January 2014 - Arch-general - lists.archlinux.org

[arch-general] Failure to resume on kernel >3.9.9
by Patrick Burroughs (Celti) 14 Jan '14

14 Jan '14

Hi list, I realise this email comes with a deplorable paucity of informaton, but I haven't found *any* logs relating to this event. I also realise I've waited what may be considered overlong to ask for help, but I was hoping the bug would be fixed in a later kernel release and it wasn't. Google has failed me, so now I come to you for help. My laptop is an HP Pavilion g7. The system suspends normally, but fails to resume leaving a powered-off screen and no responsiveness to keyboard input, including the magic sysrq, but the caps lock light turns on and off. At first I suspected fglrx, but it happens with or without fglrx loaded, and with or without nomodeset on the kernel command line. Further, it happens identically inside or outside of X. I tried git-bisect on the kernel but gave up after many hours of compiling and testing — anyone know of a faster/easier way to do this? I'm currently running kernel 3.9.8, but am perfectly willing to update again and generate a failure to provide any logs someone thinks may help — I haven't found anything, but I may not be looking in the right place. Thank you, ~Celti

2 3

[arch-general] Packages Verified with MD5
by Taylor Hornby 14 Jan '14

14 Jan '14

I noticed that the TrueCrypt package is downloaded over an insecure FTP connection and then only verified using MD5 hashes. https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=… There are practical collision attacks against MD5. This means an adversary (e.g. the NSA) can construct two versions of the truecrypt binaries, one malicious and one not, which have the same MD5 hash. They can silently replace the file being downloaded with the malicious version and the change will not be detected. This should be fixed to use SHA256 hashes, like the Firefox package: https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=… How can I help make it use SHA256 instead of MD5? I'm relatively new to arch, so I'm not familiar with what it takes to change something in the repos. Any advice would be appreciated. Are there other packages still being verified with MD5? Can we fix them too? I'll gladly donate my time if it's not something that can be automated. Thanks, -- Taylor Hornby p.s. This might be better suited to arch-dev-public, but I think users should be informed of the vulnerability, so I decided on arch-general.

11 23

[arch-general] Empty resolv.conf after PXE boot
by Loper 14 Jan '14

14 Jan '14

Hello, I'm having problem with resolv.conf. After booting LiveCD (every version), sometimes it's empty. Problem occurs when using more than 1 interface and probably when one of them isn't connected. Mostly it takes place when I'm booting Arch under ESXi 5.5.0. After running 'dhcpcd' resolv.conf is filled and has correct data. Adding 'copy_resolvconf=y' to kernel params doesn't help. Also FYI: I'm using iPXE to boot this ISO. To reproduce this issue: 1. Boot ArchLinux ISO on any machine (ie. virtual) with 2 or more NIC's 2. Log in as root and cat /etc/resolv.conf - it will be empty or containing empty line 3. Try to ping any foreign domain, ie. google.com - it should fail 4. Run 'dhcpcd' and check if resolv.conf is filled correctly - fixed If it would work automatically, not by explicite calling 'dhcpcd or systemctl start dhcpcd@'. Any ideas? ------- Best regards, Loper

1 0

[arch-general] systemd claims /run out of space
by Jameson 14 Jan '14

14 Jan '14

For some reason on my home server, systemd is often telling me I'm out of space, but I can't find a problem. Just now, I stopped httpd, and when I try to start it, again, systemd says I'm out of space, the status reports: systemd[1]: Failed to set a watch for httpd.service's PID file /run/httpd/httpd.pid: No space left on device. However, df shows: Filesystem Size Used Avail Use% Mounted on /dev/sda4 107G 33G 73G 31% / dev 7.9G 0 7.9G 0% /dev run 7.9G 572K 7.9G 1% /run tmpfs 7.9G 0 7.9G 0% /dev/shm tmpfs 7.9G 0 7.9G 0% /sys/fs/cgroup tmpfs 7.9G 1.4M 7.9G 1% /tmp di reports: run /run 7.8G 0.0G 7.8G 0% tmpfs Does anyone know where I can look to see why systemd returns this? Thanks, =-Jameson

