Re: Which tools the OpenBSD developers are using?

2006-12-03 Thread Jeff Nelson
On Thu, Nov 30, 2006 at 10:56:53AM +0100, Robert Urban wrote:
> could this please please please be the last of this pure-noise thread??? 
> please please?

Come on Robert, lighten up. Drink a beer. Even geeks need to have fun
now and again.

Have a great day!
-jeff



authpf for console users

2006-12-03 Thread Peter Matulis

I am running 3.9 and 4.0 systems.  From what I see, I cannot use
authpf for users who have interactive shells.  This seems very
limiting.  Is there any workaround?  My idea is to load certain rules
I need for maintenance (upgrading packages via FTP for example).

Thank you.



BSDStats Report for December 1st, 2006

2006-12-03 Thread Marc G. Fournier
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


The following numbers reflect the change in reporting numbers between October 
and November 2006.  These include both those that reported *on* the 1st of the 
month, as well as those changes over the course of the month.

Since the point of this is to be run monthly, out of periodic monthly, the 1st
of the month is when all hosts should be 'renewing' their information.  As 
such, we tend to be more focused on the 39% increase in recurring monthly 
reports

OctNov % Chg

   DragonFly 13 11  -18%
137 18 -661%


 FreeBSD660   2085   68%
   1976   2659   25%


GNU/kFreeBSD 33  3-1000%
144  7-1957%


  MirBSD  0  1  100%
  8  4 -100%


  NetBSD365142 -157%
   1827276 -561%


 OpenBSD334 83 -302%
   3858927 -316%


  PC-BSD  2  1 -100%
 90 51  -76%

 Overall   1407   2326   39%
   8040   3942 -103%

The first row for each is the # that reported on the 1st of each month ... in 
theory, all hosts should be renewing their report on that date.

The second row represents total # of hosts that have reported on that month.

A complete comparison, including architecture and releases, can be found at:

  http://www.bsdstats.org/report.php?lastmonth&os=

where operating system is one of the above ...

For those wishing to see more formal stats, or more detail, please check out
http://www.bsdstats.org ...

Thank you to all that are currently participating ... and we look forward to 
seeing increases on subsequent months ...

- 
Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
iD8DBQFFc2l84QvfyHIvDvMRApy/AKC2WsBdKMRcLfHdDq2hbHemNzjlNgCfWl2g
lnhrVvJejbLKmOKwbclkkbM=
=jHFl
-END PGP SIGNATURE-



Re: NFS mounts in /etc/fstab

2006-12-03 Thread Rodrigo Valceli Raimundo

Rodrigo Valceli Raimundo wrote:
The problem is with the space on the mount point "Xserve RAID", '\ ' 
works on command line but not inside fstab. You must use \040 istead 
of space.


Sorry, but my suggestion will not work on OpenBSD. I'd read Linux's 
fstab man page.


Jacob Yocom-Piatt wrote:
i have a mailserver running 4.0-release and its mailboxes are on an 
NFS mounted
directory. when the machine boots, it does not successfully mount the 
mail

directory with the entry

172.16.16.6:/Volumes/Xserve\ RAID/mail /var/mail/virtual nfs 
rw,nodev,nosuid 0 0


giving several

fstab: /etc/fstab: Inappropriate file type or format

messages when mounting partitions on boot. this is odd since, AFAICR, 
this
worked fine to mount NFS when this machine was 3.9-release about a 
month ago.

additionally, the directory mounts fine when issuing

mount_nfs -o rw,nodev,nosuid /Volumes/Xserve\ RAID/mail 
/var/mail/virtual


after the machine has booted.

do note that the faq ( http://openbsd.org/faq/faq6.html#NFS ) 
suggests adding

the same type of entry to /etc/fstab as quoted above:

10.0.0.1:/work /mnt nfs ro,nodev,nosuid 0 0

any ideas on what is going on here?

cheers,
jake




misc@openbsd.org

2006-12-03 Thread Joachim Schipper
On Sun, Dec 03, 2006 at 09:34:46PM +, z0mbix wrote:
> On 03/12/06, Mike Spenard <[EMAIL PROTECTED]> wrote:
> >Hi,
> >I have sendmail configured for the following hypothetical domains:
> >mydomaina.com
> >mydomainb.com
> >
> >I would like sendmail to do DNSBL checking on mydomaina.com but not
> >mydomainb.com,
> >is this possible?
> 
> I suggest you ask on the sendmail mailing lists. You may not have
> realised it, but this is an openbsd list ;)

It's not that unreasonable, this list does generic stuff too - up to a
point, of course. But I'm not adverse to this kind of question, provided
someone actually tried to RTFM, STFW, and STFArchives. Oh, and RTTFAQ.

