<para>With the adoption of FreeBSD, there was almost no additional

    <para>With the adoption of FreeBSD, there was almost no additional

      effort necessary to setup a working Apache, PHP and MySQL

      effort necessary to setup a working Apache, PHP and MySQL

      environment in minutes. Even the upgrades from PHP4 to PHP5 were

      environment in minutes. Even the upgrades from PHP4 to PHP5 were

      cases, and permitted us to do things like compress text and html

      cases, and permitted us to do things like compress text and html

      contents in Apache with just a few lines of documentation. In

      contents in Apache with just a few lines of documentation. In

      addition, we have experienced excellent performance and

      addition, we have experienced excellent performance and

      entering <ulink url="http://localhost:631"></ulink> in the

      entering <ulink url="http://localhost:631"></ulink> in the

      browser's URL bar.  If the <application>CUPS</application> server

      browser's URL bar.  If the <application>CUPS</application> server

      is on another machine on the network, substitute the server's

      is on another machine on the network, substitute the server's

      <hostid>localhost</hostid>.  The <application>CUPS</application>

      <hostid>localhost</hostid>.  The <application>CUPS</application>

      web interface is fairly self-explanatory, as there are sections

      web interface is fairly self-explanatory, as there are sections

      for managing printers and print jobs, authorizing users, and more.

      for managing printers and print jobs, authorizing users, and more.

      listed below.  Please note that this sample

      listed below.  Please note that this sample

      <filename>cupsd.conf</filename> file sacrifices security for

      <filename>cupsd.conf</filename> file sacrifices security for

      easier configuration; once the administrator successfully

      easier configuration; once the administrator successfully

      configures the clients, it is advisable to revisit this

      configures the clients, it is advisable to revisit this

      configuration file and begin locking down access.</para>

      configuration file and begin locking down access.</para>

      <para>Most keyboard maps should already be set up correctly. I.e: If you

      <para>Most keyboard maps should already be set up correctly. I.e: If you

	have a german keyboard and your Umlaut keys are working, you can

	have a german keyboard and your Umlaut keys are working, you can

	safely skip this section since the keyboard already maps whatever key

	safely skip this section since the keyboard already maps whatever key

	    Gr</keycap><keycap>e</keycap></keycombo>) to decimal value 164.

	    Gr</keycap><keycap>e</keycap></keycombo>) to decimal value 164.

	If running into problems, the best way to check is to take a look at

	If running into problems, the best way to check is to take a look at

	<filename>/usr/share/syscons/keymaps/*.kbd</filename>. The format of 

	<filename>/usr/share/syscons/keymaps/*.kbd</filename>. The format of 

    </legalnotice>

    </legalnotice>

    <abstract>

    <abstract>

	of an LDAP server (principally an <application>OpenLDAP</application>

	of an LDAP server (principally an <application>OpenLDAP</application>

	server) for authentication on &os;.  This is useful for situations

	server) for authentication on &os;.  This is useful for situations

	where many servers need the same user accounts, for example as a

	where many servers need the same user accounts, for example as a

      <title>Entries in the Database</title>

      <title>Entries in the Database</title>

      <para>Authentication against an LDAP directory is generally

      <para>Authentication against an LDAP directory is generally

	This is done by establishing a <quote>simple</quote>

	This is done by establishing a <quote>simple</quote>

	bind on the directory with the user name supplied.  If there is an

	bind on the directory with the user name supplied.  If there is an

	entry with the <literal>uid</literal> equal to the user name and

	entry with the <literal>uid</literal> equal to the user name and

uid: tuser

uid: tuser

cn: tuser</programlisting>

cn: tuser</programlisting>

	system accounts; you can configure whatever number you wish here,

	system accounts; you can configure whatever number you wish here,

	as long as it's less than 65536.</para>

	as long as it's less than 65536.</para>

	<para>With this configuration you should be able to authenticate

	<para>With this configuration you should be able to authenticate

	  a user against an LDAP directory.

	  a user against an LDAP directory.

