From lists at colorremedies.com Fri Feb 2 10:36:22 2007 From: lists at colorremedies.com (Chris Murphy) Date: Fri Feb 2 10:53:00 2007 Subject: identd Message-ID: <05CE4667-06E9-43A3-A2CA-0DF287273FF3@colorremedies.com> I've been using a freeware application identD, but recently it won't work anymore. It works on other systems, but not mine and I have no idea why. The only clue when activating it, is the following entry in the console. Feb 2 13:35:19 ColorPower authexec: executing /bin/mv Feb 2 13:35:19 ColorPower authexec: executing /Library/ PreferencePanes/IdentD.prefPane/Contents/Resources/identd_start kill: illegal process id: 67 I have no idea what this means. Any suggestions? Chris Murphy Color Remedies (TM) New York, NY ---------------------------------------------------------------------- Co-author "Real World Color Management, 2nd Ed" From lists at colorremedies.com Fri Feb 2 11:16:54 2007 From: lists at colorremedies.com (Chris Murphy) Date: Fri Feb 2 11:17:13 2007 Subject: identd Message-ID: <910562B8-C844-4DA3-BE24-8AE5BDFE0118@colorremedies.com> OK apparently /etc/hostconfig was a little messed up. One line read: IDENTDSERVER=-YES-ARDAGENT=-YES- These should be on separate lines, and once that's done and the system is rebooted, identD prefpane now works again. Chris Murphy Color Remedies (TM) New York, NY ---------------------------------------------------------------------- Co-author "Real World Color Management, 2nd Ed" From rmcore at gmail.com Fri Feb 2 11:17:08 2007 From: rmcore at gmail.com (Michael Bentley) Date: Fri Feb 2 11:17:22 2007 Subject: identd In-Reply-To: <05CE4667-06E9-43A3-A2CA-0DF287273FF3@colorremedies.com> References: <05CE4667-06E9-43A3-A2CA-0DF287273FF3@colorremedies.com> Message-ID: <1AF0A3FD-9E95-41AD-8FF7-7B35F580A4AD@gmail.com> On Feb 2, 2007, at 12:36 PM, Chris Murphy wrote: > I've been using a freeware application identD, but recently it > won't work anymore. It works on other systems, but not mine and I > have no idea why. The only clue when activating it, is the > following entry in the console. > > Feb 2 13:35:19 ColorPower authexec: executing /bin/mv > Feb 2 13:35:19 ColorPower authexec: executing /Library/ > PreferencePanes/IdentD.prefPane/Contents/Resources/identd_start > kill: illegal process id: 67 > > I have no idea what this means. Any suggestions? OK, this is just a guess -- but you might look in /var/run for a file named something like 'identd.pid'. If such a file exists, delete it and try to restart identd. And please let me know whether it works for you. -Michael From lists.fabian at e-lumo.com Tue Feb 6 07:39:12 2007 From: lists.fabian at e-lumo.com (Fabian Peters) Date: Tue Feb 6 07:44:44 2007 Subject: Adding software RAID to installed system Message-ID: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> Hi folks, Has anybody successfully created a RAID1 without erasing the existing boot disk (possibly even w/o rebooting?) on OS X Server 10.4? Apple's "Getting Started" guide states it's ok: "If the target disk has a single partition and the second physical drive has a single partition and no data, you can set up RAID mirroring after installation." Which I figure is what I'd like to do but I feel the wording is a bit vague. Of course in any case the usual caveats to back up beforehand do apply... Thanks for your insights Fabian From shoop at iwiring.net Tue Feb 6 10:01:38 2007 From: shoop at iwiring.net (Dan Shoop) Date: Tue Feb 6 10:02:25 2007 Subject: Adding software RAID to installed system In-Reply-To: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> References: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> Message-ID: At 4:39 PM +0100 2/6/07, Fabian Peters wrote: >Hi folks, > >Has anybody successfully created a RAID1 without erasing the >existing boot disk (possibly even w/o rebooting?) on OS X Server >10.4? Apple's "Getting Started" guide states it's ok: > >"If the target disk has a single partition and the second physical >drive has a single partition and no data, you can set up RAID >mirroring after installation." > >Which I figure is what I'd like to do but I feel the wording is a >bit vague. Of course in any case the usual caveats to back up >beforehand do apply... You don't have to touch the boot disk to use RAID at all so I'm a bit confused by your question, unless it was the boot disk you were interested in converting to a RAID1 volume. Tiger's RAID works off of volumes, not drives. Read diskutil's docs and check the articles at AFP548.com -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From lists.fabian at e-lumo.com Tue Feb 6 10:48:35 2007 From: lists.fabian at e-lumo.com (Fabian Peters) Date: Tue Feb 6 10:49:11 2007 Subject: Adding software RAID to installed system In-Reply-To: References: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> Message-ID: <833E52C5-A16F-4BA7-AAA6-C90CD04E91DD@e-lumo.com> Hi Dan, Am 06.02.2007 um 19:01 schrieb Dan Shoop: > At 4:39 PM +0100 2/6/07, Fabian Peters wrote: >> Has anybody successfully created a RAID1 without erasing the >> existing boot disk (possibly even w/o rebooting?) on OS X Server >> 10.4? Apple's "Getting Started" guide states it's ok: >> >> "If the target disk has a single partition and the second physical >> drive has a single partition and no data, you can set up RAID >> mirroring after installation." > You don't have to touch the boot disk to use RAID at all so I'm a > bit confused by your question, unless it was the boot disk you were > interested in converting to a RAID1 volume. Ok, the vagueness was all mine then: it is the boot volume I'd like to make part of a RAID1. > Tiger's RAID works off of volumes, not drives. Ok, then what's the deal with "the target disk has a single partition"? If it's interested in volumes only, not drives, it shouldn't need to care? Anyway, there is only a single partition, so I figure it _should_ work. > Read diskutil's docs and check the articles at AFP548.com Well, I read the manpage but it didn't answer my question, neither did I find an article that does. Do you happen to have a link handy? TIA Fabian From andrewo at liveworld.com Tue Feb 6 10:59:13 2007 From: andrewo at liveworld.com (Andrew Oliver) Date: Tue Feb 6 11:30:05 2007 Subject: Adding software RAID to installed system In-Reply-To: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> References: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> Message-ID: <1361136D-1044-4F74-B091-837FCF55DEDC@liveworld.com> On Feb 6, 2007, at 7:39 AM, Fabian Peters wrote: > Hi folks, > > Has anybody successfully created a RAID1 without erasing the > existing boot disk (possibly even w/o rebooting?) on OS X Server > 10.4? Apple's "Getting Started" guide states it's ok: > > "If the target disk has a single partition and the second physical > drive has a single partition and no data, you can set up RAID > mirroring after installation." > > Which I figure is what I'd like to do but I feel the wording is a > bit vague. Of course in any case the usual caveats to back up > beforehand do apply... > > Thanks for your insights It is possible to do. You may need to reboot, and you can't do it through the GUI. Assuming your two drives are disk0 and disk1 (use diskutil to verify), and disk0 is your current boot drive 1) diskutil enableRAID mirror disk0 This will create a degraded mirror RAID, disk2, consisting of the boot drive (disk0) and nothing else. 2) diskutil repairMirror disk2 disk1 This adds disk1 to the existing RAID disk2 3) Wait (use diskutil checkRAID to check progress) I've done this many times, and it's worked most of the time. Sometimes, though, the repairMirror fails. That's usually been fixed by booting from DVD and running repairMirror again - in other words there's a higher success rate when you do this on a non-live drive, but I haven't worked out the exact conditions that cause it to fail. Andrew :) From shoop at iwiring.net Tue Feb 6 12:54:33 2007 From: shoop at iwiring.net (Dan Shoop) Date: Tue Feb 6 12:55:16 2007 Subject: Adding software RAID to installed system In-Reply-To: <833E52C5-A16F-4BA7-AAA6-C90CD04E91DD@e-lumo.com> References: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> <833E52C5-A16F-4BA7-AAA6-C90CD04E91DD@e-lumo.com> Message-ID: At 7:48 PM +0100 2/6/07, Fabian Peters wrote: >Hi Dan, > >Am 06.02.2007 um 19:01 schrieb Dan Shoop: > >>At 4:39 PM +0100 2/6/07, Fabian Peters wrote: > >>>Has anybody successfully created a RAID1 without erasing the >>>existing boot disk (possibly even w/o rebooting?) on OS X Server >>>10.4? Apple's "Getting Started" guide states it's ok: >>> >>>"If the target disk has a single partition and the second physical >>>drive has a single partition and no data, you can set up RAID >>>mirroring after installation." > >>You don't have to touch the boot disk to use RAID at all so I'm a >>bit confused by your question, unless it was the boot disk you were >>interested in converting to a RAID1 volume. > >Ok, the vagueness was all mine then: it is the boot volume I'd like >to make part of a RAID1. > >>Tiger's RAID works off of volumes, not drives. > >Ok, then what's the deal with "the target disk has a single partition"? Parse that as "the target disk has a single volume". What's the problem there? > If it's interested in volumes only, not drives, it shouldn't need to care? It needs to care since the volume formats are different and the partitions are set up differently. >Anyway, there is only a single partition, so I figure it _should_ work. > >>Read diskutil's docs and check the articles at AFP548.com > >Well, I read the manpage but it didn't answer my question, neither >did I find an article that does. Do you happen to have a link handy? What *is* the question? -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From shoop at iwiring.net Tue Feb 6 12:57:31 2007 From: shoop at iwiring.net (Dan Shoop) Date: Tue Feb 6 12:59:34 2007 Subject: Adding software RAID to installed system In-Reply-To: <1361136D-1044-4F74-B091-837FCF55DEDC@liveworld.com> References: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> <1361136D-1044-4F74-B091-837FCF55DEDC@liveworld.com> Message-ID: At 10:59 AM -0800 2/6/07, Andrew Oliver wrote: >On Feb 6, 2007, at 7:39 AM, Fabian Peters wrote: > >>Hi folks, >> >>Has anybody successfully created a RAID1 without erasing the >>existing boot disk (possibly even w/o rebooting?) on OS X Server >>10.4? Apple's "Getting Started" guide states it's ok: >> >>"If the target disk has a single partition and the second physical >>drive has a single partition and no data, you can set up RAID >>mirroring after installation." >> >>Which I figure is what I'd like to do but I feel the wording is a >>bit vague. Of course in any case the usual caveats to back up >>beforehand do apply... >> >>Thanks for your insights > >It is possible to do. You may need to reboot, and you can't do it >through the GUI. > >Assuming your two drives are disk0 and disk1 (use diskutil to >verify), and disk0 is your current boot drive > >1) diskutil enableRAID mirror disk0 >This will create a degraded mirror RAID, disk2, consisting of the >boot drive (disk0) and nothing else. > >2) diskutil repairMirror disk2 disk1 >This adds disk1 to the existing RAID disk2 > >3) Wait (use diskutil checkRAID to check progress) > >I've done this many times, and it's worked most of the time. >Sometimes, though, the repairMirror fails. That's usually been fixed >by booting from DVD and running repairMirror again - in other words >there's a higher success rate when you do this on a non-live drive, >but I haven't worked out the exact conditions that cause it to fail. I've experimented with this quite extensively, and it works rather well but I still wouldn't trust it. I'd want a full, bare metal backup if I was doing it to my system disk. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From lists.fabian at e-lumo.com Tue Feb 6 14:38:25 2007 From: lists.fabian at e-lumo.com (Fabian Peters) Date: Tue Feb 6 14:38:53 2007 Subject: Adding software RAID to installed system In-Reply-To: <1361136D-1044-4F74-B091-837FCF55DEDC@liveworld.com> References: <8F16059D-F43A-402F-9E27-541F914C0C3A@e-lumo.com> <1361136D-1044-4F74-B091-837FCF55DEDC@liveworld.com> Message-ID: Hi Andrew, Am 06.02.2007 um 19:59 schrieb Andrew Oliver: > On Feb 6, 2007, at 7:39 AM, Fabian Peters wrote: > >> Hi folks, >> >> Has anybody successfully created a RAID1 without erasing the >> existing boot disk (possibly even w/o rebooting?) on OS X Server >> 10.4? Apple's "Getting Started" guide states it's ok: >> >> "If the target disk has a single partition and the second physical >> drive has a single partition and no data, you can set up RAID >> mirroring after installation." >> >> Which I figure is what I'd like to do but I feel the wording is a >> bit vague. Of course in any case the usual caveats to back up >> beforehand do apply... >> >> Thanks for your insights > > It is possible to do. You may need to reboot, and you can't do it > through the GUI. > > Assuming your two drives are disk0 and disk1 (use diskutil to > verify), and disk0 is your current boot drive > > 1) diskutil enableRAID mirror disk0 > This will create a degraded mirror RAID, disk2, consisting of the > boot drive (disk0) and nothing else. > > 2) diskutil repairMirror disk2 disk1 > This adds disk1 to the existing RAID disk2 > > 3) Wait (use diskutil checkRAID to check progress) > > I've done this many times, and it's worked most of the time. > Sometimes, though, the repairMirror fails. That's usually been > fixed by booting from DVD and running repairMirror again - in other > words there's a higher success rate when you do this on a non-live > drive, but I haven't worked out the exact conditions that cause it > to fail. thanks a lot, that's what I was looking for! AFAIR this resembles the way it worked with atacontrol under FreeBSD. I'll keep a clone of the boot drive handy