NAT66 with temporary address

[Steven Mestdagh]

I was trying to use NAT66, from some internal subnets to my IPv6
internet address, using the following line with 5.9 release.

match out on $intout inet6 from !(egress:network) to any nat-to ($intout:0)

The last part expands to the link local address of the interface, which
is the first address but not really useful for NAT.
I would like it to use the relevant temporary address set by autoconf.
Is there a way to specify this? Maybe we would need additional modifiers for it?

Re: Halt -p on amd64

[Steven Mestdagh]

Jordi Espasa Clofent [2008-02-14, 10:35:45]:
> Hi all,
>
> 'halt -p' doesn't work fine in amd64; if you execute this command, the box 
> remains waiting you press a key to make a reboot. And the last goal is 
> obviously to make a complete power off.
>
> I've activated the acpi support in boot (boot -c; enable acpi) without 
> success.
>
> Moreover, I read in man reboot(8):
>
>  -p  Causes the system to power down, if it is being halted, and 
> the hardware supports automatic power down.  (Currently supported on some 
> i386, luna88k, mac68k, macppc, sparc, sparc64 and zaurus platforms.)
>
> ?Is there some develop effort to include this feature in amd64?

You forgot to say which version of OpenBSD you're using.
halt -p works fine on my amd64 using -current.

Re: MacBook remote control

[Steven Mestdagh]

Richard Storm [2007-11-11, 00:03:37]:
> Hello!
> I have macbook:
> hw.model=Intel(R) Core(TM)2 CPU T7400 @ 2.16GHz
> hw.vendor=Apple Inc.
> hw.product=MacBook2,1
> hw.version=1.0
> 
> On http://wiki.freebsd.org/AppleMacbook "IR receiver" section there is
> tool available at http://fnop.net/~rpaulo/priv/freebsd/aird.tgz.
> 
> Here is patch that makes it compile/work under openbsd with my macbook
> and remote control.
> 
> Ignore manpage, run like this:
> ./aird -vd -f /dev/uhid1 -M "echo menu" -P "echo play" -F "echo
> forward" -B "echo backward" -U "echo volumeup" -D "echo volumedown"

works nicely on my macbook.  maybe this can be added to the ports tree?

request for new [nl] translators of OpenBSD's web pages

[Steven Mestdagh]

hi,

As you might know, the OpenBSD web pages are translated in a number of
different languages as explained on
http://www.openbsd.org/translation.html

Currently, the [nl] translation team, consisting of Jasper and myself,
is looking for new contributors who can maintain the existing translation
or even add new translated pages.

To get an idea of what this work involves, please read
http://www.openbsd.org/translation-explained.html

If you are interested in contributing to OpenBSD this way, please
contact me by private mail.

steven

Re: java on openbsd 4.0?

[steven mestdagh]

Gustavo Rios [2007-01-09, 13:37:37]:
> Is it possible to build jdk;java directly from openbsd: I always
> believed i had to "install" linux emulation first.

if something is unclear about the section 'Building the Sun JDK' in
FAQ 8, please let us know what it is.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: 4.0 and64 ogg123 Error: Cannot open device sun.

[steven mestdagh]

Siju George [2007-01-09, 21:25:26]:
> Hi,
> 
> Just wondering how people on amd64 architecture are playing ogg files.
> 
> Mplayer plays but no sound output.
> XMMS plays the file but the output is very fast and sounds llike caroon :-)
> ogg123 gives this error while following
> http://www.openbsd.org/faq/faq13.html#playaudio
> 
> 
> $ ogg123 -d sun bsdtalk090.ogg
> 
> Audio Device:   Sun audio driver output
> 
> Playing: bsdtalk090.ogg
> Ogg Vorbis stream: 1 channel, 44100 Hz
> Error: Cannot open device sun.

maybe you can drop the -d sun from the above command?

providing a dmesg could be useful, as well as the output of 'mixerctl -a'.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: automatic packages upgrade from ports

[steven mestdagh]

fv [2006-12-12, 19:29:45]:
> >pkg_add -ui does what you want to do. (No, it doesn't go to ports, but
> >you shouldn't, especially not if you must ask how to do this.)
> >
> > Joachim
> >
> I just would like to maintain a local up-to-date package database 
> compiled from ports so i can dot periodicaly:
> PKG_PATH=/usr/ports/packages/sparc64/All/
> pkg_add -ui
> 
> It's like a bulk build, but only for packages installed on my box.
> I don't why i should not do this as it's what is done on the openbsd 
> main site but for all packages...

sounds like you want to build a SUBDIRLIST with pkg_info(1).

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: links in the OpenBSD FAQs

[steven mestdagh]

Igor Sobrado [2006-12-07, 20:29:23]:
> Attached is the first draft of the patch.  Once it has been debugged
> I will open a bug report on it.  Please, check carefully all the entries
> in the patch and do not trust on my English skills.  Some suggestions:
> 
>   - replacing references to threads in the mailing lists (now the
> thread subject) for its exact reference.  There is a risk for
> two threads having the same subject.
> 
>   - there are some manual pages references (in the form command(section))
> that are no links.  Should these references to man pages be links?
> diff -urNp www/faq1.html www.new/faq1.html
> --- www/faq1.html 2006-12-07 17:05:55.0 +0100
> +++ www.new/faq1.html 2006-12-07 18:55:51.0 +0100
> @@ -275,7 +275,8 @@ Theo de Raadt, located in Canada.
>  
>  The OpenBSD team makes a new release every six months, with target release
>  dates in May and November.  More information on the development cycle 
> -can be found here.
> +can be found in the OpenBSD's Flavors
> +subsection of this FAQ.
>  
>  
>  1.8 - What is included with OpenBSD?
> @@ -362,7 +363,7 @@ Of course, additional applications can b
>  
>  
>  The complete list of changes made to OpenBSD 3.9 to create OpenBSD 4.0
> -can be found here, however here are a few
> +can be found in the OpenBSD 4.0 changes list, 
> however here are a few
>  changes the OpenBSD team anticipate will require or warrant some special
>  note to people upgrading or installing OpenBSD 4.0 who are familiar with
>  older versions:
> diff -urNp www/faq12.html www.new/faq12.html
> --- www/faq12.html2006-12-07 17:05:55.0 +0100
> +++ www.new/faq12.html2006-12-07 19:02:48.0 +0100
> @@ -546,7 +546,7 @@ Yes!
>  

>  The http://simh.trailing-edge.com/">SIMH
>  VAX simulator
>  can be used to effectively emulate a real VAX.
> -Instructions can be found  href="../vax-simh.html">here.
> +Instructions can be found in the  href="../vax-simh.html">OpenBSD/vax on the SIMH VAX 
> simulator URL.
>  
>  
>  

> @@ -564,4 +564,4 @@ Instructions can be found   $OpenBSD: faq12.html,v 1.79 2006/11/01 03:07:32 nick Exp 
> $
>  
>  
> -
> \ No newline at end of file
> +
> diff -urNp www/faq13.html www.new/faq13.html
> --- www/faq13.html2006-12-07 17:05:55.0 +0100
> +++ www.new/faq13.html2006-12-07 20:10:58.0 +0100
> @@ -915,8 +915,8 @@ with normal DVD players.
>  

>  The important thing is you use media which suit your DVD writer.
>  If you expect compatibility with other DVD players, watch your step and
> -be sure to read
> -http://www.dvddemystified.com/dvdfaq.html#4.3.1">this
>  section
> +be sure to read the
> +http://www.dvddemystified.com/dvdfaq.html#4.3.1">compatibility
>  problems section
>  of the DVD FAQ.

seriously, i don't know how you are doing this, but it sure does not
look like a diff against our cvs.

furthermore, saad@ already started replacing "here" links and such a
while back, but even though it was reviewed by a few people, somehow it
never got into the tree.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Missing section in FAQ - 6 Networking ?

[steven mestdagh]

Bruno Carnazzi [2006-09-03, 16:49:45]:
>  Hi misc,
> 
> There is a numbering problem or a missing section in FAQ - 6
> Networking : http://www.openbsd.org/faq/faq6.html#6.8

it's a section that has been removed. afaik, the numbering is preserved
because of possible references to the articles. a new article may be
inserted there in the future.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pkg_add

[steven mestdagh]

Andris [2006-07-21, 09:09:45]:
> I do this when I know the package name:
> 
> 1. ftp $PKG_PATH
> 
> 2. ls kdel*
> 
> -r--r--r--  1 100  100  20614454 Mar  4 18:38 kdelibs-3.5.1p0.tgz
> 
> 3. bye
> 
> 4. sudo pkg_add kdelibs-3.5.1p0.tgz

you could just use

pkg_add -i kdelibs

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Icecast manual page

[steven mestdagh]

Karel Kulhavy [2006-07-17, 16:53:40]:
> Hello
> 
> After pkg_add icecast 2.3.1 into OpenBSD 3.9 I realized there is no manual
> page. No man icecast, although there is an executable called icecast.
> Also no info icecast.
> 
> I suggest that this manpage is added if one exists, or at least a dummy one
> which points to the URL and says that the original project doesn't have one.

