openbsd-misc mailing list

FromSubjectsort iconDate
Jason Dixon
Wasting our Freedom

It boggles my mind that we can lie around complacently, arguing about
installer menus and taking the bait from trolls, while our freedoms
are quickly eroding away. The rights and recognition of one of our
own developers (reyk@) have been molested, and all we've done as a
community is to participate in useless flames and blog postings.
Theo has thrown himself, once again, against the spears of the Linux
community and their legal vultures in order to protect our software
freedoms. How ...

Sep 13, 11:09 pm 2007
Erick Turnquist
Hifn 7955: fatal: cipher_init: EVP_CipherInit: set key faile...

I'm just installed 4.1 on a Soekris net5501 board (i386) with one of
their vpn1411 cards installed. The chip on this card is a Hifn 7955.
dmesg shows the card:

hifn0 at pci0 dev 17 function 0 "Hifn 7955/7954" rev 0x00: LZS 3DES
ARC4 MD5 SHA1 RNG AES PK, 32KB dram, irq 15

But SSH connection attempts die, with "fatal: cipher_init:
EVP_CipherInit: set key failed for aes256-cbc" in the authlog. If I
disable the card with `sysctl -w kern.usercrypto=0` these connections
work fine. I have also tested A...

Sep 13, 10:33 pm 2007
Cyrus
SMP

Im currently running openbsd 4.1 on my server, Proliant 8500. This server
is SMP with 4x 700MHz PIII proc. Im just wondering, is it using all four
cpu's? or do I have to configure the system to utilize SMP?

P.S. I did show my appreciation, and I bought a CD!

Thank you,
Cyrus

Sep 13, 10:24 pm 2007
Adriaan
Re: SMP

[snip]

You will have to use the bsd,mp kernel. The "mp" stands for
multi-processor. One simple way to use this kernel is to put the
following line in "/etc/boot.conf"

set image /bsd.mp

And reboot the system

=Adriaan=

Sep 13, 10:51 pm 2007
Darren Spruell
Re: SMP

SMP is the kernel that supports multiple CPUs. If you're not running
SMP, you aren't multiprocessing.

Useful ways to diagnose your CPU configuration; what does your kernel
say it found?

# dmesg |grep ^cpu

# sysctl hw.ncpu

DS

Sep 13, 10:44 pm 2007
Darren Spruell
Re: SMP

Horrible mistake - bsd.mp is what you're after for SMP support.

Sorry for the misguidance.

DS

Sep 13, 10:45 pm 2007
Michael Scheliga Sep 13, 10:40 pm 2007
Firas Kraiem
Re: SMP

The SMP kernel is not used by default. To use it, type bsd.mp at the
boot prompt. You can also do something like

# mv /bsd /bsd.old
# mv /bsd.mp /bsd

to have it started by default. To make sure all your CPUs are used, you
can do a

$ dmesg | grep -i cpu

Firas

--
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments

Sep 13, 10:33 pm 2007
Can E. Acar
Re: The Atheros story in much fewer words

No, Sam's code and Reyk's code are completely different.

Sam has an open source driver and a closed source binary blob, the HAL.
Reyk reverse engineered the HAL and wrote an open source replacement.

Sam DID NOT open the HAL code, it is still a closed binary object.

Can you see now why Reyk's code is so critical?

Otherwise GPL and BSD developers have to include a binary object into the
kernel, which is out of their control. They can not fix bugs in there and
make sure it works with present a...

Sep 13, 8:43 pm 2007
Thomas Schoeller
Re: UPDATE: vpnc -> 0.5.1

here is a updated port with all my suggestions included.

[demime 1.01d removed an attachment of type application/x-tar-gz]

Sep 13, 7:47 pm 2007
Thomas Schoeller
Re: UPDATE: vpnc -> 0.5.1

sorry, this should go to ports@

Sep 13, 8:22 pm 2007
Bob Beck
Re: OpenBSD Install Goal

> I hope one day soon OpenBSD will adopt a nice ncurses setup similar to something like FreeBSD with ease to it.

