Problem booting OpenBSD/amd64 with LSI MegaRAID card

2017-12-01 Thread Shane Harbour

Hello,
I'm running into a problem when I try to boot the OpenBSD install disc 
with an LSI Logic MegaRAID SAS 9240-8i (mfi driver) card installed in 
the machine.  I take the card out and it boots just fine from the disc, 
but I get the following panic with the RAID card in:


---
boot>
cannot open cd0a:/etc/random.see: No such file or directory
booting cd0a:/6.2/amd64/bsd.rd: 3371132+1459200+3873512+0+598016 
[373741+82+427200+282103]=0x9e99c0

entry point at 0x1000158
panic: init_x86_64: can't find end of memory

The operating system has halted.
Please press any key to reboot.
---

The card is in an Intel Core 2 Quad system with 8GB of RAM. It has two 
logical drives, one in RAID5 and another in RAID1.


Any help getting past this would be much appreciated.  If more 
information is needed, please let me know.


Thanks,
Shane




Re: vmd: alpine-virt guest, clock synchronization issue

2017-10-14 Thread Shane Harbour

On 10/14/2017 13:01, x9p wrote:

Hi,

While running Alpine-virt 3.6.2 VM guest under OpenBSD 6.1 host, i noticed
the clock frequency is 2x slower on the guest machine. This can be a
problem for applications that relies on accurate time.

Even after sync clock with ntpd inside alpine-virt guest, it gets
out-of-sync a few seconds later. I get on the guest about half the clock
frequency of the host.

Anyone having similar problems?

cheers.

x9p



I've noticed the same thing on my laptop running an amd64 6.2 install. 
It was really very slow to install and slow via console and ssh now that 
I've got it running.  I just thought it was something I had done/was 
doing.  Even with ntpd running, it's now way behind.


Regards,
Shane



Using OpenBSD for Malware Analysis

2014-05-31 Thread Shane Harbour
Hi everyone,
Has anyone used OpenBSD to perform malware analysis?  I know radare2 is
in ports so was just wondering if anyone had any experience.  I know
most analysis is done using Linux distros but I'd prefer to use OpenBSD
if feasible.

Thanks,
Shane



Re: mixerctl.conf(5), mixerctl(1)

2011-10-29 Thread Shane Harbour
On 10/29/2011 10:58 AM, sc...@web.de wrote:
 In no of the above man pages stay (1) the format of mixerctl.conf
 or (2) where it must be placed. From the end of the page mixerctl.conf(5)
 I can infer /etc/mixerctl.conf is the place. Waht is the format?
 Name=value pairs separated by new lines?
 
 Rod.
 

Normally, what I do, is mixerctl  /etc/mixerctl.conf and then just
edit from there as needed.

Shane



Re: mixerctl.conf(5), mixerctl(1)

2011-10-29 Thread Shane Harbour
On 10/29/2011 01:56 PM, sc...@web.de wrote:
 Shane Harbour sh...@netsyssecurity.net wrote:
 
 Normally, what I do, is mixerctl  /etc/mixerctl.conf and then just
 edit from there as needed.
 
 OK, thanks. I suppose, mixerctl.conf is placed in /etc and consist
 of name/value pairs as in output of the comand mixerctl, I suppose
 you edit only the values changing them. I supose that I must supose
 because these man pages are not precise enought.
 
 Rod.
 

Pretty much.  All the different settings (name/value) are outputted to
the config file in /etc.  Just edit it and mixerctl will use that file
for it's config.



Re: Apache problems

2011-09-18 Thread Shane Harbour
On 9/18/2011 9:42 PM, L. V. Lammert wrote:
 On Sun, 18 Sep 2011, Amit Kulkarni wrote:
 
 Recently there was a security issue with Apache. It was based on a
 perl script, search google. Maybe you are experiencing traffic and the
 realted problems because of that.

 Is there any way to find out if the version in 4.3 was susceptable to the
 attack?
 
   Lee
 

I believe the Apache Foundation released that Apache 1.3 is susceptable
to this attack.  However, with changes made by the devs, it's possible
the version in OpenBSD may not be.