Next to man pages, other forms of ports documentation are installed into
/usr/local/share/doc/.  You will find icecast documentation there.
If you want a man page, I suggest you contact the icecast authors...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Upgrading questions

[steven mestdagh]

Joachim Schipper [2006-07-04, 15:13:35]:
> Several Java implementations are in ports; Sun Java works on i386 only,
> I believe.

kurt has enabled jdk 1.5 on amd64 as well some time ago (-current only).

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pkg_add -u not working

[steven mestdagh]

[EMAIL PROTECTED] [2006-06-20, 18:41:09]:
> *my oppinion*
> There are not so many updates in the STABLE-Branch so I realy don`t
> understand why nobody can spend 3hrs of Compiling (a day, in the night,
> even developers have to speel :)) ) STABLE Packages (just the updated
> software! Not ALL Packages..).
> It`s realy something I can`t understand if it deals with the great idea of
> pkg_add -ui.
> */my oppinion*

we need a machine for this. see the recent story on undeadly:
http://undeadly.org/cgi?action=article&sid=20060619214229

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pkg_add -ui - Using Ports except or real Packages?

[steven mestdagh]

Will Maier [2006-06-19, 11:04:00]:
> Yes, they are. Packages are built for stable, too, if security
> updates are backported to the stable ports tree. What's the problem
> here?

note that due to lack of resources, updated -stable packages are only
built for the i386 platform.

you can build your own packages from a -stable ports tree, though.
the out-of-date script will even give you a list that you can feed into
the ports Makefile...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Package configurations

[steven mestdagh]

Allen Theobald [2006-06-09, 05:06:48]:
> Hello!
> 
> For installing a package how can I tell what the configure
> script (./configure) or command line arguments to the build were?

cd to the corresponding port directory, and use e.g.
make show=CONFIGURE_ARGS

CONFIGURE_ENV also contains some flags, see bsd.port.mk(5).

or just read the Makefile...

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Issue after erroneous package update

[steven mestdagh]

Andris Delfino [2006-06-03, 11:38:13]:
> Hi, I updated my packages (pkg_add -u), two of them weren't updated
> because they had several candidates, so I updated them "manually"
> (pkg_add -iu pkg-name).
> 
> They were curl, and mozilla-firefox. curl updated ok, mozilla-firefox 
> didn't.
> 
> The error was: "Can't install mozilla-firefox-1.5.0.3 because of
> conflicts (.libs-mozilla-firefox-1.5.0.1)". For sanity, I decided to
> delete mozilla-firefox-1.5.0.1 and reinstall it again (pkg_delete
> mozilla-firefox ; pkg_add mozilla-firefox-1.5.0.1.tgz ).
> 
> Now, I receive the same error: "Can't install mozilla-firefox-1.5.0.1
> because of conflicts (.libs-mozilla-firefox-1.5.0.1)".
> 
> How can I solve this? :S

pkg_delete .libs-mozilla-firefox-1.5.0.1

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pf logging: tcpdump: need root privileges

[steven mestdagh]

Daniel Polak [2006-05-29, 00:37:06]:
> Martin,
> 
> The solution in the FAQ was ok for 3.8 but things changed in 3.9.
> 
> For now if you run the script underneath from root's crontab every 5 
> minutes you'll most likely be ok.
> There should be a check in the script to see if it is already running to 
> prevent another instance starting when the old one hasn't finished yet. 
> The check in the script in the FAQ was actually not working anyway so if 
> the script in the FAQ wasn't causing any problems this one will be ok too.
> With this script there is just one script and no need for the user 
> pflogger anymore as everything is done as root. This allows tcpdump to 
> privsep which makes things safer.
> 
> /etc/pflogrotate:
> 
> #!/bin/sh
> # rotate pflog file and feed to syslog
> FILE=/var/log/pflog5min.$(date "+%Y%m%d%H%M")
> kill -ALRM $(cat /var/run/pflogd.pid)
> if [ $(ls -l /var/log/pflog | cut -d " " -f 8) -gt 24 ]; then
>mv /var/log/pflog $FILE
>kill -HUP $(cat /var/run/pflogd.pid)
>tcpdump -n -e -ttt -r $FILE | logger -p local0.info
>rm $FILE
> fi

I've adjusted the FAQ page with the new script, thanks!

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Splitting xbaseXY.tgz - stupid idea?

[steven mestdagh]

Liviu Daia [2006-05-22, 12:27:18]:
> Ok, let me rephrase this.  How realistic will be to run an OpenBSD
> firewall or router without xbase a few years from now?

Huh? You do not and will not need xbase to run a firewall/router.

> With the release of 3.9, there seems to be a new trend among port
> maintainers to make running a systems without xbase a PITA

You are completely blowing up your own "gd/xbase/no space left on device"
problem beyond proportion, and accusing/insulting port maintainers for it?

> compiling ports that
> don't depend on X at run time now requires X (example: nmap-no_x11),
> and building ports without xbase is now unsupported (FAQ 15.4.1).

You do not understand.  Unsupported does not mean impossible, it means
you are on your own to do it.  If you can't do this, just use the no_x11
package, as has been said many times now.

> what I'm asking is: is all this an accident, or the new official policy?
> Will there be any effort put into making sure ports don't depend on X
> when that's reasonably feasible?  Does anybody still care?  What's the
> official take on this?

Clearly, this no_x11 stuff has a low priority.
If you are still talking about making no_x11 flavors for the gd library
and everything that depends on it, I doubt this will happen.
But yeah, no_x11 packages can be created when it's feasible and useful;
this has been done in the past and can continue in the future.
As for building ports on system without X11, nobody cares AFAIK.

Now please stop wasting people's time with this.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: FAQ section numbering?

[steven mestdagh]

James Hartley [2006-05-15, 23:32:08]:
> The numbering of the FAQ sections proceeds through 1 - 15 excluding 11.
> Is there a historical reason for skipping section 11?

The articles in 11 have recently been relocated to make way for a FAQ page
about the X window system. Just look at the CVS log to see its history.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: flash plugin & mozilla-firefox

[steven mestdagh]

Hannah Schroeter [2006-03-21, 16:35:50]:
> Hello!
> 
> On Tue, Mar 21, 2006 at 10:29:50AM -0500, Roy Morris wrote:
> >Try this 
> >http://www.openbsd.org/faq/faq13.html#javaflash
> 
> Nowadays, the recommendation to fetch a flashplugin and install it by
> hand is outdated. There's /usr/ports/www/opera/opera-flashplugin.

yes, the FAQ follows -stable, and will be updated when 3.9 is released.
the opera-flashplugin port does not exist on 3.8.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Problem to read dvd on openbsd!

[steven mestdagh]

Joco Salvatti [2006-03-16, 18:49:34]:
> Hi all,
> 
> I'd like to know if anyone could help on the following problem:
> 1. First I've copied the contents of a DVD to my HD
> 2. After copying I've burned the DVD, as it is specified in the
> official OpenBSD FAQ. Everything works fine.
> 3. When it comes to use the DVD for playing with gmplayer or in any
> other DVD equipment an error occurs. Using gmplayer, the error message
> is "Can't open VGM info!". Has anyone ever experienced this problem?
> Could please anyone help me?

iirc you have to write video dvd content in the right physical order.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pf and ftp

[steven mestdagh]

On Mon, Feb 27, 2006 at 03:40:17PM +0100, vladimir plotnikov wrote:
> Hello!
> 
> Sorry for stupid question.
> part of pf.conf:
> 
> pass in on $ext_if proto tcp from any to any port 21 keep state
> pass in on $ext_if proto tcp from any to any port > 49151  keep state
> ...
> block return-rst in log on $ext_if proto tcp all

the last matching rule wins, as explained in the pf.conf(5) man page.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: python2.4 glitch

[steven mestdagh]

On Wed, Feb 22, 2006 at 03:21:38AM -0800, Tony Sterrett wrote:
> I just compiled python2.4 which recommended for Zope 2.9.0. There a  
> small glitch in configure. You'll get an error like below. Its late  
> so just all reference to define_xopen_source starting around 1488.  
> this has to do with select. But the configure file is not set up to  
> handle kqueue/kqueue declartion of u_short and u_long. This  
> configuration file doesn't handle 3.8 either. After removing  
> define_xopen_source it compiled and tested.
> 
> ---
> OpenBSD/2.* | OpenBSD/3.@<:@0123456@:>@)
>  define_xopen_source=no;;

why don't you use the python-2.4 packages, or the ports system?

