macppc snap panic

2007-03-30 Thread Antoine Jacoutot

Hi.

The latest macppc snapshot (03/29/07 15:40:00 on ftp.openbsd.org) 
panics on my Powerbook 5,5.


-- http://www.obsd.fr/OpenBSD/tmp/panic.jpg
-- http://www.obsd.fr/OpenBSD/tmp/trace_ps.jpg


dmesg from older snapshot:

[ using 364712 bytes of bsd ELF symbol table ]
console out [ATY,Jasper_A]console in [keyboard] ADB found
using parent ATY,JasperParent:: memaddr b800 size 800, : consaddr 
b8008000, : ioaddr b002, size 2: memtag 8000, iotag 8000: width 1440 
linebytes 1536 height 900 depth 8
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2007 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 4.1-current (GENERIC) #1225: Mon Mar 26 14:30:09 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/macppc/compile/GENERIC
real mem = 536870912 (524288K)
avail mem = 481783808 (470492K)
using 1254 buffers containing 26841088 bytes (26212K) of memory
mainbus0 (root): model PowerBook5,5
cpu0 at mainbus0: 7447A (Revision 0x101): 1499 MHz: 512KB L2 cache
memc0 at mainbus0: uni-n
hw-clock at memc0 not configured
ki2c0 at memc0 offset 0xf8001000
iic0 at ki2c0
adt0 at iic0 addr 0xae: adt7460 rev 0x6a
lmu-controller at iic0 addr 0x42 not configured
mpcpcibr0 at mainbus0 pci: uni-north, Revision 0xff
pci0 at mpcpcibr0 bus 0
pchb0 at pci0 dev 11 function 0 Apple UniNorth AGP rev 0x00
vgafb0 at pci0 dev 16 function 0 ATI Radeon Mobility M10 NP rev 0x00, mmio
wsdisplay0 at vgafb0 mux 1: console (std, vt100 emulation)
mpcpcibr1 at mainbus0 pci: uni-north, Revision 0x5
pci1 at mpcpcibr1 bus 0
pchb1 at pci1 dev 11 function 0 Apple UniNorth PCI rev 0x00
Broadcom BCM4306 rev 0x03 at pci1 dev 18 function 0 not configured
cbb0 at pci1 dev 19 function 0 TI PCI1510 CardBus rev 0x00: irq 53
macobio0 at pci1 dev 23 function 0 Apple Intrepid rev 0x00
openpic0 at macobio0 offset 0x4: version 0x4614
macgpio0 at macobio0 offset 0x50
macgpio1 at macgpio0 offset 0x9 irq 47
programmer-switch at macgpio0 offset 0x11 not configured
cpu-vcore-select at macgpio0 offset 0x6b not configured
gpio4 at macgpio0 offset 0x1e not configured
gpio5 at macgpio0 offset 0x6f not configured
gpio6 at macgpio0 offset 0x70 not configured
extint-gpio4 at macgpio0 offset 0x5c not configured
gpio11 at macgpio0 offset 0x75 not configured
extint-gpio15 at macgpio0 offset 0x67 not configured
escc-legacy at macobio0 offset 0x12000 not configured
zsc0 at macobio0 offset 0x13000: irq 22,23
zstty0 at zsc0 channel 0
zstty1 at zsc0 channel 1
snapper0 at macobio0 offset 0x1: irq 30,1,2
timer at macobio0 offset 0x15000 not configured
adb0 at macobio0 offset 0x16000 irq 25: via-pmu, 3 targets
akbd0 at adb0 addr 2: iBook keyboard with inverted T (ISO layout)
wskbd0 at akbd0: console keyboard, using wsdisplay0
ams0 at adb0 addr 3: EMP trackpad tpad 4-button, 400 dpi
wsmouse0 at ams0 mux 0
abtn0 at adb0 addr 7: brightness/volume/eject buttons
apm0 at adb0: battery flags 0x5, 88% charged
pi2c0 at adb0
iic1 at pi2c0
battery at macobio0 offset 0x0 not configured
backlight at macobio0 offset 0xf300 not configured
ki2c1 at macobio0 offset 0x18000
iic2 at ki2c1
wdc0 at macobio0 offset 0x2 irq 24: DMA
atapiscsi0 at wdc0 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: MATSHITA, DVD-R UJ-825, DAND SCSI0 5/cdrom 
removable
cd0(wdc0:0:0): using BIOS timings, DMA mode 2
audio0 at snapper0
ohci0 at pci1 dev 24 function 0 Apple Intrepid USB rev 0x00: irq 0, version 
1.0, legacy support
ohci1 at pci1 dev 25 function 0 Apple Intrepid USB rev 0x00: irq 0, version 
1.0, legacy support
ohci2 at pci1 dev 26 function 0 Apple Intrepid USB rev 0x00: irq 29, version 
1.0, legacy support
ohci3 at pci1 dev 27 function 0 NEC USB rev 0x43: irq 63, version 1.0
ohci4 at pci1 dev 27 function 1 NEC USB rev 0x43: irq 63, version 1.0
ehci0 at pci1 dev 27 function 2 NEC USB rev 0x04: irq 63
usb0 at ehci0: USB revision 2.0
uhub0 at usb0
uhub0: NEC EHCI root hub, rev 2.00/1.00, addr 1
uhub0: 5 ports with 5 removable, self powered
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 1 device 0 cacheline 0x8, lattimer 0x20
pcmcia0 at cardslot0
usb1 at ohci0: USB revision 1.0
uhub1 at usb1
uhub1: Apple OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
usb2 at ohci1: USB revision 1.0
uhub2 at usb2
uhub2: Apple OHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
usb3 at ohci2: USB revision 1.0
uhub3 at usb3
uhub3: Apple OHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
usb4 at ohci3: USB revision 1.0
uhub4 at usb4
uhub4: NEC OHCI root hub, rev 1.00/1.00, addr 1
uhub4: 3 ports with 3 removable, self powered
usb5 at ohci4: USB revision 1.0
uhub5 at usb5
uhub5: NEC OHCI root hub, rev 1.00/1.00, addr 1
uhub5: 2 ports with 2 removable, self powered
mpcpcibr2 at mainbus0 pci: uni-north, Revision 0x6
pci2 at mpcpcibr2 bus 0
pchb2 at pci2 dev 11 function 0 Apple 

Re: SMP causing uvm_fault

2007-03-30 Thread Artur Grabowski
Jon Steel [EMAIL PROTECTED] writes:

 I forgot to add:
 
 In the log of pmap.c I found
 
 revision 1.97
 date: 2007/02/20 21:15:01;  author: tom;  state: Exp;  lines: +204 -500
 Revert PAE pmap for now, until the strange bug is found.  This stops
 the freezes many of us are seeing (especially on amd64 machines running
 OpenBSD/i386).
 
 Much testing by nick@ (as always - thanks!), hugh@, ian@, kettenis@
 and Sam Smith (s (at) msmith (dot) net).
 
 Requested by, input from, and ok deraadt@  ok art@, kettenis@, miod@
 
 
 What is the strange bug?

Most likely the things you've been seeing, although that's not certain.
Some people have been seeing the bug even after the PAE pmap was removed,
but definitely not as many (one of the developers rather than 5-10).

//art

 Thanks again
 
 
 Jon Steel wrote:
  Hi
 
  Ive finally got the current version running and the problem below has
  disappeared. I was wondering however if the problem has actually been
  solved.
 
