ipmi driver broken

2017-06-28 Thread Paul B. Henson
I noticed back when I upgraded to 5.9 the ipmi driver stopped working, it just said: ipmi0: get header fails ipmi0: no SDRs IPMI disabled I found the following post at the time which appeared to point out the issue and suggest a fix: http://openbsd-archive.7691.n7.nabble.com/fix-for-quot-ipmi0-g

Re: ipmi driver broken

2017-06-28 Thread Paul B. Henson
On Wed, Jun 28, 2017 at 06:31:34PM -0400, Predrag Punosevac wrote: > My understanding is that ipmi driver used by ipmitool is disabled > intensionally due to the security problems. IPMI pose a grave security > risk. IPMI on the SP is available whether or not the openbsd driver is enabled or in us

Re: ipmi driver broken

2017-06-29 Thread Paul B. Henson
> From: Theo de Raadt > Sent: Wednesday, June 28, 2017 8:41 PM > > If you want it working, you will need to get it fixed. On all > machines, so that we can renable it. I definitely don't want to be one of those entitled people demanding work from developers without providing anything that you tr

Re: ipmi driver broken

2017-06-29 Thread Paul B. Henson
> From: Ted Unangst > Sent: Wednesday, June 28, 2017 8:50 PM > > i'm afraid i won't make a very good ipmi maintainer, but i think i applied the > patch in the right spot. Cool, thanks; much appreciated.

openldap port mdb support

2017-07-09 Thread Paul B. Henson
mdb has been disabled in the openldap port since it looks like 2015/02/16, I was wondering if anyone has tried it since then to see if maybe the issues with it have been resolved? The other backends are deprecated upstream, it would be nice to get mdb working under openbsd. I'm going to try enabli

WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-08-02 Thread Paul B. Henson
I'm trying to compile openldap from ports under 6.1, and running it fails with the error: slapd:/usr/local/lib/libicuuc.so.12.0: /usr/local/lib/libicudata.so.12.0 : WARNING: symbol(icudt58_dat) size mismatch, relink your program I see there was some dicussion of this back around April, but no res

Re: WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-08-03 Thread Paul B. Henson
On Wed, Aug 02, 2017 at 05:37:40PM -0700, Paul B. Henson wrote: > I'm trying to compile openldap from ports under 6.1, and running it > fails with the error: > > slapd:/usr/local/lib/libicuuc.so.12.0: /usr/local/lib/libicudata.so.12.0 > : WARNING: symbol(icudt58_dat) size m

Re: openldap port mdb support

2017-08-03 Thread Paul B. Henson
On Mon, Jul 10, 2017 at 07:34:11AM +, Stuart Henderson wrote: > Feel free to try it, I believe the required patch to force MDB_WRITEMAP > is still in there..but I don't think there were any major changes upstream > since the last attempt so I wouldn't hold out too much hope for it working > st

Re: WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-08-03 Thread Paul B. Henson
On Thu, Aug 03, 2017 at 05:33:15PM -0400, Predrag Punosevac wrote: > It is well known issue. > > https://marc.info/?l=openbsd-misc&m=149271724912565&w=2 > > It seems to be benign at least for my use case. Yah, I saw that discussion from back in April, but then it just stopped with no resolution

Re: WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-08-05 Thread Paul B. Henson
On Sat, Aug 05, 2017 at 12:35:24AM +, Stuart Henderson wrote: > The ports@ list is a better venue for ports-related queries, > please see this: https://marc.info/?l=openbsd-ports&m=150157643516239&w=2 Ah, ok, thanks for the pointer. > This is not preventing programs from running. Hmm, I cou

Re: OpenBSDI 6.1 some Warnings when using OpenLDAP Tools

2017-08-10 Thread Paul B. Henson
On Wed, Aug 09, 2017 at 09:06:19AM +0200, Markus Rosjat wrote: > this is more an info then a problem though since it seems to work. > When I use the slap tool like slapcat I get a size mismatch warning like > this Heh, we were just talking about that: https://marc.info/?l=openbsd-misc&m=1501994

opensmtpd / ldap unreliable

2018-05-22 Thread Paul B. Henson
So I recently converted my opensmtpd server to use ldap as the backend for user authentication. It seems it's a bit untolerant to ldap issues? If the ldap server isn't available when opensmtpd is started, it says it started: # /etc/rc.d/smtpd start smtpd(ok) But it isn't there: # ps -aux | grep

Re: opensmtpd / ldap unreliable

2018-05-23 Thread Paul B. Henson
> From: justina colmena > Sent: Tuesday, May 22, 2018 9:08 PM > > Are they being started in the wrong order at boot time? The LDAP server in use is not running on the local openBSD system. It might not be available due to an underlying network issue or some other problem that temporarily preve

