Re: apmd resume + xlock
On Mon, Dec 11, 2006 at 11:13:08PM -0500, James Turner wrote: | I've read the apmd and xlock man pages and am having trouble getting xlock | to start after a resume. I created the file /etc/apm/resume and chmod | 755. But for some reason, it doesn't run on resume. Permissions are | root/wheel. On a weird note, when I ran sudo apmd rather then letting | apmd start on boot xlock worked but it locked as root and not my logged in | user. Does anyone have any suggestions on how to get xlock to start on a | resume. | | The contents of /etc/apm/resume are: | #!/bin/sh | xlock -mode matrix >From your description, I'd say that xlock can not find the DISPLAY environment variable (only set within X) to run xlock on. Then, when you start xlock by hand (probably from within X, thus giving it a valid DISPLAY to connect to), it runs as root simply because apmd runs as root. Try putting xidle in your .xinitrc and have that run xlock. xidle then runs under your own uid and will spawn an xlock owned by you which you can then unlock using your own password. An alternative might be to change your script. I have not tested the following, so it may or may not work : #!/bin/sh export DISPLAY=:0.0 sudo -u /usr/X11R6/bin/xlock -mode matrix I find this, however, to be ugly and not the way things should be done. Of course, YMMV. Cheers, Paul 'WEiRD' de Weerd -- >[<++>-]<+++.>+++[<-->-]<.>+++[<+ +++>-]<.>++[<>-]<+.--.[-] http://www.weirdnet.nl/ [demime 1.01d removed an attachment of type application/pgp-signature]
Re: php and ldap
Am Montag, 11. Dezember 2006 19:39 schrieb Bryan Irvine: > > > > Did I forget anything? > > > > > > You've installed the proper php5-ldap package for your arch / version? > > > > yes (all from packages) > > > > > You've restarted apache after running phpxs? > > Does phpinfo show ldap support? > > make a script that just has > print phpinfo(); > ?> > > and open it from a browser, > > If ldap support doesn't show there, try typing from command line: > $ php > print phpinfo(); > ?> > ^d > > and see if ldap support shows there. > > If it shows up when run from CLI, but not from web browser, try a hard > stop of apache and restart it. > > If that still doesn't do it, check /var/www/conf/php.ini for ldap support. > > --Bryan phpinfo() shows System OpenBSD myserver.mydomain.com 4.0 GENERIC#690 amd64 Build Date Sep 7 2006 06:55:44 Configure Command './configure' '--with-apxs=/usr/sbin/apxs' '--without-mysql' '--enable-xml' '--enable-wddx' '--enable-cli' '--with-iconv=/usr/local' '--with-gettext=/usr/local' '--enable-dio' '--with-pear=/var/www/pear' '--enable-bcmath' '--enable-session' '--enable-trans-sid' '--enable-calendar' '--enable-ctype' '--enable-ftp' '--with-pcre-regex' '--with-posix' '--enable-sockets' '--enable-sysvsem' '--enable-sysvshm' '--enable-yp' '--enable-exif' '--without-sqlite' '--enable-shared' '--disable-static' '--disable-rpath' '--with-config-file-path=/var/www/conf' '--enable-inline-optimization' '--with-pic' '--with-openssl' '--with-zlib' '--prefix=/usr/local' '--sysconfdir=/etc' '--mandir=/usr/local/man' '--infodir=/usr/local/info' Server API Apache Virtual Directory Support disabled Configuration File (php.ini) Path /var/www/conf/php.ini PHP API 20041225 PHP Extension 20050922 Zend Extension 220051025 Debug Build no Thread Safety disabled Zend Memory Manager enabled IPv6 Supportenabled Registered PHP Streams php, file, http, ftp, compress.zlib, https, ftps Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tls Registered Stream Filters string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, convert.iconv.*, zlib.* in php.ini there is extension=ldap.so Harry
Re: autoconf error message suggestion
On 12/12/06, Karel Kulhavy <[EMAIL PROTECTED]> wrote: Hi. > You are kidding, aren't you ? No. o.k. > csh/tcsh uses setenv and sh/ksh/bash uses export No I mean explanation how the user obtains a list of available numbers and how to select from them. Short answer: [EMAIL PROTECTED] ~ $ ls -l /usr/local/bin/autoconf-* -r-xr-xr-x 1 root bin 4853 Jul 28 09:59 /usr/local/bin/autoconf-2.13 -r-xr-xr-x 1 root bin 7686 Jun 27 16:38 /usr/local/bin/autoconf-2.57 -r-xr-xr-x 1 root bin 7674 Jun 27 16:35 /usr/local/bin/autoconf-2.59 Or you can use pkg_info to get a more detailed output: [EMAIL PROTECTED] ~ $ pkg_info autoconf Information for autoconf-2.13p0 Comment: automatically configure source code on many Un*x platforms Description: Autoconf is an extensible package of m4 macros that produce shell scripts to automatically configure software source code packages. These scripts can adapt the packages to many kinds of UNIX-like systems without manual user intervention. Autoconf creates a [EMAIL PROTECTED] ~ $ pkg_info autoconf | head -n 20 Information for autoconf-2.13p0 Comment: automatically configure source code on many Un*x platforms Description: Autoconf is an extensible package of m4 macros that produce shell scripts to automatically configure software source code packages. These scripts can adapt the packages to many kinds of UNIX-like systems without manual user intervention. Autoconf creates a configuration script for a package from a template file that lists the operating system features that the package can use, in the form of m4 macro calls. The FSF would make you believe that only gnu-m4 can handle autoconf. This is no longer true. This package does not depend on gnu-m4. This is autoconf-2.13. The actual autoconf drivers for selecting autoconf version are in [... snipp ...] > No, because you should have at least basic Un*x knowledge. I have a basic Unix knowledge. Do you think that someone who wrote 25% of a graphical web browser that runs on the following platforms: [... snipp ...] PMShell, AtheOS GUI, doesn't have a basic Unix knowledge? Honestly, I dont care about that. I don't understand what's the point in refusing to do this - this looks like some kind of OpenBSD script and it should be easy to change the text it prints, shouldn't? I guess the work will be minimal and the benefit will be obvious. Sure. The file is not brand new: [EMAIL PROTECTED] ~ $ head /usr/local/bin/autoconf #! /bin/sh # $OpenBSD: meta.in,v 1.3 2004/11/08 22:00:09 mbalmer Exp $ # Copyright (c) 2003,2004 Marc Espie. # You can make the changes, update the corresponding package (metaauto-0.5) and commit the changes after testing. Andreas. -- Hobbes : Shouldn't we read the instructions? Calvin : Do I look like a sissy?
