Re: Putting OPIE to rest

2022-09-15 Thread Dag-Erling Smørgrav
grarpamp  writes:
> OPIE is the only PAM that allows printing out the future
> secure tokens. Old school, secure, it just works.
>
> HOTP requires hardware, TOTP requires time,
> neither are printable, both of those require some other
> [hackable] hw/sw device that costs $$$ money, and
> those devices all have different threat/failure/admin models
> than simple paper.

Neither HOTP nor TOTP require dedicated devices.  HOTP codes are
sequential and can be pre-generated and printed if that's what you
prefer.

DES
-- 
Dag-Erling Smørgrav - d...@des.no



Re: Putting OPIE to rest

2022-09-15 Thread grarpamp
On 9/15/22, Dag-Erling Smørgrav  wrote:
> I will be removing OPIE from the main branch within the next few days.
> It has long outlived its usefulness.  Anyone still using it should look
> into OATH HOTP / TOTP instead (cf. security/pam_google_authenticator).
> https://reviews.freebsd.org/D36592

At least so long as PAM remains available, OPIE should be
maintained as a PAM option, and be updated.

OPIE is the only PAM that allows printing out the future
secure tokens. Old school, secure, it just works.

HOTP requires hardware, TOTP requires time,
neither are printable, both of those require some other
[hackable] hw/sw device that costs $$$ money, and
those devices all have different threat/failure/admin models
than simple paper.

If people don't like...
- The hash algo, a volunteer committer can update it to sha256.
- The list of words, a volunteer committer can update it to
read from a list of admin supplied words in:
/etc/opie_words.txt
- The number of words, a volunteer committer can add an
option to the config for that.
- The writeable state breaking in a read-only root, a volunteer
committer can add a config option to point that elsewhere.
- The randomness, a volunteer committer can update it
to modern randomness.

And if people still don't like it, then commit those simple updates,
and push it out to ports, instead of killing users use of it.



Re: TP-LINK USB no carrier after speed test

2022-09-15 Thread void

On Thu, Sep 15, 2022 at 01:45:11PM -0300, Ivan Quitschal wrote:


capabilities=68009b
ether 54:af:97:86:be:2c
inet 192.168.0.35 netmask 0xff00 broadcast 192.168.0.255
media: Ethernet 1000baseT 
status: active
supported media:
media autoselect
media 1000baseT mediaopt full-duplex,master
media 1000baseT mediaopt full-duplex
media 100baseTX mediaopt full-duplex
media 100baseTX
media 10baseT/UTP mediaopt full-duplex
media 10baseT/UTP
media none
nd6 options=29


In /etc/rc.conf, is it autoselected (so no mediaopt line) 
or are you specifying the media 1000baseT mediaopt full-duplex,master ?


I'm asking because some network devices sometimes seem to *require* 
the speed to be specified because they don't play well autonegotiating.

--



Re: TP-LINK USB no carrier after speed test

2022-09-15 Thread Ivan Quitschal




On Thu, 15 Sep 2022, Ivan Quitschal wrote:




On Thu, 15 Sep 2022, Ivan Quitschal wrote:




On Thu, 15 Sep 2022, Hans Petter Selasky wrote:


On 9/15/22 17:18, Hans Petter Selasky wrote:

On 9/15/22 17:16, Ivan Quitschal wrote:


Hi All

Does anybody have any idea what could be happening here?.
I have a laptop DELL INSPIRON 3511 and everything works just fine, 
literally everything. even the iwlwifi0.


But in order to use my full 600mbps, i dont use the wireless but a 
TP-LINK USB ethernet connected on "ue0"


ugen0.6:  at usbus0, cfg=0 md=HOST spd=HIGH 
(480Mbps) pwr=ON (200mA)



but something really strange is happening .. everytime i open the 
chromium e do a speedtest (could be speedtest.net or any other) , at the 
end of the test the eth interface dies .. it changes from full-duplex to 
half-duplex/no carrier and the only way to get the internet back thru 
ue0 is by rebooting the whole thing.

not even a "service netif restart" does anything

if anyone has any ideas why is that , would be appreciated



Hi,

I think it some new features they use in the USB data protocol which we 
don't support. Check the Linux code.


Between does:

usbconfig -d 0.6 reset

recover the device?

--HPS



Hi,

Search for axge on bugzilla:

I suspect you are using this chipset:

Try:

usbconfig show_ifdrv

To know for sure.

Also see:

https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugs.freebsd.org%2Fbugzilla%2Fshow_bug.cgi%3Fid%3D210488data=05%7C01%7C%7C84d8684abc754f0596a108da97302431%7C84df9e7fe9f640afb435%7C1%7C0%7C637988530285207791%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=Lrg%2Fy3DsJOZj8MedxLJz2nkpm0swb8W%2F%2Bk1ZoRPKMT8%3Dreserved=0

--HPS




Hi Hans,

actually the driver i use is not agxe (i thought it would be by the time i
bought the usbcard)

this is the module im using

if_ure.ko

and thank you , yes, reseting the usb entry with your command worked just 
fine.

i got the internet back after doing this

usbconfig -d 0.6 reset

do we have a bug here then?

thank you

--tzk



oh, i forgot to mention that the ure driver freezes not during the download 
test but in the middle of the upload, always


dont know if that helps

thanks

--tzk



hi Hans

i've seen you made 2 patches for ure driver which looked like a little with the 
problem im having here.


