login
Header Space

 
 

openbsd-misc mailing list

FromSubjectsort iconDate
Kareem Dana
sendmail reject and access_db question
Our domain gets e-mails from Company A, but as the log below shows they are rejected because the Message-ID field is invalid: Aug 28 14:21:44 grimace sm-mta[15540]: STARTTLS=server, relay=host234.companya.com [65.218.114.XXX], version=TLSv1/SSLv3, verify=FAIL, cipher=EDH-DSS-DES-CBC3-SHA, bits=168/168 Aug 28 14:21:44 mail sm-mta[15540]: l7SJLhXB015540: ruleset=CheckMessageId, arg1=<9b8e85b6-da30-4786-9d24-217d43a0ddf2>, relay=host234.companya.com [65.218.114.XXX], reject=553 5.0.0 Header Err...
Aug 28, 6:55 pm 2007
Andreas Bihlmaier
sendmail WANT_SMTPAUTH=yes broken in -current
Hello misc@, today my long-working automatic installer broke because sendmail doesn't compile, or to be more exact install with WANT_SMTPAUTH anymore. How to reproduce? pkg_info | grep -i sasl cyrus-sasl-2.1.22p1 <snip> echo "pwcheck_method: saslauthd" > /usr/local/lib/sasl2/Sendmail.conf \ || return 1 echo "pwcheck_method: saslauthd" > /usr/local/lib/sasl2/Cyrus.conf \ || return 1 chmod 444 /usr/local/lib/sasl2/Sendmail.conf \ /usr/local/lib/sasl2/Cyrus.conf || ret...
Aug 28, 5:24 pm 2007
Paolo Supino
Re: trying to compile frickin pptp proxy
Hi Thank you!!! I had the feeling that the problem is in the Makefile.OpenBSD, but didn't know how to fix it. Doing what you suggested below solved the problem and I'm now able to build frickin proxy. Now I have to make it work ... TIA Paolo
Aug 28, 5:02 pm 2007
c l
Re: openbsd instead of cisco vpn client
I've successfully built a site to site vpn between openbsd and cisco gear, both the 3000 series concentrators and asa 5520's. This might help. http://marc.info/?l=openbsd-misc&m=117242498422792&w=2 This details my setup that finally worked. http://marc.info/?l=openbsd-misc&m=117245629704699&w=2 Otherwise the vpnc client in ports works fine to connect one openbsd box to a cisco vpn. Good luck. _________________________________________________________________ Connect to t...
Aug 28, 5:00 pm 2007
Vim Visual
lenovo x61s bsd.mp Obsd 4.2 difficulties et al.
Hi, I am having a couple of issues with obsd on the lenovo x61s... especially the lackage of wireless support, but the driver (Intel 4965AGN) should be ready in 1-2 weeks. I'd like to ask you whether you see some obvious error. I installed -current from a snapshot: uname -a OpenBSD arktomis.bautzi.de 4.2 GENERIC#374 i386 0) The worst problem is when I boot with bsd.mp... the boot process freezes and the last lines I get are as shown in this picture: www.aei.mpg.de/~pau/BSDMP.jpg dme...
Aug 28, 4:48 pm 2007
Jason George
Re: FOSS Open Hardware Documentation
We have Kettenis. As long as I keep tossing him edge cases of breakage on Ultrasparc machines and he digs into finding out what's going on, we keep making progress. All in due time, but the magic doesn't happen overnight.
Aug 28, 3:59 pm 2007
Vim Visual
Re: OpenBSD Berlin?
Last message regarding OpenBSD Berlin Gabriel set up a mailing list. if you are interested, join it: Mailing list for OpenBSD in Berlin : ============================= --> http://www.abc.se/mailman/listinfo/openbsd-berlin <-- Cheers, Pau PS: Gabriel, did you get my emails re last meeting?
Aug 28, 3:57 pm 2007
Rolf Sommerhalder
dmesg amd64-current on Sun Fire X4600 M2
Thanks for all posts with dmesgs from Sun Fire X2100 / X4100 / X4200 (although most without M2 suffix). They helped us in our purchasing decision of several such servers with M2 suffix. Please find below the dmesg of amd64.mp-current (snapshot 23-Aug-2007) on a Sun Fire X4600 M2 which is equipped with four dual-core Opteron 8220 CPU, 32 GB of RAM and four built-in NICs. Currently, Sun has a special where you get three X4600 M2s for the price of two. We purchased such a "multipack" to run a large,...
