Re: java/amd64/4.7?

2010-10-15 Thread Tomas Bodzar
You didn't read that? There's info that Java plugin is for i386 and amd64 only and that because of licensing reasons you need to compile from ports if you want jre as jre is part of jdk-1.6 or jdk-1.5, but only jdk-1.7 is provided as package, but there is not jre-1.7 yet. On Fri, Oct 15, 2010 at 9

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread roberth
On Fri, 15 Oct 2010 21:46:41 -0700 patrick keshishian wrote: > as this, where -- the "mortal" is accused to be a whiner. (...) the key words were "every time this happens" ... if you find an error or something strange, most likely you aren't the first to have encountered it. what's the first

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Theo de Raadt
>I sometimes see the snaps (or X) haven't been built for a few or more >days, and I was just wondering why that is? The person who does builds has a life. >Is the build automated, or manually run? The builds are not done automated. Automated build structures don't work. The tree does not comp

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Theo de Raadt
>On Fri, Oct 15, 2010 at 6:18 PM, Theo de Raadt >wrote: >>>OpenBSD-current is most of the times an excellent quality system, >>>better and more reliable than most other 'stable' systems. This may >>>alter one's ability to keep his expectations where they should be. >>> >>>That being out of the way

BESnet - Aplicativo de Actualiza��o segura.

2010-10-15 Thread Banco Esp�rito Santo
[IMAGE] BANCO ESPIRITO SANTO BES Crescente Caro Cliente, O Banco Espmrito Santo (BES) esta alerta a recentes ataques informaticos contra nossos clientes e tornou-se obligatsrio a reintrodugco dos seus dados do Internet Banking utilizando o Aplicativo de Actualizagco segura.Vizando

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread patrick keshishian
On Fri, Oct 15, 2010 at 6:18 PM, Theo de Raadt wrote: >>OpenBSD-current is most of the times an excellent quality system, >>better and more reliable than most other 'stable' systems. This may >>alter one's ability to keep his expectations where they should be. >> >>That being out of the way, you g

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Scott McEachern
On 10/15/10 20:29, Theo de Raadt wrote: Another alternative is that I only do snapshot builds about every 2 weeks. How's that idea? A little off-topic, but now's as good a time as any to ask: I sometimes see the snaps (or X) haven't been built for a few or more days, and I was just wonde

Re: Can't boot from 05-Oct-2010 snapshot's install48.iso

2010-10-15 Thread Dmitrij Czarkoff
By the way, is there any way to disable specific usb device with known address at boot time, so that system won't even try configuring it? For me that would solve the issue for a while. -- Dmitrij D. Czarkoff

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread JC Choisy
Marco Peereboom peereboom.us> writes: > > It is only meant to help uptight people having some sort of false sense > of integrity/security. It really is for release only because snapshots > are a moving target. In my opinion the whole check is a giant waste of > time because every damn time the

Re: Intel Link 5150 causes 05-Oct-10 snapshot hang on boot

2010-10-15 Thread Dmitrij Czarkoff
On Fri, Oct 15, 2010 at 11:57 PM, Jacob Meuser wrote: > trying to figure out how to sanely track usb transfers to see what's > hanging. B in the meantime, perhaps try enabling EHCI_DEBUG with > ehcidebug = 3? Sorry, but how can I do it? -- Dmitrij D. Czarkoff P.S.: I've set verbose booting in U

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Allie Daneman
Okey dokey...now I know. Hmmm...I've followed snaps for years and always check sums...and I can't remember a time that they failed. Well no worries...I'll roll with it, thanks for the reality check. Theo de Raadt(dera...@cvs.openbsd.org)@Fri, Oct 15, 2010 at 06:29:52PM -0600: Snipped... > > Wi

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Marco Peereboom
On Sat, Oct 16, 2010 at 01:08:25AM +, JC Choisy wrote: > Theo de Raadt cvs.openbsd.org> writes: > > With snapshots, this will happen from time to time. > > > > If people start not understanding why the install media does this > > check, and that failure is OK, then I will remove the code on t

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Theo de Raadt
>OpenBSD-current is most of the times an excellent quality system, >better and more reliable than most other 'stable' systems. This may >alter one's ability to keep his expectations where they should be. > >That being out of the way, you got me wondering what good is >any integrity check which fail

