Re: BIND and /var/arandom missing fix]

2007-11-01 Thread Stuart Henderson
On 2007/11/01 22:46, J.D. Carlson wrote:
> 
> I have ignored them, for a number of years and never worried about
> it.  But management dictates we move to Men and Mice to manage dns.
> If I run their DNS Server Controller under linux emulation and the
> OpenBSD named is running as a chroot, it looks for a /dev/random or 
> /dev/arandom inside the chroot.  It fails if it is not there:
> 
>  Men and Mice DNS Server Controller for BIND[32343]: Unable to 
>  initalize crypting library. Random device not readable.
> 
> So my choice was to give up OpenBSD as our name servers (never!) and
> run Linux or FreeBSD (also never!), or run OBSD named without 
> the chroot.  It seemed like a compromise I could live with.

There's nothing magic about device nodes, you can just create
them yourself. See mknod(1) and /dev/MAKEDEV.



Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread Lars Noodén
ropers wrote:
> Id didn't know him personally, but I do know that he was a man of many 
> talents:
> People here remember him as a fellow OpenBSD developer. However,
> possibly his most lasting legacy will be his tireless work (for over
> ten years) on IPv6.

Same here.  I've been following IPv6 for a while and he has been a
central figure whose name is everywhere.  I expect that much of
wikipedia's resistance stems from the ignorance antagonism towards IPv6
in the mainstream press.

> The Internet will only be able to continue to grow because of IPv6,
> and a big part of the IPv6 work was done by itojun, in collaboration
> with others, particularly within the KAME project (
> http://en.wikipedia.org/wiki/KAME_project ), and in collaboration with
> the WIDE ( http://www.wide.ad.jp/ ) , TAHI ( http://www.tahi.org/ )
> and USAGI ( http://www.linux-ipv6.org/ ) projects.

However, whether there are bonafide fifth columnists even at wiki, or
plain old ignorance, or simply malevolent emergent behavior,
technologies and methods that put Redmond products in bad light get
actively pushed aside or hidden.

IPv6 brings to light a whole slew of insurmountable design and
implementation problems in the Redmond movement's gimmicks - er -
products.  And the way we do currently networking in general with IPv4.
  So in addition to other factors, there are those with incentive to
postpone general knowledge and deployment of IPv6.

> In short, his work (and IPv6 advocacy) will prove vital for the future
> of the Internet and its continued existence as one global entity. If
> you like the Internet, then maybe you should be aware of itojun's
> work...

Well put.

Regards,
-Lars



Re: OpenBSD 4.2 release November 1, 2007

2007-11-01 Thread Lars Noodén
>>> Perhaps a theme for a future release is shaping up.  Something like
>>> Yojimbo or Sanjuro (sp?) with Puffy as the wandering samurai.  Yojimbo
>>> is prolly an easier storyline to adapt.

Yojimbo.  There are plenty of good scenes (like the hiring process) in
that one.   Also there are, uh, parallels with films in other genres
like "For a Fistfull of Dollars".



Re: BIND and /var/arandom missing fix]

2007-11-01 Thread J.D. Carlson
On Thu, Nov 01, 2007 at 01:53:09PM -0600, Theo de Raadt wrote:
> > I have a server running OpenBSD 4.2-current and acting as a 
> > name server. It always has these messages in the /var/log/daemon 
> > file upon startup:
> > 
> >  Oct 27 05:51:38 racine named[3780]: could not open entropy \
> >  source  /dev/arandom: file not found
> >  Oct 27 05:51:38 racine named[3780]: using pre-chroot entropy \
> >  source  /dev/arandom
> > 
> > That never bothered me, until I needed to use Men and Mice 
> > DNS Server Controller management tools on my OBSD name server, 
> > but that is another story.
> 
> Ignore the messages.  They mean nothing.  Our BIND, when running,
> does not use that stupid mechanism for entropy.

I have ignored them, for a number of years and never worried about
it.  But management dictates we move to Men and Mice to manage dns.
If I run their DNS Server Controller under linux emulation and the
OpenBSD named is running as a chroot, it looks for a /dev/random or 
/dev/arandom inside the chroot.  It fails if it is not there:

 Men and Mice DNS Server Controller for BIND[32343]: Unable to 
 initalize crypting library. Random device not readable.

So my choice was to give up OpenBSD as our name servers (never!) and
run Linux or FreeBSD (also never!), or run OBSD named without 
the chroot.  It seemed like a compromise I could live with.

Men and Mice doesn't officially support OpenBSD, but it was semi-easy
to get it running under linux emulation for the Server Controller. 

J.D. Carlson



Re: OpenBSD 4.2 release November 1, 2007

2007-11-01 Thread Koh Choon Lin
> Big thanks to all OpenBSD developer, such a cutting-edge you got there
> man..
> Thanks a lot!

I note that this is the first OBSD release with ISOs.


Thanks you so much!
Koh Choon Lin
Singapore GNU Group



Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1

2007-11-01 Thread Vadim Jukov
B qnnayemhh nr Ormhv` 02 mnap 2007 Mark Thomas m`ohq`k(a):
> On Nov 1, 2007 6:30 PM, Vadim Jukov <[EMAIL PROTECTED]> wrote:
> > The only one InputDevice section you need:
> >
> > Section "InputDevice"
> > Identifier "Mouse1"
> > Driver "mouse"
> > Option "Protocol" "wsmouse"
> > Option "Device" "/dev/wsmouse"
> > Option "ZAxisMapping" "4 5 6 7"
> > EndSection
> >
> > Then, in ServerLayout section you put only one string:
> >
> > InputDevice "Mouse1" "CorePointer"
> >
> > Greg is right: that's all what you need on OpenBSD.:) Put in more
> > mice or get them out, your X doesn't have to bother about this. In
> > very rare cases, at least on x86 architecture PCs, you will need to
> > control mouse handling per device.
>
> I remember reading something just like a few weeks ago when I was
> investigating what laptop hardware worked best with OpenBSD. It
> basically said "OpenBSD just works!"
>
> Thanks for your time Vadim but it's still not working.
>
> Here again is the relevant part of my xorg.conf file
>
> Section "ServerLayout"
>   Identifier "X.org Configured"
>   Screen  0  "Screen0" 0 0
>   InputDevice"Mouse0" "CorePointer"
>   InputDevice"Keyboard0" "CoreKeyboard"
> EndSection
>
> Section "InputDevice"
>   Identifier  "Mouse0"
>   Driver  "mouse"
>   Option  "Protocol" "wsmouse"
>   Option  "Device" "/dev/wsmouse"
>   Option  "ZAxisMapping" "4 5 6 7"
> EndSection

Hmmm, looks sane. Run xev(1) application (inside X, of course) and see,
does it generate anything when you try to move/click/scroll while
pointer is positioned in it's window. Post what you see: no reaction on
second mouse touching, or sample of messages it generates.

Also, please, run "usbdevs -v" and post output lines here.

And last but not least: try to rename/move xorg.conf and start X without
it. Does this help?

--
  Best wishes,
Vadim Jukov



[OT] testing

2007-11-01 Thread Roberto Andradas Izquierdo

Sorry for the off topic

Roberto Andradas Izquierdo  | Libre Software Engineering Lab
randradas [EMAIL PROTECTED] gsyc.escet.urjc.es  | Grupo de Sistemas y 
Comunicaciones
Tel: (+34) 91 488 81 05 | Edif. Departamental II - Despacho 119
http://www.randradas.org| Universidad Rey Juan Carlos
http://www.libresoft.es | Tulipan s/n 2833 Msstoles, 
Madrid.



Re: Where is 'cdrom42.fs'? 4.2 -release

2007-11-01 Thread Bibby
Hi,

2007/11/2, Theo de Raadt <[EMAIL PROTECTED]>:
>
>
> install42.iso contains all those other files, right inside it..
>
> No need to download everything twice, see?
>

I know this change between 4.1 <=> 4.2, but it was wrote in the official
doc(INSTALL.i386).

Thanks for your response.
and thanks to Calomel -- 'cdrom41.fs' ^_~
-- 
Michael Bibby
RedHat + OpenBSD



Re: keeping OBSD up to date and secure throughout time

2007-11-01 Thread Steve Shockley

Antti Harri wrote:

Is -stable a good choice?

http://marc.info/?l=openbsd-ports&m=119347390302171&w=2


Backporting port updates from -current to -stable is usually trivial. 
Of course, the real solution would be to find a maintainer...




Re: Where is 'cdrom42.fs'? 4.2 -release

2007-11-01 Thread RW
On Thu, 1 Nov 2007 20:01:16 -0400, Calomel wrote:

>Making a custom, bootable OpenBSD install CD
>http://calomel.org/bootable_openbsd_cd.html
>

Calomel, I think you need to rapidly go edit your instructions and the
script to get rid of the wildcard in the wget command to get the
install files.

Nobody building a custom CD will thank you for imposing a dowload of
the 204MB install42.iso along with the needed files.

Secondly, you need to stop referring to install sets as packages.

I was really confused when I read "The OpenBSD group do" (sic) "offer
iso's you can download and use to install a system. The problem is they
may have packages you know you will never use." because I knew that the
downloadable iso includes NO packages.

Packages are precompiled applications from the ports tree. 

Let's not confuse newbies.

Rod/

In the beginning was The Word
and The Word was Content-type: text/plain
The Word of Rod.



Re: Wireless problems.

2007-11-01 Thread Aaron W. Hsu
David,

[EMAIL PROTECTED] said:
> The nwid is the user friendly SSID (e.g. myap) and the bssid is the MAC
> address of the AP. Maybe that's why you wrote: e.g.-- dhcp nwid something :] 

I've always used the nwid instead of the SSID, so, yes, I used nwid because 
it's a habit with me. :-)
-- 
((name "Aaron Hsu")
 (email/xmpp "[EMAIL PROTECTED]")
 (site "http://www.aaronhsu.com";))

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: In Memoriam: Jun-ichiro Hagino

2007-11-01 Thread Gilbert Fernandes

Dragos Ruiu a icrit :


With great sadness, I regret to inform you that Itojun
will not be presenting his great knowledge of IPv6 at
PacSec.  I have been informed by several sources
that he passed away yesterday. 


This is very sad. I just spent some time watching again all his youtube
videos and the second one.. he talks of how ipv6 should be wide enough
so we should not run out of addresses, not in his lifetime. And then he
added that he hoped it would of course not be too short.