If you have a spare box, you could always load it up and test it.  I
believe there is an Apache killer perl script floating on the 'net that
you could use to test with.

Shane



Re: Apache problems

2011-09-18 Thread Shane Harbour
On 9/18/2011 10:37 PM, Rod Whitworth wrote:
 What a pity that people don't do any searching b4 asking
 
 STFA for this list and (IIRC) find links to the PoC tool amongst other
 info.
 
 
 
 On Mon, 19 Sep 2011 04:24:19 -0600, Shane Harbour wrote:
 
 On 9/18/2011 9:42 PM, L. V. Lammert wrote:
 On Sun, 18 Sep 2011, Amit Kulkarni wrote:

 Recently there was a security issue with Apache. It was based on a
 perl script, search google. Maybe you are experiencing traffic and the
 realted problems because of that.

 Is there any way to find out if the version in 4.3 was susceptable to the
 attack?

 Lee


 I believe the Apache Foundation released that Apache 1.3 is susceptable
 to this attack.  However, with changes made by the devs, it's possible
 the version in OpenBSD may not be.

 If you have a spare box, you could always load it up and test it.  I
 believe there is an Apache killer perl script floating on the 'net that
 you could use to test with.

 Shane

 
 *** NOTE *** Please DO NOT CC me. I am subscribed to the list.
 Mail to the sender address that does not originate at the list server is 
 tarpitted. The reply-to: address is provided for those who feel compelled to 
 reply off list. Thankyou.
 
 Rod/
 ---
 This life is not the real thing.
 It is not even in Beta.
 If it was, then OpenBSD would already have a man page for it.
 

My apologies for generating noise and not remembering this had been
previously discussed/answered.  Next time I'll pay more attention and
STFA :)

Shane



Re: PF and application level firewall

2008-03-11 Thread Shane Harbour
Rami Sik wrote:
 Hi All,



 I currently have PF in place with CARP, and quite happy with them. I
 need to implement application level firewalling in front of my apache
 servers as PCI requirement by the end of June this year.  So, my
 question is, do we have any application level firewalling support on
 openBSD? Or, which third part tool/application would you suggest for
 that purpose?



 Thanks,





 Rami

   
Take a look at mod_security (http://www.modsecurity.org).  There is a
port of it.

Regards,
Shane



Re: running mail server at home

2008-02-07 Thread Shane Harbour
I run all my stuff at home and even do virtual hosting for web and mail
for one of my wife's websites.  I have a separate box for mail running
postfix, dovecot, postgresql, clamd, and spamd.  It's not a beefy box
but still works  well.  Haven't really seen my electrical bill go up.  I
did have to get a server class DSL line so I could have static IPs. 
It was slightly higher but not by much.  I also pay a small fee for my
IP addresses.

Regards,
Shane

Chris wrote:
 I have a P3 box with 120GB HDD that's doing web, ssh and samba at the moment. 
 I
 am planning setup sendmail, spamd, mimedefang, clamd and spam-assassin
 on this box along with web, ssh and samba.

 I was wondering if anyone has any experience with running a mail server at 
 home.
 I want to know if I should use only one box or buy another box? Also,
 what sort of electricity bills
 will I run into? And also if is there anything else I would need to know.

 Thanks for any help.



Re: running mail server at home

2008-02-07 Thread Shane Harbour
I beg to differ.  It really depends on your ISP and how far you really
want to go.  I've run everything (DNS, mail, etc) out of my basement for
3 years now.  Granted I had to switch ISPs in order to do so and upgrade
to a server class DSL line.  They even delegated control of my reverse
DNS to me.  It's all part of a standard package they provide.

Again, it just comes down to your ISP and how far you really want to go.
 I'm sure there are quite a few on the list that do this.

Regards,
Shane


L. V. Lammert wrote:
 On Thu, 7 Feb 2008, Douglas A. Tutty wrote:
 
 On Thu, Feb 07, 2008 at 02:51:31AM -0800, Chris wrote:
 I have a P3 box with 120GB HDD that's doing web, ssh and samba at the 
 moment. I
 am planning setup sendmail, spamd, mimedefang, clamd and spam-assassin
 on this box along with web, ssh and samba.