	  <application>PAM</application> will perform a bind with your

	  <application>PAM</application> will perform a bind with your

	  <application>SSH</application> to allow access.</para>

	  <application>SSH</application> to allow access.</para>

	<para>However it is not a good idea to allow

	<para>However it is not a good idea to allow

      <option>-signkey</option>:</para>

      <option>-signkey</option>:</para>

    <example id="ca-sign">

    <example id="ca-sign">

      <screen>&prompt.user; <userinput>openssl x509 -req -days 1024 \

      <screen>&prompt.user; <userinput>openssl x509 -req -days 1024 \

-in ldap-server-one.csr -CA root.crt -CAkey root.key \

-in ldap-server-one.csr -CA root.crt -CAkey root.key \

    </orderedlist>

    </orderedlist>

  </sect1>

  </sect1>

</article>

</article>

	be usable these days.</para>

	be usable these days.</para>

      <para>&os; development happens in a central CVS repository where only

      <para>&os; development happens in a central CVS repository where only

	in &os;	nomenclature called -CURRENT, and RELENG_X branches, where X

	in &os;	nomenclature called -CURRENT, and RELENG_X branches, where X

	stands for a number indicating a major version of &os;.  As of

	stands for a number indicating a major version of &os;.  As of

	December 2006, there are development branches for 6.X development

	December 2006, there are development branches for 6.X development

	  <title>Atomic operations and memory barriers</title>

	  <title>Atomic operations and memory barriers</title>

	  <para>Atomic operations are implemented through a set of functions

	  <para>Atomic operations are implemented through a set of functions

	    with respect to external events (interrupts, preemption, etc.).

	    with respect to external events (interrupts, preemption, etc.).

	    Atomic operations can guarantee atomicity just on small data types

	    Atomic operations can guarantee atomicity just on small data types

	    (in the magnitude order of the <literal>.long.</literal>

	    (in the magnitude order of the <literal>.long.</literal>

	    internal to VFS.  The &man.namei.9; syscall can cope with symlinks,

	    internal to VFS.  The &man.namei.9; syscall can cope with symlinks,

	    absolute and relative paths.  When a path is looked up using

	    absolute and relative paths.  When a path is looked up using

	    &man.namei.9; it is inputed to the name cache.  This behaviour can

	    &man.namei.9; it is inputed to the name cache.  This behaviour can

	    performance is very critical.</para>

	    performance is very critical.</para>

	</sect4>

	</sect4>

	  unused.  Segments are either stored in a global GDT table or in a

	  unused.  Segments are either stored in a global GDT table or in a

	  local LDT table.  LDT is accessed via an entry in the GDT.  The

	  local LDT table.  LDT is accessed via an entry in the GDT.  The

	  LDT can store more types of segments.  LDT can be per process.

	  LDT can store more types of segments.  LDT can be per process.