Seeing this video is strange. Itojun was someone very friendly.
And I mean it. Years ago I worked as a journalist for a french magazine
called Login (it no longer does exist now, its mother company has gone
bankrupt). For one of the issues, I had to write a big paper on Ipv6
and Itojun was, with a France Telecom ingineer specialized in ipv6 and
working from Belgium, the one person that answered first when I was 
looking for advices and links on Internet.


Itojun spent a lot of time searching and sending me documentation. 
Later, I learned that he had to get up early the next day but 
nonetheless he spent several hours in the night looking for information 
and writing some for me just for helping me on that paper.


Itojun just did it, and didnt even talked about his half night because 
of this. He was someone gentle and kind and did efforts for others, and 
without even talking about it. Learning now that he is gone is very sad.


A few years later I remember Itojun receiving from someone on one of the 
openbsd's mailing list a rather rude answer. I did interverne and tried 
to tell that person he should be more cautious of his talk because he 
obviously didnt do his homework before being rude to Itojun (if I 
remember correctly it was after a commit and something was not working 
perfectly after).


Itojun again did not publically answer his feelings, but I remember 
receiving from him an email later, in private. We do meet rude people or 
even morons from time to time (especially in openbsd-misc, you know what 
I mean right ?) and this event did make something to Itojun. I could 
feel it really hurt him to see someone react with so much rudeness after 
a commit and having spent time working for the whole community. He was 
puzzled and really did not understand the whole thing got out of 
proportion like that.


I spent some time after this "accident" talking with him and telling him 
about his code and snippets I had seen, and taking some fresh news since 
our last email exchanges for my ipv6 paper.


Only talked with him twice to say, and I will never forget his kindness 
and being very discrete about his efforts when having to help someone 
just because you shared something he did like to work upon.


Goodbye Itojun.



Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1

2007-11-01 Thread Mark Thomas
On Nov 1, 2007 6:30 PM, Vadim Jukov <[EMAIL PROTECTED]> wrote:
> The only one InputDevice section you need:
>
> Section "InputDevice"
> Identifier "Mouse1"
> Driver "mouse"
> Option "Protocol" "wsmouse"
> Option "Device" "/dev/wsmouse"
> Option "ZAxisMapping" "4 5 6 7"
> EndSection
>
> Then, in ServerLayout section you put only one string:
>
> InputDevice "Mouse1" "CorePointer"
>
> Greg is right: that's all what you need on OpenBSD.:) Put in more mice
> or get them out, your X doesn't have to bother about this. In very rare
> cases, at least on x86 architecture PCs, you will need to control mouse
> handling per device.

I remember reading something just like a few weeks ago when I was
investigating what laptop hardware worked best with OpenBSD. It
basically said "OpenBSD just works!"

Thanks for your time Vadim but it's still not working.

Here again is the relevant part of my xorg.conf file

Section "ServerLayout"
Identifier "X.org Configured"
Screen  0  "Screen0" 0 0
InputDevice"Mouse0" "CorePointer"
InputDevice"Keyboard0" "CoreKeyboard"
EndSection

Section "Files"
RgbPath  "/usr/X11R6/lib/X11/rgb"
ModulePath   "/usr/X11R6/lib/modules"
FontPath "/usr/X11R6/lib/X11/fonts/misc/"
FontPath "/usr/X11R6/lib/X11/fonts/TTF/"
FontPath "/usr/X11R6/lib/X11/fonts/Type1/"
FontPath "/usr/X11R6/lib/X11/fonts/CID/"
FontPath "/usr/X11R6/lib/X11/fonts/75dpi/"
FontPath "/usr/X11R6/lib/X11/fonts/100dpi/"
EndSection

Section "Module"
Load  "dbe"
Load  "extmod"
Load  "glx"
Load  "record"
Load  "xtrap"
Load  "freetype"
Load  "type1"
EndSection

Section "InputDevice"
Identifier  "Keyboard0"
Driver  "kbd"
EndSection

Section "InputDevice"
Identifier  "Mouse0"
Driver  "mouse"
Option  "Protocol" "wsmouse"
Option  "Device" "/dev/wsmouse"
Option  "ZAxisMapping" "4 5 6 7"
EndSection

-- 
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments



Re: Where is 'cdrom42.fs'? 4.2 -release

2007-11-01 Thread Theo de Raadt
> As far a I know there is no cdrom42.fs file for the v4.2 release. This is
> an oversight in the docs unless I am wrong.

It is.  That file is no longer made available.  It can be found inside
install42.iso, of course, but we have enough people not follow the
instructions and blasting the FTP sites that I am glad we don't make
it available.

Let me say it again:

When you see all these files...

INSTALL.i386bsd.rd* etc42.tgz   install42.iso   xfont42.tgz
INSTALL.linux   cd42.isofloppy42.fs man42.tgz   xserv42.tgz
MD5 cdboot* floppyB42.fsmisc42.tgz  xshare42.tgz
base42.tgz  cdbr*   floppyC42.fspxeboot*
bsd*cdemu42.iso game42.tgz  xbase42.tgz
bsd.mp* comp42.tgz  index.txt   xetc42.tgz

Either get:

INSTALL.i386install42.iso
INSTALL.linux
MD5  

or

INSTALL.i386bsd.rd* etc42.tgz   xfont42.tgz
INSTALL.linux   cd42.isofloppy42.fs man42.tgz   xserv42.tgz
MD5 cdboot* floppyB42.fsmisc42.tgz  xshare42.tgz
base42.tgz  cdbr*   floppyC42.fspxeboot*
bsd*cdemu42.iso game42.tgz  xbase42.tgz
bsd.mp* comp42.tgz  index.txt   xetc42.tgz


install42.iso contains all those other files, right inside it..

No need to download everything twice, see?



Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1

2007-11-01 Thread Mark Thomas
On Nov 1, 2007 4:59 PM, Stijn <[EMAIL PROTECTED]> wrote:
> Hi Mark,
>
> You only need to specify one mouse input device (i.e. /dev/wsmouse). I
> have the following in my xorg.conf (only showing the relevant entries):
>
> 
> Section "InputDevice"
>  Identifier  "Mouse1"
>  Driver  "mouse"
>  Option "Device"  "/dev/wsmouse"
>  Option "ZAxisMapping"   "4 5 6 7"
> EndSection
>
> Section "ServerLayout"
>  Identifier "Single_head"
>  Screen 0 "Screen LFP"
>  InputDevice "Mouse1" "CorePointer"
>  InputDevice "Keyboard1" "CoreKeyboard"
> EndSection
> 

Ok, I changed my xorg.conf file to reflect those exact changes, I even
ran xorgcfg again to create a new one. Still no luck. I see no errors
int the log files either.

> This works for me for both the built-in and usb mouse. Notice: no "0" or
> "1" after "/dev/wsmouse".
>
> I noticed that sometimes the usb mouse is not working when it's plugged
> in before X starts. Plugging it in after X was started made the usb
> mouse work. Perhaps, also try another usb port to see if it makes a
> difference.

Tried that too. still nothing. I wish I had another mouse to try
because that seems to be the only thing left at this point.

thanks a lot for your time on this matter, I do appreciate it.
-- 
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments



Re: apm -S freezes the laptop

2007-11-01 Thread Pau Amaro-Seoane
hehe...

yes... this is indeed the reason that makes me think about thinkpads
(up to T43p; from that model onwards, bye-bye, suspend)

I have the feeling that only thinkpads suspend under openbsd... of
course, some other models in the laptop page say the contrary... btw,
how old is that page? I submitted some entries some months ago and
don't see anything...

> > worrying about.  It's likely not going to work.
>
> Sssh, don't tell my X40.



Re: Where is 'cdrom42.fs'? 4.2 -release

2007-11-01 Thread Calomel
Bibby,

As far a I know there is no cdrom42.fs file for the v4.2 release. This is
an oversight in the docs unless I am wrong. You can use the install42.iso
or you can make your own custom cd iso by using the cdrom41.fs from v4.1.

Making a custom, bootable OpenBSD install CD
http://calomel.org/bootable_openbsd_cd.html

--
 Calomel @ http://calomel.org
 OpenSource Research and Reference

On Fri, Nov 02, 2007 at 03:12:30AM +0800, Bibby wrote:
>Hi, all.
>
>Part of file: 4.2/i386/INSTALL.i386:
>---
>
>cdrom42.fsThe i386 boot and installation 2.88MB
>floppy image that contains almost all OpenBSD
>drivers; see below.
>If i want to use 'mkisofs' to create a custom iso image(e.g, add some
>binary packages), which file should i use for the '-b' option?
>
>Thanks very much.
>
>-- 
>Bibby(Huangbin Zhang)
>OpenBSD User in China Mainland: http://www.OpenBSDonly.org/



Re: apm -S freezes the laptop

2007-11-01 Thread Stuart Henderson
On 2007/11/01 18:34, Travers Buda wrote:
> 
> Suspend-to-whatever is not something you should spend too much time
> worrying about.  It's likely not going to work.

Sssh, don't tell my X40.



Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread Martin Schröder
2007/11/1, ropers <[EMAIL PROTECTED]>:
> In short, his work (and IPv6 advocacy) will prove vital for the future
> of the Internet and its continued existence as one global entity. If
> you like the Internet, then maybe you should be aware of itojun's
> work. (Oh, and Google is your friend. ;-)

This maybe not appropriate for this subject, but it certainly fits the
quote: http://www.youtube.com/watch?v=_y36fG2Oba0

Best
   Martin



Re: apm -S freezes the laptop

2007-11-01 Thread Travers Buda
* Pau Amaro-Seoane <[EMAIL PROTECTED]> [2007-11-02 00:15:08]:

> Hi,
> 
> this is a fujitsu siemens amilo 1425M; dmesg can be read here
> 
> www.aei.mpg.de/~pau/dmesg_FJS_Amilo1425.txt (OpenBSD 4.2, installed
> today from CD)
> 
> ok... I changed apmd flags to apmd_flags="" because I noticed that
> when I close the lid, the "suspend" light blinks and the screen gets
> black and so remains it until I press again the power bottom. I hoped
> that, maybe, the laptop could suspend via apm.
> 
> But the result is different. Closing the lid yields the same result,
> but if I type apm -S or zzz, the laptop will die in a "millifraction"
> of second. I press enter and almost immediately PUF! the whole laptop
> is powered off; I mean _everything_ Not even the light "charging"
> (plugged) is on (even if it's plugged, of course)
> 
> Is there any hope that this laptop suspends? I'm just asking
> because... sigh... suspending under OpenBSD is my "dream"...
> 
> cheers,
> 
> Pau
> 

Suspend-to-whatever is not something you should spend too much time
worrying about.  It's likely not going to work.  Causes: 
Buggy BIOS.
Poor design of APM/ACPI.
Poor implementation of the aforementioned.
Other misc reasons.