 I was wondering if anyone has any experience with running a mail
 server at home.

 In reality, you cannot run your own mail server at home. This would
 require:
 
 1) DNS resolution for your domain name
 2) Appropriate MX records
 3) Valid REVERSE DNS for your IP
 
 #3 is usually the big factor for most ISPS, without it, you will not be
 able to send email to any 'sane' mail server.
 
   Lee
 
 
   Leland V. Lammert[EMAIL PROTECTED]
 Chief Scientist Omnitec Corporation
  Network/Internet Consultants   www.omnitec.net
 



Re: nfe0 problem (obsd 4.1)

2007-06-24 Thread Shane Harbour
I have one of the older Sun Ultra 20 systems that also has an nfe(4) in 
it.  It does the same thing everytime I try to cvs or put a load on the 
interface.  Only way around it was to install a second NIC.  Like 
someone else mentioned before, until more documentation is available, 
probably won't get any better.  Until then it won't bother me to run a 
second NIC.


Regards,
Shane

patrick keshishian wrote:

Hi,

I've been noticing some strange problems with the built-in nfe0
interface on my desktop.  Actually I've seen it on two such
computers, but the description below is for my current desktop PC.

The PC is running `cvs up -dP -rOPENBSD_4_1' built. I'm including
netstat, ifconfig output[1] and dmesg below[2].

I've noticed that once in a while the nfe0 interface will stop
sending and receiving data.  At this point I can not make it work
again.  The only solution I have is to reboot the box.  I have
installed a dc0 card in the box since.  The problem seemed
intermittent and not reliably reproducible.  But I think I found
a way to reproduce this problem on demand (at least for the time
being).  I have an ssh session to another box, on which I run
'/usr/bin/nm somelib.so'.  After a page or two of output the
terminal hangs.  At this point nfe0 becomes unresponsive.

I switch to the dc0 interface and the terminal finishes the output.
Running the nm command while using the dc0 interface doesn't cause
any problems.

Interestingly enough, if I redirect the output of nm to a file
and subsequently cat the file the nfe0 interface doesn't seem
to exhibit the same problem.

I am not sure how to diagnose this problem further.  I've enabled
debug on the nfe0 interface (/sbin/ifconfig nfe0 debug), but don't
see any output.

Any and all suggestions are welcome.
--patrick

[1] netstat and ifconfig outputs:
$ /usr/bin/netstat -in
NameMtu   Network Address  Ipkts IerrsOpkts 
Oerrs Colls
lo0 33224 Link   1 0
1 0 0
lo0 33224 127/8   127.0.0.11 0
1 0 0
lo0 33224 ::1/128 ::1  1 0
1 0 0
lo0 33224 fe80::%lo0/ fe80::1%lo0  1 0
1 0 0
dc0 1500  Link  00:02:e3:07:cc:df 1713 0  
424 7 0
dc0 1500  fe80::%dc0/ fe80::202:e3ff:fe 1713 0  
424 7 0
nfe01500  Link  00:16:e6:82:17:da 1520   613  
878 0 0
nfe01500  fe80::%nfe0 fe80::216:e6ff:fe 1520   613  
878 0 0
nfe01500  xx.yy.ww.zz xx.yy.ww.zz2  1520   613  
878 0 0
pflog0  33224 Link   0 0
0 0 0
enc0*   1536  Link   0 0
0 0 0


$ /usr/bin/netstat -rnfinet
Routing tables

Internet:
DestinationGatewayFlagsRefs  UseMtu  
Interface
defaultxx.yy.ww.zz9   UGS 00  -   
nfe0
xx.yy.ww.zz8/28link#2 UC  40  -   
nfe0
xx.yy.ww.zz9   00:20:6f:03:a2:e5  UHLc10  -   
nfe0
xx.yy.ww.zz1   link#2 UHLc02  -   
nfe0
xx.yy.ww.zz3   00:01:02:c2:a1:b9  UHLc1  159  -   
nfe0
xx.yy.ww.zz0   00:20:e0:68:5d:c8  UHLc1   11  - L 
nfe0