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256675

problem is, its not compiling any longer, code must have changed since you made 
the patch.


regarding the "axge" bugzilla you sent me , THATS EXACTLY the problem im 
having. The workaround for the guy's problem 
was doing this:


# ifconfig ue0 media 1000baseT mediaopt flow

problem is, my ure/ue0 interface does not have that option "flow"

-
[tzk@tzk-inspiron ~ ]$ ifconfig -m ue0
ue0: flags=8843 metric 0 mtu 1500

options=68009b

capabilities=68009b
ether 54:af:97:86:be:2c
inet 192.168.0.35 netmask 0xff00 broadcast 192.168.0.255
media: Ethernet 1000baseT 
status: active
supported media:
media autoselect
media 1000baseT mediaopt full-duplex,master
media 1000baseT mediaopt full-duplex
media 100baseTX mediaopt full-duplex
media 100baseTX
media 10baseT/UTP mediaopt full-duplex
media 10baseT/UTP
media none
nd6 options=29


any ideas or any other patch you made ?
appreciate any insights

thanks in advance

--tzk



Re: TP-LINK USB no carrier after speed test

2022-09-15 Thread Ivan Quitschal




On Thu, 15 Sep 2022, Ivan Quitschal wrote:




On Thu, 15 Sep 2022, Hans Petter Selasky wrote:


On 9/15/22 17:18, Hans Petter Selasky wrote:

On 9/15/22 17:16, Ivan Quitschal wrote:


Hi All

Does anybody have any idea what could be happening here?.
I have a laptop DELL INSPIRON 3511 and everything works just fine, 
literally everything. even the iwlwifi0.


But in order to use my full 600mbps, i dont use the wireless but a 
TP-LINK USB ethernet connected on "ue0"


ugen0.6:  at usbus0, cfg=0 md=HOST spd=HIGH 
(480Mbps) pwr=ON (200mA)



but something really strange is happening .. everytime i open the 
chromium e do a speedtest (could be speedtest.net or any other) , at the 
end of the test the eth interface dies .. it changes from full-duplex to 
half-duplex/no carrier and the only way to get the internet back thru ue0 
is by rebooting the whole thing.

not even a "service netif restart" does anything

if anyone has any ideas why is that , would be appreciated



Hi,

I think it some new features they use in the USB data protocol which we 
don't support. Check the Linux code.


Between does:

usbconfig -d 0.6 reset

recover the device?

--HPS



Hi,

Search for axge on bugzilla:

I suspect you are using this chipset:

Try:

usbconfig show_ifdrv

To know for sure.

Also see:

https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugs.freebsd.org%2Fbugzilla%2Fshow_bug.cgi%3Fid%3D210488data=05%7C01%7C%7Ce7f888b3635f4e898ca308da972fa69b%7C84df9e7fe9f640afb435%7C1%7C0%7C637988528164303655%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=zvw7m8lJ%2FHocK%2FXJIDfdPv%2FArCpE5pk9lYz%2BY8WzMCc%3Dreserved=0

--HPS




Hi Hans,

actually the driver i use is not agxe (i thought it would be by the time i
bought the usbcard)

this is the module im using

if_ure.ko

and thank you , yes, reseting the usb entry with your command worked just 
fine.

i got the internet back after doing this

usbconfig -d 0.6 reset

do we have a bug here then?

thank you

--tzk



oh, i forgot to mention that the ure driver freezes not during the 
download test but in the middle of the upload, always


dont know if that helps

thanks

--tzk



Re: TP-LINK USB no carrier after speed test

2022-09-15 Thread Ivan Quitschal




On Thu, 15 Sep 2022, Hans Petter Selasky wrote:


On 9/15/22 17:18, Hans Petter Selasky wrote:

On 9/15/22 17:16, Ivan Quitschal wrote:


Hi All

Does anybody have any idea what could be happening here?.
I have a laptop DELL INSPIRON 3511 and everything works just fine, 
literally everything. even the iwlwifi0.


But in order to use my full 600mbps, i dont use the wireless but a TP-LINK 
USB ethernet connected on "ue0"


ugen0.6:  at usbus0, cfg=0 md=HOST spd=HIGH 
(480Mbps) pwr=ON (200mA)



but something really strange is happening .. everytime i open the chromium 
e do a speedtest (could be speedtest.net or any other) , at the end of the 
test the eth interface dies .. it changes from full-duplex to 
half-duplex/no carrier and the only way to get the internet back thru ue0 
is by rebooting the whole thing.

not even a "service netif restart" does anything

if anyone has any ideas why is that , would be appreciated



Hi,

I think it some new features they use in the USB data protocol which we 
don't support. Check the Linux code.


