openbsd-misc mailing list

FromSubjectsort iconDate
Craig Skinner
Excess arguments to dump:
I'm having a wee bit of bother with a korn shell script that drives dump: The guts of the script: dump="${dump} -${level}${dump_flags} ${device} | gzip -9" if [[ ! -z ${encryption} ]]; then dump="${dump} | ${encryption} -pass file:${conf}.passwd -out" else dump="${dump} -o" fi [ ${debug} ] && echo "${dump} ${file}\n" ${dump} ${file} [ ${digest} ] && ${digest} ${file} > ${checksum} # cp locally, overwriting previous file of same name # scp offsite & The output: dump ...
May 11, 4:14 pm 2007
giovanni
msk & watchdog timeout + working idea
hello, until 15 minutes ago I had a nasty ethernet behaviour on my laptop, i.e watchdog timeout forever and ever in tx (rx seems ok for what I can see) I decided to dig into the source and I've enabled a little bit of degugging messages. mskc0 at pci1 dev 0 function 0 "Marvell Yukon 88E8036" rev 0x13 begin mskc_attach mskc_attach: allocate interrupt mskc_reset mskc_reset: sk_csr=4a mskc_reset: sk_link_ctrl=2 mskc_attach: ramsize=4096 (4k), rboff=0 , Yukon-2 FE (0x1): apic 2 int 16 (irq ...
May 11, 2:39 pm 2007
Otto Moerbeek
Re: Compiling programs for multiple CPUs
Depends on how parallelism is achieved in this application. If multiple processes are used, then it can help. If multiple threads are used, then not. I'd say, just try it. -Otto
May 11, 1:59 pm 2007
Siju George
Compiling programs for multiple CPUs
By a lot of help from you and others initially I am a happy current user now :-) I was trying to install the CMU Sphinx speech recognition software ( to convert a few mp3s into text ) on 4.1 current and read this from their website. http://www.speech.cs.cmu.edu/sphinx/tutorial.html ==================================================== On Linux machines, you can set up the scripts to take advantage of multiple CPUs. To do this, edit etc/sphinx_train.cfg, change the line defining the ...
May 11, 12:25 pm 2007
Todd T. Fries
via systems?
I'm looking and probably just blind but haven't found any complete systems using the via c7 esther chipset. Specifically I'm looking for rsa accelleration. I suspect I'm not the only one looking and interested. Thanks, -- Todd Fries .. todd@fries.net _____________________________________________ | \ 1.636.410.0632 (voice) | Free Daemon Consulting, LLC \ 1.405.227.9094 (voice) | http://FreeDaemonConsulting.com \ ...
May 11, 12:17 pm 2007
Andy Hayward
Re: via systems?
Via EPIA EN15000? -- ach
May 11, 12:42 pm 2007
askthelist
Re: ipsec.conf and carp/physical interfaces
ok i misinterpreted the man page, this is what i needed instead... ike esp from a.a.a.0/24 to b.b.b.0/21 local x.x.x.142 peer y.y.y.218 ike esp from x.x.x.142 to b.b.b.0/21 local x.x.x.142 peer y.y.y.218 ike esp from x.x.x.142 to y.y.y.218
May 11, 1:08 pm 2007
askthelist
ipsec.conf and carp/physical interfaces
When using ipsec.conf to set up the vpn on redundant firewalls with carp on the outside interface, I noticed that the session is using the ip of the physical interface and not the ip of the carp interface which the remote end is listening for. When looking in the man pages there are options for local <localip> remote <peerip> but setting this up seems to give me a syntax error. I had this working a few days ago and now I cant seem to figure out what im doing wrong. local x.x.x.142 remote ...
May 11, 11:46 am 2007
Mark Kettenis
dual g4 needed for hackathon
On this years hackathon I'd like to hack more on macppc smp support. For obvious reasons I cannot bring my own machine. Is there anyone in the Calgary or Edmonton area that can loan us a dual g4 machine end may/early june? Mark
May 11, 11:31 am 2007
Tobias Weingartner
Re: Failing to get 1680x1050@60Hz in X
xdpyinfo | grep dim -- [100~Plax]sb16i0A2172656B63616820636420726568746F6E61207473754A[dZ1!=b]salax
May 11, 9:01 am 2007
Jeff Ross
Garbled line in dmesg = flakey hardware?
Hi, I found this in my dmesg this morning after rebooting a server that paniced. (Sorry, no chance to get a trace or ps--I'm still working on getting a serial connection to another box working.) scsibus1 at ami0: 16 targets safte0 at scsibus1 targ 6 lun 0: <SUPER, GEM318, 0> SCSI2 3/processor fixed scsibus2 at ami0: 16 targets safte1 at scsibus2 targ 6 lun 0: <\\240 PER, GEM318, 0> SCSI2 3/processor fixed Over the weekend I had to rebuild the RAID 1 set that lives in the safte1 ...