127/8  127.0.0.1  UGRS00  33224   lo0
127.0.0.1  127.0.0.1  UH  10  33224   lo0
224/4  127.0.0.1  URS 00  33224   lo0


$ /sbin/ifconfig
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33224
   groups: lo
   inet 127.0.0.1 netmask 0xff00
   inet6 ::1 prefixlen 128
   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
   lladdr 00:02:e3:07:cc:df
   media: Ethernet autoselect (none)
   status: no carrier
   inet6 fe80::202:e3ff:fe07:ccdf%dc0 prefixlen 64 scopeid 0x1
nfe0: flags=8847UP,BROADCAST,DEBUG,RUNNING,SIMPLEX,MULTICAST mtu 1500
   lladdr 00:16:e6:82:17:da
   groups: egress
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
   inet6 fe80::216:e6ff:fe82:17da%nfe0 prefixlen 64 scopeid 0x2
   inet xx.yy.ww.zz2 netmask 0xfff0 broadcast xx.yy.ww.zz3
pflog0: flags=141UP,RUNNING,PROMISC mtu 33224
enc0: flags=0 mtu 1536



[2] dmesg
OpenBSD 4.1-stable (GENERIC) #0: Mon May 28 18:06:28 PDT 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) 64 Processor 3200+ (AuthenticAMD 686-class, 
512KB L2 cach

e) 2.02 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CF 


LUSH,MMX,FXSR,SSE,SSE2,SSE3
cpu0: AMD erratum 89 present, BIOS upgrade may be required
real mem  = 536375296 (523804K)
avail mem = 481710080 (470420K)
using 4278 buffers containing 26943488 bytes (26312K) of 

Re: Hardware Compatibility: Sun Ultra 20 or better suggestion

2007-05-03 Thread Shane Harbour

Edd Barrett wrote:

On 5/3/07, Edd Barrett [EMAIL PROTECTED] wrote:

Hi Shane,
Superb! I dont mind putting another NIC in, but I would hope that this
is resolved in newer models.


Oh, the other thing was, these usually ship with ATI/Nvidea graphics
cards. I couldnt care less for 3d accelleration, as long as I can run
X reasonably well.

Are you running X?

Yes I am.  I did have it setup with the on-board graphics and it worked 
great even with 8MB of video RAM.  However, I did put an NVIDIA PCI 
Express card in later since it was free :)




Re: Hardware Compatibility: Sun Ultra 20 or better suggestion

2007-05-02 Thread Shane Harbour
I'm running -current on one of the older Ultra 20's and it works well 
for me.  It's been a while since I've actually sat down and played with 
it, but most stuff is supported out of the box.  I did have to put a 
different NIC in mine though.  The built in nfe kept locking up during 
long transfers (like cvs updates) and I haven't had time to track down 
the issue.  Here's the dmesg from my machine:


OpenBSD 4.1-current (GENERIC) #3: Thu Apr 26 19:42:58 MDT 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 1072136192 (1047008K)
avail mem = 906833920 (885580K)
using 22937 buffers containing 107421696 bytes (104904K) of memory
mainbus0 (root)
bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (41 entries)
bios0: Sun Microsystems Sun Ultra 20 Workstation
acpi at mainbus0 not configured
ipmi0 at mainbus0: reserve send fails
cpu0 at mainbus0: (uniprocessor)
cpu0: AMD Opteron(tm) Processor 144, 1809.48 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB 
64b/line 16-way L2 cache

cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: Cool'n'Quiet K8 1809 MHz: speeds: 1800 1000 MHz
cpu0: AMD erratum 89 present, BIOS upgrade may be required
pci0 at mainbus0 bus 0: configuration mode 1
NVIDIA nForce4 DDR rev 0xa3 at pci0 dev 0 function 0 not configured
pcib0 at pci0 dev 1 function 0 NVIDIA nForce4 ISA rev 0xa3
nviic0 at pci0 dev 1 function 1 NVIDIA nForce4 SMBus rev 0xa2
iic0 at nviic0
adt0 at iic0 addr 0x2e: sch5017 rev 0x89
iic1 at nviic0
adt1 at iic1 addr 0x2e: sch5017 rev 0x89
ohci0 at pci0 dev 2 function 0 NVIDIA nForce4 USB rev 0xa2: irq 7, 
version 1.0, legacy support