I don't think it's worth putting my efforts into. The current
installer is about the easiest thing I have to deal with from AIX, 4

I await your diffs! Please feel free to write one that works, and

I 100% Agree with you. so after 10 years of use, you should become one

Personally I find driving an ncurses based install much more tedious
playing than chucking a site_install scri...

Sep 13, 6:49 pm 2007
Marco Peereboom
Re: OpenBSD Install Goal

I installed FreeBSD once in my life. Took me 3 tries and I am sure some
kittens were murdered in the process. I am also pretty sure I wept at
some point. Honestly I can't remember a much worse installer; maybe SCO
OpenServer but not by much.

Sep 13, 10:33 pm 2007
Edwards, David (JTS)
Re: OpenBSD Install Goal

Just interested in why you think it's so bad?

I've installed just about everything that's been around, going way back
to Linux SLS and I find the OpenBSD install better than all of them!

I'd guess it might be related to the reason I use BSD. I find Linux a
far better desktop and only use *BSD for important stuff. Given that, a
5 minute install without all the bells and whistles is just brilliant.

Or maybe it's my background where I'm more than comfortable on the
command line and find ncurse...

Sep 13, 11:25 pm 2007
Steve Shockley
Re: OpenBSD Install Goal

I assume you're only encouraging this because it's likely impossible.
Frankly, I find the FreeBSD installer somewhat confusing. About the
only thing that would maybe make the OpenBSD installer simpler for new
(or impatient) users would be a "default" disk layout with sane
partition sizes for /, /tmp, /var, /usr, etc. Of course I rarely
install OpenBSD on non-x86 boxes but I'm sure sane defaults for x86 are
quite different than mac68k or hppa.

(In my defense, i do have a Sparc Classic and ...

Sep 13, 9:53 pm 2007
Darren Spruell
Re: OpenBSD Install Goal

I've found times where a default layout would have been useful, but on
the other hand I've been bitten more than once by a default layout
(from the sysinstall [A]utomatic partitioner) that didn't set up a big
enough /tmp for my needs. The result was spending extra time
reinstalling to do it right the second time around.

In almost all cases I think it's worth just being forced to think
about my needs a bit more up front rather than trusting technology to
do it for me. _Especially_ in cases where a...

Sep 13, 10:26 pm 2007
Steve Shockley
Re: OpenBSD Install Goal

You're also assuming that the automatic partitioner would allocate the
entire disk...

There are other issues, too; /usr/ports and /usr/src, /usr/obj,
databases and logs and spools in /var, the list goes on.

Sep 13, 11:15 pm 2007
Aaron W. Hsu
Re: OpenBSD Install Goal

Just to share my personal experiences with the OpenBSD Installer, I thought I
would add to this thread.

I was a Free OS's *nix newbie trying to get around. At first, I tried Beta
Stampede Linux, but it couldn't handle the hardware on my laptop. I could not
figure out how to fix it, and it took me hours to read and guess about how it
was supposed to boot up. Then I tried a Suse disc that someone gave me. Seemed
to install great, except for the fact that it *didn't* work afterwards, and I
could...

Sep 13, 11:05 pm 2007
Stephan Andre'
Re: OpenBSD Install Goal

Honestly, I don't see why. How does making the installer more
complicated is going to "help" anything.

I recently sat a friend down to show how easy an install was. This
was on a 400MHz Dell with a 10G disk. Putting the disk in the box
to having a system that booted up took 11 minutes, with me
making comments about each step.

Once the machine came up, I said it was done, the system was ready
to use.

"<blink> <blink> You mean, thats all?"

Yes, I replied and left him to p...

Sep 13, 8:35 pm 2007
RW
Re: OpenBSD Install Goal

Damn right STeve, I did a similar demo to the techs at the outfit that
builds boxes for me.

Install on a brand new box from CD with explanation of partitioning and
turning on httpd and having another box with a browser showing the "It
worked!" page in 15 minutes.

