Re: OpenBSD/Linux centralized authentication

2006-03-19 Thread Karl-Ludwig Reinhard
Hi, mh I havent tested it yet, but ive heard, that ms provides a kind of authentication service for unix. but I recomme a centralzed authentication with openldap. I'm using it for openbsd and linux. On Mar 19, 2006, at 7:42 AM, Bruno Carnazzi wrote: Hi misc, At work, we are running

Re: OpenBSD/Linux centralized authentication

2006-03-19 Thread Joachim Schipper
On Sun, Mar 19, 2006 at 10:42:53AM +0400, Bruno Carnazzi wrote: Hi misc, At work, we are running a Microsoft Active Directory for our Windows Domain, who mainly provided Windows Desktop for our customers and centralized authentication. We have also several OpenBSD Linux boxes for

Re: problem compiling ports, 3.8 stable

2006-03-19 Thread Ramiro Aceves
expat-1.95.6.tar.gz doesn't seem to exist on this system. Attempting to fetch /usr/ports/distfiles/expat-1.95.6.tar.gz from http://ovh.dl.sourceforge.net/sourceforge/expat/. Size does not match for /usr/ports/distfiles/expat-1.95.6.tar.gz *** Error code 2

Access to serial port under linux emulation

2006-03-19 Thread Andreas Bihlmaier
Hi misc@, I need to run flip[1], which is written in tcl/tk and only available as binary for linux. I need it to program Atmel 8051 micro controllers. Flip runs fine under linux emulation (after copying the included libs to /emul/linux/lib), but I get an error message when trying to access the

Queueing + load balancing for multiple outside connections

2006-03-19 Thread Heiner Péter
Hi all, I have a machine that has 4 NICs, one to an ISP, one to a router that connects to another ISP, one for LAN, one for DMZ. I did host-based traffic rate limiting in both directions, which worked fine with 1 external NIC. Recently a second line was bought because it was cheaper than

Re: CanSecWest/core06 Vancouver April 3-7

2006-03-19 Thread paul dansing
This conference currently costs $1546 USD! :-( what moneybags loser is going to pay up so much just to go to a conference? buy yourself a nice computer, or hell, donate the money to openbsd.org instead! :-D drop a zero or two and it would be worth the trip Tuesday, March 7, 2006, 8:45:30 PM,

Re: OpenBSD/Linux centralized authentication

2006-03-19 Thread Axton
On 3/19/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Sun, Mar 19, 2006 at 10:42:53AM +0400, Bruno Carnazzi wrote: Hi misc, At work, we are running a Microsoft Active Directory for our Windows Domain, who mainly provided Windows Desktop for our customers and centralized

Re: RAIDframe parity errors and rebuild

2006-03-19 Thread David Wilk
this was exactly my thought. I was hoping someone would have some 'official' knowledge, or opinion. I still can't get over having to wait several hours for my root partition to become available after an improper shutdown. On 3/18/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Sat, Mar 18,

tcpdump needs no root privileges

2006-03-19 Thread Alex B
Hello. When started from user, tcpdump complains: need root privileges, even if I want it to read packets from regular file. Error is located in privsep.c. It may be more secure to start tcpdump from user to decode packets. -- WBR, Alex V Breger

Re: tcpdump needs no root privileges

2006-03-19 Thread Joachim Schipper
On Sun, Mar 19, 2006 at 07:43:46PM +0300, Alex B wrote: Hello. When started from user, tcpdump complains: need root privileges, even if I want it to read packets from regular file. Error is located in privsep.c. It may be more secure to start tcpdump from user to decode packets. Are you

Re: tcpdump needs no root privileges

2006-03-19 Thread jared r r spiegel
On Sun, Mar 19, 2006 at 05:59:23PM +0100, Joachim Schipper wrote: On Sun, Mar 19, 2006 at 07:43:46PM +0300, Alex B wrote: Hello. When started from user, tcpdump complains: need root privileges, even if I want it to read packets from regular file. Error is located in privsep.c. It may