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: error installing python 2.3 from OpenBSD 3.8 ports

[steven mestdagh]

On Thu, Feb 16, 2006 at 12:43:15PM +0530, Siju George wrote:
> Hi all,
> 
> I was trying to install Python 2.3 from OpenBSD 3.8 ports for
> 
> http://www.jackal-net.at/tiki-read_article.php?articleId=1
> 
> The install did not succeed and I got an error message.
> Could someone please help me troubleshoot it?
> 
> The error messagr is shown below
> 
> 
> 
> # cd ports/lang/python/2.3/
> # make install
> ===>  Checking files for python-2.3.5p2
> >> Python-2.3.5.tgz doesn't seem to exist on this system.
> >> Attempting to fetch /usr/ports/distfiles/Python-2.3.5.tgz from 
> >> ftp://ftp.pyth
> on.org/pub/python/2.3.5/.
> ftp: connect: Connection refused
> ftp: Can't connect or login to host `ftp.python.org'
> >> Attempting to fetch /usr/ports/distfiles/Python-2.3.5.tgz from 
> >> http://python.
> mirrors.pair.com/ftp/python/2.3.5/.
> ftp: Error retrieving file: 404 Not Found
> >> Attempting to fetch /usr/ports/distfiles/Python-2.3.5.tgz from 
> >> http://python.
> mirrors.ilisys.com.au/ftp/python/2.3.5/.
> 100% |**|  8335 KB02:31
> >> Size matches for /usr/ports/distfiles/Python-2.3.5.tgz
> >> Checksum OK for Python-2.3.5.tgz. (sha1)
> ===>  python-2.3.5p2 depends on: db-4.2.52p2 - not found
> ===>  Verifying install for db-4.2.52p2 in databases/db/v4
> ===>  Checking files for db-4.2.52p2
> >> db-4.2.52.tar.gz doesn't seem to exist on this system.
> >> Attempting to fetch /usr/ports/distfiles/db-4.2.52.tar.gz from 
> >> http://www.sle
> epycat.com//update/snapshot/.
> ftp: Error retrieving file: 404 Not Found
> >> Attempting to fetch /usr/ports/distfiles/db-4.2.52.tar.gz from 
> >> ftp://sleepyca
> t1.inetu.net/releases/.
> 100% |**|  3827 KB01:52
> >> Size does not match for /usr/ports/distfiles/db-4.2.52.tar.gz

unfortunately this distfile has been rerolled.
it will be fixed in -current.

is installing python from packages too easy...? see pkg_add(1).
in future please send this type of question to the ports mailing list.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Sudo

[steven mestdagh]

On Sat, Feb 11, 2006 at 09:02:41AM -0500, Dave Feustel wrote:
> I don't know whether this is or would be considered as a bug, 
> or whether it is generally known, but sudo, when successfully 
> invoked  with a password  in one shell, becomes active in all 
> shells of that user for the timed duration.

this is normal. see timestamp_timeout in sudoers(5) if you want it to
always ask for validation.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Intalling freetype error - Size does not match for /usr/ports/distfiles/freetype-1.3.1.tar.gz

[steven mestdagh]

On Wed, Feb 01, 2006 at 10:28:37AM +, Pavel M. Ivanchev wrote:
> Hi there!
> I am trying to install freetype on OpenBSD 3.8 and it crashes with the 
> error below. As i can se there is any problem with the file size,i 
> haven't met such things until now.
> I downloaded the port "freetype" for 3.8 again,but the result was the same
> 
> make install
> ===>  Checking files for freetype-1.3.1p1
> >> freetype-1.3.1.tar.gz doesn't seem to exist on this system.
> >> Attempting to fetch /usr/ports/distfiles/freetype-1.3.1.tar.gz from 
> http://ovh.dl.sourceforge.net/sourceforge/freetype/.
> >> Size does not match for /usr/ports/distfiles/freetype-1.3.1.tar.gz
> /bin/sh: test: 3: unexpected operator/operand

this has been asked on ports@ two days ago ...

http://marc.theaimsgroup.com/?l=openbsd-ports&m=113864745530567&w=2

-- 
steven


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: SSH publickey authentication - identity logging

[steven mestdagh]

On Tue, Jan 24, 2006 at 11:04:33AM -0700, Spruell, Darren-Perot wrote:
> Is it possible to have sshd log information about the key used to
> authenticate to a given user account upon connection?
> 
> Our situation is that we have a user account that multiple people have
> access to log into to retrieve files. Each user authenticates to that
> account with their own SSH key. Current log entry shows:
> 
> Jan 24 11:01:20 sftp sshd[23555]: Accepted publickey for transfers from
> 10.2.58.44 port 1420 ssh2
> 
> Would be useful to have information logged for the connection identifying
> the key used to authenticate, by the key comment if possible. Does sshd
> already have this capability? Would anyone consider this a useful feature
> addition?

Have you tried LogLevel VERBOSE in sshd_config(5)? That prints lines
like 'Found matching DSA key: " in the log file.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pkg_add package very slow

[steven mestdagh]

On Sat, Jan 21, 2006 at 02:32:27PM +0100, Adam PAPAI wrote:
> Hi
> 
> I've got a problem with pkg_add. I usually install 1-2 OpenBSD system a 
> week. Some of them has got problem with pkg_add.
> 
> For example pkg_add -vv screen-4.0.2.tgz takes 10 minutes.

9 seconds here.  Have you tried a different mirror?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: anoncvs prompts for password

[steven mestdagh]

On Sun, Jan 15, 2006 at 01:40:23AM -0800, Ramiro Aceves wrote:
> > # cvs up -Pd
> > [EMAIL PROTECTED]'s password:
> > Permission denied, please try again.
> > [EMAIL PROTECTED]'s password: cvs [update aborted]: received
> > interr

yes, i'm seeing the same.  Wim?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Updrading to stable branch --->> rebuilding ports?

[steven mestdagh]

On Sat, Jan 07, 2006 at 10:12:10AM +0100, Ramiro Aceves wrote:
> Hello dear OpenBSD friends.
> 
> I have just upgraded my 3.8 release CD install trough CVS to the stable
> branch (OPENBSD_3_8)( src, ports and XF4). I have rebuilt my kernel, the
> userland and X Window. Everything runs fine and smoothly as expected. I
> also removed the installed packages and I am reinstalling them again
> trough ports.
> 
> A question arises now to me: as I have read on the FAQ, everything must
> be kept "in sync". Is it mandatory to remove the packages and reinstall
> them again from ports when I upgrade the base system to the STABLE
> branch?.

no. keeping stuff in sync is much more of an issue when running -current.

> Or perhaps,  can I "asume" that the STABLE patch branch does
> not modify the base system enough to break the ports?

yes.

> This is a very
> time consuming task as my computer has got a slow Internet connection
> (5kB/s) and a not too fast processor (1200 MHz). A friend of mine
> downloaded for me all 3.8 packages from OpenBSD servers and perhaps I
> have to discard them from now.  :-(

the stable ports branch mostly adds security fixes. for some
architectures the updated packages are on the ftp servers, for others
you need to build them yourself.

you don't need to rebuild all your packages.
maybe just a few which have had security fixes... if your friend did not
already download the updated packages.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: x11 forwarding does not work until pf is disabled

[steven mestdagh]

On Tue, Dec 27, 2005 at 02:43:48PM +0100, Didier Wiroth wrote:
> Hello,
> I'm running current (built a few hours ago) on a test machine. 
> I'm connecting via ssh (from a windows box) and I try to launch an X
> application.
> X forwarding fails, here is a sample output:
> 
> ~ $ xclock &
> [1] 10951
> [EMAIL PROTECTED]
> ~ $ Error: Can't open display: localhost:11.0
> 
> Unfortunately, as you see, I'm not able to forward X11 until I disable
> pf (pfctl -d).
> After disabling pf, forwarding works well and I'm able to forward any X
> application.
> 
> Did I miss something, what is my problem?
> Thank you very much
> Didier
> 
> Here is the (simple) pf.conf of the ssh server:
> ext_if="bge0"
> table  persist 
> table  persist
> 
> #OPTIONS
> set loginterface $ext_if
> 
> #NORMALIZE
> scrub in on $ext_if fragment reassemble
> 
> #REDIRECTING
> 
> #DEFAULT BLOCK
> block log quick inet from 
> block quick inet6

you can debug this kind of stuff using tcpdump(8).
try passing inet6 on lo0.