Aug 28, 1:40 pm 2007
Daniel Ouellet
Re: dmesg amd64-current on Sun Fire X4600 M2
Sadly, the only problem is that you will not be able to use that much memory here.
Aug 28, 1:56 pm 2007
Paolo Supino
trying to compile frickin pptp proxy
Hi I'm trying to compile frickin pptp proxy on an OpenBSD 4.1 system. The compilation fails with the following errors: g++ -Wall -g -O2 -I/home/paolo/src/frickin/include -L/home/paolo/src/frickin/lib -o frickin2 main.o logger.o configuration.o session.o listener.o entity.o server.o client.o call.o rfc2637.o grehandler.o exception.o nat.o util.o -pthread -lconfig++ g++: main.o: No such file or directory g++: logger.o: No such file or directory g++: configuration.o: No such file or directory ...
Aug 28, 1:03 pm 2007
Marmotic Marvel
Re: trying to compile frickin pptp proxy
Maybe they're being created in [somewhere]/obj. Look there; try deleting [somewhere]/obj and recompile. Something is probably goofy in the Makefile. Something is all "fricked" up with "frickin" beyond the developer's subadolescent vocabulary choices. (The word is mildly offensive in English.) Try "find /home/paolo/src/frickin | grep grehandler.o" to find where those .o's are "frickin" going. Maybe the developer intended to use "frickin" gmake. Dave -- "America ... might bec...
Aug 28, 2:32 pm 2007
Lars Noodén
Re: trying to compile frickin pptp proxy
You may want to reconsider the experiment with PPTP. It's very difficult to deal with and there appear to be serious problems with the protocol itself, even in later versions: http://www.schneier.com/pptp-faq.html IPsec and SSL are your two serious options: http://www.vpnc.org/vpn-standards.html -Lars
Aug 28, 1:33 pm 2007
Paolo Supino
Re: trying to compile frickin pptp proxy
Hi Lars I know about the limitation and their implications, but unfortunately I don't control the other peer and have to live with what I'm given. TIA Paolo
Aug 28, 1:44 pm 2007
Pieter Verberne
Umass0 Phase Error, residue=0
Hi, I'm trying to backup my music collection on a msdos/fat formatted external harddrive. After copying some files, the process 'hangs'. I'm copying with xfe (gui-file manager) but cp does the same. I'm not sure when the error exactly occurs. It might be when a specific file is being operating on but I'm absolutly not sure. $ sudo disklabel /dev/sd0c disklabel: warning, DOS partition table with no valid OpenBSD partition # /dev/sd0c: type: SCSI disk: SCSI disk label: 1600BEVExternal flag...
Aug 28, 11:00 am 2007
frantisek holop
Re: Umass0 Phase Error, residue=0
i have met Mr residue a couple of times as well. i think i even asked about it on the list. also with disks/devices that contain msdos partitions. i think once it was clearly when i moved my external disk, and perhaps the cable moved in a wrong way, i catalogued it as a hw issue. a couple of times it happened when i finished copying stuff to my iriver t10 and tried to unmount it. but the files were there... i only write this so that we have something in the archives about it. sorry i can...
Aug 28, 11:24 am 2007
Terry Aug 28, 9:15 am 2007
Jack J. Woehr
Re: OT Strange Punishment
It just shows how these laws are designed to protect Microsoft at the expense of everyone else. Microsoft has been very effective over the past decades at lobbying congress to "enclose the commons" of computer science. There is a bill before Congress now to roll back patent protection, notably in the field of software. American users of OpenBSD might want to follow this struggle, which is running into massive opposition from non-comp-sci patent holders. -- Jack J. Woehr Director of Developm...
Aug 28, 11:32 am 2007
Daniel A. Ramaley
Re: OT Strange Punishment
Software patents were just a bad idea to begin with. Patenting numbers and algorithms is ridiculous. I wish i had a patent on determining the total number of objects in a set when the numbers of objects in all mutually exclusive subsets of the set are known [my lame attempt to translate "addition" into patent-speak]. Imagine how much money i could make if i controlled such a basic operation! Oh wait, civilization as we know it would never have been able to develop and instead of working a "...
Aug 28, 2:54 pm 2007
Die Gestalt
Re: OT Strange Punishment
Why doesn't he run the monitoring software in a virtual machine?