  The line of code that Im crashing on is line 3005 of pmap.c in version 4.0:
 
  3005if (pve-pv_ptp  (PDE(pve-pv_pmap,
  3006 pdei(pve-pv_va))  PG_FRAME) !=
  3007 VM_PAGE_TO_PHYS(pve-pv_ptp)) {
 
  Specifically its crashing on PDE(pve-pv_pmap, pdei(pve-pv_val) because
  of a page fault. This code has disappeared in -current, but does anybody
  who was working on this section of code now why I was having this
  problem or if its been fixed?
 
  Thank you
 
  Jonathan  Steel
 
 
  Jon Steel wrote:

  Hi
 
  Im having a very similar problem as the one reported in Bug Query 5374.
  Im trying to solve the problem but Im finding it very hard to even get
  started. Is there somewhere besides the code that I can start to try and
  understand how SMP is being handled?
 
  http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yesnumbers=5374
 
  I can usually duplicate the crash by running the follwing script several
  times concurrently.
 
  #!/usr/bin/perl
 
  system(tcpdump -i em1 -w /var/crashTest1.pcap);
  system(tcpdump -i em1 -w /var/crashTest2.pcap);
  system(tcpdump -i em1 -w /var/crashTest3.pcap);
  system(tcpdump -i em1 -w /var/crashTest4.pcap);
  system(tcpdump -i em1 -w /var/crashTest5.pcap);
  system(tcpdump -i em1 -w /var/crashTest6.pcap);
  system(tcpdump -i em1 -w /var/crashTest7.pcap);
 
  while (1) {
  system(nmap 192.168.66.90);
  }
 
  Then after about an hour, when you try and reboot, I get an error:
 
  uvm_fault(0x..., 0x..., 0, 1) - e
  kernel: page fault trap, code = 0
  stopped at pmap_page_remove_86+0x114:
  0(%eax, %edx, 4), %eax
 
  The trace output is:
 
  pmap_page_remove_86(d0d31420,c0,e9b57e2c,d04adeb9,e99f) at 
  pmap_page_remove_86+0x114
  uvm_vnp_terminate(d8034e04,0,0,0,0,14,0,d7e95004) at uvm_vnpterminate+0x31f
  uvm_attach(d8034e04,0,2,0,d7f38378) at uvn_attach+0x2b5
  uvm_unmap_detach(d7e959a4,0,d7f3841c,1) at uvm_unmap_detach+-x62
  uvmspace_free(d7f38378,6,d08120e0) at uvmspace_free+0xfd
  uvm_exit(d7fbb868,14,8,286) at uvm_exit+0x19
  reaper(d80df430) at reaper+0x90
  Bad frame pointer: 0xd0913eb8
 
 
  A couple times the error has also occured on its own without saying
  'reboot' when running a ton of nmaps and tcpdumps at the same time.
 
  This trace is remarkably similar to the one in Bug Query 5374.
  Additionally I am using the same processor as he is. There is an unkown
  core statement in my dmesg but both cores seem to be working correctly.
  Here is my dmesg:
 
  OpenBSD 4.0 (GENERIC.MP) #936: Sat Sep 16 19:27:28 MDT 2006
  [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
  cpu0: Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz (GenuineIntel 686-class)
  2.13 GHz
  cpu0:
  FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CF
  LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16
  real mem  = 2145869824 (2095576K)
  avail mem = 1949290496 (1903604K)
  using 4256 buffers containing 107397120 bytes (104880K) of memory
  mainbus0 (root)
  bios0 at mainbus0: AT/286+(e6) BIOS, date 10/30/06, BIOS32 rev. 0 @
  0xfd470, SMB IOS rev. 2.51 @ 0x7feea000 (33 entries)
  bios0: Supermicro PDSMi
  pcibios0 at bios0: rev 2.1 @ 0xfd470/0xb90
  pcibios0: PCI BIOS has 20 Interrupt Routing table entries
  pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GB LPC rev 0x00)
  pcibios0: PCI bus #15 is the last bus
  bios0: ROM list: 0xc/0xb000 0xcb000/0x1000 0xcc000/0x1000 
  0xcd000/0x1000
  ipmi at mainbus0 not configured
  mainbus0: Intel MP Specification (Version 1.4) (INTELMUKILTEO)
  cpu0 at mainbus0: apid 0 (boot processor)
  cpu0: unknown Core FSB_FREQ value 0 (0x4208)
  cpu0: apic clock running at 266 MHz
  cpu1 at mainbus0: apid 1 (application processor)
  cpu1: Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz (GenuineIntel 686-class)
  2.13 GHz
  cpu1:
  FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CF
  

hw.sensor empty

2007-03-30 Thread giovanni

hello,

on my box, 4.1-current,

sysctl -a hw.sensor

is empty
I've seen that the sensor land has been split in user and kernel one.
Before posting I've searched and tried to understand the matter
i.e the relevant part where the copy from kernel to userland is made.
I've also tried to watch the results during the path from

sysctl -a hw.sensor

to the sysctl_sensors call where all is copied correctly
I'm wrong I know, so could you explain where?

thanks,

giovanni



Re: hw.sensor empty

2007-03-30 Thread Nils.Reuvers
How about:
sysctl -a hw.sensors

-Original Message-
From: giovanni [mailto:[EMAIL PROTECTED]
Sent: vrijdag 30 maart 2007 10:35
To: misc@openbsd.org
Subject: hw.sensor empty

hello,

on my box, 4.1-current,

sysctl -a hw.sensor

is empty
I've seen that the sensor land has been split in user and kernel one.
Before posting I've searched and tried to understand the matter
i.e the relevant part where the copy from kernel to userland is made.
I've also tried to watch the results during the path from

sysctl -a hw.sensor

to the sysctl_sensors call where all is copied correctly
I'm wrong I know, so could you explain where?

thanks,

giovanni



=

A disclaimer applies to this email and any attachments.
Refer to http://www.sparkholland.com/emaildisclaimer for the full text of this
disclaimer.



Re: ROOTBACKUP=1 corruption problems on amd64 (OPENBSD_4_0)

2007-03-30 Thread Didier Wiroth
Hello,

You were right!!

Thanks for pointing that out!
--
Didier Wiroth  

 -Original Message-
 From: Darrin Chandler [mailto:[EMAIL PROTECTED] 
 Sent: 29 March 2007 17:38
 To: Didier Wiroth
 Cc: 'misc'
 Subject: Re: ROOTBACKUP=1 corruption problems on amd64 (OPENBSD_4_0)
 
 On Thu, Mar 29, 2007 at 09:11:36AM +0200, Didier Wiroth wrote:
  Hello,
  I'm using ROOTBACKUP=1 to have daily backups on several 
 boxes running
  amd64 OPENBSD_4_0.
  Actually I noticed that on 1 box (the hardware is +/- 3 month old), 
  the partition is *always* corrupted after the backup.
  The corruption happens every day. 
  
  Does anyone have an idea what could be the problem?
 
 Here's a guess: you updated your system, but haven't rebooted 
 since building userland. If that's the case, reboot and I bet 
 the next backup is a *lot* cleaner.
 
 If that's not the case, then what Otto said. ;)
 
 -- 
 Darrin Chandler|  Phoenix BSD User Group  |  MetaBUG
 [EMAIL PROTECTED]   |  http://phxbug.org/  |  
 http://metabug.org/
 http://www.stilyagin.com/  |  Daemons in the Desert   |  
 Global BUG Federation



OT Re: Long WEP key - germany/legalities

2007-03-30 Thread Siegbert Marschall
Hi Henning,

 * Siegbert Marschall [EMAIL PROTECTED] [2007-03-29 22:13]:
 If somebody does something bad with my unencrypted access-point
 using my internet-access, here in germany I am liable.

 no, you're not. it's not that easy. (and I just leave mine wide open)

well, I didn't say what you are liable for. You are not directly
liable for the actions which have been commited but in the last
lawsuit I heard of the guy was found guilty for providing the
means to commit the actions and got his share for that.

