Re: Dovecot bsdauth(user): unknown user

2014-03-10 Thread Атанас Владимиров
 # pwd_mkdb
 usage: pwd_mkdb [-c] [-p | -s] [-d directory] [-u username] file
 # pwd_mkdb -c /etc/master.passwd
 #

 It seems that everything is OK, isn't it?.

Did the problems with unknown user persist afterward?

Yes, the problem persist.

$ sudo doveadm auth test vlado
Password:
passdb: vlado auth failed
extra fields:
  user=vlado
$ sudo pwd_mkdb
usage: pwd_mkdb [-c] [-p | -s] [-d directory] [-u username] file
$ sudo pwd_mkdb -c /etc/master.passwd
$ sudo doveadm auth test vlado
Password:
passdb: vlado auth failed
extra fields:
  user=vlado

$ tail /var/log/maillog
Mar 10 08:08:16 ns dovecot: auth-worker(21267): bsdauth(vlado):
unknown user (given password: K4*x9)
Mar 10 08:08:51 ns dovecot: auth-worker(21267): bsdauth(vlado):
unknown user (given password: Qa*we00)
Mar 10 08:09:41 ns dovecot: auth-worker(21267): bsdauth(vlado):
unknown user (given password: K*rx9)
Mar 10 08:10:18 ns dovecot: auth-worker(21267): bsdauth(vlado):
unknown user (given password: K*x9)

If I enter wrong password error for the account that is working
normaly, error is password mismatch. With correct password for the
same account the log is silent as it should to be.


$ sudo doveadm auth test jul
Password:
passdb: jul auth failed
extra fields:
  user=jul

$ tail /var/log/maillog

Mar 10 09:50:38 ns dovecot: auth-worker(836): bsdauth(jul): Password
mismatch (given password: Qazxsw)



Re: PCI-e SSD card as primary disk

2014-03-10 Thread Jan Stary
On Mar 10 01:29:06, s...@spacehopper.org wrote:
 On 2014-03-09, Jan Stary h...@stare.cz wrote:
  I run current/amd64 on this Atom-based box (see dmesg below)
  http://www.intel.com/content/www/us/en/motherboards/desktop-motherboards/desktop-board-di510mo.html
  The system is installed onto a 16GB SDHC Sandisk card
  which is plugged into this cardreader
  http://www.hwtools.net/cardreader/MR04.html
  which is plugged into the PCI-e socket of the board.
  That leaves the two SATA connections to be used
  by two big SATA disks for data and backup.
 
  I am generally happy with it, but occasionally it gets slow,
  e.g. with a handful of firefox tabs. I see a lot of disk
  activity on the sd2 disk (the system disk), where $HOME is.
  It akes me think that my system would be generally more
  responsive if this was faster.
 
  Does anybody use a PCI-e SSD successfully. Like e.g. this one?
  http://dx.com/p/toshiba-msata-1-8-ssd-solid-state-disk-32gb-268690#.Uxx2-BEo81I
  Do people use any other kind of storage successfully
  in the PCI-e socketof this board?
 
 That is an mSATA SSD, not a PCIe / miniPCIe SSD.
 
 Some machines (mostly laptops) have a slot which can take either mSATA
 or miniPCIe, I do this on my X220, but a standard miniPCIe slot will not
 work with an mSATA SSD (even if it physically fits).

Thank you for the correction.
So, what (mini)PCIe SSDs do people succesfully use?

Jan



bioctl

2014-03-10 Thread Friedrich Locke
Hi Foks!

This is my first time with bioctl and raid in general. I issued the
following comand:

# bioctl -b 1:2.0 mfi0

and the disk started blinking ...

Then i tried :

# bioctl -u 1:2.0 mfi0

It is still blinking.

What was my mistaken ?

Thanks a lot for your time and cooperation.

Fried.



OBSD firewall+carp+vpn

2014-03-10 Thread Friedrich Locke
Hi folks,

how does carp + vpn integrate in a two server firewall ?
Does carp make vpn redundant  too ?

Thanks in advance.



Re: OBSD firewall+carp+vpn

2014-03-10 Thread Janne Johansson
With sasyncd(8) and carp, yes.



2014-03-10 14:09 GMT+01:00 Friedrich Locke friedrich.lo...@gmail.com:

 Hi folks,

 how does carp + vpn integrate in a two server firewall ?
 Does carp make vpn redundant  too ?

 Thanks in advance.




