Re: MegaRaid i4

2006-01-07 Thread Pailloncy Jean-Gerard
Yes, ide vs scsi benchmarks are usually skewed due to caching.   
SCSI disables

drive cache by default whereas IDE enables it by default.

Yes, I disable caching. So I get (really) bad performance.

I see the other thread about some broken MegaRaid i4.

What I can say is taht with 3.8-release, I have no problem to use  
bioctl.

# bioctl -i ami0
Volume  Status Size   Device
ami0 0 Online   249998344192 sd0 RAID1
  0 Online   249998344192 0:0.0   noencl Maxtor  
4A250J0  RAMB
  1 Online   249998344192 2:1.0   noencl Maxtor  
4A250J0  RAMB

ami0 1 Online   249998344192 sd1 RAID1
  0 Online   249998344192 3:0.0   noencl Maxtor  
4A250J0  RAMB
  1 Online   249998344192 1:1.0   noencl Maxtor  
4A250J0  RAMB

ami0 2 Degraded 46688384 sd2 RAID5
  0 Online   249998344192 3:1.0   noencl Maxtor  
4A250J0  RAMB
  1 Rebuild  249998344192 1:0.0   noencl Maxtor  
4A250J0  RAMB
  2 Online   249998344192 2:0.0   noencl Maxtor  
4A250J0  RAMB
ami0 3 Hot spare249998344192 0:1.0   noencl Maxtor  
4A250J0  RAMB


I broke the RAID-5 and it starts rebuilding.
I can setup new Hot-Spare.


But nothing was perfect, I had two crashes. I do not have ps and  
trace because I was using ddb.panic=0 to reboot the prod server  
automatically. The crash happens when I was on console, I disable  
ddb.panic=1, but luckily I get no other crash. And I can not do  
postmortem analysis because /var is to small to keep coredump in /var/ 
crash. I did not have test current. I do not want to stop this server  
too long.


So, here is the partial crash report (the dmesg is in one of my other  
mails in this thread). I hope it will be partially useful ;-)


fsync failed: type VDIR, usecount 0, writecount 0, holdcount 1, flags  
(VBIOONFREELIST|VBIOONSYNCLIST)
tag VT_UFS, ino 6987542, on dev 0, 9 flags 0x0, effnlink 2,  
nlink 2

mode 040755, owner 1000, group 1000, size 512 not locked
mounted on: /mnt
panic: sched_sync: fsync failed
Starting stack trace...
panic(d057fa84,d7c73960,ea077f5c,d7c73960,d7c73960) at panic+0x71
panic(d04f9970,d1b8b29c,d7d078f8,d17b4620,4) at panic+0x71
sched_sync(d7d078f8) at sched_sync+0x17a
Bad frame pointer: 0xd06f1ed8
End of stack trace.
syncing disks... 250 250 248 244 230 212 199 181 164 150 135 124 112  
108 102 89 69 45 23 1 giving up

rebooting...

fsync failed: type VDIR, usecount 0, writecount 0, holdcount 1, flags  
(VBIOONFREELIST|VBIOONSYNCLIST)
tag VT_UFS, ino 7011086, on dev 0, 9 flags 0x0, effnlink 2,  
nlink 2

mode 040755, owner 1000, group 1000, size 512 not locked
mounted on: /mnt
panic: sched_sync: fsync failed
Starting stack trace...
panic(d057fa84,d7c53e60,ea077f5c,d7c53e60,d7c53e60) at panic+0x71
panic(d04f9970,d18eda9c,d7d078f8,d17b467c,4) at panic+0x71
sched_sync(d7d078f8) at sched_sync+0x17a
Bad frame pointer: 0xd06f1ed8
End of stack trace.
syncing disks... 320 320 318 318 318 318 318 318 314 311 303 293 285  
280 269 254 240 233 230 221 giving up

sd2: WARNING: cache synchronization failed
rebooting...

Cordialement,
Jean-Girard Pailloncy



OpenBGP Communities

2006-01-07 Thread Sylvain Coutant
Hi again,

How can one see community tags associated to a route ?


BR,

--
Sylvain COUTANT

ADVISEO
http://www.adviseo.fr/
http://www.open-sp.fr/



Re: OpenBGP IPv6

2006-01-07 Thread Sylvain Coutant
I was just about to create a new thread when I read :

  I have not seen it discussed much on the list, but OpenBGP works *very*
 well and is easy to setup using Hurricane Electrics free (ipv6-in-ipv4)

I try to setup a BGP peering with upstream and I have (v3.8) :

Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change Idle - 
Connect, reason: Start
Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change Connect 
- OpenSent, reason: Connection opened
Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change 
OpenSent - OpenConfirm, reason: OPEN message received
Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): received 
notification: error in OPEN message, unsupported capabil
ity
Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): parse_notification: 
capa_len 16 exceedsremaining msg length
Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change 
OpenConfirm - Idle, reason: NOTIFICATION received


Upstream told me about capability : We do 'inet6.unicast' only. Upstream 
router is a Juniper.

Relevant configuration is :

network 2001:1b58::/32

group Upstream {
set localpref   xxx
announceself

neighbor x.x.x.x {
remote-as   x
descr   x-v4
}

neighbor 2001:x:0021 {
remote-as   x
descr   x-v6
}
}


Any idea what I've done wrong again ?


BR,

--
Sylvain COUTANT

ADVISEO
http://www.adviseo.fr/
http://www.open-sp.fr/



Re: OpenBGPd filters

2006-01-07 Thread Sylvain Coutant
Hello Claudio,

 I just tried a filter like this:
 match from any AS 29166 set nexthop blackhole

 and that did work:


Yes. I have run more tests since my previous post, and filter apply the
blackhole tag to the route. But packet were still forwarded.

After having stopped the session and restarted it, they were then dropped.

BTW, all tags (localpref, etc.) manipulations require to clear the session
and even to restart bgpd itself. Could this be included in the doc so one
wouldn't have to search for hours on some settings change ?

Thanks for your reply.

--
Sylvain COUTANT

ADVISEO
http://www.adviseo.fr/
http://www.open-sp.fr/



Updrading to stable branch --- rebuilding ports?

2006-01-07 Thread Ramiro Aceves
Hello dear OpenBSD friends.

I have just upgraded my 3.8 release CD install trough CVS to the stable
branch (OPENBSD_3_8)( src, ports and XF4). I have rebuilt my kernel, the
userland and X Window. Everything runs fine and smoothly as expected. I
also removed the installed packages and I am reinstalling them again
trough ports.

A question arises now to me: as I have read on the FAQ, everything must
be kept in sync. Is it mandatory to remove the packages and reinstall
them again from ports when I upgrade the base system to the STABLE
branch?. Or perhaps,  can I asume that the STABLE patch branch does
not modify the base system enough to break the ports? This is a very
time consuming task as my computer has got a slow Internet connection
(5kB/s) and a not too fast processor (1200 MHz). A friend of mine
downloaded for me all 3.8 packages from OpenBSD servers and perhaps I
have to discard them from now.  :-(

Thank you very much in advance for your help and for this amazing OS.