2 3

[arch-general] LUKS emergency self-destruct
by Paladin 13 Jan '14

13 Jan '14

Hi, does anyone know if there is plan to implement this: http://www.kali.org/how-to/emergency-self-destruction-luks-kali/ in Arch? Patch https://github.com/offensive-security/cryptsetup-nuke-keys is not too big and IMHO it would be great to have this option.. Patch is for 1.6.1 but it cannot be that difficult to port it to 1.6.3 which we have. Paladin -- () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments

7 6

Re: [arch-general] "os-prober" failed to work with "blkid" (util-linux 2.24-2)
by Ken CC 13 Jan '14

13 Jan '14

On Sun, Jan 12, 2014 at 07:15:03PM +0100, Timothée Ravier wrote: > On 09/01/2014 10:11, Ken CC wrote: > > (...) > > > > What do you guys think? > > Please report bugs upstream, or in the bug tracker. > bug reported: https://bugs.archlinux.org/task/38487 -ken

1 0

[arch-general] Error install blink-darcs
by Maykel Franco 12 Jan '14

12 Jan '14

I cannot install blink-darcs in archlinux...Can I help me please?? Thanks in advanced. [root@arch-maykel maykel]# yaourt -S blink-darcs --noconfirm ==> Descargando PKGBUILD desde AUR... x PKGBUILD Comment by fdservices (2012-05-21 07:34) If this works with python27 shouldit not be updated? Comment by Synthead (2013-01-28 02:43) The documentation calls for Python 2.5 or 2.6, but seems to run ok on Python 2.7. Updated! Comment by Synthead (2013-01-28 02:44) Also, the darcs-bin is an easy way to get darcs on your system without worrying about all the build dependencies ;) Comment by grugnog (2013-03-12 12:25) Getting a segfault when trying making a call with a fresh install of blink and dependencies. Unfortunately it is a hisenbug - since running it with strace works! Will need to try again with gdb at some point. My hunch is that it may be related to https://bugs.launchpad.net/ubuntu/+source/libgcrypt11/+bug/1013798 Comment by gardar (2013-11-15 13:43) Dependency `python2-pyqt' of `blink-darcs' does not exist blink-darcs 20130127-1 (vie may 13 09:28:12 CEST 2011) (Paquete sin soporte: podría ser peligroso!) ==> dependencias de blink-darcs: - python2 (ya instalado) - python2-application (ya instalado) - python2-cjson (ya instalado) - python2-gnutls (ya instalado) - python2-pyqt (ya instalado) - twisted (ya instalado) - python2-eventlib (compilando des de AUR) - python2-sipsimple (compilando des de AUR) - darcs (compilando des de AUR) ==> Continuar compilando blink-darcs? [S/n] ==> --------------------------------------- ==> ==> Compilando e instalando el paquete ==> Las fuentes de blink-darcs se guardaron en la última ocasión. Utilizarlas? [S/n] ==> Instalar o compilar las dependencias que faltan para blink-darcs: ==> Descargando PKGBUILD desde AUR... x PKGBUILD Comment by bretthoerner (2012-12-07 14:57) == Install or build missing dependencies for darcs: error: target not found: haskell-haskeline0.7 Any ideas? Comment by stewSquared (2013-02-26 17:11) I recommend installing from the Haskell Hackage: $ pacman -S cabal-install $ cabal install darcs This way, it's guaranteed to be up-to-date (bonus: haskell-tar and haskell-haskeline are present). Comment by misc (2013-03-11 11:23) Is prepare() still observed by pacman? Had to move its content to build() for it to work. Comment by gtmanfred (2013-03-11 15:53) bah, my bad, prepare doesn't exist until pacman 4.1 I was using it so i wouldn't have to continually configure it Fixing Comment by tzok (2013-06-21 09:52) Please add haskell-utf8-string to makedepends, as it is a required package. darcs 2.8.4-2 (mié mar 21 11:49:56 CET 2012) (Paquete sin soporte: podría ser peligroso!) ==> dependencias de darcs: - curl (ya instalado) - gmp (ya