Re: [OpenIndiana-discuss] OI 151 a4
Hi, cpforum píše v so 05. 05. 2012 v 12:31 +0200: I just have updated OI from a3 to a4. it's OK for my old Pentium IV (Microstar MS-6585). I found the following error with dmesg (not related with a4 update, and also found in old messages.[01234] logs ) May 1 10:10:00 eos savecore: [ID 570001 auth.error] reboot after panic: hment_remove() missing in hash table pp=fccf9250, ht=d75f50f0,entry=0x2f3 hash index=0xa2c5 May 1 10:10:00 eos savecore: [ID 362314 auth.error] Panic crashdump pending on dump device but dumpadm -n in effect; run savecore(1M) manually to extract. Image UUID 70d99465-1991-64d8-9547-eb1376f047de. I found no /var/crash nor /var/crash/eos on my system. mkdir -p /var/crash/eos ; savecore ; rm /var/crash/eos/*solve that error. Hmm, bad you removed the crash dump, we cannot look why your system met system panic. At the first reboot I also have 2 times : Warning nvidia has no quiesce I replaced some month ago Openindiana NVIDIA driver with NVIDIA 173.14.32 (the last available for the GeForce FX 5200). I have a doubt about which is the better choice for an old component like GeForce FX 5200 on an old desktop with only 1,2 Go RAM : - Xorg NV driver - NVIDIA 173.14.32 Any idea about ? nVidia/Oracle did not add modern driver APIs to do old drivers. Just ignore that warning. As the result, your system cannot do fast reboot but still nVidia driver is better for you now if you are not missing fast reboot. Best regards, Milan ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
[OpenIndiana-discuss] Nvidia errors on 151a4
Hi all, Yesterday I upgraded to 151a4 on my HP xw8200. The machine experienced four freezes that could only be recovered by powering it off and on again. Now, fmadm faulty lists nothing. fmdump lists nothing. fmdump -e mentions issues with ereport.io.pci.fabric and ereport.io.pciex.fabric. These are scattered errors across the whole period I've had OI installed. After the upgrade, I received a warning that the nvidia driver did not support quiesce(), which then went away with the next reboot. What happens when it freezes: I'm working along maybe doing backups and I want to check something online. I open Firefox and the system stops accessing disks, processing data with the cpus and disconnects mouse and keyboard. The video stays frozen on a still image version of my desktop. I have tried setting a hardware watchdog, but it never resets. Upon rebooting, no crash, no dump, nothing. Everything works fine for some time and then happens again out of the blue. It's been happening since I bought the computer. I have changed disks, PSU, checked the fans, swapped the PS2 keyboard and mouse for USB ones... everything reduced this but it never really went away. One major difference with 151a4, when I shut down the machine, my console shows notices from the nvidia driver encountering errors performing dev-map and dev-segmap. This makes me think that the NVidia Quadro Fx 3450 in this machine has reached the end of its days. Guys, I need your advice, because I really can't afford to spend money on it without knowing for sure that it will help. I'd rather find out now that maybe my logci board isn't well and start saving up for another rig... Any help is really appreciated! Bryan ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Nvidia errors on 151a4
Hi Bryan, I would start with test of other nvidia drivers. Download new 295.49 at first (there are reports that 295.40 was not good). And also some older drivers. You can find them on nvidia.com Best regards, Milan Bryan Iotti píše v ne 06. 05. 2012 v 09:46 +0200: Hi all, Yesterday I upgraded to 151a4 on my HP xw8200. The machine experienced four freezes that could only be recovered by powering it off and on again. Now, fmadm faulty lists nothing. fmdump lists nothing. fmdump -e mentions issues with ereport.io.pci.fabric and ereport.io.pciex.fabric. These are scattered errors across the whole period I've had OI installed. After the upgrade, I received a warning that the nvidia driver did not support quiesce(), which then went away with the next reboot. What happens when it freezes: I'm working along maybe doing backups and I want to check something online. I open Firefox and the system stops accessing disks, processing data with the cpus and disconnects mouse and keyboard. The video stays frozen on a still image version of my desktop. I have tried setting a hardware watchdog, but it never resets. Upon rebooting, no crash, no dump, nothing. Everything works fine for some time and then happens