Ramiro.



NIS Problems

2006-01-07 Thread Lachlan Gunn
Hi,
I'm setting up NIS for my home network using OpenBSD on the
server-side.  However, when I try to make changes (ie. to the
passwords) on the client side (Gentoo Linux) it responds with an error
(without any information on what that error is).  Upon attempting to
do the same operation on the OpenBSD box, it responds with an error
telling me Couldn't change YP password information..

Am I understanding correctly that I am supposed to be using chsh -y?
chsh without the -y only changes the local data without modifying the
NIS-stored data.
--
Thanks,
Lachlan



Re: NIS Problems

2006-01-07 Thread Otto Moerbeek
On Sat, 7 Jan 2006, Lachlan Gunn wrote:

 Hi,
 I'm setting up NIS for my home network using OpenBSD on the
 server-side.  However, when I try to make changes (ie. to the
 passwords) on the client side (Gentoo Linux) it responds with an error
 (without any information on what that error is).  Upon attempting to
 do the same operation on the OpenBSD box, it responds with an error
 telling me Couldn't change YP password information..
 
 Am I understanding correctly that I am supposed to be using chsh -y?
 chsh without the -y only changes the local data without modifying the
 NIS-stored data.

Check rc.conf, yppasswd is disabled by default.

-Otto



Re: Updrading to stable branch --- rebuilding ports?

2006-01-07 Thread steven mestdagh
On Sat, Jan 07, 2006 at 10:12:10AM +0100, Ramiro Aceves wrote:
 Hello dear OpenBSD friends.
 
 I have just upgraded my 3.8 release CD install trough CVS to the stable
 branch (OPENBSD_3_8)( src, ports and XF4). I have rebuilt my kernel, the
 userland and X Window. Everything runs fine and smoothly as expected. I
 also removed the installed packages and I am reinstalling them again
 trough ports.
 
 A question arises now to me: as I have read on the FAQ, everything must
 be kept in sync. Is it mandatory to remove the packages and reinstall
 them again from ports when I upgrade the base system to the STABLE
 branch?.

no. keeping stuff in sync is much more of an issue when running -current.

 Or perhaps,  can I asume that the STABLE patch branch does
 not modify the base system enough to break the ports?

yes.

 This is a very
 time consuming task as my computer has got a slow Internet connection
 (5kB/s) and a not too fast processor (1200 MHz). A friend of mine
 downloaded for me all 3.8 packages from OpenBSD servers and perhaps I
 have to discard them from now.  :-(

the stable ports branch mostly adds security fixes. for some
architectures the updated packages are on the ftp servers, for others
you need to build them yourself.

you don't need to rebuild all your packages.
maybe just a few which have had security fixes... if your friend did not
already download the updated packages.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: OpenBGP IPv6

2006-01-07 Thread unixgeek
Try:

announce IPv4 unicast
announce IPv6 unicast
Glenn


 I was just about to create a new thread when I read :

  I have not seen it discussed much on the list, but OpenBGP works *very*
 well and is easy to setup using Hurricane Electrics free (ipv6-in-ipv4)

 I try to setup a BGP peering with upstream and I have (v3.8) :

 Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change
 Idle - Connect, reason: Start
 Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change
 Connect - OpenSent, reason: Connection opened
 Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change
 OpenSent - OpenConfirm, reason: OPEN message received
 Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): received
 notification: error in OPEN message, unsupported capabil
 ity
 Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6):
 parse_notification: capa_len 16 exceedsremaining msg length
 Jan  7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change
 OpenConfirm - Idle, reason: NOTIFICATION received


 Upstream told me about capability : We do 'inet6.unicast' only. Upstream
 router is a Juniper.

 Relevant configuration is :

 network 2001:1b58::/32

 group Upstream {
 set localpref   xxx
 announceself

 neighbor x.x.x.x {
 remote-as   x
 descr   x-v4
 }

 neighbor 2001:x:0021 {
 remote-as   x
 descr   x-v6
 }
 }


 Any idea what I've done wrong again ?


 BR,

 --
 Sylvain COUTANT

 ADVISEO
 http://www.adviseo.fr/
 http://www.open-sp.fr/



Re: OpenBGPd filters

2006-01-07 Thread Xavier Beaudouin

Hello Sylvain,


I just tried a filter like this:
match from any AS 29166 set nexthop blackhole

and that did work:




Yes. I have run more tests since my previous post, and filter apply the
blackhole tag to the route. But packet were still forwarded.

After having stopped the session and restarted it, they were then dropped.

BTW, all tags (localpref, etc.) manipulations require to clear the session
and even to restart bgpd itself. Could this be included in the doc so one
wouldn't have to search for hours on some settings change ?


Yes they need the session up/down to be applyed

I think the version in -current nows handle that with a simple reload.

/Xavier



Thanks for your reply.

--
Sylvain COUTANT

ADVISEO
http://www.adviseo.fr/
http://www.open-sp.fr/




Re: OpenBGP Communities

2006-01-07 Thread Claudio Jeker
On Sat, Jan 07, 2006 at 10:58:05AM +0100, Sylvain Coutant wrote:
 Hi again,
 
 How can one see community tags associated to a route ?
 

I have a diff to show communities in bgpctl output but I don't like it.
Need to redo some parts of it before it can be commited.
The next release will have this feature.

-- 
:wq Claudio



Re: MegaRaid i4

2006-01-07 Thread Marco Peereboom
I was talking about the cache on the disks, not on the controller.  The issues
you experienced were due to the OpenBSD driver not marking the i4 as broken.
The workaround code is now in tree implying that only 1 IO can be outstanding
and bioctl will no longer function.  So update to the latest -stable or
-current and besides some slower performance the system should be stable and
useful.

I tried to fix this before but I haven't been able to determine what causes
these issues.  I will give this another go at some point.

On Sat, Jan 07, 2006 at 10:35:25AM +0100, Pailloncy Jean-Gerard wrote:
 Yes, ide vs scsi benchmarks are usually skewed due to caching.   
 SCSI disables
 drive cache by default whereas IDE enables it by default.
 Yes, I disable caching. So I get (really) bad performance.
 
 I see the other thread about some broken MegaRaid i4.
 