May 11, 8:00 am 2007
Marcos Laufer
Re: OpenBSD 4.1 install issue??
Looks like i'm miximng kernel and userspace versions because i did get the -release cd and installed it, but it didn' recognize my hardware , it wouldn't boot: http://i175.photobucket.com/albums/w132/winstonwaite/firstScreen.jpg http://i175.photobucket.com/albums/w132/winstonwaite/secondScreen.jpg So i found this thread wich says i should install the latest snapshot . What i didn't consider is that it was not possible to move to -stable from -current. I did tried to move to -stable (compiled ...
May 11, 5:27 am 2007
David Perfors
TightVNC doesn't use non default fonts
I have setup a TightVNC server to work remotely on my OpenBSD box. I can connect successfully. I have installed the artwiz and the terminus fonts. In X (using fluxbox) I can use these fonts, but when I use TightVNC I can't use them. (They don't even show up in the font selector) Any ideas? Something of my installation: Running OpenBSD 4.1 (I had the same problem on 4.0, but I didn't install the fonts correct, I don't have a 4.0 box any more) asterix -wm
May 11, 5:25 am 2007
Alberich de megres
PF and rdr rules
I got my pf set up. All works fine, except rdr rules. simply: pf won't redirect anything to internal servers. I change /etc/sysctl.conf: net.inet.ip.forwarding=1 net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.ip.multipath=1 My scenario is: fw1 -> rl0 - carp / pfsync devs -> rl1 - No ip addr, and vinculed to carp1 ( with external IP ) -> rl2 - Internal lan ip vinculed to carp0 ( with lan gateway ip ) and FW2 on the same way. Nat works fine, but rdr ...
May 11, 1:58 am 2007
Andrey Shuvikov
Re: booting problem
If you post at least output of "fdisk wd0" and "disklabel wd0" commands...
May 11, 7:30 am 2007
Nick Guenther
Re: booting problem
Did you leave 63 sectors free at the start of the disk? This seems like something is getting overwritten poorly. -Nick
May 10, 11:15 pm 2007
alicornio
booting problem
Hi all I can't boot my system after the instalation. My OS can't be finded. I follow the faq (4.12.2 - My i386 won't boot after install) and nothing change. But I can boot with CD typing "b hd0a:\bsd". When I tried install again I saw a warning in disklabel stage: WARNING: inode blocks/cyl group (155) >= data blocks (5) in last cylinder group. This implies 188 sector(s) cannot be allocated. What's happening? How I can solve this problem? thx all Thiago
May 10, 9:40 pm 2007
Otto Moerbeek
Re: booting problem
This is not a problem. It's just that a very small part o f your disk Since you left out any details about your setup, we cannot help you with the booting problem. -Otto
May 10, 11:42 pm 2007
arnuld
voice chat software
anybody usinf a voice chat software on OpenBSD. i don't see any voice-chat software for OpenBSD. any port of Ekiga ? -- http://arnuld.blogspot.com/
May 10, 8:33 pm 2007
Joachim Schipper
Re: OpenBSD 4.1 install issue??
You can go to -stable when 4.2 is tagged, and not before. Of course, if you know what you are doing, you could try to backport the change you need to -stable... Joachim -- PotD: x11/xfce4/xfce4-clipman - clipboard history plugin for the xfce4 panel
May 11, 2:38 am 2007
Marcos Laufer
Re: OpenBSD 4.1 install issue??
I upgraded to stable , rebooted with the new kernel, and i was stuck with this uvm_page_physload problem again. It looks like moving to stable from this snapshot is not possible . I had to go back to the snapshot kernel . Will it be possible to move to stable from this point? I really wouldn't like to have a production server running -current Has anyone sorted this out? Marcos ----- Original Message ----- From: "Marcos Laufer" <marcos@ipv4networks.com> To: "Rob Waite" ...
May 10, 7:25 pm 2007
Emilio Perea
Re: make obj broken?
It doesn't look like any of the cvs mirrors have recovered. If you think "src" is bad, take a look at "xenocara" /dev/wd1i 1029630 558590 419560 57% /usr/src /dev/wd1n 2063222 630 1959432 0% /usr/xenocara
May 10, 7:12 pm 2007
Edd Barrett
make obj broken?
Hi Guys, Just checked out -current sources from rt.fm. make obj throws up errors: ===> usr.bin make: don't know how to make obj. Stop in /usr/src/usr.bin. *** Error code 2 Maybe you already fixed this, but the mirror hasnt recieved it yet. -- Best Regards Edd --------------------------------------------------- http://students.dec.bournemouth.ac.uk/ebarrett/
May 10, 6:43 pm 2007
askthelist
Re: Redundant Firewalls, CARP + IPSEC + SASYNCD
Ok after trying this again, I have no problem establishing the VPN connection and it stays up for hours. However after an undetermined amount of time(hours), connections are dropped and the SA's do not show up when looking at the ipsecctl -sa or netstat -nrf encap. Same situation happens whether or not sasyncd is running. I've tried both the isakmpd.conf & ipsec.conf configurations with the same result. Here are the relevant configs. # A-isakmpd.conf [General] Listen-On= ...