Of course, I do not, and never have, and quite possibly never will, use
Sendmail. So I can't really help. If nobody else does, and I believe
this is already a repost, some sendmail list might be a better place to
ask.

Sendmail is supposed to be infinitely configurable, so it appears this
must be possible.

Joachim



Re: ral0: device timeout

2006-12-03 Thread Markus Bergkvist
Also, the connection light and the transmission light is always on, 
regardsless if it is connected to the network or sending/receiving or 
not. Only when I take the network interface down the lights go out. If 
that means anything to anyone.


/Markus



Re: Mac Mini (intel) status

2006-12-03 Thread Pierre Riteau

On 12/1/06, Marco S Hyman <[EMAIL PROTECTED]> wrote:

Not working for me. I get this far:

CD_ROM: 90
Loading /CDBOOT
probing: pc0 com0 mem(699K 991M a20=on)
disk: hd0+* cd0
boot> c

and there it stays forever.   I suspect the "c" following the boot prompt
is left over from "hold c to boot from cd".   The keyboard at this point
is dead.

Any ideas?  I'd really like to get OpenBSD up on this beasty.  I've
tried several different home grown CDs plus the 11/29 snapshot CD from
ftp.openbsd.org.

// marc



Hold the "alt" key instead of "c". It will show a menu where you can
double click on the cd (labelled "Windows") to boot on it. It should
then recognize your usb keyboard while booting.



Re: WebDAV

2006-12-03 Thread Gaby Vanhegan
On 3 Dec 2006, at 21:12, Pete Vickers wrote:

> I've used it problem free with osx & windows clients; it should  
> probably only be available only over https,

Amusingly, that's almost the exact same setup I ended up with :)

I also  had a non-ssl site serving from the same web root and denied  
access to that.  My subfolder was /md/ and I had:


...

Deny from all




...
SSLEngine On
...

DAV On
...



This way the site is visible over normal http with the DAV protected  
section hidden, and the DAV area is only accessible over https.

Gaby

--
Junkets for bunterish lickspittles since 1998!
http://www.playr.co.uk/sudoku/
http://weblog.vanhegan.net/



misc@openbsd.org

2006-12-03 Thread z0mbix

On 03/12/06, Mike Spenard <[EMAIL PROTECTED]> wrote:

Hi,
I have sendmail configured for the following hypothetical domains:
mydomaina.com
mydomainb.com

I would like sendmail to do DNSBL checking on mydomaina.com but not
mydomainb.com,
is this possible?

-Mike


I suggest you ask on the sendmail mailing lists. You may not have
realised it, but this is an openbsd list ;)



Re: WebDAV

2006-12-03 Thread Pete Vickers

Hi,

I've used it problem free with osx & windows clients; it should  
probably only be available only over https,



   DocumentRoot "/var/www/secure_content"
ServerName whatever.com
ServerAlias www.whatever.com
ServerAdmin [EMAIL PROTECTED]
ErrorLog logs/error_log
TransferLog logs/access_log

DAV On
AuthType Basic
AuthName "whatever.com network disk"
AuthUserFile /var/www/conf/passwd
AllowOverride None
Require valid-user
Options None
LOCK UNLOCK>



DAVLockDB /dav_scratch/DAVLock
DAVMinTimeout 600
SSLEngine on
SSLCertificateFile/etc/ssl/server.crt
SSLCertificateKeyFile /etc/ssl/private/server.key
CustomLog logs/ssl_request_log \
  "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"



/Pete



On 1. des. 2006, at 22.00, Gaby Vanhegan wrote:


Hi,

Although the mail archives have little on the topic, as does google,
are there any major security concerns I should be aware of when
installing mod_dav under the stock OpenBSD apache1.3, with apache
chrooted?

Gaby

--
Junkets for bunterish lickspittles since 1998!
http://www.playr.co.uk/sudoku/
http://weblog.vanhegan.net/




misc@openbsd.org

2006-12-03 Thread Mike Spenard

Hi,
I have sendmail configured for the following hypothetical domains:
mydomaina.com
mydomainb.com

I would like sendmail to do DNSBL checking on mydomaina.com but not 
mydomainb.com,

is this possible?