 What I can say is taht with 3.8-release, I have no problem to use  
 bioctl.
 # bioctl -i ami0
 Volume  Status Size   Device
 ami0 0 Online   249998344192 sd0 RAID1
   0 Online   249998344192 0:0.0   noencl Maxtor  
 4A250J0  RAMB
   1 Online   249998344192 2:1.0   noencl Maxtor  
 4A250J0  RAMB
 ami0 1 Online   249998344192 sd1 RAID1
   0 Online   249998344192 3:0.0   noencl Maxtor  
 4A250J0  RAMB
   1 Online   249998344192 1:1.0   noencl Maxtor  
 4A250J0  RAMB
 ami0 2 Degraded 46688384 sd2 RAID5
   0 Online   249998344192 3:1.0   noencl Maxtor  
 4A250J0  RAMB
   1 Rebuild  249998344192 1:0.0   noencl Maxtor  
 4A250J0  RAMB
   2 Online   249998344192 2:0.0   noencl Maxtor  
 4A250J0  RAMB
 ami0 3 Hot spare249998344192 0:1.0   noencl Maxtor  
 4A250J0  RAMB
 
 I broke the RAID-5 and it starts rebuilding.
 I can setup new Hot-Spare.
 
 
 But nothing was perfect, I had two crashes. I do not have ps and  
 trace because I was using ddb.panic=0 to reboot the prod server  
 automatically. The crash happens when I was on console, I disable  
 ddb.panic=1, but luckily I get no other crash. And I can not do  
 postmortem analysis because /var is to small to keep coredump in /var/ 
 crash. I did not have test current. I do not want to stop this server  
 too long.
 
 So, here is the partial crash report (the dmesg is in one of my other  
 mails in this thread). I hope it will be partially useful ;-)
 
 fsync failed: type VDIR, usecount 0, writecount 0, holdcount 1, flags  
 (VBIOONFREELIST|VBIOONSYNCLIST)
 tag VT_UFS, ino 6987542, on dev 0, 9 flags 0x0, effnlink 2,  
 nlink 2
 mode 040755, owner 1000, group 1000, size 512 not locked
 mounted on: /mnt
 panic: sched_sync: fsync failed
 Starting stack trace...
 panic(d057fa84,d7c73960,ea077f5c,d7c73960,d7c73960) at panic+0x71
 panic(d04f9970,d1b8b29c,d7d078f8,d17b4620,4) at panic+0x71
 sched_sync(d7d078f8) at sched_sync+0x17a
 Bad frame pointer: 0xd06f1ed8
 End of stack trace.
 syncing disks... 250 250 248 244 230 212 199 181 164 150 135 124 112  
 108 102 89 69 45 23 1 giving up
 rebooting...
 
 fsync failed: type VDIR, usecount 0, writecount 0, holdcount 1, flags  
 (VBIOONFREELIST|VBIOONSYNCLIST)
 tag VT_UFS, ino 7011086, on dev 0, 9 flags 0x0, effnlink 2,  
 nlink 2
 mode 040755, owner 1000, group 1000, size 512 not locked
 mounted on: /mnt
 panic: sched_sync: fsync failed
 Starting stack trace...
 panic(d057fa84,d7c53e60,ea077f5c,d7c53e60,d7c53e60) at panic+0x71
 panic(d04f9970,d18eda9c,d7d078f8,d17b467c,4) at panic+0x71
 sched_sync(d7d078f8) at sched_sync+0x17a
 Bad frame pointer: 0xd06f1ed8
 End of stack trace.
 syncing disks... 320 320 318 318 318 318 318 318 314 311 303 293 285  
 280 269 254 240 233 230 221 giving up
 sd2: WARNING: cache synchronization failed
 rebooting...
 
 Cordialement,
 Jean-Girard Pailloncy



Newsletter della 2� settimana 2006

2006-01-07 Thread Borghi Toscani News
[IMAGE]

[IMAGE]

Borghi Toscani | E - mail | Registrati | Inserisci un locale | Meteo |
News

[IMAGE]

NUOVI
INSERIMENTI

Newsletter della 2B0 settimana 2006

LINK
CONSIGLIATI

Podere gli Olmi

LAST MINUTE IN TOSCANA

OFFERTE SOGGIORNI IN TOSCANA

OFFERTE LAST MINUTE FIRENZE

Last Minute Abetone

Offerte Abetone

SCARICA I DESKTOP DI GENNAIO

abetone.com
[IMAGE]

borghitoscani.com
[IMAGE]

Sanvincenzo.com
[IMAGE]

Arcipelagotoscano.com
[IMAGE]

News, eventi e manifestazioni in Toscana questa settimana

Data

Evento

Tipologia

06/01/2006

La Befana vien in Toscana FIRENZE

(Folklore)

06/01/2006

Cavalcata dei Re Magi

(Folklore)

06/01/2006

Arriva la Befana dal campanile PISTOIA

(Folklore)

06/01/2006

Collezionisti in piazza SCARPERIA

(Mercatini)

06/01/2006

Mercantico CASCINA

(Mercatini)

07/01/2006

III^ Edizione Luca Baroni ABETONE

(Gare)

08/01/2006

Miss Befana 2006 SAN MARCELLO

(Feste Paesane)

08/01/2006

XIIIB0 Memorial Pagnini ABETONE

(Gare)

08/01/2006

Memorandia ANGHIARI

(Mercatini)

08/01/2006

Donna Donne FIRENZE

(Mostre)

08/01/2006

Che mondo che fa FUCECCHIO

(Mostre)

08/01/2006

Esposizione Nazionale canina CARRARA

(Mostre)

09/01/2006

Da Puccio Di Simone a Giottino FIRENZE

(Mostre)

10/01/2006

Note di memoria PISTOIA

(Concerti)

11/01/2006

Psiche Pathos Logos FIRENZE

(Mostre)

12/01/2006

Cibi e sapori nel mondo FIRENZE

(Mostre)

13/01/2006

Oleovagando FIRENZE

(Sagre e Fiere)

14/01/2006

Mercato artigianato e antiquariato PIOMBINO

(Mercatini)

14/01/2006

4B0 Tour.it CARRARA

(Mostre)

15/01/2006

Antiquariato in piazza QUARRATA

(Mercatini)

15/01/2006

Antiquariando BUTI

(Mercatini)

escursioni toscana

PITTI IMMAGINE UOMO N. 69

PALIO DI SANT'ANTONIO ABATE

Settembre lucchese11 - 14 gennaio 2006
Firenze, Fortezza da Basso
Organizzata da Pitti Immagine, promossa dal Centro di Firenze per la Moda
Italiana.
Pitti Immagine Uomo C( la manifestazione che come ogni anno

Pitti immagine uomo n. 69

Settembre luccheseIl Palio di SantbAntonio Abate si terrC  questbanno
Domenica 22 Gennaio.
Questo palio, diventato uno fra i piC9 importanti dbItalia, consiste in
una corsa di cavalli preceduta, in mattinata, da una sfilata in costume
di tutte le contrade del paese.