Re: opensmtpd / ldap unreliable

2018-05-23 Thread Paul B. Henson
> From: Gilles Chehade > Sent: Wednesday, May 23, 2018 1:20 PM > > That's bad but could easily be fixed if you want to help us Definitely; I'll pull the latest github head down and see if that fixes the LDAP connection recovery after startup issue, and then I can try any suggestions to make it mo

Re: opensmtpd / ldap unreliable

2018-05-24 Thread Paul B. Henson
> From: Gilles Chehade > Sent: Wednesday, May 23, 2018 1:20 PM > > That's bad but could easily be fixed if you want to help us So I dropped in the latest table-ldap from git, and it still failed authentications after an LDAP server outage. It looks like the check is only in the table_ldap_check f

Re: opensmtpd / ldap unreliable

2018-05-26 Thread Paul B. Henson
On Sat, May 26, 2018 at 08:16:28AM +0200, Gilles Chehade wrote: > please do so we have more people able to test Done, thanks. What are your thoughts design-wise on dealing with ldap not being available at startup? Should layer 7 issues (ldap auth failed, etc) be handled differently than transpor

smtpd new "relay as" syntax?

2018-10-31 Thread Paul B. Henson
I just upgraded to OpenBSD 6.4, and I'm trying to figure out how to do this with the new syntax: accept from local for any relay via smtp://smtp.domain.com as "@domain.com" This would rewrite the outbound message to masquerade as being from the TLD rather than a specific machine. Right now I've g

Re: smtpd new "relay as" syntax?

2018-10-31 Thread Paul B. Henson
On Wed, Oct 31, 2018 at 08:07:09PM -0400, TronDD wrote: > Mail-from in the action options, I believe. Ah, yes; that seems to work, thanks. The previous implementation was documented as: If the as parameter is specified, smtpd(8) will rewrite the sender advertised in the SMTP session. address ma

isc bind - error sending response: would block

2018-11-16 Thread Paul B. Henson
I recently updated a couple servers that were running OpenBSD 6.3 with bind 9.11.3 to OpenBSD 6.4 and bind 9.11.4pl2. Since then, I'm been getting a large number of "error sending response: would block" log messages: Nov 15 11:03:58 lisa named[79587]: client @0x6f2f02bc440 10.128.30.77#65198 (p64

mysteriously disappearing pf state entries

2020-05-08 Thread Paul B. Henson
I'm running OpenBSD 6.6 operating as an inter-VLAN and border router using pf. Recently I wanted to use a nondefault state timeout for some UDP traffic traversing from my voip subnet to a provider off site. Within pf, there are three rules involved. The first is for traffic coming from the voi

lost pf state - disappeared before expiration?

2020-05-17 Thread Paul B. Henson
I'm trying to set a longer timeout on a udp state, and for some reason it seems to be disappearing before the expiration 8-/. There are 3 rules involved: pass in quick on vlan110 proto udp from any to port = 9430 tag VOIP_UDP keep state (udp.multiple 360) pass out quick on $ext_if proto udp tag

Re: lost pf state - disappeared before expiration?

2020-05-18 Thread Paul B. Henson
On 5/17/2020 8:40 PM, Strahil Nikolov wrote: > What is your conf having as a timeout ? Both of the rules explicitly override the default timeout with a six minute rule level timeout: pass in quick on vlan110 proto udp from any to port = 9430 tag VOIP_UDP keep state (udp.multiple 360) pas

state replication bug in pfsync?

2020-06-04 Thread Paul B. Henson
I've been trying to diagnose a mysterious issue where a UDP state disappears before it's supposed to expire. I finally tracked it down to pfsync. On the primary server, the state entries look like: all udp 198.148.6.55:9430 <- 10.128.110.73:9430 MULTIPLE:MULTIPLE age 00:02:21, expires

pfsync and rule specific state timeouts

2020-06-05 Thread Paul B. Henson
Where is it documented that in order for pfsync to properly synchronize rule specific state timeouts that the rule sets on the systems being synchronized must be *exactly* the same? I have a pair of redundant firewalls synchronizing state, and recently added a couple rules that increase the de

Re: pfsync and rule specific state timeouts

2020-06-07 Thread Paul B. Henson
On 6/5/2020 11:15 PM, obs...@loopw.com wrote: 1) “egress” can be used to reference the external nic in a rule, instead of having a specific IP. Egress is defined as the nic with the default route. pass in quick log on egress inet proto tcp to (egress) port 22 Ah, I think I seen that in the p

pfsync interface in carp group

2020-06-07 Thread Paul B. Henson
I've had a pair of redundant firewalls using pfsync for years. I've noticed in the past that whenever I rebooted the secondary firewall, the carp interfaces on the primary would flip to backup and then back to master as the secondary one rebooted. I never really noticed any issues with it, so I