instalado) - ncurses>=5.6-7 (ya instalado) - ghc (ya instalado) - haskell-tar (ya instalado) - haskell-text<0.12 (ya instalado) - haskell-haskeline (ya instalado) - haskell-random (ya instalado) - haskell-vector (ya instalado) - haskell-html<1.1 (ya instalado) - haskell-parsec<3.2 (ya instalado) - haskell-regex-compat (ya instalado) - haskell-hashed-storage<0.6 (compilando des de AUR) ==> Continuar compilando darcs? [S/n] ==> --------------------------------- ==> ==> Compilando e instalando el paquete ==> Instalar o compilar las dependencias que faltan para darcs: ==> Descargando PKGBUILD desde AUR... x PKGBUILD x haskell-hashed-storage.install Comment by goviedo (2013-09-26 14:13) I had a problem compiling this to darcs in my Archbang x64 kernel Storage/Hashed/Utils.hs:17:1: Bad interface file: /usr/lib/ghc-7.6.3/site-local/mtl-2.1.2/Control/Monad/Identity.hi Data.Binary.getWord8: end of file == ERROR: A failure occurred in build(). Aborting... Linux arch 3.11.1-2-ARCH #1 SMP PREEMPT Sun Sep 22 19:45:00 CEST 2013 x86_64 GNU/Linux Comment by eatsaq (2013-11-08 01:14) - Extracting hashed-storage-0.5.10.tar.gz with bsdtar == Starting build()... Setup.hs:27:3: Warning: In the use of `runTests' (imported from Distribution.Simple, but defined in Distribution.Simple.UserHooks): Deprecated: "Please use the new testing interface instead!" Configuring hashed-storage-0.5.10... Setup: At least the following dependencies are missing: extensible-exceptions -any, mtl -any == ERROR: A failure occurred in build(). Comment by skeksis268 (2013-12-01 18:57) fails build with the following error: Setup: At least one of the following dependencies are missing: mmap == 0.5.* This is despite having the latest of haskell-mmap package installed Comment by thoth (2013-12-15 16:14) +1 here as well (same as skeksis268) haskell-hashed-storage 0.5.10-1 (lun mar 11 08:26:53 CET 2013) (Paquete sin soporte: podría ser peligroso!) ==> dependencias de haskell-hashed-storage: - ghc (ya instalado) - haskell-dataenc (ya instalado) - haskell-extensible-exceptions (ya instalado) - haskell-mmap (ya instalado) - haskell-mtl (ya instalado) - haskell-zlib (ya instalado) - ghc (ya instalado) ==> Continuar compilando haskell-hashed-storage? [S/n] ==> -------------------------------------------------- ==> ==> Compilando e instalando el paquete ==> AVISO: Compilar un paquete como administrador es peligroso. Ejecute yaourt como usuario normal. ==> Creando el paquete: haskell-hashed-storage 0.5.10-1 (vie ene 10 22:00:52 CET 2014) ==> Resolviendo dependencias... ==> Verificando conflictos... ==> Recibiendo fuentes... -> Descargando hashed-storage-0.5.10.tar.gz... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 57658 0 0 142k 0 --:--:-- --:--:-- --:--:-- 142k ==> Validando el archivo fuente con md5sums... hashed-storage-0.5.10.tar.gz ... Aprobado ==> Descomprimiendo fuentes... -> Extrayendo hashed-storage-0.5.10.tar.gz con bsdtar ==> Iniciando build()... Setup.hs:27:3: Warning: In the use of `runTests' (imported from Distribution.Simple, but defined in Distribution.Simple.UserHooks): Deprecated: "Please use the new testing interface instead!" Configuring hashed-storage-0.5.10... Setup: At least the following dependencies are missing: mmap ==0.5.* ==> ERROR: Se produjo un error en build(). Cancelando... ==> ERROR: Makepkg no ha podido compilar haskell-hashed-storage. ==> Reiniciar la compilación de haskell-hashed-storage? [s/N] ==> --------------------------------------------------------- ==> ==> Reiniciar la compilación de darcs? [s/N] ==> ---------------------------------------- ==> ==> Reiniciar la compilación de blink-darcs? [s/N] ==> ---------------------------------------------- ==>

