the problem now
does it? I'll take it up with ports and see if I can't figure out whats
wrong...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Lowell Gilbert
Da Rock rock_on_the_...@comcen.com.au writes:

 On Mon, 2008-12-15 at 15:49 -0500, Lowell Gilbert wrote:
 Da Rock rock_on_the_...@comcen.com.au writes:
 
  On Mon, 2008-12-15 at 14:29 -0500, Lowell Gilbert wrote:
  Da Rock rock_on_the_...@comcen.com.au writes:
  
   I'm trying to install php5-extensions (which includes firebird), but its
   failing with an error code 1 on firebird20-client. It does mention
   running make to build firebird, but not as root. So I've tried
   everything to get this to work: running make as my wheel group user,
   installing as a pkg instead.
  
   What could I be missing?
  
   (And before anybody asks: I ran portsnap fetch update twice yesterday -
   and I did run the update. I've learnt my lesson from last time...)
  
  Unless you set variables to put the work directory somewhere non-standard,
  the ports system will try to do its building under each port's directory,
  which is normally not writable by regular users.  Similarly, installing a
  port (or a package, for the same reasons) normally requires root
  permissions for access to system directories and in many cases to let
  programs installed by ports run as special-purpose users.
  
  What is the reason you're trying to install ports as a different user?
  
 
  Because the first stop error occurs and it says to run make to build
  firebird, but it also says Please do not build firebird as 'root'
  because this may cause conflicts with SysV semaphores of running
  services.
 
 I can't see exactly what's happening (partly because you didn't show the
 actual failure messages), but I do notice that php5-extensions can build
 without firebird.  In fact, that's what it does by default, so you must
 have explicitly told it to build that.  If you don't need it, you can go
 back in and set the php5-extensions port options to not include
 firebird, and you will avoid this particular problem.
 

 I did that in the end, but that doesn't really solve the problem now
 does it? I'll take it up with ports and see if I can't figure out whats
 wrong...

You'll want to provide more information if you do so.

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Da Rock
On Mon, 2008-12-15 at 16:49 -0500, Mark Moellering wrote:
 Da Rock wrote:
  On Mon, 2008-12-15 at 15:49 -0500, Lowell Gilbert wrote:

  Da Rock rock_on_the_...@comcen.com.au writes:
 
  
  On Mon, 2008-12-15 at 14:29 -0500, Lowell Gilbert wrote:

  Da Rock rock_on_the_...@comcen.com.au writes:
 
  
  I'm trying to install php5-extensions (which includes firebird), but its
  failing with an error code 1 on firebird20-client. It does mention
  running make to build firebird, but not as root. So I've tried
  everything to get this to work: running make as my wheel group user,
  installing as a pkg instead.
 
  What could I be missing?
 
  (And before anybody asks: I ran portsnap fetch update twice yesterday -
  and I did run the update. I've learnt my lesson from last time...)

  Unless you set variables to put the work directory somewhere 
  non-standard,
  the ports system will try to do its building under each port's directory,
  which is normally not writable by regular users.  Similarly, installing a
  port (or a package, for the same reasons) normally requires root
  permissions for access to system directories and in many cases to let
  programs installed by ports run as special-purpose users.
 
  What is the reason you're trying to install ports as a different user?
 
  
  Because the first stop error occurs and it says to run make to build
  firebird, but it also says Please do not build firebird as 'root'
  because this may cause conflicts with SysV semaphores of running
  services.

  I can't see exactly what's happening (partly because you didn't show the
  actual failure messages), but I do notice that php5-extensions can build
  without firebird.  In fact, that's what it does by default, so you must
  have explicitly told it to build that.  If you don't need it, you can go
  back in and set the php5-extensions port options to not include
  firebird, and you will avoid this particular problem.
 
  
 
  I did that in the end, but that doesn't really solve the problem now
  does it? I'll take it up with ports and see if I can't figure out whats
  wrong...
 
 

 The only thing I can think of that makes sense is that they want you to 
 run as su, as opposed to a true root login.  Perhaps later someone with 
 more experience will answer, I can't believe you are the first/only 
 person to do this.

As a matter of fact I never use true root I ALWAYS use su (believe it or
not a M$ directive in the MCSE course I did years ago- never use
administrator, copy administrative capabilities to the username used).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Wojciech Puchar

As a matter of fact I never use true root I ALWAYS use su (believe it or


what's a practical difference between logging to root directly or doing 
su?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firebird client fails port install

2008-12-15 Thread Da Rock
On Mon, 2008-12-15 at 23:46 +0100, Wojciech Puchar wrote:
  As a matter of fact I never use true root I ALWAYS use su (believe it or
 
 what's a practical difference between logging to root directly or doing 
 su?

The log files log exactly who did what instead of anonymously. At the
least they show who had su'd to root and when, but from my experience it
says the user and what was done.

Incidentally, I first heard of this practice through my MCSE (where
basically M$ NT was bagged as the worst system ever- strange wouldn't
you say seeing as it was an M$ course?), but the practice has been in
use for years by old school *nix administrators and has been a specified
as best practice. Just read nearly any *nix manual or tutorial. Why do
you think the sysinstall for freebsd and just about every *nix distro
says to create a user account so you don't use root? It also sometimes
states to use su to gain root privileges in the warning message.

It actually frightens me how many new administrators don't bother with
following this policy- even ISPs. It helps with forensic analysis, and
if you suddenly find root doing stuff in your logs (if you follow the
best practice methods) then you know it wasn't you or anybody
authorised.

If anybody here can tell me how to enforce this policy in practice I'd
be very interested to hear it (although I doubt one could prevent
console access to root ICE). Maybe a method to obtain the user's name or
soemthing. I think it can only be enforced in policy and not practice,
though.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org