I've pretty much never seen it work on any OS, anywhere.  And IMHO,
it's hopeless, if not a pain in the ass, to get vendor specific
specs for every machine out there, test all of them, etc.

-- 
Travers Buda



apm -S freezes the laptop

2007-11-01 Thread Pau Amaro-Seoane
Hi,

this is a fujitsu siemens amilo 1425M; dmesg can be read here

www.aei.mpg.de/~pau/dmesg_FJS_Amilo1425.txt (OpenBSD 4.2, installed
today from CD)

ok... I changed apmd flags to apmd_flags="" because I noticed that
when I close the lid, the "suspend" light blinks and the screen gets
black and so remains it until I press again the power bottom. I hoped
that, maybe, the laptop could suspend via apm.

But the result is different. Closing the lid yields the same result,
but if I type apm -S or zzz, the laptop will die in a "millifraction"
of second. I press enter and almost immediately PUF! the whole laptop
is powered off; I mean _everything_ Not even the light "charging"
(plugged) is on (even if it's plugged, of course)

Is there any hope that this laptop suspends? I'm just asking
because... sigh... suspending under OpenBSD is my "dream"...

cheers,

Pau



Re: Installation troubles

2007-11-01 Thread Chris Zakelj

Chris Zakelj wrote:

Richard Toohey wrote:

Asking the obvious questions to eliminate them first ...

1. Official CDs?

2. Can you read/copy the CD on *any* machines / *any* OS?

3. Specifically - if you FTP install OpenBSD , can you then mount / 
copy / do anything with the CD?


4. dmesg(s)

Personal experience ...

I have installed 3.8 to 4.2 from CDs on machines from P3 500 to 
Pentium D 2.something via Celeron 900Mhz (Dells, HPs, Compaqs, 
desktops and laptops) - only real issue was a bogus 4.1 CD than no 
machine would touch.


I had a CD error with 4.2 today (same CD that I have done 3 installs 
with already!) when extracting Xenocara - so I umounted, ejected, 
took CD out, waggled it around while saying magic incantation, 
remounted, and tried again and it worked (well, no errors reported.)


HTH, YMMV, IANAD, etc.

On 1/11/2007, at 4:55 PM, Chris Zakelj wrote:

Evening... I'm trying install my fresh 4.2 CDs on a system that is 
destined to become a samba server and build machine for CF-based 
firewalls.  Only I'm having a problem (obviously).  This is the 
third release where I'm having this issue, but previously I just 
chalked it up to old, cranky CDROM drives, and went with FTP.  But 
given this is all new hardware, time to figure out what's really 
happening.


This system is fresh-built amd64 (but will be running/compiling all 
i386 binaries to avoid having to cross-compile Soekris builds), IDE 
DVD-ROM drive, SATA hard drive.  Boots from CD, then gets through 
partitioning, labelling, and formatting the drive just fine.  
Network config sails through, until I finally hit "Let's install the 
sets!".  I hit enter for the defaults 'cd' and 'cd0', at which point 
I get the following:


cd0(atapiscsi0:0:0): Check Condition (error 0x70) on opcode 0x28
   SENSE KEY: Media Error
ASC/ASCQ: ASC 0x11 ASCQ 0x06

This message repeats three times, at which point the installer gives 
up, reports 'No filesystems found on cd0', and asks again where to 
find the sets.  For what it's worth, this happens on four different 
i386 machines of various vintage (from a 16 year old 486 up through 
tonight's Sempron build), with official CD releases from 4.0 
onwards.  I'm guessing I'm missing something obvious, but Google and 
MARC didn't turn up anything, so cluesticks are welcome.

1.  Yes, they're official CDs straight from austin@
2.  Yes, both my WinXP laptop and WinXP-64 desktop can read/copy
3.  I vaguely recall installing packages from one of them after doing 
the FTP install, but I'll try again later tonight.
4.  I'd love to, but except for the 486 (stuffed in a closet), they 
don't have serial ports to redirect to.
Picked up a USB to serial converter on the way home from the office.  
Here's a complete installation attempt using the 4.2 i386 CD:


>> OpenBSD/i386 CDBOOT 2.01
boot>
booting cd0a:/4.2/i386/bsd.rd: 4733076+742936 [52+174448+160579]=0x58ad08
entry point at 0x200120*
Copyright (c) 1982, 1986, 1989, 1991, 1993
   The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2007 OpenBSD. All rights reserved.  
http://www.OpenBSD.org


OpenBSD 4.2 (RAMDISK_CD) #468: Tue Aug 28 11:02:17 MDT 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD
cpu0: AMD Sempron(tm) Processor 3000+ ("AuthenticAMD" 686-class, 128KB 
L2 cache) 1.81 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3

cpu0: AMD erratum 89 present, BIOS upgrade may be required
real mem  = 502820864 (479MB)
avail mem = 480124928 (457MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 07/16/07, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.3 @ 0xfc7c0 (45 entries)

bios0: vendor American Megatrends Inc. version "080012 " date 07/16/2007
pcibios0 at bios0: rev 3.0 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf57e0/272 (15 entries)
pcibios0: no compatible PCI ICU found: ICU vendor 0x1039 product 0x0965
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "SiS 761 PCI" rev 0x02
ppb0 at pci0 dev 1 function 0 "SiS 86C202 VGA" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "SiS 6330 VGA" rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
pcib0 at pci0 dev 2 function 0 "SiS 965 ISA" rev 0x48
pciide0 at pci0 dev 2 function 5 "SiS 5513 EIDE" rev 0x01: 5597/5598: 
DMA, channel 0 configured to compatibility, channel 1

configured to compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0 
5/cdrom removable

cd0(pciide0:0:0): using PIO mode 4, DMA mode 2
pciide0: channel 1 disabled (no drives)
"SiS 7012 AC97" rev 0xa0 at pci0 dev 2 function 7 not configured
ohci0 at pci0 dev 3 function 0 "SiS 5597/5598 USB" rev 0x0f: irq 5, 
version 1.0, legacy support
ohci1 

Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1

2007-11-01 Thread Vadim Jukov
B qnnayemhh nr Werbepc 01 mnap 2007 Mark Thomas m`ohq`k(a):
> On Oct 31, 2007 9:47 PM, Vadim Jukov <[EMAIL PROTECTED]> wrote:
> > You need only one "InputDevice" section for all your mice with
> > "/dev/wsmouse" as "Device" option, indeed.
>
> I'm sorry but I do not understand. I tried putting both mice in one
> InputDevice section and X refused to start.
>
> Parse error on line 47 of section InputDevice in file
> /etc/X11/xorg.conf Multiple "Identifier" lines.
> (EE) Problem parsing the config file
> (EE) Error parsing the config file
>
> Thanks again

The only one InputDevice section you need:

Section "InputDevice"
Identifier  "Mouse1"
Driver  "mouse"
Option  "Protocol" "wsmouse"
Option  "Device" "/dev/wsmouse"
Option  "ZAxisMapping" "4 5 6 7"
EndSection

Then, in ServerLayout section you put only one string:

InputDevice  "Mouse1" "CorePointer"

Greg is right: that's all what you need on OpenBSD.:) Put in more mice
or get them out, your X doesn't have to bother about this. In very rare
cases, at least on x86 architecture PCs, you will need to control mouse
handling per device.

--
  Best wishes,
Vadim Jukov



Re: Wireless problems.

2007-11-01 Thread David Walker
Clarification.
>From ifconfig(8):
bssid bssid
Set the desired BSSID for IEEE 802.11-based wireless network interfaces.
and:
nwid id
Configure network ID for IEEE 802.11-based wireless network interfaces. 
The id can either be any text string up to 32 characters in length, or a
series of hexadecimal digits up to 64 digits.  The empty string allows the
interface to connect to any available access points.  Note that network ID
is synonymous with Extended Service Set ID (ESSID).

The nwid is the user friendly SSID (e.g. myap) and the bssid is the MAC
address of the AP.
Maybe that's why you wrote:
e.g.-- dhcp nwid something
:]

BTW, I found my bssid by using:
# ifconfig -M device

Best wishes,
David

 Original Message 
Subject: Re: Wireless problems.
From:"David Walker" <[EMAIL PROTECTED]>
Date:Fri, November 2, 2007 7:05 am
To:  misc@openbsd.org
--

Cheers.

That looks exactly correct. ifconfig(8).
Specifically "IEEE 802.11 (WIRELESS DEVICES)".
Quote:
bssid bssid
Set the desired BSSID for IEEE 802.11-based wireless network interfaces.

Presumably as you say I can change my hostname.if from 'dhcp' to 'dhcp
SSID'. I will find out.

Best wishes,
David


> Hey David,
>
> [EMAIL PROTECTED] said:
>> Is it possible to specify an SSID to access at the exclusion of others?
>
> If you read hostname.if(5), you'll see that you can pass any options
that are
> valid for the device using this file. I believe ifconfig(8) provides
more information on the options.
>
>   e.g.-- dhcp nwid something
>
> Is this what you meant?
>
> --
> ((name "Aaron Hsu")
>  (email/xmpp "[EMAIL PROTECTED]")
>  (site "http://www.aaronhsu.com";))



Re: keeping OBSD up to date and secure throughout time

2007-11-01 Thread Joachim Schipper
On Thu, Nov 01, 2007 at 11:24:38PM +0200, Antti Harri wrote:
> Hi,
>
> On Wed, 31 Oct 2007, Steve Shockley wrote:
>
>> Nenhum_de_Nos wrote:
>>> but my main question is, how to make obsd allways up to date, keeping
>>> it bug free. mas from time to time there is security bugs found and so
>>> on.
>>
>> Simple way: upgrade every six months, and follow the -stable branch.
> [rest snipped]
>
> Is -stable a good choice?
>
> http://marc.info/?l=openbsd-ports&m=119347390302171&w=2

No idea. It used to be, and it will still receive normal (non-ports)
updates.

Just how unsupported -stable is is not entirely clear, to me at least.