> block log (all) all
> 
> pass quick on lo0
> pass in quick on $ext_if inet proto tcp from  to $ext_if\
>port 22 modulate state label ssh
> pass out quick on $ext_if inet proto { tcp, udp } from $ext_if to any \
> keep state label out_traffic

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: BerkeleyDB on 3.8

[steven mestdagh]

On Thu, Dec 22, 2005 at 05:10:56PM -0600, J.D. Bronson wrote:
> How can I tell what version the BDB is that comes within OpenBSD 3.8?

see FAQ 15.2.3.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Access CD as user using cdrtools

[steven mestdagh]

On Wed, Dec 21, 2005 at 10:26:38PM -0700, Ludwig Mises wrote:
> It seems that only root can access /dev/rcd0c when using tools such as
> cdrdao, cdda2wav and cdparanoia, even when the user is in the operator
> group:
> 
> $ cdparanoia -v -d /dev/rcd0c -B
> 
> Checking /dev/rcd0c for cdrom...
> Testing /dev/rcd0c for SCSI interface
> generic device: /dev/rcd0c
> ioctl device: /dev/rcd0c
> Could not open generic SCSI device /dev/rcd0c: Permission 
> denied
> Testing /dev/rcd0c for SCSI interface
> 
> uid=1000(lm) gid=1000(lm) groups=1000(lm), 0(wheel), 5(operator)
> 
> I get similar results with cdda2wav and cdrdao.  Oddly enough, cdio
> works just fine for this user.  Even changing the permissions on
> /dev/rcd0c to 644 didn't change anything and  I still get errors
> indicating that I have no permission, yet clearly the account is in
> the correct group:
> 
> $ ls -l /dev/rcd0c
> crw-r-  1 root  operator   15,   2 Dec 15 21:32 /dev/rcd0c
> 
> Is it possible to read /dev/rcd0c as a user in the operator group
> using cdda2wav or other cdrtools?  I would rather not have to use su
> or sudo just to read a CD.  And I see nothing special about cdio (i.e.
> no SUID) to make it work differently.

try adding write permission for the operator group to this device?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: disklabel and ext3 partitions on amd64

[steven mestdagh]

On Mon, Dec 19, 2005 at 12:00:52PM +, Simon Morgan wrote:
> On 18/12/05, steven mestdagh <[EMAIL PROTECTED]> wrote:
> > I see the same happening on 3.8-release vs. 3.8-current on i386 for
> > systems with foreign filesystems. Not sure why.
> 
> Think it could be a bug?

this change in behavior is caused by
sys/arch/amd64/amd64/disksubr.c v 1.4
sys/arch/i386/i386/disksubr.c v 1.46

because the context is gone, here is the OP's problem summarized:
'D' in the disklabel editor now wipes everything except the 'c' partition,
whereas it used to leave 'c', a modified 'a', and foreign filesystem (> 'i')
partitions in place.

maybe someone can comment on this?

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: disklabel and ext3 partitions on amd64

[steven mestdagh]

On Fri, Dec 16, 2005 at 01:40:29PM +, Simon Morgan wrote:
> I'm currently running OpenBSD/i386 3.8 on an AMD64 machine and just went to
> install the latest AMD64 snapshot. The hard drive I'm installing to has a
> number of ext3 partitions contained in an extended partition.
> 
> When I installed OpenBSD/i386 3.8 on this machine I issued the D command
> during the disklabel stage to start with a clean label and although all the
> BSD partitions were removed, all the ext3 partitions remained. When I tried
> the same with the amd64 snapshot, the ext3 partitions were not kept and the
> only thing remaining was the c partition. Obviously I didn't want to go
> ahead with the installation for fear of data loss so I would just like to
> know if this is normal, whether it's a change in behaviour between 3.8 and
> the snapshot or if it's an i386/amd64 thing. If it makes any difference, the
> label I reset when installing 3.8 was left over from a FreeBSD install.

I see the same happening on 3.8-release vs. 3.8-current on i386 for
systems with foreign filesystems. Not sure why.

> I've had a look through the latest disklabel man page and it says:
> 
>   Note that when a disk has no real BSD disklabel, the kernel creates a de-
>   fault label so that the disk can be used.  This default label will in-
>   clude other partitions found on the disk if they are supported on your
>   architecture.  For example, on systems that support fdisk(8) partitions
>   the default label will also include DOS and Linux partitions.
> 
> I'm assuming this behaviour also applies to the D command, in which case
> does this mean that ext2/3 isn't supported on AMD64 machines?

by default ext2fs is enabled for all architectures:

$ grep -i ext2fs /usr/src/sys/conf/GENERIC
option  EXT2FS  # Second Extended Filesystem

> If I proceed
> with the install, will the ext3 partitions still be there afterwards (even
> if OpenBSD can't see them)?

Normally, yes. However, you should make sure that all partitions in the
disklabel are within the OpenBSD fdisk partition (normally and unless you
have been doing strange things, they should). Then OpenBSD should leave
your data in other fdisk partitions (like your ext3 partitions) alone.
In any case it's a good idea to really understand what you are doing
when altering partition tables, and you always have backups of your data,
of course.

If you want to access those ext3 partitions from OpenBSD they will need
to be listed in the disklabel again. There is a section in the FAQ about
foreign filesystems (14.16) and Nick has also rewritten 14.1 for hopefully
better understanding. :)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: A question about the adduser.perl file

[steven mestdagh]

On Mon, Nov 28, 2005 at 04:30:25PM +0100, Said Outgajjouft wrote:
> >$ENV{'PATH'} = "/sbin:/bin:/usr/sbin:/usr/bin";
> >
> >and that is where pwd_mkdb will be found.
> >
> >
> Hmm that doesn't answer my question.
> The answer I am looking for could be one of the following.
> 
> 1. The PATH environment is local to the process and cannot be tampered with.
> 
> 2. The PATH environment is global but if someone can tampered with it 
> you are screwed
> anyway so it doesn't matter that the pwd_mkdb is called using a 
> relative path.
> 
> 3. The PATH environment however very slim can be tempered with so 
> adduser instead calls
>/evilfiles/pwd_mkdb then adding an absolute path sounds like 
> something that should be done.

$ENV is inherited from the parent process, but $ENV{'PATH'} is set
explicitly inside the script, so it will have the desired value
mentioned above.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: A question about the adduser.perl file

[steven mestdagh]

On Mon, Nov 28, 2005 at 10:21:58AM +0100, frantisek holop wrote:
> hmm, on Sun, Nov 27, 2005 at 04:31:31PM +0100, Said Outgajjouft said that
> > Line 92
> > @pwd_mkdb = ("pwd_mkdb", "-p");# program for building passwd database
> > and line 133
> > @pwd_mkdb = ("pwd_mkdb", "-p", "-d", ".");
> > 
> > Isn't it more secure to use absolute path for running the pwd_mkdb?
> 
> @path = ('/bin', '/usr/bin', '/usr/local/bin');

that's the path where it looks for shells.  a bit further you can see

$ENV{'PATH'} = "/sbin:/bin:/usr/sbin:/usr/bin";

and that is where pwd_mkdb will be found.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: apache doesn't interpret php

[steven mestdagh]

On Sun, Nov 20, 2005 at 06:22:15PM +0100, noob lenoobie wrote:
> Hello.
> 
> I installed a Fresh OpenBSD 3.8 in order to make a
> firewall/webserver.But I can't make apache interpret php.
> 
> I did run phpxs -s, I checked my httpd.conf (with Loadmodule and
> AddType), I restarted apache with apacheclt stop && sleep 1 &&
> apachectl start (apachectl restart fails).
> 
> I've read many maillinglists and newsgroups, but the answer is always
> "run phpxs -s" ou "add the required lines to httpd.conf". So I really
> don't know what to do next.
> 
> You may want to see some commands :
> 
> #phpxs -s seems ok to me
> phpxs -s
>   [activating module php5 in /var/www/conf/httpd.conf]
>   cp /usr/local/lib/php/libphp5.so /usr/lib/apache/modules/libphp5.so
>   chmod 755 /usr/lib/apache/modules/libphp5.so
>   cp /var/www/conf/httpd.conf /var/www/conf/httpd.conf.bak
>   cp /var/www/conf/httpd.conf.new /var/www/conf/httpd.conf
>   rm /var/www/conf/httpd.conf.new
> 
>   You should copy the sample configuration files from
>   /usr/local/share/examples/php5 to /var/www/conf/php.ini

you did perform this last step, right?

the next thing to look at is your httpd log file e.g.
/var/www/logs/error_log

p.s. this question belongs on @ports

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Slow DVD Speed

[steven mestdagh]

On Wed, Nov 09, 2005 at 10:40:16PM -0800, Dan Smythe wrote:
> I am having slow DVD burning speeds. I am running
> OpenBSD 3.6 Release.

try 3.8 instead!

