npppd radius on current jan 21

2013-01-30 Thread Robert Blacquiere
Hi, I run in to a issue using npppd with radius. It look to me the parsing of radius port info is not working. I have: authentication section: authentication RADIUS type radius { authentication-server { address 192.168.0.1 port 1812 secret hogehoge }

Re: npppd radius on current jan 21

2013-01-30 Thread mxb
Yasuoka forgot to commit his fix. I have it working. //maxim On 30 jan 2013, at 11:54, Robert Blacquiere open...@blacquiere.nl wrote: Hi, I run in to a issue using npppd with radius. It look to me the parsing of radius port info is not working. I have: authentication section:

Re: vnd and softraid panic

2013-01-30 Thread Joel Sing
On Wed, 30 Jan 2013, Eivind Evensen wrote: On Wed, Jan 23, 2013 at 02:33:16AM +1100, Joel Sing wrote: On Thu, 3 Jan 2013, Eivind Evensen wrote: On Mon, Dec 31, 2012 at 07:21:08PM +1100, Joel Sing wrote: On Mon, 31 Dec 2012, Eivind Evensen wrote: Hello. Trying to play

OpenBSD 5.2 isakmpd sequence number problem

2013-01-30 Thread Bartosz Brzozowski
Hi Misc. I have two location A i B in my lab. In the location A there is isakmpd + carp + pfsync + sasync cluster on which there is installed OpenBSD 5.2 GENERIC.MP#339 i386 In the location B there is single OpenBSD 5.2 GENERIC#278 i386 installation. I have successfully established IPsec

CARP best practices

2013-01-30 Thread System Administrator
I finally got to deploy a CARP firewall cluster (HA failover for now). Using only the official OpenBSD.org documentation, everything went very smoothly even though the setup is not quite trivial (14 carp addresses on 6 active interfaces). I even got system replication going using rdist(1).

OpenBSD 5.2, high idle interrupts with stable amd64 bsd.mp

2013-01-30 Thread matyssik
Running stable OpenBSD 5.2 and in the top I see high interrupt CPU utilization despite machine being idle. I am not sure if I should be worried or if the is some sort of bug. Please advise. dmesg: OpenBSD 5.2-stable (MERCURY.MP) #0: Sun Jan 27 21:58:30 JST 2013

Re: CARP best practices

2013-01-30 Thread Johan Beisser
On Wed, Jan 30, 2013 at 8:56 AM, System Administrator ad...@bitwise.net wrote: I finally got to deploy a CARP firewall cluster (HA failover for now). Using only the official OpenBSD.org documentation, everything went very smoothly even though the setup is not quite trivial (14 carp addresses

Re: CARP best practices

2013-01-30 Thread Alexander Hall
On 01/30/13 17:56, System Administrator wrote: I finally got to deploy a CARP firewall cluster (HA failover for now). Using only the official OpenBSD.org documentation, everything went very smoothly even though the setup is not quite trivial (14 carp addresses on 6 active interfaces). I even got

Re: CARP best practices

2013-01-30 Thread System Administrator
On 30 Jan 2013 at 9:29, Johan Beisser wrote: On Wed, Jan 30, 2013 at 8:56 AM, System Administrator ad...@bitwise.net wrote: I finally got to deploy a CARP firewall cluster (HA failover for now). Using only the official OpenBSD.org documentation, everything went very smoothly even though

Re: CARP best practices

2013-01-30 Thread Johan Beisser
On Wed, Jan 30, 2013 at 9:44 AM, System Administrator ad...@bitwise.net wrote: On 30 Jan 2013 at 9:29, Johan Beisser wrote: While testing the failover and trying to ssh to a carp address I got hit with the server key mismatch; hence this email. What is considered best practice wrt ssh

a possible rdist bug

2013-01-30 Thread System Administrator
To simplify maintenance of a carp firewall cluster, I setup system replication with rdist(1), which works rather nicely with one notable exception where cmdspecial fires even when there are no updated files. It is the only instance of cmdspecial that misfires, it is also the only instance that

mfs / mount_mfs(8) memory usage never shrinks?