I personally find this ridiculous and I wonder if this kind of
argumentation stands in front of a higher court, but it will cost
quite some money on lawyers to find out.

With any form of protection enabled you are on the safe side afaik.

However, since this is getting quite offtopic for OpenBSD now we
should continue this in pm or next time we meet, if desired.

-sm



Re: Long WEP key

2007-03-30 Thread Peter N. M. Hansteen
Eric Dillenseger [EMAIL PROTECTED] writes:

 Why bother adding WPA when you can turn many wlan cards into AP-mode and
 have an OpenBSD box serve wireless computers with IPsec capabilities.

For my own networks, that's exactly what I do.  

Trouble is, you will encounter networks run by people who haven't seen
the light (yet) and set up using some shiny! expensive! gear the
salesdrone wanted them to have.  That's when you need WPA capability
in your OpenBSD laptop.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
First, we kill all the spammers The Usenet Bard, Twice-forwarded tales
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: [OT] Re: Long WEP key

2007-03-30 Thread Sunnz

You mean you can choose an unlimited set of characters as the key??

Random files that I use are usually binary files that I created by
self. Like rich text documents that I made, photos that I took or
executable files that I compiled.

2007/3/30, Jeremy Huiskamp [EMAIL PROTECTED]:

The obvious problem with that is that you're only choosing a limited
character and we all know it now ;).  Also, what's your definition of
random file?

Jeremy

On 29-Mar-07, at 9:58 PM, Sunnz wrote:
 Actually I always uses a sha1sum of a random file that I have and I
 make sure I have that file on all my computers... should be random and
 long enough?

 2007/3/30, Damon McMahon [EMAIL PROTECTED]:
  From: Nick ! [EMAIL PROTECTED]
  Date: 29 March 2007 2:16:31 PM
  To: OpenBSD-Misc misc@openbsd.org
  Subject: Re: Long WEP key
 
 
  On 3/29/07, Lars Hansson [EMAIL PROTECTED] wrote:
 
  Maxime DERCHE wrote:
   IMHO you should think to configure your AP to provide a WAP-
 based
   encryption...
 
  WAP-based encryption? Do you mean WPA?
 
 
  And to answer the original question: because OpenBSD doesn't
 support
  WPA, and Theo has claimed somewhere that I can never find the
 link to
  that WPA gives a false sense of security anyway.
 
  -Nick
 

  From most of my reading a few months ago WPA-PSK is considered
 reasonably secure provided the pre-shared key is long enough... for
 some reason I can't find my references, but from memory depending on
 the source a minimum of around 34 to 39 random ASCII characters (50+
 alphanumeric characters) is quoted.

 Obviously that's a very long passphrase in anyone's language and
 that's the problem. Most people (understandably) choose a passphrase
 at most one-third that length and in this situation WPA-PSK may be
 considered even less secure than the (deservedly) derided WEP.




 --
 Please avoid sending me Word or PowerPoint attachments.
 See http://www.gnu.org/philosophy/no-word-attachments.html





--
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html



Re: Apple hardware support?

2007-03-30 Thread Jason Dixon

On Mar 30, 2007, at 2:19 AM, Otto Moerbeek wrote:


On Thu, 29 Mar 2007, Mike Erdely wrote:


Otto Moerbeek wrote:

On Thu, 29 Mar 2007, Tasmanian Devil wrote:
The i386 GENERIC.MP kernel runs fine on Intel Macs. You just  
need to

enable ACPI with config -ef bsd.mp (or on the boot prompt).

This is not true. At least it has been reported that the MacBook Pro
with Core Due 2 processor does not run.


Tas is right.  I have my MacBook Pro Core 2 Duo dual booting with  
OS X and
OpenBSD (snap around 3/10).  I _think_ my installation process was  
this (since

I didn't do make release with -current):
 1. Install 4.0 from the CD.
 2. Copy an ACPI-enabled bsd.rd to a CDROM, boot to OpenBSD and  
copy to the

hard drive.
 3. Reboot and boot to bsd.rd and install the snapshot using FTP.


That's different than the report fom Jason Dixon. He was trying
current bsd.rd. Anyway, as you mention some problems remain. To me the
most annyoing is the UKC prompt not working, which means you can't
enable ACPI on a stock bsd.rd and you have to compile a bsd.rd with
ACPI enabled.


Actually, mine was a Core Duo like yours.  I no longer have this  
laptop, but it's still in the family (Darrin Chandler).



Other than that my MacBook (with Core Duo (no 2)) works quite ok,
apart from the sound and wireless, which do not work.  Even X works,
but you'll have to use the 915 resolution port to get native
resolution.


The broken UKC is certainly an obstacle.  Since both of you have  
gotten it working on Core [2] Duo MacBook Pro's, I lean towards  user  
error.


--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Re: Long WEP key

2007-03-30 Thread mail-lists

Why bother adding WPA when you can turn many wlan cards into AP-mode and
have an OpenBSD box serve wireless computers with IPsec capabilities.
You then have an AP with many more capabilities than any
linksys/netgear/whatever AP.

This would be great. However, I've yet to find an IPsec client that's 
'easy' to set up.. ie. an end user can do it. Perhaps you know of a good 
way to solve this issue? I'd love to hear it!




Re: Long WEP key

2007-03-30 Thread Allie Daneman
mail-lists([EMAIL PROTECTED])@Fri, Mar 30, 2007 at 07:41:35AM -0500:
 Why bother adding WPA when you can turn many wlan cards into AP-mode and
 have an OpenBSD box serve wireless computers with IPsec capabilities.
 You then have an AP with many more capabilities than any
 linksys/netgear/whatever AP.
 
 This would be great. However, I've yet to find an IPsec client that's 
 'easy' to set up.. ie. an end user can do it. Perhaps you know of a good 
 way to solve this issue? I'd love to hear it!
Openvpn
 

-- 
~Allie D.



monitoring APC UPSes

2007-03-30 Thread Thierry Lacoste
I'd like to know if it is safe to run apcupsd-3.14.0.
There are some issues regarding pthreads on OpenBSD
raised in the apcupsd-3.12.x user's guide but these issues
are not mentioned anymore in the apcupsd-3.14.x user's guide.

Is it better to use apc-upsd from ports?
It seems to be a bit old and I could not find any documentation
on how to configure and use it.

Any recommandations would be much appreciated.

Regards,
Thierry.



Re: Long WEP key

2007-03-30 Thread mail-lists

Openvpn


Unless I'm mistaken Openvpn is not equal to Ipsec



VPNs (was: Re: Long WEP key)

2007-03-30 Thread Chris Black
mail-lists wrote:
 Openvpn

 Unless I'm mistaken Openvpn is not equal to Ipsec

You are not mistaken. Openvpn uses SSL over regular IP packets with its
own server/client setup on a dedicated port (1194). IPSec is a different
protocol (proto esp rather than tcp or udp). We moved from an
isakmpd/ipsec solution to openvpn due to lack of nat traversal issues
and a nicer free windows client.

