On Fri, 26 Nov 2010 12:58:09 +0000 (UTC), Stuart Henderson> Stuart is right. I tried to play with isakmpd.policy and it's rather complicated. Reading the manuals again I noticed the -a option of isakmpd. So my new configuration could be the following: /etc/rc.conf.local ipsec=YES isakmpd_flags="-a -K -v" /etc/ipsec.conf ike active esp tunnel \ from 10.1.0.0/16 to 192.168.90.0/24 \ local A.B.C.D peer W.X.Y.Z \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth ...

Hi all, i have a question regarding the mail queue of OpenSMTPD. I have a message which seems to be stuck in there. mailq says: Message Envelope q0SbgP8S <sender> -> <recepient> [buf_read: connection closed] After a few hours i tried to reschedule the message manually. As the Man page for smtpctl states the schedule command marks a message for immediate delivery. However smtpctl schedule all and smtpctl schedule q0SBgP8S didn't work as well. Can you give me a hint on how to trigger off ...

Please click here to stop invitations to moove online. ------------------------------------------------------------------------ moove online - virtual 3D World - I

http://www.openbsd.org/faq/faq2.html#Bugs read it through. hint: you have serial ports. -- jakemsr@sdf.lonestar.org SDF Public Access UNIX System - http://sdf.lonestar.org

Hi , dear friend Thank you so much for your reply But I told that I can not be always behind of FirewallBOX I stay long time since 8:00 to 16:00 behind my desk but this problem does not occur I can not be at work always. Is there anyway that i can redirect result of "ddb ps and trace" to logfile and I can analyze it then? How Can Force system at least reboot when it crashes ? -- Gula_Gula =;=; BNF

You are right on this, but as I look it there are only 3 ways to do such thing: a) you implement functionality for databases (passwd, nis, ldap etc) in libc. Not the best solution but it is allready done for nis. Why not for ldap as well since nis is dead anyway (compared to ldap at least). The problem here is to include ldap calls inside libc (no openldap) so this could be messy and you could introduce risks as well. b) you implement a layer in libc (fooNSS) which does all the dirty ...

login_ldap is fine. The problem seems to be getting user info. Instead of ypldap I would prefer the system to direct contact the ldap servers to get user info similar the way nss does, and not using NIS as an extra layer for ldap. Looking around getpwent(3) I think it might be possible to extent it's functionality to include ldap support as well. Furthermore ypldap's functions (aldap ...) could be used for this (just the bind/search part). Does this make any sense or am I missing ...