Re: pfsync interface in carp group

2020-06-08 Thread Paul B. Henson
On 6/7/2020 5:21 PM, Markus Wernig wrote: I don't see that behaviour on my carp pair. Are you using a cross-link cable between the two firewalls? (You shouldn't, in my experience.) Yes, I am using a direct link between the two physical firewalls. It seems to be the configuration recommended b

Re: pfsync interface in carp group

2020-06-08 Thread Paul B. Henson
On 6/8/2020 6:29 AM, Philipp Buehler wrote: did you follow some "howto" and set net.inet.carp.preempt=1? Well, if you consider the official openBSD documentation a "how-to", then yes :). In the example in https://www.openbsd.org/faq/pf/carp.html under the section "Combining CARP and pfsync

Re: pfsync interface in carp group

2020-06-09 Thread Paul B. Henson
On 6/9/2020 7:36 AM, Stuart Henderson wrote: IME the best setup for pfsync between 2 machines is to use a dedicated cross-connect (preferably configured for jumbo frames). Obviously that's not possible with >2 machines though. Hmm, I had never considered using jumbo frames. It looks like based

Re: pfsync interface in carp group

2020-06-09 Thread Paul B. Henson
On 6/9/2020 1:42 PM, Markus Wernig wrote: Neither jumbo frames nor multicast will prevent group demotion when the other side of a crosslink cable goes physically down. Only not having the sync interface in the carp group will. True. But I think he was just discussing general best practices, no

skylake Xeon, C232 chipset, i210-AT ethernet

2015-12-17 Thread Paul B. Henson
I'm about to build a server with a supermicro X11SSL-F motherboard and a Xeon E3-1240L v5 processor. The SATA ports should be AHCI compliant, and it looks like the i210-AT ethernet is supported by the em driver, so I think everything should work ok. But it's pretty new stuff, so I wanted to check a

kernel reordering and config -e

2017-11-19 Thread Paul B. Henson
I just updated a server to 6.2; unfortunately this box has an oddball SOL com2 on irq10 so I need to run 'config -e' on the kernel to update it and make the serial console work. I noticed afterwards in the boot messages it was complaining about kernel reordering failures, and thinking I was fixing

Re: kernel reordering and config -e

2017-11-19 Thread Paul B. Henson
On Mon, Nov 20, 2017 at 06:50:30AM +0100, Sebastien Marie wrote: > When it did that, it uses the object (I didn't recall the exact name) > with the previous mentioned array, with *default* configuration. So the > previous modification done with config(8) is cleared. Yeah, I figured that out after

Sierra Wireless MC7455 LTE cell network card

2017-11-19 Thread Paul B. Henson
I'm trying to get the subject card to work under OpenBSD 6.2; it works fine under Linux so I know the card itself and its SIM etc are correctly configured and functional. The card is set to MBIM mode, and I'd like to use the umb driver rather than the umsm driver as not to have to muck with PPP. I

Re: kernel reordering and config -e

2017-11-20 Thread Paul B. Henson
On Mon, Nov 20, 2017 at 08:37:43AM +, Roderick wrote: > Commenting out the line "/usr/libexec/reorder_kernel &" at the > end of rc? > > I suspect it is not forseen not to benefice of KARL. No, actually, if the hash of the kernel is different than expected, the reorder_kernel aborts and doesn

Re: kernel reordering and config -e

2017-11-21 Thread Paul B. Henson
On Mon, Nov 20, 2017 at 02:01:56PM -0700, Theo de Raadt wrote: > If someone wants to solve this fully there have been some proposals > for keeping track of the instruction sequence, and attempting to > reapply it upon each relink in the build directory. There just hasn't > been any scripting chan

Re: kernel reordering and config -e

2017-11-21 Thread Paul B. Henson
On Tue, Nov 21, 2017 at 09:49:37AM +, Dimitris Papastamos wrote: > This is what I do in rc.shutdown to handle this case: > > /usr/bin/printf "disable inteldrm*\nquit\n" | /usr/sbin/config -ef /bsd > /bin/sha256 -h /var/db/kernel.SHA256 /bsd Cool, thanks for the suggestion; that should be goo

Re: kernel reordering and config -e

2017-11-22 Thread Paul B. Henson
On Wed, Nov 22, 2017 at 04:45:59PM +, Kevin Chadwick wrote: > I believe the second scenario would need /dev/mem access making it a > larger change than it first appears (config with a new option could > possibly save the original kernel file and compare the two kernel > files). Ah, I didn't m

umb device, SIM has no PIN?