ehci0 at pci0 dev 2 function 1 NVIDIA nForce4 USB rev 0xa3: irq 5
usb0 at ehci0: USB revision 2.0
uhub0 at usb0
uhub0: NVIDIA EHCI root hub, rev 2.00/1.00, addr 1
uhub0: 8 ports with 8 removable, self powered
auich0 at pci0 dev 4 function 0 NVIDIA nForce4 AC97 rev 0xa2: irq 11, 
nForce4 AC97

ac97: codec id 0x414c4760 (Avance Logic ALC655 rev 0)
audio0 at auich0
pciide0 at pci0 dev 6 function 0 NVIDIA nForce4 IDE rev 0xf2: DMA, 
channel 0 configured to compatibility, channel 1 configured to compatibility

atapiscsi0 at pciide0 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: LITE-ON, DVD SOHD-16P9S, F3S2 SCSI0 
5/cdrom removable

cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
pciide1 at pci0 dev 7 function 0 NVIDIA nForce4 SATA rev 0xf3: DMA
pciide1: using irq 11 for native-PCI interrupt
wd0 at pciide1 channel 0 drive 0: HDS728080PLA380
wd0: 16-sector PIO, LBA48, 78533MB, 160836480 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5
pciide2 at pci0 dev 8 function 0 NVIDIA nForce4 SATA rev 0xf3: DMA
pciide2: using irq 10 for native-PCI interrupt
ppb0 at pci0 dev 9 function 0 NVIDIA nForce4 PCI-PCI rev 0xa2
pci1 at ppb0 bus 1
VIA VT6306 FireWire rev 0x80 at pci1 dev 6 function 0 not configured
dc0 at pci1 dev 10 function 0 ADMtek AN983 rev 0x11: irq 5, address 
00:0c:41:1c:7f:7b
ukphy0 at dc0 phy 1: Generic IEEE 802.3u media interface, rev. 1: OUI 
0x000749, model 0x0001
nfe0 at pci0 dev 10 function 0 NVIDIA CK804 LAN rev 0xa3: irq 10, 
address 00:e0:81:5a:c7:8c

eephy0 at nfe0 phy 1: Marvell 88E Gigabit PHY, rev. 2
ppb1 at pci0 dev 11 function 0 NVIDIA nForce4 PCIE rev 0xa3
pci2 at ppb1 bus 2
ppb2 at pci0 dev 12 function 0 NVIDIA nForce4 PCIE rev 0xa3
pci3 at ppb2 bus 3
ppb3 at pci0 dev 13 function 0 NVIDIA nForce4 PCIE rev 0xa3
pci4 at ppb3 bus 4
ppb4 at pci0 dev 14 function 0 NVIDIA nForce4 PCIE rev 0xa3
pci5 at ppb4 bus 5
vga1 at pci5 dev 0 function 0 vendor NVIDIA, unknown product 0x0160 
rev 0xa1

wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pchb0 at pci0 dev 24 function 0 AMD AMD64 HyperTransport rev 0x00
pchb1 at pci0 dev 24 function 1 AMD AMD64 Address Map rev 0x00
pchb2 at pci0 dev 24 function 2 AMD AMD64 DRAM Cfg rev 0x00
pchb3 at pci0 dev 24 function 3 AMD AMD64 Misc Cfg rev 0x00
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
usb1 at ohci0: USB revision 1.0
uhub1 at usb1
uhub1: NVIDIA OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 8 ports with 8 removable, self powered
uhidev0 at uhub1 port 5 configuration 1 interface 0
uhidev0: Sun Microsystems Type 6 Keyboard, rev 1.10/2.00, addr 2, iclass 3/1
ukbd0 at uhidev0: 8 modifier keys, 6 key codes, layout 33
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
uhidev1 at uhub1 port 6 configuration 1 interface 0
uhidev1: Raptor Gaming PS/2+USB Mouse, rev 

Re: xenocara in /usr/src can cause problems ?