As to the original poster's "something like FreeBSD with ease to it." I
have never been able to be confident in that piece of pretend gui-ness.
There is no clarity about it and I forever feel that it's the only
installer I've ever use...

Sep 13, 9:14 pm 2007
Daniel Ouellet
Re: OpenBSD Install Goal

To me easy of install and improvements is what's already done and added
time to time that show really how this is so easy and better. Example,
sure here is one that I notice in 4.2 and the first time, I read it as
it was different and I was use to always do the same thing, may be not
in 3 minutes flat like J.C., but may be 4:15. I guess he has faster box
then me. (;> Anyway, to the point.

In 4.2 there is the new way to specify your ntp server at the install
time. I always use to go back ...

Sep 13, 9:39 pm 2007
Jason Dixon
Re: OpenBSD Install Goal

I don't think anyone else is clamoring for it, either. I have to go
back in the misc@ archives over 4 years to find any pointed
complaints of the installer. Sysinstall is a bloated mess that
provides no value. You're basically taking some of the afterboot(8)

I don't. The OpenBSD installer is a very underrated part of the
overall user experience. What other OS can you install in 3 minutes
flat? Keep it simple, stupid.

---
Jason Dixon
DixonGroup Consulting
[ message continues ]

" title="http://www.dixongro...">http://www.dixongro...

Sep 13, 8:12 pm 2007
Matthias Kilian
Re: OpenBSD Install Goal

Oh, please. Even it it fits, it would be useless. Installation is
sequential (find disks, fdisk them (on i386-like archs), disklabel
them, choose install sets, install). Fancy curses interfaces or
even high-resolution progress bars with dancing puffy animations
won't change this.

Ciao,
Kili

ps: this is mainly adressed to the OP, and obviously not to beck@ ;-)

--
What is this? Some kind of grep bitten by a radioactive spider?
-- William S. Yerazunis about the crm114 interpreter
i...

Sep 13, 7:26 pm 2007
Jack J. Woehr
Re: OpenBSD Install Goal

Speak for yourself ... my professional life would be profoundly
changed by
dancing puffy animations during the OpenBSD install ... :-)

--
Jack J. Woehr
Director of Development
Absolute Performance, Inc.
jwoehr@absolute-performance.com
303-443-7000 ext. 527

Sep 13, 7:37 pm 2007
Can E. Acar
Re: The Atheros story in much fewer words

GPL is just a license, hate is a too strong word for it.
We usually prefer to point out that it is not free (enough).

There are people that represent the free software movement, and
there are people that take the words of the GNU project and twist
the meanings to suit themselves.

Why take it so personally. It is not GPL or GNU that is being attacked here.
There are always those that are misled or even malicious in every community.
Sometimes it is just a lack of knowledge, or being overeager t...

Sep 13, 4:37 pm 2007
Alejandro Lozanoff
Perl segfault on >3.7

Hello list,

We recently updated a 3.7 machine running awstat(perl) to parse all our
websites logs with the biggest being around 1GB.
When parsing the big log it randomly segfaults on 4.1, 3.9 and 3.8, we
tried new clean release installs and it still segfaults. On 3.7 it works
flawlessly, on 3.8 which has the same perl version as 3.7 (5.8.6) it
still segfaults. The problem is completely random but it tends to happen
after its been running for a while as it doesnt happen on small logs (or
the probab...

