Re: strange syslogd behaviour
Is 'tabs only' really necessary? Why are spaces bad? pf for example does not seem to care if I use spaces or tabs. because syslog.conf is a format from the nearly 40 years ago...
Re: Dovecot with OpenLDAP
On 2015-05-02, Markus Rosjat ros...@ghweb.de wrote: okay it seems dovecot runs root and not as the _dovecot user so applying a login class for the dovecote group only helps if you add root to it and nor it seems to start properly. How are you starting Dovecot? The login class mechanism is only used when started with rcctl or /etc.rc.d/dovecot. So lets see how far we get to configure ldap with it. This is the same as on other OS. 2. is it worth the effort trying to get sendmail (the ldap flavour) installed or should I just skip it for a different program? Use whichever MTA works best for you, there are several with LDAP support.
Re: tls with relayd (on 5.7) and key without password
That works ! Thanks a lot !
3 mai 2015 20:50 mxb a écrit:
Â
Try to
create symlink in /etc/ssl/private.
ln -s mydomain.org
(http://mydomain.org).key 1.2.3.4.key, where â1.2.3.4â is your address in
$ext_addr.
Â
//mxb
Â
Â
On 3 maj 2015, at 13:04, Comète wrote:Â
Hi,
my
tls key has no password and i already use it for other stuff, so i try to
enable TLS with relayd like this:
http protocol http_tls {
   tls tlsv1
   tls ca key /etc/ssl/private/mydomain.org.key password
   tls ca
cert /etc/ssl/mydomain.org.crt
}
relay transptls {
   listen on
$ext_addr port 443 tls
   protocol http_tls
   transparent forward
with tls to 127.0.0.1 port http
}
but i get this error:
startup
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
relay_load_certfiles: using ca certificate /etc/ssl/mydomain.org.crt
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
relay_load_certfiles: using ca key /etc/ssl/private/mydomain.org.key
/etc/relayd.conf:24: cannot load certificates for relay transptls
no actions,
nothing to do
ca exiting, pid 29173
pfe exiting, pid 19946
ca exiting, pid
3806
ca exiting, pid 24689
hce exiting, pid 32289
relay exiting, pid 22936
relay exiting, pid 25790
So, is it possible to use a tls key without password
with relayd ?
Thank you
Morgan
Â
Â
Re: Volume keys control
On Sun, May 3, 2015 at 12:46 PM, Alexandre Ratchov a...@caoua.org wrote: The volume keys always control the mixer of the first audio device, this can't be changed without modifying the kernel. If X is running, volume keys are additionaly exposed as X keys, and programs may use them to tweak the mixer in a contradictory way, and possibly mess it. I'd recommend to unmap them in X until this bug is fixed. What exactly is considered a bug here? The fact that the volume keys used by the kernel cannot be changed or that the mixer control by the kernel cannot be turned off? Thanks!
iwm0: fatal firmware error / could not initiate scan
Hi, I'm getting these console errors on startup and each time I run ifconfig iwm0 scan: iwm0: fatal firmware error iwm0: could not initiate scan Not sure how to diagnose the problem better. I tried rebooting, but to no avail. Full dmesg below. Best, Max OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar 8 11:04:17 MDT 2015 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 17088098304 (16296MB) avail mem = 16629297152 (15858MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xec170 (84 entries) bios0: vendor Intel Corp. version WYLPT10H.86A.0030.2014.0919.1139 date 09/19/2014 bios0: Intel Corporation D54250WYK acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT SSDT MCFG HPET SSDT SSDT DMAR CSRT acpi0: wakeup devices PS2K(S3) PS2M(S3) PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PXSX(S4) RP05(S4) PXSX(S4) RP06(S4) PXSX(S4) RP07(S4) [...] acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-4250U CPU @ 1.30GHz, 2295.06 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID cpu0: 256KB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges cpu0: apic clock running at 99MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Core(TM) i5-4250U CPU @ 1.30GHz, 2294.69 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID cpu1: 256KB 64b/line 8-way L2 cache cpu1: smt 0, core 1, package 0 cpu2 