2017-11-22 Thread Paul B. Henson
I'm trying to get an LTE card working in MBIM mode with the umb device driver, but it just keeps saying "SIM not initialized PIN required". The SIM isn't PIN locked, as far as I know the SIM has no PIN. I've tested the card and SIM under linux on the exact same system and was able to get it working

Re: umb device, SIM has no PIN?

2017-11-23 Thread Paul B. Henson
> The card is a Sierra Wireless MC7455; to get it working with the umb Looking at the source code, I see that there's an workaround for the EM7455 card, something about requiring an "FCC Authentication" command? >From what I understand the MC7455 is the same as the EM7455 other than form factor,

Re: umb device, SIM has no PIN?

2017-11-24 Thread Paul B. Henson
On Fri, Nov 24, 2017 at 11:08:25AM +, Stuart Henderson wrote: > > booted under openbsd. The umb driver doesn't support accessing the card > > directly for debugging and diagnostics? > > Correct, you can't get at those from OpenBSD atm. That's a bummer; guess you wouldn't care too much if thi

broken EHCI USB on AMD chipset?

2017-11-28 Thread Paul B. Henson
I have a pcengines APU 3 system, which has both USB3 and USB2 ports: ehci0 at pci0 dev 18 function 0 "AMD Hudson-2 USB2" rev 0x39: apic 4 int 18 ehci1 at pci0 dev 19 function 0 "AMD Hudson-2 USB2" rev 0x39: apic 4 int 18 xhci0 at pci0 dev 16 function 0 "AMD Bolton xHCI" rev 0x11: msi The USB2 po

pcengines apu boards

2017-11-30 Thread Paul B. Henson
I was wondering if anybody is successfully running openbsd on pcengines apu boards? I have one of their APU3 series, specifically a apu3b4 with OpenBSD 6.2 on it but I can't get the USB2 EHCI ports functioning correctly (for one thing, they don't detect a hot plugged device), I'm not sure if it's a

Re: pcengines apu boards

2017-11-30 Thread Paul B. Henson
> From: Base Pr1me > Sent: Thursday, November 30, 2017 2:08 PM > > I run 5 apu2 devices with no problems. I don't have any apu3 devices ... yet. Thanks for the feedback. Do you by any chance have any USB type Mini PCI cards installed internally? I initially noticed the issue with a mini PCI LTE

Re: pcengines apu boards

2017-11-30 Thread Paul B. Henson
> From: Bryan Everly > Sent: Thursday, November 30, 2017 2:46 PM > > I'm running my primary firewall at home on an apu2... Cool. Have you ever tried using an internal Mini PCI card in it?

Re: pcengines apu boards

2017-11-30 Thread Paul B. Henson
> From: Eike Lantzsch > Sent: Thursday, November 30, 2017 3:12 PM > > here: APU2C4 with one SATA drive of 6TB and one 4TB via USB3 and an Hmm, I didn't think the apu2 had USB3, but double checking the specs I see it does. My friend that said he had an APU2 must actually have an original APU, as h

Re: broken EHCI USB on AMD chipset?

2017-11-30 Thread Paul B. Henson
On Tue, Nov 28, 2017 at 08:03:05PM -0800, Paul B. Henson wrote: > The EHCI ports seem to work fine under Linux, including the LTE modem > when attached to them, so this seems to be an issue with openbsd, not > faulty hardware per se. I tested FreeBSD on this box as well, it detected

Re: broken EHCI USB on AMD chipset?

2017-12-01 Thread Paul B. Henson
> From: Stefan Sperling > Sent: Friday, December 1, 2017 10:35 AM > > Problems with ehci(4) on AMD SB700 are known. > For instance, athn(4) USB devices don't work on such ports. Interesting; that's a similar device to the LTE network modem I'm working with. > Could you try adding missing workaro

Re: pcengines apu boards

2017-12-02 Thread Paul B. Henson
On Sat, Dec 02, 2017 at 10:40:14PM +1000, Douglas Ray wrote: > On the APU3a4 the internal USB headers were broken. > I had email from pcengines (March 2017) saying this would > be addressed in the APU3b series., but we went for APU2. I have a APU3b series, they fixed the incorrect pinout on the i