May 10, 6:19 pm 2007
Edd Barrett
Re: pkg_add after manually installed stuff
Hi Darin, My advice to you is: If you must build things manually: always do ./configure --prefix=/opt/ourbuilds or some path that will not conflict with ports. It makes my life easier. -- Best Regards Edd --------------------------------------------------- http://students.dec.bournemouth.ac.uk/ebarrett/
May 10, 6:06 pm 2007
Darrin Chandler
pkg_add after manually installed stuff
Lately, mostly with ruby/RoR stuff I've manually installed some things such as gems. Later, there were ports/packages for these things. Using pkg_add then fails because files already exists. I've looked at various -F options, but none that I've tried work for this situation. To be able to install the package, I've had to go through the error output of pkg_add and manually remove any "conflicting" files (ok, I scripted it). Is there an easier way that I'm overlooking? Would this be worth ...
May 10, 5:29 pm 2007
Marc Espie
Re: pkg_add after manually installed stuff
Known issue. Grabbing stuff which has the same md5 is reasonable, wiping out stuff if it's not under pkg control as well... Right now, I'm rather into removing extra stuff from pkg_add. Then I'll probably add some more...
May 11, 12:15 am 2007
Joachim Schipper
Re: Insecurity problem?
Can you use debug 'echo' statements or somesuch to find out what command causes it? It could indeed be find, although I haven't ever seen this error message from find... Joachim -- TFMotD: rndc (8) - name server control utility
May 11, 2:36 am 2007
Stuart Henderson
Re: Insecurity problem?
from the output before the error, it must be 'Checking setuid/setgid files and devices': find / \( ! -fstype local \ -o -fstype procfs -o -fstype afs -o -fstype xfs \) -a -prune -o \ -type f -a \( -perm -u+s -o -perm -g+s \) -print0 -o \ ! -type d -a ! -type f -a ! -type l -a ! -type s -a ! -type p [and -print0 and a pipeline, but that's the important bit] Rod, you could try running this under ktrace and see what happens before the 'No such file or directory' ...
May 11, 2:54 am 2007
Diana Eichert
Re: OpenBSD serial terminal binary programs
sure you can, but the hardware boot ROM has to support it. I ran most of my non-intel systems headless for years. If you're running i386/amd64 boxes a lot have a BIOS setting called console "redirection" or something similar. While it works it's no where near as friendly as the non-intel workstation/server ROM monitors. However as more and more intel/amd boxes showed up in lights out data centers the server manufactures started supporting real remote management solutions.
May 11, 7:17 am 2007
Zach Keatts
Re: OpenBSD serial terminal binary programs
Fortunately this is a sparc machine, so I do not believe I will need to manually set the BIOS. At least I hope not. When you mentioned setting the BIOS on an i386 to do a redirection, this makes me think that this initial step is not a headless operation. My goal is to do the entire install etc. headless (since I am without a monitor, but have access to a bsd laptop + serial). I will be playing around with this tonight so I should know more soon. Bob, Diana, and Stuart -- Thanks for the ...
May 11, 9:38 am 2007
Zach Keatts
Re: OpenBSD serial terminal binary programs
Can you use cu/tip to start a session with a box with no kernel to start a remote install? The man page says "cu/tip establishes a full-duplex connection to another machine, giving the appearance of being logged in directly on the remote CPU." This part leads me to believe that it should be no problem, but reading further, "It goes with-out saying that you must have a login on the machine (or equivalent) to which you wish to connect." Makes me think some sort of OS has to be present ...
May 11, 6:51 am 2007
Clint Pachl
Re: OpenBSD serial terminal binary programs
Hey man, not all i386 "suck so hard." I have some old IBM xSeries servers that don't even have PS/2 or VGA ports. The only way to get in the machine is through the first serial port or IBM's proprietary daisy chain connections (which is cool if you want to spend some bucks for cables and hardware).
May 11, 3:08 pm 2007
Matthew Weigel
Re: OpenBSD serial terminal binary programs
Then everything will work fine. It's specifically i386 that sucks so hard. -- Matthew Weigel hacker unique@idempot.net
May 11, 9:48 am 2007
Stuart Henderson
Re: OpenBSD serial terminal binary programs
You should generally be ok with sparc hardware, as long as you have a machine on the same network segment that can serve as a boot server to get things started. Start with diskless(8) - some of this is only needed when running the OS with root and swap mounted over NFS and is not necessary when you just want to boot bsd.rd to install onto local disk. To netboot most arch you'll be modifying /etc/{ethers,bootparams,hosts} and setting up tftpd if you don't have one already. For PCs ...
