openldap password fails to update

2014-03-07 Thread Stéphane Guedon
Hello everybody. I am currently finishing my openbsd server. Most of installation gone pretty well :-). I run now in openldap. I successfully installed the server and launched it in chroot for security. My problem is weird : using ldapadd, I can add peoples and stuff. ldapadd -x -D

Re: openldap password fails to update

2014-03-07 Thread Matthew Weigel
On 03/07/2014 04:22 AM, Stéphane Guedon wrote: # ldappasswd -x -v -D uid=test,ou=users,dc=22decembre,dc=eu \ -w somesecret -s anothersec ldap_initialize( DEFAULT ) Result: Other (e.g., implementation specific) error (80) Additional info: password hash failed I'm sorry, it's not clear that

Broadcom BCM5805 crypto accelerator

2014-03-07 Thread Andy Hayward
Cleaning out my firewall box (Atom 330 based) before upgrading, and I noticed it had a BCM5805 crypto accelerator card installed. Is there any reason to keep this these days (even an an entropy source for random(4)), or should I just recycle it as a door stop? Thanks.

Re: IPSec Packet Loss Help

2014-03-07 Thread Andy
Hi On Thu 06 Mar 2014 23:03:58 GMT, Zach Leslie wrote: On Thu, Mar 06, 2014 at 08:16:34PM +, Andy Lemin wrote: Hi, haven't read your original email but if my assumptions about your setup are correct is the VPN tunnel dropping every now and then? Thats correct. Daemons start up quick,

Re: ypldap 1024 character limit on groups?

2014-03-07 Thread Israel Brewster
On Mar 6, 2014, at 3:24 PM, Philip Guenther guent...@gmail.com wrote: On Mon, Mar 3, 2014 at 4:14 PM, Israel Brewster isr...@eraalaska.net wrote: I am working on setting up my OpenBSD 5.2 box to connect to my company LDAP server (Mac OS X 10.8.5 OpenDirectory). I have successfully installed

Re: ypldap 1024 character limit on groups?

2014-03-07 Thread Theo de Raadt
I see. Wow, that is a HUGE bug. Such maximum line lengths have been commonplace in Unix forever. This is not an OpenBSD-introduced problem; it is just something that has not yet been improved. Improvements come when people try to push forward along the curve. People like you...

Re: IPSec Packet Loss Help

2014-03-07 Thread Zach Leslie
On Fri, Mar 07, 2014 at 04:35:45PM +, Andy wrote: Hi On Thu 06 Mar 2014 23:03:58 GMT, Zach Leslie wrote: On Thu, Mar 06, 2014 at 08:16:34PM +, Andy Lemin wrote: Hi, haven't read your original email but if my assumptions about your setup are correct is the VPN tunnel dropping every

Re: Broadcom BCM5805 crypto accelerator

2014-03-07 Thread Christian Weisgerber
On 2014-03-07, Andy Hayward a...@buteo.org wrote: Cleaning out my firewall box (Atom 330 based) before upgrading, and I noticed it had a BCM5805 crypto accelerator card installed. Is there any reason to keep this these days (even an an entropy source for random(4)), or should I just recycle

Re: IPSec Packet Loss Help

2014-03-07 Thread Zach Leslie
I had to disable monitoring of the internal interfaces of both remote firewalls, as it killed the VPN when you ping'ed the backup firewall. The packets get there, but the reply is sent back directly from the backup and not via the master. To fix that I added a NAT rule, and could then

NTP timeout question

2014-03-07 Thread Jeff Simmons
Using OpenNPTD from stable. Syncing to two redundant satellite receivers that provide ntp service and also radio programming. The satellite receivers tend to lose time sync occasionally, but regain it fairly quickly. NPTD reports: reply from 192.168.1.102: not synced (alarm), next query 3156s

Re: I haven't heard of anyone else with this screen problem

2014-03-07 Thread Jan Stary
On Mar 05 15:53:06, glis...@witworx.com wrote: When booting and the screen goes to its 34 line 85 column mode, the text mode fits into 30cm wide and 22cm high at the top left corner of a 38cm wide 30cm high screen. With current/amd64 on an Intel Pineview video (full dmesg below) my text