Best,
Chris



Re: Long WEP key

2007-03-30 Thread Darren Spruell

On 3/30/07, mail-lists [EMAIL PROTECTED] wrote:

 Openvpn

Unless I'm mistaken Openvpn is not equal to Ipsec


Depends on what you mean by equal to - OpenVPN makes use of SSL/TLS
rather than the transport protocols IPsec employs, but they are of
similar equivalence in terms of security. OpenVPN does make use of
strong cryptographic primitives, and typically is considered easier to
set up than IPsec (although the newer ipsec.conf support in OpenBSD
seems to have turned the tables around on that one.)

http://www.sans.org/reading_room/whitepapers/vpns/1459.php

DS



Re: [OT] Re: Long WEP key

2007-03-30 Thread Jeremy Huiskamp

On 30-Mar-07, at 7:03 AM, Sunnz wrote:

You mean you can choose an unlimited set of characters as the key??


What I meant was that you're only choosing from [a-f0-9] when you  
could use characters from the whole alphabet, upper and lowercase as  
well as punctuation.  I can't claim to understand how WPA can be  
broken but from Damon's post it sounded like brute force.  You've  
saved an attacker from having to try the vast majority of possible  
keys at your length.


Jeremy



CVS server question

2007-03-30 Thread Zoli

Hi
I have a cvs server running on OpenBSD 4.0. I use this documentation
to create the CVS server :
http://davespicks.com/writing/programming/cvsonopenbsd.html

The cvs server work great!

I use this command for login:

$ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs login

And for checkout:

$ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs co folder

If someone commit changes all user want to receive an e-mail on
mailing list. Exist a script to do this ? To send an e-mail with
changes to mailing list ? I need something like OpenBSD-cvs mailing
list.

I appreciate any help!

Thanks



Re: CVS server question

2007-03-30 Thread Stuart Henderson
On 2007/03/30 17:47, Zoli wrote:
 If someone commit changes all user want to receive an e-mail on
 mailing list. Exist a script to do this ? To send an e-mail with
 changes to mailing list ? I need something like OpenBSD-cvs mailing
 list.

The magic google keyword you are looking for is loginfo.
Take a look in http://www.openbsd.org/cgi-bin/cvsweb.cgi/CVSROOT/



Re: [OT] Re: Long WEP key

2007-03-30 Thread Sunnz

But would any hacker actually try to brute force it by 16 character of
from length 1 to length 40? Maybe I only used 16 possible characters
instead of 60, but it is a really long key.

And I suppose the the hash could be converted to 36 characters
[a-z0-9] if I am really paranoid?

2007/3/30, Jeremy Huiskamp [EMAIL PROTECTED]:

On 30-Mar-07, at 7:03 AM, Sunnz wrote:
 You mean you can choose an unlimited set of characters as the key??

What I meant was that you're only choosing from [a-f0-9] when you
could use characters from the whole alphabet, upper and lowercase as
well as punctuation.  I can't claim to understand how WPA can be
broken but from Damon's post it sounded like brute force.  You've
saved an attacker from having to try the vast majority of possible
keys at your length.

Jeremy





--
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html



Re: monitoring APC UPSes

2007-03-30 Thread Aaron Poffenberger
I was recently running apcupsd without problem.  Nevertheless I
swtiched, recently, to nut [1] because it's so much better.  It has
excellent APC monitoring.  If your APC is Smart or a Backups Pro model,
it can control all the exposed functions.  Even cooler, it's called nut
because it's the Network UPS Tools kit.  If you have more than one
system plugged into the same UPS, the system monitoring the UPS can let
other systems know they should shutdown so everything goes down
cleanly.  Lastly, it has a nice scheduler that send you alerts when the
UPS has been on battery power for some n period of time and let you know
when it's back on the mains.

Use nut.  You'll be happy you did.

Aaron

[1] Found in ports.  Online documentation at
http://www.networkupstools.org/compat/.

Thierry Lacoste wrote:
 I'd like to know if it is safe to run apcupsd-3.14.0.
 There are some issues regarding pthreads on OpenBSD
 raised in the apcupsd-3.12.x user's guide but these issues
 are not mentioned anymore in the apcupsd-3.14.x user's guide.

 Is it better to use apc-upsd from ports?
 It seems to be a bit old and I could not find any documentation
 on how to configure and use it.

 Any recommandations would be much appreciated.

 Regards,
 Thierry.



Install OSSIM in OpenBSD

2007-03-30 Thread Dimitri
  Today and discovered OSSIM and I wanted to install it in my openbsd, but port 
does not exist.
  Some way exists to install it in openbsd 3.9.
  
   
  Regards.
   




Dimitri.-
Anti-Linux, I live BSD life
http://deoxy.spaces.live.com/
http://deoxyt2.blogspot.com/


-

LLama Gratis a cualquier PC del Mundo.
Llamadas a fijos y msviles desde 1 cintimo por minuto.
http://es.voice.yahoo.com



MegaRAID Motherboard Compatibility

2007-03-30 Thread Chuck Okerstrom

All,

Just wondering if anyone out there has successfully run OpenBSD 4.0 with 
the combination of the LSI MegaRAID SATA 300-4XLP (or 8XLP) and an ASUS 
K8N-LR motherboard.  That's a fairly inexpensive AM2 64 board that 
supports PCI-X. 

I'd seen a post sometime ago where someone reported timeout issues with 
this combination and it appears never got them solved. 

Or can someone recommend a known working alternative AM2 (socket 939) 
motherboard that provides PCI-X? 

I'm also considering the ASUS M2N32, but that's another $100+ and since 
I'm a cheap SOB I'm trying to avoid that additional expense ;-)



Thanx in advance,

Chuck



spamdb SPAMTRAP entries

2007-03-30 Thread Jason Haag
With the forthcoming change in the SPAMTRAP format 'address' instead of
'address', do all existing SPAMTRAP entries have to be converted to
the new format? If so, is that supposed to happen automagically, via a
provided tool, or do we have to do that ourselves?

Thanks,
-Jason



Re: CVS server question

2007-03-30 Thread Zoli

Sorry because I ask a stupid question, I need to configure my sendmail
for loginfo?

DEFAULT $CVSROOT/CVSROOT/log_accum2 -m [EMAIL PROTECTED] -f
$CVSROOT/CVSROOT/ChangeLog -s %s

After CVS commit I don't receive the message on e-mail.

Thanks!

On 3/30/07, Matthew Clarke [EMAIL PROTECTED] wrote:

Fri, Mar 30, 2007 at 05:47:53PM +0300, Zoli may have written:

 Hi
 I have a cvs server running on OpenBSD 4.0. I use this documentation
 to create the CVS server :
 http://davespicks.com/writing/programming/cvsonopenbsd.html

 The cvs server work great!

 I use this command for login:

 $ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs login

 And for checkout:

 $ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs co folder

 If someone commit changes all user want to receive an e-mail on
 mailing list. Exist a script to do this ? To send an e-mail with
 changes to mailing list ? I need something like OpenBSD-cvs mailing
 list.

 I appreciate any help!

 Thanks

I like Russ Allbery's cvslog and cvsprep scripts for this.

http://www.eyrie.org/~eagle/software/cvslog/

--
On two occasions I have been asked [by members of Parliament!], `Pray, Mr.
Babbage, if you put into the machine wrong figures, will the right answers
come out?'  I am not able rightly to apprehend the kind of confusion of
ideas that could provoke such a question.  -- Charles Babbage




Re: CVS server question

2007-03-30 Thread Matthew Clarke
Fri, Mar 30, 2007 at 05:47:53PM +0300, Zoli may have written:

 Hi
 I have a cvs server running on OpenBSD 4.0. I use this documentation
 to create the CVS server :
 http://davespicks.com/writing/programming/cvsonopenbsd.html
 
 The cvs server work great!
 
 I use this command for login:
 
 $ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs login
 
 And for checkout:
 
 $ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs co folder
 
 If someone commit changes all user want to receive an e-mail on
 mailing list. Exist a script to do this ? To send an e-mail with
 changes to mailing list ? I need something like OpenBSD-cvs mailing
 list.
 