2007-04-16 Thread Shane Harbour
Something went wrong when you pulled the tree down.  Last I checked 
xenocara should be under /usr like XF4 is and not under your src 
directory.  /usr/src should only contain the kernel and userland for the 
base system.  Someone correct me if I'm wrong.


Shane

Cedric Brisseau wrote:

Hi all,

I follow current and it seems to me strange that xenocara is under
/usr/src. I have my src tree in /usr/src and xenocara in
/usr/src/xenocara. So when I update my src tree with cvs it seems that
I have problems : on one computer (src tree originally from CD) cvs
never finish and on an other (src tree from a cvs mirror) the command
:

# cd /usr/src
# cvs -d $CVSROOT -q up -Pd

Cvs update xenocara tree :
P share/man/man4/Makefile
U share/man/man4/nx.4
P share/man/man4/tht.4
P sys/dev/pci/files.pci
U sys/dev/pci/if_nx.c
U sys/dev/pci/if_nxreg.h
P sys/dev/pci/if_tht.c
P xenocara/app/fvwm/extras/FvwmScript/FvwmScript.1
P xenocara/app/fvwm/modules/FvwmSaveDesk/FvwmSaveDesk.1

I wonder if it's intended.

Kind regards,
Cedric




Re: Mail Server (seeking recommendations)

2007-04-15 Thread Shane Harbour
I'm running Postfix/Dovecot with PostgreSQL (for authorization and mail 
routing) all from the ports.  I've got it setup so that in the near 
future I can do virtual hosting of my wife's domains.  It's pretty 
simple to setup and there is a examples at postfix.org and dovecot.org.  
It would be easy enough to right a script (pick your language) or setup 
a GUI application/web page to administer user accounts.


Shane

Stuart Henderson wrote:

On 2007/04/15 14:06, Bryan Vyhmeister wrote:
  
This is exactly why I have hesitated to move to a system based on  
postfix and dovecot for my main ISP mail server.



This pair are pretty easy. Postfix (also more recent Exim versions) can
look at Dovecot for smtp-auth; Dovecot's auth setup is quite simple and
flexible.

  

My staff needs to be able to add accounts easily and unfortunately,
the command line is not that easy for them.  



BSD auth, ldap, sql, text files - take your pick... There's also
dovecot-sieve if you need server-side filtering.

One thing to note if you use milters, Postfix milter support is not
based on libmilter; building milter apps on a box with Sendmail 8.14
installed will result in breakage when run against Postfix until
Postfix milter support is updated unless you take extra care.




Re: OpenNTPD reliability

2007-03-25 Thread Shane Harbour
My apologies...you are right.  Wasn't paying attention.  I use -s on 
all of my servers to keep them updated.  I hate having them off by a lot 
and am too impatient to wait for them to slowly sync themselves.


Regards,
Shane

Luca Corti wrote:

On Fri, 2007-03-23 at 15:14 -0600, Shane Harbour wrote:
  

Look at the -S option and see if that's what you want.



I think you mean -s. Yes I use it but still the clients report they
won't sync because of the server not being synced.

ciao

Luca




Re: OpenNTPD reliability

2007-03-23 Thread Shane Harbour

man ntpd

Look at the -S option and see if that's what you want.

Luca Corti wrote:

Hello,

I've set up OpenNTPD 3.9p1 on Linux with a couple of servers to sync to
and listen on to sync my machines to OpenNTPD. Clients (some openntpds,
some ntpds, some Cisco routers) refuse to sync to my server. OpenNTPD on
a client reports my OpenNTPD server is not synced.

This is not documented in the manuals, but googling a bit I found out
that OpenNTPD takes quite a lot of time to sync its clock to the
servers. Is there a way to obtain a reliable and fast syncing?