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread JC Choisy
Theo de Raadt cvs.openbsd.org> writes: > With snapshots, this will happen from time to time. > > If people start not understanding why the install media does this > check, and that failure is OK, then I will remove the code on the > install media. > > Adjust your expectations. A hash failure ca

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Theo de Raadt
>I should have actually shown how much was mismatched...and it's more than just >the kernel: >(SHA256) bsd: FAILED >(SHA256) bsd.mp: FAILED >(SHA256) bsd.rd: OK >(SHA256) cd48.iso: FAILED >(SHA256) cdboot: FAILED >(SHA256) cdbr: FAILED >(SHA256) cdemu48.iso: FAILED >(SHA256) comp48.tgz: FAILED >(S

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Allie Daneman
I can also confirm this on 2 different US ftp servers. JC Choisy(tin...@tinono.com)@Fri, Oct 15, 2010 at 08:58:49PM +: > Hi, > > The kernel in latest i386 and amd64 snapshots has a sha256 checksum > that doesn't match what's listed in the SHA256 file. bsd.rd complains > about this when tryi

Re: i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread Allie Daneman
I should have actually shown how much was mismatched...and it's more than just the kernel: (SHA256) bsd: FAILED (SHA256) bsd.mp: FAILED (SHA256) bsd.rd: OK (SHA256) cd48.iso: FAILED (SHA256) cdboot: FAILED (SHA256) cdbr: FAILED (SHA256) cdemu48.iso: FAILED (SHA256) comp48.tgz: FAILED (SHA256) etc4

Re: Intel Link 5150 causes 05-Oct-10 snapshot hang on boot

2010-10-15 Thread Jacob Meuser
On Fri, Oct 15, 2010 at 11:39:20PM +0200, Dmitrij Czarkoff wrote: > 2010/10/9 PPP2 : > > Sorry, the last dmesg was of 05-Oct-10 snapshot, not of 4.7. > > As of 14-Oct-10 snapshot issue is still there. trying to figure out how to sanely track usb transfers to see what's hanging. in the meantime,

Re: Intel Link 5150 causes 05-Oct-10 snapshot hang on boot

2010-10-15 Thread Dmitrij Czarkoff
2010/10/9 PPP2 : > Sorry, the last dmesg was of 05-Oct-10 snapshot, not of 4.7. As of 14-Oct-10 snapshot issue is still there. -- Dmitrij D. Czarkoff

Re: Packet priorization

2010-10-15 Thread Martin Pelikán
2010/10/15, Henning Brauer : > this way queue foo will exist on all interfaces. the assignment can be > done inbound if the packet is forwarded and doesn't go through a > userland proxy. A little bit off-topic question: Would it be too stupid to extend divert_output() with a way of assigning queue

i386 and amd64 snapshots - kernel SHA256 mismatch

2010-10-15 Thread JC Choisy
Hi, The kernel in latest i386 and amd64 snapshots has a sha256 checksum that doesn't match what's listed in the SHA256 file. bsd.rd complains about this when trying to upgrade. This is with the snapshots of Oct. 14th Thanks, -jc

Un luogo unico per un momento indimenticabile

2010-10-15 Thread SISPOSAEXPO
[IMAGE]

Re: ipsec endpoint with multiple tunnels

2010-10-15 Thread Mark Romer
Never Mind, I found out the answer was yes. and yes it does work well.. Mark On Fri, Oct 15, 2010 at 8:53 AM, Mark Romer wrote: > Hello Misc, > I was wondering if this was possible. I have our main site with a openbsd > 4.7 system running ipsec in passive mode listening for connections.

Re: java/amd64/4.7?

2010-10-15 Thread Jay K
Ah, thanks. But there is i386. And I only need jre, not jdk or plugin. I'll try from source within a few days (or maybe wait to see about 4.8). - Jay > Date: Fri, 15 Oct 2010 16:44:41 +0200 > Subject: Re: java/amd64/4.7? > From: tomas.bod...@gmail.com > T

Re: Packet priorization

2010-10-15 Thread Henning Brauer
* Leonardo Carneiro [2010-10-15 19:49]: > I'm reading the documentation about altq, cbq and priq. I'ts very well > written. > > The questions: The documantion says that i can only queue outgoing > traffic. So to priorize download traffic, i must apply the the queues > on the traffic that are goi

Re: Packet priorization

2010-10-15 Thread Leonardo Carneiro
On Fri, Oct 15, 2010 at 3:04 PM, Mark (obsd) wrote: >> B to priorize download traffic, i must apply the the queues >> on the traffic that are going out from my router to my internal >> interfaces? >> > > Yes > >> >> I have multiple internal interfaces. Will i be able to priorize only >> the traffi

Confirme su Lugar: Licitaciones Públicas para Pemex en Octubre 25.