Re: tcpdump needs no root privileges

2006-03-19 Thread Sigfred Håversen
Joachim Schipper wrote: On Sun, Mar 19, 2006 at 07:43:46PM +0300, Alex B wrote: Hello. When started from user, tcpdump complains: need root privileges, even if I want it to read packets from regular file. Error is located in privsep.c. It may be more secure to start tcpdump from user to

Re: tcpdump needs no root privileges

2006-03-19 Thread Alex B
Hello. Yes, I'm certain. It is the first check after start. So, it doesn't depend on my command line. Take a look on Privelege sepation, http://undeadly.org/cgi?action=articlesid=20040220120426 I've found commit: revision 1.22 date: 2005/09/23 15:42:51; author: otto; state: Exp; lines: +24

Re: tcpdump needs no root privileges

2006-03-19 Thread eric
On Sun, 2006-03-19 at 20:18:11 +0300, Alex B proclaimed... Hello. Yes, I'm certain. It is the first check after start. So, it doesn't depend on my command line. Take a look on Privelege sepation, http://undeadly.org/cgi?action=articlesid=20040220120426 It worked till 3.7. $ id

Re: tcpdump needs no root privileges

2006-03-19 Thread Otto Moerbeek
On Sun, 19 Mar 2006, eric wrote: On Sun, 2006-03-19 at 20:18:11 +0300, Alex B proclaimed... Hello. Yes, I'm certain. It is the first check after start. So, it doesn't depend on my command line. Take a look on Privelege sepation,

Re: RAIDframe parity errors and rebuild

2006-03-19 Thread Greg Oster
David Wilk writes: this was exactly my thought. I was hoping someone would have some 'official' knowledge, or opinion. I still can't get over having to wait several hours for my root partition to become available after an improper shutdown. On 3/18/06, Joachim Schipper [EMAIL PROTECTED]

bgpd error: route decision engine terminated; signal 11

2006-03-19 Thread fabioFVZ
Hello, i have a problem with my openbgpd (OpenBSD 3.8 from Original CD :) ) After random time...bgpd exit with this error: Mar 19 16:57:10 bgp bgpd[27773]: Lost child: route decision engine terminated; signal 11 Mar 19 16:57:10 bgp bgpd[5216]: fatal in SE: session_dispatch_imsg: pipe closed:

Strange CPU load with rpldev/openbsd

2006-03-19 Thread Jan Engelhardt
Hello, a user has reported high CPU usage in `top` when running rpld from ttyrpld 2.12. It is repeatable with the current one (2.15), and it seems to boil down to the read() function of the rpldev device, as I have found out by placing getrusage() before and after the main read() call in rpld.

Re: CanSecWest/core06 Vancouver April 3-7

2006-03-19 Thread Diana Eichert
People that work for large enterprises, that's who. Besides I believe it includes the cost of tutorials if I'm not mistaken. I know conferences that cost more. diana On Sun, 19 Mar 2006, paul dansing wrote: This conference currently costs $1546 USD! :-( what moneybags loser is going to

Re: pppoe (through pcn) stopped working in mid-February

2006-03-19 Thread Alexander Farber
The kernel and the rest were out of sync - that's why pppoe wasn't working. Sorry for the wrong report. On 3/9/06, Alexander Farber [EMAIL PROTECTED] wrote: I was following -current with my home gateway on a dual-CPU HP Kayak XAs (full dmesg attached), but since mid-February I'm unable to do

Re: OpenBSD/Linux centralized authentication

2006-03-19 Thread Adam D. Morley
On Sun, Mar 19, 2006 at 10:42:53AM +0400, Bruno Carnazzi wrote: Hi misc, At work, we are running a Microsoft Active Directory for our Windows Domain, who mainly provided Windows Desktop for our customers and centralized authentication. We have also several OpenBSD Linux boxes for