-Mike



ral0: device timeout

2006-12-03 Thread Markus Bergkvist
For some time now I've been trying to get my SMC wireless cardbus[1] 
with Ralink RT2600 chipset[2] to work on my laptop running OpenBSD 4.0 
-stable but I keep getting 'ral0: device timeout'.
If I bring the device down and then up (sometimes I have to do this 
several times) I finally get it to work. After that I don't get any more 
'device timeout' until next reboot.


This is what ral(4) has to say about that error:
	ral%d: device timeout  A frame dispatched to the hardware for 
transmission did not complete in time.  The driver will reset the 
hardware.  This should not happen.


Unfortunately, it does happen. My question is, why? And what can i do to 
remedy this?


I have a SMC pci-card[3] in the AP but I have not seen that problem there.

I enclose dmesg and ifconfig ral0 from client and ap.

[1] 
http://www.smc.com/index.cfm?event=viewProduct&localeCode=EN_USA&cid=5&scid=31&pid=1525

[2]  http://www.ralinktech.com/prod-2600.htm
[3] 
http://www.smc.com/index.cfm?event=viewProduct&localeCode=EN_USA&cid=5&scid=31&pid=1527



ifconfig on client:
ral0: flags=8943 mtu 1500
lladdr 00:02:a5:b8:71:b5
trunk: trunkdev trunk0
media: IEEE802.11 OFDM54 mode 11g (DS1 mode 11g)
status: active
ieee80211: nwid himmet_wlan chan 11 bssid 00:13:f7:2a:f4:ab 
113dB 100dBminet6 fe80::213:f7ff:fe1e:a786%ral0 prefixlen 64 
scopeid 0x6



ifconfig on AP:
rl0: flags=8843 mtu 1500
lladdr 00:e0:4c:83:15:bc
groups: egress
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::2e0:4cff:fe83:15bc%rl0 prefixlen 64 scopeid 0x2
inet 212.214.242.10 netmask 0xff00 broadcast 212.214.242.255


dmesg:
OpenBSD 4.0-stable (GENERIC) #1: Thu Nov 23 23:26:38 CET 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) III Mobile CPU 1000MHz ("GenuineIntel" 
686-class) 1 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE

real mem  = 267808768 (261532K)
avail mem = 236539904 (230996K)
using 3294 buffers containing 13492224 bytes (13176K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(ff) BIOS, date 12/31/03, BIOS32 rev. 0 @ 
0xf, SMBIOS rev. 2.3 @ 0xfc087 (37 entries)

bios0: Compaq Evo N600c
apm0 at bios0: Power Management spec V1.2 (BIOS managing devices)
apm0: battery life expectancy 100%
apm0: AC on, battery charge high
apm0: flags 130102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf0a00/272 (15 entries)
pcibios0: bad IRQ table checksum
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5280/272 (15 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82801CAM LPC" rev 0x00)
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc/0xf000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82830MP CPU-I/O-1" rev 0x04
ppb0 at pci0 dev 1 function 0 "Intel 82830MP CPU-AGP" rev 0x04
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Radeon Mobility M6 LY" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci0 at pci0 dev 29 function 0 "Intel 82801CA/CAM USB" rev 0x02: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801CA/CAM USB" rev 0x02: irq 11
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801CA/CAM USB" rev 0x02: irq 11
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x42
pci2 at ppb1 bus 2
cbb0 at pci2 dev 3 function 0 "TI PCI1420 CardBus" rev 0x00: irq 11
cbb1 at pci2 dev 3 function 1 "TI PCI1420 CardBus" rev 0x00: irq 11
"AT&T/Lucent LTMODEM" rev 0x02 at pci2 dev 4 function 0 not configured
fxp0 at pci2 dev 8 function 0 "Intel PRO/100 VM" rev 0x42, i82562: irq 
11, address 00:02:a5:b8:71:b5

inphy0 at fxp0 phy 1: i82562EM 10/100 PHY, rev. 0
esa0 at pci2 dev 9 function 0 "ESS ES1989" rev 0x12: irq 11
ac97: codec id 0x45838308 (ESS Technology ES1921)
ac97: codec features 20 bit DAC, 20 bit ADC, ESS Technology
audio0 at esa0
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0x20
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 4 device 0 cacheline 0x8, lattimer 0x20
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 "Intel 82801CAM LPC" rev 0x02: SpeedStep
pciide0 at pci0 dev 31 function 1 "Intel 82801CAM IDE" rev 0x02: DMA, 
channel 0 configured to compatibility, channel 1 configured to compati