Re: pcengines apu boards

2017-12-04 Thread Paul B. Henson
> From: Marko Cupac > Sent: Monday, December 4, 2017 3:54 AM > > I have just ordered one APU3b4, as I wanted to test mobile provider as > a backup link. I see it probably won't be any good as OpenBSD router > (yet), but at least I'll be able to test and give feedback. Assuming you're planning to

help updating EHCI driver

2017-12-05 Thread Paul B. Henson
I'm trying to port some quirks for AMD USB chipsets from other operating systems to OpenBSD to hopefully resolve issues I am having with the pc engines APU3 EHCI ports, as they seem to work fine on those systems. I've got a pretty rough draft of one of them, which disables low-power mode during tra

Re: 3g modem support

2017-12-06 Thread Paul B. Henson
> From: Marko Cupac > Sent: Wednesday, December 6, 2017 2:47 AM > > ...which suggests some Sierra Wireless modems, none of which are > available for purchase in the country I live in. I've got the MC7455, which I believe is basically the same as the EM7455. Presumably this might be one of the ca

Re: help updating EHCI driver

2017-12-07 Thread Paul B. Henson
> From: Martin Pieuchot > Sent: Thursday, December 7, 2017 3:18 AM > > Which issue are you having? Sorry, there was more context in an earlier thread. Basically, I have a pc engines APU3 board which has AMD Hudson-2 EHCI USB ports on it. If devices are plugged in when the system boots and the p

rdomain/rtable

2017-12-19 Thread Paul B. Henson
I've got a box with an LTE cellular modem in it whose purpose is to provide a backup connection to the Internet if the hardwire service goes down. It's running OSPF to connect to the rest of the network, and the only time any traffic should go over the cellular link (which is slower and bandwidth c

Re: Solved IPMI, but I can't get onto network to outside

2017-12-21 Thread Paul B. Henson
On Thu, Dec 21, 2017 at 12:52:33PM -0700, Chris Bennett wrote: > > > IP: 104.217.196.248/29 > > > Gateway: 104.217.196.249 > > > Netmask: 255.255.255.248 > > > > > > > What is your network interface? > > > > I have two, em0 and em1 > > em0: > inet 104.217.196.248 255.255.255.248 > > And I adm

Re: rdomain/rtable

2017-12-24 Thread Paul B. Henson
Thanks for the info. I don't want to move any interfaces to a non-default routing domain, I just want to be able to run a process with a different default route. I can make that work, via the route -T 10 exec you mention after setting a default route in that domain. But I can't seem to get traffic

Re: pcengines apu boards

2018-01-28 Thread Paul B. Henson
On Wed, Jan 17, 2018 at 12:56:04PM +0100, Christopher Zimmermann wrote: > I have the same problem and have tried to hunt the bug, but failed so > far. Have you already identified the quirks linux and freebsd use to > fix this problem? No :(, I worked on it for a while but kernel hacking isn't my

OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-15 Thread Paul B. Henson
I just updated one of my servers running 6.7 to 6.8, and am having a problem with openldap. I have the intermediate cert and root CA in a file referenced by the openldap config: TLSCACertificateFile/etc/openldap/cabundle.crt Under 6.7 with the openldap port from that version, this results in

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Paul B. Henson
On 11/15/2020 10:18 PM, Brad Smith wrote: I remember seeing this commit recently. Not sure if this is your problem or not. https://marc.info/?l=openbsd-cvs&m=160511882917510&w=2 That definitely looks like it, thanks for the pointer.

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Paul B. Henson
On 11/16/2020 2:30 AM, Stuart Henderson wrote: Yes OpenLDAP is broken with TLS 1.3 server-side unless you have that commit (or build LibreSSL with TLS 1.3 server support disabled). As far as I can tell there's no method to disable TLS 1.3 via config. Hmm, yah, you can disable old versions, but

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Paul B. Henson
On 11/16/2020 6:52 AM, Stuart Henderson wrote: ...actually I have now added a workaround to the databases/openldap port in 6.8-stable to disable TLS 1.3, so either rebuild or wait for -stable packages and it should fix things. Cool, I was actually already building from source in order to enabl

umb0 broke in 6.9

2021-06-13 Thread Paul B. Henson
I just upgraded a box that has a cell data card in it and it no longer seems to work :(. The card is: umb0 at uhub0 port 3 configuration 1 interface 12 "Sierra Wireless, Incorporated Sierra Wireless MC7455 Qualcomm\M-. Snapdragon? X7 LTE-A" rev 2.10/0.06 addr 2 The contents of /etc/hostname.umb0

6.9 kernel compile fails

2021-06-14 Thread Paul B. Henson
I'm trying to compile a kernel with some debugging enabled for an problem I've having with umb, and now my problem has turning into an error compiling the kernel :). After getting the error on my updated from 6.8 code base, I whacked it and did a fresh checkout, but it still shows up: -bash-5.1$ p

