Re: Brocade 10Gb CNA for IBM ­System X

2014-07-30 Thread def
Yes, exactly, i mean 1010/1020.

Thank you much!

FromJonathan Gray 
Subject Re: Brocade 10Gb CNA for IBM System X
DateTue, 29 Jul 2014 22:51:37 +1000
[Part 1 text/plain us-ascii (0.5 kilobytes)] (View Text in a separate window)

On Tue, Jul 29, 2014 at 04:13:16PM +0400, def wrote: 
> Hi, 
>  
> is any information to further driver support of that card? 
> Cant find chipset specification, seems its manufactured for IBM specially. 
> Also i dont see any Brocade adapters in man pages of 5.5. 
 
If what you are referring to is: 
 
Brocade 1010/1020, aka 
CT  0x1657:0x0014 
CT2 0x1657:0x0022 
 
then no, there is currently no driver support. 
It looks like Brocade sold that product line off to QLogic 
which sells them as BR-1020 and BR-1860.  

Втр 29 Июл 2014 16:13:16 +0400, def  написал:
> Hi,
> 
> is any information to further driver support of that card?
> Cant find chipset specification, seems its manufactured for IBM specially.
> Also i dont see any Brocade adapters in man pages of 5.5.

--



usb audio interfaces

2014-07-30 Thread Erwin Geerdink
Hi,

I'm considering the following usb interfaces for my audio setup:

E-MU 0204 usb
E-MU Tracker Pre
Presonus Audiobox usb
Alesis IO|2 Express

Recording will be done on a Windows machine, however it would be
nice if I can use it for audio playback from an OpenBSD machine as
well. I found the envy(4) and emu(4) man pages but I'm still not sure
whether playback would work with any of these devices.

Anyone experiences or suggestions?

Best,
-- 
Erwin



Re: Access denied when trying to access SMB shares using AMD64 -current with Dolphin on KDE4

2014-07-30 Thread Stan Gammons
> On Jul 29, 2014, at 9:17 PM, Stan Gammons  wrote:
> 
> Why am I not being prompted for the username and password when I try to 
> access the SMB share with Dolphin or Konqueror?
> 
> 

After a little further looking, I found I'm able to access the SMB share if I 
put the credentials in  System Settings > Sharing > Windows Shares.  If the 
username and password are blank, I'm not prompted for credentials.  Is this by 
design?  KDE version is 4.13.3


Stan



Re: Immediately resumes after hibernate

2014-07-30 Thread Elijah Buck
 Wed, Jul 30, 2014 at 12:29:00PM -0700, Mike Larkin wrote:
> That's good news, but unfortunately it's just a diagnostic tool to indicate
> what I already suspected - a GPE is firing, but it's still unknown which one.
> The spec is a little unclear here (gee, what a surprise). It only says that
> the implementation must provide "a way" for OSPM to determine the GPE that
> fired to wake the machine up. But it doesn't say what "that way" is. A few
> weeks ago I cooked up a diff to read the GPE status right on wake (from S3)
> and on the machines I have that immediately wake from S3, it didn't show any
> GPE as signaled. We can't use the same approach on wake from S4 because of
> all the other stuff that happens before we can read the GPE registers.
> 
> The change I recommended can't be committed as is. But it does help point
> things in the right direction. I'll take a look at the AML and see if I can
> see a suspect GPE. 
> 
> -ml
> 

Is it possible to disable individual wakeup devices? (acpi0: wakeup devices
P0P1(S4) P0P3(S4) P0P4(S4) P0P5(S4) P0P6(S4) BR1E(S4) UAR1(S4) PS2K(S4)
PS2M(S4) EUSB(S4) USB0(S4) USB1(S4) USB2(S4) USB3(S4) USBE(S4) USB4(S4)
[...]). Would that help track down where the GPE is coming from?