-- 
May the most significant bit of your life be positive.



Donation request: Thinkpad with xHCI - USB 3 gear

2014-03-10 Thread Martin Pieuchot
After committing an initial xhci(4) driver [0] and the corresponding
changes to our USB stack, I've just updated want.html [1] to ask for
some USB 3 gear.

I'm actually doing all the development with a NEC xHCI 0.96 ExpressCard
on a laptop which is not mine, in dmesg it shows up as:

NEC xHCI rev 0x03 at pci2 dev 0 function 0 not configured

or with the driver enabled:

xhci0 at pci2 dev 0 function 0 NEC xHCI rev 0x03: apic 1 int 19
xhci0: xHCI version 0.96
...


To continue the development and make sure the driver works amongst
different implementations  platforms, I'm looking for in any other
xHCI controller, but more particularity:

  - A laptop with Intel xHCI, preferably from Lenovo, to work on
suspend/resume and power saving issues.

  - A PCI/PCIe card that I can stuff into a sparc64 and/or macppc to
fix the potential endianness issues.

  - A SuperSpeed device using isochronous transfer, generally most
of the webcams and cameras, I couldn't find such device myself,
but maybe somebody has a recommendation.

Don't hesitate to contact me off-list.

Thanks!

Martin

[0] http://marc.info/?l=openbsd-cvsm=139428927307629w=2
[1] http://www.openbsd.org/want.html



Re: IPSec Packet Loss Help

2014-03-10 Thread Zach Leslie
 Hope this helps,

Thanks, Andy.  Once I removed the routes for the remote network point to
the internal carp interface, everything works like I expect.  Super
stable.  Thanks for your time.  I'll mess with the NAT for monitoring
soonish and see if I can get that working.

-- 
Zach



Re: IPSec Packet Loss Help

2014-03-10 Thread Andy

Hi Zach.

Ah great news!

I noticed your email before the weekend but didn't have a chance to 
reply. Please you worked it out.


The remote network routes I use don't point at the local inside CARP IP 
but instead at the local inside physical IP (each firewalls own IP just 
to set the source).


Yea setting the NAT fixed some of the issues for us with communicating 
with the firewalls themselves.. Restrict the NAT rule if you like so 
you only NAT to the internal CARP IP when trying to talk to either the 
firewalls physical IPs. No need to NAT for traffic to the rest of the 
LAN as that only ever replies back to the CARP IP as the GW etc..


Cheers, andy.

On Mon 10 Mar 2014 16:25:59 GMT, Zach Leslie wrote:

Hope this helps,


Thanks, Andy.  Once I removed the routes for the remote network point to
the internal carp interface, everything works like I expect.  Super
stable.  Thanks for your time.  I'll mess with the NAT for monitoring
soonish and see if I can get that working.




just installed 5.4

2014-03-10 Thread Friedrich Locke
Hi folks,

i have just installed obsd 5.4 and to my surprise sshd is not built with
support do krb and gssapi!

May some one tell me why ?

Thanks a lot.



Re: just installed 5.4

2014-03-10 Thread Theo de Raadt
 i have just installed obsd 5.4 and to my surprise sshd is not built with
 support do krb and gssapi!
 
 May some one tell me why ?

SSH is supposed to be a very high quality piece of software.

The open source kerberos code base is lightly maintained junk from
over decades ago.  It has not grown up.  Go read it sometime.

Now there's all this talk about agility regarding authetication and
cryptography schemes, but there has to be a line drawn sometimes.

SSH safety is more important kerberos support.  Yes, now someone
is going to pipe up and say but you can disable it by default...

Which is is exactly what we did.  Feel free to compile your own
version with it enabled, and use at your own risk (likely not educated
by reading the kerberos source code)



Re: Dovecot bsdauth(user): unknown user

2014-03-10 Thread Matthew Weigel

On 03/10/2014 02:57 AM, Атанас Владимиров wrote:


Yes, the problem persist.


Oof.  I didn't notice this earlier, but you're running -current, and 
this has seen some changes in the last week.  You might want to take a 
look at this thread: http://marc.info/?t=13910782254r=1w=2


I don't have an easy way to test (not running -current or using 
passwd/bsdauth), and it's not clear from the discussion whether the 
changes that fixed dovecot in Brad's testing were committed or not. 
However, it looks like one more fix to getpwent.c was committed after 
your last update, and it's probably worth trying.

--
 Matthew Weigel
 hacker
 unique  idempot . ent