Re: umb0 broke in 6.9

2021-06-14 Thread Paul B. Henson
On Mon, Jun 14, 2021 at 08:07:15AM -, Stuart Henderson wrote: > just add "#define UMB_DEBUG" to if_umb.c and send the full dmesg output. Hmm, that's didn't work, I also needed to update umb_debug = 1 in the code? After that, I got a little output, full dmesg included below but the umb part lo

Re: umb0 broke in 6.9

2021-06-16 Thread Paul B. Henson
On 6/14/2021 4:54 PM, Stuart Henderson wrote: find when the problem started .. with 6.9 userland you can probably get away with just booting the relevant older kernel for a test for probably most/maybe all of the way back to 6.8. So I booted the 6.8 kernel, and everything seemed to be mostly w

wireguard reconfiguration reliability

2024-03-19 Thread Paul B. Henson
We're using wireguard to set up VPN connections from various systems deployed on-prem at customer sites to central openbsd boxes to route internal traffic between the remote boxes and the internal network. After a fresh reboot with a given configuration, everything works great. The problem we have

openbsd vm with SR-IOV vf nic

2024-03-19 Thread Paul B. Henson
Is it very common for people to be running openbsd boxes under virtualization and using an SR-IOV vf nic? I'm curious what cards people are using. It looks like the only available driver is iavf, for the Intel 700 cards? Are there any other drivers I missed? We have some systems with Intel X550 c

Re: wireguard reconfiguration reliability

2024-03-20 Thread Paul B. Henson
On 3/20/2024 1:44 AM, Kirill Miazine wrote: actually I checked, and I do use wgpka on clients, but not on the server -- I don't remember why I didn't... In our case the server is on an Internet accessible address, whereas the clients are behind a NAT firewall. We also have keepalives enabled

Re: openbsd vm with SR-IOV vf nic

2024-03-20 Thread Paul B. Henson
On 3/20/2024 2:46 AM, Jonathan Matthew wrote: mcx(4) supports virtual functions, mostly because they're identical to physical functions from the driver's perspective, so all we had to do was add the device IDs. Ah, that wasn't readily apparent; I didn't see anything in the man page mentioning

Re: wireguard reconfiguration reliability

2024-03-20 Thread Paul B. Henson
On 3/20/2024 9:21 AM, Zack Newman wrote: clients in rdomain(4) 0. Last week I ran ifconfig wg1 destroy, replaced the wgkey and wgpsk for one of the three wgpeers in the second interface, and ran sh /etc/netstart wg1. Once I did this, the server seemingly froze: That's similar to what we see, a

Re: wireguard reconfiguration reliability

2024-03-20 Thread Paul B. Henson
On Wed, Mar 20, 2024 at 09:56:06PM +0100, Kirill Miazine wrote: > Like in this thread, I guess: > > https://marc.info/?t=16964239631&r=1&w=2 Yes, that is likely the issue we're hitting. Seems last message is from 10/2023 and the issue wasn't resolved :(, so I guess it's a known problem with

Re: wireguard reconfiguration reliability

2024-03-21 Thread Paul B. Henson
On Thu, Mar 21, 2024 at 12:23:06PM +0300, Vitaliy Makkoveev wrote: > wg(4) diff was committed to -current. Does the problem exist in upcoming > 7.5? Oh, I didn't know a fix had been committed, the referenced thread didn't mention a final one. Thanks, I'll take a look.

Intel 10G X550T sr-iov virtual function driver

2023-04-28 Thread Paul B. Henson
I recently migrated an OpenBSD vm running under qemu/kvm to a new server which has an Intel 10G X550T NIC (Intel Corporation Ethernet Converged Network Adapter X550-T2) and am passing a vf though to the vm. Unfortunately, it appears openbsd doesn't have a driver for this virtualized device? The dm

what all touches the carp demote counter?

2016-10-10 Thread Paul B. Henson
I'm setting up a second router that's going to sit next to an existing one and become a redundant failover system. The current one is in production, and I've been converting some of the existing LAN subnets on it to use carp interfaces and making them primary and the new box secondary. I also set u

Re: what all touches the carp demote counter?

2016-10-10 Thread Paul B. Henson
On Mon, Oct 10, 2016 at 09:43:56PM -0300, R0me0 *** wrote: > Did you adjust advskew value on the machine you want to be Backup ? Yes, the backup has an advskew of 5 and the primary an advskew of 1. As I mentioned, when I first configured the interfaces by hand the two systems properly negotiated

Re: what all touches the carp demote counter?