I heard about timedelta sensors. Are these devices supported by openntpd
when running on linux?

thanks

Luca




Re: trouble making an X release

2007-03-06 Thread Shane Harbour
From the looks of it, you didn't install the XF4 source package or get 
them from CVS.


Peter wrote:

I am following FAQ 5.5 on building an X release (for my 4.0 system).

I have successfully made the base system release but when following the 
below steps I get the error:


lndir: ../XF4: No such file or directory
make: don't know how to make build. Stop in /usr/Xbld.
make: don't know how to make release. Stop in /usr/Xbld.

I manually created the XF4 directory but it still didn't work:

make: don't know how to make build. Stop in /usr/Xbld.
make: don't know how to make release. Stop in /usr/Xbld.

What am I missing?



# rm -rf /usr/Xbld
# mkdir -p /usr/Xbld
# cd /usr/Xbld 
# lndir ../XF4

# make build
# export DESTDIR=/usr/Xbld/dest
# export RELEASEDIR=/usr/Xbld/rel
# cd /usr/Xbld
# rm -rf dest
# mkdir dest rel
# make release




Re: OpenBSD Web Mail Security

2006-11-01 Thread Shane Harbour
If you don't want to run PHP, you could run OpenWebMail.  It's written 
in Perl or you could roll your own.  Courier also has it's own web-based 
software.  Personally, I run Dovecot, Postfix, SquirrelMail and use 
PostgreSQL for virtual mailboxes.  I was running Cyrus and liked it, but 
found it was too heavy for my needs (may not be for your's).  Dovecot 
works out better for me and I've found my current setup to be somewhat 
faster than the old setup.   It all depends on your needs and there are 
ways of mitigating (however not eliminating) PHP's security issues.


Shane

Sam Fourman Jr. wrote:

Hello all,

I was thinking of using OpenBSD for a Groupware Mail server, I see
horde has a OpenBSD port however it is written in PHP, I am aware of
the security concerns that PHP in general presents

wile not having delt with Horde or any of it's applications in the
past, is it safe to assume that the normal php security flaws are
present in Horde? if so I would like to gather general opinions on
alternatives for Microsoft Exchange(YUCK!!) like Groupware.


Opinions are always helpful

Sam Fourman Jr.




SMP and ichiic Error

2006-07-08 Thread Shane Harbour

Hello all,
I'm having the following error on my SMP system:

   ichiic0: timeout, status 0x0
   ichiic0: transaction abort failed, status 0x40INUSE

   (ichiic0 = Intel 82801CA/SMBus)

Everything I have found in the archives points to a hyperthreading 
issue.  When the issue first appeared, HT was turned off.  I've also 
tried changing the MP Spec in the BIOS.  I've tried the following 4 combos:


   MP Spec: 1.1/HT: Off
   MP Spec: 1.1/HT: On
   MP Spec: 1.4/HT: Off
   MP Spec: 1.4/HT: On

No matter the combo, I still get the same error.  I would prefer not to 
disable ichiic* in the kernel config, but will do so if necessary.  
Below is a dmesg from the system (MP Spec: 1.4/HT: Off) with MPVERBOSE 
set in the kernel config.  I'm hoping I just missed something and that 
it is easily corrected.