Joachim

-- 
TFMotD: OpenBSD::PkgCfl (3p) - pkg_create(1) @conflict handling



Re: Bad MD5 of install42.iso

2007-11-01 Thread Douglas A. Tutty
On Thu, Nov 01, 2007 at 02:58:42PM +0100, Przemys?aw Pawe?czyk wrote:
> 
> I dloaded the file from two different servers.
> Here's what I got running md5sum:
> 
> 1) MD5s for downloaded files
> md5sum install42.iso
> 03dc43a1d18d3003843a1f13b3861917  install42.iso
> 
> Just for checking:
> md5sum cd42.iso
> 7d4ba197d25088a4ad487f2830028c8d  cd42.iso
> 
> 2) The numbers from MD5 official file:
> MD5 (install42.iso) = b3a80c9010716ebc997571a1609cf334
> 
> Just for checking:
> MD5 (cd42.iso) = 7d4ba197d25088a4ad487f2830028c8d
> 
> What should I do? To burn it or not to burn?

To clarify, the md5sum on the files you downloaded from two different
servers were identical with each other (eliminating download problem)
but different from what is stated in the MD5 file.

If this is not true and each download produced a different MD5, try
using rsync to an rsync server to fix the iso file you downloaded.

Doug.



Re: deploy openssl patch

2007-11-01 Thread Clint Pachl

Markus Wernig wrote:

Dear list

I have a couple of 4.1 firewalls that I would like to upgrade to 4.2.
Before taking them online again I'd like to deploy the openssl patch 
from 
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/002_openssl.patch


I feel your pain. Others have dissed on you for not having compile tools 
on your hosts and assume you're doing it for security reasons. I don't 
know your reason, but I only have compile tools on my build system. I 
create binary patches (see script below) and distribute across the 
network. Who the hell wants 20 (# of servers in my network) builds 
cranking on all your machines in the network? What a nightmare. What if 
they all fail? Worse yet, what if one fails? Someone is going to say, 
"script/automate it." Screw that. Now you need to figure out how to make 
the sources available to all the hosts, initiate the build, make sure 
the build didn't fail, etc.


Another reason I don't have compile tools on some of my servers is 
because they won't fit. Many of my dedicated systems use 256MB flash drives.


The third reason to keep crap off your servers, including compiler 
tools, is that potentially that extra stuff could be exploitable. If it 
is, then you have to patch it too. Just extra work.




Being perimeter firewalls, those systems don't have compile tools 
installed. I would thus need to pre-compile libssl on a 4.2 buildhost 
and deploy it onto the firewalls. I've been looking through the 
documentation but did not find a "good" way to do this, because 
openssl is not a package, but part of the base system.


OpenBSD makes if very easy to create binary patches. I wrote a script 
below that automates most of the process. I have been using this script 
for a while and it works pretty good. The good thing about this is that 
it only creates a binary patch of executables and files that were 
affected by the source patch. This also has the benefit of touching only 
a small portion of the installed system, which can be helpful when you 
are monitoring for trojan horses.


The alternative, which someone else mentioned, is just make a release. 
This is straightforward and officially supported. See release(8).




Is there any way other than tar - scp - untar after compiling libssl?

thx for any pointers

/markus


I will apologize in advance for the screwed spacing/tabbing.

#!/bin/sh
#
# Builds kernel and userland from the /usr/src tree. The script sets up the
# build environment then kicks the user to a shell to manually patch the
# source. When in userland build mode, the user is also asked to build and
# install using the instructions specified in the official OpenBSD 
patch. After
# the user exits the work shell, this script will build the kernel or 
create a

# binary userland patch depending on the operation mode.
#
# BUGS
# Does not build or make binary patches for the X system.
#

usage()
{
   cat <<- EOF
   usage: $APP {-k | -u} [-h] [-p patch-name]

 -k : kernel build mode; makes GENERIC & GENERIC.MP kernels
 -u : userland build mode; makes binary patches
 -p : embedded in the newly built kernel/patch filenames
 -h : help
   EOF
   exit $1
}

APP=${0##*/}
REL=`uname -r`
ARCH=`uname -m`
Mode=0
PatchName=
KernCfgs='GENERIC GENERIC.MP'

while getopts p:kuh i
do  case $i in
   k) Mode=1 ;;
   u) Mode=2 ;;
   p) PatchName=-$OPTARG ;;
   h) usage 0 ;;
   *) echo "$APP: cmdline parse error."
  usage 1
   esac
done

[ $Mode -ne 0 ] || usage 1

TDIR=`mktemp -d /var/tmp/${APP}.XXX` || exit 1
trap 'rm -rf $TDIR 2>/dev/null || sudo rm -rf $TDIR' EXIT

if [ $Mode -eq 1 ]
thenKDIR=`mktemp -d /var/tmp/kernels-XXX` || exit 1
   cat <<- EOF

   === Kernel Build Rules ===
   - Patch the kernel source.
   - Type "exit" when complete.
   - The kernels ($KernCfgs) will automatically build.

   === Command Sequence Hint ===
   $ cd /usr/src
   $ ftp -Vo - 
ftp://ftp.openbsd.org/pub/OpenBSD/patches/$REL/$ARCH/ | patch -p0

   $ exit

   EOF

   $SHELL

   for k in $KernCfgs
   do  mkdir $TDIR/$k
   cd $TDIR/$k
   cp /sys/arch/$ARCH/conf/$k .
   config -s /sys -b . $k
   make clean && make depend && make || exit 1
   mv bsd $KDIR/bsd.$k$PatchName
   rm -rf $TDIR/$k &
   done

   cat <<- EOF

   The kernels have been built and can be found in "$KDIR".

   Install your kernel safely:
   # ln -f /bsd /bsd.old
   # cp $KDIR/ /bsd.tmp
   # mv /bsd.tmp /bsd

   EOF

elseexport BSDOBJDIR=$TDIR/obj _DESTDIR=$TDIR/dest
   readonly BSDOBJDIR _DESTDIR
   mkdir $BSDOBJDIR $_DESTDIR

   cd /usr/src/etc
   sudo env DESTDIR=$_DESTDIR make distrib-dirs >/dev/null
   cd $_DESTDIR
   sudo mtree -c 

Re: keeping OBSD up to date and secure throughout time

2007-11-01 Thread Antti Harri

Hi,

On Wed, 31 Oct 2007, Steve Shockley wrote:


Nenhum_de_Nos wrote:

but my main question is, how to make obsd allways up to date, keeping
it bug free. mas from time to time there is security bugs found and so
on.


Simple way: upgrade every six months, and follow the -stable branch.

[rest snipped]

Is -stable a good choice?

http://marc.info/?l=openbsd-ports&m=119347390302171&w=2

--
Antti Harri



Re: Wireless problems.

2007-11-01 Thread David Walker
Cheers.

That looks exactly correct. ifconfig(8).
Specifically "IEEE 802.11 (WIRELESS DEVICES)".
Quote:
bssid bssid
Set the desired BSSID for IEEE 802.11-based wireless network interfaces.

Presumably as you say I can change my hostname.if from 'dhcp' to 'dhcp SSID'.
I will find out.

Best wishes,
David


> Hey David,
>
> [EMAIL PROTECTED] said:
>> Is it possible to specify an SSID to access at the exclusion of others?
>
> If you read hostname.if(5), you'll see that you can pass any options that
> are
> valid for the device using this file. I believe ifconfig(8) provides more
> information on the options.
>
>   e.g.-- dhcp nwid something
>
> Is this what you meant?
>
> --
> ((name "Aaron Hsu")
>  (email/xmpp "[EMAIL PROTECTED]")
>  (site "http://www.aaronhsu.com";))



Re: keeping OBSD up to date and secure throughout time

2007-11-01 Thread Hannah Schroeter
Hi!

On Thu, Nov 01, 2007 at 03:46:47PM -0300, Nenhum_de_Nos wrote:
>On 11/1/07, Steve Shockley <[EMAIL PROTECTED]> wrote:
>> Nenhum_de_Nos wrote:
>> > but my main question is, how to make obsd allways up to date, keeping
>> > it bug free. mas from time to time there is security bugs found and so
>> > on.

>> Simple way: upgrade every six months, and follow the -stable branch.

>hmm, thats what I'll do then. but, there is no way to make my
>4.2-current to rebirth as an ordinary 4.2 just born ?

I guess the official way is to backup your own data (including your own
/etc and so on [e.g. /var/named, /var/www, etc.]), and reinstall from
scratch, then restore/merge.

>[...]

Kind regards,

Hannah.



Re: Wireless problems.

2007-11-01 Thread Aaron W. Hsu
Hey David,

[EMAIL PROTECTED] said:
> Is it possible to specify an SSID to access at the exclusion of others?

If you read hostname.if(5), you'll see that you can pass any options that are 
valid for the device using this file. I believe ifconfig(8) provides more 
information on the options.

e.g.-- dhcp nwid something

Is this what you meant?

-- 
((name "Aaron Hsu")
 (email/xmpp "[EMAIL PROTECTED]")
 (site "http://www.aaronhsu.com";))

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: BIND and /var/arandom missing fix

2007-11-01 Thread Theo de Raadt
> I have a server running OpenBSD 4.2-current and acting as a 
> name server. It always has these messages in the /var/log/daemon 
> file upon startup:
> 
>  Oct 27 05:51:38 racine named[3780]: could not open entropy \
>  source  /dev/arandom: file not found
>  Oct 27 05:51:38 racine named[3780]: using pre-chroot entropy \
>  source  /dev/arandom
> 
> That never bothered me, until I needed to use Men and Mice 
> DNS Server Controller management tools on my OBSD name server, 
> but that is another story.

Ignore the messages.  They mean nothing.  Our BIND, when running,
does not use that stupid mechanism for entropy.



BIND and /var/arandom missing fix

2007-11-01 Thread J.D. Carlson
I have a server running OpenBSD 4.2-current and acting as a 
name server. It always has these messages in the /var/log/daemon 
file upon startup:

 Oct 27 05:51:38 racine named[3780]: could not open entropy \
 source  /dev/arandom: file not found
 Oct 27 05:51:38 racine named[3780]: using pre-chroot entropy \
 source  /dev/arandom

That never bothered me, until I needed to use Men and Mice 
DNS Server Controller management tools on my OBSD name server, 
but that is another story.