in case anything goes wrong. cheers Fabian From mrhatken at mac.com Wed Feb 7 03:58:08 2007 From: mrhatken at mac.com (Ashley Aitken) Date: Wed Feb 7 03:02:05 2007 Subject: URL that times out for some users and not others ... Message-ID: Howdy All, I have set up a bulletin board using PHPBB2 for discussion amongst a relatively small group of users. The bulletin board works fine, however, a few people are reporting that the URL to connect to the BB is timing out for them, whereas for myself (from a number of locations) and many others it is not timing out. It doesn't seem to be a DNS issue since all the people can ping the site using the URL I give them, I think it might have something to do with the fact that the URL I have given these people is a MacOSX virtual domain on a machine with a number of other virtual domains (and, of course, the BB software). The virtual domain (if that is the right term) maps to the phpBB2 directory and loads the default file index.php for the bulletin board. I have also set up the host within my domain on ZoneEdit to map to the required IP address (and again there are a number of host names in that domain that map to that machine). Any idea why an URL (as described above) would give no response (timeout) for some users and yet work fine for others? Any ideas on how I could track down the problem? Would it most likely be the PHP software? Would it be Apache on MacOSX Server 10.4.8? Or something else? Could it be the performance cache? Would it most likely be client or server-side? Thanks in advance for any suggestions. Cheers, Ashley. PS Someone send me the output of a "telnet 80" which connected and when they entered a "get ..." it just timed-out. -- Ashley Aitken Perth, Western Australia mrhatken at mac dot com Skype Name: MrHatken (GMT + 8 Hours!) From kremels at kreme.com Wed Feb 7 04:19:24 2007 From: kremels at kreme.com (LuKreme) Date: Wed Feb 7 04:19:47 2007 Subject: URL that times out for some users and not others ... In-Reply-To: References: Message-ID: <482DB118-7C93-41D2-8EF6-0C5276FD4FCA@kreme.com> On 7-Feb-2007, at 04:58, Ashley Aitken wrote: > Any idea why an URL (as described above) would give no response > (timeout) for some users and yet work fine for others? Have you checked the access and error logs for apache? -- "Oh damn", said Maladict. From mrhatken at mac.com Wed Feb 7 05:52:19 2007 From: mrhatken at mac.com (Ashley Aitken) Date: Wed Feb 7 04:55:47 2007 Subject: URL that times out for some users and not others ... In-Reply-To: <482DB118-7C93-41D2-8EF6-0C5276FD4FCA@kreme.com> References: <482DB118-7C93-41D2-8EF6-0C5276FD4FCA@kreme.com> Message-ID: <5C3CD3E4-5901-4804-ABD0-AC658CA31533@mac.com> On 07/02/2007, at 8:19 PM, LuKreme wrote: > On 7-Feb-2007, at 04:58, Ashley Aitken wrote: >> Any idea why an URL (as described above) would give no response >> (timeout) for some users and yet work fine for others? > > Have you checked the access and error logs for apache? Eeek, I obviously should have looked there. I think I was distracted by the idea it was a DNS thing. Unfortunately, I still can't tell what the problem is. There are a number entries in the site's Apache error log about missing error.html and favicon.ico files. These were valid (since the files didn't exist) but I am not sure if they would have caused the problem. Is "error.html" a standard Apache file, displayed when Apache has trouble, or would it be from phpBB2? I have created both and will see if they still have problems (at least they may now see an error page). Thanks for the suggestion. Cheers, Ashley. -- Ashley Aitken Perth, Western Australia mrhatken at mac dot com Skype Name: MrHatken (GMT + 8 Hours!) From mjwise at kapu.net Wed Feb 7 05:37:53 2007 From: mjwise at kapu.net (Michael J Wise) Date: Wed Feb 7 05:38:02 2007 Subject: URL that times out for some users and not others ... In-Reply-To: References: Message-ID: <14424C02-9587-466D-807E-82B8A886FB7F@kapu.net> On Feb 7, 2007, at 1:58 AM, Ashley Aitken wrote: > Any ideas on how I could track down the problem? I have a friend who has a similar problem, but it seems to be somewhat more generic, and I'm at a loss to explain it. They have 10.4.8 (client) fully patched, with a buncha stuff loaded up, but the problem manifests with Safari.app on certain sites, most notably: (They get 4.5 - 4.8 Mbps download speeds, and ... 10 Kbps upload speeds, if at all) And yet, certain other sites work just fine, and ping and traceroutes show no apparent issues. It also causes them to get timeouts when trying to send mail to either of two servers that they have credentials for. At first, I thought it was the LinkSys BEFSR41, so I bought something a bit more modern, but the problem persisted.... I've watched tcpdumps, but nothing stands out except a ton of unmatched ACKs. I feel like I'm beating my head against a wall, and have never seen anything quite like this before. And it may be the flip-side of your problem, so I ask here... Anyone ever seen this before? And more specifically, how does one fix it? Aloha mai Nai`a! -- "Please have your Internet License and Usenet Registration handy..." From jearle at gmail.com Wed Feb 7 05:52:46 2007 From: jearle at gmail.com (Jared Earle) Date: Wed Feb 7 05:52:59 2007 Subject: URL that times out for some users and not others ... In-Reply-To: <14424C02-9587-466D-807E-82B8A886FB7F@kapu.net> References: <14424C02-9587-466D-807E-82B8A886FB7F@kapu.net> Message-ID: <5bbc0cd60702070552n736d92f7o5f95594a66025c36@mail.gmail.com> On 2/7/07, Michael J Wise wrote: > And yet, certain other sites work just fine, and ping and traceroutes > show no apparent issues. > > It also causes them to get timeouts when trying to send mail to > either of two servers that they have credentials for. > > At first, I thought it was the LinkSys BEFSR41, so I bought something > a bit more modern, but the problem persisted.... > I've watched tcpdumps, but nothing stands out except a ton of > unmatched ACKs. > I feel like I'm beating my head against a wall, and have never seen > anything quite like this before. Sounds possibly like MTU ... -- Jared Earle :: There is no SPORK jearle@gmail.com :: http://www.23x.net The Spodcast :: http://spodcast.org From grail at goldweb.com.au Wed Feb 7 15:09:12 2007 From: grail at goldweb.com.au (Alex Satrapa) Date: Wed Feb 7 15:09:31 2007 Subject: URL that times out for some users and not others ... In-Reply-To: <5bbc0cd60702070552n736d92f7o5f95594a66025c36@mail.gmail.com> References: <14424C02-9587-466D-807E-82B8A886FB7F@kapu.net> <5bbc0cd60702070552n736d92f7o5f95594a66025c36@mail.gmail.com> Message-ID: On 08/02/2007, at 00:52 , Jared Earle wrote: > Sounds possibly like MTU ... That's my first guess too. Ashley should read up on "path MTU discovery" and the problems that are associated with it. A heavy-handed approach would involve contacting one of the afflicted clients, and modifying the MTU of your server's (or the client's) Ethernet interface to something like 1400. If the problem disappears, you have (most likely) discovered a path MTU discovery problem. The side effects of reducing your Ethernet interface's MTU are mostly that traffic will be (slightly) slower - you'll need more packets to transmit the same data. Alex From mrhatken at mac.com Wed Feb 7 16:58:35 2007 From: mrhatken at mac.com (Ashley Aitken) Date: Wed Feb 7 16:02:13 2007 Subject: URL that times out for some users and not others ... In-Reply-To: References: <14424C02-9587-466D-807E-82B8A886FB7F@kapu.net> <5bbc0cd60702070552n736d92f7o5f95594a66025c36@mail.gmail.com> Message-ID: <55B23804-041E-4626-8702-4D4C34EC4311@mac.com> Hi Alex (et al.), On 08/02/2007, at 7:09 AM, Alex Satrapa wrote: > On 08/02/2007, at 00:52 , Jared Earle wrote: > >> Sounds possibly like MTU ... > > That's my first guess too. > > Ashley should read up on "path MTU discovery" and the problems that > are associated with it. Do you mean me (Ashley) or Michael (or both of us)? > A heavy-handed approach would involve contacting one of the > afflicted clients, and modifying the MTU of your server's (or the > client's) Ethernet interface to something like 1400. If the problem > disappears, you have (most likely) discovered a path MTU discovery > problem. Whilst I am here I might as well ask. I have a basic understanding of MTU but generally speaking, is one required to set the MTU to the minimum of all the hops within the packets path, so that larger packets don't get fragmented? When such packets reach networks that have a large MTU are they combined or are the packets sent through only partially full. When packets are coming the other way, I guess they are split up automatically and there is nothing that can be done about that. Cheers, Ashley. -- Ashley Aitken Perth, Western Australia mrhatken at mac dot com Skype Name: MrHatken (GMT + 8 Hours!) From grail at goldweb.com.au Wed Feb 7 16:31:43 2007 From: grail at goldweb.com.au (Alex Satrapa) Date: Wed Feb 7 16:31:59 2007 Subject: URL that times out for some users and not others ... In-Reply-To: <55B23804-041E-4626-8702-4D4C34EC4311@mac.com> References: <14424C02-9587-466D-807E-82B8A886FB7F@kapu.net> <5bbc0cd60702070552n736d92f7o5f95594a66025c36@mail.gmail.com> <55B23804-041E-4626-8702-4D4C34EC4311@mac.com> Message-ID: <1318A6E0-B7E1-4297-81E0-8FAF867D894A@goldweb.com.au> On 08/02/2007, at 11:58 , Ashley Aitken wrote: > On 08/02/2007, at 7:09 AM, Alex Satrapa wrote: > >> Ashley should read up on "path MTU discovery" and the problems >> that are associated with it. > > Do you mean me (Ashley) or Michael (or both of us)? Oh... I mean the person who reported the original problem. In fact, it's useful reading for anyone who administers machines connected to the Internet, regardless of whether you're responsible for the network or only application support ? it's the applications that will display the symptoms so it helps if you're aware of the issue. > Whilst I am here I might as well ask. I have a basic understanding > of MTU but generally speaking, is one required to set the MTU to > the minimum of all the hops within the packets path, so that larger > packets don't get fragmented? When such packets reach networks > that have a large MTU are they combined or are the packets sent > through only partially full. When packets are coming the other > way, I guess they are split up automatically and there is nothing > that can be done about that. The MTU needs to be set to the minimum of all the hops between your machine and the target machine but only after the router/firewall that is (wrongly) dropping ICMP packets. The short version: when a packet is too big to get through a router, the router will either fragment the packet and no harm is done, or drop the packet back because the packet is marked, "DO NOT FRAGMENT", and send an ICMP message to the origin saying, "MUST fragment!" Incorrectly configured firewalls will drop ICMP packets, meaning the originating machine never gets the message that the packets are too big. The long version: http://en.wikipedia.org/wiki/Path_MTU_discovery The main reason routers get broken this way (dropping ICMP) is that administrators think they're preventing DDoS attacks on their services while in fact they are making their router part of a bigger problem and not getting any shelter from DDoS (which will use means other than ICMP). But there is the other camp of administrators (usually Windows admins) who feel that blocking ICMP is a fair way to exercise their control over their network. But I'll leave that soapbox for another day. Another reason that Path MTU ends up breaking things is that some consumer level routers are just plain broken - when someone tries to send a 1500 byte packet over the 1470 byte MTU ADSL link, the router just drops the packet because it doesn't know what to do. Well, I've certainly got some ideas for my next soapbox ? I mean, blog entry... From mrhatken at mac.com Thu Feb 8 17:40:11 2007 From: mrhatken at mac.com (Ashley Aitken) Date: Thu Feb 8 16:43:47 2007 Subject: Moving Mail Server to another location / IP address? Message-ID: Howdy All, I need to move a machine running MacOSX Server 10.4.8, particularly mail services but also some Web sites to another location and IP address. My understanding is that Internet mail uses a store-and-forward model that attempts for 4 hours (or so) to deliver an email. So I am hoping I have four hours to move the machine. I guess I have to: 1. Change the IP address of the machine 2. Change the DNS MX record for the mail server and, of course, physically move the machine (at which time I might also add a new larger drive to the machine and copy the original drive onto it with Disk Utility). I believe there is a process and command for changing the IP address of a MacOSX Server installation. Will that be adequate? I don't have a second email server (that is recommended, I believe, for such situations). I realise people won't be able to access their email during the outage but will we lose any email sent to us? Further, is there a particular order I should do all this: 1. Take machine off network at old location 2. Change the DNS MX record to the new IP address (allowing time for caches to timeout) 3. Copy OS & data on old drive to new drive 4. Boot (off network) and change IP address on OS on new drive 5. Put machine back on network at new location. This is not a critical email server used by important people, but it is our family and small business email server, so I don't want to stuff things up. Finally, I would normally do a backup of the server before doing such a change. I believe copying the old drive to a new drive is doing that (i.e. I could go back to the previous situation quite easily). Thanks for any suggestions, corrections, experience. Cheers, Ashley. -- Ashley Aitken Perth, Western Australia mrhatken at mac dot com Skype Name: MrHatken (GMT + 8 Hours!) From