gmime on 4.0
Hi all, I'm trying to install gmime 2.2.2 on my brand new 4.0 system (as an requirement for DBmail 2.2.1) When I try to compile, I get this; if /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H - I. -I. -I.. -I.. -I../util -DGMIME_VERSION= \"2.2.2\" -DGMIME_MAJOR_VERSION=2 - DGMIME_MINOR_VERSION=2 - DGMIME_MICRO_VERSION=2 -DG_LOG_DOMAIN=\"gmime \"-DG_DISABLE_DEPRECATED -pthread -I/usr/local/ include/glib-2.0 -I/usr/local/lib/glib-2.0/include -I/usr/local/ include -g -O2 -MT gmime-gpg-context.lo -MD -MP -MF ".deps/gmime- gpg-context.Tpo" -c -o gmime-gpg-context.lo gmime-gpg-context.c; then mv -f ".deps/gmime-gpg-context.Tpo" ".deps/gmime-gpg- context.Plo"; else rm -f ".deps/gmime-gpg-context.Tpo"; exit 1; fi gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I../util -DGMIME_VERSION= \"2.2.2\" -DGMIME_MAJOR_VERSION=2 -DGMIME_MINOR_VERSION=2 - DGMIME_MICRO_VERSION=2 -DG_LOG_DOMAIN=\"gmime\" - DG_DISABLE_DEPRECATED -pthread -I/usr/local/include/glib-2.0 -I/usr/ local/lib/glib-2.0/include -I/usr/local/include -g -O2 -MT gmime-gpg- context.lo -MD -MP -MF .deps/gmime-gpg-context.Tpo -c gmime-gpg- context.c -fPIC -DPIC -o .libs/gmime-gpg-context.o gmime-gpg-context.c: In function `gpg_ctx_parse_status': gmime-gpg-context.c:888: error: `ECANCELED' undeclared (first use in this function) gmime-gpg-context.c:888: error: (Each undeclared identifier is reported only once gmime-gpg-context.c:888: error: for each function it appears in.) gmime-gpg-context.c: In function `gpg_ctx_op_step': gmime-gpg-context.c:1110: error: syntax error before "rdset" gmime-gpg-context.c:1117: error: `rdset' undeclared (first use in this function) gmime-gpg-context.c:1135: error: `wrset' undeclared (first use in this function) gmime-gpg-context.c:1145: error: `wrsetp' undeclared (first use in this function) *** Error code 1 Stop in /install/gmime-2.2.2/gmime. *** Error code 1 Stop in /install/gmime-2.2.2/gmime (line 591 of Makefile). *** Error code 1 Stop in /install/gmime-2.2.2 (line 412 of Makefile). *** Error code 1 Stop in /install/gmime-2.2.2 (line 260 of Makefile). I've tried googling but cannot find a clear answer. Anyone know of a way around this ? Greetz, Daniel
Re: openbsd 4.0 ralink problem low operation range
Sam Fourman Jr. wrote: I have a Linksys card that uses ral and I can confirm this Sam Fourman Jr. On 12/9/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hi List, i've tried today openbsd 4.0 with several cards: rt2561t -> PC-620C rt2560f -> WMIR-103G rt2560f -> GN-WIKG with all cards i got a connection (mediaopt ibss -> adhoc) with a distance of some meters. but if i tried a distance of 150 meters with 2 yagi (12dbi) i got no connection :-(. i one test i've used a prism2 card on only the one site and a got a connection but the performance was very bad. with 2 prism cards it work fine. 2 prism -> ok 1 prism and 1 ral -> bad performance 2 ral -> no connection has anyone an idea whats the problem of this low operation range ? I have a similar problem in 3.9 with ral cards; very poor range. Linksys (ath) [ap] -> Level One (ral) = 5-7 meters Linksys (ath) [ap] -> Old 1MBit Intel (wi?) = +30 meters Level One (ral pci) [ap] -> Level One (ral pccard) = must be within 1-2 meters I tried changing the Tx Power, but that didn't have an effect. Because I've heard that the ral driver is very good, I was just assuming that my Level One cards have crappy transceivers and/or antennas.
Re: autoconf error message suggestion
On Mon, Dec 04, 2006 at 03:31:06PM +, Stuart Henderson wrote: > On 2006/12/04 16:15, Karel Kulhavy wrote: > > [EMAIL PROTECTED]:~$ autoconf > > Provide an AUTOCONF_VERSION environment variable, please > > > > I suggest this error message to be extended with a pointer to information > > how to set this environment variable. As I wrote, I didn't find any manpage > > about this topic (even if the manpage list suggested it should be > > installed), > > but maybe there is some URL explaining this topic. > > set it to the version number you want; if you need to run autoconf you > probably also know how to read the /usr/local/bin/autoconf script and work > this out yourself... According to this approach, M$ Window$ are open source, because you can read the machine code which contains an exact description how it works inside. Why isn't there a manual page for the autoconf switch script under man autoconf and there is a manpage for another openbsd specific software under man pkg_add? Please understand that these problems may seem insignificant, but there are lots of them and added together they decrease the usability of OpenBSD. I believe that adding a piece of text here and there when reported would cost negligible work and would increase the usability of the system. Like when you report typos in books. CL<
Re: autoconf error message suggestion
On Mon, Dec 04, 2006 at 04:54:00PM +0100, Andreas Maus wrote: > Hi. > > On 12/4/06, Karel Kulhavy <[EMAIL PROTECTED]> wrote: > >[EMAIL PROTECTED]:~$ autoconf > >Provide an AUTOCONF_VERSION environment variable, please > Yes. Just do it. e.g.: > > [EMAIL PROTECTED]:~ $ env | grep AUTO > AUTOMAKE_VERSION=1.9 > AUTOCONF_VERSION=2.59 > > >I suggest this error message to be extended with a pointer to information > >how to set this environment variable. As I wrote, I didn't find any manpage > You are kidding, aren't you ? No. > > Setting up environment variables depends on your shell. > csh/tcsh uses setenv and sh/ksh/bash uses export No I mean explanation how the user obtains a list of available numbers and how to select from them. > > >but maybe there is some URL explaining this topic. > No, because you should have at least basic Un*x knowledge. I have a basic Unix knowledge. Do you think that someone who wrote 25% of a graphical web browser that runs on the following platforms: Linux, BSD, UNIX in general, OS/2, Cygwin under Windows, AtheOS, BeOS, FreeMint, X Window System (UN*X, Cygwin), SVGAlib, Linux Framebuffer, OS/2 PMShell, AtheOS GUI, doesn't have a basic Unix knowledge? If the autoconf message included a pointer to the URL explaining this topic it would save me and other people's time. When I go to google and try to find it it wastes a lot of time dealing with false positives. Please try to understand the core of the problem in the following comparison: This answer is an equivalent to "we didn't put labels on the buttons on TV remote control because this information can be obtained from the user's manual". I don't understand what's the point in refusing to do this - this looks like some kind of OpenBSD script and it should be easy to change the text it prints, shouldn't? I guess the work will be minimal and the benefit will be obvious. CL< > > Andreas. > > -- > Hobbes : Shouldn't we read the instructions? > Calvin : Do I look like a sissy?
Re: autoconf error message suggestion
* Karel Kulhavy wrote: > On Mon, Dec 04, 2006 at 03:31:06PM +, Stuart Henderson wrote: > > On 2006/12/04 16:15, Karel Kulhavy wrote: > > > [EMAIL PROTECTED]:~$ autoconf > > > Provide an AUTOCONF_VERSION environment variable, please > > > > > > I suggest this error message to be extended with a pointer to information > > > how to set this environment variable. As I wrote, I didn't find any > > > manpage > > > about this topic (even if the manpage list suggested it should be > > > installed), > > > but maybe there is some URL explaining this topic. > > > > set it to the version number you want; if you need to run autoconf you > > probably also know how to read the /usr/local/bin/autoconf script and work > > this out yourself... > > According to this approach, M$ Window$ are open source, because you can > read the machine code which contains an exact description how it works inside. > > Why isn't there a manual page for the autoconf switch script under man > autoconf > and there is a manpage for another openbsd specific software under man > pkg_add? > > Please understand that these problems may seem insignificant, but there are > lots of them and added together they decrease the usability of OpenBSD. I > believe that adding a piece of text here and there when reported would cost > negligible work and would increase the usability of the system. Like when > you report typos in books. pkg_info autoconf and pkg_info metaauto describe this.
Re: openbsd 4.0 ralink problem low operation range
Same problem with minipci ral cards max distance: 5-8m. On 12/12/06, Clint Pachl <[EMAIL PROTECTED]> wrote: > > Sam Fourman Jr. wrote: > > I have a Linksys card that uses ral and I can confirm this > > > > > > Sam Fourman Jr. > > > > On 12/9/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > >> Hi List, > >> > >> i've tried today openbsd 4.0 > >> > >> with several cards: > >> > >> rt2561t -> PC-620C > >> rt2560f -> WMIR-103G > >> rt2560f -> GN-WIKG > >> > >> with all cards i got a connection (mediaopt ibss -> adhoc) > >> with a distance of some meters. but if i tried a distance of 150 meters > >> with 2 yagi (12dbi) i got no connection :-(. i one test i've used > >> a prism2 card on only the one site and a got a connection but > >> the performance was very bad. with 2 prism cards it work fine. > >> 2 prism -> ok > >> 1 prism and 1 ral -> bad performance > >> 2 ral -> no connection > >> > >> has anyone an idea whats the problem of this low operation > >> range ? > > I have a similar problem in 3.9 with ral cards; very poor range. > > Linksys (ath) [ap] -> Level One (ral) = 5-7 meters > Linksys (ath) [ap] -> Old 1MBit Intel (wi?) = +30 meters > Level One (ral pci) [ap] -> Level One (ral pccard) = must be within 1-2 > meters > > I tried changing the Tx Power, but that didn't have an effect. Because > I've heard that the ral driver is very good, I was just assuming that my > Level One cards have crappy transceivers and/or antennas.