Just creating a /var/named/dev/arandom file won't work, 
since the partion is mounted as nodev as shown below

/dev/wd0a on / type ffs (local)
/dev/wd0e on /home type ffs (local, nodev, nosuid)
/dev/wd0f on /tmp type ffs (local, nodev, nosuid)
/dev/wd0g on /usr type ffs (local, nodev)
/dev/wd0d on /var type ffs (local, nodev, nosuid)
   ^
so I thought I would try creating a separate partition for 
/var/named/dev and not using the nodev parameter
I had used all of the drive during inital installation, so I
-went into disklabel -E wd0
- noticed how much space each cylinder took up 
- checked to see how large the swap partition was with a 'p m'
- deleted the swap partition, and recreated it 2 megabytes smaller
- created a new partition 2 megabytes in in size
- saved the results
- modified /etc/fstab to mount the new partition as /var/named/dev 
without the nodev option

$ mount
/dev/wd0a on / type ffs (local)
/dev/wd0e on /home type ffs (local, nodev, nosuid)
/dev/wd0f on /tmp type ffs (local, nodev, nosuid)
/dev/wd0g on /usr type ffs (local, nodev)
/dev/wd0d on /var type ffs (local, nodev, nosuid)
/dev/wd0h on /var/named/dev type ffs (local, nosuid)

rebooted the computer
-created the devices in /var/named/dev
   cd /var/named/dev
   /dev.MAKEDEV random

ls -l shows

$ ls -l /var/named/dev
total 0
crw-r--r--  1 root  wheel   45,   4 Oct 27 05:53 arandom
crw-r--r--  1 root  wheel   45,   3 Oct 27 05:53 prandom
crw-r--r--  1 root  wheel   45,   0 Oct 27 05:53 random
crw-r--r--  1 root  wheel   45,   1 Oct 27 05:53 srandom
crw-r--r--  1 root  wheel   45,   2 Oct 27 05:53 urandom


now when I start BIND via the named command, the messages about 
/var/arandom missing no loger appear in /var/log/daemon.

My question, have I compromised the security of the name server?

If anyone is interested, I will post my steps in getting Men and Mice 
DNS Server Controller running on OpenBSD using linux emulation.

Thanks,
J.D. Carlson



Re: OpenBSD kernel janitors

2007-11-01 Thread Daniel Ouellet

n0g0013 <[EMAIL PROTECTED]> writes:


Development is not the same process as writing a whiny mail.

that is a shame.  i can probably better understand the relectance to
re-visit this if it has failed before.  perhaps, others are right,
perhaps linux can tolerate it because it's not as good as openbsd.


So, why are you giving up already? Doing so, just proof the point that 
it's more talk and a waist of time for so many to help get you started.


May be you have all the good intentions in the world, but acting like 
that is just convincing that it's a waist of time to do it in the first 
place.


How difficult can it be to just start doing style(9) as an example and 
at a minimum, this way you learn to do proper patch. Even if that's the 
only thing you learn, it's already something in the right direction. 
Does it mean that for doing even this, hand holding is needed too?


It's been said many times that developers are waisting their time doing 
this and it doesn't produce output. Now if you act like that, you just 
once more re-enforce the point that it is a waist of time.


Roll your sleeves and start simple, and see where it will lead you.

Talking and talking about it and then giving up at the first instance of 
not having someone holding your hands is pretty week and only proof the 
point.


Just give it a try and stop trying to put the blame on someone else not 
helping getting you started.


Best,

Daniel



Where is 'cdrom42.fs'? 4.2 -release

2007-11-01 Thread Bibby
Hi, all.

Part of file: 4.2/i386/INSTALL.i386:
---

cdrom42.fsThe i386 boot and installation 2.88MB
floppy image that contains almost all OpenBSD
drivers; see below.
If i want to use 'mkisofs' to create a custom iso image(e.g, add some
binary packages), which file should i use for the '-b' option?

Thanks very much.

-- 
Bibby(Huangbin Zhang)
OpenBSD User in China Mainland: http://www.OpenBSDonly.org/



Re: OpenBSD 4.2 release November 1, 2007

2007-11-01 Thread Insan Praja SW

On Fri, 02 Nov 2007 00:57:50 +0700, Craig Brozefsky <[EMAIL PROTECTED]>
wrote:


"Leonardo Rodrigues" <[EMAIL PROTECTED]> writes:


May the IPV6 Samurai rest in peace. We are all thankful for his work.

And cheers to yet another release =)


Perhaps a theme for a future release is shaping up.  Something like
Yojimbo or Sanjuro (sp?) with Puffy as the wandering samurai.  Yojimbo
is prolly an easier storyline to adapt.

I installed the base system a few days ago, and updated my ports last
night.  I appreciate how straightfoward the whole process was.


Big thanks to all OpenBSD developer, such a cutting-edge you got there
man..
Thanks a lot!


--
Insan Praja SW



Re: keeping OBSD up to date and secure throughout time

2007-11-01 Thread Nenhum_de_Nos
On 11/1/07, Steve Shockley <[EMAIL PROTECTED]> wrote:
> Nenhum_de_Nos wrote:
> > but my main question is, how to make obsd allways up to date, keeping
> > it bug free. mas from time to time there is security bugs found and so
> > on.
>
> Simple way: upgrade every six months, and follow the -stable branch.

hmm, thats what I'll do then. but, there is no way to make my
4.2-current to rebirth as an ordinary 4.2 just born ?

> Complex way: Follow -current, upgrade your machines almost constantly.
>
> If you have anything approaching "production", run -stable.  Downgrading
> is difficult, and sooner or later you'll hit something that makes your
> life difficult, like changing a major feature (ipf -> pf) or upgrading
> to packages that were built the day the shared library numbers change.
>
> > my question is, how to keep up to date if putting a cdrom and boot for
> > upgrade for me is too much of a problem for me ? and also, just as an
> > example (I'm really not trying to make flame wars or such things, I
> > just want to know how to make things in obsd) in Freebsd i can compile
> > and make almost everything yep online and running. just reboot and if
> > everything is fine, the downtime is just of the reboot itself.
>
> You can do an "unpack the install files over the running OS" upgrade,
> that's detailed in the upgrade guide in the FAQ.  Better yet, you can
> put two machines together with CARP and not have any downtime at all.

by what I saw, the way Nick said is what I'll do :)

just want to be 4.2 release again ! :)

(if I cant, I'll install a 4.1 and then do the moves to be 4.2 and
begin the training :) )

thanks all,

matheus

-- 
We will call you cygnus,
The God of balance you shall be



Re: keeping OBSD up to date and secure throughout time

2007-11-01 Thread Patrick Hemmen
Hi,

I use binpatch for OpenBSD
http://openbsdbinpatch.sourceforge.net/#download.
With the little program I compile the patches only once and then deploy
they to all my machines.

Best Regards

Patrick


Am Mittwoch, den 31.10.2007, 22:53 -0400 schrieb David Clymer:
> On Wed, 2007-10-31 at 23:28 -0300, Nenhum_de_Nos wrote:
> > hail all,
> >
> > I use FreeBSD for a long time and now I'm changing my routers slowly
> > to OpenBSD. I have one router running 4.2-current (or anything like
> > this, uname shows 4.2 but motd shows 4.2-current. I confess this still
> > confuses me) and I'm studying it to be confident enough to make it the
> > one.
> >
> > but my main question is, how to make obsd allways up to date, keeping
> > it bug free. mas from time to time there is security bugs found and so
> > on.
> >
> > for what I saw in obsd web
> > site(http://www.openbsd.org/faq/faq5.html#Flavors), when 4.1 is
> > released 3.9 is not suported aymore.
> >
> > my question is, how to keep up to date if putting a cdrom and boot for
> > upgrade for me is too much of a problem for me ? and also, just as an
> > example (I'm really not trying to make flame wars or such things, I
> > just want to know how to make things in obsd) in Freebsd i can compile
> > and make almost everything yep online and running. just reboot and if
> > everything is fine, the downtime is just of the reboot itself.
> >
> > as a pf fan, and as i prefer to use pf in obsd itself, is there a way
> > to do things this way in obsd ?
>
> Perhaps you should check this out:
>
> http://www.openbsd101.com/
>
> Most of my experience has been with GNU/Linux distros and their binary
> package update schemes, so I found this site to be very helpful to me.
>
> -davidc
>
> --
> gpg-key: http://www.zettazebra.com/files/key.gpg
>
> [demime 1.01d removed an attachment of type application/pgp-signature which
had a name of signature.asc]

[demime 1.01d removed an attachment of type application/x-pkcs7-signature which 
had a name of smime.p7s]



Wireless problems.

2007-11-01 Thread David Walker
Hiya.

I connect to the internet via a wireless LAN.
I prefer to use dhcp and let the server assign an ip, etcetera.
This is simple to do with OpenBSD.
echo dhcp > hostname.device

The problem is the other networks in the area.
When I boot, my wireless finds the first available (so it seems) access
point available that will cough up anything and attach itself.

Other than communicating with other WLAN operators and asking them to set
MAC access control (if I can find out who they are) an option is to
manually configure OpenBSD to use a specific gateway, etcetera.
The problem with that is that many people use the same address for their
server (perhaps the only private address space they know).
Again I could specify a domain, however, the chances of this being
duplicated are reasonable considering the number of WLAN's that are not
public and also mainly Windows boxes (same goes for IP space).

The way that we work it out is mainly through SSID. Generally we see the
same WLAN's as the others and use the SSID to determine which network to
attach to.

Is it possible to specify an SSID to access at the exclusion of others?
Otherwise, can anyone see a solution?

Best wishes,
David



Re: OpenBSD 4.2 release November 1, 2007

2007-11-01 Thread ropers
On 01/11/2007, Craig Brozefsky <[EMAIL PROTECTED]> wrote:
> "Leonardo Rodrigues" <[EMAIL PROTECTED]> writes:
>
> > May the IPV6 Samurai rest in peace. We are all thankful for his work.
> >
> > And cheers to yet another release =)
>
> Perhaps a theme for a future release is shaping up.  Something like
> Yojimbo or Sanjuro (sp?) with Puffy as the wandering samurai.  Yojimbo
> is prolly an easier storyline to adapt.