cweldon at cerberusonline.com Fri Feb 9 06:31:21 2007 From: cweldon at cerberusonline.com (Christopher Weldon) Date: Fri Feb 9 06:31:27 2007 Subject: Moving Mail Server to another location / IP address? In-Reply-To: References: Message-ID: <07023A6A-5A3A-44C4-B4D8-41E9A49E9787@cerberusonline.com> On Feb 8, 2007, at 7:40 PM, Ashley Aitken wrote: > > Howdy All, > > I need to move a machine running MacOSX Server 10.4.8, particularly > mail services but also some Web sites to another location and IP > address. > > My understanding is that Internet mail uses a store-and-forward > model that attempts for 4 hours (or so) to deliver an email. So I > am hoping I have four hours to move the machine. Umm, 4 hours is incorrect. Due to the way DNS records propagate through the internet, it can take up to 48 hours or so before a server will flush its cache and start looking for new DNS records. Granted most of the time it's significantly less than that, but it's dependent on how everyone else has their DNS servers setup as well as what TTL periods you have set in your DNS entries. > > I guess I have to: > > 1. Change the IP address of the machine > 2. Change the DNS MX record for the mail server > Don't forget to update the hostname entry in DNS with your new IP address! > and, of course, physically move the machine (at which time I might > also add a new larger drive to the machine and copy the original > drive onto it with Disk Utility). > > I believe there is a process and command for changing the IP > address of a MacOSX Server installation. Will that be adequate? If you are running your DNS on the OSX server, I'm not certain. I'm 100% certain that if you have your DNS hosted elsewhere, then it won't be sufficient for DNS. > > I don't have a second email server (that is recommended, I believe, > for such situations). I realise people won't be able to access > their email during the outage but will we lose any email sent to us? You won't lose any emails as long as the sender's mail relay appropriately follows SMTP rules. Messages are generally timed out for up to 72 hours before returned to the original sender. During the 4 hour downtime, the relay will simply hold onto the message until it can actually reach the email server. I think the biggest thing you'll lose is SPAM (and we all know how much we love our SPAM). > > Further, is there a particular order I should do all this: > > 1. Take machine off network at old location > 2. Change the DNS MX record to the new IP address (allowing time > for caches to timeout) > 3. Copy OS & data on old drive to new drive > 4. Boot (off network) and change IP address on OS on new drive > 5. Put machine back on network at new location. Because you don't have any redundancy in your setup, this order seems fine. > > This is not a critical email server used by important people, but > it is our family and small business email server, so I don't want > to stuff things up. > > Finally, I would normally do a backup of the server before doing > such a change. I believe copying the old drive to a new drive is > doing that (i.e. I could go back to the previous situation quite > easily). > > Thanks for any suggestions, corrections, experience. > > Cheers, > Ashley. -- Christopher Weldon President & CEO Cerberus Interactive, Inc. cweldon@cerberusonline.com (866) 813-4603 x605 From lists at anderhome.com Fri Feb 9 06:35:14 2007 From: lists at anderhome.com (Ken Anderson) Date: Fri Feb 9 06:34:49 2007 Subject: Moving Mail Server to another location / IP address? In-Reply-To: References: Message-ID: <1392E5C3-A0B8-41AB-92D7-DD81F8DD0D14@anderhome.com> Ashley, It can take 48 hours for DNS to fully propagate. Normally, mail servers will hold outbound mail for 3 days, but there's no guarantee. If I were you, I'd contract another company to be a backup mailhost with a backup MX record. I use dyndns for backup MX - it's really inexpensive, and I think worth it. Ken On Feb 8, 2007, at 8:40 PM, Ashley Aitken wrote: > > Howdy All, > > I need to move a machine running MacOSX Server 10.4.8, particularly > mail services but also some Web sites to another location and IP > address. > > My understanding is that Internet mail uses a store-and-forward > model that attempts for 4 hours (or so) to deliver an email. So I > am hoping I have four hours to move the machine. > > I guess I have to: > > 1. Change the IP address of the machine > 2. Change the DNS MX record for the mail server > > and, of course, physically move the machine (at which time I might > also add a new larger drive to the machine and copy the original > drive onto it with Disk Utility). > > I believe there is a process and command for changing the IP > address of a MacOSX Server installation. Will that be adequate? > > I don't have a second email server (that is recommended, I believe, > for such situations). I realise people won't be able to access > their email during the outage but will we lose any email sent to us? > > Further, is there a particular order I should do all this: > > 1. Take machine off network at old location > 2. Change the DNS MX record to the new IP address (allowing time > for caches to timeout) > 3. Copy OS & data on old drive to new drive > 4. Boot (off network) and change IP address on OS on new drive > 5. Put machine back on network at new location. > > This is not a critical email server used by important people, but > it is our family and small business email server, so I don't want > to stuff things up. > > Finally, I would normally do a backup of the server before doing > such a change. I believe copying the old drive to a new drive is > doing that (i.e. I could go back to the previous situation quite > easily). > > Thanks for any suggestions, corrections, experience. > > Cheers, > Ashley. > > > -- > Ashley Aitken > Perth, Western Australia > mrhatken at mac dot com > Skype Name: MrHatken (GMT + 8 Hours!) > > > > _______________________________________________ > MacOSX-admin mailing list > MacOSX-admin@omnigroup.com > http://www.omnigroup.com/mailman/listinfo/macosx-admin From listreader at pvision.co.uk Fri Feb 9 12:39:14 2007 From: listreader at pvision.co.uk (listreader@pvision.co.uk) Date: Fri Feb 9 13:11:45 2007 Subject: Moving Mail Server to another location / IP address? In-Reply-To: <20070209200028.18A05132765@dynamic-www.omnigroup.com> References: <20070209200028.18A05132765@dynamic-www.omnigroup.com> Message-ID: >I need to move a machine running MacOSX Server 10.4.8, particularly >mail services but also some Web sites to another location and IP >address.... If you're beholden to an ISP for any DNS changes I'd make them on a Tuesday or Wednesday so that you can chase them in 48 hours if things go pear-shaped. I've done changes on a Friday before now and the ISP has got the changes wrong. If that happens you have to wait 48 hours to contact the ISP (Saturday, Sunday) and then wait another 48 for the changes to propagate I'd also make the hardware changes at another time so you're making the minimum number of changes at one time. Easier to fault-find that way From Gerben.Wierda at rna.nl Sat Feb 10 02:31:14 2007 From: Gerben.Wierda at rna.nl (Gerben Wierda) Date: Sat Feb 10 02:31:50 2007 Subject: Reading XML in Perl on OS X Message-ID: <3D6935E2-11C9-47E9-A3CF-E841E75DCD87@rna.nl> Hello everybody, I was wondering what the best approach is to getting XML-support in Perl on OS X 10.3.9 and up (if it cannot be done differently, I'd restrict myself to 10.4 and up). I've tried automatic CPAN installs in the past and most of the time that just went wrong and it also makes my perl to much different from Apple standard. I am looking for a Perl-addon I can install separately. Does that exist? Thanks, G From subscriber at gloaming.com Sat Feb 10 23:29:38 2007 From: subscriber at gloaming.com (James Bucanek) Date: Sat Feb 10 23:30:09 2007 Subject: Interesting Apache+Tomcat Conundrum Message-ID: Greetings, Running OS X Server 10.3 on an Xserve. I'm trying to set up some discussion forums for an existing web site. The forum software and site use JSP running Tomcat. So far, so good. I'm trying to get the forum software to run in its own domain as though it was its own web site: i.e. http://forums.domain.net/ My problem is ports. Tomcat is running on port 9006. Virutal hosts in OS X run on port 16080 (why, I don't know). If I try to implement this using just ProxyPass it doesn't work because it simply changes the URL to http://jsp.domain.net:9006/, which is ugly. I tried to do this by simply mapping all requests to Tomcat via 'JKMount /*', but this doesn't help because redirects generated by the webapp go to http://forums.domain.net:16080/ because that's the port the servlet thinks it is running on. The redirected request times out because port 16080 isn't accessible from the outside world. I tried adding ProxyPassReverse directives, but they apparently don't rewrite redirects. So either I end up with ugly URLs with port numbers in them, or the client gets back URLs that die trying to send to port 16080. Does anyone know a way out of this? -- James Bucanek From rmcore at gmail.com Sun Feb 11 09:21:41 2007 From: rmcore at gmail.com (Michael Bentley) Date: Sun Feb 11 09:21:52 2007 Subject: Interesting Apache+Tomcat Conundrum In-Reply-To: References: Message-ID: <31F2FCF7-14A8-4DBB-8C4B-C642CF9B75E2@gmail.com> On Feb 11, 2007, at 1:29 AM, James Bucanek wrote: > Greetings, > > Running OS X Server 10.3 on an Xserve. > > I'm trying to set up some discussion forums for an existing web > site. The forum software and site use JSP running Tomcat. So far, > so good. > > I'm trying to get the forum software to run in its own domain as > though it was its own web site: i.e. http://forums.domain.net/ > > My problem is ports. Tomcat is running on port 9006. Virutal hosts > in OS X run on port 16080 (why, I don't know). If I try to > implement this using just ProxyPass it doesn't work because it > simply changes the URL to http://jsp.domain.net:9006/, which is ugly. > > I tried to do this by simply mapping all requests to Tomcat via > 'JKMount /*', but this doesn't help because redirects generated by > the webapp go to http://forums.domain.net:16080/ because that's the > port the servlet thinks it is running on. The redirected request > times out because port 16080 isn't accessible from the outside world. > > I tried adding ProxyPassReverse directives, but they apparently > don't rewrite redirects. > > So either I end up with ugly URLs with port numbers in them, or the > client gets back URLs that die trying to send to port 16080. > > Does anyone know a way out of this? You can use a new IP address for your forums site (I think). Try this: - go to System Preferences > Network - select Network Port Configurations from the 'Show:' popup - click New - Choose Built-in Ethernet from the 'Port:' popup - Choose your new alias ethernet port from the 'Show:' popup - configure the port - configure your forum server to listen on the new port If you don't want to use System Preferences, you can create an alias with /sbin/ifconfig -- but the next time you reboot, you'll lose the alias unless you create a StartupItems script for it ( http:// docs.info.apple.com/article.html?artnum=106418 ). At any rate, once you have your second IP address working, get it set up in DNS and your troubles may be over ;-) hth, Michael From jwelch at bynkii.com Sun Feb 11 09:37:22 2007 From: jwelch at bynkii.com (John C. Welch) Date: Sun Feb 11 09:37:32 2007 Subject: Interesting Apache+Tomcat Conundrum In-Reply-To: Message-ID: On 2/11/07 01:29, "James Bucanek" wrote: > Greetings, > > Running OS X Server 10.3 on an Xserve. > > I'm trying to set up some discussion forums for an existing web site. The > forum software and site use JSP running Tomcat. So far, so good. > > I'm trying to get the forum software to run in its own domain as though it was > its own web site: i.e. http://forums.domain.net/ > > My problem is ports. Tomcat is running on port 9006. Virutal hosts in OS X run > on port 16080 (why, I don't know). If I try to implement this using just > ProxyPass it doesn't work because it simply changes the URL to > http://jsp.domain.net:9006/, which is ugly. > > I tried to do this by simply mapping all requests to Tomcat via 'JKMount /*', > but this doesn't help because redirects generated by the webapp go to > http://forums.domain.net:16080/ because that's the port the servlet thinks it > is running on. The redirected request times out because port 16080 isn't > accessible from the outside world. Turn off the Mac OS X Server web performance cache and the 16080 thing will go away -- John C. Welch Writer/Analyst Bynkii.com Mac and other opinions jwelch@bynkii.com From subscriber at gloaming.com Sun Feb 11 11:45:51 2007 From: subscriber at gloaming.com (James Bucanek) Date: Sun Feb 11 11:46:00 2007 Subject: Interesting Apache+Tomcat Conundrum In-Reply-To: Message-ID: John C. Welch wrote on Sunday, February 11, 2007: >Turn off the Mac OS X Server web performance cache and the 16080 thing will >go away Thanks John, that did the trick. I got a similar off-list suggestion from Andrew. I was initially confused because the sites I'd set up didn't use the performance cache. It took me a while to discover that if *any* sites use the cache, then all virtual sites go through the performance cache port. Sure enough, of the 50+ sites configured one had the performance cache turned on. *sigh* I probably did that just to test it out at some point. Anyway, turned the cache off and all virtual sites went back to using port 80. I reconfigured the PassProxy and PassProxyReverse directives and everything is working perfectly. (yea!) Michael Bentley wrote on Sunday, February 11, 2007: >You can use a new IP address for your forums site (I think). I had also considered this approach, but was avoiding it because I'm currently using