Aug 28, 9:35 am 2007
Lars Hansson
Re: OT Strange Punishment
Because it would violate his parole? Who cares anyway? If you can't do the time don't do the crime. --- Lars Hansson
Aug 28, 9:44 am 2007
Dave Anderson
Re: OT Strange Punishment
We should all care, because there's actually an important question buried in this: to what extent is it acceptable for 'the government' to demand that someone make substantial or expensive changes in their life merely for its convenience? Note that he isn't complaining about being required to run monitoring software, just about being required to run Windows rather than his accustomed OS (presumably because Windows is the only OS that the government's preferred monitoring software will run on). ...
Aug 28, 11:19 am 2007
Gilles Chehade
Re: OT Strange Punishment
It is acceptable to the extent that the guy did something illegal, is being punished for it and should consider himself happy that he is allowed to use a computer still. If he were using his ubuntu in a constructive way, he would not be forced to run Windows today. Tough luck. -- sysadmin & coder @ http://www.evilkittens.org/ coder @ http://www.exalead.com/ [demime 1.01d removed an attachment of type application/pgp-signature]
Aug 28, 5:37 am 2007
Dave Anderson
Re: OT Strange Punishment
But, as I understand the issue, this is _not_ part of his specified punishment -- it's just a side-effect of the manner in which the government wants to impose a portion of his punishment. There appears to be no real reason for it other than the government's convenience. You appear to be arguing that someone convicted of a crime should lose rights under the law beyond those which the law specifies as being taken away. Is this a correct inference? Whether or not you hold that opinion, I certai...
Aug 28, 12:49 pm 2007
Emilio Perea
Re: OT Strange Punishment
As I understand the issue, he agreed to have the goverment monitor all his computer activity. This requires that he run an operating system that will allow that. Does Ubuntu? I guess it's possible, and in that case it would be reasonable to request that the goverment monitor his current OS. Otherwise he needs to change OS or go back to jail. Wasn't that what he agreed to? I'm sorry to say that I suspect him to have known all the time that his parole officer would not be able to monitor his c...
Aug 28, 2:30 pm 2007
Dave Anderson
Re: OT Strange Punishment
You may be right; all the information I have is what's shown up in this thread, and I've no idea whether anyone has implemented suitable monitoring software for Linux (or exactly how the 'monitoring' requirement was arrived at). But this incident does raise the question of what sort of presumably unintended costs 'the government' should be allowed to impose on _anyone_ at its whim -- and _that_ issue is one which should interest all of us (lest we find ourselves at its sharp end). Dave -- ...
Aug 28, 2:55 pm 2007
Die Gestalt
Re: OT Strange Punishment
I think they simply have the monitoring software for Windows and not for Linux because it has not been bought/developed/whatever. Linux is not the point, it would be the same if he were using hardware that prevents the monitoring (such as a firewall). While I sympathize with what the fellow is running through, I find it a bit out of place that he complains about not being allowed to use Linux when he could be sitting in a cell. Basically the deal is "It's ok you use a computer in a way we can ...
Aug 28, 3:58 pm 2007
Die Gestalt Aug 28, 10:00 am 2007
reje
Re: Scaling DNS with CARP + pf (+ hoststated ?)
In the sense of expanding DNS infrastructure, your comments seem sane enough (you definitely read that DNS & BIND book :-) On the other side, I really need to introduce _additional_ availability of DNS servers/resolvers. This is especially true for resolvers as they are the first layer users are facing. Assume the situation when ordinary Windows user tries to access a web page not yet cached in his box local DNS cache. From my experience, it's needed up to 15 seconds for Windows box to conta...
Aug 28, 4:12 am 2007
Tom Bombadil
syskonnect SK-9E22
Greetings all... We bought a SK-9S22 (pci-x) card a while ago, and even though 'man msk' listed it as working on 4.0, it actually didn't work. So, now we are thinking about a SK-9E22 (pci-e) for another box, and we think we should ask if this model is working on 4.1 before actually spending any money on it. Also, if anybody can recommend any 4-port gigabit NIC for openbsd, we would appreciate it Thanks in advance, g.
Aug 27, 11:22 pm 2007
Craig Skinner - Sun ...