Elijah



Re: Immediately resumes after hibernate

2014-07-30 Thread Mike Larkin
On Wed, Jul 30, 2014 at 11:07:27AM -0400, Elijah Buck wrote:
> On Wed, Jul 30, 2014 at 01:26:06AM -0700, Mike Larkin wrote:
> > I've got a machine with the same symptoms with very similar hardware.
> > It doesn't fire any GPEs on resume, and the fixed function buttons aren't
> > set either. So the reason for resume is still a mystery. 
> > 
> > 1. Please send an acpidump.
> > 
> > 2. In dev/acpi/acpi.c, try commenting out the following line:
> > 
> > acpi_enable_wakegpes(sc, state);
> > 
> > ... in my tree that's on line 2157. Note there are two occurrences of that
> > line of code, you want to comment out the one in acpi_sleep_state and not
> > acpi_powerdown. Then rebuild/reinstall the kernel and see if ZZZ works -
> > that change will disable the wake devices
> > 
> > -ml
> 
> The change to dev/acpi/acpi.c works perfectly. 

That's good news, but unfortunately it's just a diagnostic tool to indicate
what I already suspected - a GPE is firing, but it's still unknown which one.
The spec is a little unclear here (gee, what a surprise). It only says that
the implementation must provide "a way" for OSPM to determine the GPE that
fired to wake the machine up. But it doesn't say what "that way" is. A few
weeks ago I cooked up a diff to read the GPE status right on wake (from S3)
and on the machines I have that immediately wake from S3, it didn't show any
GPE as signaled. We can't use the same approach on wake from S4 because of
all the other stuff that happens before we can read the GPE registers.

The change I recommended can't be committed as is. But it does help point
things in the right direction. I'll take a look at the AML and see if I can
see a suspect GPE. 

-ml

> 
> I am attaching a tar of the apcidump output (which will of course be
> stripped by the list). Let me know if there's another way you'd like me
> to send it.
> 
> Thanks,
> Elijah
> 
> [demime 1.01d removed an attachment of type application/x-tar]



Re: Immediately resumes after hibernate

2014-07-30 Thread Elijah Buck
On Wed, Jul 30, 2014 at 01:26:06AM -0700, Mike Larkin wrote:
> I've got a machine with the same symptoms with very similar hardware.
> It doesn't fire any GPEs on resume, and the fixed function buttons aren't
> set either. So the reason for resume is still a mystery. 
> 
> 1. Please send an acpidump.
> 
> 2. In dev/acpi/acpi.c, try commenting out the following line:
> 
> acpi_enable_wakegpes(sc, state);
> 
> ... in my tree that's on line 2157. Note there are two occurrences of that
> line of code, you want to comment out the one in acpi_sleep_state and not
> acpi_powerdown. Then rebuild/reinstall the kernel and see if ZZZ works -
> that change will disable the wake devices
> 
> -ml

The change to dev/acpi/acpi.c works perfectly. 

I am attaching a tar of the apcidump output (which will of course be
stripped by the list). Let me know if there's another way you'd like me
to send it.

Thanks,
Elijah

[demime 1.01d removed an attachment of type application/x-tar]



Re: OpenBSD on Utilite pro device

2014-07-30 Thread Mikael
2014-07-30 16:05 GMT+02:00 Maciej Jan Broniarz :

> On Wed, Jul 30, 2014 at 03:48:23PM +0200, Mikael wrote:
> > Maciej,
> >
> > At least there is an iMX6 port of OBSD. Please let the ML know what you
> got
> > to.
> >
>
> Hi,
>
> Where can i find the instalaltion files?
>

26 Jan there was a related post check it.

The tree with the patches for iMX6 are on github and the author's name is
Nick, if i recall right.

Google.


> Sorry, but who is ML ?
>

Mailing list.