Sep 13, 4:25 pm 2007
mickey
Re: Perl segfault on >3.7

yes. this increases memory fragmentation immensly resulting
in (practically) less virtual space available for data.
as an increased penalty (200-300%) for cpu consuption
on processes w/ lots (20M and more) malloc(3)ed memory...
as well increased demand for the physical memory that
on the overcommiting nature of it you perhaps observe.
a way around it is only to use perl malloc (sbrk-based)

cu
--
paranoic mickey (my employers have changed but, the name has remained)

Sep 13, 5:10 pm 2007
Alejandro Lozanoff
Re: Perl segfault on >3.7

Thanks for your explanation and quick response, however with
-Uusemymalloc it segfaults almost when it starts. At least it showed
that the problem comes from that way, probably the mymalloc is worse
than the OpenBSD one. :P

We found what appears to be a workaround on awstats.
Changing $tokenquery=$1||''; to $tokenquery='?'; after we traced what
was awstats running when segfaulting.
It's on awstats.pl line 6574
----- awstats 6.7 (build 1.892) (c) 2000-2007 Laurent Destailleur -----

It runs perf...

Sep 13, 7:10 pm 2007
ArabianBusiness.com ...
(No subject)

[IMAGE]Having trouble reading this email? See it in your browser

ArabianBusiness.com Daily News Alert

GHMK ]m Gacf^Z:

GaCMO ,13 SHJcHQ 2007

------------------------------------------------------------------------

[IMAGE]

GaCNHGQ GaQFmSmI

GaSZfOmI JHdm SfQGp HcamGQ OfaGQ Zal GaMOfO GaZQG^mI
GaSfQ cUdfZ cd GaCSaG_ GaTGF_I fcRfO HCLeRI JUfmQ MQGQm fQGOGQ

GaNa mSGZO ]m Ga_T] GacH_Q Zd SQXGd Zd^ GaQMc
GaHaOGd GadGcmI mc_d Cd J^aa MGaGJ SQXGd Zd^ GaQMc HGSJNOGc cQ_HGJ HSmXI
_GaNa ]m Ga_...

Sep 13, 1:12 pm 2007
João Salvatti
Definition of the major number under OpenBSD

Hi all,

In which OpenBSD file do I define the major number for devices (both
regular and pseudo-device)? I have searched in several sources, and
the closest answer was for NetBSD, which says that major numbers are
in /usr/src/sys/conf/majors. But I have not found this file in OpenBSD
sources.

Thanks in advance for the explanation.

--
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://www.openbsd-pa.org
e-mail: salvatti@openbsd-pa.org

Sep 13, 3:22 pm 2007
Theo de Raadt
Re: Definition of the major number under OpenBSD

Noone builds new block devices anymore (in OpenBSD, we instead write
drivers which hide behind the scsi subsystem, since this is more
flexible).

As for strictly character devices, these are inserted per-architecture
into the cdevsw[] arrays in arch/ARCH/ARCH/conf.c. At the same time,
/usr/src/etc/etc.ARCH/MAKEDEV* have to be modified to create the
device nodes.

There is no need to keep the major numbers in sync between different
architectures. Actually because of many historical reasons, it ...

Sep 13, 3:48 pm 2007
João Salvatti
Traduz pra mim

Ola Pessoa da lista,

Em qual arquivo do OpenBSD eu defino o major number para os
dispositivos (device e pseudo-device)? Pesquisei em varias fontes a
mais prsximo foi a do NetBSD que diz que os major numbers ficam em
/usr/src/sys/conf/majors. Mas nco encontrei este arquivo nas fontes do
OpenBSD!

Sds

Tmtulo: Definigco do major number no OpenBSD

Sep 13, 2:59 pm 2007
João Salvatti
Re: Traduz pra mim

Sorry Folks!

--
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://www.openbsd-pa.org
e-mail: salvatti@openbsd-pa.org

Sep 13, 3:00 pm 2007
Aaron Hsu
[Possibly OT] 16-bit Assembly Programming

Hello all,

I am attempting to create an assembly program (for a class) on OpenBSD. The
teacher has no issue with me developing the code based on the UNIX-based
assembly (int 0x80 syscalls vs. int 0x21 Dos Function), but he does not want
me to use 32-bit code. I believe this has something to do with him wanting me
to use a "Real-addressing Mode" as opposed to the 32-bit protected mode. I'm
doing x86 assembly.

Now, I can create nice and working 32-bit OpenBSD elf executables using yasm
and s...