 I appreciate any help!
 
 Thanks

I like Russ Allbery's cvslog and cvsprep scripts for this.

http://www.eyrie.org/~eagle/software/cvslog/

-- 
On two occasions I have been asked [by members of Parliament!], `Pray, Mr.
Babbage, if you put into the machine wrong figures, will the right answers
come out?'  I am not able rightly to apprehend the kind of confusion of
ideas that could provoke such a question.  -- Charles Babbage



Re: Not getting much bandwidth through the firewall

2007-03-30 Thread Ted Unangst

On 3/29/07, Siju George [EMAIL PROTECTED] wrote:

I have an Internet Connection 1Mbps.
If I connect a Windows XP tp it I get about 800Kbps Speed but on
OpenBSD it never Goes beyond 380Kbps.

I have another ISP with 1 Mbps Speed Connection.
Both Windows XP and OpenBSD shows aroungd 800 Kbps Speed when
Connected Directly to it.

So was just wondering what the cause is :-)
Just wondering if

Increasing net.inet.tcp.{send,recv}space.

would solve the problem.


possibly.  all i know is my computers work plenty fast without
fiddling with the knobs.  you know you could have increased the sysctl
and tested it a lot faster than waiting for an email back?



Very slow raid performance with ami(4)

2007-03-30 Thread Roy Kim

Recently I bought an Intel SRCS28X (LSI Megaraid 300-8X card in
disguise) and I'm getting terrible performance out of it. Reads are
fine at around 90mb/s but writes bog down at 3mb/s. I dont have the
battery unit installed but 3mb/s is ridiculous..


OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Celeron(R) D CPU 3.06GHz (GenuineIntel 686-class) 3.06 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16
real mem  = 1072128000 (1047000K)
avail mem = 969981952 (947248K)
using 4256 buffers containing 53710848 bytes (52452K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(fd) BIOS, date 07/12/06, BIOS32 rev. 0 @
0xfd450, SMBIOS rev. 2.51 @ 0x3feeb000 (35 entries)
bios0: Supermicro PDSM4+
pcibios0 at bios0: rev 2.1 @ 0xfd450/0xbb0
pcibios0: PCI BIOS has 22 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GB LPC rev 0x00)
pcibios0: PCI bus #15 is the last bus
bios0: ROM list: 0xc/0xb000 0xcb000/0x1000 0xcc000/0x1000 0xcd000/0x400!
ipmi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel E7230 MCH rev 0xc0
ppb0 at pci0 dev 1 function 0 Intel E7230 PCIE rev 0xc0
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci2 at ppb1 bus 2
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
ppb2 at pci1 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci3 at ppb2 bus 3
ppb3 at pci3 dev 1 function 0 Intel IOP331 PCIX-PCIX rev 0x07
pci4 at ppb3 bus 4
ami0 at pci4 dev 14 function 0 Symbios Logic MegaRAID SATA 4x/8x rev
0x07: irq 10
ami0: Intel RAID SRCS28X, 32b, FW 813G, BIOS vH425, 128MB RAM
ami0: 1 channels, 0 FC loops, 3 logical drives
scsibus0 at ami0: 40 targets
sd0 at scsibus0 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
sd0: 512000MB, 512000 cyl, 64 head, 32 sec, 512 bytes/sec, 1048576000 sec total
sd1 at scsibus0 targ 1 lun 0: AMI, Host drive #01,  SCSI2 0/direct fixed
sd1: 512000MB, 512000 cyl, 64 head, 32 sec, 512 bytes/sec, 1048576000 sec total
sd2 at scsibus0 targ 2 lun 0: AMI, Host drive #02,  SCSI2 0/direct fixed
sd2: 196700MB, 196700 cyl, 64 head, 32 sec, 512 bytes/sec, 402841600 sec total
scsibus1 at ami0: 16 targets
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 3 not configured
ppb4 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
pci5 at ppb4 bus 9
ppb5 at pci0 dev 28 function 4 Intel 82801G PCIE rev 0x01
pci6 at ppb5 bus 13
em0 at pci6 dev 0 function 0 Intel PRO/1000MT (82573E) rev 0x03: irq
10, address 00:30:48:8c:9e:8c
ppb6 at pci0 dev 28 function 5 Intel 82801G PCIE rev 0x01
pci7 at ppb6 bus 14
em1 at pci7 dev 0 function 0 Intel PRO/1000MT (82573L) rev 0x00: irq
11, address 00:30:48:8c:9e:8d
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 5
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 10
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 11
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 10
usb3 at uhci3: USB revision 1.0
uhub3 at usb3
uhub3: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: irq 5
usb4 at ehci0: USB revision 2.0
uhub4 at usb4
uhub4: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
ppb7 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xe1
pci8 at ppb7 bus 15
vga1 at pci8 dev 4 function 0 ATI ES1000 rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ichpcib0 at pci0 dev 31 function 0 Intel 82801GB LPC rev 0x01: PM disabled
pciide0 at pci0 dev 31 function 2 Intel 82801GB SATA rev 0x01: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: ST3200826AS
wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1 at pciide0 channel 1 drive 0: ST3300622A
wd1: 16-sector PIO, LBA48, 286168MB, 586072368 sectors
wd2 at pciide0 channel 1 drive 1: Maxtor 7Y250P0
wd2: 16-sector PIO, LBA48, 239372MB, 490234752 sectors
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 5
wd2(pciide0:1:1): using PIO mode 4, Ultra-DMA mode 6
ichiic0 at pci0 dev 31 function 3 Intel 82801GB SMBus rev 0x01: irq 10
iic0 at ichiic0
unknown at iic0 addr 0x18 not configured
lm1 

Re: Very slow raid performance with ami(4)

2007-03-30 Thread Jacob Yocom-Piatt

Roy Kim wrote:

Recently I bought an Intel SRCS28X (LSI Megaraid 300-8X card in
disguise) and I'm getting terrible performance out of it. Reads are
fine at around 90mb/s but writes bog down at 3mb/s. I dont have the
battery unit installed but 3mb/s is ridiculous..



roy,

installed the battery unit on mine a couple weeks ago and it works quite 
nicely. i used to get the 3 MB/s write until i setup write caching, etc. 
not sure if you can enable these settings w/out the battery and get any 
performance gain. now i get close to full 100 Mbps write speed.


braver souls might be able to comment on playing with cache options in 
the RAID BIOS without the battery installed, but i am none too keen on 
restoring tons of data in case i wreck something.


cheers,
jake



OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Celeron(R) D CPU 3.06GHz (GenuineIntel 686-class) 
3.06 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16 


real mem  = 1072128000 (1047000K)
avail mem = 969981952 (947248K)
using 4256 buffers containing 53710848 bytes (52452K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(fd) BIOS, date 07/12/06, BIOS32 rev. 0 @
0xfd450, SMBIOS rev. 2.51 @ 0x3feeb000 (35 entries)
bios0: Supermicro PDSM4+
pcibios0 at bios0: rev 2.1 @ 0xfd450/0xbb0
pcibios0: PCI BIOS has 22 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GB LPC rev 0x00)
pcibios0: PCI bus #15 is the last bus
bios0: ROM list: 0xc/0xb000 0xcb000/0x1000 0xcc000/0x1000 
0xcd000/0x400!