at mainbus0: apid 1 (application processor) cpu2: Intel(R) Core(TM) i5-4250U CPU @ 1.30GHz, 2294.69 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID cpu2: 256KB 64b/line 8-way L2 cache cpu2: smt 1, core 0, package 0 cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-4250U CPU @ 1.30GHz, 2294.69 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID cpu3: 256KB 64b/line 8-way L2 cache cpu3: smt 1, core 1, package 0 ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 40 pins acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (RP01) acpiprt2 at acpi0: bus 2 (RP04) acpiprt3 at acpi0: bus -1 (PEG0) acpiec0 at acpi0: not present acpicpu0 at acpi0: C2, C1, PSS acpicpu1 at acpi0: C2, C1, PSS acpicpu2 at acpi0: C2, C1, PSS acpicpu3 at acpi0: C2, C1, PSS acpipwrres0 at acpi0: FN00, resource for FAN0 acpipwrres1 at acpi0: FN01, resource for FAN1 acpipwrres2 at acpi0: FN02, resource for FAN2 acpipwrres3 at acpi0: FN03, resource for FAN3 acpipwrres4 at acpi0: FN04, resource for FAN4 acpitz0 at acpi0: critical temperature is 105 degC acpitz1 at acpi0: critical temperature is 105 degC acpibat0 at acpi0: BAT0 not present acpibat1 at acpi0: BAT1 not present acpibat2 at acpi0: BAT2 not present acpibtn0 at acpi0: PWRB acpibtn1 at acpi0: LID0 acpivideo0 at acpi0: GFX0 acpivout0 at acpivideo0: DD1F cpu0: Enhanced SpeedStep 2295 MHz: speeds: 1901, 1900, 1800, 1700, 1600, 1500, 1400, 1300, 1200, 1100, 1000, 900, 800, 779 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Core 4G Host rev 0x09 vga1 at pci0 dev 2 function 0 Intel HD Graphics 5000 rev 0x09 intagp at vga1 not configured inteldrm0 at vga1 drm0 at inteldrm0 error: [drm:pid0:i915_write32] *ERROR* Unknown unclaimed register before writing to 10 inteldrm0: 2560x1440 wsdisplay0 at vga1 mux 1: console (std, vt100 emulation) wsdisplay0: screen 1-5 added (std, vt100 emulation) azalia0 at pci0 dev 3 function 0 Intel Core 4G HD Audio rev 0x09: msi azalia0: No codecs found xhci0 at pci0 dev 20 function 0
silo overflows from nmea line discipline on 5.7
Hello! Upgraded a soekris to 5.7-stable (built by flashrd) over the weekend and since then I'm seeing the following in the logs: May 3 22:43:59 router /bsd: com4: 6 silo overflows, 0 ibuf overflows May 3 22:47:09 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 3 22:53:42 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 3 22:55:48 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 3 23:03:47 router last message repeated 2 times May 3 23:35:17 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 4 01:31:24 router /bsd: com4: 82 silo overflows, 0 ibuf overflows May 4 02:01:01 router /bsd: com4: 3 silo overflows, 0 ibuf overflows May 4 06:01:01 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 4 09:01:01 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 4 09:31:28 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 4 09:33:23 router /bsd: com4: 8 silo overflows, 0 ibuf overflows May 4 09:34:24 router /bsd: com4: 75 silo overflows, 0 ibuf overflows May 4 09:39:57 router /bsd: com4: 1 silo overflow, 0 ibuf overflows May 4 10:29:17 router /bsd: com4: 1 silo overflow, 0 ibuf overflows The GPS is attached by the following in /etc/ttys tty04 /sbin/ldattach -s 9600 -t dcd nmeaunknown on softcar The GPS itself is an Adafruit Ultimate GPS Breakout (https://www.adafruit.com/products/746) with a small MAX232 circuit for level conversion and to connect PPS output to DCD pin on the serial port. ntpd still reports the sensor is valid. I haven't noticed it changing to any state other than OK in hw.sensors (this is another project: using the new skgpio device to light up the Soekris' red LED when the sensor state changes to something bad!) I never noticed anything wrong with it on 5.6, although perhaps there was always an issue and it's merely being logged now? I've included a dmesg below. Cheers, Mark OpenBSD 5.7-stable (FLASHRD.MP) #3: Sat May 2 18:29:26 AEST 2015 r...