Between does:

usbconfig -d 0.6 reset

recover the device?

--HPS



Hi,

Search for axge on bugzilla:

I suspect you are using this chipset:

Try:

usbconfig show_ifdrv

To know for sure.

Also see:

https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugs.freebsd.org%2Fbugzilla%2Fshow_bug.cgi%3Fid%3D210488data=05%7C01%7C%7Cedde022bc19842d21eec08da972e3fb5%7C84df9e7fe9f640afb435%7C1%7C0%7C637988522152537501%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7Csdata=wWy4fA5uwNIN2SC%2F1BNEwdJP6pHW5bsrKyhuVkbHEZs%3Dreserved=0

--HPS




Hi Hans,

actually the driver i use is not agxe (i thought it would be by the time i
bought the usbcard)

this is the module im using

if_ure.ko

and thank you , yes, reseting the usb entry with your command worked just fine.
i got the internet back after doing this

usbconfig -d 0.6 reset

do we have a bug here then?

thank you

--tzk






Re: TP-LINK USB no carrier after speed test

2022-09-15 Thread Hans Petter Selasky

On 9/15/22 17:18, Hans Petter Selasky wrote:

On 9/15/22 17:16, Ivan Quitschal wrote:


Hi All

Does anybody have any idea what could be happening here?.
I have a laptop DELL INSPIRON 3511 and everything works just fine, 
literally everything. even the iwlwifi0.


But in order to use my full 600mbps, i dont use the wireless but a 
TP-LINK USB ethernet connected on "ue0"


ugen0.6:  at usbus0, cfg=0 md=HOST 
spd=HIGH (480Mbps) pwr=ON (200mA)



but something really strange is happening .. everytime i open the 
chromium e do a speedtest (could be speedtest.net or any other) , at 
the end of the test the eth interface dies .. it changes from 
full-duplex to half-duplex/no carrier and the only way to get the 
internet back thru ue0 is by rebooting the whole thing.

not even a "service netif restart" does anything

if anyone has any ideas why is that , would be appreciated



Hi,

I think it some new features they use in the USB data protocol which we 
don't support. Check the Linux code.


Between does:

usbconfig -d 0.6 reset

recover the device?

--HPS



Hi,

Search for axge on bugzilla:

I suspect you are using this chipset:

Try:

usbconfig show_ifdrv

To know for sure.

Also see:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210488

--HPS



Re: TP-LINK USB no carrier after speed test

2022-09-15 Thread Hans Petter Selasky

On 9/15/22 17:16, Ivan Quitschal wrote:


Hi All

Does anybody have any idea what could be happening here?.
I have a laptop DELL INSPIRON 3511 and everything works just fine, 
literally everything. even the iwlwifi0.


But in order to use my full 600mbps, i dont use the wireless but a 
TP-LINK USB ethernet connected on "ue0"


ugen0.6:  at usbus0, cfg=0 md=HOST spd=HIGH 
(480Mbps) pwr=ON (200mA)



but something really strange is happening .. everytime i open the 
chromium e do a speedtest (could be speedtest.net or any other) , at the 
end of the test the eth interface dies .. it changes from full-duplex to 
half-duplex/no carrier and the only way to get the internet back thru 
ue0 is by rebooting the whole thing.

not even a "service netif restart" does anything

if anyone has any ideas why is that , would be appreciated



Hi,

I think it some new features they use in the USB data protocol which we 
don't support. Check the Linux code.


Between does:

usbconfig -d 0.6 reset

recover the device?

--HPS



TP-LINK USB no carrier after speed test

2022-09-15 Thread Ivan Quitschal



Hi All

Does anybody have any idea what could be happening here?.
I have a laptop DELL INSPIRON 3511 and everything works just fine, literally 
everything. even the iwlwifi0.


But in order to use my full 600mbps, i dont use the wireless but a TP-LINK USB 
ethernet connected on "ue0"


ugen0.6:  at usbus0, cfg=0 md=HOST spd=HIGH 
(480Mbps) pwr=ON (200mA)



but something really strange is happening .. everytime i open the chromium e do 
a speedtest (could be speedtest.net or any other) , at the end of the test the 
eth interface dies .. it changes from full-duplex to half-duplex/no carrier and 
the only way to get the internet back thru ue0 is by rebooting the whole thing.

not even a "service netif restart" does anything

if anyone has any ideas why is that , would be appreciated

thanks

--tzk






Putting OPIE to rest

2022-09-15 Thread Dag-Erling Smørgrav
I will be removing OPIE from the main branch within the next few days.
It has long outlived its usefulness.  Anyone still using it should look
into OATH HOTP / TOTP instead (cf. security/pam_google_authenticator).

https://reviews.freebsd.org/D36592

DES
-- 
Dag-Erling Smørgrav - d...@des.no