Palio di Sant'Antonio Abate

Raccolta delle informazioni e Registrazione ai servizi
Piramedia srl, in qualitC  di titolare del trattamento, Ti informa che i
dati personali che ci avrai fornito, volontariamente o automaticamente
attraverso i nostri portali, saranno trattati, con il tuo consenso allo
scopo di trasmetterti i servizi da te richiesti. In particolare ti
verranno inviate tramite posta elettronica o sms, informative o offerte a
carattere commerciale o pubblicitario, inerenti al Turismo. Ti verranno
inviate inoltre comunicazioni circa modifiche, miglioramenti, o
cambiamenti dei servizi da noi proposti. In coda ad ognuno di questi
messaggi sarC  sempre presente il modo perchC) tu possa rimuovere i tuoi
dati dal nostro archivio.
Piramedia srl, non raccoglierC  in nessun modo dati ritenuti sensibili e
si impegna a non utilizzare i tuoi dati, o cederli a terzi, per finalitC 
che siano diverse da quelle qui sopra elencate.
Formula di acquisizione del consenso dell'interessato.
Il/la sottoscritto/a, acquisite le informazioni fornite dal titolare del
trattamento ai sensi dell'articolo 13 del D.Lgs. 196/2003, l'interessato:
- presta il suo consenso al trattamento dei dati personali per i fini
indicati nella suddetta informativa.
- presta il suo consenso per la comunicazione dei dati personali per le
finalitC  ed ai soggetti indicati nell'informativa.
- presta il suo consenso per la diffusione dei dati personali per le
finalitC  e nell'ambito indicato nell'informativa.

DISDETTA
Se non vuoi piC9 ricevere l'edizione gratuita di BorghiToscani.com
clicca su questo link: disdetta

Vecoli

Cottage Vecoli

Tenuta il Cicalino

Tenuta il Cicalino

Centro Velico Naregno

Centro Velico Naregno

Tirrenia Ferries

Tirrenia
Ferries

Hotel Le Acacie

Hotel Le Acacie

Hotel Tornese

Hotel
Tornese

MaranathC 

Youth Residence

PLP guest house

Rooms with a view

Althea rooms

Park Hotel

Argentario Camping

Il Gabbiano

Le Cannelle

Argentario Osa

Talamone Camping

Hotel Telamonio

Hotel Capo Duomo

Pian dei Pini

La Valentina

Cavalleggeri

Hotel L'Etrusco

Le Colombe

Borgo Dolciano

Locanda dei Guelfi

Villino Il Magnifico

Villa Elea

Fontecastello

Hotel Massimo

Hotel Alex

A casa di Dante

BB Gilda

Podere Giarlinga

Fonte del Cieco

Ninna Nanna

Campo di Carlo

Hotel La Pergola

Podere Saliciaia

Hotel Galli

Villa Conti

Albergo La Scogliera

Valle Santa Maria

Hotel Fontalleccio

Hotel Il Ponte

Casa del Golfo

Il Viottolo

Hotel Riva del Sole

Hotel Montecristo

Villa Cristina

1999 - 2005 - Copyright and Project by Piramedia srl - Tutti I Diritti
Riservati -Privacy

[IMAGE]



issue with mtu/mss and in-kernel pppoe

2006-01-07 Thread Thomas Schoeller
hi misc,
i have installed a new firewall with my new WRAP board. and have tried the
new
in-kernel pppoe. and i had a problem with the mtu/mss. i have set the pf.conf
entry scrub out on pppoe0 max-mss 1440. and also have put the mtu on the
internal nic to 1492. but no success.
after some googling i found http://www.pro-bono-publico.de/openbsd/pppoe/.
i put scrub in all max-mss 1452 in my pf.conf and it works.

have i forgot something or is the pppoe(4) manpage wrong/notcomplete?

cheers
thomas

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: issue with mtu/mss and in-kernel pppoe

2006-01-07 Thread Jason McIntyre
On Sat, Jan 07, 2006 at 05:49:34PM +0100, Thomas Schoeller wrote:
 hi misc,
 i have installed a new firewall with my new WRAP board. and have tried the
 new
 in-kernel pppoe. and i had a problem with the mtu/mss. i have set the pf.conf
 entry scrub out on pppoe0 max-mss 1440. and also have put the mtu on the
 internal nic to 1492. but no success.
 after some googling i found http://www.pro-bono-publico.de/openbsd/pppoe/.
 i put scrub in all max-mss 1452 in my pf.conf and it works.
 
 have i forgot something or is the pppoe(4) manpage wrong/notcomplete?
 

as noted in the man page, 1452 should work fine but 1440 is a safer bet.
i use 1453 (i can't remember why). whatever, it just needs to be small
enough...

i don't know why 1452 would work for you and not 1440. you mention
changing the scrub out rule to scrub in all so perhaps sth else in
your ruleset is affecting it. you should not need to clamp max-mss on
incoming packets...

jmc



OpenBSD T/TCP support

2006-01-07 Thread Gustavo Rios
Dear folks,

i am trying to figure it out whether OpenBSD support T/TCP or not, but
until so far, i could not see.

Thanks in advance.



Re: OpenBSD T/TCP support

2006-01-07 Thread Theo de Raadt
 i am trying to figure it out whether OpenBSD support T/TCP or not, but
 until so far, i could not see.

T/TCP is fundamentally broken as discovered by Newsham and Ptaceck in
1998 or so.  So, no.



Re: Analogue of sort -M option in OpenBSD?

2006-01-07 Thread Zoong PHAM
On Saturday,  7 January 2006 at 20:29:50 +, Pavel M. Ivanchev wrote:
  I have just installed sarg 2.1 on OpenBSD and everything during build was 
  ok. I applyed all the patches also. The probles is when i start sarg to 
  build report i have this output:
 
  SARG: Records in file: 1842, reading: 0.00% sort: illegal field 
 descriptor SARG: (index) Cannot open file: 
 /var/www/htdocs/squid-reports/index.sort
 

sarg-2.1 without any patches is built and runs fine with OBSD-3.8 .

With OBSD-3.6, you need some patches that I can send you off list if you
want.

HTH,
Zoong



Re: OpenBSD T/TCP support

2006-01-07 Thread Theo de Raadt
  i am trying to figure it out whether OpenBSD support T/TCP or not, but
  until so far, i could not see.
 
 T/TCP is fundamentally broken as discovered by Newsham and Ptaceck in
 1998 or so.  So, no.

Ah, or maybe it was route who found it:

http://www.zone-h.org/files/32/t_tcp_vulnerability.txt

But I seem to remember something else found by the previous two as
well.

Anyways, why play fast and loose -- and thus make TCP worse -- when it
already has a number of difficult to resolve problems.

It is so easy to make things worse by adding extra gunk, yet we see
people doing it all the time.  Things should be kept simple, but they
are not.



3.8 panic on boot (rd0)

2006-01-07 Thread Charles Sprickman

Hello all,

I have an older i386 pc that I've been using as my home firewall for some 
years now.  It currently runs 3.3 and I was hoping to do an upgrade, so I 
did go ahead and buy the full CD set (impressive packaging, btw) after 
having trouble with boot floppies (marginal drive) and the boot CD ISO.