Which Yojimbo are you referring to? The Kurosawa film?
http://en.wikipedia.org/wiki/Yojimbo_%28film%29



Re: OpenBSD 4.2 release November 1, 2007

2007-11-01 Thread Craig Brozefsky
ropers <[EMAIL PROTECTED]> writes:

> On 01/11/2007, Craig Brozefsky <[EMAIL PROTECTED]> wrote:
>> "Leonardo Rodrigues" <[EMAIL PROTECTED]> writes:
>>
>> > May the IPV6 Samurai rest in peace. We are all thankful for his work.
>> >
>> > And cheers to yet another release =)
>>
>> Perhaps a theme for a future release is shaping up.  Something like
>> Yojimbo or Sanjuro (sp?) with Puffy as the wandering samurai.  Yojimbo
>> is prolly an easier storyline to adapt.
>
> Which Yojimbo are you referring to? The Kurosawa film?
> http://en.wikipedia.org/wiki/Yojimbo_%28film%29

Yah, where he strolls into a town in the middle of a gang war and sets
the two sides against one another.  Mifune is awesome.

-- 
Sincerely, Craig Brozefsky  <[EMAIL PROTECTED]>
what a klon  - neko   http://www.red-bean.com/~craig
Less matter, more form!   - Bruno Schulz
ignazz, I am truly korrupted by yore sinful tzourceware. -jb



Re: When will OpenBSD support UTF8?

2007-11-01 Thread Bibby
> utf-8 isn't an OS-level thing. You need to do it in every app.

I think he talked about OpenBSD locale support in libc.
-- 
Michael Bibby
RedHat + OpenBSD



Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread ropers
On 01/11/2007, Adrian Fisher <[EMAIL PROTECTED]> wrote:
> This thread is the first I have heard of him.  Who is (or was) he?

Id didn't know him personally, but I do know that he was a man of many talents:
People here remember him as a fellow OpenBSD developer. However,
possibly his most lasting legacy will be his tireless work (for over
ten years) on IPv6.

The Internet will only be able to continue to grow because of IPv6,
and a big part of the IPv6 work was done by itojun, in collaboration
with others, particularly within the KAME project (
http://en.wikipedia.org/wiki/KAME_project ), and in collaboration with
the WIDE ( http://www.wide.ad.jp/ ) , TAHI ( http://www.tahi.org/ )
and USAGI ( http://www.linux-ipv6.org/ ) projects.

In short, his work (and IPv6 advocacy) will prove vital for the future
of the Internet and its continued existence as one global entity. If
you like the Internet, then maybe you should be aware of itojun's
work. (Oh, and Google is your friend. ;-)

regards,
--ropers



Re: OpenBSD 4.2 released Nov 1, 2007

2007-11-01 Thread Allie D.
I think I sent out my thanks beforebut what the hell, thanks again for
another kick ass release.
-- 
~Allie D.



Re: 4.2 Trouble with HP Notebook

2007-11-01 Thread Valery Masiutsin
Hello,Frans !

What hp model do you have ?
A lot of their models -  models from nx line is a good example,
have broken acpi tables in BIOS, it means you won't be able to get acpi working.

Regards Valery



Re: OpenBSD 4.2 release November 1, 2007

2007-11-01 Thread Craig Brozefsky
"Leonardo Rodrigues" <[EMAIL PROTECTED]> writes:

> May the IPV6 Samurai rest in peace. We are all thankful for his work.
>
> And cheers to yet another release =)

Perhaps a theme for a future release is shaping up.  Something like
Yojimbo or Sanjuro (sp?) with Puffy as the wandering samurai.  Yojimbo
is prolly an easier storyline to adapt.

I installed the base system a few days ago, and updated my ports last
night.  I appreciate how straightfoward the whole process was.

-- 
Sincerely, Craig Brozefsky  <[EMAIL PROTECTED]>
what a klon  - neko   http://www.red-bean.com/~craig
Less matter, more form!   - Bruno Schulz
ignazz, I am truly korrupted by yore sinful tzourceware. -jb



Amsterdam user meeting Cafe De Deugniet, Nov 2, 2007, Amsterdam, Netherlands

2007-11-01 Thread Wim Vandeputte
hey,

Some local Dutch people are meeting up in Amsterdam at Cafe De Deugniet
tomorrow.

I can't attend but I' shipped a big box of 4.2 stuff so there will
be plenty of interesting stuff

http://undeadly.org/cgi?action=article&sid=20071017100734&mode=expanded&count=20

If you need more info, check the undeadly thread of talk to Bart (in cc:)

-- 
   =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=   
https://kd85.com/notforsale.html
 --



Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread Adrian Fisher
This thread is the first I have heard of him.  Who is (or was) he?

A.

On 01/11/2007, frantisek holop <[EMAIL PROTECTED]> wrote:
>
> hmm, on Thu, Nov 01, 2007 at 12:04:37AM +0100, ropers said that
> > How would people feel about creating a Wikipedia article for Itojun?
> > Surely his IPv6 work makes him notable enough?
> >
> > eg. http://en.wikipedia.org/wiki/Itojun
>
> it all comes down to http://en.wikipedia.org/wiki/WP:Notability
> my life is too short to fight with WP admins.
>
> he is mentioned explicitly in:
> http://en.wikipedia.org/wiki/IPv6  (with edit link)
> http://en.wikipedia.org/wiki/List_of_OpenBSD_developers
> http://en.wikipedia.org/wiki/Nvi
>
> and so on.
>
> -f
> --
> excellent day to have a rotten day.



Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread marina

I will talk with one of the wikipedia admins i know. She is a developer
and might be sympathetic.

-- Marina Brown

On Thu, 1 Nov 2007, frantisek holop wrote:


hmm, on Thu, Nov 01, 2007 at 12:04:37AM +0100, ropers said that

How would people feel about creating a Wikipedia article for Itojun?
Surely his IPv6 work makes him notable enough?

eg. http://en.wikipedia.org/wiki/Itojun


it all comes down to http://en.wikipedia.org/wiki/WP:Notability
my life is too short to fight with WP admins.

he is mentioned explicitly in:
http://en.wikipedia.org/wiki/IPv6  (with edit link)
http://en.wikipedia.org/wiki/List_of_OpenBSD_developers
http://en.wikipedia.org/wiki/Nvi

and so on.

-f
--
excellent day to have a rotten day.




Re: When will OpenBSD support UTF8?

2007-11-01 Thread Juan Miscaro
--- Nick Guenther <[EMAIL PROTECTED]> wrote:

> On 11/1/07, Juan Miscaro <[EMAIL PROTECTED]> wrote:
> > Hi gang.
> >
> > Is there any priority for having OpenBSD support UTF8?
> >
> > // peter
> 
> utf-8 isn't an OS-level thing. You need to do it in every app.
> Googling, the first result brings up
> http://osdir.com/ml/os.openbsd.ports/2004-02/msg00376.html as an
> example.


Thanks.

I saw that post before resorting to the list but as it was 3.5 years
ago I thought its info had a good chance of being outdated.



Re: USB drive problem

2007-11-01 Thread frantisek holop
hmm, on Thu, Nov 01, 2007 at 01:23:15PM +1100, Craig Findlay said that
> umass0: BBB bulk-in stall clear failed, IOERROR

definitely try another USB cable too.
a flakey cable produces a lot of different errors.
i was bitten by this in the past.

-f
-- 
show me a sane man and i will cure him for you. -- c. jung



Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread frantisek holop
hmm, on Thu, Nov 01, 2007 at 12:04:37AM +0100, ropers said that
> How would people feel about creating a Wikipedia article for Itojun?
> Surely his IPv6 work makes him notable enough?
> 
> eg. http://en.wikipedia.org/wiki/Itojun

it all comes down to http://en.wikipedia.org/wiki/WP:Notability
my life is too short to fight with WP admins.

he is mentioned explicitly in:
http://en.wikipedia.org/wiki/IPv6  (with edit link)
http://en.wikipedia.org/wiki/List_of_OpenBSD_developers
http://en.wikipedia.org/wiki/Nvi

and so on.

-f
-- 
excellent day to have a rotten day.



Re: 4.2 Trouble with HP Notebook

2007-11-01 Thread Tobias Ulmer
On Thu, Nov 01, 2007 at 03:19:11PM +0100, Frans Haarman wrote:
> Hello,
> 
> I am trying to install 4.2 on my HP. It boots & installs fine, but after the
> install the
> kernel stops at:
> 
> pctr: 686-class user-level performance counters enabled
> mtrr: Pentium Pro MTRR support
> 
> Then nothing, I waited for 15 minutes, then rebooted, reinstalled, but no
> luck.
> 
> Anyway to disable that mtrr stuff ?
you can't

try
- enable acpi, disable apm
- disable pcibios

> 
> Frans Haarman
> De Giessen Automatisering B.V.
> 
> Technische Dienst
> Telefoon : (0184) 67 53 75
> Fax : (0184) 61 12 46
> E-mail : [EMAIL PROTECTED]
> Website : http://www.giessen.nl/
> 
> Algemeen
> Tel. : (0184) 67 54 00
> KvK nr. : 23091032
> d u i d e l i j k e   t a a l !



Re: 4.2 Trouble with HP Notebook

2007-11-01 Thread Frans Haarman
On 11/1/07, Paul de Weerd <[EMAIL PROTECTED]> wrote:
> On Thu, Nov 01, 2007 at 03:19:11PM +0100, Frans Haarman wrote:
> | Hello,
> |
> | I am trying to install 4.2 on my HP. It boots & installs fine, but after
> the
> | install the
> | kernel stops at:
> |
> | pctr: 686-class user-level performance counters enabled
> | mtrr: Pentium Pro MTRR support
> |
> | Then nothing, I waited for 15 minutes, then rebooted, reinstalled, but no
> | luck.
> |
> | Anyway to disable that mtrr stuff ?
>
> The same way you disable just about every driver out there
>
> At the boot prompt type :
>
>boot -c
>
> At the UKC prompt type :
>
>disable pctr
>disable mtrr
>quit

This gives me "can't disable pseudo device"



Re: 4.2 Trouble with HP Notebook

2007-11-01 Thread Frans Haarman
Frans Haarman
De Giessen Automatisering B.V.

Technische Dienst
Telefoon : (0184) 67 53 75
Fax : (0184) 61 12 46
E-mail : [EMAIL PROTECTED]
Website : http://www.giessen.nl/

Algemeen
Tel. : (0184) 67 54 00
KvK nr. : 23091032
d u i d e l i j k e   t a a l !