ipmi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel E7230 MCH rev 0xc0
ppb0 at pci0 dev 1 function 0 Intel E7230 PCIE rev 0xc0
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci2 at ppb1 bus 2
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
ppb2 at pci1 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci3 at ppb2 bus 3
ppb3 at pci3 dev 1 function 0 Intel IOP331 PCIX-PCIX rev 0x07
pci4 at ppb3 bus 4
ami0 at pci4 dev 14 function 0 Symbios Logic MegaRAID SATA 4x/8x rev
0x07: irq 10
ami0: Intel RAID SRCS28X, 32b, FW 813G, BIOS vH425, 128MB RAM
ami0: 1 channels, 0 FC loops, 3 logical drives
scsibus0 at ami0: 40 targets
sd0 at scsibus0 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct 
fixed
sd0: 512000MB, 512000 cyl, 64 head, 32 sec, 512 bytes/sec, 1048576000 
sec total
sd1 at scsibus0 targ 1 lun 0: AMI, Host drive #01,  SCSI2 0/direct 
fixed
sd1: 512000MB, 512000 cyl, 64 head, 32 sec, 512 bytes/sec, 1048576000 
sec total
sd2 at scsibus0 targ 2 lun 0: AMI, Host drive #02,  SCSI2 0/direct 
fixed
sd2: 196700MB, 196700 cyl, 64 head, 32 sec, 512 bytes/sec, 402841600 
sec total

scsibus1 at ami0: 16 targets
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 3 not configured
ppb4 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
pci5 at ppb4 bus 9
ppb5 at pci0 dev 28 function 4 Intel 82801G PCIE rev 0x01
pci6 at ppb5 bus 13
em0 at pci6 dev 0 function 0 Intel PRO/1000MT (82573E) rev 0x03: irq
10, address 00:30:48:8c:9e:8c
ppb6 at pci0 dev 28 function 5 Intel 82801G PCIE rev 0x01
pci7 at ppb6 bus 14
em1 at pci7 dev 0 function 0 Intel PRO/1000MT (82573L) rev 0x00: irq
11, address 00:30:48:8c:9e:8d
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 5
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 10
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 11
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 10
usb3 at uhci3: USB revision 1.0
uhub3 at usb3
uhub3: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: irq 5
usb4 at ehci0: USB revision 2.0
uhub4 at usb4
uhub4: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
ppb7 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xe1
pci8 at ppb7 bus 15
vga1 at pci8 dev 4 function 0 ATI ES1000 rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ichpcib0 at pci0 dev 31 function 0 Intel 82801GB LPC rev 0x01: PM 
disabled

pciide0 at pci0 dev 31 function 2 Intel 82801GB SATA rev 0x01: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: ST3200826AS
wd0: 

Re: Not getting much bandwidth through the firewall

2007-03-30 Thread Steven Harms
I would check your testing methodologies, there is no way a system from the
last 10 years can't handle 1Mbps.  Maybe you can tell us which tests you are

running?

On 3/30/07, Ted Unangst [EMAIL PROTECTED] wrote:

 On 3/29/07, Siju George [EMAIL PROTECTED] wrote:
  I have an Internet Connection 1Mbps.
  If I connect a Windows XP tp it I get about 800Kbps Speed but on
  OpenBSD it never Goes beyond 380Kbps.
 
  I have another ISP with 1 Mbps Speed Connection.
  Both Windows XP and OpenBSD shows aroungd 800 Kbps Speed when
  Connected Directly to it.
 
  So was just wondering what the cause is :-)
  Just wondering if
 
  Increasing net.inet.tcp.{send,recv}space.
 
  would solve the problem.

 possibly.  all i know is my computers work plenty fast without
 fiddling with the knobs.  you know you could have increased the sysctl
 and tested it a lot faster than waiting for an email back?



Re: Long WEP key

2007-03-30 Thread smith
On Fri, 30 Mar 2007 07:41:35 -0500, mail-lists wrote
  Why bother adding WPA when you can turn many wlan cards into AP-mode and
  have an OpenBSD box serve wireless computers with IPsec capabilities.
  You then have an AP with many more capabilities than any
  linksys/netgear/whatever AP.
  
 This would be great. However, I've yet to find an IPsec client 
 that's 'easy' to set up.. ie. an end user can do it. Perhaps you 
 know of a good way to solve this issue? I'd love to hear it!

OpenVPN



Re: Long WEP key

2007-03-30 Thread smith
On Thu, 29 Mar 2007 22:12:35 +0200 (CEST), Siegbert Marschall wrote
 Well,
 
  I'd be more scared of the hacker that can bypass wep,
 
  than the average joe without wep.
 
  The hacker knows how to exploit your wep-decrypted network traffic,
 
  the average joe doesn't even if it were plain-text data.
 
 it's not always about sniffing something, sometimes it's about
 access only.
 If somebody does something bad with my unencrypted access-point
 using my internet-access, here in germany I am liable.
 If I configure feeble WEP64/40 I am not since there is at least
 some protection to be illegaly bypassed before the network can
 be used.
 
 Same with your car, leave the door open and the key in the lock for
 everybody even minor to drive and the accident will be your problem
 since the car hasn't been stolen. Lock the car and not matter if you
 can short and open the thing with your fingers only it's a different
 story since the car is stolen.
 
 So even though WEP is trash, from certain points of view it's a usefull
 as a cheap padlock on the garden hood so the next neighbours children
 don't kill themself with the axe or whatever is in there. If they
 break the window and get in there, it's their problem. Not that this
 is a lot more difficult then cracking WEP. /pun Cracking windows just
 makes more noise.
 
 Of course this is all a bit simplified but maybe some of the people
 here declaring that WEP is trash and shouldn't be used wake up and
 see that even trashy protection has it's use as long as it offers
 some protection.
 
 -sm

What I'm about to say is from the prespective of someone who uses openbsd for
a gateway, router, and firewall.  I speak from this prespective because the
original poster wants to know how to get wep working on OpenBSD.  If you use
linksys or some such this doesn't apply.

If you think wep is good for authentication, i.e. keeping the neighbors out,
it would make more sense to use authpf.  Authpf is more secure and auditted by
OpenBSD.  I'm sure we can all agree that authpf has not yet been proven to be
breakable, but wep has.  So why use a cheap pad lock when an easy-to-setup
unbreakable one is available.

Now let's talk about speed.  With authpf, a person just ssh's to the gateway
and now has the same network bandwidth as an unencrypted network (minus the
ssh connection of course but I'm sure that bandwidth is minimal).  Someone who
uses wep for authentication, slows down his bandwidth considerable compared to
authpf because each network packet has to be encrypted with an unsecure
protocal.  Also the gateway's and client's cpu resources are increased to make
that breakable-in-one-hour encryption.  If you have more than one client,
gateway's resources is used up even more.

My advice,

1) OpenBSD gateway, windows client = OpenVPN (or OpenBSD's ipsec but good luck)
2) OpenBSD gateway, OpenBSD client (or any ipsec compatible client) =
OpenBSD's ipsec
3) OpenBSD gateway, whatever client but don't care about encrypting my network
traffic = authpf



Re: hw.sensor empty

2007-03-30 Thread Nickolay A. Burkov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Please provide dmesg with your mail.
I guess you have no sensors in your box or they're not supported yet.