again out of the blue. It's been happening since I bought the computer. I have changed disks, PSU, checked the fans, swapped the PS2 keyboard and mouse for USB ones... everything reduced this but it never really went away. One major difference with 151a4, when I shut down the machine, my console shows notices from the nvidia driver encountering errors performing dev-map and dev-segmap. This makes me think that the NVidia Quadro Fx 3450 in this machine has reached the end of its days. Guys, I need your advice, because I really can't afford to spend money on it without knowing for sure that it will help. I'd rather find out now that maybe my logci board isn't well and start saving up for another rig... Any help is really appreciated! Bryan ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Nvidia errors on 151a4
Hi Milan, thank you for the quick answer. I had to install 295.49 following the procedure from http://defect.opensolaris.org/bz/show_bug.cgi?id=12196 I have a new boot environment with the updated drivers and it would appear that the hard freezes have stopped. However, it is still littering my console with these two messages in repetition: May 6 10:50:01 Wraith nvidia: [ID 702911 kern.notice] NOTICE: NVRM: nv_devmap: devmap_devmem_setup() failed (22) May 6 10:50:01 Wraith nvidia: [ID 702911 kern.notice] NOTICE: NVRM: nv_segmap: ddi_devmap_segmap() failed (6) Can I do anything about that? Again, thank you, the driver update apparently solved the issue. Bryan On 05/ 6/12 10:26 AM, Milan Jurik wrote: Hi Bryan, I would start with test of other nvidia drivers. Download new 295.49 at first (there are reports that 295.40 was not good). And also some older drivers. You can find them on nvidia.com Best regards, Milan Bryan Iotti píše v ne 06. 05. 2012 v 09:46 +0200: Hi all, Yesterday I upgraded to 151a4 on my HP xw8200. The machine experienced four freezes that could only be recovered by powering it off and on again. Now, fmadm faulty lists nothing. fmdump lists nothing. fmdump -e mentions issues with ereport.io.pci.fabric and ereport.io.pciex.fabric. These are scattered errors across the whole period I've had OI installed. After the upgrade, I received a warning that the nvidia driver did not support quiesce(), which then went away with the next reboot. What happens when it freezes: I'm working along maybe doing backups and I want to check something online. I open Firefox and the system stops accessing disks, processing data with the cpus and disconnects mouse and keyboard. The video stays frozen on a still image version of my desktop. I have tried setting a hardware watchdog, but it never resets. Upon rebooting, no crash, no dump, nothing. Everything works fine for some time and then happens again out of the blue. It's been happening since I bought the computer. I have changed disks, PSU, checked the fans, swapped the PS2 keyboard and mouse for USB ones... everything reduced this but it never really went away. One major difference with 151a4, when I shut down the machine, my console shows notices from the nvidia driver encountering errors performing dev-map and dev-segmap. This makes me think that the NVidia Quadro Fx 3450 in this machine has reached the end of its days. Guys, I need your advice, because I really can't afford to spend money on it without knowing for sure that it will help. I'd rather find out now that maybe my logci board isn't well and start saving up for another rig... Any help is really appreciated! Bryan ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Nvidia errors on 151a4
Hi Bryan, Bryan N Iotti píše v ne 06. 05. 2012 v 10:53 +0200: Hi Milan, thank you for the quick answer. I had to install 295.49 following the procedure from http://defect.opensolaris.org/bz/show_bug.cgi?id=12196 I have a new boot environment with the updated drivers and it would appear that the hard freezes have stopped. However, it is still littering my console with these two messages in repetition: May 6 10:50:01 Wraith nvidia: [ID 702911 kern.notice] NOTICE: NVRM: nv_devmap: devmap_devmem_setup() failed (22) May 6 10:50:01 Wraith nvidia: [ID 702911 kern.notice] NOTICE: NVRM: nv_segmap: ddi_devmap_segmap() failed (6) Can I do anything about that? debugging on kernel level and trying to find why the calls fail. It can be problem in the driver or on our side but we have no support from nvidia here. You can try to ask nvidia also. Again, thank you, the driver update apparently solved the issue. Best regards, Milan Bryan On 05/ 6/12 10:26 AM, Milan Jurik wrote: Hi Bryan, I would start with test of other nvidia drivers. Download new 295.49 at first (there are reports that 295.40 was not good). And also some older drivers. You can find them on nvidia.com Best regards, Milan Bryan Iotti píše v ne 06. 