8 17

[arch-general] clients can no longer mount.cifs the '/' samba share from current Arch server (long)
by David C. Rankin 12 Jan '14

12 Jan '14

Guys, Something in current Archlinux prevents clients mounting a root samba share '/' via mount.cifs. Since building a new Arch server a month or so ago, I have been chasing an issue with mount.cifs that prevents the '/' share from being mounted as it always has. This has worked (and continues to work) on all Arch boxes up until this latest box. I have addressed this to the samba list (see thread: [Samba] What in samba 4.1 prevents a '/' share?) After a month of troubleshooting with the samba devs, it seems that the issue may have to do with the way /proc/fs/cifs/SecurityFlags, or some other default is now set in Arch. Others have confirmed the ability to mount '/' shares from servers running samba 4.1.3, with the exact smb.conf settings, so it appears this is Arch specific. I'm not 100% sure if this is samba related or whether it is cifs related, so I am asking here so I can get the bug report right -- if needed. Several bug reports deal with the drop of ntlm security for the kernel as of kernel 3.8 and with differing /proc/fs/cifs/SecurityFlags values -- https://bugs.launchpad.net/ubuntu/+source/cifs-utils/+bug/1113395 (see specifically No. #12 & #15 citing: https://bbs.archlinux.org/viewtopic.php?id=159915) Historically the value of /proc/fs/cifs/SecurityFlags has been set at 0x7 (or not set at all on Arch), but now Arch sets the value to 0x85. Examples: (older Arch box smbd Version 3.6.6) [19:32 nirvana:/etc] # cat /proc/fs/cifs/SecurityFlags cat: /proc/fs/cifs/SecurityFlags: No such file or directory (new Arch box smbd Version 4.1.3) [19:30 phoinix:/home/david/cnf/phoinix/etc] # cat /proc/fs/cifs/SecurityFlags 0x85 I have set /proc/fs/cifs/SecurityFlags to the traditional value of 0x7, but there is still something that prevents the mount from working. I will detail below the config and attempts made to resolve the issue. The bottom line is that all older Arch servers (and openSuSE boxes) I have can successfully share/mount a '/' root samba share, but there is now something in current Arch that prevents this from working. The folks at the samba list are stumped because there is nothing in samba or cifs that has changed that would prevent this from working. The bug reports I've read suggest the cifs/SecurityFlags setting may be involved, but from the testing I've done, I don't know if that makes any difference. Now I need help from you smarter Archers to help figure out what changed that prevents this from working and how to fix it. The current Arch box (hostname phoinix) is a fully updated box (as of 1/6/14) with: # smbd --version Version 3.6.7 # mount.cifs -V mount.cifs version: 5.6 The samba config: The server functions as a standalone server (no PDC, etc..). The smb.conf and share definitions are: Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions [global] workgroup = RLFPLLC server string = Phoinix Samba %v map to guest = Bad User smb passwd file = /etc/samba/smbpasswd log file = /var/log/samba/%m.log max log size = 50 time server = Yes printcap name = /etc/printcap show add printer wizard = No os level = 66 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes idmap config * : backend = tdb admin users = david hosts allow = 192.168.6., 192.168.7., 127. use sendfile = Yes [homes] comment = Home Directories read only = No browseable = No [config] comment = Phoinix Config (Archlinux) path = / valid users = david force user = root force group = root read only = No browseable = No [samba] comment = Phoinix - Law path = /home/samba valid users = @rankin, #, anna force group = rankin read only = No inherit permissions = Yes <snip> Mounting the homes and samba shares work fine and printing via cups works fine. The only issue is mounting the [config] share. The shares are mounted making use of a credentials file with: mount.cifs //phoinix/config /mnt/phx-cfg -v -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm The results of mount showing successful mount of the [homes] and [samba] shares: //phoinix/samba on /mnt/phx type cifs (rw,relatime,vers=1.0,sec=ntlm,cache=loose,unc=\\phoinix\samba,username=david,uid=1000,forceuid,gid=0,noforcegid,addr=192.168.7.16,unix,posixpaths,serverino,acl,noperm,rsize=1048576,wsize=65536,actimeo=1) //phoinix/david