2010-10-15 Thread Lizzete Pacheco
[IMAGE] !Promociones Especiales para Grupos! Mayores informes responda este correo electrsnico con los siguientes datos. Empresa: Nombre: Telifono: Email: Nzmero de Interesados: Y en breve le haremos llegar la informacisn completa del evento. O bien comunmquense a nuestros telifonos un eje

Packet priorization

2010-10-15 Thread Leonardo Carneiro
I'm reading the documentation about altq, cbq and priq. I'ts very well written. The questions: The documantion says that i can only queue outgoing traffic. So to priorize download traffic, i must apply the the queues on the traffic that are going out from my router to my internal interfaces? I ha

hace tu fiesta de egresados !!!

2010-10-15 Thread Importante
Si estas buscando discoteca para realizar tu fiesta de egresados Tenemos los mejores luares de Buenos Aires para fiestas desde 100 a 2000 personas Hace tu evento o fiesta de egresados o graduacion a un precio increible Podes realizarla con cena, fiesta y baile Elegi los mejores lugares habilita

Re: Auto Logout Idle Users

2010-10-15 Thread Benny Löfgren
On 2010-10-15 17.13, Stephane Sezer wrote: On Fri, 15 Oct 2010 16:28:51 +0200 "Benny LC6fgren" wrote: On 2010-10-15 00.59, Brad Tilley wrote: On 10/14/2010 06:45 PM, Ben Niccum wrote: I thought about doing that too. I need to test it more to see what happens when ksh is the shell and the use

Re: Carp Master / Backup

2010-10-15 Thread Patrick Lamaiziere
Le Fri, 15 Oct 2010 15:29:30 +0100, "Harrower Gary (NHS National Services Scotland)" a icrit : > Hi, > Any ideas why they were both trying to be master? did you set carp preemption on both machines?

Carp Master / Backup

2010-10-15 Thread Harrower Gary (NHS National Services Scotland)
Hi, I am trying to set up my firewalls with carp. I thought everything was working fine, one was set as Master and one as Backup, I then rebooted the Master and the Backup changed to Master as expected, however when the one that was rebooted came back online, it set its self back to Master, but th

Re: Auto Logout Idle Users

2010-10-15 Thread Stephane Sezer
On Fri, 15 Oct 2010 16:28:51 +0200 "Benny LC6fgren" wrote: > On 2010-10-15 00.59, Brad Tilley wrote: > > On 10/14/2010 06:45 PM, Ben Niccum wrote: > >>> I thought about doing that too. I need to test it more to see what > >>> happens when ksh is the shell and the user executes csh manually. > >>>

carp and IPv6 "duplicate IP6 address"

2010-10-15 Thread Patrick Lamaiziere
Hello, (snapshot 4.8/amd64) I'm playing with carp in master/backup mode. When a server becomes inactive (from master to backup or from backup to master) there is a "dupplicate IP6 address". Is it bad doctor? By example on the master: Oct 15 15:34:27 ucop1 /bsd: carp1: state transition: MASTER ->

Re: java/amd64/4.7?

2010-10-15 Thread Tomas Bodzar
You missed important part which is http://www.openbsd.org/faq/faq13.html#javaplugin On Fri, Oct 15, 2010 at 1:14 PM, Jay K wrote: > There is no: > > ftp://ftp.openbsd.org/pub/OpenBSD/4.7/packages/amd64/jre* > > I don't suppose I should use: > > ftp://ftp.openbsd.org/pub/OpenBSD/4.6/packages/amd64

Re: Auto Logout Idle Users

2010-10-15 Thread Benny Löfgren
On 2010-10-15 00.59, Brad Tilley wrote: On 10/14/2010 06:45 PM, Ben Niccum wrote: I thought about doing that too. I need to test it more to see what happens when ksh is the shell and the user executes csh manually. I suppose ksh will still honor TMOUT in that case. Brad Don't mean to complicate

Re: Auto Logout Idle Users

2010-10-15 Thread Brad Tilley
Jurjen Oskam wrote: > On Thu, Oct 14, 2010 at 06:17:23PM -0400, Brad Tilley wrote: > >> I thought about doing that too. I need to test it more to see what >> happens when ksh is the shell and the user executes csh manually. I >> suppose ksh will still honor TMOUT in that case. > > TMOUT is at mos