However, the kernel panics every time I try and boot the 3.8 CD.  I've 
also tried 3.7, 3.6 and 3.5 boot CDs that I downloaded from the OpenBSD 
ftp server.  Hardware seems fine; I ran memtest86+ for a day and it did 
about 30 passes with no errors, I tried different CD-ROM drives, different 
IDE cables, removed all network cards, etc., but still it panics in the 
same place (right after rd0: fixed, 3800 blocks).  CPU is an AMD 
K6-2-500 clocked down to 300 - temperature is fine (about 110F), mainboard 
is an old Epox.


On the suggestion of a bsdforums.org user, I tried downloading bsd.rd and 
booting that from the 3.3 install, and that failed.  I'm guessing it has 
something to do with the exec format changing; perhaps the old loader 
doesn't understand the new kernel exec format?


rebooting...
boot /bsd.rd
booting hd0a:/bsd.rd:  failed(79). will try /obsd
boot ls bsd.rd
-rwxr-xr-x 0,0  4658297 hd0a:bsd.rd
boot ls obsd
-rwxr-xr-x 0,0  2487309 hd0a:obsd
boot

...snip...

gw# cd /
gw# file bsd.rd
bsd.rd: ELF 32-bit LSB executable, Intel 80386, version 1, statically 
linked, not stripped

gw# file obsd
obsd: OpenBSD/i386 demand paged executable not stripped
gw#

I have this thing hooked up via serial now, so if someone can point me in 
the right direction (how to get a dump when booting from CD, how to look 
at that dump, etc.), I will gladly do so.  I have also included the 3.3 
dmesg below.


Thanks,

Charles

_

Here is the partial boot message booting 3.8:

 OpenBSD/i386 CDBOOT 1.04
boot
booting cd0a:/3.8/i386/bsd.rd: 4369156+828044 [52+151072+137381]=0x53b600
entry point at 0x100120

Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2005 OpenBSD. All rights reserved. 
http://www.OpenBSD.org


OpenBSD 3.8 (RAMDISK_CD) #794: Sat Sep 10 15:58:32 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD
cpu0: AMD-K6(tm) 3D processor (AuthenticAMD 586-class) 301 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,PGE,MMX
real mem  = 133799936 (130664K)
avail mem = 116502528 (113772K)
using 1658 buffers containing 6791168 bytes (6632K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(ee) BIOS, date 01/03/00, BIOS32 rev. 0 @ 
0xfb390

apm0 at bios0: Power Management spec V1.2
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xb80c
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdde0/128 (6 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11
pcibios0: PCI Interrupt Router at 000:07:0 (VIA VT82C586 ISA rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x2000!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 VIA VT82C598 PCI rev 0x04
ppb0 at pci0 dev 1 function 0 VIA VT82C598 AGP rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Rage Pro rev 0x5c
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 VIA VT82C586 ISA rev 0x47
pciide0 at pci0 dev 7 function 1 VIA VT82C571 IDE rev 0x06: ATA33, 
channel 0 configured to compatibility, channel 1 configured to compatibility

wd0 at pciide0 channel 0 drive 0: Maxtor 72004 AP
wd0: 32-sector PIO, LBA, 1916MB, 3924360 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: SAMSUNG, CD-ROM SC-148F, F007 SCSI0 
5/cdrom removable

cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 7 function 2 VIA VT83C572 USB rev 0x02: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
VIA VT82C586 Power rev 0x10 at pci0 dev 7 function 3 not configured
sis0 at pci0 dev 17 function 0 NS DP83815 10/100 rev 0x00: DP83816A, irq 
10, address 00:09:5b:22:4a:ee

nsphyter0 at sis0 phy 0: DP83815 10/100 PHY, rev. 1
xl0 at pci0 dev 18 function 0 3Com 3c900 10Base-T rev 0x00: irq 5, 
address 00:a0:24:ce:11:02

isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask fbc5 netmask ffe5 ttymask ffe7
rd0: fixed, 3800 blocks
fatal page fault in supervisor mode
trap type 6 code 2 eip d02b9015 cs 50 eflags 10002 cr2 1ffec1c6 cpl a0
panic: trap type 6, code=2, pc=d02b9015
syncing 

Re: CGD

2006-01-07 Thread Travers Buda
I'd like to apologize to all.

Fortune told me yesterday that assumptions are the mother of all 
screw-ups.

I assumed I was educated about the subject. I was not.

I forget it's not my tree.

I assumed that the OpenBSD developers desired cryptographic disks. There 
may be a want for them, but its obvious to me now that they are not as 
desireable as other functionality in the system. And, nobody has 
unlimited time to work on whatever. Hence, I realize that crypo-disks 
are somewhat unimportant. Especially in the light of other mechanisms 
such as physical security and _practicality_. Practically speaking, few 
people have top-secret info!

I accused people who did not deserve such accusations. 

I wish I could aid you to stamp this kind of malarky out of existence on 
these forums. I can only shut myself up, yet I will try to impart my 
new-found virtue of doing your research and homework first on the few 
open source utilizing people who look up to me.

Thanks for a great OS. I'm deeply sorry and ashamed for the blather and 
being an ass. 

Travers Buda 



Re: Moving to a bigger HD, is dump still the best way

2006-01-07 Thread Bill
On Sat, 07 Jan 2006 00:42:18 -0500
Nick Holland [EMAIL PROTECTED] spake:

 Bill wrote:
  I found one of my firewalls has a 4Gig drive.  While it is still
  working fine, I am thinking maybe I should remove the 10 year old thing
  and maybe move it somewhere a little less stressed).
  
  I googled and faq'd and nothing recent came up, so I was wondering if
  this was the best way to move the stuff over.
  
   * Put in the new drive
   * Boot with cd / floppy
   * Partition new drive with the same layout, but bigger partitions
 
 Only do this if you really need it.
 Leaving much of your disk unallocated has lots of advantages.  4G is a
 lot for a firewall...look at all the people putting firewalls on 256M
 and 512M flash media.
 
 If you don't have something to put in them, making partitions bigger
 just makes it take longer to reboot after you trip over the power cord.
  If you leave a Big Empty at the end of the disk, you can always create
 a new partition there if something actually gets filled.  There's just
 no reason to allocate every block of a 40G (or 80G, or 160G) disk to a
 partition in a firewall...
 
 Stick your Most Likely to Grow partition at the end of the disk, you can
 then use growfs to enlarge it, rather than copying the data.
 
   * For each, mount old and new and dump from one to the other (per faq)
   * Recreate devices
   * Remove old drive reboot
  
  Does this seem sane?
 
 +reinstall boot blocks.
 
 Just did this today on a system, myself.  Saw your note, read it, and
 thought, ...and install boot block.  Saw the reply reminding you to
 reinstall boot block.  Did my upgrade, thinking, don't forget to
 install the boot blocks...of course, I then forgot to install the boot
 blocks. :-/
 
 But yes, this process works.  AFTER you remember to install the boot blocks.
 