>
> All best,
> mjb
>
> > Mikael
> >
> >
> > 2014-07-30 13:31 GMT+02:00 Maciej Jan Broniarz :
> >
> > > Hi,
> > >
> > > Did anyone tried to run OpenBSD on Utilite Pro device?
> > > http://utilite-computer.com/web/utilite-pro-specifications
> > >
> > > All best,
> > > mjb



Re: http post from base

2014-07-30 Thread sven falempin
On Wed, Jul 30, 2014 at 7:43 AM, Giancarlo Razzolini
 wrote:
> On 29-07-2014 06:58, André Stöbe wrote:
>> sven falempin wrote:
>>> Hello,
>>>
>>> i got a silly question, how to post data to a server with base tools ?
>>>
>>> i could  nc  $DEST << EOT
>>> POST /a/b HTTP/1.0
>>> [..]
>>> EOT
>> You can use the HTTP::Tiny module that comes with Perl in base, see:
>>
>>   http://search.cpan.org/perldoc?HTTP::Tiny
>>
>> It's very easy to use. However, for cookie support you need external
>> modules.
>>
> Since you probably need to install external tools, I suggest you try
> python with the requests module. It's one of the simplest ways of
> handling http stuff that I know.
>
> Cheers,
>

Perl is in base, does the job (and cpan brings many tools, i already
add IO::Socket::SSL in my base 'coz' it is conveniant).
I guess i will add curl to

> --
> Giancarlo Razzolini
> GPG: 4096R/77B981BC
>
> [demime 1.01d removed an attachment of type application/pkcs7-signature which 
> had a name of smime.p7s]
>



-- 
-
() ascii ribbon campaign - against html e-mail
/\



OpenBSD on Utilite pro device

2014-07-30 Thread Maciej Jan Broniarz
Hi,

Did anyone tried to run OpenBSD on Utilite Pro device?
http://utilite-computer.com/web/utilite-pro-specifications

All best,
mjb



Re: l2tp / ipsec follow up

2014-07-30 Thread Gordon Turner

On 2014-07-28 08:43, John wrote:

On Sun, Jul 27, 2014 at 02:07:34PM -0400, Gordon Turner wrote:

On 2014-07-27 10:16, John wrote:
>On Sat, Jul 26, 2014 at 05:34:56PM -0400, Gordon Turner wrote:
>>On 2014-07-23 20:30, Gordon Turner wrote:
>
>Does your gateway at 192.168.2.1 know how to reach 10.0.0.0/24?  Does it
>have a route telling it to use 192.168.2.140 to reach 10.0.0.0/24?


I don't have any other routes setup, I guess I am struggling with 
where

should I add them?


If I understand your network topology correctly, you need to add a 
route

to 10.0.0.0/24 on the gateway device 192.168.2.1 otherwise return
traffic from 192.168.2.0/24 to 10.0.0.0/24 is probably taking some 
other

path or getting dropped.

So on the gateway which is 192.168.2.1:
  /sbin/route add 10.0.0.0/24 192.168.2.140


That, eventually, did the the trick.

That was one of the first things I tried, but the route (for some 
reason) wasn't used immediately.  I rebooted the OpenVPN and restarted 
the gateway router and then things were working!  Yay!


I will eventually move the VPN end point to the new gateway / router, 
but for now it is nice to have them decoupled.



I did have 2 more questions that someone might be able to help with:


Does `framed-ip-address` in `npppd-users` assign an ip address to the 
user when authenticated?  That was my expectation, but when I provide an 
ip from the `pool-address` range, the value is not used.  Another value 
from the pool is used instead.

```
jtest:\
:password=SEEKRIT:\
:framed-ip-address=10.0.0.2:
```


With regards to adding extra rules to pf.conf for the VPN traffic, if I 
am relying on l2tp and ipsec for authentication, and I trust those 
connecting completely (ie me) is there any risk NOT not adding 
additional filtering rules?


To put a different way, I want to have VPN clients treated as if they 
were on the private network natively.  I am only forwarding TCP 500, 
4500 to the VPN endpoint which is listening for them.

```
set skip on pppx0
pass in quick on egress proto udp from any to any port {500, 4500} keep 
state

pass on enc0 from any to any keep state (if-bound)
```

Thanks!
Gord.



Re: CARP cluster: howto keep pf.conf in sync?

