-
scoobybejesus
I have not found sending snapshots to be slow
-
CrtxReavr
timothias, most do that on a channel basis.
-
kenrap
Is there a way to force a specific driver to a usb device when attaching?
-
jaredj
anybody got that peertube link for the talks that was just released?
-
jaredj
undeadly.org/cgi?action=article;sid=20240630100913 has the Youtube link; "We will also release to Peertube. I will update this post accordingly."
-
mane
so i have /etc/exports
-
mane
-alldirs -maproot=root -network 10.8.0.0 -mask 255.255.255.0
-
mane
/usr/local/www/apache24 mounts just fine
-
mane
but /home/wsky doesnt
-
mane
i get permission denied
-
mane
what's going on?
-
mane
Aug 6 17:31:09 vlepy mountd[86374]: mount request denied from 10.8.0.2 for /usr/home/wsky
-
jaredj
mane: you need a path before '-alldirs' right? or perhaps irc ate it because it started with a slash?
-
mane
yeah
-
mane
it's / -alldirs -maproot=root -network 10.8.0.0 -mask 255.255.255.0
-
mane
usr/local/www/apache24 mounts just fine
-
mane
but /usr/home/wsky denies access
-
jaredj
what happens if you add another line for /usr/home?
-
mane
it mounts :D
-
mane
wtf :D
-
jaredj
> Each line in the file... specifies the mount point(s) and export flags within one local server file system...
-
jaredj
-- exports(5)
-
jaredj
i think maybe /usr/home is a different file system
-
mane
coooool
-
mane
possibly probably
-
jaredj
hurray!
-
» mane gives jaredj a cookie
-
mane
<33
-
jaredj
:D
-
mane
thanks a bunch again
-
mane
bb
-
mane
-
mane
jaredj: one more thing, uid on freebsd is 1001 but on my client 1000
-
mane
ow would i solve this?
-
jaredj
simplest answer is to change the uid/gid on the client, using sudo vipw and sudo vigr, and don't forget to sudo chown wsky:wsky your home dir on the client after
-
jaredj
at scale, you'd want an LDAP server with posix attributes to serve as a single source of UID truth, and a Kerberos server to serve as a single source of password truth
-
mane
:<
-
jaredj
then for security, you'd want NFSv4+Kerberos
-
jaredj
but if it's just you and two machines - no need to complicate it immediately
-
mane
bbl
-
jaredj
k
-
mane
jaredj: i did what you said, works perfectly fine now 0:)
-
mane
thank you
-
» mane gives jaredj another cookie
-
scoobybejesus
one day i will deploy an LDAP/Kerberos solution for myself.. sounds like fun.. sort of
-
jaredj
OM NOM NOM NOM :D
-
mane
<33
-
jaredj
it's ... eh, not bad. i have a Raspberry Pi 2 or so, running NetBSD with openldap and Heimdal Kerberos. not demanding at all, but they are both pretty old, and have their own terminology, and scale far beyond my ... what, four users or so?
-
jaredj
FreeIPA would be snazzier, but there would be far more i'd have to understand
-
jaredj
on the client side, with ldap+kerberos, you have to configure nss_ldap and pam_krb5, and you don't get cached credentials for free; FreeIPA has some snazzy joining thingy, and supports cached creds
-
jaredj
i think that's because it has sssd on the client side, but i haven't looked in a few years
-
scoobybejesus
is setup on freebsd basically identical to linux? i would be wanting to put this stuff in jails, but i guess if vnet is used it can be mostly identical, so any writeup should do, i would like to think
-
scoobybejesus
i like to follow writeups to deploy services, and then re-write them, since usually they are outdated, and they tend to skip little important things, so it helps me remember, and provides me a way to re-create if everything goes to hell
-
jaredj
for openldap and mit kerberos, yes. actually the reason i'm on heimdal is because it's part of NetBSD's base
-
jaredj
i sorta wish i had a... lightweight ldap server ;P
-
jbo
lw
-
CrtxReavr
OpenLDAP isn't light enough?
-
voy4g3r2
CrtxReavr: i think it depends on youre definition of light.. it is probably lighter than say active directory :)
-
CrtxReavr
You could probably run Windows 2000 server with a pretty small footprint.
-
Demosthenex
drive by question, to make a usb device have a consistently named symlink, i use to use devd and configure, is there like a 1 stop command vs (mknod;chown;chmod;etc) ?
-
CrtxReavr
Demosthenex, not sure I'm getting your use of "symlink" in that.
-
dautor8518050867
jaredj: glauth ldap server looks pretty simple
-
rtprio
i thought devd did all of that
-
Demosthenex
CrtxReavr: if i plugin usb, i wanted a symlink in /dev/ with a fixed name pointing to that dev
-
Demosthenex
rtprio: it does... but i'm seeing huge scripted responses to plugging in devices in the forum
-
Demosthenex
(mknod;chown;chmod;etc) ?
-
Demosthenex
i wanted to know if there was like a one liner or ln -sf that'd suffice
-
yuripv
Demosthenex: something like man devfs.rules?
-
Demosthenex
yuripv: yeah, i just was looking for an example that was quick and easy, not trying to cram a huge script into a paragraph
-
Demosthenex
or maybe i was looking at out of date data, maybe there was a usb option with like a table of basics like fstab, but vendor/product/name
-
Demosthenex
any time they try to call backquotes in a config option in a file, i get nervous ;]
-
timothias
CrtxReavr: Yeah, I had to poke at it, I'm a newb :)
-
rtprio
Demosthenex: so run a action command and do all the stuff you need to
-
jbo
lw
-
tuaris
What 'kernel' updates are being installed when upgrading a jail? (
docs.freebsd.org/en/books/handbook/jails/#jail-upgrading)
-
tuaris
I thought jails share the kernel with the host