May 11, 7:11 am 2007
Bob Beck
Re: OpenBSD serial terminal binary programs
Typically for OpenBSD, you need to set the PC bios on an i386 machine to do console redirection at 9600 baud (8N1) until the OS boots and *NOT* do it afterwards. This is because if it does it afterwards then typically the bios eats com0 and you can't use it from OpenBSD for a real serial tty. The trick is finding the right settings in the stupid bios. and of course since PC bios's are based on 15 years of programming by monkeys with typewriters it can be a bit of an effort sometimes, ...
May 11, 9:07 am 2007
Artur Grabowski
Re: cvsync broken?
That's the usual problem with mirrors. They are also very good at mirroring errors. :) //art
May 11, 1:30 am 2007
Edd Barrett
Re: OpenOffice 2.2.0 packages for -current ?
hi, there are pkg's built every 3 or so days for -current. -- Best Regards Edd --------------------------------------------------- http://students.dec.bournemouth.ac.uk/ebarrett/
May 10, 6:23 pm 2007
Alex Holst
Re: Failing to get 1680x1050@60Hz in X
Thanks for commenting; this is the relevant output from 915resolution: tori$ sudo 915resolution -l | grep 1680 Mode 3a : 1680x1050, 8 bits/pixel Mode 3c : 1680x1050, 8 bits/pixel Mode 4b : 1680x1050, 16 bits/pixel Mode 4d : 1680x1050, 32 bits/pixel Mode 5a : 1680x1050, 24 bits/pixel Mode 5c : 1680x1050, 32 bits/pixel With those settings, I get 1280x1024@60Hz - but again xwininfo -root shows that my actual desktop size is 1680x1050. -- I prefer the dark of the night, after midnight ...
May 11, 12:09 am 2007
Jimmy Mitchener
Re: Failing to get 1680x1050@60Hz in X
Have you checked your HorizSync/VertRefresh? I'd be willing to bet those are not correct. Check your display's specs. My Samsung 206BW uses the following: HorizSync 30 - 81 VertRefresh 56 - 75 Jimmy.
May 11, 1:14 am 2007
sonjaya
Re: vpn in OBSD 4.1
so i must using ipsec for security reason , how about the client ( such us Microsoft ) can they use ipsec too. -- sonjaya http://sicute.blogspot.com
May 11, 1:53 am 2007
Joachim Schipper
Re: vpn in OBSD 4.1
Yes, but don't use the stock IPsec client. Really, the archives are full of this discussion. Please take a good look there, first; if you encounter any problems, you are welcome to ask, but *please* search the archive first. Joachim -- TFMotD: release (8) - building an OpenBSD release
May 11, 2:34 am 2007
Lars D. Noodén
Re: vpn in OBSD 4.1
It's not a funny joke to be recommending PPTP to anybody. Some may miss the sarcasm and actually try to deploy it. Any further amount of reading (if done) would reveal that PPTP can't really be called secure and should be avoided. Its successor, L2TP, can be improved somewhat, at least the connections, by tunnelling over SSL. But then why not cut out the middleman and use SSL to begin with? Fewer parts that way. IPsec and SSL are your two options: ...
May 11, 12:43 am 2007
Lars D. Noodén
Re: vpn in OBSD 4.1
IPsec or SSL. You may wish to try IPsec with IPv6. That will future-proof your VPN, at I asked around a few weeks ago and have heard that MS systems can use IPsec. However, you will want to avoid any clients built into MS Windows and use instead the ones that come with the VPN or maybe third party ones. KVpnc is supposed to work with OpenVPN. However, by connecting MS Windows machines into your VPN you neutralize many of the security benefits that you may have in place. Not counting the ...
May 11, 5:33 am 2007
Daniel Bolgheroni
Re: VNC server on OpenBSD (error allocating memory)
Are you using -current ports? Patched again but still getting the same errors. Thanks.
May 11, 12:47 am 2007
mickey
Re: Softupdates question
you can loose much more data w/o softdeps _and_ get your filesystem horribly broken. -- paranoic mickey (my employers have changed but, the name has remained)
May 11, 5:12 am 2007
askthelist
Re: BGP + Multiple Providers + Redundant Firewalls
henning, you mentioned you are running redundant firewalls running bgp to multiple providers. my question is are you taking incoming traffic on both links or is your bgp configured in an active failover scenario? And do you use iBgp between the firewalls to control outgoing traffic up thru both links? Thanks.
May 11, 12:00 pm 2007
Diana Eichert May 11, 10:20 am 2007
previous daytodaynext day
May 10, 2007May 11, 2007May 12, 2007