Re: autoconf error message suggestion
On 2006/12/12 11:05, Karel Kulhavy wrote: > > set it to the version number you want; if you need to run autoconf you > > probably also know how to read the /usr/local/bin/autoconf script and work > > this out yourself... > > According to this approach, M$ Window$ are open source, because you can > read the machine code which contains an exact description how it works inside. it's just a shell script... From a quick search of the archives it doesn't seem like anyone had a problem with it that they couldn't work out for themselves before... > Why isn't there a manual page for the autoconf switch script under man > autoconf > and there is a manpage for another openbsd specific software under man > pkg_add? The auto* wrappers are not OpenBSD-specific, they're part of pkg-config which is installed by the metaauto package. There's a clue to this in the file location; the base OS is not installed under /usr/local. Ports/packages only very rarely (20 of 3100+ ports) have manpages added if they're not supplied in the original distribution. If you think it really warrants one, you could write one and send it to the port maintainer and ask if he'd like to include it. But it's preferable to try and get them included upstream in the original distribution. > Please understand that these problems may seem insignificant, but there are > lots of them and added together they decrease the usability of OpenBSD. I > believe that adding a piece of text here and there when reported would cost > negligible work and would increase the usability of the system. If you think it's negligible work, do the work and send diffs along with reports (-: > Like when you report typos in books. And people do that here, too.
pf altq and cbq borrowing
Hi All,
Something I just noticed on 3.9 with our firewall that I'm hoping
someone can explain, as it looks like a bug to me. Our simplified
config for queueing is:
altq on $ext_if cbq bandwidth 8Mb queue { colo, bmex, deflt }
queue bmex bandwidth 4Mb cbq { A, B, C, D }
queue A bandwidth 1Mb cbq(borrow)
queue B bandwidth 1Mb cbq(borrow)
queue C bandwidth 1Mb cbq(borrow)
queue D bandwidth 1Mb cbq(borrow)
queue colo bandwidth 4Mb cbq(borrow) { E, F, G, H }
queue E bandwidth 1Mb cbq(borrow)
queue F bandwidth 1Mb cbq(borrow)
queue G bandwidth 1Mb cbq(borrow)
queue H bandwidth 1Mb cbq(borrow)
As you can see, although queues A-D have borrow, their parent, bmex,
does not have borrow. This seems that no-one on A-D can get above
1Mb. If I add borrow to the parent, bmex, then it works.
Is this right? Surely a child should be able to borrow from its
parent regardless of if its parent can borrow from root? Is this a
bug, or am I not understanding something? Is this something that
hfsc might address?
-Matt
--
Matt Hamilton [EMAIL PROTECTED]
Netsight Internet Solutions, Ltd.Business Vision on the Internet
http://www.netsight.co.uk +44 (0)117 9090901
Web Design | Zope/Plone Development & Consulting | Co-location | Hosting
Re: Is it safe to use group 'users' in /etc/group?
You're not really looking at your system from the same view as most of us (wearing nomex suit, in a brick room). Better questions to ask YOURSELF would probably be: what priveleges does the users group have? what users are in the users group? what processes are run by those users? Then, you would know, that the users group is indeed made for non-administrators/system. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Stas Myasnikov > Sent: Wednesday, December 06, 2006 1:38 PM > To: misc@openbsd.org > Subject: Is it safe to use group 'users' in /etc/group? > > Hello, > > is it safe to use group 'users' from /etc/group as the login > group for > the users? Or it is reserved for some system use?
Re: pf altq and cbq borrowing
On 12/12/06, Matt Hamilton <[EMAIL PROTECTED]> wrote:
Hi All,
Something I just noticed on 3.9 with our firewall that I'm hoping
someone can explain, as it looks like a bug to me. Our simplified
config for queueing is:
altq on $ext_if cbq bandwidth 8Mb queue { colo, bmex, deflt }
queue bmex bandwidth 4Mb cbq { A, B, C, D }
queue A bandwidth 1Mb cbq(borrow)
queue B bandwidth 1Mb cbq(borrow)
queue C bandwidth 1Mb cbq(borrow)
queue D bandwidth 1Mb cbq(borrow)
queue colo bandwidth 4Mb cbq(borrow) { E, F, G, H }
queue E bandwidth 1Mb cbq(borrow)
queue F bandwidth 1Mb cbq(borrow)
queue G bandwidth 1Mb cbq(borrow)
queue H bandwidth 1Mb cbq(borrow)
As you can see, although queues A-D have borrow, their parent, bmex,
does not have borrow. This seems that no-one on A-D can get above
1Mb. If I add borrow to the parent, bmex, then it works.
Is this right? Surely a child should be able to borrow from its
parent regardless of if its parent can borrow from root? Is this a
bug, or am I not understanding something? Is this something that
hfsc might address?
-Matt
--
Matt Hamilton [EMAIL PROTECTED]
Netsight Internet Solutions, Ltd.Business Vision on the Internet
http://www.netsight.co.uk +44 (0)117 9090901
Web Design | Zope/Plone Development & Consulting | Co-location | Hosting
afaik and speaking from my personal cbq set up, you should not have to
have (borrow) on the bmex, i have the following cbq and it works
properly, for outgoing queues at least, i can get a full 2000Kb out of
any of the child queues
##BEGIN_QUEUES##
altq on tl0 cbq bandwidth 2000Kb qlimit 200 queue { \
ssh_out, http_out, ftp_control_out, ftp_data_out, other_out \
ssh_in, http_in, ftp_control_in, ftp_data_in, other_in }
queue other_out bandwidth 100Kb qlimit 200 cbq (
default, borrow )
queue ssh_out bandwidth 100Kb qlimit 200 cbq ( borrow )
queue http_out bandwidth 100Kb qlimit 200 cbq ( borrow )
queue ftp_control_out bandwidth 100Kb qlimit 200 cbq ( borrow )
queue ftp_data_out bandwidth 100Kb qlimit 200 cbq ( borrow )
queue other_in bandwidth 100Kb qlimit 200 cbq ( borrow )
queue ssh_inbandwidth 100Kb qlimit 200 cbq ( borrow )
queue http_in bandwidth 100Kb qlimit 200 cbq ( borrow )
queue ftp_control_inbandwidth 100Kb qlimit 200 cbq ( borrow )
queue ftp_data_in bandwidth 100Kb qlimit 200 cbq ( borrow )
##END_QUEUES##
--
-Lawrence
-Student ID 1028219
Entreprises à vendre
Bonjour, Nous nous permettons de vous faire parvenir ce courriel afin de vous prisenter le 1er portail de transmission dentreprises. Vous pouvez diposer gratuitement votre annonce ou venir dicouvrir les nombreuses offres de rachat dentreprises dans votre rigion. Des rubriques par secteur dactiviti permettent une visibiliti optimisie pour dicouvrir rapidement les annonces qui vous intiressent et faire votre silection. Dans l'attente de votre visite, veuillez agrier nos sinchres salutations. M. Esnault www.transmission-entreprise.fr Portail de la cession et transmission dentreprise Offre riservie exclusivement aux entreprises. Conformiment ` la Loi Informatique et Libertis parue au Journal Officiel du 6 janvier 1978, vous disposez d'un droit d'acchs, de rectification, et d'opposition aux donnies personnelles vous concernant. Pour ne plus recevoir d'informations de notre part, Cliquez ici
Re: Links sources and GPL
On Mon, Dec 04, 2006 at 04:32:22PM +, ddp wrote: > Some source code packages are here: > ftp://ftp.openbsd.org/pub/OpenBSD/distfiles/ > It appears that the links source code is there, available for download. Thanks, I wanted the neppbm for vnc -> theora transcoding. In the meantime I wrote a yuv4mpeg (4:2:0 Y'CbCr) support into vncrec so I can transcode to almost anything. http://ronja.twibright.com/utils/sockets.c (replace the original sockets.c) This way vncrec now can be used for really serious screen capture videos. I am mentioning it for the case OpenBSD would be interested to include this patched vncrec. Before the vncrec was quite unusable, as the xpm output was extremely slow. CL< > ddp > > On 12/4/06, Karel Kulhavy <[EMAIL PROTECTED]> wrote: > > > >Hello > > > >I am a co-author of Links and I can't see how the GPL is satisfied by how > >OpenBSD is distributing Links binaries. > > > >I downloaded a .tgz of Links binary from the FTP archive at > > > >ftp://ftp.openbsd.org/pub/OpenBSD/3.9/packages/i386/links+-2.1pre20p0-no_x11.tgz > >The distribution of binaries is covered by section 3 of GPL and there are > >3 > >possibilities how to comply: > > > >"a) Accompany it with the complete corresponding machine-readable source > >code, which must be distributed under the terms of Sections 1 and 2 above > >on a > >medium customarily used for software interchange; or," > > > >I didn't find a copy of source code in the .tgz. The FTP directory doesn't > >seem to contain source code of Links and it doesn't contain a README > >saying where > >the source is to be downloaded. > > > >"b) Accompany it with a written offer, valid for at least three years, to > >give > >any third party, for a charge no more than your cost of physically > >performing > >source distribution, a complete machine-readable copy of the corresponding > >source code, to be distributed under the terms of Sections 1 and 2 above > >on a > >medium customarily used for software interchange; or," > > > >no written offer in the .tgz > > > >"c) Accompany it with the information you received as to the offer to > >distribute corresponding source code. (This alternative is allowed only > >for > >noncommercial distribution and only if you received the program in object > >code > >or executable form with such an offer, in accord with Subsection b > >above.)" > > > >Didn't find any such information inside, or in a README in that directory. > > > >GPL further reads: > >"If distribution of executable or object code is made by offering access > >to > >copy from a designated place, then offering equivalent access to copy the > >source code from the same place counts as distribution of the source code, > >even > >though third parties are not compelled to copy the source along with the > >object > >code." > > > >From this I have a feeling that the Links distribution of OpenBSD doesn't > >accord to the terms of GPL. Do you have an argument to convince me that I > >am > >wrong? > > > >I came to this by chance when I was searching for the source of Transcode > >distributed with OpenBSD, but couldn't find it. > > > >CL<
Re: Links sources and GPL
On Mon, Dec 04, 2006 at 06:48:13PM +0100, Marc Espie wrote: > On Mon, Dec 04, 2006 at 04:56:46PM +0100, Karel Kulhavy wrote: > > >From this I have a feeling that the Links distribution of OpenBSD doesn't > > accord to the terms of GPL. Do you have an argument to convince me that I am > > wrong? > > ftp ftp.openbsd.org > cd pub/OpenBSD/distfiles > ls links* > > you can't have looked very far, have you ? In the first level you have to guess 1 directory from 6, in the second 1/20 and in the third 1/20. That's 1/2400 in total. From the depth point of view of a familiar user it's not far, but from the breadth-first search a user infamiliar with the system has to do, it's far. BTW when we are at building tree structures for experienced users - the optimum tree is one that minimizes the average access depth. One can count (or estimate) the access statistics for individual leaves (documents, paragraphs or sentences) and then build kinda Huffman tree. CL<
automatic packages upgrade from ports
Hello,
I'm searching for a way to automaticaly doing the following actions:
1/ update port tree (OPENBSD_4_0)
2/ get installed packages and find corresponding ports
3/ build this packages from ports.