Re: FOSS Open Hardware Documentation
Yay! Action at last. -- ======================================================== Craig Skinner craig.skinner@sun.co.uk Phone +44 (0) 1506 673024 5-digit shortdial:x73024 Sun Remote Support Centre, Linlithgow, Scotland, UK ========================================================
Aug 28, 5:59 am 2007
Edd Barrett
Re: FOSS Open Hardware Documentation
Hi, Wow! This is great news. What I would really like to see is SMP for sparc64. Hopefully this has become easier now. -- Best Regards Edd --------------------------------------------------- http://students.dec.bournemouth.ac.uk/ebarrett
Aug 28, 11:08 am 2007
J.C. Roberts
Re: FOSS Open Hardware Documentation
The major requirement for SMP on sparc64 is for some extremely talented people having both significant interest and copious amounts of free time. After spending years, if not decades, being yanked around by Sun on requests for proper docs and errata, you can understand why interest in such work isn't very enthusiastic... -about as much of a understatement as saying "a supernova tends to brighten things up." ;-) jcr
Aug 28, 2:37 pm 2007
Darrin Chandler
Re: FOSS Open Hardware Documentation
Better late than never, but damn is it late. -- Darrin Chandler | Phoenix BSD User Group | MetaBUG dwchandler@stilyagin.com | http://phxbug.org/ | http://metabug.org/ http://www.stilyagin.com/ | Daemons in the Desert | Global BUG Federation
Aug 28, 12:14 pm 2007
Theo de Raadt
Re: FOSS Open Hardware Documentation
Indeed, that is the correct sentiment regarding Sun's action here. The facts of the industry are simply this: Approximately 95% of machine parts are documented (whether they are documented well or not is a totally seperate question). Starting roughly around 1990, Sun put themselves on the path of supplying only the absolute minimum documentation for their machine parts. Meanwhile, the PC really took off, and all the documentation for PC parts has always been out there (minus a few special case...
Aug 28, 12:43 pm 2007
Karl Sjödahl - dunceor
Re: FOSS Open Hardware Documentation
This is really nice and maybe we can expect better hardware support on SPARCs. This is probobly also good since I hope this puts pressure on other hardware manufacturers to open up their documentation. Maybe dlg@ can shed some more light on what is comming out of this from a OpenBSD perspective? BR dunceor
Aug 28, 1:22 am 2007
Mike Erdely
Re: maybe OT 3 year anniversay of Chuck Yerkes death
We'll hoist a few in his honor at the CapBUG meeting tonight. If you're in the MD/DC area and can join us, please do. http://capbug.org/ -ME
Aug 28, 2:01 pm 2007
J.C. Roberts
Re: maybe OT 3 year anniversay of Chuck Yerkes death
Thanks Diana! Chuck is a superstar. To this day I can think of no one who as made me laugh more while at the same time teaching me important technical details. There are countless great Chuck stories, from Chuck telling his conservative Wall Street boss who complained about his regular work attire, "shirt, shoes, sober -pick two," to all the hilarious jokes he sent freely as private emails to others in need of help. Chuck always remembered to keep things fun, even the things which he alr...
Aug 28, 11:36 am 2007
Johan SANCHEZ
Re: maybe OT 3 year anniversay of Chuck Yerkes death
Nice thing , but i don t think one can forget him, his advices or his jokes. Personally i still have his posts in my mailbox. Thanks again
Aug 28, 2:42 am 2007
Samuel Moñux
Re: openbsd instead of cisco vpn client
You can't with base install since it doesn't support xauth(it's in isakmpd's todo I think), but vpnc works good enough for my needs, which look similar to yours. I need to reset the connection nightly because unreliable ike rekeying, but, other than that, It's stable. http://www.unix-ag.uni-kl.de/~massar/vpnc/ Best regards, Samuel
Aug 28, 5:47 am 2007
Craig Skinner - Sun ...
Re: openssl: digital envelope routines:EVP_DecryptFinal:bad ...
Solved, was revenge of the wonkey donkey sysadmin (me). Nothing to do with decryption. As I was getting nowhere with /home, I had a go with other slices, such as /var/mail. Decrypted fine using the same commands as before, but bitched about inodes not found on the tape on restore. I finally figured out what I'd done wrong: As the 4.0 box ran out of space, I added another small drive as tmp. I had my script dump to that, then when done, move the dump to /var, thus over-writing last wee...
Aug 28, 10:25 am 2007
Damien Miller
Re: Software freedom
Why are you making excuses for the people who provide binary blobs? It doesn't matter at all what the owner's _intent_ is, when the practical consequence is that OS developers have to put in layers of hacks for bugs that they cannot themselves fix. -d
Aug 28, 1:12 am 2007
Die Gestalt
Re: Software freedom
For me it's a consistency problem. It's like selling a sport car with 4x4 tires. First of all, if you opt for an open source system it may be because you are concerned by the aforementioned problem, otherwise you would go for Windows or another proprietary OS. In second comes the issue of having different engineering "procedures" inside your system, and that's never a good thing. "Hey, I think ADA rocks, why not write some parts of the kernel in ADA?" It doesn't mean that the procedures should n...