Sep 13, 2:46 pm 2007
Jeff Simmons
ipsec.conf - format of key specification

What is the proper format for entering manual keys directly into the
ipsec.conf file?

Test file ipsec.test:

esp from 10.0.0.1 to 10.0.1.1 \
spi 0x00001011:0x00001010 \
auth hmac-sha1 enc aes \
authkey "1234567890123456789012345678901234567890" \
enckey "12345678901234567890123456789012" \

# ipsecctl -n -f ipsec.test
ipsec.test: 5: no authentication key specified
ipsecctl: Syntax error in config file: ipsec rules not loaded

The same happens if the key is specified:

12345678901234567890...

Sep 13, 2:43 pm 2007
Stuart Henderson
Re: ipsec.conf - format of key specification

I think the doc is lacking here.

When you use the "spi 0x00000000:0x11111111" format to setup
bidirectional flows in one ipsec.conf rule, you need to specify
one key for each spi, separated by a :

See /usr/src/regress/sbin/ipsecctl/sa7.in for an example.

Sep 13, 3:58 pm 2007
James Mackinnon
moving location of passwd, master.passwd and group file

Hi All

I am trying to read-only the system but having a seperate location rw

In order to do this, I want to re-locate the user account files so accounts
can still be added when in read-only mode.

I have tried doing ln -s /confs/passwd /etc/passwd etc.. but when I try to
create an account it fails with PAM or something.

Any suggestions on what I require to do this?

I've been looking but hadn't found an answer to this, likely because i'm crazy
for trying but thats the point.

Thanks

Jam...

Sep 13, 9:12 am 2007
Jeremy C. Reed
Re: moving location of passwd, master.passwd and group file

Also /etc/pwd.db and /etc/spwd.db. The paths are defined in
/usr/include/pwd.h:

#define _PATH_PASSWD "/etc/passwd"
#define _PATH_MASTERPASSWD "/etc/master.passwd"
#define _PATH_MASTERPASSWD_LOCK "/etc/ptmp"
#define _PATH_MP_DB "/etc/pwd.db"
#define _PATH_SMP_DB "/etc/spwd.db"

What is the exact error message you are receiving?

Use ktrace if your error message is vague to get more details.

Jeremy C. Reed

Sep 13, 2:41 pm 2007
Juan Miscaro
lost whitelisted hosts with spamd

My OpenBSD 4.0 mail filter (running amavisd-new) has been up and
running well for 70 days. I received a complaint of delays this
morning. Indeed, I see that servers which had been whitelisted by
spamd were no longer so. I verified that spamlogd is still running.
Does anyone have any ideas how this could have happened?

- Juan

Ask a question on any topic and get answers from real people. Go to Yahoo! Answers and share what you know at http://ca.answers.yahoo.com

Sep 13, 10:29 am 2007
Darrin Chandler
Re: lost whitelisted hosts with spamd

As Craig & Peter mention, whitelisted server do expire. The defaults are
sensible, but do not apply for everyone. One server I deal with is one
such case, and I've increased the whitelist expiry in the -G option to
almost double the default. This has worked fine.

You should also check that you are logging in pf for port 25, and that
spamlogd is seeing it and updating the timestamps on your whitelist
entries.

--
Darrin Chandler | Phoenix BSD User Group | MetaBUG
dwchandler@s...

Sep 13, 12:06 pm 2007
Bob Beck
Re: lost whitelisted hosts with spamd

spamlogd not only needs to be running, but it needs to
see the connections - your pf rules need to log them correctly.

The best way to see if this is happening is to fire
off some debug level syslogging, and see if spamlogd is logging lines
for the hosts that connect in. You should see lines like this where
your debug level syslogs are going.

Sep 13 07:03:49 mailcarp1 spamlogd[16523]: inbound 199.185.137.3

if you don't spamlogd ain't seeing them. check your pf rules.

--
#!/usr/bin/p...