Maybe i missed the point but i don't find an existing way to do that.
I'm using the following way to get packages path and flavor from
installed package
Is there a better way to do that (throught pkg(1), pkg_info for example) ?
-
PKG_DB=/var/db/pkg
PORTS=/usr/ports
PACKAGES=$(cd ${PKG_DB}; find . -maxdepth 1 -type d -and \! -name "." )
for i in ${PACKAGES}; do
pkg_name=$(basename $i)
grep "^$pkg_name\|" $PORTS/INDEX |awk -F\| '{print $2}'
if [ $? -gt 0 ]; then
echo "${pkg_name} not found in ports tree" >& 2
fi
done
Re: Links sources and GPL
On Tue, Dec 12, 2006 at 03:37:13PM +0100, Karel Kulhavy wrote: | On Mon, Dec 04, 2006 at 06:48:13PM +0100, Marc Espie wrote: | > On Mon, Dec 04, 2006 at 04:56:46PM +0100, Karel Kulhavy wrote: | > > >From this I have a feeling that the Links distribution of OpenBSD doesn't | > > accord to the terms of GPL. Do you have an argument to convince me that I am | > > wrong? | > | > ftp ftp.openbsd.org | > cd pub/OpenBSD/distfiles | > ls links* | > | > you can't have looked very far, have you ? | | In the first level you have to guess 1 directory from 6, in the second 1/20 and | in the third 1/20. That's 1/2400 in total. From the depth point of view of a | familiar user it's not far, but from the breadth-first search a user infamiliar | with the system has to do, it's far. Excusez le mot, but this is total crap. If the user wants GPL sources for GPL software he's running on his OpenBSD machine which should be distributed by the project, according to GPL license rules, than it can be reasonably assumed that he already found pub/OpenBSD/ on the mirror. And from there, 'distfiles' may not be the most descriptive term, but it probably beats the other options you get when you're looking in there. It's kind-of, sort-of assumed that you apply basic reading skills and have at least a couple of braincycles to spare on finding whatever it is you're looking for. | BTW when we are at building tree structures for experienced users - the optimum | tree is one that minimizes the average access depth. One can count (or | estimate) the access statistics for individual leaves (documents, paragraphs or | sentences) and then build kinda Huffman tree. I don't think anyone is trying to build the optimum tree to minimize average access depth. I think people here try to build and use a UNIX-like operating system and are trying to be pragmatic about it. Huffman trees are probably more useful within the sourcetree. Somehow I don't think OpenBSD was created for people unwilling or unable to spend a bit of their time trying to read what was written for them. I'm not sure, it may be all those "we write it for ourselves, you may use it as you see fit" e-mails I've seen flying by (and which can be found in the archives (oooh ! we have archives; more reading skills to apply !)). Cheers, Paul 'WEiRD' de Weerd -- >[<++>-]<+++.>+++[<-->-]<.>+++[<+ +++>-]<.>++[<>-]<+.--.[-] http://www.weirdnet.nl/ [demime 1.01d removed an attachment of type application/pgp-signature]
Le nouvel iPod shuffle offert avec votre premiere commande
Ce message est au format HTML. Si vous ne parvenez pas ` le lire, cliquez ici . [IMAGE] Offre riservie ` anciens materiaux renovation de normandie, M50KIPODP17 * conditions ginirales de l'offre, cliquez ici [IMAGE] Je souhaite recevoir des informations et offres promotionnelles ` cette adresse e-mail (misc@openbsd.org) de la part de Welcome Office. Confidentialiti des donnies : Conformiment ` la Loi Informatique et Libertis, vous disposez d'un droit d' acchs et de rectification aux donnies vous concernant. Par notre intermidiaire, vous serez susceptible de recevoir des offres d'autres sociitis. Si vous ne le souhaitez pas, il suffit de nous icrire. Vous recevez ce message car vous avez iti en contact avec le Service Commercial de Welcome Office ou de ses partenaires. Pour ne plus recevoir de messages de la part de Welcome Office, cliquez ici.
Re: Finding missing udp packets?