On Fri, Mar 30, 2007 at 10:34:44AM +0200, giovanni wrote:
 hello,
 
 on my box, 4.1-current,
 
 sysctl -a hw.sensor
 
 is empty
 I've seen that the sensor land has been split in user and kernel one.
 Before posting I've searched and tried to understand the matter
 i.e the relevant part where the copy from kernel to userland is made.
 I've also tried to watch the results during the path from
 
 sysctl -a hw.sensor
 
 to the sysctl_sensors call where all is copied correctly
 I'm wrong I know, so could you explain where?
 
 thanks,
 
 giovanni
 

- -- 
I do not fear computers.  I fear the lack of them. (c)
iQEVAwUBRg1SjoyD3BJzuu7VAQLIQAf/XCVMt3IPAAXNWORgb/Hpn9s38fMhdvoS
Ihc1rZ2woXlPrR7V/TB1K1YN3TirUe0D9RjsV8pMV19fmvkowJK4WbqN0i1IiSwB
lH/EG9jkDuGb9oQCjN+BGU9w99Nb9OdBRjDSXbh/SzRrc0QaO7O+Ys6dm4rUJ4Ns
TouOMk9pqK0AGOY4Tqy6pvoLZj/PIHaEUo0cwDy3a5PC/bHTDcZWM8TEVu8VNTIx
usrIC2wbsIGg++MFQvl7LZXdocoy1XVvdzBbzXAYSrKvT322UAHkzg4rTVkr4LiY
r3Dgi9ZwTWjs3LOlu6cWa43QH4L/6/XwJtnJ61JDOTU7SVe/R3GyjQ==
=l4/I
-END PGP SIGNATURE-



Re: Long WEP key

2007-03-30 Thread mail-lists

Darren Spruell wrote:

On 3/30/07, mail-lists [EMAIL PROTECTED] wrote:

 Openvpn

Unless I'm mistaken Openvpn is not equal to Ipsec


Depends on what you mean by equal to - OpenVPN makes use of SSL/TLS
rather than the transport protocols IPsec employs, but they are of
similar equivalence in terms of security. OpenVPN does make use of
strong cryptographic primitives, and typically is considered easier to
set up than IPsec (although the newer ipsec.conf support in OpenBSD
seems to have turned the tables around on that one.)


I meant 'equal to' in the most superficial sense :). Ipsec is easy 
enough to set up on the OpenBSD end (using ipsec.conf), but I haven't 
been able to find an ipsec client that doesn't make you want to slit 
your wrists in the windows world. I've tried greenbow? but there's no 
way an end user could configure even that. Plus it's not 'free' software.


Anyways - I'm just slaking my own curiosity as to what solutions other 
people have come up with. I haven't really visited this issue in awhile, 
maybe I'll take another look at openVPN.


Thanks!




http://www.sans.org/reading_room/whitepapers/vpns/1459.php

DS




Re: Very slow raid performance with ami(4)

2007-03-30 Thread Marco Peereboom
LSI megaraid cards will ALWAYS disable write cache whenever there is no
battery backed up memory on the card.  No exceptions.  The only thing
you can do is purchase a BBU and replace the current DIMM.

On Fri, Mar 30, 2007 at 12:27:02PM -0500, Jacob Yocom-Piatt wrote:
 Roy Kim wrote:
 Recently I bought an Intel SRCS28X (LSI Megaraid 300-8X card in
 disguise) and I'm getting terrible performance out of it. Reads are
 fine at around 90mb/s but writes bog down at 3mb/s. I dont have the
 battery unit installed but 3mb/s is ridiculous..
 
 
 roy,
 
 installed the battery unit on mine a couple weeks ago and it works quite 
 nicely. i used to get the 3 MB/s write until i setup write caching, etc. 
 not sure if you can enable these settings w/out the battery and get any 
 performance gain. now i get close to full 100 Mbps write speed.
 
 braver souls might be able to comment on playing with cache options in 
 the RAID BIOS without the battery installed, but i am none too keen on 
 restoring tons of data in case i wreck something.
 
 cheers,
 jake
 
 
 OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Intel(R) Celeron(R) D CPU 3.06GHz (GenuineIntel 686-class) 
 3.06 GHz
 cpu0: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16
  
 
 real mem  = 1072128000 (1047000K)
 avail mem = 969981952 (947248K)
 using 4256 buffers containing 53710848 bytes (52452K) of memory
 mainbus0 (root)
 bios0 at mainbus0: AT/286+(fd) BIOS, date 07/12/06, BIOS32 rev. 0 @
 0xfd450, SMBIOS rev. 2.51 @ 0x3feeb000 (35 entries)
 bios0: Supermicro PDSM4+
 pcibios0 at bios0: rev 2.1 @ 0xfd450/0xbb0
 pcibios0: PCI BIOS has 22 Interrupt Routing table entries
 pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GB LPC rev 0x00)
 pcibios0: PCI bus #15 is the last bus
 bios0: ROM list: 0xc/0xb000 0xcb000/0x1000 0xcc000/0x1000 
 0xcd000/0x400!
 ipmi at mainbus0 not configured
 cpu0 at mainbus0
 pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
 pchb0 at pci0 dev 0 function 0 Intel E7230 MCH rev 0xc0
 ppb0 at pci0 dev 1 function 0 Intel E7230 PCIE rev 0xc0
 pci1 at ppb0 bus 1
 ppb1 at pci1 dev 0 function 0 Intel PCIE-PCIE rev 0x09
 pci2 at ppb1 bus 2
 Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
 ppb2 at pci1 dev 0 function 2 Intel PCIE-PCIE rev 0x09
 pci3 at ppb2 bus 3
 ppb3 at pci3 dev 1 function 0 Intel IOP331 PCIX-PCIX rev 0x07
 pci4 at ppb3 bus 4
 ami0 at pci4 dev 14 function 0 Symbios Logic MegaRAID SATA 4x/8x rev
 0x07: irq 10
 ami0: Intel RAID SRCS28X, 32b, FW 813G, BIOS vH425, 128MB RAM
 ami0: 1 channels, 0 FC loops, 3 logical drives
 scsibus0 at ami0: 40 targets
 sd0 at scsibus0 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct 
 fixed
 sd0: 512000MB, 512000 cyl, 64 head, 32 sec, 512 bytes/sec, 1048576000 
 sec total
 sd1 at scsibus0 targ 1 lun 0: AMI, Host drive #01,  SCSI2 0/direct 
 fixed
 sd1: 512000MB, 512000 cyl, 64 head, 32 sec, 512 bytes/sec, 1048576000 
 sec total
 sd2 at scsibus0 targ 2 lun 0: AMI, Host drive #02,  SCSI2 0/direct 
 fixed
 sd2: 196700MB, 196700 cyl, 64 head, 32 sec, 512 bytes/sec, 402841600 
 sec total
 scsibus1 at ami0: 16 targets
 Intel IOxAPIC rev 0x09 at pci1 dev 0 function 3 not configured
 ppb4 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
 pci5 at ppb4 bus 9
 ppb5 at pci0 dev 28 function 4 Intel 82801G PCIE rev 0x01
 pci6 at ppb5 bus 13
 em0 at pci6 dev 0 function 0 Intel PRO/1000MT (82573E) rev 0x03: irq
 10, address 00:30:48:8c:9e:8c
 ppb6 at pci0 dev 28 function 5 Intel 82801G PCIE rev 0x01
 pci7 at ppb6 bus 14
 em1 at pci7 dev 0 function 0 Intel PRO/1000MT (82573L) rev 0x00: irq
 11, address 00:30:48:8c:9e:8d
 uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 5
 usb0 at uhci0: USB revision 1.0
 uhub0 at usb0
 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
 uhub0: 2 ports with 2 removable, self powered
 uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 10
 usb1 at uhci1: USB revision 1.0
 uhub1 at usb1
 uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
 uhub1: 2 ports with 2 removable, self powered
 uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 11
 usb2 at uhci2: USB revision 1.0
 uhub2 at usb2
 uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
 uhub2: 2 ports with 2 removable, self powered
 uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 10
 usb3 at uhci3: USB revision 1.0
 uhub3 at usb3
 uhub3: Intel UHCI root hub, rev 1.00/1.00, addr 1
 uhub3: 2 ports with 2 removable, self powered
 ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: irq 5
 usb4 at ehci0: USB revision 2.0
 uhub4 at usb4
 uhub4: Intel EHCI root hub, rev 2.00/1.00, addr 1
 uhub4: 8 ports with 8 removable, self powered
 ppb7 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xe1
 pci8 at ppb7 bus 15
 vga1 at pci8 dev 4 function 0 ATI ES1000 rev 0x02
 

Re: Long WEP key

2007-03-30 Thread smith
On Fri, 30 Mar 2007 08:45:44 -0500, mail-lists wrote
  Openvpn
 
 Unless I'm mistaken Openvpn is not equal to Ipsec

good enough to accomplish the job securely.  Better than ipsec if you have no
control of the network you are on, i.e. you are a mobile user who happens to
be on a wireless network that has the ipsec ports blocked but your openvpn
server is listening on port 80, or 53, or 21 or all of them.