 ON THE OTHER HAND, if all the machine is is a simple firewall, this is a
 really good time to simply re-install from scratch, just as you wanted
 it to be, copying over the config as needed.  It will very possibly be
 faster to simply install OpenBSD on the new disk, enable PF, copy over
 pf.conf, and get to work, rather than manually copying over all the
 partitions, one at a time.
 
 Forgetting to install the boot blocks is annoying on some systems. :)
 
 Nick.
 

What was that about boot blocks? :)

I see the wisdom in much of what you are saying.  I would like a bit
more space, but I think your right and I will not use up all the space.

Aside from the practice / experience of doing this under a non-panic
solution I'd probably just do a full install - so I can see your point
there also.

Thanks for all for the comments, suggestions and OPPS to avoid

Bill



Re: OpenBSD T/TCP support

2006-01-07 Thread Denis Doroshenko
OpenBSD AFAIK never had T/TCP implemented. FreeBSD had. but what the heck:

http://www.freebsd.org/releases/6.0R/relnotes-i386.html

...RFC 1644 T/TCP support has been removed. This is because the
design is based on a weak security model that can easily permit
denial-of-service attacks. This TCP extension has been considered a
defective one in a recent Internet Draft.

well, you can see how wise was OpenBSD's decision. i do love the
evolutionary approach! it looks like T/TCP was a pile of poo from the
very beginning...

On 1/7/06, Gustavo Rios [EMAIL PROTECTED] wrote:
 Dear folks,

 i am trying to figure it out whether OpenBSD support T/TCP or not, but
 until so far, i could not see.

 Thanks in advance.



trouble with linking verlihub shared plugins (.so libs)

2006-01-07 Thread Dmitij Lebed
May be I wrote in wrong place, excuse me... :)
I've standard openbsd-3.8 on i386 machine.
I've compiled verlihub (dc++ hub - http://verlihub.sourceforge.net/).
In installation of this hub there are some plugins, which are shared
libraries and loaded when hub starts, but this plugins weren't linked in
.so libs. I got this messages:

...
/bin/sh ../libtool --mode=link g++  -g -O2 -I/usr/src/include/
-I/usr/local/www/mysql/include -DHAVE_MYSYS_NEW -I/usr/local/include
-I/usr/local/include-o libverlihub.la -rpath /usr/local/lib
-no-undefined -rdynamic -L/usr/local/lib -lpcre
-L/usr/local/www/mysql/lib -lmysqlclient -lz -lm -lc -lcrypto
-L/usr/local/lib -lGeoIP  -pthread cantiflood.lo casyncconn.lo
casyncsocketserver.lo  cban.lo cbanlist.lo ccallbacklist.lo
cchatconsole.lo ccmdr.lo  ccommand.lo cconfigbase.lo cconfigfile.lo
cconfigitembase.lo  cconfmysql.lo cconnchoose.lo cconndc.lo cconnpoll.lo
 cconnselect.lo cconntypes.lo cdbconf.lo cdcclients.lo  cdccommand.lo
cdcconf.lo cdcconsole.lo cdcproto.lo cdctag.lo  cfreqlimiter.lo
cgeoip.lo cinfoserver.lo cinterpolexp.lo  ckick.lo ckicklist.lo
cmeanfrequency.lo cmessagedc.lo cmutex.lo  cmysql.lo cobj.lo
coperator.lo cpcre.lo cpenaltylist.lo  cpluginbase.lo cpluginloader.lo
cpluginmanager.lo cprotocol.lo  cprotocommand.lo cquery.lo creglist.lo
creguserinfo.lo  cserverdc.lo csetuplist.lo ctempfunctionbase.lo
cthread.lo  cthreadwork.lo ctime.lo ctimeout.lo ctrigger.lo ctriggers.lo
 cusercollection.lo cuser.lo cvhplugin.lo cvhpluginmgr.lo
cworkerthread.lo script_api.lo stringutils.lo thasharray.lo
tpluginbase.lo -L/usr/local/lib -lGeoIP -lssl -lcrypto

*** Warning: linker path does not have real file for library -lmysqlclient.
*** I have the capability to make that library automatically link in when
*** you link to this library.  But I can only do this if you have a
*** shared version of the library, which you do not appear to have
*** because I did check the linker path looking for a file starting
*** with libmysqlclient and none of the candidates passed a file format test
*** using a file magic. Last file checked:
/usr/local/www/mysql/lib/libmysqlclient.a

*** Warning: linker path does not have real file for library -lsupc++.
*** I have the capability to make that library automatically link in when
*** you link to this library.  But I can only do this if you have a
*** shared version of the library, which you do not appear to have
*** because I did check the linker path looking for a file starting
*** with libsupc++ and none of the candidates passed a file format test
*** using a file magic. Last file checked: /usr/lib//libsupc++.a

*** Warning: linker path does not have real file for library -lgcc.
*** I have the capability to make that library automatically link in when
*** you link to this library.  But I can only do this if you have a
*** shared version of the library, which you do not appear to have
*** because I did check the linker path looking for a file starting
*** with libgcc and none of the candidates passed a file format test
*** using a file magic. Last file checked:
/usr/lib/gcc-lib/i386-unknown-openbsd3.8/3.3.5//libgcc.a
*** The inter-library dependencies that have been dropped here will be
*** automatically added whenever a program is linked with this library
*** or is declared to -dlopen it.

*** Since this library must not contain undefined symbols,
*** because either the platform does not support them or
*** it was explicitly requested with -no-undefined,
*** libtool will only create a static version of it.
...
/bin/sh ../libtool --mode=link g++  -g -O2 -I/usr/src/include/
-I/usr/local/www/mysql/include -DHAVE_MYSYS_NEW -I/usr/local/include
-I/usr/local/include-o libvhapi.la -rpath /usr/local/lib -module
-shared -dy script_api.lo  -lssl -lcrypto

*** Warning: linker path does not have real file for library -lsupc++.
*** I have the capability to make that library automatically link in when
*** you link to this library.  But I can only do this if you have a
*** shared version of the library, which you do not appear to have
*** because I did check the linker path looking for a file starting
*** with libsupc++ and none of the candidates passed a file format test
*** using a file magic. Last file checked: /usr/lib//libsupc++.a

*** Warning: linker path does not have real file for library -lgcc.
*** I have the capability to make that library automatically link in when
*** you link to this library.  But I can only do this if you have a
*** shared version of the library, which you do not appear to have
*** because I did check the linker path looking for a file starting
*** with libgcc and none of the candidates passed a file format test
*** using a file magic. Last file checked:
/usr/lib/gcc-lib/i386-unknown-openbsd3.8/3.3.5//libgcc.a

*** Warning: libtool could not satisfy all declared inter-library
*** dependencies of module libvhapi.  Therefore, libtool will create
*** a static module, that should work as long as the dlopening
*** application 

Failure to detect second CPU on IBM Netfinity 4000R

2006-01-07 Thread Bo Lind
Hello,

I am attempting to install OpenBSD 3.8 on an IBM Netfinity 4000R
server. This is a dual PIII 650 MHz machine with 1 GB of RAM.