@black.home:/usr/src/sys/arch/amd64/compile/FLASHRD.MP real mem = 1056833536 (1007MB) avail mem = 1022943232 (975MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0 acpi at bios0 not configured mpbios0 at bios0: Intel MP Specification 1.4 cpu0 at mainbus0: apid 0 (boot processor) cpu0: Genuine Intel(R) CPU @ 1.00GHz, 1000.14 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF cpu0: 512KB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges cpu0: apic clock running at 100MHz cpu0: mwait min=64, max=64, C-substates=0.2.2.0.2, IBE cpu1 at mainbus0: apid 1 (application processor) cpu1: Genuine Intel(R) CPU @ 1.00GHz, 1000.01 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF cpu1: 512KB 64b/line 8-way L2 cache cpu1: smt 1, core 0, package 0 mpbios0: bus 0 is type PCI mpbios0: bus 64 is type ISA ioapic0 at mainbus0: apid 0 pa 0xfec0, version 20, 24 pins cpu0: unknown Enhanced SpeedStep CPU, msr 0x06090a0a06000a0d cpu0: using only highest, current and lowest power states cpu0: Enhanced SpeedStep 1000 MHz: speeds: 1000, 1000, 600 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel E600 Host rev 0x05 pchb1 at pci0 dev 1 function 0 Intel E600 Config rev 0x00 ppb0 at pci0 dev 23 function 0 Intel E600 PCIE rev 0x00 pci1 at ppb0 bus 1 ppb1 at pci1 dev 0 function 0 Intel EG20T PCIE rev 0x01 pci2 at ppb1 bus 2 Intel EG20T Packet Hub rev 0x01 at pci2 dev 0 function 0 not configured Intel EG20T Ethernet rev 0x02 at pci2 dev 0 function 1 not configured Intel EG20T GPIO rev 0x01 at pci2 dev 0 function 2 not configured ohci0 at pci2 dev 2 function 0 Intel EG20T USB rev 0x02: apic 0 int 19, version 1.0 ohci1 at pci2 dev 2 function 1 Intel EG20T USB rev 0x02: apic 0 int 19, version 1.0 ohci2 at pci2 dev 2 function 2 Intel EG20T USB rev 0x02: apic 0 int 19, version 1.0 ehci0 at pci2 dev 2 function 3 Intel EG20T USB rev 0x02: apic 0 int 19 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 Intel EG20T USB Client rev 0x02 at pci2 dev 2 function 4 not configured sdhc0 at pci2 dev 4 function 0 Intel EG20T SDIO rev 0x01: apic 0 int 18 sdmmc0 at sdhc0 sdhc1 at pci2 dev 4 function 1 Intel EG20T SDIO rev 0x01: apic 0 int 18 sdmmc1 at sdhc1 ahci0 at pci2 dev 6 function 0 Intel EG20T AHCI rev 0x02: msi, AHCI 1.1 scsibus1 at ahci0: 32 targets ohci3 at pci2 dev 8 function 0 Intel EG20T USB rev 0x02: apic 0 int 16, version 1.0 ohci4 at pci2 dev 8 function 1 Intel EG20T USB rev 0x02: apic 0 int 16, version 1.0 ohci5 at pci2 dev 8 function 2 Intel EG20T USB rev 0x02: apic 0 int 16, version 1.0 ehci1
Re: I need an advice how to debug livelock
Hi, Today I reported a similar observation to misc. Did you find out any more information? Some more info below. On 1 March 2015 at 09:23, Atanas Vladimirov vl...@bsdbg.net wrote: I have NMEA sensor (Garmin GPS 18x Lvc) which is used for time source for OpenNTPD Mine's a Adafruit Ultimate GPS Breakout, hooked up via a MAX232 and with PPS connected to DCD. /etc/ttys: ... tty01 /sbin/ldattach -t dcd nmeaunknown on mdmbuf ... tty04 /sbin/ldattach -s 9600 -t dcd nmeaunknown on softcar I also observed that kern.netlivelocks are increasing with one or two every two/three seconds. [ns]~$ sysctl -a | grep livelock kern.netlivelocks=2720 I'm not seeing this. Here my knowledge ends but I can provide more details if you tell me how. [ns]~$ uptime 11:28PM up 8 days, 1:28, 1 user, load averages: 0.36, 0.35, 0.33 [ns]~$ vmstat -i interrupt total rate irq0/clock9241233 199 irq0/ipi 2194964 irq99/ehci1 131910 irq96/com4 13270726 287 irq112/em07116867 154 irq113/em15191206 112 irq114/em2 495868 10 irq144/com0500 Total35548637 769 Mark
Need help with builtin httpd web server, `location`
Dear all, I'm trying to make Roundcube webmail work with the new httpd daemon in OpenBSD 5.7 release, but cannot get it work with `location` setting. *) Roundcube was downloaded from http://roundcube.net and extracted to /var/www/roundcubemail, i want to make it accessible with URL: https://[my_server]/mail/, but httpd always raises 404 error. *) php-fpm socket is /var/www/run/php-fpm.socket. I have Nginx running, and it works fine with php-fpm. (of course i stopped Nginx while testing httpd.) *) here's my /etc/httpd.conf: http://pastebin.com/2YUbsG75 The question is, how can i make Roundcube accessible with URL: https://[my_server]/mail/ (not to use a new virtual host). Helps/suggestions are greatly appreciated. :)
Volume keys control