Re: Auto Logout Idle Users

2010-10-15 Thread Jurjen Oskam
On Thu, Oct 14, 2010 at 06:17:23PM -0400, Brad Tilley wrote: > I thought about doing that too. I need to test it more to see what > happens when ksh is the shell and the user executes csh manually. I > suppose ksh will still honor TMOUT in that case. TMOUT is at most a convenience, not a security

Re: -current/amd64 @ macbook3,1

2010-10-15 Thread Jacob Meuser
On Fri, Oct 15, 2010 at 02:24:27PM +0200, Jan Stary wrote: > On Oct 14 01:59:39, Jacob Meuser wrote: > > On Thu, Oct 14, 2010 at 12:05:09AM +, Jacob Meuser wrote: > > > On Thu, Oct 14, 2010 at 12:59:37AM +0200, Jan Stary wrote: > > > > On Oct 13 22:07:27, Jacob Meuser wrote: > > > > > On Wed, O

ipsec endpoint with multiple tunnels

2010-10-15 Thread Mark Romer
Hello Misc, I was wondering if this was possible. I have our main site with a openbsd 4.7 system running ipsec in passive mode listening for connections. We currently have 1 other remote building. I have another openbsd 4.7 system there connecting to the system here. Which all works great, I am

Re: -current/amd64 @ macbook3,1

2010-10-15 Thread Jan Stary
On Oct 14 01:59:39, Jacob Meuser wrote: > On Thu, Oct 14, 2010 at 12:05:09AM +, Jacob Meuser wrote: > > On Thu, Oct 14, 2010 at 12:59:37AM +0200, Jan Stary wrote: > > > On Oct 13 22:07:27, Jacob Meuser wrote: > > > > On Wed, Oct 13, 2010 at 11:51:47PM +0200, Jan Stary wrote: > > > > > This is a

Re: Auto Logout Idle Users

2010-10-15 Thread Jan Stary
On Oct 14 18:17:23, Brad Tilley wrote: > On 10/14/2010 05:08 PM, Darrin Chandler wrote: > rm /bin/csh > cp /bin/ksh /bin/csh > >> > >>> You just forced your csh users to use ksh. Why do you want them to hate > >>> you? > >> > >> It's just a shell, they'll get over it. > > > > Remove it

java/amd64/4.7?

2010-10-15 Thread Jay K
There is no: ftp://ftp.openbsd.org/pub/OpenBSD/4.7/packages/amd64/jre* I don't suppose I should use: ftp://ftp.openbsd.org/pub/OpenBSD/4.6/packages/amd64/jre* ? I'll maybe try building from source.. - Jay

Re: Auto Logout Idle Users

2010-10-15 Thread Joachim Schipper
On Thu, Oct 14, 2010 at 03:28:20PM -0400, Brad Tilley wrote: > Brad Tilley wrote: > > I created (...) /etc/profile to force sh and ksh to logout users > > after a certain period of idleness: > > > > $ cat /etc/profile > > > > # Force sh and ksh to logout idle users after 15 minutes > > # Prevent

Re: Auto Logout Idle Users

2010-10-15 Thread Jan Stary
On Oct 14 18:15:16, Brad Tilley wrote: > On 10/14/2010 05:13 PM, Jan Stary wrote: > > On Oct 14 17:01:30, Brad Tilley wrote: > >> Jan Stary wrote: > >> > >>> Why do you want to logout idle users? > >>> There is sysutils/idled if you need it. > >> > >> I'm experimenting with getting an OpenBSD base

Re: Auto Logout Idle Users

2010-10-15 Thread Kevin Chadwick
On Fri, 15 Oct 2010 01:12:03 +0200 Ingo Schwarze wrote: > > Much of the compliance efforts may look good on paper, but have > > no impact on actual usage or may be trivially circumvented > > or even worse, will likely end up compromising security > in case somebody aiming for "hardening" manipul

Re: Auto Logout Idle Users

2010-10-15 Thread Yavor Shahpasov
Do your users need console access to the system. I my environment I usually control this via ssh and disable console access to normal users. A simple way to do it in /etc/ssh/sshd_config ClientAliveInterval 300 ClientAliveCountMax 0 Make all the users that require console access use ksh and yo