2014-07-30 Thread Giancarlo Razzolini
On 29-07-2014 10:41, Andy wrote:
> Puppet is definatly a sledge hammer approach, but if you have lots of
> firewalls its great.
>
> We run around 13 or 14 pairs of OpenBSD firewalls now, and puppet
> allows us to maintain one common template based code base, and change
> only a couple of things specific to each environment (where each
> environment is a unique firewall pair).
>
> This makes upgrading and looking after this many firewalls possible
> for just one person.
> If I tried to manage that many firewalls on my own without puppet I
> would have lost the plot and all my hair by now.
>
> Another nice example of an appropriate application is that by using
> PuppetDB, a full IPSec VPN mesh is built automatically by puppet
> between every firewall according to the subnets behind each firewall
> pair. So if I add a single new subnet behind a remote office firewall,
> the 12 odd extra tunnels all get created automatically.
>
> But unless you are wanting to do stuff like that, then yes, I
> completely agree with Nick puppet is major over kill..
>
> Hope this helps.
> Cheers, Andy.
Hi,

All these new devops tools, that are supposed to make developers to
become sysadmins and sysadmins to edit some source code and magically
manage their machines, are making systems less secure by means of
simplicity. All boils down to the infamous "recipes". If you get the
wrong one, which by the way, there are lots of recipes being created by
people that don't know shit about system administration, then you are
doomed. Of course these tools can and should be used, but they should be
used by people that understand what they're doing "under the hood".

Now that I did my rant, to the OP question, I do this with git and
git branches. Since git is distributed, you don't need a central
repository in a separate machine, either one of the firewalls can be it.
I use gitolite for repo management. It's simple and have lots of
configuration options. I now use a hook that "watches" a specific branch
and sync pf.conf through the firewall machines. It even mails me after
it's done, or in case of any errors. And, to keep firewall specific
files, I use a common branch model. And when I merge things they get
replicated. In case of a disaster, any machine can be recovered from any
other, since git has the whole repository cloned into all machines. In
my case I have an external central repository that is backed up regularly.

Cheers,

--
Giancarlo Razzolini
GPG: 4096R/77B981BC

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]



Re: http post from base

2014-07-30 Thread Giancarlo Razzolini
On 29-07-2014 06:58, André Stöbe wrote:
> sven falempin wrote:
>> Hello,
>>
>> i got a silly question, how to post data to a server with base tools ?
>>
>> i could  nc  $DEST << EOT
>> POST /a/b HTTP/1.0
>> [..]
>> EOT
> You can use the HTTP::Tiny module that comes with Perl in base, see:
>
>   http://search.cpan.org/perldoc?HTTP::Tiny
>
> It's very easy to use. However, for cookie support you need external
> modules.
>
Since you probably need to install external tools, I suggest you try
python with the requests module. It's one of the simplest ways of
handling http stuff that I know.

Cheers,

--
Giancarlo Razzolini
GPG: 4096R/77B981BC

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]



AT cron jobs behaviour

2014-07-30 Thread def
Hi!

Say, i have set three jobs with the same -t time in format yymmddHHMM.

# at -l
1406718000.cWed Jul 30 15:00:00 2014
1406718001.cWed Jul 30 15:00:01 2014
1406718002.cWed Jul 30 15:00:02 2014

Q1: Why jobs a shifted by 1 second from each other? ID is set to be unique - 
OK, 
but why to shift the time if i need to run jobs in parallel and how to fix that?

Q2: When first job starts it really waits a 1 minute to run all the next jobs.
So second and third job will start at 15:01:01 and 15:01:02!


--



Re: Immediately resumes after hibernate

2014-07-30 Thread Mike Larkin
On Tue, Jul 29, 2014 at 10:14:40AM -0400, Elijah Buck wrote:
> I have a whitebox desktop with a Biostar TH55B HD motherboard.  Hibernate
> (via ZZZ) works great, as does resume. However, when hibernating, the
> system briefly powers off and then immediately starts back up. The issue
> occurs both on 5.5 amd64 and 5.6-beta (Jul 27) amd64. I tried setting the
> BIOS to use ACPI v1.0, v2.0, v3.0 with no effect. I tried removing usb
> devices, in case they were waking the system. Hibernate in Windows 8.1
> works.
> 
> What might the problem be?