> I'm getting speeds of about 0.2x. I will attach my
> dmesg file. What should I do to fix this problem?
> 
> [demime 1.01d removed an attachment of type application/octet-stream which 
> had a name of dmesg.boot]

if your problem persists with 3.8, try again by posting your dmesg and any
other relevant info in-line (not as attachment).

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: OpenBSD Desktop Document

[steven mestdagh]

On Wed, Nov 09, 2005 at 02:41:05PM -0500, Roy Morris wrote:
> Thanks to all those that replied. I have made the changes suggestedand 
> placed the document as {ps,pdf,txt} at 
> www.openalternatives.com/OpenBSD/OpenBSD-Desktop.txt
> www.openalternatives.com/OpenBSD/OpenBSD-Desktop.ps
> www.openalternatives.com/OpenBSD/OpenBSD-Desktop.pdf

This document is no good. A lot of relevant info is missing, and a lot of
useless info is given. And it's also written in a "do this, then that,
but don't think" style.

For example, your part about system tweaks and linux emulation, do you
really think some newbie user will understand this? Besides it works only
on i386. You also got PKG_PATH wrong. And you can just answer yes during
installation to have ntpd started. Using cdrecord with a .tgz? Have you
tried that?

Your section about X11 is very incomplete. For instance, you mention
.xinitrc, later (even in a totally different section) xdm_flags, total
chaos. You suggest people to set DefaultDepth 24, but you don't even say
what this is.

Double check what you write, and ask yourself whether it is well
organized and can be understood by your target audience (that's windows
users, according to the title!) ...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: OpenCVS Questions

[steven mestdagh]

On Fri, Nov 04, 2005 at 01:17:29PM -0800, J.C. Roberts wrote:
> I was looking to learn more about OpenCVS, in particular, reading the
> "cvsintro" docs mentioned here:
> 
> http://www.opencvs.org/manual.html

OpenCVS is not yet released and still under development.

> Unfortunately the links are broken. Could someone drop-kick me in the
> right direction? I need to (better) learn both CVS usage and CVS
> setup/administration.

As always, try the manual page. It will point you to 'info cvs', which
should give a good overview.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Help on pkg_add error

[steven mestdagh]

On Sat, Oct 29, 2005 at 11:47:45AM -0700, PARAMVIR DHINDSA wrote:
> #pkg_add gnome-desktop-2.8.1.tgz
> gnome-desktop-2.8.1: Can't find libiconv-1.9.2
> /usr/sbin/pkg_add: libiconv-1.9.2: Fatal error.

what is your PKG_PATH variable set to?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: setxkbmap dumping core?

[steven mestdagh]

On Fri, Oct 28, 2005 at 12:35:07PM +0200, frantisek holop wrote:
> hi there,
> 
> i am using a snapshot from
> 
> OpenBSD 3.8-current (GENERIC) #196: Mon Oct 17 14:32:07 MDT 2005
> [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
> 
> and setxkbmap is dumping core:
> 
> amaaq> setxkbmap
> Couldn't interpret _XKB_RULES_NAMES property
> Use defaults: rules - 'xorg' model - 'pc101' layout - 'us'
> setxkbmap: (0xcfbece4c)
> setxkbmap in free(): error: ifree: junk pointer, too high to make sense
> Abort trap (core dumped)
> 
> 
> is anybody seeing this?

no. upgrading does not install xetc38.tgz. did you extract it manually?

-- 

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Problem installing nmap from packages

[steven mestdagh]

On Wed, Oct 26, 2005 at 02:55:02PM +0200, Rico wrote:
> Hi,
> 
> I tried installing nmap and got some dependency problems. I am running 
> snapshots.
> 
> pkg_add
> ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/i386/nmap-3.93.tgz
> Can't install 
> ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/i386/nmap-3.93.tgz: 
> lib not found pcap.3.1
> Even by looking in the dependency tree:
> gettext-0.10.40p3, libiconv-1.9.2p1, libdnet-1.10p0, 
> glib-1.2.10p0, pcre-4.5p1, gtk+-1.2.10p3
> Maybe it's in a dependent package, but not tagged with @lib ?
> (check with pkg_info -K -L)
> If you are still running 3.6 packages, update them.

try a newer snapshot. you probably have an older version of the libpcap
library.

and please ask this kind of questions on ports@ ...

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Migrating to a new HD

[steven mestdagh]

On Wed, Oct 26, 2005 at 12:42:04PM +0200, Han Boetes wrote:
> Hi,
> 
> I just wrote this article about migrating to a new HD after the
> old one got too flakey.
> 
> I maintain the original over here:
> 
>   http://www.xs4all.nl/~hanb/documents/hd-migration
> 
> 
> HD MIGRATION:
> 
> It started with my HD failing to sync when I was rebooting. And
> some odd errormessages I saw. So I was holding my breath hoping
> for it to be something else or just an incident. But it only got
> worse. So After a reboot and nearly loosing a lot of important
> stuff I decided to make the switch. And after a struggle with cp
> and rsync I had everything set like I should I found out that an
> old lilo was still haunting the MBR and I knew no way to get rid
> of it since I had no floppy. So, I could start all over again.
> 
> I decided to write it all down so noone would have to suffer the
> same as me. After some tips on #OpenBSD I found the following
> procedure:
> 
> My original harddisk was wd0 and the usb2 external drive sd0 is
> the new drive, which I will swap with the old drive after all is
> done.
> 
> # I use the whole disk and this is the command I had to use in the
> # first instance to get rid of lilo.
> 
> fdisk -i sd0
> 
> # Now I could also reconsider my partitiontable and I increased my
> # /var partition which I wanted to do for a long time. You can
> # also add or remove partitions if you like that. After having the
> # right partition table in my mind I disklabel. It's a pretty
> # straightforward tool, so I won't bother explaining how it works.
> 
> disklabel -e sd0
> 
> # newfs is also really simple.
> 
> newfs /dev/sd0a
> newfs /dev/sd0d
> # etc, etc.
> 
> # And then I mounted the new filesystem. The extra options speed
> # up the copying of files.
> 
> mkdir /mnt/new
> mount -o async,noatime,softdep /dev/sd0a /mnt/new
> cd /mnt/new
> mount -o async,noatime,softdep /dev/sd0d tmp
> mount -o async,noatime,softdep /dev/sd0e var
> mount -o async,noatime,softdep /dev/sd0f usr
> mount -o async,noatime,softdep /dev/sd0g home
> 
> # First I prepared the dirs I didn't want to copy.
> 
> mkdir dev
> cp /dev/MAKEDEV dev
> cd dev
> ./MAKEDEV all
> cd ..
> 
> mkdir altroot kern mnt proc stand tmp
> 
> # Also make sure you set the right permissions for /tmp
> 
> chmod 1777 /tmp
> 
> # There are two ways I found pretty comfortable to copy dirs. cp
> # -Rp is fast. rsync shows what's going on, and you can easily
> # update the remaining differences. So if you don't want to use
> # rsync you'll have to do the copying in single user mode.
> 
> cp -Rp /etc .
> rsync -aP /var .
> 
> # And so on and so forth for all remaining dirs and files and
> # symlinks in /
> 
> # Actually right before I swapped the drives I went into single
> # usermode and copied over the last changes to /var and /home with
> # rsync.
> 
> # Then I installed the bootloader.
> 
> cp usr/mdec/boot .
> cd usr/mdec
> ./installboot /mnt/new/boot ./biosboot sd0
> 
> # After that I switched the drives, double-checking the
> # master/slave selector. And I booted with the new and HD and
> # rejoiced.