Hello! I would be curious to know how the volume keys on the keyboard control the mixer. I suppose it can't be X11-related because the keys also work without X11. Is it possible to remap the volume keys? (Currently I have to press Fn-F11 on the Apple keyboard, which seems a bit cumbersome). Thanks! Clementine
Re: Dovecot with OpenLDAP
Am 03.05.2015 um 10:32 schrieb Stuart Henderson: On 2015-05-02, Markus Rosjat ros...@ghweb.de wrote: okay it seems dovecot runs root and not as the _dovecot user so applying a login class for the dovecote group only helps if you add root to it and nor it seems to start properly. How are you starting Dovecot? The login class mechanism is only used when started with rcctl or /etc.rc.d/dovecot. I enabled it with rcctl but like I said when I ps -aux use I get the info that the process is owned by root. So to fix the problem with teh open files I had to add root to _dovecot group to add the login class behaviour. So lets see how far we get to configure ldap with it. This is the same as on other OS. well I want to use existing database and a simple approach to copy the old db to the new installation seems to work beside some warnings I get for now but I think thats something I have to figure out 2. is it worth the effort trying to get sendmail (the ldap flavour) installed or should I just skip it for a different program? Use whichever MTA works best for you, there are several with LDAP support. well Im a bit scared when I see the sendmail setup from a old system I use as reference so I was just wondering if its worth to go the painful way to in trying to get it to work on a testsystem :-P -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think about your responsibility and commitment to the ENVIRONMENT
Re: cdce0 in ifconfig
On 2015-04-29, Cristián Edwards cri...@gmail.com wrote: Problem is that only the ugen driver is present... so I think there is no chance of speaking with the modem. Will read the link thoruoughly You have a cdce device. As sthen@ already kindly suggested, you should be able to just do dhclient cdce0.
tls with relayd (on 5.7) and key without password
Hi,
my tls key has no password and i already use it for other stuff, so i try to
enable TLS with relayd like this:
http protocol http_tls {
tls tlsv1
tls ca key /etc/ssl/private/mydomain.org.key password
tls ca cert /etc/ssl/mydomain.org.crt
}
relay transptls {
listen on $ext_addr port 443 tls
protocol http_tls
transparent forward with tls to 127.0.0.1 port http
}
but i get this error:
startup
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
relay_load_certfiles: using ca certificate /etc/ssl/mydomain.org.crt
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
relay_load_certfiles: using ca key /etc/ssl/private/mydomain.org.key
/etc/relayd.conf:24: cannot load certificates for relay transptls
no actions, nothing to do
ca exiting, pid 29173
pfe exiting, pid 19946
ca exiting, pid 3806
ca exiting, pid 24689
hce exiting, pid 32289
relay exiting, pid 22936
relay exiting, pid 25790
So, is it possible to use a tls key without password with relayd ?
Thank you
Morgan
Re: Fwd: Thursday's Calendar ~double entry, spelt differently
On Apr 30 10:13:43, j...@kerhand.co.uk wrote: hi. i used the spelling adolf for calendar.birthday, but just removed the suicide entry since it's already in history. Just make it Mr. Hilter and Mr. Bimmler and be done with hit.
Re: Volume keys control
On Sun, May 03, 2015 at 11:10:02AM -0400, Sandrine Duvalier wrote: Hello! I would be curious to know how the volume keys on the keyboard control the mixer. I suppose it can't be X11-related because the keys also work without X11. The volume keys always control the mixer of the first audio device, this can't be changed without modifying the kernel. If X is running, volume keys are additionaly exposed as X keys, and programs may use them to tweak the mixer in a contradictory way, and possibly mess it. I'd recommend to unmap them in X until this bug is fixed. Is it possible to remap the volume keys? (Currently I have to press Fn-F11 on the Apple keyboard, which seems a bit cumbersome). In X yes with xmodmap, but this would only affect how they behave in X.