-Oorspronkelijk bericht-
Van: Tobias Ulmer [mailto:[EMAIL PROTECTED]
Verzonden: donderdag 1 november 2007 16:08
Aan: Frans Haarman
CC: misc@openbsd.org
Onderwerp: Re: 4.2 Trouble with HP Notebook

On Thu, Nov 01, 2007 at 03:19:11PM +0100, Frans Haarman wrote:
> Hello,
>
> I am trying to install 4.2 on my HP. It boots & installs fine, but
> after the install the kernel stops at:
>
> pctr: 686-class user-level performance counters enabled
> mtrr: Pentium Pro MTRR support
>
> Then nothing, I waited for 15 minutes, then rebooted, reinstalled, but
> no luck.
>
> Anyway to disable that mtrr stuff ?
you can't

try
- enable acpi, disable apm
- disable pcibios


Thanks for your reply, however acpi throws me into DDB> :(

I guess its time to start using the console cable and sending some
usefull info!

Thanks for your time.



Re: multipath routing with OpenBGPD

2007-11-01 Thread Claudio Jeker
On Thu, Nov 01, 2007 at 04:17:03PM +0100, Florian Fuessl wrote:
> Hi,
> 
>  
> 
> Has anyone already tried to use multipath routing for equal BGP4 peer routes
> or are there any plans to implement this feature into OpenBGPD?
> 

No there is no plan to do that in BGPD. Multipath support in BGP4 is 
cumbersome and fragile. Only very few routes would end up as being
considered as an equal cost path. So it is not worth the effort.

-- 
:wq Claudio



Re: multipath routing with OpenBGPD

2007-11-01 Thread Henning Brauer
* Florian Fuessl <[EMAIL PROTECTED]> [2007-11-01 16:27]:
> Has anyone already tried to use multipath routing for equal BGP4 peer routes
> or are there any plans to implement this feature into OpenBGPD?

not really on the agenda, at least not short-term.

well, who knows. sometimes somebody asks for it and is willing to fund 
teh development, then it usually gets done quickly.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam



Re: When will OpenBSD support UTF8?

2007-11-01 Thread Nick Guenther
On 11/1/07, Juan Miscaro <[EMAIL PROTECTED]> wrote:
> Hi gang.
>
> Is there any priority for having OpenBSD support UTF8?
>
> // peter

utf-8 isn't an OS-level thing. You need to do it in every app.
Googling, the first result brings up
http://osdir.com/ml/os.openbsd.ports/2004-02/msg00376.html as an
example.



Re: 4.2 Trouble with HP Notebook

2007-11-01 Thread Paul de Weerd
On Thu, Nov 01, 2007 at 03:19:11PM +0100, Frans Haarman wrote:
| Hello,
|
| I am trying to install 4.2 on my HP. It boots & installs fine, but after
the
| install the
| kernel stops at:
|
| pctr: 686-class user-level performance counters enabled
| mtrr: Pentium Pro MTRR support
|
| Then nothing, I waited for 15 minutes, then rebooted, reinstalled, but no
| luck.
|
| Anyway to disable that mtrr stuff ?

The same way you disable just about every driver out there

At the boot prompt type :

boot -c

At the UKC prompt type :

disable pctr
disable mtrr
quit

And there you go. If that fixes your problems, login and repeat the
last three lines after :

sudo config -ef /bsd

Cheers,

Paul 'WEiRD' de Weerd

--
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/

[demime 1.01d removed an attachment of type application/pgp-signature]



multipath routing with OpenBGPD

2007-11-01 Thread Florian Fuessl
Hi,

 

Has anyone already tried to use multipath routing for equal BGP4 peer routes
or are there any plans to implement this feature into OpenBGPD?

 

-Florian



Re: Bad MD5 of install42.iso

2007-11-01 Thread Richard Wilson

Todd C. Miller wrote:

In message <[EMAIL PROTECTED]>
so spake =?ISO-8859-2?B?UHJ6ZW15c7NhdyBQYXdls2N6eWs=?= (pp):

  

1) MD5s for downloaded files
md5sum install42.iso
03dc43a1d18d3003843a1f13b3861917  install42.iso



03dc43a1d18d3003843a1f13b3861917 is correct.  The MD5 file has been
updated but will take some time to propagate to the mirrors.

 - todd

  
I have also noticed that the MD5 files (at least for i386 and amd64) on 
spargel.kd85.com do not contain hashes for the x*42.tgz files. I expect 
this is a related issue?


Si1entDave



When will OpenBSD support UTF8?

2007-11-01 Thread Juan Miscaro
Hi gang.

Is there any priority for having OpenBSD support UTF8?

// peter


  Be smarter than spam. See how smart SpamGuard is at giving junk email the 
boot with the All-new Yahoo! Mail.  Click on Options in Mail and switch to New 
Mail today or register for free at http://mail.yahoo.ca 



4.2 Trouble with HP Notebook

2007-11-01 Thread Frans Haarman
Hello,

I am trying to install 4.2 on my HP. It boots & installs fine, but after the
install the
kernel stops at:

pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support

Then nothing, I waited for 15 minutes, then rebooted, reinstalled, but no
luck.

Anyway to disable that mtrr stuff ?

Frans Haarman
De Giessen Automatisering B.V.

Technische Dienst
Telefoon : (0184) 67 53 75
Fax : (0184) 61 12 46
E-mail : [EMAIL PROTECTED]
Website : http://www.giessen.nl/

Algemeen
Tel. : (0184) 67 54 00
KvK nr. : 23091032
d u i d e l i j k e   t a a l !



Re: Bad MD5 of install42.iso

2007-11-01 Thread Constantine A. Murenin
On 01/11/2007, Przemys3aw Pawe3czyk <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I dloaded the file from two different servers.
> Here's what I got running md5sum:
>
> 1) MD5s for downloaded files
> md5sum install42.iso
> 03dc43a1d18d3003843a1f13b3861917  install42.iso
>
> Just for checking:
> md5sum cd42.iso
> 7d4ba197d25088a4ad487f2830028c8d  cd42.iso
>
> 2) The numbers from MD5 official file:
> MD5 (install42.iso) = b3a80c9010716ebc997571a1609cf334
>
> Just for checking:
> MD5 (cd42.iso) = 7d4ba197d25088a4ad487f2830028c8d
>
> What should I do? To burn it or not to burn?

Yes, 03dc43a1d18d3003843a1f13b3861917 is the correct md5 for i386/install42.iso.

http://marc.info/?l=openbsd-www&m=119391863124282&w=2

Best regards,
Constantine.



Re: Bad MD5 of install42.iso

2007-11-01 Thread Todd C. Miller
In message <[EMAIL PROTECTED]>
so spake =?ISO-8859-2?B?UHJ6ZW15c7NhdyBQYXdls2N6eWs=?= (pp):

> 1) MD5s for downloaded files
> md5sum install42.iso
> 03dc43a1d18d3003843a1f13b3861917  install42.iso

03dc43a1d18d3003843a1f13b3861917 is correct.  The MD5 file has been
updated but will take some time to propagate to the mirrors.

 - todd



Re: Bad MD5 of install42.iso

2007-11-01 Thread ropers
On 01/11/2007, Przemys3aw Pawe3czyk <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I dloaded the file from two different servers.
> Here's what I got running md5sum:
>
> 1) MD5s for downloaded files
> md5sum install42.iso
> 03dc43a1d18d3003843a1f13b3861917  install42.iso
>
> Just for checking:
> md5sum cd42.iso
> 7d4ba197d25088a4ad487f2830028c8d  cd42.iso
>
> 2) The numbers from MD5 official file:
> MD5 (install42.iso) = b3a80c9010716ebc997571a1609cf334
>
> Just for checking:
> MD5 (cd42.iso) = 7d4ba197d25088a4ad487f2830028c8d
>
> What should I do? To burn it or not to burn?

Could you specify exactly which server you have the bad iso from?

If you re-download the iso from the same server, is the md5 still bad?

It goes w/o saying that one shouldn't burn isos where the md5 already
red flags the file.



Bad MD5 of install42.iso

2007-11-01 Thread Przemysław Pawełczyk
Hi,

I dloaded the file from two different servers.
Here's what I got running md5sum:

1) MD5s for downloaded files
md5sum install42.iso
03dc43a1d18d3003843a1f13b3861917  install42.iso

Just for checking:
md5sum cd42.iso
7d4ba197d25088a4ad487f2830028c8d  cd42.iso

2) The numbers from MD5 official file:
MD5 (install42.iso) = b3a80c9010716ebc997571a1609cf334

Just for checking:
MD5 (cd42.iso) = 7d4ba197d25088a4ad487f2830028c8d

What should I do? To burn it or not to burn?

Regards,
pp

--
Przemys3aw Pawe3czyk (P2O2) - [EMAIL PROTECTED]
WWW: http://pp.kv.net.pl/ Forum: http://www.p2o2.fora.pl/

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: Installation troubles

2007-11-01 Thread Chris Zakelj

Richard Toohey wrote:

Asking the obvious questions to eliminate them first ...

1. Official CDs?

2. Can you read/copy the CD on *any* machines / *any* OS?

3. Specifically - if you FTP install OpenBSD , can you then mount / 
copy / do anything with the CD?


4. dmesg(s)

Personal experience ...

I have installed 3.8 to 4.2 from CDs on machines from P3 500 to 
Pentium D 2.something via Celeron 900Mhz (Dells, HPs, Compaqs, 
desktops and laptops) - only real issue was a bogus 4.1 CD than no 
machine would touch.


I had a CD error with 4.2 today (same CD that I have done 3 installs 
with already!) when extracting Xenocara - so I umounted, ejected, took 
CD out, waggled it around while saying magic incantation, remounted, 
and tried again and it worked (well, no errors reported.)


HTH, YMMV, IANAD, etc.

On 1/11/2007, at 4:55 PM, Chris Zakelj wrote:

Evening... I'm trying install my fresh 4.2 CDs on a system that is 
destined to become a samba server and build machine for CF-based 
firewalls.  Only I'm having a problem (obviously).  This is the third 
release where I'm having this issue, but previously I just chalked it 
up to old, cranky CDROM drives, and went with FTP.  But given this is 
all new hardware, time to figure out what's really happening.


