Trond's place

I recently ordered a Chelsio T6225-CR network interface card and a couple of SM25G-SR SFP28 optical modules. The aim is to get a 10 Gbit/s connection to the LAN, utilise the off-load capabilities of the NIC, and of course utilise the on-board crypto accelerator. The latter will not be useable until the system moves to the upcoming […]

I have a couple of Novell NetWare 6.5 SP8 servers that simply refuse to die. One of them can be quantum dated back to 2004, the other one dates back to 2008. Last night the Root CA expired, rendering LDAP services unavailable. Luckily, I had prepared for this event.

Update 2018-05-29T19:27+0200 synth 2.05 was released not long ago. None of the below applies.

I needed to migrate an UFS filesystem from one disk to another. I had several options including using two tar processes in a pipeline or using dump and restore in a pipeline. I opted for the latter to make sure everything got preserved during the transfer. Here’s the sequence of commands where /dev/gpt/nroot0 is the […]

I need to remind myself of running the IPP webpage in compatiblity mode in IE11 when installing printers. Even if you specify ipp.FQDN, IE11 will kindly enter your FQDN into the list of domain names to show in compatibility mode. Remember to remove FQDN from that list when you’re done. iPrint client 5.99 seems to […]

NBAR2 on Sup8E can assist in blocking BitTorrent. While somewhat useful, BitTorrent is mostly used for downloading pirated movies, and BitTorrent off someone’s ADSL line is usually dead slow. Create a class map and a policy map as shown below, and attach that policy map to your ingress interfaces, and BitTorrent should be blocked. class-map […]

Sometimes security is on the border of being ridiculous. Modern Windows 10 is very anxious when connecting to guest-access allowed, readonly Samba shares, Here’s how to allow “insecure” guest logons for stand-alone computers. The same is true when configuring a GPO. https://support.microsoft.com/en-us/help/4046019/guest-access-smb2-disabled-by-default-in-windows-10-server-2016.

If technologists do not speak up to educate policymakers, bad policy will result, and we will have to live with it. —Margaret Martonosi, Comm. ACM, 2018-05, vol. 61, no. 5.

r331464 added efi_max_resolution. If you run base/head on monitors without Full HD (FHD), then you might need to specify your desired resolution in /boot/loader.conf. This should suffice for a resolution of 1280×1024 on 19 inches displays.

This is what a kernel panic may look like when facing memory corruption.

Chelsio T6225-CR and SM25G-SR

Renewing Root CA for Novell NetWare 6.5 SP8

Unable to build ports depending on `security/nss`

Migrating UFS filesystem from one disk to another

Micro Focus (Novell) iPrint on Windows 7

Using QoS for blocking BitTorrent on Catalyst 4500E Sup8E

Connecting to guest-access allowed, readonly Samba shares

Educate the policymakers

`efi_max_resolution` needed on `base/head` for UEFI systems without FHD displays

Kernel panic due to memory corruption