all of my IP addresses I have allocated at the co-lo. I was looking for a simpler solution before I started buying more IPs. -- James Bucanek From shoop at iwiring.net Sun Feb 11 13:32:46 2007 From: shoop at iwiring.net (Dan Shoop) Date: Sun Feb 11 13:33:36 2007 Subject: Reading XML in Perl on OS X In-Reply-To: <3D6935E2-11C9-47E9-A3CF-E841E75DCD87@rna.nl> References: <3D6935E2-11C9-47E9-A3CF-E841E75DCD87@rna.nl> Message-ID: At 11:31 AM +0100 2/10/07, Gerben Wierda wrote: >Hello everybody, > >I was wondering what the best approach is to getting XML-support in >Perl on OS X 10.3.9 and up (if it cannot be done differently, I'd >restrict myself to 10.4 and up). I've tried automatic CPAN installs >in the past and most of the time that just went wrong Perhaps due to dependencies or some specific reason. CPAN is no panacea, but it can make builds easier, but is no substitute for knowing how to manage a perl environment. > and it also makes my perl to much different from Apple standard. Not at all. It just extends what Apple has shipped. If you don't want this use fink or darwin port or /usr/local builds of perl. > I am looking for a Perl-addon I can install separately. Does that exist? add-on? -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From shoop at iwiring.net Sun Feb 11 13:34:45 2007 From: shoop at iwiring.net (Dan Shoop) Date: Sun Feb 11 13:35:33 2007 Subject: Interesting Apache+Tomcat Conundrum In-Reply-To: References: Message-ID: At 12:29 AM -0700 2/11/07, James Bucanek wrote: >Greetings, > >Running OS X Server 10.3 on an Xserve. > >I'm trying to set up some discussion forums for an existing web >site. The forum software and site use JSP running Tomcat. So far, so >good. > >I'm trying to get the forum software to run in its own domain as >though it was its own web site: i.e. http://forums.domain.net/ > >My problem is ports. Tomcat is running on port 9006. Virutal hosts >in OS X run on port 16080 (why, I don't know). Performance Cache. You don't want this for dynamic web sites. Turn it off. > If I try to implement this using just ProxyPass it doesn't work >because it simply changes the URL to http://jsp.domain.net:9006/, >which is ugly. > >I tried to do this by simply mapping all requests to Tomcat via >'JKMount /*', but this doesn't help because redirects generated by >the webapp go to http://forums.domain.net:16080/ because that's the >port the servlet thinks it is running on. The redirected request >times out because port 16080 isn't accessible from the outside world. > >I tried adding ProxyPassReverse directives, but they apparently >don't rewrite redirects. > >So either I end up with ugly URLs with port numbers in them, or the >client gets back URLs that die trying to send to port 16080. > >Does anyone know a way out of this? Use another IP address that is just for this service so that the IP:PORT is unique. Disable other services from listening on this new IP. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From Gerben.Wierda at rna.nl Sun Feb 11 22:25:00 2007 From: Gerben.Wierda at rna.nl (Gerben Wierda) Date: Sun Feb 11 22:25:22 2007 Subject: Reading XML in Perl on OS X In-Reply-To: References: <3D6935E2-11C9-47E9-A3CF-E841E75DCD87@rna.nl> Message-ID: <7F321C42-2977-4C13-BB22-AD6EC5CFE779@rna.nl> On Feb 11, 2007, at 22:32 , Dan Shoop wrote: >> I am looking for a Perl-addon I can install separately. Does that >> exist? > > add-on? Perl module (.pm) preferably. You know with Makefile.PL etc. G From shoop at iwiring.net Mon Feb 12 09:23:12 2007 From: shoop at iwiring.net (Dan Shoop) Date: Mon Feb 12 09:24:19 2007 Subject: Reading XML in Perl on OS X In-Reply-To: <7F321C42-2977-4C13-BB22-AD6EC5CFE779@rna.nl> References: <3D6935E2-11C9-47E9-A3CF-E841E75DCD87@rna.nl> <7F321C42-2977-4C13-BB22-AD6EC5CFE779@rna.nl> Message-ID: At 7:25 AM +0100 2/12/07, Gerben Wierda wrote: >On Feb 11, 2007, at 22:32 , Dan Shoop wrote: > >>> I am looking for a Perl-addon I can install separately. Does that exist? >> >>add-on? > >Perl module (.pm) preferably. You know with Makefile.PL etc. There are numerous XML modules for PERL, which you need or might use would be up to you. CPAN is the place to look. From there you can build them either with the CPAN tool or manually (make). You can add them either the Apple supplied PERL or any locally installed PERLs you may choose (~/, /usr/local, darwin port perl or fink perl.) -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From ort at bergersen.no Mon Feb 12 10:26:19 2007 From: ort at bergersen.no (Richard Taubo) Date: Mon Feb 12 10:39:24 2007 Subject: Install into /usr/local Message-ID: Hi! When installing some software OS X into /usr/local and reading the corresponding Linux manual, I see that OS X requires me to install using sudo whereas Linux do not. Is there a reason for this difference, and should the OS X way cause security concerns? I am e.g. thinking about as situation where you are installing software that has many dependencies, and is impractical to scan all the dependencies for the possibility of malware. Thanks for input! Best regards, Richard Taubo From cweldon at cerberusonline.com Mon Feb 12 12:22:46 2007 From: cweldon at cerberusonline.com (Christopher Weldon) Date: Mon Feb 12 12:23:11 2007 Subject: Install into /usr/local In-Reply-To: References: Message-ID: On Feb 12, 2007, at 12:26 PM, Richard Taubo wrote: > Hi! > > When installing some software OS X into /usr/local and reading the > corresponding Linux manual, I see that OS X requires me to install > using sudo whereas Linux do not. > > Is there a reason for this difference, and should the OS X way > cause security concerns? > > I am e.g. thinking about as situation where you are installing > software that has many dependencies, and is impractical to scan all > the dependencies for the possibility of malware. > > > Thanks for input! > > > Best regards, > Richard Taubo Howdy Richard! In any situation where you'll be installing into the operating system's folders (such as /usr or /usr/local) and are not doing the installation as root, you will have to use sudo at some point in time to install it. This is due to the nature of installing applications, libraries, etc. in these directories as only trusted users should have write access to write to it. Most users have at least read if not read & execute privileges. If your Linux system is setup to where you don't have to use Sudo to install something in /usr/local, then your system is seriously compromised either due to insecure permission settings on system folders (/usr, /usr/local) or your user account having way too many privileges. -- Christopher Weldon President & CEO Cerberus Interactive, Inc. cweldon@cerberusonline.com (866) 813-4603 x605 From shoop at iwiring.net Mon Feb 12 12:27:33 2007 From: shoop at iwiring.net (Dan Shoop) Date: Mon Feb 12 12:28:27 2007 Subject: Install into /usr/local In-Reply-To: References: Message-ID: At 7:26 PM +0100 2/12/07, Richard Taubo wrote: >Hi! > >When installing some software OS X into /usr/local and reading the >corresponding Linux manual, I see that OS X requires me to install >using sudo whereas Linux do not. OS X requires no such thing. Being root can be done numerous ways. I normally just log in as root, but I'm older than sudo. >Is there a reason for this difference, and should the OS X way cause >security concerns? Huh? >I am e.g. thinking about as situation where you are installing >software that has many dependencies, and is impractical to scan all >the dependencies for the possibility of malware. Being root has the same risk no matter how you achieve su powers. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From ort at bergersen.no Mon Feb 12 13:21:34 2007 From: ort at bergersen.no (Richard Taubo) Date: Mon Feb 12 13:22:06 2007 Subject: Install into /usr/local In-Reply-To: References: Message-ID: Hi! On 12. feb. 2007, at 21.27, Dan Shoop wrote: > At 7:26 PM +0100 2/12/07, Richard Taubo wrote: >> Hi! >> >> When installing some software OS X into /usr/local and reading the >> corresponding Linux manual, I see that OS X requires me to install >> using sudo whereas Linux do not. > > OS X requires no such thing. No, but if you install anything inside the /usr or /usr/local folder, you would ? per default ? be asked for password as root is the only one with write access in these directories. Thus by default, without chowning the directory, the program installed will be owned by root. Right? > > Being root can be done numerous ways. I normally just log in as > root, but I'm older than sudo. > >> Is there a reason for this difference, and should the OS X way >> cause security concerns? > > Huh? I was just referring to the difference I saw in install instructions for the Linux system, and what I had to do to make it work on OS X. Due to this I was wondering if it is good security practice that anything installed in /usr/local ? per default on OS X ? will get owned by root, instead of by the person installing the software. In that way you could end up with a system where you run more programs as root than is actually needed. Again, I was just wondering :-) Richard Taubo From shoop at iwiring.net Mon Feb 12 14:26:07 2007 From: shoop at iwiring.net (Dan Shoop) Date: Mon Feb 12 14:27:05 2007 Subject: Install into /usr/local In-Reply-To: References: Message-ID: At 10:21 PM +0100 2/12/07, Richard Taubo wrote: >Hi! > >On 12. feb. 2007, at 21.27, Dan Shoop wrote: > >>At 7:26 PM +0100 2/12/07, Richard Taubo wrote: >>>Hi! >>> >>>When installing some software OS X into /usr/local and reading the >>>corresponding Linux manual, I see that OS X requires me to install >>>using sudo whereas Linux do not. >> >>OS X requires no such thing. > >No, but if you install anything inside the /usr or /usr/local >folder, you would - per default - be asked for password as root is >the only one with write access in these directories. Not necessarily, no. > Thus by default, without chowning the directory, the program >installed will be owned by root. Right? Not necessarily, no. >>Being root can be done numerous ways. I normally just log in as >>root, but I'm older than sudo. >> >>>Is there a reason for this difference, and should the OS X way >>>cause security concerns? >> >>Huh? > >I was just referring to the difference I saw in install instructions >for the Linux system, and what I had to do to make it work on OS X. And to make a banana split from apples you have to change the recipe too. Point? >Due to this I was wondering if it is good security practice that >anything installed in /usr/local - per default on OS X - will get >owned by root, instead of by the person installing the software. That's mostly a policy decision. Ask your Security Manager or SysAdmin. > In that way you could end up with a system where you run more >programs as root than is actually needed. You probably don't want things, especially executables, owned by root if not necessary. And ownership has nothing to do with permissions (access). That is programs don't have to be run as root just b/c root owns them. In fact you do this daily already. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From diego-osxadmin at zzamboni.org Mon Feb 12 13:57:29 2007 From: diego-osxadmin at zzamboni.org (Diego Zamboni) Date: Mon Feb 12 14:33:41 2007 Subject: Reading XML in Perl on OS X In-Reply-To: <7F321C42-2977-4C13-BB22-AD6EC5CFE779@rna.nl> References: <3D6935E2-11C9-47E9-A3CF-E841E75DCD87@rna.nl> <7F321C42-2977-4C13-BB22-AD6EC5CFE779@rna.nl> Message-ID: <1866B50A-C123-42B7-9049-109A8A926DC8@zzamboni.org> On Feb 12, 2007, at 7:25 AM, Gerben Wierda wrote: >>> I am looking for a Perl-addon I can install separately. Does >>> that exist? >> >> add-on? > > Perl module (.pm) preferably. You know with Makefile.PL etc. I'm not sure I understand your question. The .pm modules, Makefile.PL, etc. is what you get through CPAN, which you seem reluctant to use. All the CPAN module does is automate the process of installing them. You could also download the modules you want and install them by hand. I would use CPAN. Also, as someone else said, anything installed through CPAN will not modify your existing install. (btw, Gerben: thanks for your TeX/LaTeX packages!) --Diego From ort at bergersen.no Mon Feb 12 15:15:55 2007 From: ort at bergersen.no (Richard Taubo) Date: Mon Feb 12 15:16:31 2007 Subject: Install into /usr/local In-Reply-To: References: Message-ID: <5379545B-8C7D-42B6-A0D5-400C254CD6F9@bergersen.no> Hi! On 12. feb. 2007, at 23.26, Dan Shoop wrote: > >> Due to this I was wondering if it is good security practice that >> anything installed in /usr/local - per default on OS X - will get >> owned by root, instead of by the person installing the software. > > That's mostly a policy decision. Ask your Security Manager or > SysAdmin. With "per default on OS X" I meant out of the box, without being controlled by a manager or admin. Many systems run without the this type of admin, but can still be important to the owner. Thanks! Richard Taubo From shoop at iwiring.net Mon Feb 12 15:49:01 2007 From: shoop at iwiring.net (Dan Shoop) Date: Mon Feb 12 15:50:09 2007 Subject: Install into /usr/local In-Reply-To: <5379545B-8C7D-42B6-A0D5-400C254CD6F9@bergersen.no> References: <5379545B-8C7D-42B6-A0D5-400C254CD6F9@bergersen.no> Message-ID: At 12:15 AM +0100 2/13/07, Richard Taubo wrote: >Hi! > > >On 12. feb. 2007, at 23.26, Dan Shoop wrote: > >> >>>Due to this I was wondering if it is good security practice that >>>anything installed in /usr/local - per default on OS X - will get >>>owned by root, instead of by the person installing the software. >>> >> >>That's mostly a policy decision. Ask your Security Manager or SysAdmin. >> > >With "per default on OS X" I meant out of the box, without being >controlled by a manager or admin. >Many systems run without the this type of admin, but can still be >important to the owner. And is entirely missing the point. Files don't "get owned by root in /usr/local by default." Something writes them there. Something with permissions to do so. Who that is and who they specify as the owner has no concept of "default". Your method for writing may determine this or it may not. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From grail at goldweb.com.au Mon Feb 12 17:10:18 2007 From: grail at goldweb.com.au (Alex Satrapa) Date: Mon Feb 12 17:10:36 2007 Subject: Install into /usr/local In-Reply-To: References: <5379545B-8C7D-42B6-A0D5-400C254CD6F9@bergersen.no> Message-ID: <8ACB6BF9-414A-4BD5-B6E9-9D6AC776BE75@goldweb.com.au> On 13/02/2007, at 10:49 , Dan Shoop wrote: > At 12:15 AM +0100 2/13/07, Richard Taubo wrote: >> With "per default on OS X" I meant out of the box, without being >> controlled by a manager or admin. >> Many systems run without the this type of admin, but can still be >> important to the owner. > > And is entirely missing the point. Though to answer the original question, yes it's a good practice to make sure that installed programs are owned by an account that will not be running any software. Some people will pick "root", some people will create a new user for every application (or suite) that is installed ? and never set ownership to root ? for various reasons including the perceived risk of privilege escalation vulnerabilities, or the simple convenience of having all files that are part of the "Postfix" mail server installation being owned by one user (who should not be the user that the daemon runs as, to prevent the software being corrupted). The main concern here is to prevent rogue software (or rogue users!) overwriting executables that are likely to be used by other users (or even the same user, in the case of rogue software such as viruses). This is the main reason that Unix is so secure compared to Mac OS 9 or Microsoft Windows (which has historically allowed the user total rights), for example. A typical scenario is that the various pieces of software that make up the Postfix mail server (for example) run under the "postfix" user id, all the config files and mail spools are owned by that user (so the mail server can manage mail receipt and delivery), but the executables are owned by root. The smtpd process needs to read/write the files, but under no circumstances should that software be allowed to modify itself (or any other executables on the system). I believe that Dan's message is that *someone* is the administrator of the system, regardless of whether it's the owner/operator in a 1- man show, or some nominated individual(s) in a larger business/ corporation. This person is the one who needs to make the decision, and (this is the part Dan hasn't touched on) absent any training the safest option for the incumbent is to make sure all software is installed as owned by a non-operator user account, with 'root' being a safe-ish fallback (as long as programs aren't run as root unless they need root privileges). As a starter, the issue of ownership of binaries versus runtime- userid is related to Privilege Separation (http://en.wikipedia.org/ wiki/Privilege_separation), or the Principle of Least Privilege. For the more technical, there's the "Red Book" (which is now purple, but nevermind): http://www.admin.com/Pages/USAH.html, or more specifically the Apple Training Series: Mac OS X System Administration Reference. They're all heavy reading, but then Unix is a heavy operating system. Alex From noam at maccentricsolutions.com Mon Feb 12 23:04:18 2007 From: noam at maccentricsolutions.com (Noam Birnbaum) Date: Mon Feb 12 23:13:20 2007 Subject: printing dot matrix from FileMaker Message-ID: <40AD6171-C325-4B9E-BD33-C8D19C164E72@maccentricsolutions.com> Hey all, One of our customers needs to print forms in duplicate from a Filemaker database, and they'll have to use custom paper sizes. They used to do it using Filemaker on a PC and are now switching. After searching the ACN archives, I emailed the developers of ESP Print Pro asking for their verification that their software could do this, and requesting a printer recommendation. Their response: "Unless you are printing full sheets of labels, none of the commercially-available dot-matrix/impact printers will do what you need..." I don't know why they thought an ellipsis at the end of their comment would be helpful. So, before I go ahead and believe them -- because it sounds ludicrous -- do you have any other suggestions? Thanks! noam Noam Birnbaum http://maccentricsolutions.com/ 510.332.3828 (cell) 877.luv.macs x89 (main) From shoop at iwiring.net Tue Feb 13 09:14:35 2007 From: shoop at iwiring.net (Dan Shoop) Date: Tue Feb 13 09:15:32 2007 Subject: Install into /usr/local In-Reply-To: <8ACB6BF9-414A-4BD5-B6E9-9D6AC776BE75@goldweb.com.au> References: <5379545B-8C7D-42B6-A0D5-400C254CD6F9@bergersen.no> <8ACB6BF9-414A-4BD5-B6E9-9D6AC776BE75@goldweb.com.au> Message-ID: At 12:10 PM +1100 2/13/07, Alex Satrapa wrote: >I believe that Dan's message is that *someone* is the administrator >of the system, regardless of whether it's the owner/operator in a >1-man show, or some nominated individual(s) in a larger >business/corporation. This person is the one who needs to make the >decision, and (this is the part Dan hasn't touched on) absent any >training the safest option for the incumbent is to make sure all >software is installed as owned by a non-operator user account, with >'root' being a safe-ish fallback (as long as programs aren't run as >root unless they need root privileges). The benefit of things being owned by root is that they can then be set such that then only root can modify them, not other users. That then requires any changes to be made by a suitably priviliged sysadmin. >As a starter, the issue of ownership of binaries versus >runtime-userid is related to Privilege Separation >(http://en.wikipedia.org/wiki/Privilege_separation), or the >Principle of Least Privilege. For the more technical, there's the >"Red Book" (which is now purple, but nevermind): >http://www.admin.com/Pages/USAH.html, or more specifically the Apple >Training Series: Mac OS X System Administration Reference. They're >all heavy reading, but then Unix is a heavy operating system. Unix is *very* lightweight actually. Compare it to VMS or MVS. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From shoop at iwiring.net Tue Feb 13 09:16:34 2007 From: shoop at iwiring.net (Dan Shoop) Date: Tue Feb 13 09:17:22 2007 Subject: printing dot matrix from FileMaker In-Reply-To: <40AD6171-C325-4B9E-BD33-C8D19C164E72@maccentricsolutions.com> References: <40AD6171-C325-4B9E-BD33-C8D19C164E72@maccentricsolutions.com> Message-ID: At 11:04 PM -0800 2/12/07, Noam Birnbaum wrote: >Hey all, > >One of our customers needs to print forms in duplicate from a >Filemaker database, and they'll have to use custom paper sizes. >They used to do it using Filemaker on a PC and are now switching. >After searching the ACN archives, I emailed the developers of ESP >Print Pro asking for their verification that their software could do >this, and requesting a printer recommendation. > >Their response: "Unless you are printing full sheets of labels, none >of the commercially-available dot-matrix/impact printers will do >what you need..." > >I don't know why they thought an ellipsis at the end of their >comment would be helpful. > >So, before I go ahead and believe them -- because it sounds >ludicrous -- do you have any other suggestions? Don't you think they'd know what their software does better than anyone else? Sounds to me like they are saying their sw won't print how you want. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From rogerhoward at rogerroger.org Tue Feb 13 16:32:07 2007 From: rogerhoward at rogerroger.org (Roger Howard) Date: Tue Feb 13 16:32:17 2007 Subject: printing dot matrix from FileMaker In-Reply-To: References: <40AD6171-C325-4B9E-BD33-C8D19C164E72@maccentricsolutions.com> Message-ID: <29927.216.163.128.130.1171413127.squirrel@webmail.rogerroger.org> On Tue, February 13, 2007 9:16 am, Dan Shoop wrote: > At 11:04 PM -0800 2/12/07, Noam Birnbaum wrote: >>Hey all, >> >>One of our customers needs to print forms in duplicate from a >>Filemaker database, and they'll have to use custom paper sizes. >>They used to do it using Filemaker on a PC and are now switching. >>After searching the ACN archives, I emailed the developers of ESP >>Print Pro asking for their verification that their software could do >>this, and requesting a printer recommendation. >> >>Their response: "Unless you are printing full sheets of labels, none >>of the commercially-available dot-matrix/impact printers will do >>what you need..." >> >>I don't know why they thought an ellipsis at the end of their >>comment would be helpful. >> >>So, before I go ahead and believe them -- because it sounds >>ludicrous -- do you have any other suggestions? > > Don't you think they'd know what their software does better than anyone > else? > > Sounds to me like they are saying their sw won't print how you want. I can't imagine a reason FMP wouldn't support Dot Matrix, or really any other printer technology with a standard print driver. Custom paper sizes are no issue for FMP, nor is printing in duplicate. The more important question, it seems to me, is are there adequate impact printers on the market with OSX print support? If not, how about running a print server on the Windows box and interacting with it that way? All of that said, printing to dot matrix isn't just like any other device, in the sense that you don't tend to send high-resolution page images to the device and let it work out how to lay down antialiased dots to form the printed image - you ideally want it to send a stream of raw characters to the device. So you may not in fact even use a typical OSX print driver for that; perhaps a custom serial driver instead (and it is possible to pump data to a serial port from FMP with a plugin, but you'll have to work out the print protocol unless that comes with the plugin too). I wouldn't say it's impossible, but it's gonna be an ugly hack, and it really has little to do with FMP, at least from what little I can tell from your description of the problem. The real challenge is how do you interface the printer with an OSX box, and what format does it expect the page data in. It can be done... not sure it's worth it though. From noam at maccentricsolutions.com Wed Feb 14 01:30:38 2007 From: noam at maccentricsolutions.com (Noam Birnbaum) Date: Wed Feb 14 01:50:43 2007 Subject: job posting: Macintosh Consultant (S.F. Bay Area) Message-ID: <287E22C4-ABF9-4C28-9222-5E8BC9F2C598@maccentricsolutions.com> If you know anybody looking! Thanks, noam Noam Birnbaum http://maccentricsolutions.com/ 510.332.3828 (cell) 877.luv.macs x89 (main) **************************** QUIZ: IS THIS THE JOB FOR ME? You?re called into a customer because something?s going wrong with the computers or network and So-And-So can?t get a crucial part of his or her job done. When you arrive, everybody?s relieved to see you and the office manager greets you with, ?The genius is finally here!? Do you say: a. ?It?s about time you recognized it. I skipped the quarterly financials webcast for this.? b. ?That's very flattering, but really I?m just a glorified plumber.? c. ?Where is she, can I meet her?? After you?ve completed your work and written up your work detail, you go over all the fixes with the office manager. S/he gets down on both knees and bows all the way to the floor. Do you say: a. ?You?ll receive the bill at the end of the month.? b. ?Please get up, you?re inciting my god complex.? c. ?Thank you, that?s very flattering. Next time, chocolate would suffice.? If you did not answer a. to either of these questions, you may be the kind of smart, honest, and quirky person we?re looking for. YOUR MISSION... ... should you choose to accept it, would be to represent our company to all its customers as you help meet their technology consulting needs. Some days you?ll be working on issues you?ve seen a hundred times; this could be boring or relaxing depending on your mood, or it could be an opportunity to try that new troubleshooting technique you read about on afp548.com. Other days, you?ll be in a high-pressure situation where an entire office's productivity and profitability is depending on your analysis of which troubleshooting method will be most efficient; this could be stressful or exciting, depending on how much sleep you?ve gotten. Your quality of life will likely be in direct proportion to your ability to manage time, details, personal boundaries, and anxiety. Some days you?ll be at a customer you?ve been at many times before, where the trust is mutual. Other days you?ll be in a new office, or working at someone?s home for the first time, where our whole company is depending upon you to give that Warm Fuzzy Feeling? so they?ll call us back or pass along a referral. Most customers are friendly. Some are brusque and you will think it?s because they don?t like you; most of the time you will be wrong; sometimes you will be right, and you'll nevertheless have to provide the best possible service, and save your feelings for later. If you work this job long enough, chances are that some customers will become amongst your closest friends. But whichever kind of day you have, your many successes will always be rewarded with the sincerest kind of thanks and gratitude, and you will often have that feeling of a job well done, even if this isn't quite what you planned to do with your life. Still interested? ABOUT US We serve businesses, non-profits, and private individuals from San Jose to Sonoma to Sacramento, all of whose computer fleets are over 50% Macintosh. In the last fifteen months we have grown from an individual consulting practice to a four-person firm, and we don?t expect