2016-10-11 Thread Paul B. Henson
On Tue, Oct 11, 2016 at 08:44:05AM +0200, mxb wrote: > Master-Backup setup with pfsync in place, means that you synchronize > states between boxes. Then Master is rebooted, it becomes out-of-sync > then it comes to states. So until it is in sync with Backup (which > became Master after reboot),

Re: what all touches the carp demote counter?

2016-10-12 Thread Paul B. Henson
On Wed, Oct 12, 2016 at 08:37:59AM +0200, mxb wrote: > But as R0me0 stated, you should probably re-check your configuration. The configuration checked out. I rebooted a few more times, and I couldn't reproduce the problem. I still have no idea why the carp demotion counter was set to 2 the first

Re: what all touches the carp demote counter?

2016-10-14 Thread Paul B. Henson
Arg, I'm still having issues with the carp demote counter. I disabled ospfd for now, but something is still changing it. After a reboot without ospfd, the counter is changing between 0 and 1: bash-4.3# ifconfig -g carp carp: carp demote count 1 bash-4.3# ifconfig -g carp carp: carp demote count 0

Re: what all touches the carp demote counter?

2016-10-14 Thread Paul B. Henson
On Fri, Oct 14, 2016 at 01:27:42PM -0700, Paul B. Henson wrote: > Arg, I'm still having issues with the carp demote counter. I disabled > ospfd for now, but something is still changing it. After a reboot > without ospfd, the counter is changing between 0 and 1: Ah, I tracked

Supermicro X11SSL-F freezes probing USB 3

2016-03-07 Thread Paul B. Henson
I just put together a new server with a Supermicro X11SSL-F motherboard and a Xeon E3-1240L v5 processor, and was trying to install openbsd 5.8 on it. The install cd freezes while booting after it probes the USB 3 devices: >>> xhci probe won xhci0 at pci0 dev 20 function 0 "Intel 100 Series xHCI"

Re: Supermicro X11SSL-F freezes probing USB 3

2016-03-28 Thread Paul B. Henson
On Mon, Mar 28, 2016 at 03:06:39PM -0400, Sonic wrote: > If I wait long enough the install will finally finish booting but the > keyboard (no ps2 ports) doesn't work. Could I trouble you to be more specific as to the duration of "long enough" :)? I think my patience ran out after about 15-20 minu

Re: Supermicro X11SSL-F freezes probing USB 3

2016-03-29 Thread Paul B. Henson
On Tue, Mar 29, 2016 at 04:55:05PM -0400, Sonic wrote: > Unfortunately that option isn't available for me. The IPMI SOL on this > Dell stops forwarding the console once the system boots. The usb keyboard should still work when the bootloader is running, that's being handled by the BIOS. You just

Re: Supermicro X11SSL-F freezes probing USB 3

2016-03-29 Thread Paul B. Henson
On Tue, Mar 29, 2016 at 07:06:41PM -0400, Sonic wrote: > On Tue, Mar 29, 2016 at 6:15 PM, Paul B. Henson wrote: > > stty com1 115200 > > set tty com1 > > Yes, tried that with no luck, SOL still stops forwarding. The box does Hmm, that sounds broken. Are you sure you've

Re: Supermicro X11SSL-F freezes probing USB 3

2016-03-30 Thread Paul B. Henson
On Tue, Mar 29, 2016 at 10:46:15PM -0400, Sonic wrote: > The IPMI is part of Dell's iDRAC stuff and the only thing I've found [...] > may be the iDRAC license level as well, anything above the "basic" > level, providing a limited feature set, requires purchasing a license Eeew. We've got some HP

Re: Supermicro X11SSL-F freezes probing USB 3

2016-03-30 Thread Paul B. Henson
On Wed, Mar 30, 2016 at 03:34:25PM -0400, Sonic wrote: > Ahha! Who would have thought... com0 was the ticket. Thanks much! Sweet, glad to hear you got it working. Usually the IPMI SOL comes after the physical serial ports, I've never seen it be the first one. But hey, it's Dell :). Maybe now tha

no SDRs IPMI disabled?

2016-04-02 Thread Paul B. Henson
I just installed 5.9 on a Supermicro X11SSL-F board, and tried to enable the ipmi driver. During boot, it shows: ipmi0 at mainbus0: version 2.0 interface KCS iobase 0xca2/2 spacing 1 iic0: skipping sensors to avoid ipmi0 interactions ipmi0: get header fails ipmi0: no SDRs IPMI disabled ipmi at mai

Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Paul B. Henson
I'm looking at a supermicro SuperServer 5017A-EF for openbsd purposes, it's got an Intel atom S1260 SoC, Marvell 88SE9230 SATA, and i350AM2 dual gig interfaces. It looks like i350 support shipped in 5.2, and I'm pretty sure the Marvell chip is AHCI compliant, so I'd think that would be ok, but I'm

Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Paul B. Henson
On Fri, Nov 15, 2013 at 11:25:50PM +0100, Sebastian Benoit wrote: > Don't buy this one (yet). The Marvell 88SE9230 SATA does not work. > i know cause i have one ;-) Arg, disappointing, but I'm glad I thought to check before buying :). Do you know if anybody's working on it? So much for "standard"

Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Paul B. Henson
On Fri, Nov 15, 2013 at 11:25:50PM +0100, Sebastian Benoit wrote: > Don't buy this one (yet). The Marvell 88SE9230 SATA does not work. > i know cause i have one ;-) Hmm, looks like support was added in FreeBSD back in June 2012: http://lists.freebsd.org/pipermail/svn-src-stable-9/2012-June/00213

Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-16 Thread Paul B. Henson
On Sat, Nov 16, 2013 at 11:34:15AM +0100, Sebastian Benoit wrote: > sorry, i mispoke, i meant 5015A-* and they dont have a dedicated ipmi port. Oh, yah, I've actually got one of those, it's been working great. I was actually planning on replacing it with this newer one, which supports more memory

Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-16 Thread Paul B. Henson
On Sat, Nov 16, 2013 at 12:27:08PM +0100, Carsten Larsen wrote: > Maybe just buy the previous model 5015A-*? I have been running one of > those for some years now and it works like a charm. From their website I > see it has reached End-of-Life though. I've actually got one of those, as you say,

Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-16 Thread Paul B. Henson
On Fri, Nov 15, 2013 at 08:42:50PM -0800, Chris Cappuccio wrote: > It's very old. This patch did not make it into the driver and I have > no idea if those chips work through some other change, or not. Likely > not. These older chips must be really buggy pieces of shit if you have > to disable NCQ.

Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-16 Thread Paul B. Henson
On Sat, Nov 16, 2013 at 12:15:19PM -0800, Paul B. Henson wrote: > > sorry, i mispoke, i meant 5015A-* and they dont have a dedicated ipmi port. > > Oh, yah, I've actually got one of those, it's been working great. I was > actually planning on replacing it with this

low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-19 Thread Paul B. Henson
I was recently looking for a low-power small form factor box and was initially thinking of the supermicro SuperServer 5017A-EF, which seemed a good fit. Unfortunately, the fairly new atom SoC in that box isn't currently supported, nor is the crappy "not-quite-AHCI" Marvell sata controller. So, I'm

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
> From: Bryan Vyhmeister [mailto:br...@bsdjournal.net] > Sent: Tuesday, November 19, 2013 9:46 PM > > I have lots of X9SCL-F, X9SCL+-F, X9SCM-F, X9SCI-LN4, X9SCI-LN4F, > X9SCM-iiF boards running OpenBSD in production. Both network interfaces > work flawlessly. Cool, thanks much for the info. > Al

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
> From: Stuart Henderson > Sent: Wednesday, November 20, 2013 3:54 AM > > One thing to note, which may be irrelevant, but may be very important, > is which CPUs support AES-NI - the LGA1155 Pentium/i3 don't. Yeah, you've got to bump up to a much more expensive Xeon to get that :(. Thanks for the h

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
On Wed, Nov 20, 2013 at 12:35:35PM -0800, 'Bryan Vyhmeister' wrote: > From looking at Supermicro's CSE-510-203B page, it says 65W TDP and > every CPU I've mentioned below except for the Xeon E3 1220 (80W) and > Xeon E3 1230v2 (69W) fall below this. Hmm, I guess I was actually looking at the Super

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
> From: 'Bryan Vyhmeister' [mailto:br...@bsdjournal.net] > Sent: Wednesday, November 20, 2013 1:51 PM > > Very interesting. There is some ambiguity in the specs. Looking at the > SC510L-200B chassis which is what's included with the SYS-5017C-LF > system you linked to, it also says 65W TDP. Well,

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
On Wed, Nov 20, 2013 at 10:16:05PM -0500, Ted Unangst wrote: > The ipmi driver is disabled by default because it does bad things on > some systems. If you don't go out of your way to enable it, the not > configured line is all you'll see. That's what I was going to say, but you beat me to it ;).

Re: Patch to remove "adult" content from spamd(8) man page

2013-11-22 Thread Paul B. Henson
On Fri, Nov 22, 2013 at 01:09:36PM -0600, J. Lewis Muir wrote: > I don't see it that way. Huckleberry Finn is a book, and I don't need > to read it unless I want to. The spamd(8) man page is a man page I need > to read in order to understand how to use spamd. Let me fix that for you: "The spam

  1   2   >