05. 2012 v 09:46 +0200: Hi all, Yesterday I upgraded to 151a4 on my HP xw8200. The machine experienced four freezes that could only be recovered by powering it off and on again. Now, fmadm faulty lists nothing. fmdump lists nothing. fmdump -e mentions issues with ereport.io.pci.fabric and ereport.io.pciex.fabric. These are scattered errors across the whole period I've had OI installed. After the upgrade, I received a warning that the nvidia driver did not support quiesce(), which then went away with the next reboot. What happens when it freezes: I'm working along maybe doing backups and I want to check something online. I open Firefox and the system stops accessing disks, processing data with the cpus and disconnects mouse and keyboard. The video stays frozen on a still image version of my desktop. I have tried setting a hardware watchdog, but it never resets. Upon rebooting, no crash, no dump, nothing. Everything works fine for some time and then happens again out of the blue. It's been happening since I bought the computer. I have changed disks, PSU, checked the fans, swapped the PS2 keyboard and mouse for USB ones... everything reduced this but it never really went away. One major difference with 151a4, when I shut down the machine, my console shows notices from the nvidia driver encountering errors performing dev-map and dev-segmap. This makes me think that the NVidia Quadro Fx 3450 in this machine has reached the end of its days. Guys, I need your advice, because I really can't afford to spend money on it without knowing for sure that it will help. I'd rather find out now that maybe my logci board isn't well and start saving up for another rig... Any help is really appreciated! Bryan ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
[OpenIndiana-discuss] Root as role vs. user and rsync
I finally decided to take the bullet and make root a role instead of a user. All went well except for my nightly backup. I have a backup server that rsyncs my various collection of Linux, OpenIndiana, Windows, and Mac machines nightly. Without root as a user, how do I set up rsync to ssh onto the machine and retrieve the root system files on OpenIndiana? Thanks, Gary ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Root as role vs. user and rsync
On Sun, May 6, 2012 at 2:07 PM, Gary Gendel g...@genashor.com wrote: I finally decided to take the bullet and make root a role instead of a user. All went well except for my nightly backup. I have a backup server that rsyncs my various collection of Linux, OpenIndiana, Windows, and Mac machines nightly. Without root as a user, how do I set up rsync to ssh onto the machine and retrieve the root system files on OpenIndiana? There are two ways as I see it: 1. Start rsyncd (see http://wiki.openindiana.org/oi/rsync+daemon+service+on+OpenIndiana) and set up a share for '/' which you then can rsync against. You can either do this directly over the network (unencrypted) or SSH into the machine and connect to rsyncd through localhost. 2. SSH in as dedicated unprivileged user, which then have permissions to run rsync with root permissions though sudo. This is the option I use for backups, and I have a line such as the following in the sudo configuration, which only allows the unprivileged user to retrieve files from the server, and not write files: backup ALL=NOPASSWD: /usr/bin/rsync --server --sender * -- Venlig hilsen / Kind regards Jeppe Toustrup (aka. Tenzer) ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
[OpenIndiana-discuss] Massive numbers of man files missing on 151a4
After updating to OI151a4 using updatemanager, I find most manual files in man1 missing! Is this my own faulty management practices, or has anyone else seen the same? pfexec pkg fix lists tons of missing man1 files ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Nvidia errors on 151a4