you?ll be our last hire. We place immeasurable value on our relationships with customers, associates, and vendors. This personal touch is inseparable from the services we provide, and our company is structured to maximize our customers' senses of being well-fed. We're not in this business because we love server closets, but because we love Macintosh, the Cult of Steve, and the spark of genius and creativity that Mac users have. In helping our customers with their computers we are ultimately trying to help our customers achieve the goals they have beyond the mousepad. At the same time, our customers also rely on us to support their networks, Windows, PDAs, VoIP, and all the other gadgetry of the modern office. You will be a poor fit for this position if you're gun-shy about learning everything you can about the technologies that support the contemporary workplace. This job will confront you with the unfamiliar *every single day,* and you'll need to respond, always, with "I'll try" instead of "I can't." We also realize we're a bit weird. ABOUT THE GIG This position will start flex-time (20-30 hours, variable), with potential to go to 30-35 over the next 6-12 months if desired. The qualified individual will be one of the faces that our customers most often see, and the voices they most trust on technical matters. This person will be charged with as much responsibility as the company's president to provide efficient, expert technical service and professional, personable communication. This person will have the following skills and traits: ? At least three years? experience installing and supporting Mac OS X in networked environments ? Experience with Windows XP network and printer configuration ? A strong desire to help others (yeah, it sounds cheesy, but without this you?ll never make it through those what-am-I-doing-with-my-life days while watching the TechTool Pro progress bar inch... across... the screen...) (because, p.s., you should be taking those few minutes of downtime to ask the customer, "Is there anything else I can do for you while I wait for this to finish?") ? An incontestable sense of personal ethics, integrity, and honesty ? Stellar written and verbal communication skills ? Excellent time-management, organizational, and follow-through skills ? Belief that if only everybody knew how COOL Macs are... (we don?t care what you think of the Dark Side) ? Passion to continue learning and stay current with technology ? Ability to lift up to 50 lbs. ? Ability to work out of his or her home when necessary ? Current U.S. work authorization ? Valid California driver's license; a car is not required but would be awful convenient ? A current Apple certification is not required to apply; however, the chosen applicant will have to have passed, at minimum, the ACHDS certification exam by date of hire Mac OS X Server setup and/or administration experience would be a plus. We do not have a central office. When not onsite, you would work out of your home. This particular position will focus on supporting our Oakland/Berkeley customers, with a decent amount of work in San Francisco and farther afield. This position requires a flexible schedule, including ability to be on-call for a 24/7 rotation. Overtime and emergency work will be appropriately compensated. On rare occasions there will be an all- night server install or an emergency call just when you were about to go home and watch the next episode of Heroes. We rely on each other to help get through those overwhelming times, but sometimes you're the only one who can help the customer. Caffeine consumption is not required, though we've found that it helps. The hired applicant will begin as soon as possible. SPEAKING OF COMPENSATION Commensurate with your experience, salary history, and Apple certifications. In consonance with California law, you will be paid travel time to and from work sites but at a lower hourly rate. We currently provide two weeks annually of personal leave plus monthly stipends towards your cell phone and a company health insurance plan. WHERE DO I APPLY? E-mail the following in PDF format to willworkforfood@maccentricsolutions.com: 1. A resume with salary history 2. A cover letter letting us know who you are and why you're applying for a potentially exhausting job like this one 3. Answers to the following questions: a. What's your favorite Mac-related website, and why? b. The exact text of the reply you would make to the following email from a new customer who has never contacted our company before: "Hey, some of the folks upstairs are having problems getting their emails. Thanks, --Bill" (yes, that was an actual email we received) We are an equal opportunity employer and look forward to considering all qualified applicants. Good luck in your search! From shoop at iwiring.net Wed Feb 14 11:08:42 2007 From: shoop at iwiring.net (Dan Shoop) Date: Wed Feb 14 11:09:04 2007 Subject: printing dot matrix from FileMaker In-Reply-To: <29927.216.163.128.130.1171413127.squirrel@webmail.rogerroger.org> References: <40AD6171-C325-4B9E-BD33-C8D19C164E72@maccentricsolutions.com> <29927.216.163.128.130.1171413127.squirrel@webmail.rogerroger.org> Message-ID: At 4:32 PM -0800 2/13/07, Roger Howard wrote: >All of that said, printing to dot matrix isn't just like any other device, >in the sense that you don't tend to send high-resolution page images to >the device and let it work out how to lay down antialiased dots to form >the printed image - you ideally want it to send a stream of raw characters >to the device. So you may not in fact even use a typical OSX print driver >for that; perhaps a custom serial driver instead (and it is possible to >pump data to a serial port from FMP with a plugin, but you'll have to work >out the print protocol unless that comes with the plugin too). Specifically a dot-matrix or line printer is not the same as a print queue but is rather merely a serial device. That is it's a TTY that receives text output. Trting to incorporate such a beast w OS X's concept of CUPS is going to be a near impossible lose as they are incompatible in concept. If you want a dot-matric or line printer all you want is to hook it up to a serial port and merely `cat` the output to that tty. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From bnl at spray.se Wed Feb 14 11:31:43 2007 From: bnl at spray.se (=?ISO-8859-1?Q?Bj=F6rn_Lundin?=) Date: Wed Feb 14 11:32:10 2007 Subject: Install into /usr/local In-Reply-To: References: Message-ID: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> 12 feb 2007 kl. 19.26 skrev Richard Taubo: > Hi! > > When installing some software OS X into /usr/local and reading the > corresponding Linux manual, I see that OS X requires me to install > using sudo whereas Linux do not. May I ask what distro of Linux that has that setting? All I've seen has something like bnl@ibm:~$ ls -la /usr/local/ totalt 52 drwxr-xr-x 13 root root 4096 2007-02-07 22:54 . drwxr-xr-x 11 root root 4096 2006-05-31 02:51 .. ie only root has wite permissions in /usr and /usr/local (This is by the way Ubuntu 6.06) and my mac has minimac: bnl$ ls -la /usr/local total 16 drwxr-xr-x 13 root wheel 442 Jan 18 17:44 . drwxr-xr-x 12 root wheel 408 Jul 11 2006 .. /Bj?rn Bj?rn Lundin b dot f dot lundin at gmail dot com From rogerhoward at rogerroger.org Wed Feb 14 11:56:06 2007 From: rogerhoward at rogerroger.org (Roger Howard) Date: Wed Feb 14 11:56:23 2007 Subject: printing dot matrix from FileMaker Message-ID: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> On Wed, February 14, 2007 11:08 am, Dan Shoop wrote: > At 4:32 PM -0800 2/13/07, Roger Howard wrote: >>All of that said, printing to dot matrix isn't just like any other >> device, >>in the sense that you don't tend to send high-resolution page images to >>the device and let it work out how to lay down antialiased dots to form >>the printed image - you ideally want it to send a stream of raw >> characters >>to the device. So you may not in fact even use a typical OSX print driver >>for that; perhaps a custom serial driver instead (and it is possible to >>pump data to a serial port from FMP with a plugin, but you'll have to >> work >>out the print protocol unless that comes with the plugin too). > > Specifically a dot-matrix or line printer is not the same as a print > queue but is rather merely a serial device. That is it's a TTY that > receives text output. > > Trting to incorporate such a beast w OS X's concept of CUPS is going > to be a near impossible lose as they are incompatible in concept. Absolutely, that's why I suggested it's possible to interface with such a beast directly via a serial port, which can be done from FileMaker using a serial plugin. Since I don't know the specifics of the customer needs I left open the possibility of an OSX print driver, but if I were doing it I'd first question the whole idea, but if it was needed I'd format and write data out to a serial port from FMP directly. I think we're in total agreement Dan. -R From shoop at iwiring.net Wed Feb 14 14:10:31 2007 From: shoop at iwiring.net (Dan Shoop) Date: Wed Feb 14 14:11:04 2007 Subject: printing dot matrix from FileMaker In-Reply-To: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> Message-ID: At 11:56 AM -0800 2/14/07, Roger Howard wrote: >On Wed, February 14, 2007 11:08 am, Dan Shoop wrote: >> At 4:32 PM -0800 2/13/07, Roger Howard wrote: >>>All of that said, printing to dot matrix isn't just like any other >>> device, >>>in the sense that you don't tend to send high-resolution page images to >>>the device and let it work out how to lay down antialiased dots to form >>>the printed image - you ideally want it to send a stream of raw >>> characters >>>to the device. So you may not in fact even use a typical OSX print driver >>>for that; perhaps a custom serial driver instead (and it is possible to >>>pump data to a serial port from FMP with a plugin, but you'll have to >>> work >>>out the print protocol unless that comes with the plugin too). >> >> Specifically a dot-matrix or line printer is not the same as a print >> queue but is rather merely a serial device. That is it's a TTY that >> receives text output. >> >> Trting to incorporate such a beast w OS X's concept of CUPS is going >> to be a near impossible lose as they are incompatible in concept. > >Absolutely, that's why I suggested it's possible to interface with such a >beast directly via a serial port, which can be done from FileMaker using a >serial plugin. Since I don't know the specifics of the customer needs I >left open the possibility of an OSX print driver, but if I were doing it >I'd first question the whole idea, but if it was needed I'd format and >write data out to a serial port from FMP directly. I think we're in total >agreement Dan. Then you should also agree that what the vendor said was probably on target given that the discussion there was regarding "printers" on the Mac, and those are not TTYs to the OS. So the statement was correct. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From rogerhoward at rogerroger.org Wed Feb 14 14:16:47 2007 From: rogerhoward at rogerroger.org (Roger Howard) Date: Wed Feb 14 14:16:50 2007 Subject: printing dot matrix from FileMaker In-Reply-To: References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> Message-ID: <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: > Then you should also agree that what the vendor said was probably on > target given that the discussion there was regarding "printers" on > the Mac, and those are not TTYs to the OS. So the statement was > correct. Sure, if you want to parse it out, I'll go with that. On a practical level, it's completely possible to integrate such a device with FMP, as I'm sure you'll also agree. Whether it's worth doing, or wise, or sane, is beyond my position to say. I'll readily agree FileMaker Inc. wasn't wrong in their assessment; it'd be stupid/suicidal for a vendor to always point out "sure, it's possible" without about 50 pages of qualifiers, caveats and waivers - it's much easier, and closer to the truth (from a product standpoint) to just say no. As we all know, (nearly) anything is possible, given enough duct tape, twine, and shims; but a vendor is wise to play it safe by not saying "sure, it can be done" unless it's something supportable. I think we're in agreement. From cweldon at cerberusonline.com Wed Feb 14 14:52:25 2007 From: cweldon at cerberusonline.com (Christopher Weldon) Date: Wed Feb 14 14:52:32 2007 Subject: Install into /usr/local In-Reply-To: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> Message-ID: On Feb 14, 2007, at 1:31 PM, Bj?rn Lundin wrote: > > 12 feb 2007 kl. 19.26 skrev Richard Taubo: > >> Hi! >> >> When installing some software OS X into /usr/local and reading the >> corresponding Linux manual, I see that OS X requires me to install >> using sudo whereas Linux do not. > > May I ask what distro of Linux that has that setting? Has it even been answered whether the documentation for the installation on Linux had the user already login as root? This would circumvent the necessity to use sudo... -- Christopher Weldon President & CEO Cerberus Interactive, Inc. cweldon@cerberusonline.com (866) 813-4603 x605 From jim at nuions.com Wed Feb 14 15:34:59 2007 From: jim at nuions.com (Jim Murry) Date: Wed Feb 14 15:42:40 2007 Subject: printing dot matrix from FileMaker In-Reply-To: <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> Message-ID: <43CBE097-8671-4C49-819E-3CCAF339A4C6@nuions.com> It can easily be done using an Epson dot matrix printer. I am printing from filemaker to an LQ-570+ with the Epson network card using the CUPS drivers just like our inkjets. I have also used an USB to parallel adapter. It is not perfect, the page break shifts about an 1/8 of an inch per page printed, but it works for our use. We just tear it off after 