Thanks for your help,
Shane

OpenBSD 3.9-stable (GENERIC.MP) #2: Sat Jul  8 17:54:58 MDT 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) XEON(TM) CPU 1.80GHz (GenuineIntel 686-class) 1.80 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM
real mem  = 1073258496 (1048104K)
avail mem = 972566528 (949772K)
using 4278 buffers containing 53764096 bytes (52504K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(8a) BIOS, date 10/02/02, BIOS32 rev. 0 @ 0xfb1b0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xdf84
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfde70/272 (15 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11 12
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371SB ISA rev 0x00)
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc/0xa800 0xcc000/0x1800 0xce000/0x6600
mainbus0: scanning 0x9f800 to 0x9fbf0 for MP signature
mainbus0: scanning 0xf to 0x0 for MP signature
mainbus0: MP floating pointer found in bios at 0xf4f00
mainbus0: MP config table at 0xf1400, 332 bytes long
mainbus0: Intel MP Specification (Version 1.4) (OEM0 PROD)
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: calibrating local timer
cpu0: apic clock running at 99 MHz
cpu0: kstack at 0xe9059000 for 8192 bytes
cpu0: idle pcb at 0xe9059000, idle sp at 0xe905af98
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) XEON(TM) CPU 1.80GHz (GenuineIntel 686-class) 1.80 GHz
cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV
cpu1: kstack at 0xe905b000 for 8192 bytes
cpu1: idle pcb at 0xe905b000, idle sp at 0xe905cf98
mainbus0: bus 0 is type PCI   
mainbus0: bus 1 is type PCI   
mainbus0: bus 2 is type PCI   
mainbus0: bus 3 is type PCI   
mainbus0: bus 4 is type PCI   
mainbus0: bus 5 is type ISA   
ioapic0 at mainbus0: apid 4 pa 0xfec0, virtual wire mode, version 20, 24 pins

ioapic1 at mainbus0: apid 5 pa 0xfec8, virtual wire mode, version 20, 24 
pins
ioapic2 at mainbus0: apid 6 pa 0xfec80400, virtual wire mode, version 20, 24 
pins
ioapic0: int17 attached to pci0 device 31 INT_B (type 0x0 flags 0xf)
ioapic0: int19 attached to pci0 device 29 INT_B (type 0x0 flags 0xf)
ioapic0: int16 attached to pci0 device 29 INT_A (type 0x0 flags 0xf)
ioapic0: int19 attached to pci4 device 5 INT_A (type 0x0 flags 0xf)
ioapic2: int0 attached to pci2 device 9 INT_A (type 0x0 flags 0xf)
ioapic0: int18 attached to pci4 device 4 INT_A (type 0x0 flags 0xf)
ioapic0: int16 attached to pci4 device 6 INT_A (type 0x0 flags 0xf)
ioapic0: int16 attached to pci0 device 31 INT_A (type 0x0 flags 0xf)
ioapic0: int0 attached to ExtINT (type 0x3 flags 0x0)
ioapic0: int1 attached to isa0 irq 1 (type 0x0 flags 0x0)
ioapic0: int2 attached to isa0 irq 0 (type 0x0 flags 0x0)
ioapic0: int3 attached to isa0 irq 3 (type 0x0 flags 0x0)
ioapic0: int4 attached to isa0 irq 4 (type 0x0 flags 0x0)
ioapic0: int6 attached to isa0 irq 6 (type 0x0 flags 0x0)
ioapic0: int7 attached to isa0 irq 7 (type 0x0 flags 0x0)
ioapic0: int8 attached to isa0 irq 8 (type 0x0 flags 0x5)
ioapic0: int9 attached to isa0 irq 9 (type 0x0 flags 0x0)
ioapic0: int13 attached to isa0 irq 13 (type 0x0 flags 0x0)
ioapic0: int14 attached to isa0 irq 14 (type 0x0 flags 0x0)
ioapic0: int15 attached to isa0 irq 15 (type 0x0 flags 0x0)
local apic: int0 attached to ExtINT (type 0x3 flags 0x0)
local apic: int1 attached to NMI (type 0x1 flags 0x0)
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel E7500 MCH Host rev 0x03
ppb0 at pci0 dev 2 function 0 Intel E7500 MCH rev 0x03
pci1 at ppb0 bus 1
Intel 82870P2 IOxAPIC rev 0x04 at pci1 dev 28 function 0 not configured
ppb1 at pci1 dev 29 function 0 Intel 82870P2 PCI-PCI rev 0x04
pci2 at ppb1 bus 2
em0 at pci2 dev 9 function 0 Intel PRO/1000XT (82544GC) rev 0x02: apic 6 int 
0 (irq 12), address 00:10:dc:f4:d5:a8
Intel 82870P2 IOxAPIC rev 0x04 at pci1 dev 30 function 0 not configured
ppb2 at pci1 dev 31 function 0 Intel 82870P2 PCI-PCI rev 0x04
pci3 at ppb2 bus 3
uhci0 at