I can boot bsd.mp / GENERIC.MP successfully, but dmesg only shows cpu0
as being found, no sign of cpu1.

The BIOS claims both CPUs to be installed and working.

I had to disable uhci, as it hangs during boot with a host controller
halted error message. This has to do with an Intel 82371AB USB
device, and since I have nothing to use USB for on this server, I
assumed it was safe to disable it. Am I right in assuming this has
nothing to do with the failure to detect the second CPU?

The server runs fine with the GENERIC.MP kernel, just only on half my
processors.

Any ideas?



Re: trouble with linking verlihub shared plugins (.so libs)

2006-01-07 Thread Jacob Meuser
On Sun, Jan 08, 2006 at 01:58:19AM +0300, Dmitij Lebed wrote:
 May be I wrote in wrong place, excuse me... :)
 I've standard openbsd-3.8 on i386 machine.
 I've compiled verlihub (dc++ hub - http://verlihub.sourceforge.net/).
 In installation of this hub there are some plugins, which are shared
 libraries and loaded when hub starts, but this plugins weren't linked in
 .so libs. I got this messages:
 
 ...
 /bin/sh ../libtool --mode=link g++  -g -O2 -I/usr/src/include/
 -I/usr/local/www/mysql/include -DHAVE_MYSYS_NEW -I/usr/local/include
 -I/usr/local/include-o libverlihub.la -rpath /usr/local/lib
 -no-undefined -rdynamic -L/usr/local/lib -lpcre
 -L/usr/local/www/mysql/lib -lmysqlclient -lz -lm -lc -lcrypto
 -L/usr/local/lib -lGeoIP  -pthread cantiflood.lo casyncconn.lo
 casyncsocketserver.lo  cban.lo cbanlist.lo ccallbacklist.lo
 cchatconsole.lo ccmdr.lo  ccommand.lo cconfigbase.lo cconfigfile.lo
 cconfigitembase.lo  cconfmysql.lo cconnchoose.lo cconndc.lo cconnpoll.lo
  cconnselect.lo cconntypes.lo cdbconf.lo cdcclients.lo  cdccommand.lo
 cdcconf.lo cdcconsole.lo cdcproto.lo cdctag.lo  cfreqlimiter.lo
 cgeoip.lo cinfoserver.lo cinterpolexp.lo  ckick.lo ckicklist.lo
 cmeanfrequency.lo cmessagedc.lo cmutex.lo  cmysql.lo cobj.lo
 coperator.lo cpcre.lo cpenaltylist.lo  cpluginbase.lo cpluginloader.lo
 cpluginmanager.lo cprotocol.lo  cprotocommand.lo cquery.lo creglist.lo
 creguserinfo.lo  cserverdc.lo csetuplist.lo ctempfunctionbase.lo
 cthread.lo  cthreadwork.lo ctime.lo ctimeout.lo ctrigger.lo ctriggers.lo
  cusercollection.lo cuser.lo cvhplugin.lo cvhpluginmgr.lo
 cworkerthread.lo script_api.lo stringutils.lo thasharray.lo
 tpluginbase.lo -L/usr/local/lib -lGeoIP -lssl -lcrypto
 
 *** Warning: linker path does not have real file for library -lmysqlclient.
 *** I have the capability to make that library automatically link in when
 *** you link to this library.  But I can only do this if you have a
 *** shared version of the library, which you do not appear to have
 *** because I did check the linker path looking for a file starting
 *** with libmysqlclient and none of the candidates passed a file format test
 *** using a file magic. Last file checked:
 /usr/local/www/mysql/lib/libmysqlclient.a

you need to build a shared libmysqlclient.

 *** Warning: linker path does not have real file for library -lsupc++.
 *** I have the capability to make that library automatically link in when
 *** you link to this library.  But I can only do this if you have a
 *** shared version of the library, which you do not appear to have
 *** because I did check the linker path looking for a file starting
 *** with libsupc++ and none of the candidates passed a file format test
 *** using a file magic. Last file checked: /usr/lib//libsupc++.a
 
 *** Warning: linker path does not have real file for library -lgcc.
 *** I have the capability to make that library automatically link in when
 *** you link to this library.  But I can only do this if you have a
 *** shared version of the library, which you do not appear to have
 *** because I did check the linker path looking for a file starting
 *** with libgcc and none of the candidates passed a file format test
 *** using a file magic. Last file checked:
 /usr/lib/gcc-lib/i386-unknown-openbsd3.8/3.3.5//libgcc.a

looks like both libsupc++.a and libgcc.a are relocatable, but libtool
is ignorant of that.

you might want to try installing the libtool port/package and using
'make LIBTOOL=/usr/local/bin/libtool', instead of just 'make'.  not
sure if that will fix this, but it might ..

-- 
[EMAIL PROTECTED]



request for new dmesg reports

2006-01-07 Thread Theo de Raadt
We're getting about halfway between releases, and around now it is
nice for us to see what kind of hardware people are seeing out there,
and how well it is supported.

If people have 3.8 dmesg's that they can mail in to

[EMAIL PROTECTED]

that would be much appreciated.

If they are able to test -current, that is even better.

In the mail Subject, please detail the release (or -current) and
roughly state what the machine is.  In the body, you can perhaps
perhaps provide some other details about what does or does not work.
For our parsers, it is better if the mail is not MIME encoded, but
just plain boring ascii.

As well as telling us what works, and what doesn't work, it also
gives us hints as to what new hardware people are starting to see
in their machines...

Thanks a lot.



No File uploads in Horde

2006-01-07 Thread Chris
Hello.  I am hoping that someone here can help me.  I have tried getting help 
on the horde lists, but no one answers me.

I have installed horde 3.0.9 on my openbsd 3.8 system with an apache chroot 
jail.  I have most things working now, but there are a few problems.

I noticed that when composing an email (imp 4.0.4), that the attachments icon 
is not present.  There is no way to attach a file when composing email!  At 
first, I thought that this was an imp issue.  Then I noticed that when I tried 
to upload an address book (csv) on turba (2.0.5), that it would not permit me 
to upload anything.  It gave me this error:  File Uploads not supported.  I 
get the same error when I try to import something in my tasks (nag 2.0.4).   
So... now I think that these problems are all related.

I have the http_uploads pear module installed, I have file uploads set to yes 
in php.ini and I have a file size limit of 10M in my php.ini as well.  So I 
have no idea what I did wrong here.  Do I need to move anything else to the 
jail?  My horde VFS is set to /tmp.  The perms on /var/www/tmp are set to be 
writable by www.  If I use the CLI tool on the horde panel, I can demonstrate 
that it is fully writable thusly:  echo Hi /tmp/Hello. I ssh into my server, 
and find Hello in /var/www/tmp.  I do not see anything unusual in my horde.log 
file...  Since there is no error output, I am at a loss here.

Can someone please help?

Thank you.

Chris



Re: No File uploads in Horde

2006-01-07 Thread Chris
Stupid mistake...