Re: Mac Mini (intel) status

2006-12-03 Thread MikeM
On 12/1/2006 at 9:51 AM Jason Dixon wrote:

|You can pick up cheap VLAN-capable switches on eBay.  I have a Dell  
|3024 at home which works fine and runs $100-150 used.  I'd never use  
|these in an "enterprise" environment, but they're fine for home
testing.
 =

Quick comment: the Dell 3024 switch has a noisy high-rpm fan in it.
The Dell 3016 is fanless.  Had I known that before I got my 3024, I
would have gotten the 3016  :(



Re: Quagga and OpenBGP

2006-12-03 Thread Florian Fuessl
Quagga is not only a BGP routing software, it's a collection of many routing
daemons.

The syntax is almost comparable to the Cisco syntax, which makes it possible
to let Quagga-routers be maintained by almost everyone who knows to handle
Cisco products.

Nevertheless the OpenBSD port of Quagga is out of date and has no support
for TCP-MD5. So if possible, it's probably a better idea to use the OpenBSD
routing daemons on OpenBSD systems as long as no-one seems to actively
maintain the Quagga port for OpenBSD...

-Flo

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Demuel I. Bendano, R.E.E
Sent: Thursday, November 30, 2006 6:41 PM
To: misc@openbsd.org
Subject: Quagga and OpenBGP

All,

I cannot still see the logic as to why Quagga is part of the OpenBSD ports
tree when it has OpenBGP at all in the default install? The documentation
of OpenBGP tells us that it is far superior in design as compared to
Zebra/Quagga.

Side comments?

dems



Re: OpenBSD Zaurus C3200 recommended N. American distributor

2006-12-03 Thread dreamwvr
On Sat, Dec 02, 2006 at 03:15:48PM -0600, Jaime Fournier wrote:
> http://www.pricejapan.com/front/e_good_info.php?code=28&category=5
> Rather.
> 
> -Jaime Fournier
> 
> 
> On Sat, 2 Dec 2006, Jaime Fournier wrote:
> 
> >Date: Sat, 2 Dec 2006 15:04:43 -0600 (CST)
> >From: Jaime Fournier <[EMAIL PROTECTED]>
> >To: dreamwvr <[EMAIL PROTECTED]>
> >Cc: misc@openbsd.org
> >Subject: Re: OpenBSD Zaurus C3200 recommended N. American distributor
> >
> >http://www.linbsd.org/zaurus_byte.txt
> >
> >-Jaime Fournier
> >
> >
> >On Sat, 2 Dec 2006, dreamwvr wrote:
> >
> >>Date: Sat, 2 Dec 2006 11:56:33 -0700
> >>From: dreamwvr <[EMAIL PROTECTED]>
> >>To: misc@openbsd.org
> >>Subject: Re: OpenBSD Zaurus C3200 recommended N. American distributor
> >>
> >>On Fri, Dec 01, 2006 at 02:28:59PM -0800, Obiozor Okeke wrote:
> >>>Hi,
> >>>I'm looking to buy the C3200, but I just want to make sure I'll actually 
> >>>get it after I place the order (no scams) so who would you all recommend 
> >>>I buy from?  I spoke with the guy from 
> >>>http://www.kurnspatrick.com/sharp.html and he seemed okay.  Thanks
> >>>
> >>>Jaime Fournier <[EMAIL PROTECTED]> wrote: Pricejapan was really good, and 
> >>>much cheaper than many of the other
> >>>vendors.
> >>>
> >>>-Jaime Fournier
> >>>
> >>>
> >>>On Fri, 1 Dec 2006, dreamwvr wrote:
> >>>
> Date: Fri, 1 Dec 2006 09:19:36 -0700
> From: dreamwvr
> To: misc@openbsd.org
> Subject: OpenBSD Zaurus C3200 recommended N. American distributor
> 
> Hey,
>  How are these companies for Zaurus hw support? Or is there
> a better recommended company for importing a Zaurus for OpenBSD?
>  http://www.kurnspatrick.com/sharp.html
>  http://www.sdgsystems.com/
> Me thinks this would be just great for hotspot surfing,
> truly mobile admining etc... Which wifi cards do people recommend?
> How about bluetooth cards?
> 
> Best REgards,
> [EMAIL PROTECTED]
> >>I knew kd85 rung a bell somewhere. :)
> >>For excellent explanations on life with Zaurus see:
> >>http://www.kd85.com
>
This one looks promising as well.  
http://www.conics.net
They are in North America whereis price Japan is in Tokyo. 
How much were the shipping costs, duties, brokerage fees
to get one to North America? Any huge warnings to realize
before coffee when burning OpenBSD to the CF? Since I don't
want to brick it. 