Re: bgpd error: route decision engine terminated; signal 11

2006-03-19 Thread Sylwester S. Biernacki
On Sunday, March 19, 2006, at 19:22:25, fabioFVZ wrote: Hello, i have a problem with my openbgpd (OpenBSD 3.8 from Original CD :) ) After random time...bgpd exit with this error: [..] Any idea? Many thanks Have similar problems. Try update obgpd to current version via CVS It worked for

ReinerSCT cyberjack pinpad USB (0x300) Smartcard-Reader

2006-03-19 Thread OpenBSD Prospect
Hi! I have two of these devices, which work in Gentoo Linux using Harald Welte's open-source driver (http://support.reiner-sct.de/downloads/LINUX/V2.0.9/ctapi-cyberjack-2.0.9.tar.bz2). I have an A-TRUST signature card, and I can login to my bank's online-banking, and I was hoping to use the

Re: CanSecWest/core06 Vancouver April 3-7

2006-03-19 Thread Jason George
This conference currently costs $1546 USD! :-( what moneybags loser is going to pay up so much just to go to a conference? buy yourself a nice computer, or hell, donate the money to openbsd.org instead! :-D drop a zero or two and it would be worth the trip Clearly you've never been to a

restore question: is my dump hosed?

2006-03-19 Thread dick
i made what i thought would be a fine backup of a freebsd-6.0 machine using dump. more specifically i issued a # dump -0f - /usr | ssh -o 'EscapeChar none' [EMAIL PROTECTED] cat /usr/dumps/usr.fs this created usr.fs on my openbsd backup host. now that i'm trying to restore the dump on my backup

Re: UPEK Fingerprint-Reader (ThinkPad Notebooks)

2006-03-19 Thread Theo de Raadt
I was wondering, if anybody knows, if / when the embedded fingerprint reader of certain ThinkPad notebooks (like in my T42p) will be supported in OpenBSD, since UPEK already officially supports Linux FreeBSD (http://www.upek.com/support/dl_freeBSD_bsp.asp)? Go ahead, recompile it. And if

Re: UPEK Fingerprint-Reader (ThinkPad Notebooks)

2006-03-19 Thread Jonathan Gray
On Mon, Mar 20, 2006 at 01:00:57AM +0100, OpenBSD Prospect wrote: Hi! I was wondering, if anybody knows, if / when the embedded fingerprint reader of certain ThinkPad notebooks (like in my T42p) will be supported in OpenBSD, since UPEK already officially supports Linux FreeBSD

Re: UPEK Fingerprint-Reader (ThinkPad Notebooks)

2006-03-19 Thread Theo de Raadt
On Mon, Mar 20, 2006 at 01:00:57AM +0100, OpenBSD Prospect wrote: Hi! I was wondering, if anybody knows, if / when the embedded fingerprint reader of certain ThinkPad notebooks (like in my T42p) will be supported in OpenBSD, since UPEK already officially supports Linux FreeBSD

Re: CARP+pf+pfsync redundant firewalls running active/active doable?

2006-03-19 Thread Jason Stubbs
Jason Stubbs wrote: From what I understand of the theory, it should work but I was hoping to get a yes, I'm doing it from somebody. Unless there's a reason it won't work, I'll be having a go and getting it set up in the first week of March and will write back with the results. Ok, I had

Re: USB Scanner question

2006-03-19 Thread Navan Carson
Antoine Jacoutot wrote: I, for one, am very happy with my Epson USB scanner. I can scan via USB and via the LAN too. Just out of curiosity, which model scanner do you have? I'd never considered looking for one that can scan via the LAN, but now that you mention it, that sounds useful.

USB

2006-03-19 Thread Dan Smythe
I have a USB DVD drive and a USB hard drive that are running slowly. In my dmesg (attached) it says that I am using USB 1.0. Is this a limitation of my hardware, or doesn't OpenBSD 3.8 have USB 2.0 support yet? Thanks --dmesg--- OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005

Re: restore question: is my dump hosed?