On Sun, 6 May 2012, Bryan Iotti wrote: Hi all, Yesterday I upgraded to 151a4 on my HP xw8200. The machine experienced four freezes that could only be recovered by powering it off and on again. Now, fmadm faulty lists nothing. fmdump lists nothing. fmdump -e mentions issues with ereport.io.pci.fabric and ereport.io.pciex.fabric. These are scattered errors across the whole period I've had OI installed. As a point of reference I have been experiencing such reports on a Solaris 10 system (Sun Ultra-40M2) with a Quadro FX 3500 card. The problems were first noticed after updating from Firefox 3 to Firefox 9. The system reported a hardware fault against the video card or associated slot within hours of installing Firefox 9 (am up to FF 12 now). The reports only seem to occur while using Firefox and only while entering a page. Full-screen streaming video and very heavy image related work results in no reported issues. The issues are only reported while using Firefox. There is no visible indication of any issues with the video card since output is quite smooth and fast. I had several long discussions with John Martin at Oracle about this but he has not seen the problem. This makes me think that the NVidia Quadro Fx 3450 in this machine has reached the end of its days. It is not clear since I have the some of the same issues (but without the hangs) on my Sun Ultra-40M2 with its Quadro FX 3500 card. Since I previously replaced the card with similar reported issues (and they went away) it is possible that these cards only last a couple of years. Bob -- Bob Friesenhahn bfrie...@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer,http://www.GraphicsMagick.org/ ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] openindiana ldap client
Hi Mike, Try the following change to the nsswitch.conf file # consult /etc files only if ldap is down. hosts: files dns mdns ldap That worked! Now ldap and dns are happy! very cool. thanks to both of you guys! best regards, Tim On Sun, May 6, 2012 at 1:01 AM, Mike La Spina mike.lasp...@laspina.ca wrote: Hi Tim, Try the following change to the nsswitch.conf file # consult /etc files only if ldap is down. hosts: files dns mdns ldap This will set the resolution order to; 1 local hosts file, 2 dns, 3 multicast dns, 4 ldap lookup Regards, Mike -Original Message- From: Tim Dunphy [mailto:bluethu...@gmail.com] Sent: Saturday, May 05, 2012 9:43 PM To: Discussion list for OpenIndiana Subject: Re: [OpenIndiana-discuss] openindiana ldap client Thanks! That really did the trick! ldapclient manual -a credentialLevel=proxy -a authenticationMethod=simple -a proxyDN=cn=Manager,dc=example,dc=com -a proxyPassword=secret -a defaultSearchBase=dc=example,dc=com -a domainName=example.com -a defaultServerList=192.168.1.44 Grep ldap for ldap user: root@openindiana:/var/ldap# getent passwd | grep walbs walbs:x:1002:1003:Walkiria Soares-Dunphy:/home/walbs:/bin/bash However I notice that now dns resolution seems mixed up, but only since running ldapclient: root@openindiana:/var/ldap# ping yahoo.com ping: unknown host yahoo.com Here's what nsswitch.conf is looking like: root@openindiana:/var/ldap# cat /etc/nsswitch.conf # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the License). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets [] replaced with your own identifying # information: Portions Copyright [] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved. # # # /etc/nsswitch.ldap: # # An example file that could be copied over to /etc/nsswitch.conf; it # uses LDAP in conjunction with files. # # hosts: and services: in this file are used only if the # /etc/netconfig file has a - for nametoaddr_libs of inet transports. # LDAP service requires that svc:/network/ldap/client:default be enabled # and online. # the following two lines obviate the + entry in /etc/passwd and /etc/group. passwd: files ldap group: files ldap # consult /etc files only if ldap is down. hosts: files ldap # Note that IPv4 addresses are searched for in all of the ipnodes databases # before searching the hosts databases. ipnodes: files ldap networks: files ldap protocols: files ldap rpc: files ldap ethers: files ldap netmasks: files ldap bootparams: files ldap publickey: files ldap netgroup: ldap automount: files ldap aliases: files ldap # for efficient getservbyname() avoid ldap services: files ldap printers: user files ldap auth_attr: files ldap prof_attr: files ldap project: files ldap tnrhtp: files ldap tnrhdb: files ldap If I revert the file to pre-ldapclient I can ping yahoo and external hosts again: root@openindiana:/var/ldap# cat /etc/nsswitch.conf.bak /etc/nsswitch.conf root@openindiana:/var/ldap# ping yahoo.com yahoo.com is alive And of course I can't find ldap users in the directory again. root@openindiana:/var/ldap# getent passwd | grep walbs root@openindiana:/var/ldap# Is there any way to have my cake and eat it too? thanks tim On Sat, May 5, 2012 at 9:57 PM, Joshua M. Clulow j...@sysmgr.org wrote: On 6 May 2012 11:15, Tim Dunphy bluethu...