Thanks!
[EMAIL PROTECTED]



Re: livecd error

2006-12-03 Thread Andreas Bihlmaier
On Sun, Dec 03, 2006 at 01:16:44PM +0100, Tobias Weisserth wrote:
> Hi,
> 
> On Dec 3, 2006, at 11:48 AM, Andreas Bihlmaier wrote:
> 
> >On Sun, Dec 03, 2006 at 03:31:41AM +0100, Tobias Weisserth wrote:
> >>Hi,
> >>
> >>I hope this is not considered thread-highjacking but it sort of  
> >>fits into this
> >>thread, so here it goes:
> >>
> >>I'm trying to follow these instructions to build a live CD based  
> >>on 4.0
> >>stable:
> >>
> >>http://www.onlamp.com/pub/a/bsd/2005/07/14/openbsd_live.html
> >
> >I start to dislike google (I know it is not googles fault),
> >above is WAY outdated! Here are the up-to-date instructions:
> >http://www.openbsd-wiki.org/index.php?title=LiveCD
> 
> Andreas, it's nice that you wrote that WIKI article and it's nice  
> that you already pointed out where to find it before in this thread,  
> but your blatant advertising of it when I explicitly asked how to fix  
come on you can't be serious-^
> an issue not related to it, isn't helpful at all.

Well, the issue is that the kernel grows because of new drivers, but
size of an emulated 2.88MB floppy doesn't grow.
You either have to rip stuff out of the kernel or use the new method.

> I'd like to  understand how the stuff in distrib works and playing
> with the  instructions of Kevin Lo seems a good idea to me.
Well I thought you just wanted to get it working ;)

> I'll gladly try your instructions when I'm done understanding the  
> stuff in distrib though, I noticed that you invested a lot of time in  
> it and seems to be very detailed.
> 
> regards,
> Tobias

Regards,
ahb



Opengrok xref for OBSD

2006-12-03 Thread Csaba Henk
Hi,

I set up an Opengrok cross-refenced code viewer for OpenBSD at

  http://opengrok.creo.hu/openbsd/

I hope some people will find it useful. Source and index is refreshed
daily.

Csaba



Re: livecd error

2006-12-03 Thread Tobias Weisserth

Hi,

On Dec 3, 2006, at 11:48 AM, Andreas Bihlmaier wrote:


On Sun, Dec 03, 2006 at 03:31:41AM +0100, Tobias Weisserth wrote:

Hi,

I hope this is not considered thread-highjacking but it sort of  
fits into this

thread, so here it goes:

I'm trying to follow these instructions to build a live CD based  
on 4.0

stable:

http://www.onlamp.com/pub/a/bsd/2005/07/14/openbsd_live.html


I start to dislike google (I know it is not googles fault),
above is WAY outdated! Here are the up-to-date instructions:
http://www.openbsd-wiki.org/index.php?title=LiveCD


Andreas, it's nice that you wrote that WIKI article and it's nice  
that you already pointed out where to find it before in this thread,  
but your blatant advertising of it when I explicitly asked how to fix  
an issue not related to it, isn't helpful at all. I'd like to  
understand how the stuff in distrib works and playing with the  
instructions of Kevin Lo seems a good idea to me.


I'll gladly try your instructions when I'm done understanding the  
stuff in distrib though, I noticed that you invested a lot of time in  
it and seems to be very detailed.


regards,
Tobias



Re: livecd error

2006-12-03 Thread Andreas Bihlmaier
On Sun, Dec 03, 2006 at 03:31:41AM +0100, Tobias Weisserth wrote:
> Hi,
> 
> I hope this is not considered thread-highjacking but it sort of fits into 
> this 
> thread, so here it goes:
> 
> I'm trying to follow these instructions to build a live CD based on 4.0 
> stable:
> 
> http://www.onlamp.com/pub/a/bsd/2005/07/14/openbsd_live.html

I start to dislike google (I know it is not googles fault),
above is WAY outdated! Here are the up-to-date instructions:
http://www.openbsd-wiki.org/index.php?title=LiveCD



Regards,
ahb