Re: Dovecot with OpenLDAP
okay openLDAP seems to be more tricky then expected ... I get the slapd running and with slapcat I can get information for a user but when I try to modify stuff with ldapmodify slapd instantly dies with a cant connect to server even the log shows I was connected befor I try to submit the changes. Like I said I just copied the openldap files from one machine to another and changed the config to fit the config of the old config. I tried some stuff from the net with recover and rebuild but this doesnt seem to work at all. does someone out there has another clue ? Am 03.05.2015 um 11:42 schrieb Markus Rosjat: Am 03.05.2015 um 10:32 schrieb Stuart Henderson: On 2015-05-02, Markus Rosjat ros...@ghweb.de wrote: okay it seems dovecot runs root and not as the _dovecot user so applying a login class for the dovecote group only helps if you add root to it and nor it seems to start properly. How are you starting Dovecot? The login class mechanism is only used when started with rcctl or /etc.rc.d/dovecot. I enabled it with rcctl but like I said when I ps -aux use I get the info that the process is owned by root. So to fix the problem with teh open files I had to add root to _dovecot group to add the login class behaviour. So lets see how far we get to configure ldap with it. This is the same as on other OS. well I want to use existing database and a simple approach to copy the old db to the new installation seems to work beside some warnings I get for now but I think thats something I have to figure out 2. is it worth the effort trying to get sendmail (the ldap flavour) installed or should I just skip it for a different program? Use whichever MTA works best for you, there are several with LDAP support. well Im a bit scared when I see the sendmail setup from a old system I use as reference so I was just wondering if its worth to go the painful way to in trying to get it to work on a testsystem :-P -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think about your responsibility and commitment to the ENVIRONMENT
Tmux mouse problem with copy-mode on wheelup
With tmux's mouse changes, everything is set up by default except one thing I'm trying to get back. It used to be that if you mouse scrolled up in a pane, it would enter copy mode and start scrolling up through history. It doesn't enter copy mode anymore. If I enter copy mode via the keyboard, I can still scroll through history as normal. However, if I map the mouse WheelUp to copy-mode, it will enter copy mode but scrolling up goes one or two lines at a time and isn't a smooth scroll anymore. This is what I am trying: bind-key WheelUpPane copy-mode -t = I imagine it's processing the copy-mode command every 'tick' of the wheel (it's actually a trackpad) and interrupting the scrolling. Is there a configuration solution to this? Like a way to bind the command only to not copy-mode? Tim.
Re: tls with relayd (on 5.7) and key without password
Try to create symlink in /etc/ssl/private.
ln -s mydomain.org http://mydomain.org/.key 1.2.3.4.key, where â1.2.3.4â
is your address in $ext_addr.
//mxb
On 3 maj 2015, at 13:04, Comète com...@daknet.org wrote:
Hi,
my tls key has no password and i already use it for other stuff, so i try to
enable TLS with relayd like this:
http protocol http_tls {
tls tlsv1
tls ca key /etc/ssl/private/mydomain.org.key password
tls ca cert /etc/ssl/mydomain.org.crt
}
relay transptls {
listen on $ext_addr port 443 tls
protocol http_tls
transparent forward with tls to 127.0.0.1 port http
}
but i get this error:
startup
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
relay_load_certfiles: using ca certificate /etc/ssl/mydomain.org.crt
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
relay_load_certfiles: using ca key /etc/ssl/private/mydomain.org.key
/etc/relayd.conf:24: cannot load certificates for relay transptls
no actions, nothing to do
ca exiting, pid 29173
pfe exiting, pid 19946
ca exiting, pid 3806
ca exiting, pid 24689
hce exiting, pid 32289
relay exiting, pid 22936
relay exiting, pid 25790
So, is it possible to use a tls key without password with relayd ?