Never mind...  It works.

Chris wrote:

Hello.  I am hoping that someone here can help me.  I have tried getting help 
on the horde lists, but no one answers me.

I have installed horde 3.0.9 on my openbsd 3.8 system with an apache chroot 
jail.  I have most things working now, but there are a few problems.

I noticed that when composing an email (imp 4.0.4), that the attachments icon 
is not present.  There is no way to attach a file when composing email!  At 
first, I thought that this was an imp issue.  Then I noticed that when I tried 
to upload an address book (csv) on turba (2.0.5), that it would not permit me 
to upload anything.  It gave me this error:  File Uploads not supported.  I 
get the same error when I try to import something in my tasks (nag 2.0.4).   
So... now I think that these problems are all related.

I have the http_uploads pear module installed, I have file uploads set to 
yes in php.ini and I have a file size limit of 10M in my php.ini as well.  
So I have no idea what I did wrong here.  Do I need to move anything else to 
the jail?  My horde VFS is set to /tmp.  The perms on /var/www/tmp are set to 
be writable by www.  If I use the CLI tool on the horde panel, I can 
demonstrate that it is fully writable thusly:  echo Hi /tmp/Hello. I ssh 
into my server, and find Hello in /var/www/tmp.  I do not see anything unusual 
in my horde.log file...  Since there is no error output, I am at a loss here.

Can someone please help?

Thank you.

Chris



3.8 not properly detecting SCSI disk during initial install

2006-01-07 Thread Steve Bernacki
Greetings,

I am trying to install OpenBSD 3.8 on an old server that I have lying
around.  I boot the 3.8 floppy (the system does not have a CDROM drive) and
see the following pertinent bits fly by in dmesg:

ahc1 at pci2 dev 14 function 0 Adaptec AHA-29160 U160 rev 0x02: irq 10
scsibus0 at ahc1: 16 targets
sd0 at scsibus0 targ 0 lun 0: WDIGTL, WDE9150 ULTRA2, 1.30 SCSI2 0/direct
fixed
sd0: 8727MB, 13614 cyl, 4 head, 328 sec, 512 bytes/sec 17873040 sec total

[then further down, prior to root on rd0a]

sd0: could not mode sense (4/5): using ficticious geometry
sd0(ahc1:0:0): could not get size
dkcsum: open of sd0 failed

When I enter the install program, entering sd0 results in a series of:

fdisk: sd0: Input/Output error
fdisk: sd0: Input/Output error

fdisk: sd0: Input/Output error
ERROR: No root partition (sd0a)

... at which point I get kicked back to the Do you want to use *all* of sd0
for OpenBSD? [no]  prompt which repeats all of the above over again.

I've tried to install both 3.7 and 3.8... no joy with either.  Booting the
floppyB38.fs doesn't work; the disk isn't even detected.

I'm pretty confident that the hardware is in working order: I managed to
install FreeBSD 5.4 without a hitch.  Under FreeBSD, a fdisk da0 reveals:

cylinders=1112 heads=255 sectors/track=63 (16085 blks/cyl)

..which looks bogus to me, but FreeBSD makes it work, somehow.

I'd really like to get OpenBSD installed on this system, as I want it to
serve as a DSL firewall.  Any help would be appreciated.  Please note that
this system doesn't have a serial console so I typed the above messages by
hand.  If a full dmesg is necessary I'll figure out some way to capture it
all.

Thanks,
Steve



Help for Tyan

2006-01-07 Thread MySHOP
Hi

I have Tyan Tomcat i7230A (S5160)

But OpenBSD can not install

Can you make i386 version support it?

How can add raid device for SATA Harddisk?


Processor
 . Single Socket-T (LGA775 Socket)
 . Supports Intel. Prescott/Smithfield/Cedar Mill
 (Pentium. 4 w/ HT or Pentium. D) processor;
 FSB support 1.066GHz

Chipset
 . Intel. Mukilteo E7230 MCH + ICH7R chipset
 . Support for 1066MHz (1.066GHz) FSB
 . SMSC SCH5017 Super I/O chip

Memory
 . Four 240-pin DDR2 DIMM sockets
 . Dual channel memory bus
 . Up to 8GB unbuffered ECC DDR2-533/667 mem.

Expansion Slots
 . (1) PCI Express  x16 slot (with x8 signal) from
 E7230 MCH
 . (1) PCI Express  x16 slot (with x4 signal) from
 ICH7R
 . (4) PCI 32-bit, 33MHz slots
 . Total of six usable expansion slots

Integrated I/O
 . One 9-pin 16550 UART serial port
 . One ECP/EPP/SPP parallel port (via header)
 . One 15-pin VGA port
 . Eight USB 2.0 ports (four at rear, three headers
 via cable, one internal vertical USB connector)
 . Stacked PS/2 mouse and keyboard connectors
 . Standard/integrated SATA connectors
 . Two RJ-45 10/100/1000 LAN ports

System Management
 . CPU thermal  voltage monitor support
 . 2-pin chassis intrusion header
 . 4-pin fan monitoring header w/ PWM

Integrated Serial ATA
 . Four SATA 2.0 ports from Intel ICH7/ICH7R
 . Integrated Host RAID 0, 1 support

Integrated Video
 . XGI Volari^(TM) 27
  - PCI interface with 16MB DDR memory

Intelligent Platform Management Interface (optional)
 . Renesas Baseboard Management Controller
 (BMC)
 . Tailored for IPMI 2.0 specification
 . Supports remote Power on/off and reset support
 (IPMI-over-LAN)
 . Server Management Daughter card via built-in
 2x25 header

Integrated LAN Controllers
 . Two Broadcom. BCM5721 LAN controllers
  - Two PCI Express x1 interface
  - Speed of 1000/100/10MB/sec.
  - Two RJ-45 LAN connectors with LEDs
 . Two front panel LED headers

BIOS
 . PhoenixBIOS. on 8Mbit Flash ROM
 . Supports APM 1.2  ACPI 1.0b
 . Serial Console Redirect
 . PXE via Ethernet, USB device boot
 . PnP, DMI2.0, WfM2.0 Power Management
 . User-configurable H/W monitoring
 . Auto-configuration of hard disk types
 . Watchdog timer (from Super I/O)
 . Multiple boot options
 . 48-bit LBA support
 . Power management: S0, S1, S3, S4, S5

Form Factor
 . ATX footprint (12 x 9.6, 305x244mm)
 . EPS12V/SSI (24 + 8pin) power connectors

Regulatory
 . FCC Class B (Declaration of Conformity)
 . European Community CE (DoC)

Man



Re: Failure in building a -current kernel

2006-01-07 Thread Theo de Raadt
 Compiling a kernel fails.  I just updated my tree about an hour
 ago from anoncvs1.ca.openbsd.org.

Some changes require people to delete their compile/KERNEL/lib directory
and it's contents.

There are other parts of tree that care less.