4 - 5 pages, then push the load/eject button twice so that it finds top of form. Using scripts to print it changes back and forth between our various printers from within filemaker. On Feb 14, 2007, at 2:16 PM, Roger Howard wrote: > On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: >> Then you should also agree that what the vendor said was probably on >> target given that the discussion there was regarding "printers" on >> the Mac, and those are not TTYs to the OS. So the statement was >> correct. > > Sure, if you want to parse it out, I'll go with that. > > On a practical level, it's completely possible to integrate such a > device > with FMP, as I'm sure you'll also agree. Whether it's worth doing, or > wise, or sane, is beyond my position to say. > > I'll readily agree FileMaker Inc. wasn't wrong in their assessment; > it'd > be stupid/suicidal for a vendor to always point out "sure, it's > possible" > without about 50 pages of qualifiers, caveats and waivers - it's much > easier, and closer to the truth (from a product standpoint) to just > say > no. As we all know, (nearly) anything is possible, given enough > duct tape, > twine, and shims; but a vendor is wise to play it safe by not saying > "sure, it can be done" unless it's something supportable. > > I think we're in agreement. > > _______________________________________________ > MacOSX-admin mailing list > MacOSX-admin@omnigroup.com > http://www.omnigroup.com/mailman/listinfo/macosx-admin > From shoop at iwiring.net Wed Feb 14 22:34:39 2007 From: shoop at iwiring.net (Dan Shoop) Date: Wed Feb 14 22:34:50 2007 Subject: printing dot matrix from FileMaker In-Reply-To: <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> Message-ID: At 2:16 PM -0800 2/14/07, Roger Howard wrote: >On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: >> Then you should also agree that what the vendor said was probably on >> target given that the discussion there was regarding "printers" on >> the Mac, and those are not TTYs to the OS. So the statement was >> correct. > >Sure, if you want to parse it out, I'll go with that. > >On a practical level, it's completely possible to integrate such a device >with FMP, as I'm sure you'll also agree. Whether it's worth doing, or >wise, or sane, is beyond my position to say. I'm not sure how possible it is or not, having ditched FMP some years ago now that there's a real database, postgres, on every Mac. So does FMP have a way to pipe output to stdout? -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From shoop at iwiring.net Wed Feb 14 22:37:24 2007 From: shoop at iwiring.net (Dan Shoop) Date: Wed Feb 14 22:37:46 2007 Subject: printing dot matrix from FileMaker In-Reply-To: <43CBE097-8671-4C49-819E-3CCAF339A4C6@nuions.com> References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> <43CBE097-8671-4C49-819E-3CCAF339A4C6@nuions.com> Message-ID: At 3:34 PM -0800 2/14/07, Jim Murry wrote: >It can easily be done using an Epson dot matrix printer. I am >printing from filemaker to an LQ-570+ with the Epson network card >using the CUPS drivers just like our inkjets. That's quite a bit different since that's (a) a network printer (b) frobed up to be a not be a dot-matrix printer at all in implementation but a bit mapped printer that drops down to ASCII. -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From esaline at pen-tec.com Thu Feb 15 07:29:09 2007 From: esaline at pen-tec.com (Erik Saline) Date: Thu Feb 15 07:59:31 2007 Subject: printing dot matrix from FileMaker In-Reply-To: References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> Message-ID: On Feb 14, 2007, at 10:34 PM, Dan Shoop wrote: > At 2:16 PM -0800 2/14/07, Roger Howard wrote: >> On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: >>> Then you should also agree that what the vendor said was >>> probably on >>> target given that the discussion there was regarding "printers" on >>> the Mac, and those are not TTYs to the OS. So the statement was >>> correct. >> >> Sure, if you want to parse it out, I'll go with that. >> >> On a practical level, it's completely possible to integrate such a >> device >> with FMP, as I'm sure you'll also agree. Whether it's worth doing, or >> wise, or sane, is beyond my position to say. > > I'm not sure how possible it is or not, having ditched FMP some > years ago now that there's a real database, postgres, on every Mac. > > So does FMP have a way to pipe output to stdout? FMP can run Applescript which in turn can pipe to stdout. I have not done it but seems doable. Erik > > -- > > -dhan > > ---------------------------------------------------------------------- > -- > Dan Shoop AIM: > iWiring > Systems & Networks Architect http:// > www.ustsvs.com/ > shoop@iwiring.net http:// > www.iwiring.net/ > 1-714-363-1174 > > "The wise man doesn't give the right answers, he poses the right > questions." -- Claude Levi-Strauss > > ---------------------------------------------------------------------- > -- > > iWiring provides systems and networks support for Mac OS X, unix, and > Open Source application technologies at affordable rates. > _______________________________________________ > MacOSX-admin mailing list > MacOSX-admin@omnigroup.com > http://www.omnigroup.com/mailman/listinfo/macosx-admin > From rogerhoward at rogerroger.org Thu Feb 15 08:38:02 2007 From: rogerhoward at rogerroger.org (Roger Howard) Date: Thu Feb 15 08:38:06 2007 Subject: printing dot matrix from FileMaker In-Reply-To: References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> Message-ID: <49213.216.163.128.130.1171557482.squirrel@webmail.rogerroger.org> On Thu, February 15, 2007 7:29 am, Erik Saline wrote: > > On Feb 14, 2007, at 10:34 PM, Dan Shoop wrote: > >> At 2:16 PM -0800 2/14/07, Roger Howard wrote: >>> On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: >>>> Then you should also agree that what the vendor said was >>>> probably on >>>> target given that the discussion there was regarding "printers" on >>>> the Mac, and those are not TTYs to the OS. So the statement was >>>> correct. >>> >>> Sure, if you want to parse it out, I'll go with that. >>> >>> On a practical level, it's completely possible to integrate such a >>> device >>> with FMP, as I'm sure you'll also agree. Whether it's worth doing, or >>> wise, or sane, is beyond my position to say. >> >> I'm not sure how possible it is or not, having ditched FMP some >> years ago now that there's a real database, postgres, on every Mac. >> >> So does FMP have a way to pipe output to stdout? > > FMP can run Applescript which in turn can pipe to stdout. I have not > done it but seems doable. Exactly... on top of that, there's at least one well known serial port plugin for FMP, Troi Serial, which could be useful for this too. Again, ugly, unsupported, but ultimately doable. From shoop at iwiring.net Thu Feb 15 09:10:53 2007 From: shoop at iwiring.net (Dan Shoop) Date: Thu Feb 15 09:11:02 2007 Subject: printing dot matrix from FileMaker In-Reply-To: References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> Message-ID: At 7:29 AM -0800 2/15/07, Erik Saline wrote: >On Feb 14, 2007, at 10:34 PM, Dan Shoop wrote: > >>At 2:16 PM -0800 2/14/07, Roger Howard wrote: >>>On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: >>>> Then you should also agree that what the vendor said was probably on >>>> target given that the discussion there was regarding "printers" on >>>> the Mac, and those are not TTYs to the OS. So the statement was >>>> correct. >>> >>>Sure, if you want to parse it out, I'll go with that. >>> >>>On a practical level, it's completely possible to integrate such a device >>>with FMP, as I'm sure you'll also agree. Whether it's worth doing, or >>>wise, or sane, is beyond my position to say. >> >>I'm not sure how possible it is or not, having ditched FMP some >>years ago now that there's a real database, postgres, on every Mac. >> >>So does FMP have a way to pipe output to stdout? > >FMP can run Applescript which in turn can pipe to stdout. I have >not done it but seems doable. What's stdout to a application that may have no running user context? -- -dhan ------------------------------------------------------------------------ Dan Shoop AIM: iWiring Systems & Networks Architect http://www.ustsvs.com/ shoop@iwiring.net http://www.iwiring.net/ 1-714-363-1174 "The wise man doesn't give the right answers, he poses the right questions." -- Claude Levi-Strauss ------------------------------------------------------------------------ iWiring provides systems and networks support for Mac OS X, unix, and Open Source application technologies at affordable rates. From rogerhoward at rogerroger.org Thu Feb 15 10:08:00 2007 From: rogerhoward at rogerroger.org (Roger Howard) Date: Thu Feb 15 10:08:04 2007 Subject: printing dot matrix from FileMaker In-Reply-To: References: <34426.216.163.128.130.1171482966.squirrel@webmail.rogerroger.org> <20624.216.163.128.130.1171491407.squirrel@webmail.rogerroger.org> Message-ID: <35471.216.163.128.130.1171562880.squirrel@webmail.rogerroger.org> On Thu, February 15, 2007 9:10 am, Dan Shoop wrote: > At 7:29 AM -0800 2/15/07, Erik Saline wrote: >>On Feb 14, 2007, at 10:34 PM, Dan Shoop wrote: >> >>>At 2:16 PM -0800 2/14/07, Roger Howard wrote: >>>>On Wed, February 14, 2007 2:10 pm, Dan Shoop wrote: >>>>> Then you should also agree that what the vendor said was probably on >>>>> target given that the discussion there was regarding "printers" on >>>>> the Mac, and those are not TTYs to the OS. So the statement was >>>>> correct. >>>> >>>>Sure, if you want to parse it out, I'll go with that. >>>> >>>>On a practical level, it's completely possible to integrate such a >>>> device >>>>with FMP, as I'm sure you'll also agree. Whether it's worth doing, or >>>>wise, or sane, is beyond my position to say. >>> >>>I'm not sure how possible it is or not, having ditched FMP some >>>years ago now that there's a real database, postgres, on every Mac. >>> >>>So does FMP have a way to pipe output to stdout? >> >>FMP can run Applescript which in turn can pipe to stdout. I have >>not done it but seems doable. > > What's stdout to a application that may have no running user context? Well you first brought it up; Google can give you all the details you need on "do shell script" and how it executes. This isn't an FMP thing, it's an AppleScript thing, and does have some gotchas. http://developer.apple.com/technotes/tn2002/tn2065.html Anyway, if I were interfacing with a serial device from FMP, it wouldn't touch "do shell script" or stdout. I think we've beat this one to a pulp. -R From bw at his.com Fri Feb 16 08:23:54 2007 From: bw at his.com (Bill Whitacre) Date: Fri Feb 16 08:41:54 2007 Subject: Target disk mode on RAID'd boot volume Message-ID: <0008EDEC-7F2E-4A02-A031-39CBE754833F@his.com> I think I may have outsmarted myself. I put a 2nd HD in my wife's computer and set it up as a mirrored RAID boot drive so that if one drive went bad she wouldn't loose any data. Now I'd like to replace her computer and am not able to boot the old RAID'd startup volume computer in Firewire target disk mode to transfer everything to the new computer. So I'm holding down the 'T' key and rebooting her machine and it won't go into target disk mode. Yikes! I have Googled but can't find anything that say one can't boot a RAID'd startup volume in FW target disk mode. If is is not possible to boot her machine in target disk mode, what's the next best/easiest way to get all her accounts, software & files onto the new box? Thanks for your patience. bw --- Bill Whitacre bw@his.com From sglewis at mac.com Fri Feb 16 13:15:23 2007 From: sglewis at mac.com (Scott Lewis) Date: Fri Feb 16 13:15:39 2007 Subject: Install into /usr/local In-Reply-To: References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> Message-ID: On Wednesday, February 14, 2007, at 05:52PM, "Christopher Weldon" wrote: >Has it even been answered whether the documentation for the >installation on Linux had the user already login as root? This would >circumvent the necessity to use sudo... A great question. Could it be that those instruct Linux users to logon as root, but not MacOS X users, since by default, you can't logon as root until you set the root password. Linux distros tend to have that set at install time. On the Mac, unless you enable it, sudo is the ONLY way out of the box to get root access from the terminal. From ort at bergersen.no Sat Feb 17 05:24:44 2007 From: ort at bergersen.no (Richard Taubo) Date: Sat Feb 17 05:25:20 2007 Subject: Install into /usr/local In-Reply-To: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> Message-ID: <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> Hi! On 14. feb. 2007, at 20.31, Bj?rn Lundin wrote: > 12 feb 2007 kl. 19.26 skrev Richard Taubo: > >> Hi! >> >> When installing some software OS X into /usr/local and reading the >> corresponding Linux manual, I see that OS X requires me to install >> using sudo whereas Linux do not. > > May I ask what distro of Linux that has that setting? > All I've seen has something like As I said in the above comment I was just: " . . . reading the corresponding Linux manual", not installing on a Linux distro, so I can't really comment on that. Since the software also runs on FreeBSD, NetBSD and Windows, I guess I would also be wrong to call the instruction a "Linux manual" given the multisystem nature of the software. There were really just a few things that had to change from the instruction to the implementation on my machine, e.g: make install => sudo make install cp this.conf that.conf => sudo cp this.conf that.conf /usr/local/prog/bin/progd => sudo /usr/local/prog/bin/progd Due to this I was drawing my (maybe wrong?) conclusions that the other system (I wrote Linux, but it could be any of the supported systems) did not have to use sudo to install. But