on /mnt/phx-david type cifs (rw,relatime,vers=1.0,sec=ntlm,cache=loose,unc=\\phoinix\david,username=david,uid=1000,forceuid,gid=0,noforcegid,addr=192.168.7.16,unix,posixpaths,serverino,acl,noperm,rsize=1048576,wsize=65536,actimeo=1) However, attempting to mount the [config] share results in the error: [18:33 providence:~/tmp/cifs] # mount.cifs //phoinix/config /mnt/phx-cfg -v -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm mount.cifs kernel mount options: ip=192.168.7.16,unc=\\phoinix\config,noperm,uid=1000,user=david,pass=******** mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) I have tried with 'sec=ntlmv2' and 'sec=ntlmssp' which makes no difference. I have tried with/without 'domain=rlfpllc' again no difference. What I need to determine is whether this is a bug or whether this is a configuration issue, and if so, in what? I have captured tcpdump traffic during the mount attempts and they point to smb issuing the error, but I'm not that great at reading packet contents, so I'm not entirely sure. But basically, after successful AndX session setup (Tree Connect AndX Request, Path: \\phoinix\config), the request for \\phoinix\config is made and it is found successfully by the server, but then the server response with (Tree Connect AndX Response, Error: STATUS_ACCESS_DENIED) The full ASCII dump of the packet along with additional testing showing it works on all older servers is included below. If you have ideas or would like me to post additional information, just let me know. I have worked to collect the relevant information from the samba thread, but let me know if you need anything else Arch related from the box. Thanks in advance for any help you can provide. ====== Additional Testing and ASCII dump of STATUS_ACCESS_DENIED packet ====== Testing with other servers I can easily mount the '/' share from any other computer. Here is my 3-computer test setup: On my client (hostname providence) I have: 18:01 providence:~> smbd -V Version 3.6.7 linux 3.5.3-1 cifs-utils 5.6-2 On the server (hostname phoinix) I have: 18:15 phoinix:~> smbd -V Version 4.1.3 linux 3.12.6-1 cifs-utils 6.2-1 On a second older server (hostname nemesis) I have: 18:30 nemesis:~/scr/mnt> smbd -V Version 3.4.5-5.1-2300-SUSE-SL11.0 kernel-pae-2.6.25.20-0.7 cifs-mount-3.4.5-5.1 Mounting the '/' config share from host *providence on nemesis* works fine: 18:31 nemesis:~/scr/mnt> sudo mount.cifs //providence/config /mnt/pv-cfg -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm 18:31 nemesis:~/scr/mnt> l /mnt/pv-cfg total 4 drwxr-xr-x 21 david root 0 2012-09-04 14:41 ./ drwxr-xr-x 14 root root 4096 2013-12-28 18:29 ../ drwxr-xr-x 2 david root 0 2012-09-04 14:50 bin/ drwxr-xr-x 3 david root 0 2012-09-04 14:48 boot/ <snip> Mounting the '/' share from host *nemesis on providence* works fine: 18:37 providence:~/scr/mnt> sudo mount.cifs //nemesis/config /mnt/nm-cfg -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm 18:37 providence:~/scr/mnt> l /mnt/nm-cfg total 4 drwxr-xr-x 21 david root 0 Dec 9 11:24 . drwxr-xr-x 11 root root 4096 Mar 3 2011 .. drwxr-xr-x 2 david root 0 Dec 5 2010 bin drwxr-xr-x 4 david root 0 Mar 8 2010 boot <snip> Mounting the '/' share from host *providence on phoinix* works fine: 18:54 phoinix:~/scr/mnt> sudo mount.cifs //providence/config /mnt/pv-cfg -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm 18:55 phoinix:~/scr/mnt> l /mnt/pv-cfg/ total 4 drwxr-xr-x 21 david root 0 Sep 4 2012 . drwxr-xr-x 9 root root 4096 Dec 28 18:42 .. drwxr-xr-x 2 david root 0 May 13 2011 .config drwxr-xr-x 2 david root 0 Sep 4 2012 bin drwxr-xr-x 3 david root 0 Sep 4 2012 boot <snip> Mounting the '/' share from host *nemesis on phoinix* works fine: 18:55 phoinix:~/scr/mnt> sudo mount.cifs //nemesis/config /mnt/nm-cfg -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm 18:57 phoinix:~/scr/mnt> l /mnt/nm-cfg total 4 drwxr-xr-x 21 david root 0 Dec 9 11:24 . drwxr-xr-x 9 root root 4096 Dec 28 18:42 .. drwxr-xr-x 2 david root 0 Dec 5 2010 bin drwxr-xr-x 4 david root 0 Mar 8 2010 boot <snip> However, attempting the mount of the '/' share from host *phoinix on anything* else fails. The only difference I can see is this is when I'm attempting to mount the share from 4.1.X on anything else: 18:59 nemesis:~/scr/mnt> sudo mount.cifs //phoinix/config /mnt/phx-cfg -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) 18:40 providence:~/scr/mnt> sudo mount.cifs //phoinix/config /mnt/phx-cfg -o username=david,uid=1000,credentials=/home/david/.dcr/mountcfile,noperm mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) The ASCII packet dissection for the STATUS_ACCESS_DENIED packet is: No. Time Source Destination Protocol Length Info 25 3.487933 192.168.7.16 192.168.7.124 SMB 105 Tree Connect AndX Response, Error: STATUS_ACCESS_DENIED Frame 25: 105 bytes on wire (840 bits), 105 bytes captured (840 bits) WTAP_ENCAP: 1 Arrival Time: Jan 6, 2014 17:45:50.826685000 CST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1389051950.826685000 seconds [Time delta from previous captured frame: 0.001539000 seconds] [Time delta from previous displayed frame: 0.001539000 seconds] [Time since reference or first frame: 3.487933000 seconds] Frame Number: 25 Frame Length: 105 bytes (840 bits) Capture Length: 105 bytes (840 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:nbss:smb] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Micro-St_1a:8c:fa (00:21:85:1a:8c:fa), Dst: Dell_22:50:08 (00:11:43:22:50:08) Destination: Dell_22:50:08 (00:11:43:22:50:08) Address: Dell_22:50:08 (00:11:43:22:50:08) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Micro-St_1a:8c:fa (00:21:85:1a:8c:fa) Address: Micro-St_1a:8c:fa (00:21:85:1a:8c:fa) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.7.16 (192.168.7.16), Dst: 192.168.7.124 (192.168.7.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 91 Identification: 0x0398 (920) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0xa728 [correct] [Good: True] [Bad: False] Source: 192.168.7.16 (192.168.7.16) Destination: 192.168.7.124 (192.168.7.124) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 50813 (50813), Seq: 210, Ack: 445, Len: 39 Source port: microsoft-ds (445) Destination port: 50813 (50813) [Stream index: 2] Sequence number: 210 (relative sequence number) [Next sequence number: 249 (relative sequence number)] Acknowledgment number: 445 (relative ack number) Header length: 32 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0x5220 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 290109681, TSecr 203763093 Kind: Timestamp (8) Length: 10 Timestamp value: 290109681 Timestamp echo reply: 203763093 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 24] [The RTT to ACK the segment was: 0.001539000 seconds] [Bytes in flight: 39] NetBIOS Session Service Message Type: Session message (0x00) Length: 35 SMB (Server Message Block Protocol) SMB Header Server Component: SMB [Response to: 24] [Time from request: 0.001539000 seconds] SMB Command: Tree Connect AndX (0x75) NT Status: STATUS_ACCESS_DENIED (0xc0000022) Flags: 0x80 1... .... = Request/Response: Message is a response to the client/redirector .0.. .... = Notify: Notify client only on open ..0. .... = Oplocks: OpLock not requested/granted ...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized .... 0... = Case Sensitivity: Path names are case sensitive .... ..0. = Receive Buffer Posted: Receive buffer has not been posted .... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported Flags2: 0xc003 1... .... .... .... = Unicode Strings: Strings are Unicode .1.. .... .... .... = Error Code Type: Error codes are NT error codes ..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only ...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs .... 0... .... .... = Extended Security Negotiation: Extended security negotiation is not supported .... .0.. .... .... = Reparse Path: The request does not use a @GMT reparse path .... .... .0.. .... = Long Names Used: Path names in request are not long file names .... .... ...0 .... = Security Signatures Required: Security signatures are not required .... .... .... 0... = Compressed: Compression is not requested .... .... .... .0.. = Security Signatures: Security signatures are not supported .... .... .... ..1. = Extended Attributes: Extended attributes are supported .... .... .... ...1 = Long Names Allowed: Long file names are allowed in the response Process ID High: 0 Signature: 0000000000000000 Reserved: 0000 Tree ID: 0 (\\phoinix\config) [Path: \\phoinix\config] [Mapped in: 25] Process ID: 1996 User ID: 14822 Multiplex ID: 3 Tree Connect AndX Response (0x75) Word Count (WCT): 0 Byte Count (BCC): 0 -- David C. Rankin, J.D.,P.E.