Thank you
Morgan
uhci0: host controller process error / host controller halted
Preface: I'd like to know what I can do to get some more detail about this before firing off a sendbug. I can't reliably replicate it, but I can guarantee it will happen to me repeatedly with just a bit of normal computing use. On my old 2006-era MacBook (MacBook2,1), I decided I'd finally upgrade from Snow Leopard to something a bit more modern. OpenBSD 5.7 is working great for the most part, except I occasionally lose the USB port. Plugging into the other port (there are only two on this model), my peripherals come back. Initially, I thought that this happened only under high CPU load. I'm running XFCE4 and in all cases, I've had Chromium up and running. The first time, I was also extracting ports.tar.gz, sys.tar.gz and src.tar.gz at the same time, with a 5.xx load average. The second time, I had just logged into my GMail account and opened a tab loading Twitter. This most recent time a few minutes ago, not much was going on. Chrome was open, but I was SSH'd into something else and typing when it happened. My load average was 0.12 or so when I caught it. It seems to happen when I'm actively typing and/or using the mouse. If I let it sit overnight, it won't do it on its own. I'm including a full dmesg and process list. You can see where my KVM and USB HIDs came back at the end. OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar 8 11:04:17 MDT 2015 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2098167808 (2000MB) avail mem = 2038456320 (1944MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe (37 entries) bios0: vendor Apple Inc. version MB21.88Z.00A5.B07.0706270922 date 06/27/07 bios0: Apple Inc. MacBook2,1 acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP HPET APIC MCFG ASF! SBST ECDT SSDT SSDT SSDT acpi0: wakeup devices ADP1(S3) LID0(S3) PXS1(S4) PXS2(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB7(S3) EC__(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpihpet0 at acpi0: 14318179 Hz acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM)2 CPU T7200 @ 2.00GHz, 1995.33 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,NXE,LONG,LAHF,PERF cpu0: 4MB 64b/line 16-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges cpu0: apic clock running at 166MHz cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM)2 CPU T7200 @ 2.00GHz, 1995.01 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,NXE,LONG,LAHF,PERF cpu1: 4MB 64b/line 16-way L2 cache cpu1: smt 0, core 1, package 0 ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 1 acpimcfg0 at acpi0 addr 0xf000, bus 0-255 acpiec0 at acpi0 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (RP01) acpiprt2 at acpi0: bus 2 (RP02) acpiprt3 at acpi0: bus 3 (PCIB) acpicpu0 at acpi0: C3, C2, C1, PSS acpicpu1 at acpi0: C3, C2, C1, PSS acpiac0 at acpi0: AC unit online acpibtn0 at acpi0: LID0 acpibtn1 at acpi0: PWRB acpibtn2 at acpi0: SLPB acpibat0 at acpi0: BAT0 not present acpivideo0 at acpi0: GFX0 cpu0: Enhanced SpeedStep 1995 MHz: speeds: 2000, 1833, 1667, 1500, 1333, 1000 MHz memory map conflict 0x7ef0/0x10 memory map conflict 0x7f00/0x100 memory map conflict 0xf00f8000/0x1000 memory map conflict 0xfed1c000/0x4000 memory map conflict 0xfffb/0x3 pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel 82945GM Host rev 0x03 vga1 at pci0 dev 2 function 0 Intel 82945GM Video rev 0x03 intagp0 at vga1 agp0 at intagp0: aperture at 0x8000, size 0x1000 inteldrm0 at vga1 drm0 at inteldrm0 inteldrm0: 1280x800 wsdisplay0 at vga1 mux 1: console (std, vt100 emulation) wsdisplay0: screen 1-5 added (std, vt100 emulation) Intel 82945GM Video rev 0x03 at pci0 dev 2 function 1 not configured vendor Intel, unknown product 0x27a3 (class DASP subclass Time and Frequency, rev 0x03) at pci0 dev 7 function 0 not configured azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x02: msi azalia0: codecs: Sigmatel STAC9220/1 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x02: msi pci1 at ppb0 bus 1 mskc0 at pci1 dev 0 function 0 Marvell Yukon 88E8053 rev 0x22, Yukon-2 EC rev. A3 (0x2): apic 1 int 16 msk0 at mskc0 port A: address 00:17:f2:f2:0e:62 eephy0 at msk0 phy 0: 88E Gigabit PHY, rev. 2 ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x02: msi pci2 at ppb1 bus 2 athn0 at pci2 dev 0 function 0 Atheros AR5418 rev 0x01: apic 1 int 17 athn0: MAC AR5418 rev 2, RF AR5133 (2T3R), ROM rev 4,