maybe this was just a simplified setup instruction or just how the developer had set up his system ? I don't really know. On 14. feb. 2007, at 23.52, Christopher Weldon wrote: > Has it even been answered whether the documentation for the > installation on Linux had the user already login as root? This > would circumvent the necessity to use sudo... The reference manual does mention to login as root. Best regards, Richard Taubo From cweldon at cerberusonline.com Sat Feb 17 07:05:16 2007 From: cweldon at cerberusonline.com (Christopher Weldon) Date: Sat Feb 17 07:05:52 2007 Subject: Install into /usr/local In-Reply-To: <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> Message-ID: <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> On Feb 17, 2007, at 7:24 AM, Richard Taubo wrote: > > On 14. feb. 2007, at 23.52, Christopher Weldon wrote: >> Has it even been answered whether the documentation for the >> installation on Linux had the user already login as root? This >> would circumvent the necessity to use sudo... > > The reference manual does mention to login as root. Then our questions (and yours) have effectively been answered. Because you're logged in as root, every command you issue is essentially the same as issuing it with 'sudo' as a normal user. When you 'sudo' a command, for the life of the command you are running it as the root user. Now, if you were to login as yourself on your linux system (and not root), you need to issue the sudo command at every point the instructions ask you to issue sudo on MacOS. Understand the difference between the OSes? -- Christopher Weldon President & CEO Cerberus Interactive, Inc. cweldon@cerberusonline.com (866) 813-4603 x605 From jearle at gmail.com Sat Feb 17 07:07:03 2007 From: jearle at gmail.com (Jared Earle) Date: Sat Feb 17 07:07:07 2007 Subject: Install into /usr/local In-Reply-To: <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> Message-ID: <5bbc0cd60702170707g751c36aaud7b2464dd48501fd@mail.gmail.com> On 2/17/07, Richard Taubo wrote: > On 14. feb. 2007, at 23.52, Christopher Weldon wrote: > > Has it even been answered whether the documentation for the > > installation on Linux had the user already login as root? This > > would circumvent the necessity to use sudo... > > The reference manual does mention to login as root. It probably does, but in a too subtle manner. The two following lines are subtly different, for instance: $ sudo make install # make install If you need to rigidly follow the Linux instructions, just type the following: jearle@mantaray$ sudo bash root@mantaray# Then, you'll be able to break your system as needed. -- Jared Earle :: There is no SPORK jearle@gmail.com :: http://www.23x.net The Spodcast :: http://spodcast.org From ort at bergersen.no Sat Feb 17 08:45:42 2007 From: ort at bergersen.no (Richard Taubo) Date: Sat Feb 17 08:46:15 2007 Subject: Install into /usr/local In-Reply-To: <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> Message-ID: <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> Hi! On 17. feb. 2007, at 16.05, Christopher Weldon wrote: > > On Feb 17, 2007, at 7:24 AM, Richard Taubo wrote: >> >> On 14. feb. 2007, at 23.52, Christopher Weldon wrote: >>> Has it even been answered whether the documentation for the >>> installation on Linux had the user already login as root? This >>> would circumvent the necessity to use sudo... >> >> The reference manual does mention to login as root. > > Then our questions (and yours) have effectively been answered. > Because you're logged in as root, every command you issue is > essentially the same as issuing it with 'sudo' as a normal user. > When you 'sudo' a command, for the life of the command you are > running it as the root user. > > Now, if you were to login as yourself on your linux system (and not > root), you need to issue the sudo command at every point the > instructions ask you to issue sudo on MacOS. > > Understand the difference between the OSes? Oh my, oh my. I meant: Does **not** mention . . . Not my day, I see, and I am sorry about that. :-) By the way, the software is called Sphinx and used to speed up full text search in e.g. MySQL ( see http://sphinxsearch.com for more). On 17. feb. 2007, at 16.07, Jared Earle wrote: > It probably does, but in a too subtle manner. The two following lines > are subtly different, for instance: > $ sudo make install > # make install > > If you need to rigidly follow the Linux instructions, just type the > following: > jearle@mantaray$ sudo bash > root@mantaray# The install doc (sphinx.txt) have the following instructions . . . : $ make install $ cd /usr/local/sphinx/etc $ cp sphinx.conf.dist sphinx.conf $ /usr/local/sphinx/bin/searchd . . . so it does not seem like he is installing as root. Thanks for feedback and sorry for the confusion. Richard Taubo From kremels at kreme.com Sat Feb 17 10:34:56 2007 From: kremels at kreme.com (LuKreme) Date: Sat Feb 17 10:35:09 2007 Subject: Install into /usr/local In-Reply-To: <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> Message-ID: On 17-Feb-2007, at 09:45, Richard Taubo wrote: > The install doc (sphinx.txt) have the following instructions . . . : > $ make install > $ cd /usr/local/sphinx/etc > $ cp sphinx.conf.dist sphinx.conf > $ /usr/local/sphinx/bin/searchd > > . . . so it does not seem like he is installing as root. Well, Linux/Unix/FreeBSD instructions tend to assume that people know when they do and do not need to be 'root' and most of the time when you are installing software anywhere outside your own directory, you have to be root to do so. -- Major Strasser has been shot. Round up the usual suspects. From jon at holicow.com Sat Feb 17 09:37:30 2007 From: jon at holicow.com (Jon Nolan) Date: Sat Feb 17 10:37:37 2007 Subject: LSRecentTo In-Reply-To: <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> Message-ID: <45D73D5A.1090506@holicow.com> Hi, Would someone please let me know what the LSRecentTo process does? Thank You, Jon From luttgens at fusl.ac.be Sun Feb 18 01:51:44 2007 From: luttgens at fusl.ac.be (Axel Luttgens) Date: Sun Feb 18 02:16:10 2007 Subject: LSRecentTo In-Reply-To: <45D73D5A.1090506@holicow.com> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> <45D73D5A.1090506@holicow.com> Message-ID: <45D821B0.4090505@fusl.ac.be> On 17/02/07 18:37, Jon Nolan wrote: > Hi, > > Would someone please let me know what the LSRecentTo process does? More exactly, it is LSRecentTool. The binary is located at: /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ /Frameworks/LaunchServices.framework/Versions/A/Support/LSRecentTool IIRC, it was related to the maintenance of the "Recent Items" menu item of the Apple menu during a GUI user session (it disappeared with 10.4). A bug seems to have been introduced somewhere in 10.3.9 (or 10.3.8?), so that it seldomly started to eat all CPU resources and refused to quit when leaving the user's session; the only way to get rid of it was then to kill the process, before the whole box became fully unresponsive... HTH, Axel From jon at holicow.com Sun Feb 18 15:40:54 2007 From: jon at holicow.com (Jon Nolan) Date: Sun Feb 18 15:41:01 2007 Subject: LSRecentTo In-Reply-To: <45D821B0.4090505@fusl.ac.be> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> <45D73D5A.1090506@holicow.com> <45D821B0.4090505@fusl.ac.be> Message-ID: <45D8E406.6040003@holicow.com> Thank you very much Alex. That's exactly the behavior I'm seeing on Server 10.3.9. Thanks again, Jon Axel Luttgens wrote: > On 17/02/07 18:37, Jon Nolan wrote: > >> Hi, >> >> Would someone please let me know what the LSRecentTo process does? > > More exactly, it is LSRecentTool. > > The binary is located at: > /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ > /Frameworks/LaunchServices.framework/Versions/A/Support/LSRecentTool > > IIRC, it was related to the maintenance of the "Recent Items" menu item > of the Apple menu during a GUI user session (it disappeared with 10.4). > A bug seems to have been introduced somewhere in 10.3.9 (or 10.3.8?), so > that it seldomly started to eat all CPU resources and refused to quit > when leaving the user's session; the only way to get rid of it was then > to kill the process, before the whole box became fully unresponsive... > > HTH, > Axel > _______________________________________________ > MacOSX-admin mailing list > MacOSX-admin@omnigroup.com > http://www.omnigroup.com/mailman/listinfo/macosx-admin > From chad+macosx at objectwerks.com Sun Feb 18 16:52:38 2007 From: chad+macosx at objectwerks.com (Chad Leigh) Date: Sun Feb 18 16:52:50 2007 Subject: LSRecentTo In-Reply-To: <45D8E406.6040003@holicow.com> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> <45D73D5A.1090506@holicow.com> <45D821B0.4090505@fusl.ac.be> <45D8E406.6040003@holicow.com> Message-ID: <6E6C0247-64D9-4B89-903A-AD7C8B17A7B4@objectwerks.com> On Feb 18, 2007, at 4:40 PM, Jon Nolan wrote: > Thank you very much Alex. Or Axel Chad > That's exactly the behavior I'm seeing on Server 10.3.9. > > Thanks again, > Jon > > Axel Luttgens wrote: >> On 17/02/07 18:37, Jon Nolan wrote: >>> Hi, >>> >>> Would someone please let me know what the LSRecentTo process does? >> More exactly, it is LSRecentTool. >> The binary is located at: >> /System/Library/Frameworks/ApplicationServices.framework/ >> Versions/A/ >> /Frameworks/LaunchServices.framework/Versions/A/Support/ >> LSRecentTool >> IIRC, it was related to the maintenance of the "Recent Items" menu >> item of the Apple menu during a GUI user session (it disappeared >> with 10.4). >> A bug seems to have been introduced somewhere in 10.3.9 (or >> 10.3.8?), so that it seldomly started to eat all CPU resources and >> refused to quit when leaving the user's session; the only way to >> get rid of it was then to kill the process, before the whole box >> became fully unresponsive... >> HTH, >> Axel >> _______________________________________________ >> MacOSX-admin mailing list >> MacOSX-admin@omnigroup.com >> http://www.omnigroup.com/mailman/listinfo/macosx-admin > > _______________________________________________ > MacOSX-admin mailing list > MacOSX-admin@omnigroup.com > http://www.omnigroup.com/mailman/listinfo/macosx-admin From jon at holicow.com Mon Feb 19 08:34:39 2007 From: jon at holicow.com (Jon Nolan) Date: Mon Feb 19 08:34:46 2007 Subject: LSRecentTo In-Reply-To: <6E6C0247-64D9-4B89-903A-AD7C8B17A7B4@objectwerks.com> References: <44C8B12D-9824-44AC-9C77-9FD795592D0B@spray.se> <4C8FFB99-9253-4C00-9674-AC7B6705A5EF@bergersen.no> <7E840F6F-60A0-4132-8C21-008AA4464788@cerberusonline.com> <36E34084-676C-4258-A9CB-9BB0FF78DD40@bergersen.no> <45D73D5A.1090506@holicow.com> <45D821B0.4090505@fusl.ac.be> <45D8E406.6040003@holicow.com> <6E6C0247-64D9-4B89-903A-AD7C8B17A7B4@objectwerks.com> Message-ID: <45D9D19F.7000600@holicow.com> Apologies. Chad Leigh wrote: > > On Feb 18, 2007, at 4:40 PM, Jon Nolan wrote: > >> Thank you very much Alex. > > Or Axel > > Chad > >> That's exactly the behavior I'm seeing on Server 10.3.9. >> >> Thanks again, >> Jon >> >> Axel Luttgens wrote: >>> On 17/02/07 18:37, Jon Nolan wrote: >>>> Hi, >>>> >>>> Would someone please let me know what the LSRecentTo process does? >>> More exactly, it is LSRecentTool. >>> The binary is located at: >>> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ >>> >>> /Frameworks/LaunchServices.framework/Versions/A/Support/LSRecentTool >>> IIRC, it was related to the maintenance of the "Recent Items" menu >>> item of the Apple menu during a GUI user session (it disappeared with >>> 10.4). >>> A bug seems to have been introduced somewhere in 10.3.9 (or 10.3.8?), >>> so that it seldomly started to eat all CPU resources and refused to >>> quit when leaving the user's session; the only way to get rid of it >>> was then to kill the process, before the whole box became fully >>> unresponsive... >>> HTH, >>> Axel >>> _______________________________________________ >>> MacOSX-admin mailing list >>> MacOSX-admin@omnigroup.com >>> http://www.omnigroup.com/mailman/listinfo/macosx-admin >> >> _______________________________________________ >> MacOSX-admin mailing list >> MacOSX-admin@omnigroup.com >> http://www.omnigroup.com/mailman/listinfo/macosx-admin > > _______________________________________________ > MacOSX-admin mailing list > MacOSX-admin@omnigroup.com > http://www.omnigroup.com/mailman/listinfo/macosx-admin > From mrhatken at mac.com Tue Feb 20 01:40:12 2007 From: mrhatken at mac.com (Ashley Aitken) Date: Tue Feb 20 00:46:20 2007 Subject: Moving Mail Server to another location / IP address? In-Reply-To: References: <20070209200028.18A05132765@dynamic-www.omnigroup.com> Message-ID: Thanks to everyone who gave advice and suggestions on how to move a Mail Server running on MacOSX Server from one location (and IP address) to another location (and IP address). It all seems to have worked out very well - at least there's been no major loss of data or email or mail services. I ended up using a Backup MX Server provided by dnsexit.com (aka 911domain.com). They have a free trial service for 5 days. Considering I have 3 virtual domains that worked out cheaper than the $20 per domain per year. I will setup a backup MX server at another site soon though. Although mail went well I am having quite a bit more trouble with the database (MySQL), bulletin board software (phpBB2) and blogs (Wordpress). Particularly since, in moving from MacOSX client to MacOSX Server one loses some control over the Apache httpd.conf file. I'm sure its all doable and all services will be up again in a short while. Thanks again for everyone's help. Cheers, Ashley. -- Ashley Aitken Perth, Western Australia mrhatken at mac dot com Skype Name: MrHatken (GMT + 8 Hours!) From brianw at sounds.wa.com Tue Feb 20 01:34:34 2007 From: brianw at sounds.wa.com (Brian Willoughby) Date: Tue Feb 20 01:34:54 2007 Subject: Moving Mail Server to ano