This system is fresh-built amd64 (but will be running/compiling all 
i386 binaries to avoid having to cross-compile Soekris builds), IDE 
DVD-ROM drive, SATA hard drive.  Boots from CD, then gets through 
partitioning, labelling, and formatting the drive just fine.  Network 
config sails through, until I finally hit "Let's install the sets!".  
I hit enter for the defaults 'cd' and 'cd0', at which point I get the 
following:


cd0(atapiscsi0:0:0): Check Condition (error 0x70) on opcode 0x28
   SENSE KEY: Media Error
ASC/ASCQ: ASC 0x11 ASCQ 0x06

This message repeats three times, at which point the installer gives 
up, reports 'No filesystems found on cd0', and asks again where to 
find the sets.  For what it's worth, this happens on four different 
i386 machines of various vintage (from a 16 year old 486 up through 
tonight's Sempron build), with official CD releases from 4.0 
onwards.  I'm guessing I'm missing something obvious, but Google and 
MARC didn't turn up anything, so cluesticks are welcome.

1.  Yes, they're official CDs straight from austin@
2.  Yes, both my WinXP laptop and WinXP-64 desktop can read/copy
3.  I vaguely recall installing packages from one of them after doing 
the FTP install, but I'll try again later tonight.
4.  I'd love to, but except for the 486 (stuffed in a closet), they 
don't have serial ports to redirect to.




Re: deploy openssl patch

2007-11-01 Thread Maurice Janssen
On Thursday, November  1, 2007 at 11:33:56 +0100, Markus Wernig wrote:
>Dear list
>
>I have a couple of 4.1 firewalls that I would like to upgrade to 4.2.
>Before taking them online again I'd like to deploy the openssl patch 
>from ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/002_openssl.patch
>
>Being perimeter firewalls, those systems don't have compile tools 
>installed. I would thus need to pre-compile libssl on a 4.2 buildhost 
>and deploy it onto the firewalls. I've been looking through the 
>documentation but did not find a "good" way to do this, because openssl 
>is not a package, but part of the base system.

What's wrong with building a release?  It's well documented, supported
and works great.

If you don't want to build your own release and you trust me, you can
use the filesets from
ftp://ftp.su.se/pub/mirrors/openbsd_stable/4.2-stable/i386/
These are built from the stable tree after the SSL-patch was made
available.

Maurice



Re: deploy openssl patch

2007-11-01 Thread Nick Holland
Markus Wernig wrote:
> Dear list
> 
> I have a couple of 4.1 firewalls that I would like to upgrade to 4.2.
> Before taking them online again I'd like to deploy the openssl patch 
> from ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/002_openssl.patch
> 
> Being perimeter firewalls, those systems don't have compile tools 
> installed. 

And by making security updates more difficult, you think you have
improved security, right?

As you have demonstrated, you have not.  If an attacker can use your
system's compile tools, they can also install the compile tools.  But
it DOES take you longer to do all you can to keep them out in the first
place.

> I would thus need to pre-compile libssl on a 4.2 buildhost
> and deploy it onto the firewalls. I've been looking through the 
> documentation but did not find a "good" way to do this, because openssl 
> is not a package, but part of the base system.
> 
> Is there any way other than tar - scp - untar after compiling libssl?

yes, just make a release, and install that.

Or, install the compilation tools where you need them and be done with
it.

Nick.



Re: deploy openssl patch

2007-11-01 Thread z0mbix
On 11/1/07, Markus Wernig <[EMAIL PROTECTED]> wrote:
> Dear list
>
> I have a couple of 4.1 firewalls that I would like to upgrade to 4.2.
> Before taking them online again I'd like to deploy the openssl patch
> from ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/002_openssl.patch
>
> Being perimeter firewalls, those systems don't have compile tools
> installed. I would thus need to pre-compile libssl on a 4.2 buildhost
> and deploy it onto the firewalls. I've been looking through the
> documentation but did not find a "good" way to do this, because openssl
> is not a package, but part of the base system.
>
> Is there any way other than tar - scp - untar after compiling libssl?
>
> thx for any pointers
>
> /markus
>
>

http://openbsdbinpatch.sourceforge.net/

This isn't supported by the OpenBSD developers, but it works for me
and many others.



Re: OpenBSD kernel janitors

2007-11-01 Thread Artur Grabowski
n0g0013 <[EMAIL PROTECTED]> writes:

> > Development is not the same process as writing a whiny mail.
> 
> that is a shame.  i can probably better understand the relectance to
> re-visit this if it has failed before.  perhaps, others are right,
> perhaps linux can tolerate it because it's not as good as openbsd.

Oh, geee. You think you're so unique that you were the first one to think
of this and that you're the first one to ask for hand holding?

It _HAS_ failed before. Many, many, many times. My todo list has been
on the web for over 6 years. It has given us one or two developers,
but mostly it has gotten me shitpiles of mails asking for holding
hands. Probably around 20 people I spent hundereds of hours on, giving
advice, explaining things, helping debug, holding hands. The total
result of committed code: 0. Maybe, just maybe it made me slightly
bitter.

People say that they'll do things because it makes them feel good and
like they are participating. But actually doing stuff is work, so
that's not interesting.

//art



Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1

2007-11-01 Thread Girish Venkatachalam
On 05:28:58 Nov 01, Mark Thomas wrote:
> On Oct 31, 2007 9:47 PM, Vadim Jukov <[EMAIL PROTECTED]> wrote:
> > You need only one "InputDevice" section for all your mice with
> > "/dev/wsmouse" as "Device" option, indeed.
> 
> I'm sorry but I do not understand. I tried putting both mice in one
> InputDevice section and X refused to start.
> 
> Parse error on line 47 of section InputDevice in file /etc/X11/xorg.conf
>   Multiple "Identifier" lines.
> (EE) Problem parsing the config file
> (EE) Error parsing the config file
> 

I don't think you got him right.

He must have meant replacing /dev/wsmouse1 and /dev/wsmouse2 with
/dev/wsmouse. If you are not sure about the format of xorg.conf , then
you can get several samples from google. 


The idea is that OpenBSD multiplexes mouse movements into /dev/wsmouse.
So you don't have to explicitly tell Xorg about it.

Read wsmouse(1)  and wsmux(1) for details.

Best,
Girish



deploy openssl patch

2007-11-01 Thread Markus Wernig

Dear list

I have a couple of 4.1 firewalls that I would like to upgrade to 4.2.
Before taking them online again I'd like to deploy the openssl patch 
from ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/002_openssl.patch


Being perimeter firewalls, those systems don't have compile tools 
installed. I would thus need to pre-compile libssl on a 4.2 buildhost 
and deploy it onto the firewalls. I've been looking through the 
documentation but did not find a "good" way to do this, because openssl 
is not a package, but part of the base system.


Is there any way other than tar - scp - untar after compiling libssl?

thx for any pointers

/markus



Re: Installation troubles

2007-11-01 Thread Richard Toohey

Asking the obvious questions to eliminate them first ...

1. Official CDs?

2. Can you read/copy the CD on *any* machines / *any* OS?

3. Specifically - if you FTP install OpenBSD , can you then mount /  
copy / do anything with the CD?


4. dmesg(s)

Personal experience ...

I have installed 3.8 to 4.2 from CDs on machines from P3 500 to  
Pentium D 2.something via Celeron 900Mhz (Dells, HPs, Compaqs,  
desktops and laptops) - only real issue was a bogus 4.1 CD than no  
machine would touch.


I had a CD error with 4.2 today (same CD that I have done 3 installs  
with already!) when extracting Xenocara - so I umounted, ejected,  
took CD out, waggled it around while saying magic incantation,  
remounted, and tried again and it worked (well, no errors reported.)


HTH, YMMV, IANAD, etc.

On 1/11/2007, at 4:55 PM, Chris Zakelj wrote:

Evening... I'm trying install my fresh 4.2 CDs on a system that is  
destined to become a samba server and build machine for CF-based  
firewalls.  Only I'm having a problem (obviously).  This is the  
third release where I'm having this issue, but previously I just  
chalked it up to old, cranky CDROM drives, and went with FTP.  But  
given this is all new hardware, time to figure out what's really  
happening.


This system is fresh-built amd64 (but will be running/compiling all  
i386 binaries to avoid having to cross-compile Soekris builds), IDE  
DVD-ROM drive, SATA hard drive.  Boots from CD, then gets through  
partitioning, labelling, and formatting the drive just fine.   
Network config sails through, until I finally hit "Let's install  
the sets!".  I hit enter for the defaults 'cd' and 'cd0', at which  
point I get the following:


cd0(atapiscsi0:0:0): Check Condition (error 0x70) on opcode 0x28
   SENSE KEY: Media Error
ASC/ASCQ: ASC 0x11 ASCQ 0x06

This message repeats three times, at which point the installer  
gives up, reports 'No filesystems found on cd0', and asks again  
where to find the sets.  For what it's worth, this happens on four  
different i386 machines of various vintage (from a 16 year old 486  
up through tonight's Sempron build), with official CD releases from  
4.0 onwards.  I'm guessing I'm missing something obvious, but  
Google and MARC didn't turn up anything, so cluesticks are welcome.




Re: [i386/Thinkpad T41]USB mouse + Xorg obsd 4.1

2007-11-01 Thread Mark Thomas
On Oct 31, 2007 9:47 PM, Vadim Jukov <[EMAIL PROTECTED]> wrote:
> You need only one "InputDevice" section for all your mice with
> "/dev/wsmouse" as "Device" option, indeed.

I'm sorry but I do not understand. I tried putting both mice in one
InputDevice section and X refused to start.

Parse error on line 47 of section InputDevice in file /etc/X11/xorg.conf
Multiple "Identifier" lines.
(EE) Problem parsing the config file
(EE) Error parsing the config file

Thanks again
-- 
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments



Re: OpenBSD kernel janitors

2007-11-01 Thread Owain Ainsworth
On Wed, Oct 31, 2007 at 12:57:44PM -0700, Ted Unangst wrote:
> On 10/31/07, Peter N. M. Hansteen <[EMAIL PROTECTED]> wrote:
> > n0g0013 <[EMAIL PROTECTED]> writes:
> >
> > > i didn't find it on google (i am a google retard), if you post me the
> > > link not only will i offer to maintain it for the developers but will
> > > endeavour to link-up with the website team to ensure it is easily
> > > found.
> >
> > Unless I'm very mistaken what art was talking about is even linked
> > from the www.openbsd.org front page.
>
> you're mistaken. :) art was talking about searching for "openbsd todo
list".

the term "openbsd todo" came up with the following link at art@'s
website:

http://www.blahonga.org/~art/openbsd/todo.html.

If someone's looking for things to do, try those.

-0-

--
This is the LAST time I take travel suggestions from Ray Bradbury!