some thoughts:
1. make backups: dump(8) and restore(8) are your friends.
2. wouldn't it be much easier to use the installer to install OpenBSD onto
   the new hard disk, boot from the new disk when finished, mount your old
   disk and copy over files as desired? (you could consider unplugging
   the old disk if it is going bad, and plug it back in when you're
   ready to start copying.)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: DISKLESS tutorial that need feedback

[steven mestdagh]

On Sat, Oct 22, 2005 at 10:13:06PM +0100, Stuart Henderson wrote:
> On 2005/10/22 21:05:25, [EMAIL PROTECTED] wrote:
> > But I see no difference to simple ASCII-Textfiles anymore
> 
> Ahh, do you know of a nice simple console-mode pdf viewer then?

try pdftotext, it's in the xpdf package.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: passwd: /sbin/nologin --- not working for me

[steven mestdagh]

On Fri, Oct 21, 2005 at 07:53:52AM +0200, morla wrote:
> hello all,
> 
> i just made up a second account on my box and wanted to prevent the old 
> one from loging into it, due i want to keep it for email retrival.
> 
> when i enter something like
> 
>  morla:*:1000:1000:morla:/home/morla:/sbin/nologin
> 
> into /etc/passwd and a similary entry into /etc/master.passwd should'nt 
> this keep me out???

did you use vipw(8) ?  this automatically updates the user database.


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Opera Confusion

[steven mestdagh]

On Tue, Oct 18, 2005 at 09:44:41AM -0400, Roy Morris wrote:
> Does the port (not pkg) of Opera contain flash?
> I was checking through the mail list, one guy
> says it works great and another says you can't
> include it on Openbsd. I saw something about a
> port FLAVOR but didn't see it in the makefile. I'd
> rather not install all the shit from scratch just to
> find out.

you should ask this type of question on the ports@ mailing list !

-current has a port in www/opera-flashplugin, 3.7 and 3.8 do not have flash
in the tree.  but you can use flash with opera, after unpacking the flash
files it comes down to

cp libflashplayer.so /usr/local/lib/opera/plugins

but of course this bypasses the pkg* system...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: cvs usage question

[steven mestdagh]

On Mon, Oct 17, 2005 at 09:49:21AM -0400, stan wrote:
> I;m trying to update the source tree on a 3.7 machine to current I did the
> following (based upon my reading of the web site docs on this):
> 
> cd /usr/src
> setenv [EMAIL PROTECTED]:/cvs
> cvs -q get -P src
> 
> But all I got were these error messages:
> 
> cvs server: cannot find module `src' - ignored
> cvs [checkout aborted]: cannot expand modules
> 
> 
> What am I doing wrong?

you don't need the equation sign:
setenv CVSROOT [EMAIL PROTECTED]:/cvs

or you need to use export if you use ksh.
use 'echo $CVSROOT' to see if this variable is set correctly.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: wi(4) or wicontrol broken

[steven mestdagh]

On Sat, Oct 15, 2005 at 11:53:42PM -0600, Ludwig Mises wrote:
> I upgraded to OPENBSD_3_8_BASE (after first upgrading to the snapshot from
> 10/14) and wicontrol no longer seems to work:

quoting http://www.openbsd.org/faq/faq5.html#Flavors :

"One should also understand that the update process is supported in only
one direction: from older to newer, and from -stable to -current. You
can not run 3.7-current (or a snapshot), then decide you are living too
dangerously, and step back to 3.7-stable. You are on your own if you
choose any path other than the supported option of reloading your system
from scratch, do not expect assistance from the OpenBSD development team."

You tried to go back...  (3.8-current -> OPENBSD_3_8_BASE which
corresponds to 3.8-release).  If you want 3.8-release, the easiest thing to
do will be to wait for the actual release, and then install from scratch.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: HOWTO on spamd+transparent bridge under OpenBSD

[steven mestdagh]

On Fri, Oct 14, 2005 at 04:54:24PM -0500, Graham Toal wrote:
> > > The disk formatting is a major pain.
> >
> > Why?
> 
> I don't know why, I just know that both myself (experienced in BSD and BSDI
> from days gone by, and linux in recent years, but not OpenBSD at all)
> plus a colleague at work who has a fair bit of OpenBSD experience both
> have wasted literally days with formatting problems.  So having found
> a working recipe that seems easy, I thought it was worth pointing out
> to folks that if you do something else, you might hit the hassles we
> did.  I had tried to reuse an old partition table and failed even though
> it sure looked OK to me - the install program wouldn't progress past
> the formatting section; my friend had problems when he formatted the
> swap partition before the data partition.

never had any such problems. really, the FAQ covers disk setup quite
extensively!

> > Writing down passwords, are you serious?
> 
> To each his own :-)  I generally find that if you create a 'strong'
> password, you pretty much have to write it down until you remember it.

that sounds really funny. have you really written down everything that
is now "stored" in your brain? :)

> > Try CTRL+ALT+F2/F3...  it's in the FAQ.
> 
> So I've been told :-/  Unless you know something is there to go look
> for it, you don't come across it

well, the FAQ index is really not that long to have a quick look.

> > Also, I don't see the need for a ports tree on this type of system,
> > and your installation of the "screen" application looks horrible.
> 
> Problem with 3.6 boot CD and 3.7 installation I think.  The Jove
> ports install was smooth, but for some reason screen screamed.

you can just skip "screen" since you now know you can use multiple
terminals with ctrl+alt+F2 etc.

> > Wouldn't it be better to skip the installation part, and point people to
> > the OpenBSD FAQ (especially faq4.html), and to the afterboot(8) manual page?
> 
> No, but I'll certainly add those pointers.  And it *is* a wiki page.  If
> you feel that what I've said is just plain wrong or misleading, please
> feel free to go in there yourself and correct it.  Just bear in mind
> it was written by someone who needed to use OpenBSD to support a
> specific tool and who before this had no OpenBSD experience, for an
> audience who are in the same boat.  It's definitely not a proper
> it's a "How I managed to make it work after two weeks of
> struggling, so that hopefully you can make it work in two hours
> of slavishly typing exactly what I say" :-)

Well... that will encourage people to not think, which is an evil thing!
If you take a look at the OpenBSD documentation (manuals and FAQ), you
will see it has been written very carefully, and it never just lists a
bunch of commands that people can blindly copy. Instead it explains what
is happening, so people _understand_.

I'm not sure people will really save time with this document.
You fetch the ports tree (the wrong one, even if it worked for you it is the
wrong one) from CVS, while you do not need it. No need to make coffee then,
either. :) Using pkg_add and PKG_PATH will work fine.
People also don't need bash, ksh is fine. If you're really worried about
Linux users, point them to faq9.html.
Where you point people to lynx, it's easier to use ftp(1), and it's also
useless since your next line is saying pkg_add.

Instead of releasing "this worked for me" type of documents, maybe your
efforts would be better spent writing a clean document that does not
suffer factual inaccuracies, does not deviate too much from the actual
topic, adds explanations where appropriate, etc. Yes, it's not an easy
task. :)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: HOWTO on spamd+transparent bridge under OpenBSD

[steven mestdagh]

On Fri, Oct 14, 2005 at 03:11:59PM -0500, Graham Toal wrote:
> For anyone who is interested, I've written up a document on
> how to install OpenBSD, configure it as a transparent bridge,
> then install spamd on it.  It was written primarily for our
> campus computer center who want to know how to do it if something
> happens to me (like I get a better job elsewhere for example ;-) )
> but I think I've written it generally enough that it will be
> of use to anyone.
> 
> The page is here:  
> http://wiki.utpa.edu/InfoSec/GreyListingInstall?action=print

Some quick feedback...
You write (allow me to turn off caps):

> The disk formatting is a major pain.

Why?

[...]
> password for root acct?  write it down, you'll need it later

Writing down passwords, are you serious?

[...]
> OpenBSD doesn't appear to support multiple consoles using the F keys the
> way linux does.

Try CTRL+ALT+F2/F3...  it's in the FAQ.

Also, I don't see the need for a ports tree on this type of system,
and your installation of the "screen" application looks horrible.

Wouldn't it be better to skip the installation part, and point people to
the OpenBSD FAQ (especially faq4.html), and to the afterboot(8) manual page?

When you copy over pf.conf, do you set its owner/permissions correctly?
Anyway, /etc/security will let you know if you didn't. :)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: boot-problem

[steven mestdagh]

On Sun, Oct 09, 2005 at 08:26:19PM +0200, Roelof Wobben wrote:
> Hello,
> 
> After installing Openbsd 3.7 i have accidently booted the process before i
> could copy openbsd.pbr to win xp.

