00:22:35 <scoobybejesus> I have not found sending snapshots to be slow
01:12:54 <CrtxReavr> timothias, most do that on a channel basis.
01:58:29 <kenrap> Is there a way to force a specific driver to a usb device when attaching?
14:36:37 <jaredj> anybody got that peertube link for the talks that was just released?
14:57:13 <jaredj> http://undeadly.org/cgi?action=article;sid=20240630100913 has the Youtube link; "We will also release to Peertube. I will update this post accordingly."
15:27:52 <mane> so i have /etc/exports
15:28:06 <mane> -alldirs -maproot=root -network 10.8.0.0 -mask 255.255.255.0
15:28:20 <mane>  /usr/local/www/apache24 mounts just fine
15:28:26 <mane> but /home/wsky doesnt
15:28:31 <mane> i get permission denied
15:28:34 <mane> what's going on?
15:31:40 <mane> Aug  6 17:31:09 vlepy mountd[86374]: mount request denied from 10.8.0.2 for /usr/home/wsky
15:35:43 <jaredj> mane: you need a path before '-alldirs' right? or perhaps irc ate it because it started with a slash?
15:35:53 <mane> yeah
15:36:08 <mane> it's / -alldirs -maproot=root -network 10.8.0.0 -mask 255.255.255.0
15:36:24 <mane> usr/local/www/apache24  mounts just fine
15:36:34 <mane> but /usr/home/wsky denies access
15:37:13 <jaredj> what happens if you add another line for /usr/home?
15:38:00 <mane> it mounts :D
15:38:02 <mane> wtf :D
15:38:04 <jaredj> > Each line in the file... specifies the mount point(s) and export flags within one local server file system...
15:38:14 <jaredj> -- exports(5)
15:38:27 <jaredj> i think maybe /usr/home is a different file system
15:38:36 <mane> coooool
15:38:41 <mane> possibly probably
15:38:53 <jaredj> hurray!
15:39:01 * mane gives jaredj a cookie
15:39:03 <mane> <33
15:39:25 <jaredj> :D
15:43:28 <mane> thanks a bunch again
15:43:30 <mane> bb
15:54:21 <mane> https://vlepy.com/~wsky/Screenshots/Zrzut%20ekranu%20z%202024-08-06%2017-39-51.png
15:57:29 <mane> jaredj: one more thing, uid on freebsd is 1001 but on my client 1000
15:57:33 <mane> ow would i solve this?
16:01:55 <jaredj> simplest answer is to change the uid/gid on the client, using sudo vipw and sudo vigr, and don't forget to sudo chown wsky:wsky your home dir on the client after
16:03:07 <jaredj> at scale, you'd want an LDAP server with posix attributes to serve as a single source of UID truth, and a Kerberos server to serve as a single source of password truth
16:03:22 <mane> :<
16:03:40 <jaredj> then for security, you'd want NFSv4+Kerberos
16:03:54 <jaredj> but if it's just you and two machines - no need to complicate it immediately
16:04:15 <mane> bbl
16:04:18 <jaredj> k
16:09:40 <mane> jaredj: i did what you said, works perfectly fine now 0:)
16:09:42 <mane> thank you
16:09:55 * mane gives jaredj another cookie
16:17:37 <scoobybejesus> one day i will deploy an LDAP/Kerberos solution for myself.. sounds like fun.. sort of
16:18:11 <jaredj> OM NOM NOM NOM :D
16:18:20 <mane> <33
16:21:12 <jaredj> it's ... eh, not bad. i have a Raspberry Pi 2 or so, running NetBSD with openldap and Heimdal Kerberos. not demanding at all, but they are both pretty old, and have their own terminology, and scale far beyond my ... what, four users or so?
16:22:37 <jaredj> FreeIPA would be snazzier, but there would be far more i'd have to understand
16:25:19 <jaredj> on the client side, with ldap+kerberos, you have to configure nss_ldap and pam_krb5, and you don't get cached credentials for free; FreeIPA has some snazzy joining thingy, and supports cached creds
16:25:57 <jaredj> i think that's because it has sssd on the client side, but i haven't looked in a few years
16:26:59 <scoobybejesus> is setup on freebsd basically identical to linux?  i would be wanting to put this stuff in jails, but i guess if vnet is used it can be mostly identical, so any writeup should do, i would like to think
16:27:53 <scoobybejesus> i like to follow writeups to deploy services, and then re-write them, since usually they are outdated, and they tend to skip little important things, so it helps me remember, and provides me a way to re-create if everything goes to hell
16:35:43 <jaredj> for openldap and mit kerberos, yes. actually the reason i'm on heimdal is because it's part of NetBSD's base
17:00:14 <jaredj> i sorta wish i had a... lightweight ldap server ;P
18:17:07 <jbo> lw
19:08:52 <CrtxReavr> OpenLDAP isn't light enough?
19:09:58 <voy4g3r2> CrtxReavr: i think it depends on youre definition of light.. it is probably lighter than say active directory :)
19:10:44 <CrtxReavr> You could probably run Windows 2000 server with a pretty small footprint.
19:39:42 <Demosthenex> drive by question, to make a usb device have a consistently named symlink, i use to use devd and configure, is there like a 1 stop command vs (mknod;chown;chmod;etc) ?
19:41:43 <CrtxReavr> Demosthenex, not sure I'm getting your use of "symlink" in that.
20:22:26 <dautor8518050867> jaredj: glauth ldap server looks pretty simple
20:27:33 <rtprio> i thought devd did all of that
20:28:58 <Demosthenex> CrtxReavr: if i plugin usb, i wanted a symlink in /dev/ with a fixed name pointing to that dev
20:29:12 <Demosthenex> rtprio: it does... but i'm seeing huge scripted responses to plugging in devices in the forum
20:29:20 <Demosthenex>  (mknod;chown;chmod;etc) ?
20:29:38 <Demosthenex> i wanted to know if there was like a one liner or ln -sf that'd suffice
20:32:01 <yuripv> Demosthenex: something like man devfs.rules?
20:37:34 <Demosthenex> yuripv: yeah, i just was looking for an example that was quick and easy, not trying to cram a huge script into a paragraph
20:38:01 <Demosthenex> or maybe i was looking at out of date data, maybe there was a usb option with like a table of basics like fstab, but vendor/product/name
20:40:59 <Demosthenex> any time they try to call backquotes in a config option in a file, i get nervous ;]
20:44:12 <timothias> CrtxReavr: Yeah, I had to poke at it, I'm a newb :)
20:56:32 <rtprio> Demosthenex: so run a action command and do all the stuff you need to
21:36:53 <jbo> lw
22:23:58 <tuaris> What 'kernel' updates are being installed when upgrading a jail? (https://docs.freebsd.org/en/books/handbook/jails/#jail-upgrading)
22:24:17 <tuaris> I thought jails share the kernel with the host