      </sect3>

      </sect3>

      <sect3 id="linux-i386">

      <sect3 id="linux-i386">

	  fast (the condition variables will probably end up being implemented

	  fast (the condition variables will probably end up being implemented

	  using signals, i.e. not fast) and simple.  In 1:1 model, the

	  using signals, i.e. not fast) and simple.  In 1:1 model, the

	  situation is also quite clear - the threads must be synchronized

	  situation is also quite clear - the threads must be synchronized

	  performed).  The mixed M:N scenario just combines the first and

	  performed).  The mixed M:N scenario just combines the first and

	  second approach or rely solely on kernel.  Threads synchronization is

	  second approach or rely solely on kernel.  Threads synchronization is

	  a vital part of thread-enabled programming and its performance can

	  a vital part of thread-enabled programming and its performance can

	  performed, is.  When the <varname>filename</varname> parameter is

	  performed, is.  When the <varname>filename</varname> parameter is

	  absolute <varname>dirfd</varname> is ignored but when the path to

	  absolute <varname>dirfd</varname> is ignored but when the path to

	  the file is relative, it comes to the play.  The

	  the file is relative, it comes to the play.  The

	  the relative pathname is checked.  The <varname>dirfd</varname>

	  the relative pathname is checked.  The <varname>dirfd</varname>

	  parameter is a file descriptor of some directory or

	  parameter is a file descriptor of some directory or

	  <literal>AT_FDCWD</literal>.  So for example the

	  <literal>AT_FDCWD</literal>.  So for example the

	  introduce a small infrastructure.  We have the ldebug facility, which

	  introduce a small infrastructure.  We have the ldebug facility, which

	  tells whether a given syscall should be debugged (settable via a

	  tells whether a given syscall should be debugged (settable via a

	  sysctl).  For printing we have LMSG and ARGS macros.  Those are used

	  sysctl).  For printing we have LMSG and ARGS macros.  Those are used

      </sect3>

      </sect3>

    </sect2>    

    </sect2>    

  </sect1>

  </sect1>

	the &linux; programs included in &os; Ports Collection with

	the &linux; programs included in &os; Ports Collection with

	Fedora Core 4 at 2.6.16 and there are some rudimentary

	Fedora Core 4 at 2.6.16 and there are some rudimentary

	reports of success with Fedora Core 6 at 2.6.16.  The

	reports of success with Fedora Core 6 at 2.6.16.  The

	some further testing of the emulation layer and giving us some more

	some further testing of the emulation layer and giving us some more

	hints where we should put our effort in implementing missing

	hints where we should put our effort in implementing missing

	stuff.</para>

	stuff.</para>

	the &os; Handbook: <ulink

	the &os; Handbook: <ulink

	  url="&url.base;/doc/en_US.ISO8859-1/books/handbook/packages-using.html">Using the Packages System</ulink>.</para>

	  url="&url.base;/doc/en_US.ISO8859-1/books/handbook/packages-using.html">Using the Packages System</ulink>.</para>

    </sect2>

    </sect2>

    <sect2 id="ports">

    <sect2 id="ports">

      <title>Ports</title>

      <title>Ports</title>

	<listitem><simpara>You can apply your own patches if you are so

	<listitem><simpara>You can apply your own patches if you are so

	  inclined.</simpara></listitem>

	  inclined.</simpara></listitem>

      </itemizedlist>

      </itemizedlist>

      <para>If you do not have any special requirements, packages will

      <para>If you do not have any special requirements, packages will

	probably suit your situation just fine.  If you may ever need to

	probably suit your situation just fine.  If you may ever need to

	customize, ports are the way to go.  (And remember, if you

	customize, ports are the way to go.  (And remember, if you

      <filename>/etc/rc.conf</filename>.  Also, when installing additional

      <filename>/etc/rc.conf</filename>.  Also, when installing additional

      applications be sure to review the documentation to determine how to

      applications be sure to review the documentation to determine how to

      enable any associated services.</para>

      enable any associated services.</para>

    <para>The following snippet from <filename>/etc/rc.conf</filename> enables

    <para>The following snippet from <filename>/etc/rc.conf</filename> enables

      &man.sshd.8; and <application>Apache 2.2</application>.  It also

      &man.sshd.8; and <application>Apache 2.2</application>.  It also

      specifies that <application>Apache</application> should be started

      specifies that <application>Apache</application> should be started

      system):</para>

      system):</para>

    <screen>&prompt.root; <userinput><replaceable>/etc/rc.d/sshd</replaceable> start</userinput></screen>

    <screen>&prompt.root; <userinput><replaceable>/etc/rc.d/sshd</replaceable> start</userinput></screen>

    <para>If a service has not been enabled it can be started from the

    <para>If a service has not been enabled it can be started from the

      command line using <option>forcestart</option>:</para>

      command line using <option>forcestart</option>:</para>

    <screen>&prompt.root; <userinput><replaceable>/etc/rc.d/sshd</replaceable> forcestart</userinput></screen>

    <screen>&prompt.root; <userinput><replaceable>/etc/rc.d/sshd</replaceable> forcestart</userinput></screen>

  </sect1>

  </sect1>

        media: Ethernet autoselect (1000baseTX <full-duplex>)

        media: Ethernet autoselect (1000baseTX <full-duplex>)

        status: active</screen>

        status: active</screen>

    </sect2>

    </sect2>

    <sect2 id="ipaddress">

    <sect2 id="ipaddress">

      <title>IP Configuration</title>

      <title>IP Configuration</title>

    <para>Like <application>IPTABLES</application> in &linux;, &os; also offers

    <para>Like <application>IPTABLES</application> in &linux;, &os; also offers

      a kernel level firewall; actually &os; offers three firewalls:</para>

      a kernel level firewall; actually &os; offers three firewalls:</para>

    <itemizedlist>

    <itemizedlist>

      <listitem><simpara><ulink url="&url.base;/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html">IPFIREWALL</ulink></simpara></listitem>