I've got a machine with the same symptoms with very similar hardware.
It doesn't fire any GPEs on resume, and the fixed function buttons aren't
set either. So the reason for resume is still a mystery. 

1. Please send an acpidump.

2. In dev/acpi/acpi.c, try commenting out the following line:

acpi_enable_wakegpes(sc, state);

... in my tree that's on line 2157. Note there are two occurrences of that
line of code, you want to comment out the one in acpi_sleep_state and not
acpi_powerdown. Then rebuild/reinstall the kernel and see if ZZZ works -
that change will disable the wake devices

-ml

> 
> Thanks, Elijah
> 
> dmesg below (for the snapshot I am now running):
> 
> OpenBSD 5.6-beta (GENERIC.MP) #305: Sun Jul 27 19:02:25 MDT 2014
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 8530690048 (8135MB)
> avail mem = 8294817792 (7910MB)
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xfc620 (66 entries)
> bios0: vendor American Megatrends Inc. version "080015" date 10/15/2010
> bios0: BIOSTAR Group TH55B HD
> acpi0 at bios0: rev 0
> acpi0: sleep states S0 S1 S4 S5
> acpi0: tables DSDT FACP APIC MCFG OEMB SSDT
> acpi0: wakeup devices P0P1(S4) P0P3(S4) P0P4(S4) P0P5(S4) P0P6(S4) BR1E(S4) 
> UAR1(S4) PS2K(S4) PS2M(S4) EUSB(S4) USB0(S4) USB1(S4) USB2(S4) USB3(S4) 
> USBE(S4) USB4(S4) [...]
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, 2745.42 MHz
> cpu0: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> cpu0: apic clock running at 137MHz
> cpu0: mwait min=64, max=64, C-substates=0.2.1.1.0, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, 2745.04 MHz
> cpu1: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 0, core 1, package 0
> cpu2 at mainbus0: apid 4 (application processor)
> cpu2: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, 2745.04 MHz
> cpu2: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
> cpu2: 256KB 64b/line 8-way L2 cache
> cpu2: smt 0, core 2, package 0
> cpu3 at mainbus0: apid 6 (application processor)
> cpu3: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, 2745.04 MHz
> cpu3: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
> cpu3: 256KB 64b/line 8-way L2 cache
> cpu3: smt 0, core 3, package 0
> ioapic0 at mainbus0: apid 7 pa 0xfec0, version 20, 24 pins
> ioapic0: misconfigured as apic 1, remapped to apid 7
> acpimcfg0 at acpi0 addr 0xe000, bus 0-255
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (P0P4)
> acpiprt2 at acpi0: bus 5 (BR1E)
> acpiprt3 at acpi0: bus 2 (BR20)
> acpiprt4 at acpi0: bus -1 (BR22)
> acpiprt5 at acpi0: bus -1 (BR23)
> acpiprt6 at acpi0: bus 3 (BR24)
> acpiprt7 at acpi0: bus 4 (BR25)
> acpiprt8 at acpi0: bus -1 (BR26)
> acpiprt9 at acpi0: bus -1 (BR27)
> acpicpu0 at acpi0: C3, C2, C1, PSS
> acpicpu1 at acpi0: C3, C2, C1, PSS
> acpicpu2 at acpi0: C3, C2, C1, PSS
> acpicpu3 at acpi0: C3, C2, C1, PSS
> acpitz0 at acpi0: critical temperature is 85 degC
> acpibtn0 at acpi0: SLPB
> acpibtn1 at acpi0: PWRB
> cpu0: Enhanced SpeedStep 2745 MHz: speeds: 2668, 2667, 2533, 2400, 2267, 
> 2133, 2000, 1867, 1733, 1600, 1467, 1333, 1200 MHz
> pci0 at mainbus0 bus 0
> pchb0 at pci0 dev 0 function 0 "Intel Core DMI" rev 0x11
> ppb0 at pci0 dev 3 function 0 "Intel Core PCIE" rev 0x11
> pci1 at ppb0 bus 1
> radeondrm0 at pci1 dev 0 function 0 "ATI Radeon HD 5750" rev 0x00