On Mon, Dec 11, 2006 at 02:43:56PM -0500, Bill wrote: > I have an OpenVPN server running on OpenBSD 3.8 (x86). I've been > having intermitten problems with it and reconnection problems. It's > openvpn out of ports for 3.8. > > I have it down to right now, sporadically, the OpenVPN server thinks > it is sending UDP packets (and in the logs makes note that it has) but > I cannot see them leaving the external interface... > > What can I do to track down where this is going wrong? Is there some > way to see if OpenBSD is taking this packet and then losing it? > > I am just not sure where to look next. I've watched it happen, and > the traffic is very low, the utlization is like so: > > load averages: 0.40, 0.54, .60 > 38 processes: 37 idle, 1 on processor > CPU states: 2.7% user, 0.0% nice, 3.7% system, 1.6% interrupt, 92.0% idle > Memory: Real: 678M/824M act/tot Free: 684M Swap: 0K/3072M used/tot > > The strange part is that it works fine for a while, then suddenly > starts up with this behavior... We've had this happen with clients on > all different platforms (windows / mac / linux). > > We have an upgrade to OpenBSD 4.0 set for the first few weeks of next > year... I've another 3.8 machine running this fine with no problems > whatsoever... No clue. Check your logs (openvpn and kernel, at least), send some test packets, and take a good look at pf. I've used OpenVPN on 3.8 and more recently 4.0, without any problems, so it should work. For what that is worth... Are you certain, BTW, that it is not the *other* side that is at fault? tcpdump can be useful here. Joachim
Re: Newbie question - out of date script
On Mon, Dec 11, 2006 at 09:43:20PM -0800, Kernel Monkey wrote: > 3 questions from a newbie who would appreciate any help. > > Question 1) What is the proper way to check to see if my ports are > updated? I've been using the out-of-date script. That works fine, provided your ports tree is up to date. I prefer pkg_add -ui, though (available since 3.9). > Question 2) I have all my port sources updated to stable but when I > run the out-of-date script I find many problems: > > >Outdated ports: > > > >graphics/cairo # png-1.2.12 -> png-1.2.12p0 > >graphics/gdk-pixbuf # png-1.2.12 -> png-1.2.12p0 > >Errors: > > textproc/libxml,-python > > Fatal: Subpackage -python does not exist. (in textproc/libxml) > > If I do a #pkg_info | grep png I get: > > png-1.2.12p0library for manipulating PNG images > > So I have the updated png package installed, so why are the other > ports saying I need to update png? Some ports were built against an earlier version of libpng; you'll want to update those ports to use the newest version. > Question 3) How can I fix the python error? pkg_delete libxml,-python, then pkg_add libxml, and py-libxml if you really need it. It appears something changed between 3.9 and 4.0 here... Joachim
Re: apmd resume + xlock
xidle was a great suggestion thanks. The below script doesn't work either, and for some reason when running apmd in debug mode nothing gets outputted from what I can tell. For locking the screen before suspend I'll probably just stick with Theo's suggestion and run xlock & zzz, although I would love it to work on lid closer also. On Tue, 12 Dec 2006, Paul de Weerd wrote: On Mon, Dec 11, 2006 at 11:13:08PM -0500, James Turner wrote: | I've read the apmd and xlock man pages and am having trouble getting xlock | to start after a resume. I created the file /etc/apm/resume and chmod | 755. But for some reason, it doesn't run on resume. Permissions are | root/wheel. On a weird note, when I ran sudo apmd rather then letting | apmd start on boot xlock worked but it locked as root and not my logged in | user. Does anyone have any suggestions on how to get xlock to start on a | resume. | | The contents of /etc/apm/resume are: | #!/bin/sh | xlock -mode matrix From your description, I'd say that xlock can not find the DISPLAY environment variable (only set within X) to run xlock on. Then, when you start xlock by hand (probably from within X, thus giving it a valid DISPLAY to connect to), it runs as root simply because apmd runs as root. Try putting xidle in your .xinitrc and have that run xlock. xidle then runs under your own uid and will spawn an xlock owned by you which you can then unlock using your own password. An alternative might be to change your script. I have not tested the following, so it may or may not work : #!/bin/sh export DISPLAY=:0.0 sudo -u /usr/X11R6/bin/xlock -mode matrix I find this, however, to be ugly and not the way things should be done. Of course, YMMV. Cheers, Paul 'WEiRD' de Weerd -- [<++>-]<+++.>+++[<-->-]<.>+++[<+ +++>-]<.>++[<>-]<+.--.[-] http://www.weirdnet.nl/
Re: automatic packages upgrade from ports
On Tue, Dec 12, 2006 at 01:31:31PM +0100, Francois Visconte wrote: > Hello, > I'm searching for a way to automaticaly doing the following actions: > 1/ update port tree (OPENBSD_4_0) > 2/ get installed packages and find corresponding ports > 3/ build this packages from ports. > > Maybe i missed the point but i don't find an existing way to do that. > I'm using the following way to get packages path and flavor from > installed package > Is there a better way to do that (throught pkg(1), pkg_info for example) ? pkg_add -ui does what you want to do. (No, it doesn't go to ports, but you shouldn't, especially not if you must ask how to do this.) Joachim
Re: apmd resume + xlock
On 12/12/06, James Turner <[EMAIL PROTECTED]> wrote: xidle was a great suggestion thanks. The below script doesn't work either, and for some reason when running apmd in debug mode nothing gets outputted from what I can tell. For locking the screen before suspend I'll probably just stick with Theo's suggestion and run xlock & zzz, although I would love it to work on lid closer also. That's what I do. I also unmount and mount NFS with -endCmd in xlock. Greg On Tue, 12 Dec 2006, Paul de Weerd wrote: > On Mon, Dec 11, 2006 at 11:13:08PM -0500, James Turner wrote: > | I've read the apmd and xlock man pages and am having trouble getting xlock > | to start after a resume. I created the file /etc/apm/resume and chmod > | 755. But for some reason, it doesn't run on resume. Permissions are > | root/wheel. On a weird note, when I ran sudo apmd rather then letting > | apmd start on boot xlock worked but it locked as root and not my logged in > | user. Does anyone have any suggestions on how to get xlock to start on a > | resume. > | > | The contents of /etc/apm/resume are: > | #!/bin/sh > | xlock -mode matrix > > From your description, I'd say that xlock can not find the DISPLAY > environment variable (only set within X) to run xlock on. Then, when > you start xlock by hand (probably from within X, thus giving it a > valid DISPLAY to connect to), it runs as root simply because apmd runs > as root. > > Try putting xidle in your .xinitrc and have that run xlock. xidle then > runs under your own uid and will spawn an xlock owned by you which you > can then unlock using your own password. > > An alternative might be to change your script. I have not tested the > following, so it may or may not work : > > #!/bin/sh > export DISPLAY=:0.0 > sudo -u /usr/X11R6/bin/xlock -mode matrix > > I find this, however, to be ugly and not the way things should be > done. Of course, YMMV. > > Cheers, > > Paul 'WEiRD' de Weerd > > -- >> [<++>-]<+++.>+++[<-->-]<.>+++[<+ > +++>-]<.>++[<>-]<+.--.[-] > http://www.weirdnet.nl/
Re: apmd resume + xlock
Hi James, On 2006-12-12T11:45, James Turner wrote: > xidle was a great suggestion thanks. The below script doesn't work > either, and for some reason when running apmd in debug mode nothing gets > outputted from what I can tell. For locking the screen before suspend > I'll probably just stick with Theo's suggestion and run xlock & zzz, > although I would love it to work on lid closer also. I use this: $ cat /etc/apm/suspend #!/bin/ksh sudo -u /bin/ksh -c "HOME=/home/; /usr/X11R6/bin/xlock \ -display :0.0" & It works for me. If I close the lid, OpenBSD gets locked. hth, Marcus.
Re: Software inventory management
On 12/11/06, stan <[EMAIL PROTECTED]> wrote: > > Sudenly there is an improved desire to keep up to date on the latest > security fixes at work. I've got about 50 machines that I manage. OpenBSD, > FreeBSD, Linux, Solairs, and HP-UX. > > I am looking for recomendations for a (hopefully automed), prefereably > web based tool to keep up with what versions of OS, OS patches, and ports > are installed on these machines. > > Could anyone with experience using such a tool share their experience, > both good and bad for such [ackages? > > -- > Unix is very simple, but it takes a genius to understand the simplicity. > (Dennis Ritchie) > > I'm replying off list, because this isn't a solution for OpenBSD. On your HP-UX boxes, you should have the following directory: /opt/ignite If your box is Itanium, you want to run /opt/ignite/binia/print_manifest to get a very thorough system manifest report. If it's PA-RISC, then it'll either be: /opt/ignite/binpa/print_manifest or: /opt/ignite/bin/print_manifest depending on what version of OS you're running. This isn't web based, but it is definitely very useful. Sorry, but I don't have any advice for the other platforms you listed. Stefan
Re: automatic packages upgrade from ports
pkg_add -ui does what you want to do. (No, it doesn't go to ports, but you shouldn't, especially not if you must ask how to do this.) Joachim I just would like to maintain a local up-to-date package database compiled from ports so i can dot periodicaly: PKG_PATH=/usr/ports/packages/sparc64/All/ pkg_add -ui It's like a bulk build, but only for packages installed on my box. I don't why i should not do this as it's what is done on the openbsd main site but for all packages... Cheers, Francois
Re: apmd resume + xlock
Marcus, I tried your script, but when I come back from resume X seems to die and after a few minutes I get kicked to xdm. > Hi James, > > On 2006-12-12T11:45, James Turner wrote: >> xidle was a great suggestion thanks. The below script doesn't work >> either, and for some reason when running apmd in debug mode nothing gets >> outputted from what I can tell. For locking the screen before suspend >> I'll probably just stick with Theo's suggestion and run xlock & zzz, >> although I would love it to work on lid closer also. > > I use this: > $ cat /etc/apm/suspend > #!/bin/ksh > sudo -u /bin/ksh -c "HOME=/home/; > /usr/X11R6/bin/xlock \ > -display :0.0" & > > It works for me. If I close the lid, OpenBSD gets locked. > > hth, > > Marcus.
Re: apmd resume + xlock
I tried the script again without -mode matrix and it works just fine. It seems that running -mode matrix crashes x on resume. Anyone have any ideas why? > Marcus, > > I tried your script, but when I come back from resume X seems to die and > after a few minutes I get kicked to xdm. > >> Hi James, >> >> On 2006-12-12T11:45, James Turner wrote: >>> xidle was a great suggestion thanks. The below script doesn't work >>> either, and for some reason when running apmd in debug mode nothing >>> gets >>> outputted from what I can tell. For locking the screen before suspend >>> I'll probably just stick with Theo's suggestion and run xlock & zzz, >>> although I would love it to work on lid closer also. >> >> I use this: >> $ cat /etc/apm/suspend >> #!/bin/ksh >> sudo -u /bin/ksh -c "HOME=/home/; >> /usr/X11R6/bin/xlock \ >> -display :0.0" & >> >> It works for me. If I close the lid, OpenBSD gets locked. >> >> hth, >> >> Marcus.