      <listitem><simpara><ulink url="&url.base;/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html">IPFIREWALL</ulink></simpara></listitem>

      <listitem><simpara><ulink url="&url.base;/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html">IPFILTER</ulink></simpara></listitem>

      <listitem><simpara><ulink url="&url.base;/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html">IPFILTER</ulink></simpara></listitem>

    <para>Hopefully this document has provided you with enough to get

    <para>Hopefully this document has provided you with enough to get

      started with &os;.   Be sure to take a look at the <ulink

      started with &os;.   Be sure to take a look at the <ulink

	url="&url.base;/doc/en_US.ISO8859-1/books/handbook/index.html">&os;&nbsp;Handbook</ulink>

	url="&url.base;/doc/en_US.ISO8859-1/books/handbook/index.html">&os;&nbsp;Handbook</ulink>

      the many topics not covered in this document.</para>

      the many topics not covered in this document.</para>

  </sect1>

  </sect1>

</article>

</article>

      <filename>/usr/ports/Tools/portbuild/scripts/</filename>.</para>

      <filename>/usr/ports/Tools/portbuild/scripts/</filename>.</para>

    <para>Typically, incremental builds are done that use previous

    <para>Typically, incremental builds are done that use previous

      load on the mirrors.  Full builds are usually only done:</para>

      load on the mirrors.  Full builds are usually only done:</para>

    <itemizedlist>

    <itemizedlist>

		specific input then include an example of that input if

		specific input then include an example of that input if

		possible, and include both the actual and the expected

		possible, and include both the actual and the expected

		output.  If this data is large or cannot be made public,

		output.  If this data is large or cannot be made public,

		same issue and that can be included within the PR.</para>

		same issue and that can be included within the PR.</para>

	    </listitem>

	    </listitem>

      <listitem><para>On your first pass through a split it is best to

      <listitem><para>On your first pass through a split it is best to

        fake the copying of packages and distfiles.  This will save

        fake the copying of packages and distfiles.  This will save

        make sure things fit, etc.  In the

        make sure things fit, etc.  In the

	<filename>oneshot.pl</filename> set the <varname>fake</varname>

	<filename>oneshot.pl</filename> set the <varname>fake</varname>

	variable to 1 and instead of actually copying the files it will

	variable to 1 and instead of actually copying the files it will

	  <para>When two devices that are both DTE or both DCE must be

	  <para>When two devices that are both DTE or both DCE must be

	    connected together without a modem or a similar media

	    connected together without a modem or a similar media

	    NULL modem electrically re-arranges the cabling so that

	    NULL modem electrically re-arranges the cabling so that

	    the transmitter output is connected to the receiver input

	    the transmitter output is connected to the receiver input

	    on the other device, and vice versa.  Similar translations

	    on the other device, and vice versa.  Similar translations

    <para>ESDI is an acronym that means Enhanced Small Device

    <para>ESDI is an acronym that means Enhanced Small Device

      Interface. It is loosely based on the good old ST506/412

      Interface. It is loosely based on the good old ST506/412

      interface originally devised by Seagate Technology, the makers

      interface originally devised by Seagate Technology, the makers

    <para>The acronym says Enhanced, and rightly so.  In the first

    <para>The acronym says Enhanced, and rightly so.  In the first

      place the speed of the interface is higher, 10 or 15

      place the speed of the interface is higher, 10 or 15

	  <screen>&prompt.root; <userinput>mt -f /dev/st0ctl.0 blocksize 1024</userinput></screen>

	  <screen>&prompt.root; <userinput>mt -f /dev/st0ctl.0 blocksize 1024</userinput></screen>

	  <para>Before using a mini cartridge for the first time, the

	  <para>Before using a mini cartridge for the first time, the

	    earlier:</para>

	    earlier:</para>

	  <screen>&prompt.root; <userinput>/sbin/scsi -f /dev/rst0.ctl -s 600 -c "4 0 0 0 0 0"</userinput></screen>

	  <screen>&prompt.root; <userinput>/sbin/scsi -f /dev/rst0.ctl -s 600 -c "4 0 0 0 0 0"</userinput></screen>