@gmail.com wrote: I've also tried using ldapclient, but am having no luck there either: I would definitely suggest that you'll want to use the native LDAP bits, not the PADL stuff. root@openindiana:~/nss_ldap-265# ldapclient init -v -a profileName=default \ -a domainname=example.com \ -a proxyDN=cn=uid=proxy,ou=People,dc=example,dc=com \ -a proxyPassword=secret \ 192.168.1.44 Parsing profileName=default Parsing domainname=example.com Parsing proxyDN=cn=uid=proxy,ou=People,dc=example,dc=com Parsing proxyPassword=secret Arguments parsed: domainName: example.com proxyDN: cn=uid=proxy,ou=People,dc=example,dc=com profileName: default proxyPassword: secret defaultServerList: 192.168.1.44 Handling init option About to configure machine by downloading a profile Can not find the nisDomainObject for domain example.com
Re: [OpenIndiana-discuss] Massive numbers of man files missing on 151a4
I see lots of output from pkg fix, but it all seems to be complaining about missing license files. And there are 1216 files in /usr/share/man/man1. It looks like there's something else going on. -- C (My system is a new install from distribution of 151a with immediate updates.) On Sun, May 6, 2012 at 6:42 AM, Hans J. Albertsson hans.j.alberts...@branneriet.se wrote: After updating to OI151a4 using updatemanager, I find most manual files in man1 missing! Is this my own faulty management practices, or has anyone else seen the same? pfexec pkg fix lists tons of missing man1 files ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Massive numbers of man files missing on 151a4
actually it is much more of a problem than just the below man files. all of /usr/local has disappeared, and select trees and single files. The complete story: I run various things from directories in /usr/local, and I know for a fact they all worked perfectly this morning. For some reason I thought I'd try upgrading OI151a3 to a4, and the updatemanager application listed a set of problematic packages: Imagemagick, drupal6, joomla and Bash-completion. The last three were leftovers overlooked when I discarded the contrib repository, and had directory property conflicts with other packages. I removed those three by clicking one at a time and uninstalling them thru the packagemanager. Imagemagick had a massive set of conflicts listed between itself and the sfe version. I removed the sfe version thru the package manager. After this I ran updatemanager and rebooted into the new BE. There I ran pkg fix, just to check what it looked like. After that I tried man pkg, which failed. Then all the services I ran out of /usr/local were gone. I rebooted back into the previous BE, but it's all gone there, too. It's also gone from the snapshot created by the update manager this morning. It's very little actual data missing. Just a few hundred MB. I have most of it available in a month-old snapshot of /, but that thing with directory permissions got me thinking maybe it's all there, just hidden somewhere... ??? Suggest a rational way to get all the data back! Or some interesting way, at least. I'm nearly comfortable running zfs as an admin, but no expert, and not very conversant with the inner structure of zfs pools or data sets. I haven't ever really had to restore data from snapshots in an active root pool. On 2012-05-06 15:42, Hans J. Albertsson wrote: After updating to OI151a4 using updatemanager, I find most manual files in man1 missing! Is this my own faulty management practices, or has anyone else seen the same? pfexec pkg fix lists tons of missing man1 files ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Massive numbers of man files missing on 151a4
I should add that I cannot remember why I had both the standard imagemagick from openindiana.org AND the sfe version. This is fishy, I distinctly remember deciding that I wanted to remove the openindiana.org one and replace it with the sfe one. Not for any rational reason, I just planned on playing with the sfe one a bit. And I have done that, and did not have a problem. And I was quite convinced I hade removed the openindiana.org one. Still, something like that can be planned but never executed on account of being interrupted, or a cat walking across my keyboard when I went for a coffee, but I don't think so. On 2012-05-06 20:42, Hans J. Albertsson wrote: actually it is much more of a problem than just the below man files. all of /usr/local has disappeared, and select trees and single files. The complete story: I run various things from directories in /usr/local, and I know for a fact they all worked perfectly this