Aug 28, 4:26 am 2007
Marmotic Marvel
Re: Backport drivers from 4.1 to 4.0
I've been watching this thread, perhaps my comments are worth something, or are amusing. Executive summary: track -current. Make releases in step with OpenBSD. That sentence contains its own solution: do not maintain old versions. How would one maintain old versions if the underlying OS is frozen? How do you answer customers who ask why they can't run the up-to-date version of OpenBSD? If your salesman contacted me, saying I had to *downgrade* my OS to Open 3.3 to run your product, I would ad...
Aug 28, 12:28 pm 2007
Joachim Schipper
Re: Radeon X1300 mobile + WXGA - out of luck?
Sorry for the slow response - yesterday was a *very* busy day. The following configuration works, albeit at the wrong resolution: http://jschipper.dynalias.net/~joachim/posts/20070828/Xorg.conf It also contains some failed attempts that might be interesting (ModeLine ...; Virtual 1200 800 and Option "ShadowFB" "no"). Joachim -- TFMotD: txp (4) - 3Com 3XP Typhoon/Sidewinder (3CR990) 10/100 Ethernet device
Aug 28, 12:20 pm 2007
Stuart Henderson
Re: to zaurus or not to zaurus
Battery life is not too good, but can be extended quite easily at the expense of extra space - same voltage, connector (incl polarity) as Sony PSP so there are plenty of battery packs, solar chargers etc that will work. Given the obvious general limitations (not much ram, not much disk), the things I most dislike are: always running from the internal battery (if you flatten it you can't just plug in another source and go, you need to let it recharge a bit first), and the limited precision of the...
Aug 28, 5:41 am 2007
Alvaro Mantilla Gimenez
Re: OpenBSd or HP-UX?
How was your adventure?? Can you be more specific?? I know the cost part...obviously it is more cheaper run OpenBSD that HP-UX. But i need more...something really heavy like "I tried to install an OpenLDAP with HP-UX and the system load with 2000 users rise to the sky...but the same number of users with OpenBSD had an incredible performance and never Thanks to you... Alvaro
Aug 27, 9:07 pm 2007
Joachim Schipper
Re: OpenBSd or HP-UX?
I wrote a huge mail, but essentially: `what Jacob said'. I think that if you manage to convince the right people that a network of smaller nodes has advantages (higher availability, better scalability, lower `TCO' - whatever), OpenBSD - with low cost, good and cheap support, and very competitive performance - becomes a very attractive option. On the other hand, if you really need a 16-core machine with 32 GB of memory, installing OpenBSD gets you cool dmesg pr0n but not a really useful configu...
Aug 28, 3:17 pm 2007
Marc Balmer
Re: OpenBSd or HP-UX?
OpenBSD can not authenticat against an LDAP server. Well, stricly speaking it can, but you have duplicate all accounts on OpenBSD. So realistically it can't.
Aug 28, 3:45 pm 2007
Alvaro Mantilla Gimenez
Re: OpenBSd or HP-UX?
And this is, i think, the main point for my boss and his "not understanding" about the advantages of OpenBSD over HP-UX. But...i have hope yet...he does not "close the door" to the OpenBSD possibility. He wants probes...only i need to find a heavy argument. For example...the developers that port OpenBSD to HPPA and HP300 platforms....maybe they have benchmarks between this machines running HP-UX and/or OpenBSD. It This is a good point too. Is it the performance of OpenBSD running on Sun co...
Aug 27, 8:59 pm 2007
J.C. Roberts
Re: OpenBSd or HP-UX?
The hppa port is for 32bit. The hppa64 port will run more modern 64bit parisc systems. With the correct hardware both hppa and hppa64 are usable but you need to realize two things: (1) the ports are still under development and (2) benchmarks lie. The *ONLY* "benchmarks" that are applicable to your decisions are from the tests that *YOU* run in *YOUR* environment. Your boss should read up on LDAP and realize it was designed to scale by supporting clustering, fail-over and fault tolerance......
Aug 27, 10:39 pm 2007
previous daytodaynext day
August 27, 2007August 28, 2007August 29, 2007
speck-geostationary