Re: apmd resume + xlock
On a good note, if I add the -mode option back in and move the suspend script to a resume script, xlock gets started on resume. There is a slight delay before xlock kicks in where you see the current xsession, but I guess it's better then nothing.
Re: automatic packages upgrade from ports
fv [2006-12-12, 19:29:45]: > >pkg_add -ui does what you want to do. (No, it doesn't go to ports, but > >you shouldn't, especially not if you must ask how to do this.) > > > > Joachim > > > I just would like to maintain a local up-to-date package database > compiled from ports so i can dot periodicaly: > PKG_PATH=/usr/ports/packages/sparc64/All/ > pkg_add -ui > > It's like a bulk build, but only for packages installed on my box. > I don't why i should not do this as it's what is done on the openbsd > main site but for all packages... sounds like you want to build a SUBDIRLIST with pkg_info(1). Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm
Re: apmd resume + xlock
James Turner wrote: I tried the script again without -mode matrix and it works just fine. It seems that running -mode matrix crashes x on resume. Anyone have any ideas why? Not specifically, but that reminds me... For a short while I was running with random screensavers and found core files laying around. Seems that many of the "hacks" have various problems, mostly memory abuse. If there's a core for matrix then perhaps it can tell you something. -- Darrin Chandler| Phoenix BSD Users Group [EMAIL PROTECTED] | http://bsd.phoenix.az.us/ http://www.stilyagin.com/ |
Re: SOLVED: apmd resume + xlock
Thanks for everyone's help. I got xlock working with the suspend script by just removing the -mode matrix option. The matrix mode uses to much cpu anyways. I know have xidle and suspend script working great. Thanks again. On Tue, 12 Dec 2006, Greg Thomas wrote: On 12/12/06, James Turner <[EMAIL PROTECTED]> wrote: On a good note, if I add the -mode option back in and move the suspend script to a resume script, xlock gets started on resume. There is a slight delay before xlock kicks in where you see the current xsession, but I guess it's better then nothing. I'll have to check my script when I get home, my laptop is currently suspended so I can't log into it, but I don't see the current xsession before xlock kicks in. Greg
Re: Looking for PE860 dmesg
On Nov 29, 2006, at 1:08 PM, Jason Dixon wrote:
Anyone have a working dmesg from a Dell PowerEdge 860?
For the archives. I got ahold of a new PE860, runs OpenBSD 4.0 just
fine.
# sysctl hw.sensors
hw.sensors.0=ipmi0, Temp, 44.00 degC, OK
hw.sensors.1=ipmi0, Planar Temp, 30.00 degC, OK
hw.sensors.2=ipmi0, CMOS Battery, 3.04 V DC, OK
hw.sensors.3=ipmi0, PROC Fan, 3075 RPM, OK
hw.sensors.4=ipmi0, DIMM Fan, 3000 RPM, OK
hw.sensors.5=ipmi0, PCI Fan, 1350 RPM, CRITICAL
hw.sensors.6=ipmi0, Intrusion, Off, OK
# dmesg
OpenBSD 4.0 (GENERIC.MP) #936: Sat Sep 16 19:27:28 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Pentium(R) D CPU 2.80GHz ("GenuineIntel" 686-class)
2.81 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-
CPL,EST,CNXT-ID,CX16
real mem = 1073053696 (1047904K)
avail mem = 970772480 (948020K)
using 4256 buffers containing 53755904 bytes (52496K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 11/02/06, BIOS32 rev. 0 @
0xffe90, SMBIOS rev. 2.4 @ 0xfa5b0 (48 entries)
bios0: Dell Computer Corporation PowerEdge 860
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfba60/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82801GB LPC" rev
0x00)
pcibios0: PCI bus #5 is the last bus
bios0: ROM list: 0xc/0x9000 0xc9000/0x1000 0xca000/0x1800
0xec000/0x4000!
ipmi0 at mainbus0: version 1.5 interface KCS iobase 0xca8/8 spacing 4
mainbus0: Intel MP Specification (Version 1.4) (DELL PE 01E6 )
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200 MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Pentium(R) D CPU 2.80GHz ("GenuineIntel" 686-class)
2.81 GHz
cpu1:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-
CPL,EST,CNXT-ID,CX16
mainbus0: bus 0 is type PCI
mainbus0: bus 1 is type PCI
mainbus0: bus 2 is type PCI
mainbus0: bus 3 is type PCI
mainbus0: bus 4 is type PCI
mainbus0: bus 5 is type PCI
mainbus0: bus 6 is type ISA
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel E7230 MCH" rev 0x00
ppb0 at pci0 dev 1 function 0 "Intel E7230 PCIE" rev 0x00
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01
pci2 at ppb1 bus 2
ppb2 at pci0 dev 28 function 4 "Intel 82801G PCIE" rev 0x01
pci3 at ppb2 bus 3
bge0 at pci3 dev 0 function 0 "Broadcom BCM5721" rev 0x11, BCM5750 B1
(0x4101): apic 2 int 16 (irq 5), address 00:15:c5:f5:74:ce
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
ppb3 at pci0 dev 28 function 5 "Intel 82801G PCIE" rev 0x01
pci4 at ppb3 bus 4
bge1 at pci4 dev 0 function 0 "Broadcom BCM5721" rev 0x11, BCM5750 B1
(0x4101): apic 2 int 17 (irq 3), address 00:15:c5:f5:74:cf
brgphy1 at bge1 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 2
int 20 (irq 11)
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 2
int 21 (irq 10)
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: apic 2
int 22 (irq 6)
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: apic 2
int 20 (irq 11)
usb3 at ehci0: USB revision 2.0
uhub3 at usb3
uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
ppb4 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0xe1
pci5 at ppb4 bus 5
vga1 at pci5 dev 5 function 0 "ATI ES1000" rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ichpcib0 at pci0 dev 31 function 0 "Intel 82801GB LPC" rev 0x01: PM
disabled
pciide0 at pci0 dev 31 function 1 "Intel 82801GB IDE" rev 0x01: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:
SCSI0 5/cdrom removable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
pciide1 at pci0 dev 31 function 2 "Intel 82801GB SATA" rev 0x01: DMA,
channel 0 configured to native-PCI, channel 1 configured to native-PCI
pciide1: using apic 2 int 20 (irq 11) for native-PCI interrupt
wd0 at pciide1 channel 0 d
Re: nat or routing problem? SOLVED
Rod.. Whitworth wrote: > On Sat, 09 Dec 2006 14:34:04 +0100, Mitja wrote: > >> Mikael Fridh wrote: # pfctl -s all TRANSLATION RULES: nat on bge0 inet from 192.168.1.0/24 to any -> (bge0:0) rdr pass on em1 inet proto tcp from any to any port = 5900 -> 192.168.1.111 port 5900 >>> If bge0 is your external interface that nat line now looks correct. >>> If your internal hosts on the 192.168.1.0/24 net have default gateway >>> 192.168.1.1 it should be nating properly. >> Yes and it is nating, but I am trying to set my source IP to >> 193.189.180.193 (em1). >> > Translating a bit from what I use should get you there: > > lan_ip="192.168.1.0/24" > ext_if="bge0" > fw_global-ip="193.189.180.193" > nat on $ext_if inet from $lan_ip to any -> $fw_global_ip > > I discovered this by (1) needing it, and (2) reading man 5 pf.conf and > checking the BNF grammar near the end, and (3) trying it. > > It saved me from half-bridging (messy) or renting a /32 (waste of $$). > > Without the quality of OpenBSD docs it may never have happened. Actually it works. Thank you! Regards, Mitja
How to kill processes that have been revoked?