Sep 13, 11:56 am 2007
Juan Miscaro
Re: lost whitelisted hosts with spamd

Let it be known that everything was working in the past 70 days as well
as when I inspected the server due to the complaints. I simply lost a
lot of my dynamicallly whitelisted hosts (if not all of them; not
sure). So I am currently re-validating senders right now. I did find
a mention of possible corruption of the spamdb database in the
changelog for 4.1 -> 4.2:

RELIABILITY FIX: Bugs in spamd(8) could corrupt the database.

I'm not sure if I have fallen victim to this.

- Juan

...

Sep 13, 12:50 pm 2007
Peter N. M. Hansteen
Re: lost whitelisted hosts with spamd

Whitelist entries do expire after a while (a little more than a month
by default, if I remember correctly, but it's a tuneable). That's a
likely explanation, unless of course those servers have been sending
you mail at shorter intervals.

For known good (or important, infrequent, impatient, or a few other
varieties we'll skip here for brevity) senders it pays to whitelist by
hand using either spamdb or by setting up a way around spamdb such as
having a no rdr rule for members of your <knowngoo...

Sep 13, 11:45 am 2007
Craig Skinner
Re: lost whitelisted hosts with spamd

From spamd(8), -G, whitelisted entries are dropped if the IP address
does not send again within 36 days.

Could the new messages have come from a different IP address? Or was the
last message sent more than 36 days ago?

Sep 13, 11:37 am 2007
Marcus Glocker
[henning@openbsd.org: help needed with laptop hdd]

Hi,

My X40 disk also died two month ago. All attempts to find that somehow
special 1.8" NONE-ZIF connector disk failed so far.

I saw that Henning has the same problem and already asked on misc@ for
such a disk. If somebody has another of those for me, it would be most
helpfull. Using the X40 with an attached USB disk is not that portable,
and the X40 is a good hacking toy for Cardbus (wireless ;) devices ...

I'm located in Switzerland / Basel.

Thanks,
Marcus

----- Forwarded message fr...

Sep 13, 9:25 am 2007
Stuart Henderson
Re: [henning@openbsd.org: help needed with laptop hdd]

a 2.5" HD carrier is available for the X4 Ultrabase. it's not ideal
(it adds a lot of weight and doubles the thickness) but it beats USB...

if anyone comes across a batch of these drives (1.8" 44-pin travelstar;
they have been discontinued), pipe up, I am sure there are some other
developers with these machines that might want to pick up a spare.

Sep 13, 9:57 am 2007
Henning Brauer
Re: [henning@openbsd.org: help needed with laptop hdd]

given the sheer count of X40s in use by developers, it is a safe bet to
assume there are some going be be needed somewhat soon.

--
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam

Sep 13, 10:47 am 2007
nothingness
Re: [henning@openbsd.org: help needed with laptop hdd]

You can find some here (via a Swiss pricecheck site ):
http://www.toppreise.ch/prod_103419.html

Noth

Sep 13, 10:59 am 2007
Stuart Henderson
Re: [henning@openbsd.org: help needed with laptop hdd]

those are zif. the following are the 44-pin ones:

HTC424020F7AT00 08K1394 1.8" 20GB ATA-5
HTC424040F9AT00 08K1393 1.8" 40GB ATA-5

HTC426020G7AT00 08K1532 1.8" 20GB ATA-6 (IDE)
HTC426030G7AT00 08K1531 1.8" 30GB ATA-6 (IDE)
HTC426040G9AT00 08K1530 1.8" 40GB ATA-6 (IDE)
HTC426060G9AT00 08K1529 1.8" 60GB ATA-6 (IDE)

Sep 13, 11:17 am 2007
Henning Brauer
Re: [henning@openbsd.org: help needed with laptop hdd]

i found countless price comparision sites listing them. and then either
ZIF or listed without a dealer actually offering them or dealers that

the last one in the list is the one to look for :)

--
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam

Sep 13, 12:06 pm 2007
previous daytodaynext day
NoneSeptember 13, 2007None