morning. For some reason I thought I'd try upgrading OI151a3 to a4, and the updatemanager application listed a set of problematic packages: Imagemagick, drupal6, joomla and Bash-completion. The last three were leftovers overlooked when I discarded the contrib repository, and had directory property conflicts with other packages. I removed those three by clicking one at a time and uninstalling them thru the packagemanager. Imagemagick had a massive set of conflicts listed between itself and the sfe version. I removed the sfe version thru the package manager. After this I ran updatemanager and rebooted into the new BE. There I ran pkg fix, just to check what it looked like. After that I tried man pkg, which failed. Then all the services I ran out of /usr/local were gone. I rebooted back into the previous BE, but it's all gone there, too. It's also gone from the snapshot created by the update manager this morning. It's very little actual data missing. Just a few hundred MB. I have most of it available in a month-old snapshot of /, but that thing with directory permissions got me thinking maybe it's all there, just hidden somewhere... ??? Suggest a rational way to get all the data back! Or some interesting way, at least. I'm nearly comfortable running zfs as an admin, but no expert, and not very conversant with the inner structure of zfs pools or data sets. I haven't ever really had to restore data from snapshots in an active root pool. On 2012-05-06 15:42, Hans J. Albertsson wrote: After updating to OI151a4 using updatemanager, I find most manual files in man1 missing! Is this my own faulty management practices, or has anyone else seen the same? pfexec pkg fix lists tons of missing man1 files ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Root as role vs. user and rsync
On 05/ 7/12 01:04 AM, Jeppe Toustrup wrote: On Sun, May 6, 2012 at 2:07 PM, Gary Gendelg...@genashor.com wrote: I finally decided to take the bullet and make root a role instead of a user. All went well except for my nightly backup. I have a backup server that rsyncs my various collection of Linux, OpenIndiana, Windows, and Mac machines nightly. Without root as a user, how do I set up rsync to ssh onto the machine and retrieve the root system files on OpenIndiana? There are two ways as I see it: 1. Start rsyncd (see http://wiki.openindiana.org/oi/rsync+daemon+service+on+OpenIndiana) and set up a share for '/' which you then can rsync against. You can either do this directly over the network (unencrypted) or SSH into the machine and connect to rsyncd through localhost. I'll second that recommendation, it is the way I rsync off anything derived from OpenSolaris. From what I've seen, this option offers the best performance. I lock the share down so only the backup server can read from it, see rsync.conf(5) for details. -- Ian. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Root as role vs. user and rsync
On 5/6/12 8:04 AM, Jeppe Toustrup openindi...@tenzer.dk wrote: 2. SSH in as dedicated unprivileged user, which then have permissions to run rsync with root permissions though sudo. This is how I do it, which also has the advantage of letting me give sudo permissions to run specific scripts that (for example) quiesce a database, snapshot the filesystem, reactivate the database, mount the snapshot, and then perform further operations on the snapshot while the database is humming along. Makes backup windows much more manageable -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO!!! -- Bill McKenna ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Root as role vs. user and rsync
There is one other option. Use ssh public key authentication to bypass the whole PAM/role nonsense and restrict what the user can do with the command option. See sshd(8) in its AUTHORIZED_KEYS FILE FORMAT section On Sun, May 6, 2012 at 10:37 PM, Dave Pooser dave...@pooserville.com wrote: On 5/6/12 8:04 AM, Jeppe Toustrup openindi...@tenzer.dk wrote: 2. SSH in as dedicated unprivileged user, which then have permissions to run rsync with root permissions though sudo. This is how I do it, which also has the advantage of letting me give sudo permissions to run specific scripts that (for example) quiesce a database, snapshot the filesystem, reactivate the database, mount the snapshot, and then perform further operations on the snapshot while the database is humming along. Makes backup windows much more manageable -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO!!! -- Bill McKenna ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