I need to kill all the processes that cannot reach their controlling terminal (according to `man ps`: they have been revoked). Or, how could I get them back or place then into new terminals? This machine is a diskless X client. The problem occurred when I plugged another machine into the switch, which may have accidentally had the same IP as my X client. My diskless client hanged for a few seconds and logged me out. After logging back in, this is what is running. [EMAIL PROTECTED] ps axj -U pachl USER PID PPID PGID SESS JOBC STAT TT TIME COMMAND pachl10545 5802 10545 da3726900 Is??0:00.02 /bin/sh /usr/X11R6/lib/X11/xdm/Xsession pachl22396 10545 10545 da3726900 I ??0:02.90 fvwm2 pachl21524 22396 10545 da3726900 I ??0:29.58 xterm pachl 3778 21524 3778 da3726600 Isp00:00.18 ksh pachl 861 3778 861 da3726601 R+/0 p00:00.00 ps -axj -U pachl pachl 138 9705 138 da3723f00 ZW+ p1- 0:00.00 (vim) pachl 9705 1 9705 da3723f00 IEs p1- 0:00.12 (ksh) pachl 7502 1 7502 da3724200 IEs p2- 0:00.06 (ksh) pachl14706 7502 14706 da3724201 IE+ p2- 1:24.13 (vim) pachl21736 1 21736 da3724500 IEs p3- 0:00.08 (ksh) pachl 3473 21736 3473 da3724501 IE+ p3- 0:38.08 (vim) pachl15053 1 15053 da3724800 IEs p4- 0:00.10 (ksh) pachl30386 15053 30386 da3724801 IE+ p4- 1:56.65 (vim) pachl22053 1 22053 da3725400 IEs p7- 0:00.99 (ksh) pachl 464 22053 464 da3725401 IE+ p7- 0:17.97 (ruby) pachl26387 1 26387 da3725700 IEs p8- 0:00.09 (ksh) pachl20659 26387 20659 da3725701 IE+ p8- 0:15.08 (vim) pachl28657 1 28657 da3725100 IEs p9- 0:00.61 (ksh) pachl18227 28657 18227 da3725101 IE+ p9- 0:00.52 (vim)
Re: autoconf error message suggestion
Karel Kulhavy <[EMAIL PROTECTED]> wrote: > > >but maybe there is some URL explaining this topic. > > No, because you should have at least basic Un*x knowledge. > > I have a basic Unix knowledge. Do you think that someone who wrote 25% of a > graphical web browser that runs on the following platforms: > Linux, BSD, UNIX in general, OS/2, Cygwin under Windows, AtheOS, BeOS, > FreeMint, X Window System (UN*X, Cygwin), SVGAlib, Linux Framebuffer, OS/2 > PMShell, AtheOS GUI, doesn't have a basic Unix knowledge? Writing software does not imply having basic unix knowledge. Asking the questions you keep asking does imply lacking basic unix knowledge. > This answer is an equivalent to "we didn't put labels on the buttons on TV > remote control because this information can be obtained from the user's > manual". No, its equivalent to "it says I need to push the power button on the remote, but doesn't include a pointer to a website explaining how to push buttons". > I don't understand what's the point in refusing to do this - this looks like > some kind of OpenBSD script and it should be easy to change the text it > prints, > shouldn't? I guess the work will be minimal and the benefit will be obvious. The benefit is only obvious to you. Everyone else who is capable of using autoconf seems to also be capable of setting a simple environment variable. It really is as easy as it seems. My first time running autoconf looked alot like this: $ autoconf Provide an AUTOCONF_VERSION environment variable, please $ autoconf <- lets try out that autocomplete feature autoconfautoconf-2.52 autoconf-2.57 autoconf-2.13 autoconf-2.54 autoconf-2.59 $ autoconf $ export AUTOCONF_VERSION=2.59 This can only be described using phrases like "incredibly obvious" or "painfully obvious". Adam
VPN stability issues with a Fortigate peer
Chris Jones writes: > I'm running the release version or OpenBSD 4.0 on my firewall and > experiencing some odd IPSEC VPN behavior when connecting to a Fortigate > peer. The tunnel will come up just fine but will randomly go down and > then come back up and will continue this cycle. Unfortunately both FortiGate and OpenBSD don't follow Postel's advice to be liberal in what you accept (OpenBSD) and conservative in what you send (FortiGate). RFC 3706 section 5.3 says that the DOI SHOULD (not MUST) be 1. When the FortiGate sends a DPD with a DOI of 0, OpenBSD rejects it because that sends it to the ISAKMP handler which drops NOTIFY messages (see annotated trace below). If you only need DPD on one end and OpenBSD will send a DPD Vendor ID without trying to send a DPD (I haven't checked) then you can leave DPD enabled on the FortiGate and disable it OpenBSD. If that won't work or isn't acceptable (won't work too well if the FortiGate is configured with a dynamic connection) then to get FortiGate and OpenBSD DPD to interoperate you'll need to get one or both of FortiGate and OpenBSD to change their code. For FortiGate, send email to their customer support. In the case of OpenBSD maybe it is as simple as copying over the DPD message parsing from src/sbin/isakmpd/ipsec.c:ipsec_responder and put it in src/sbin/isakmpd/isakmpd_doi.c:isakmp_responder. BTW Cisco IOS (12.4) does follow the "be liberal in what you accept" recommendation in this case and will accept a DPD with a DOI of 0 from a FortiGate (though it will log a warning for DPD R U THERE). > I am running isakmpd with the -K option and using ipsecctl to > establish flows and SA's. This is what my ipsec.conf looks like: > > remote_gw = "10.1.1.1" > > flow esp from 192.168.8.1/32 to 192.168.0.0/16 peer $remote_gw type > bypass > > ike dynamic esp from 192.168.8.0/24 to 192.168.0.0/16 peer $remote_gw \ > aggressive auth hmac-sha1 enc 3des group modp1536 \ > quick auth hmac-sha1 enc 3des group modp1536 \ > srcid [EMAIL PROTECTED] \ > psk sharedsecret > > The peer is DPD capable and enabled with the following settings: > > retry-count: 3 > retry-interval: 5 > > After running isakmpd in debug mode (isakmpd -d -DA=50 -K) and after > running ipsecctl I issued a continuous ping to one of the hosts at the > other side of the tunnel. The ping ran fine for a period of time and > then stopped. Here is the ouput from the debug: > > 073059.683292 Cryp 30 crypto_decrypt: after decryption: > 073059.686654 Cryp 30 0118 fbbe1146 c43cf921 dc386a4a 0dfc2751 > e4cf2a6d 0a34 0001 > 073059.689438 Cryp 30 0001 0028 01030401 f286fdea 001c > 0103 80010001 800204b0 > 073059.692737 Cryp 30 80040001 80050002 80030005 0414 c5664590 > c4700a67 9cec6a71 633ffd8c > 073059.695546 Cryp 30 05c4 6214a4ed 31ca88ca 0945b3d6 dd2c44ef > d03b008d 72b5ea00 273d3e0a > 073059.698996 Cryp 30 5ec40d98 02c0ebad e3eac805 f87fa1ee 1142e2fd > 92aee043 09e84e1c 3788c268 > 073059.701817 Cryp 30 4fdab8c6 1cbfad15 8123a459 df7a9a3b 66db84c5 > 59211ec4 90882bfc 2ae61c66 > 073059.705109 Cryp 30 6d35acdf 585d0b08 c5560cf9 d4a996a7 32a18daa > d3385206 7ce49f52 f5bab82c > 073059.707999 Cryp 30 12b6cc01 29fec19b 3f582995 e80637b4 5e99d396 > 3a3b650b 2d78dd5f 44879af5 > 073059.711332 Cryp 30 1f8e016d 27c69817 341c6984 52e4f663 175db8ba > c206fb2b 08b9d0df f46705c1 > 073059.714125 Cryp 30 5a7d0a5a 0510 0400 0a4c0800 ff00 > 0010 0400 0a4c > 073059.717252 Cryp 30 > 073059.719573 Mesg 50 message_parse_payloads: offset 28 payload HASH > 073059.722425 Mesg 50 message_parse_payloads: offset 52 payload SA > 073059.724772 Mesg 50 message_parse_payloads: offset 104 payload NONCE > 073059.727806 Mesg 50 message_parse_payloads: offset 124 payload > KEY_EXCH > 073059.730126 Mesg 50 message_parse_payloads: offset 320 payload ID > 073059.733027 Mesg 50 message_parse_payloads: offset 336 payload ID > 073059.735500 Mesg 50 message_parse_payloads: offset 64 payload PROPOSAL > 073059.738492 Mesg 50 message_parse_payloads: offset 76 payload > TRANSFORM > 073059.740835 Mesg 50 Transform 1's attributes > 073059.743665 Mesg 50 Attribute SA_LIFE_TYPE value 1 > 073059.745973 Mesg 50 Attribute SA_LIFE_DURATION value 1200 > 073059.749044 Mesg 50 Attribute ENCAPSULATION_MODE value 1 > 073059.751324 Mesg 50 Attribute AUTHENTICATION_ALGORITHM value 2 > 073059.754161 Mesg 50 Attribute GROUP_DESCRIPTION value 5 > 073059.757008 Mesg 40 ipsec_validate_id_information: proto 0 port 0 type > 4 > 073059.761190 Mesg 40 ipsec_validate_id_information: IPv4 > network/netmask: > 073059.763556 Mesg 40 0a4c0800 ff00 > 073059.766532 Mesg 40 ipsec_validate_id_information: proto 0 port 0 type > 4 > 073059.768913 Mesg 40 ipsec_validate_id_information: IPv4 > network/netmask: > 073059.771838 Mesg 40 0a4c > 073059.774860 Misc 20 ipsec_decode_transform
VPN stability issues with a Fortigate peer
Stephen J. Bevan writes: > If you only need DPD on one end and OpenBSD will send a DPD Vendor ID > without trying to send a DPD (I haven't checked) then you can leave > DPD enabled on the FortiGate and disable it OpenBSD. Sorry, brainfart. That won't work. You'll need ... > If that won't work or isn't acceptable (won't work too well if the > FortiGate is configured with a dynamic connection) then to get > FortiGate and OpenBSD DPD to interoperate you'll need to get one or > both of FortiGate and OpenBSD to change their code. For FortiGate, > send email to their customer support. In the case of OpenBSD maybe it > is as simple as copying over the DPD message parsing from > src/sbin/isakmpd/ipsec.c:ipsec_responder and put it in > src/sbin/isakmpd/isakmpd_doi.c:isakmp_responder.