2013-01-30 Thread Constantine A. Murenin
Hello misc@, On OpenBSD 5.2 amd64, I'm storing 1.4GB of source code files and about 8x 150MB indices on an mfs partition, plus a gig or two of other automatically-generated files. If I run mount_mfs to load all this stuff from a regular drive, then the amount of memory used by mount_mfs(8) is

Re: CARP best practices

2013-01-30 Thread System Administrator
Thank you Alexander (and Johan) for confirming what I kinda suspected -- use shared keys if it is a published (ie. failover required) service, otherwise bind only to dedicated address(es) using dedicated keys. On 30 Jan 2013 at 18:33, Alexander Hall wrote: On 01/30/13 17:56, System

Re: CARP best practices

2013-01-30 Thread Jiri B
On Wed, Jan 30, 2013 at 09:29:42AM -0800, Johan Beisser wrote: On Wed, Jan 30, 2013 at 8:56 AM, System Administrator ad...@bitwise.net wrote: I finally got to deploy a CARP firewall cluster (HA failover for now). Using only the official OpenBSD.org documentation, everything went very

Re: CARP best practices

2013-01-30 Thread Johan Beisser
On Wed, Jan 30, 2013 at 2:03 PM, Jiri B ji...@devio.us wrote: On Wed, Jan 30, 2013 at 09:29:42AM -0800, Johan Beisser wrote: Don't monitor SSH on the CARP address. Doesn't it depend on the purpose of this SSH service? If it is to manage individual boxes, then sshd should not listen on CARP

Re: mfs / mount_mfs(8) memory usage never shrinks?

2013-01-30 Thread Stuart Henderson
On 2013-01-30, Constantine A. Murenin muren...@gmail.com wrote: Hello misc@, On OpenBSD 5.2 amd64, I'm storing 1.4GB of source code files and about 8x 150MB indices on an mfs partition, plus a gig or two of other automatically-generated files. If I run mount_mfs to load all this stuff from

frontiernet mirror

2013-01-30 Thread Andrew Ngo
I think the openbsd.mirror.frontiernet.net mirror is stale; its most recent packages are dated Jan 8th to me. Does anyone else see this? -- Sincerely, Andrew Ngo

Re: npppd with tun interface not work on i386?

2013-01-30 Thread YASUOKA Masahiko
Hi, On Tue, 29 Jan 2013 20:20:24 +0100 csszep css...@gmail.com wrote: I tried to start npppd with the default config with tun0 interface on my Alix board: I get the following error message: # npppd -d 2013-01-29 19:54:38:NOTICE: Starting npppd pid=13464 version=5.0.0 2013-01-29

Re: a possible rdist bug

2013-01-30 Thread Philip Guenther
On Wed, Jan 30, 2013 at 11:46 AM, System Administrator ad...@bitwise.net wrote: To simplify maintenance of a carp firewall cluster, I setup system replication with rdist(1), which works rather nicely with one notable exception where cmdspecial fires even when there are no updated files. It is

Re: vnd and softraid panic

2013-01-30 Thread Eivind Evensen
On Thu, Jan 31, 2013 at 12:20:14AM +1100, Joel Sing wrote: On Wed, 30 Jan 2013, Eivind Evensen wrote: On Wed, Jan 23, 2013 at 02:33:16AM +1100, Joel Sing wrote: On Thu, 3 Jan 2013, Eivind Evensen wrote: On Mon, Dec 31, 2012 at 07:21:08PM +1100, Joel Sing wrote: On Mon, 31 Dec 2012,

Re: CARP best practices

2013-01-30 Thread Peter Hessler
Please keep in mind that if the cluster should fail over while you are logged in via ssh, you will stop being logged in. On 2013 Jan 30 (Wed) at 15:50:14 -0500 (-0500), System Administrator wrote: :Thank you Alexander (and Johan) for confirming what I kinda suspected -- : use shared keys if it