Accidentally? Are you positive your installation is finished?

> Is there a way i could get into Openbsd with the installation cd so i could
> copy openbsd.pbr or do i have to do the installation again.

(assuming your installation was really finished...)
The installation cd boots the OpenBSD kernel. After that, choose the shell
option, mount your disk, copy the file as needed.

OR you can use boot -a at the boot prompt, then it will ask for your root
device and boot into your installed OpenBSD system. note that in this case
you will still be using the RAMDISK kernel from the cd, not the usual
GENERIC kernel...


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Multi boot question XP and Openbsd after installation

[steven mestdagh]

On Sun, Oct 09, 2005 at 05:03:19PM +0200, [EMAIL PROTECTED] wrote:
> hello, 
> 
> I have installed Openbsd on my computer.
> The manual says now for multi-booting with XP you must
> do dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1
> 
> but if i do this i get a error-message that rsd0a does not exist

it is not forbidden to think about why the manual says something.
the lines of code in there are rarely "the only way" and thus they may
contain different hardware names.

look at the output of 'dmesg' and see which hard disk you have. it is
likely you have wd(4) (/dev/rwd0a in your case) instead of sd(4). this is
just a guess, you did not provide enough info.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: resize a partition

[steven mestdagh]

On Wed, Oct 05, 2005 at 12:51:57PM +0200, Abel Talaversn Estevez wrote:
> Hi all,
> 
> How could I resize an OpenBSD partition?
> 
> I have a /var partition of 20 GB and I want to have it of about 1 GB and I 
> don't know how to do it.

(0. copy your disklabel somewhere safe)
1. copy your files somewhere safe
2. umount /var
3. edit the partition with: disklabel(8)
4. create a new filesystem within the modified partition: newfs(8)
5. mount /var
6. copy your files back

read the manual pages, additional examples of disklabel usage are
available in the FAQ!

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Documentation bug in WWW FAQ???

[steven mestdagh]

On Mon, Oct 03, 2005 at 04:35:36PM +0100, Bryan wrote:
> I recently attempted to dualboot my laptop with Windows XP.  I was
> following the FAQ and came to the point where I issued this command:
> 
> "dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1"
> 
> And the system tells me that:
> 
> 
> "/dev/rsd0a not configured"
> 
> I did a google search to see if I did anything wrong and I found this site:
> 
> 
> http://darkuncle.net/OpenBSD/OpenBSD_dualboot.txt
> 
> I found the following passage:
> 
> -
> When you're done installing, pop in a USB key or floppy, mount it
> (for a USB key, I do "mount_msdos /dev/sd0i /mnt"; for a floppy, it's
> "mount_msdos /dev/fd0a /mnt") and do the following to grab your OpenBSD
> primary boot record:
> 
> # dd if=/dev/rwd0a of=/mnt/openbsd.pbr bs=512 count=1
> 
> Now reboot the machine into Windows, and copy the openbsd.pbr file you just
> created to C:\openbsd.pbr in Windows. If you don't have a floppy or USB key
> available to tranfer your openbsd.pbr with, you can copy it to another
> machine on your network, reboot into Windows, and copy it back.
> -
> 
> 
> The "dd" command above does allow me to save openbsd.pbr, and with
> this, I can dualboot.  I just wanted to give a heads-up that if the
> FAQ doesn't allow you to dualboot, then the above might work.  I
> thought that maybe it was a typo, since "rsd0a" and "rwd0a" differ by
> one letter, and those differing letters lie close on the keyboard.

it is not a typo, just another possibility. maybe you want to have a look
at the wd(4) and sd(4) manual pages.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Java with mozilla-firefox

[steven mestdagh]

On Fri, Sep 30, 2005 at 03:53:48PM +0200, Rico wrote:
> Hi
> 
> I am trying to get java working on mozilla-firefox on obsd37.
> 
> I have installed the jdk1.4 from ports and the installation went well. I 
> have created the symbolic link from libjavaplugin_oji.so to 
> /home/user/.mozilla/plugins
> 
> Doing "about:plugins" in the browser java shows up as installed.
> 
> When I try to look at a page with java, firefox crashes.
> 
> Is there anything I am missing perhaps.

yes, your resource limits are probably not high enough. change them with
'ulimit -d' or something similar.  my java_vm here is using about 200M
of memory, which is higher than the default limit in 3.7.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: recommended USB 2.0 host adapters?

[steven mestdagh]

On Sun, Sep 18, 2005 at 02:34:10AM +0100, Niall O'Higgins wrote:
> > I'm going to extend my i386 machine with a USB 2.0 (PCI) host adapter.
> > Are there any recommended cards or cards that I should not buy or that
> > do not work?
> 
> I think they are pretty much all ehci(4).

yep, bought a Eminent EM1038 which has a NEC chip, it just works.
thanks,

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Time limited internet connection

[steven mestdagh]

On Sat, Sep 24, 2005 at 08:45:25PM +1000, Rod.. Whitworth wrote:
> On Sat, 24 Sep 2005 13:29:18 +0300, Kiraly Zoltan wrote:
> 
> >I want to build a home network using OpenBSD as gateway. A child in 
> >network have a computer, and like to surf the Internet. I want to drop 
> >her Internet connection at night (11:00AM) because the child don't go to 
> >sleep.
> >
> 11 AM at night is a very strange time seeing that AM literally means
> before noon
> 
> >I don't want to unplug the network cable, i need to do this job with 
> >OpenBSD.
> >
> >Exist a proxy server or solution which limit the Internet connection 
> >using time? An example: Drop internet connection at 11:AM night and 
> >allow Internet at 6:00 AM morning.
> >
> >Thank you very much
> >
> >
> 
> 
> How about two pf.conf files (pf6to23.conf and pf 23to6.conf) and a
> couple of cron entries to do pfctl -f pf6to23.conf and pfctl -f
> pf23to6.conf ?

wouldn't it be easier to set up a table with IPs to block and put the IP of
this computer in that table at night/remove it again in the morning?
should be easy with pfctl.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Mounting a ntfs partition..

[steven mestdagh]

On Wed, Sep 21, 2005 at 11:52:21AM +0200, tronss wrote:
> Hi,
> 
> I'd like to know how can I mount a ntfs partition in my first hdd to 
> scan my windows xp with antivir antivirus.
> 
> I have option ntfs in GENERIC kernel and compiled like that, but when I 
> try to do: "mount -t ntfs /dev/wd0a /mnt" tells me "device not 
> configured". I see
> 
> Can you help me?.
> 
> Thanks.
> 
> tronss
> 
> 
> My disklabel:
> 
> disklabel: warning, DOS partition table with no valid OpenBSD partition
> # /dev/rwd0c:
> type: ESDI
> disk: ESDI/IDE disk
> label: Maxtor 6Y120P0
> flags:
> bytes/sector: 512
> sectors/track: 63
> tracks/cylinder: 16
> sectors/cylinder: 1008
> cylinders: 16383
> total sectors: 240121728
> rpm: 3600
> interleave: 1
> trackskew: 0
> cylinderskew: 0
> headswitch: 0   # microseconds
> track-to-track seek: 0  # microseconds
> drivedata: 0
> 
> 16 partitions:
> # sizeoffset  fstype [fsize bsize  cpg]
>  c: 240121728 0  unused  0 0  # Cyl 0 
> -238215
>  i: 24010742763 unknown   # Cyl 
> 0*-238201*
 ^
you will need to use /dev/wd0i instead of /dev/wd0a

-- 

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Intel 82801FB AC97 not configured?

[steven mestdagh]

On Mon, Sep 19, 2005 at 04:56:34PM +0200, Moritz Kiese wrote:
> Greetings,
> 
> do I have any chance to get the above mentioned on-board sound on a (maybe 
> too) new-ish PC running --- googling showed quite a few dmesg's with 
> identical 'not-configured' lines?
> 
> $ man 4 auich only mentions support for the 'EB' version of the bridge.
> 
> Of course upgrading to CURRENT will be considered if helpful.

support was included on 2005/04/05. so yes, use a snapshot if you need
it right now, or wait for the 3.8 release.

-- 
steven


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

recommended USB 2.0 host adapters?