Space Inquest: a friend invites you to join us
Dear Gamer, Your friend has registered to SpaceInquest.com, an innovative MMOG. If you would like to join and have some fun too, please click on the following link. http://SpaceInquest.com/[EMAIL PROTECTED]&k=f5227b7e74c2324f5474ff76e49bd75a Regards, Space Inquest Team "Only One Will Rise" --- Space Inquest Information and support Department http://www.spaceinquest.com [EMAIL PROTECTED]
OpenBSD/amd64 on VMware = sloooooow?
OK, so just to be clear I'm not a terribly clever person. I have no idea what I should be looking for to diagnose this issue. It's entirely possible that I have something configured stupidly/wrong, etc or that the answer is right in front of me, but I wouldn't know. I've done a little googling and all I came up with was: http://archives.neohapsis.com/archives/openbsd/2005-11/1349.html which went completely un-answered (at least on-list). The OP and I conversed off-list a few weeks ago and he mentioned that the situation is still the same for him (same as I'm seeing). Summary: - 64bit host OS (SLES 9) running on 2 dual-core Opteron 265s - VMware Server 1.0.1 build 29996 - OpenBSD/i386 works fine - OpenBSD/amd64 is slow as hell - MP/UP kernel makes no difference - one CPU or two CPUs makes no difference I've tried 4.0-release, then a snapshot from a few weeks ago, now running with -current GENERIC.MP kernel (as of last night). That kernel took about 22 hours to build, BTW--that's slower than my SPARCstation 5. Right now it's churning away on make depend for GENERIC (UP) and it's been doing so for over 128 minutes. Does anyone have *any* idea why compiling would be so slow on this setup? Services respond fairly quickly (ssh, etc) but running make or cc takes ages. Usually the load is around 1.3 or so when building something, but on occasion it spikes to 16 or more for no apparent reason. I'd love to collect any relevant information that could help diagnose the problem. What I got so far is some output from vmstat (system has been up for about 3hrs, most of that trying to make depend for amd64/GENERIC). I have no idea what I'm talking about, but should syscalls be over 174 million in 3 hrs? What about over 1 million interrupts? vmstat -i interrupt total rate irq0/clock2323579 198 irq0/ipi 659552 56 irq14/pciide098020 irq18/em075210 irq1/pckbc0 32740 Total 3003728 255 vmstat -s 4096 bytes per page 92994 pages managed 60024 pages free 12862 pages active 3646 pages inactive 0 pages being paged out 2 pages wired 0 pages zeroed 4 pages reserved for pagedaemon 6 pages reserved for kernel 131117 swap pages 0 swap pages in use 217870 total anon's in system 206486 free anon's 592955 page faults 625470 traps 14762 interrupts 177426 cpu context switches 17746 fpu context switches 1281121 software interrupts 174821427 syscalls 0 pagein operations 0 swap ins 0 swap outs 890 forks 9 forks where vmspace is shared 13 kernel map entries 0 number of times the pagedaemon woke up 0 revolutions of the clock hand 0 pages freed by pagedaemon 0 pages scanned by pagedaemon 0 pages reactivated by pagedaemon 0 busy pages found by pagedaemon 484013 total name lookups cache hits (87% pos + 9% neg) system 0% per-directory deletions 0%, falsehits 0%, toolong 0% 0 select collisions dmesg: OpenBSD 4.0-current (GENERIC.MP) #0: Tue Dec 12 19:00:05 PST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 401141760 (391740K) avail mem = 331026432 (323268K) using 9844 buffers containing 40321024 bytes (39376K) of memory mainbus0 (root) bios0 at mainbus0: SMBIOS rev. 2.31 @ 0xe0010 (45 entries) bios0: VMware, Inc. VMware Virtual Platform acpi at mainbus0 not configured mainbus0: Intel MP Specification (Version 1.4) cpu0 at mainbus0: apid 0 (boot processor) cpu0: Dual Core AMD Opteron(tm) Processor 265, 1985.19 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36, CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: apic clock running at 66MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Dual Core AMD Opteron(tm) Processor 265, 1838.56 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36, CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative mpbios: bus 0 is type PCI mpbios: bus 1 is type PCI mpbios: bus 2 is type ISA ioapic0 at mainbus0 apid 2 pa 0xfec0, version 11, 24 pins pci0 a
Re: php and ldap
Am Dienstag, 12. Dezember 2006 10:40 schrieb Dr. Harry Knitter: > Am Montag, 11. Dezember 2006 19:39 schrieb Bryan Irvine: > > > > > Did I forget anything? > > > > > > > > You've installed the proper php5-ldap package for your arch / > > > > version? > > > > > > yes (all from packages) > > > > > > > You've restarted apache after running phpxs? > > > > Does phpinfo show ldap support? > > > > make a script that just has > > > print phpinfo(); > > ?> > > > > and open it from a browser, > > > > If ldap support doesn't show there, try typing from command line: > > $ php > > > print phpinfo(); > > ?> > > ^d > > > > and see if ldap support shows there. > > > > If it shows up when run from CLI, but not from web browser, try a hard > > stop of apache and restart it. > > > > If that still doesn't do it, check /var/www/conf/php.ini for ldap > > support. > > > > --Bryan > > phpinfo() shows > > SystemOpenBSD myserver.mydomain.com 4.0 GENERIC#690 amd64 > Build DateSep 7 2006 06:55:44 > Configure Command './configure' '--with-apxs=/usr/sbin/apxs' > '--without-mysql' '--enable-xml' '--enable-wddx' '--enable-cli' > '--with-iconv=/usr/local' '--with-gettext=/usr/local' '--enable-dio' > '--with-pear=/var/www/pear' '--enable-bcmath' '--enable-session' > '--enable-trans-sid' '--enable-calendar' '--enable-ctype' '--enable-ftp' > '--with-pcre-regex' '--with-posix' '--enable-sockets' '--enable-sysvsem' > '--enable-sysvshm' '--enable-yp' '--enable-exif' '--without-sqlite' > '--enable-shared' '--disable-static' '--disable-rpath' > '--with-config-file-path=/var/www/conf' '--enable-inline-optimization' > '--with-pic' '--with-openssl' '--with-zlib' '--prefix=/usr/local' > '--sysconfdir=/etc' '--mandir=/usr/local/man' '--infodir=/usr/local/info' > Server APIApache > Virtual Directory Support disabled > Configuration File (php.ini) Path /var/www/conf/php.ini > PHP API 20041225 > PHP Extension 20050922 > Zend Extension220051025 > Debug Build no > Thread Safety disabled > Zend Memory Manager enabled > IPv6 Support enabled > Registered PHP Streamsphp, file, http, ftp, compress.zlib, https, ftps > Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, > sslv2, tls > Registered Stream Filters string.rot13, string.toupper, string.tolower, > string.strip_tags, convert.*, consumed, convert.iconv.*, zlib.* > > in php.ini there is > > extension=ldap.so > I have found it by myself: I had to set the right path for extension_dir in php.ini. Hope it may help others not to waste such a long time getting their loadable modules running. Harry