2006-03-19 Thread Joachim Schipper
On Sun, Mar 19, 2006 at 06:25:28PM -0600, [EMAIL PROTECTED] wrote: i made what i thought would be a fine backup of a freebsd-6.0 machine using dump. more specifically i issued a # dump -0f - /usr | ssh -o 'EscapeChar none' [EMAIL PROTECTED] cat /usr/dumps/usr.fs this created usr.fs on my

Re: USB

2006-03-19 Thread Jonathan Gray
On Sun, Mar 19, 2006 at 08:13:33PM -0800, Dan Smythe wrote: I have a USB DVD drive and a USB hard drive that are running slowly. In my dmesg (attached) it says that I am using USB 1.0. Is this a limitation of my hardware, or doesn't OpenBSD 3.8 have USB 2.0 support yet? Thanks --dmesg---

Re: USB

2006-03-19 Thread Lars Hansson
On Monday 20 March 2006 12:13, Dan Smythe wrote: uhci0 at pci0 dev 7 function 2 Intel 82371AB USB rev 0x01: irq 11 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered Your machine only has USB 1.0

Re: restore question: is my dump hosed?

2006-03-19 Thread Damian Gerow
Thus spake Joachim Schipper ([EMAIL PROTECTED]) [20/03/06 00:34]: : Provided that you didn't do something strange when copying the dump, it : should - at least - be restorable on something that closely resembles : the platform it was taken on (FreeBSD-6.x). I believe the default FS type in

Remote syslogging

2006-03-19 Thread Nick Guenther
Hi list, I want to log things remotely (from a consumer-grade router running linux that keeps dying on me). I think the proper way to do this is to do syslogd -u but I am not sure because the manpage only vaguely mentions how insecure the -u option is and doesn't really explain it. I've found a

Re: USB Scanner question

2006-03-19 Thread Antoine Jacoutot
On Sun, 19 Mar 2006, Navan Carson wrote: Just out of curiosity, which model scanner do you have? I'd never considered looking for one that can scan via the LAN, but now that you mention it, that sounds useful. I own an Epson Perfection 1650. With all supported SANE scanners you should be

bgpd crash in snapshot of Mar 18 when use as route-reflector

2006-03-19 Thread Daniel Ouellet
I got bgpd crashing and kill itself in current snapshot of March 18. Happen twice so far, but I can't see why yet. Here is the error message I got: Mar 20 01:34:14 vcnam1 bgpd[18551]: fatal in SE: session_dispatch_imsg: pipe closed: Operation now in progress Mar 20 01:34:14 vcnam1

Re: restore question: is my dump hosed?

2006-03-19 Thread Joachim Schipper
On Mon, Mar 20, 2006 at 12:35:47AM -0500, Damian Gerow wrote: Thus spake Joachim Schipper ([EMAIL PROTECTED]) [20/03/06 00:34]: : Provided that you didn't do something strange when copying the dump, it : should - at least - be restorable on something that closely resembles : the platform it

Re: Remote syslogging

2006-03-19 Thread Joachim Schipper
On Mon, Mar 20, 2006 at 01:00:58AM -0500, Nick Guenther wrote: Hi list, I want to log things remotely (from a consumer-grade router running linux that keeps dying on me). I think the proper way to do this is to do syslogd -u but I am not sure because the manpage only vaguely mentions how

Re: RAIDframe partitioning choices...

2006-03-19 Thread Anthony Howe
Joachim Schipper wrote: On Fri, Mar 17, 2006 at 07:36:13PM +0100, Anthony Howe wrote: Joachim Schipper wrote: --wd0a----wd1a-- / (bootable)/ (bootable) /tmp/tmp /usr/usr /var/var --wd0d--

Re: OpenBSD/Linux centralized authentication

2006-03-19 Thread Jurjen Oskam
On Sun, Mar 19, 2006 at 02:27:39PM -0800, Adam D. Morley wrote: MS AD provides MIT-ish KDC support, or so I hear. I've never used it from the UNIX side, but I do know that Windows clients will willingly talk to a UNIX KDC, and I'm told the reverse is true. Yes, you can authenticate against