2 7

[arch-general] Logind Timing out?
by Steve Holmes 12 Jan '14

12 Jan '14

After updating my 64 bigt Arch system to latest stable releases, I began to have problems with logind services timing out and allowing me to have only one console available to work with. it seems that when I have ntpdate running and use netctl to auto start my wireless profile, these problems occur. When I disable ntpdate.service, then I seem to get my consols back and logind appears to be working OK. I also experienced similar problems when I was trying out netctl-ifplugd with my wired connections. If the cable was plugged in, then all started right up just fine but if I unplugged the cable and rebooted, then the above stated problems also wold occur. Up until today, I was not having these problems. I can't seem to pin down the exact cause of these issues but these began to happen after experimenting with a more dynamic network setup. My ultimate goal is to have both netctl-ifplugd and netctl-auto both running and then I can have the flexibility of switching to a cabled connection if necessary and be able to also dynamically pick up whatever WIFI service I come into. I read the Arch wiki pages about networking so I have most of that working presuably OK now except for these logind issues. How could networking delays cause all the timing problems with logind.service?

1 0

[arch-general] "os-prober" failed to work with "blkid" (util-linux 2.24-2)
by Ken CC 09 Jan '14

09 Jan '14

Hi, It is because the new blkid can now recognize the extened partion, but os-prober relies on the return value "2" (exit_not_found) of blkid to skip processing the extended partition. # fdisk -l ... Device Boot Start End Blocks Id System /dev/sda1 * 63 252847034 126423486 7 HPFS/NTFS/exFAT /dev/sda2 252847035 625137344 186145155 5 Extended /dev/sda5 252847098 253425374 289138+ 83 Linux /dev/sda6 385254828 482913899 48829536 83 Linux ... blkid 2.24-2 --- # blkid /dev/sda2 /dev/sda2: PTTYPE="dos" PARTUUID="28b48ca1-02" # echo $? 0 # blkid -o value -s TYPE /dev/sda2 # no output # echo $? 0 blkid 2.20.0 --- # blkid /dev/sda2 # no output # echo $? 2 # blkid -o value -s TYPE /dev/sda2 # no output # echo $? 2 Affected os-prober code: --- File: /usr/lib/os-probes/50mounted-tests - 8 types="$(fs_type "$partition")" || types=NOT-DETECTED 9 if [ "$types" = NOT-DETECTED ]; then 10 debug "$1 type not recognised; skipping" 11 exit 0 With old blkid, os-prober will just skip here when handling /dev/sda2, but with the current version of blkid, os-prober will go on and try to mount /dev/sda2 with FS types found in the system, which causes lots of errors, even kernel calltrace when trying xfs, on my machine. I think there are three ways to sovlve this: 1. change the way that os-prober detects devices. 2. make blkid return an error code when # blkid -o value -s TYPE /dev/sdaX returns no proper result. 3. use the old version of blkid (util-linux). What do you guys think? -ken

1 0