[steven mestdagh]

hi,

I'm going to extend my i386 machine with a USB 2.0 (PCI) host adapter.
Are there any recommended cards or cards that I should not buy or that
do not work?

thanks,

-- 
steven


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: Onboard and USB Sound Trouble

[steven mestdagh]

> Hello
> 
> 
> I have installed and used sound successfully in the past. I reread the
> man and faq pages
> about sound but still no good.
> 
> This is an amd64 setup so I dont know if that is the reason for my
> trouble. On motherboard
> is nForce4 AC97 and USB is Creative Technology SB Live! 24-bit External.
> 
> Neither one works (or seems to work) but both are supported as far as
> I know. The weirdest
> thing is that the usb audio comes up as uaudio0 and audio1 on the
> dmesg, however there
> is no /dev/audio1 nor /dev/uaudio0. Am I missing something here?

you can create extra device nodes with MAKEDEV(8).  in your case that
would be audio1 and mixer1.  then you can point audioctl and mixerctl
to the correct device with the -f flag or recreate the symlinks audio
and mixer to point to the right device.

if you decide to use only one sound device, you could also disable for
example the onboard sound in your kernel. then your USB sound will end
up at audio0 - see boot_config(8).

no idea why you onboard sound isn't working. do you get any errors when
using audio software, like mpg123, xmms, ... ?  if you don't get errors,
you could try unmuting all outputs, sometimes some of them get swapped.

steven

Re: subversion port 3.7 problem

[steven mestdagh]

On Wed, May 25, 2005 at 05:22:54PM -0400, Price, Joe wrote:
> Hi, when I try to build subversion on 3.7 i386 I get:
>  
>  
> []
>  
> main.o -c 
> /usr/ports/devel/subversion/w-subversion-1.1.3p0/subversion-1.1.3/subversion/svnadmin/main.c
> cd subversion/svnadmin && /bin/sh 
> /usr/ports/devel/subversion/w-subversion-1.1.3p0/build-i386/libtool --silent 
> --mode=link cc  -O2 -pipe-DNEON_ZLIB -DNEON_SSL  -L/usr/local/lib/db4 
> -L/usr/local/lib  -rpath /usr/local/lib -o svnadmin  main.o 
> ../../subversion/libsvn_repos/libsvn_repos-1.la 
> ../../subversion/libsvn_fs/libsvn_fs-1.la 
> ../../subversion/libsvn_delta/libsvn_delta-1.la 
> ../../subversion/libsvn_subr/libsvn_subr-1.la /usr/local/lib/libaprutil-1.la 
> -ldb -lexpat -liconv /usr/local/lib/libapr-1.la -lintl -liconv  -lz
> /usr/local/lib/libsvn_subr-1.so.0.0: warning: sprintf() is often misused, 
> please use snprintf()
> main.o(.text+0x90b): In function `subcommand_recover':
> : undefined reference to `svn_repos_recover2'
> main.o(.text+0x9c1): In function `subcommand_recover':
> : undefined reference to `svn_repos_recover2'
> main.o(.text+0xe27): In function `subcommand_setlog':
> : undefined reference to `svn_repos_fs_change_rev_prop2'
> collect2: ld returned 1 exit status
> *** Error code 1
>  
> Stop in /usr/ports/devel/subversion/w-subversion-1.1.3p0/build-i386 (line 355 
> of 
> /usr/ports/devel/subversion/w-subversion-1.1.3p0/subversion-1.1.3/build-outputs.mk).
> *** Error code 1
>  
> Stop in /usr/ports/devel/subversion (line 1769 of 
> /usr/ports/infrastructure/mk/bsd.port.mk).
> 
>  
>  
> I have YET to build subversion for OpenBSD, I thought I'd let the port do it 
> for me =(
>  
> Any ideas?

works fine here. maybe it's linking in older libraries again (this should
not happen) from /usr/local/lib. so, are you sure you don't have any
older subversion libraries installed in /usr/local/lib, before starting
the build?

steven

skc0: bad VPD resource id: expected 82 got 0

[steven mestdagh]

hello,

the sk integrated in the MSI K8N Neo4 Platinum mainboard of this machine
is giving "device not configured". the following message appears
(full dmesg below):
skc0: bad VPD resource id: expected 82 got 0

also, the fd0 device is not recognized. it works fine with an i386 kernel.

thanks for any suggestions.
steven


OpenBSD 3.7-current (GENERIC) #89: Tue May 10 12:44:38 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 2147020800 (2096700K)
avail mem = 1836572672 (1793528K)
using 22937 buffers containing 214908928 bytes (209872K) of memory
mainbus0 (root)
cpu0 at mainbus0: (uniprocessor)
cpu0: AMD Athlon(tm) 64 Processor 3800+, 2412.63 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 
16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
pci0 at mainbus0 bus 0: configuration mode 1
vendor "Nvidia", unknown product 0x005e (class memory subclass miscellaneous, 
rev 0xa3) at pci0 dev 0 function 0 not configured
vendor "Nvidia", unknown product 0x0050 (class bridge subclass ISA, rev 0xa3) 
at pci0 dev 1 function 0 not configured
"Nvidia nForce4 SMBus" rev 0xa2 at pci0 dev 1 function 1 not configured
ohci0 at pci0 dev 2 function 0 vendor "Nvidia", unknown product 0x005a rev 
0xa2: irq 10, version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: Nvidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 10 ports with 10 removable, self powered
ehci0 at pci0 dev 2 function 1 vendor "Nvidia", unknown product 0x005b rev 
0xa3: irq 11
usb1 at ehci0: USB revision 2.0
uhub1 at usb1
uhub1: Nvidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub1: 10 ports with 10 removable, self powered
auich0 at pci0 dev 4 function 0 "Nvidia nForce4 AC-97" rev 0xa2: irq 12, 
nForce4 AC97
ac97: codec id 0x414c4790 (Avance Logic ALC850)
audio0 at auich0
pciide0 at pci0 dev 6 function 0 "Nvidia nForce4 IDE" rev 0xa2: DMA 
(unsupported), channel 0 configured to compatibility, channel 1 configured to 
compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
pciide0: channel 1 ignored (not responding; disabled or no drives?)
ppb0 at pci0 dev 9 function 0 vendor "Nvidia", unknown product 0x005c rev 0xa2
pci1 at ppb0 bus 1
"VIA VT6306 FireWire" rev 0x80 at pci1 dev 12 function 0 not configured
pciide1 at pci1 dev 13 function 0 "CMD Technology SiI3114 SATA" rev 0x02: DMA
pciide1: using irq 11 for native-PCI interrupt
"Nvidia CK804 LAN" rev 0xa3 at pci0 dev 10 function 0 not configured
ppb1 at pci0 dev 11 function 0 vendor "Nvidia", unknown product 0x005d rev 0xa3
pci2 at ppb1 bus 2
ppb2 at pci0 dev 12 function 0 vendor "Nvidia", unknown product 0x005d rev 0xa3
pci3 at ppb2 bus 3
skc0 at pci3 dev 0 function 0 "Marvell Yukon 8053" rev 0x15: irq 11
skc0: bad VPD resource id: expected 82 got 0
skc0: Marvell Yukon (Unknown) Gigabit Ethernet (0x1)
sk0 at skc0 port A: address 00:0c:76:4e:e6:68
skc0: unknown device type 182sk1 at skc0 port B: address 00:0c:76:4e:e6:68
skc0: unknown device type 182ppb3 at pci0 dev 13 function 0 vendor "Nvidia", 
unknown product 0x005d rev 0xa3
pci4 at ppb3 bus 4
ppb4 at pci0 dev 14 function 0 vendor "Nvidia", unknown product 0x005d rev 0xa3
pci5 at ppb4 bus 5
vga1 at pci5 dev 0 function 0 "ATI Radeon X300" rev 0x00
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"ATI Radeon X300 Sec" rev 0x00 at pci5 dev 0 function 1 not configured
pchb0 at pci0 dev 24 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb1 at pci0 dev 24 function 1 "AMD AMD64 Address Map" rev 0x00
pchb2 at pci0 dev 24 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb3 at pci0 dev 24 function 3 "AMD AMD64 Misc Cfg" rev 0x00
isa0 at mainbus0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
lm0 at isa0 port 0x290/8: W83627THF
umass0 at uhub1 port 8 configuration 1 interface 0
umass0: USB2.0 External Mass Storage Device, rev 2.00/0.01, addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets
cd0 at scsibus0 targ 1 lun 0:  SCSI0 5/cdrom 
removable
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302

Re: number of files in dir

[steven mestdagh]

> Hello,
> I am unable to find a command that will list the number of total files
> in a directory and all subdirectories.
> Thank you in advance.

just pipe the output of find(1) to wc(1):

find . -type f | wc