Re: Very slow raid performance with ami(4)

2007-03-30 Thread Stuart Henderson
On 2007/03/30 11:07, Roy Kim wrote:
 Recently I bought an Intel SRCS28X (LSI Megaraid 300-8X card in
 disguise) and I'm getting terrible performance out of it. Reads are
 fine at around 90mb/s but writes bog down at 3mb/s. I dont have the
 battery unit installed but 3mb/s is ridiculous..

I have the battery and see faster writes than reads.

There are two different batteries you can use with the 300-8X;
an intelligent one and a reasonably-priced one :-)



Re: Very slow raid performance with ami(4)

2007-03-30 Thread Roy Kim

I didn't realize there's two different batteries. What does the
'intelligent' version of the battery do extra?

On 3/30/07, Stuart Henderson [EMAIL PROTECTED] wrote:

On 2007/03/30 11:07, Roy Kim wrote:
 Recently I bought an Intel SRCS28X (LSI Megaraid 300-8X card in
 disguise) and I'm getting terrible performance out of it. Reads are
 fine at around 90mb/s but writes bog down at 3mb/s. I dont have the
 battery unit installed but 3mb/s is ridiculous..

I have the battery and see faster writes than reads.

There are two different batteries you can use with the 300-8X;
an intelligent one and a reasonably-priced one :-)




new

2007-03-30 Thread dave fales
Hi I am new at using this system and I am getting ready to set up my
own email server. I am wondering if any one has any web pages that are
real easy to understand  on setting stuff up using this operating
system. Let me give you my back ground I was very good with computer
basically if you had a software and couldn't figure it out you could
lock me in the room with the book and I would have it al figured out
in fact I helped reconfigure all the local TV station computer system
when they moved to hi def. But about 2 years ago I got hurt on the job
and went into sever septic shock which basically shut my body down I
should have died but I didn't I lived but I ended up with a brain
injury I am recovering from my working on computers are part of my
therapy has my nero said the information is still there it is just
that the connections are not there. so he said has I immerse my self
in stuff I used to do the connections will be made again. so if you
could give me some good web sights and also if any one have pics of
there home networking system let me know



Re: [OT] Re: Long WEP key

2007-03-30 Thread Jeremy Huiskamp

On 30-Mar-07, at 10:58 AM, Sunnz wrote:


But would any hacker actually try to brute force it by 16 character of
from length 1 to length 40? Maybe I only used 16 possible characters
instead of 60, but it is a really long key.


$ bc
16^40
1461501637330902918203684832716283019655932542976
60^30
22107391972073335789977600

This is probably a pointless discussion and I'm sure your password is  
far better than most (it's better than mine for sure).


Jeremy



Re: SMP causing uvm_fault

2007-03-30 Thread Matthew Szudzik
 Then after about an hour, when you try and reboot, I get an error:
 
 uvm_fault(0x..., 0x..., 0, 1) - e
 kernel: page fault trap, code = 0
 stopped at pmap_page_remove_86+0x114:
 0(%eax, %edx, 4), %eax
 

I suspect that I may be experiencing the same problem.  I have a brand new 
Lenovo ThinkPad T60 (just purchased this week), and if I attempt to boot 
from the OpenBSD install CD at

 http://openbsd.mirrors.pair.com/ftp/snapshots/i386/cd41.iso

then the boot fails, with the following error:

 ath0 at pci2 dev 0 function 0 Atheros AR5212 (IBM MiniPCI) rev 0x01: 
irq 11
 fatal non-maskable interrupt (9) in supervisor mode
 trap type 9 code 0 eip d0268196 cs 8 eflags 2 cr2 0 cpl 0
 panic: trap type 9, code=0, pc=d0268196
 uvm_fault(0xd0696680, 0x0, 0, 1) - e
 fatal page fault (6) in supervisor mode
 trap type 6 code 0 eip d0275bf2 cs 8 eflags 10086 cr2 920 cpl 0
 panic: trap type 6, code=0, pc=d0275bf2

 The operating system has halted.
 Please press any key to reboot.


I also get a similar error with

 http://openbsd.mirrors.pair.com/ftp/4.0/i386/cd40.iso

but the boot succeeds without error for

 http://openbsd.mirrors.pair.com/ftp/3.9/i386/cd39.iso
 http://openbsd.mirrors.pair.com/ftp/snapshots/amd64/cd41.iso

Unfortunately, I am unable to include a full dmesg (the above error 
message was copied by hand).



no AMANDA: backing up to a remote tape

2007-03-30 Thread Jacob Yocom-Piatt
got a couple DLT tape drives laying around and am experimenting with 
backing up remote machines to tape. although this is done quite easily 
for the local machine (see http://www.openbsd.org/faq/faq14.html#Backup 
) there are some things i'm sure i'm not doing right in the remote case. 
i am not interested in using AMANDA and will make a script available 
that automates this procedure if anybody is interested.


the starting point is a pull backup script run from a backup host

ssh [EMAIL PROTECTED] 'dump -0au -f - /' | gzip -9 | gpg -e -r 
[EMAIL PROTECTED] -o host0-root-0.dmp.gz.gpg


which outputs an encrypted zipped dump and i would like to put it on the 
tape. the proper way of doing this is escaping me since i'm not 
accustomed to the sequential nature of writing to tape. i'd like to be 
able to write each .gpg file to tape as i generate it then delete it or 
pipe it to the tape directly. going over the tar manpage has not been 
supremely illuminating and has taught me that issuing


tar c host0-root-0.dmp.gz.gpg

will write the file to tape but trying to add another file doesn't work 
out how i'd expect:


NOTE: TAPE=/dev/nrst0 here so it doesn't rewind after tar-ing

# tar r 
host0-usr-0.dmp.gz.gpg


tar: End of archive volume 1 reached
tar: Sorry, unable to determine archive format.
# tar vr host0-usr-0.dmp.gz.gpg
tar: End of archive volume 1 reached
tar: Waiting for tape drive close to complete...done.
tar: Sorry, unable to determine archive format.
# tar c host0-usr-0.dmp.gz.gpg  
# tar t

tar: End of archive volume 1 reached
tar: Sorry, unable to determine archive format.
# mt -f /dev/rst0 
rewind


# tar t
host0-root-0.dmp.gz.gpg
# tar t
tar: End of archive volume 1 reached
tar: Sorry, unable to determine archive format.

so it appears that host0-usr-0.dmp.gz.gpg didn't get added to the 
archive. any advice on how to have each dump written in sequence so the 
tape's data looks like


host0-root-0.dmp.gz.gpg - host0-usr-0.dmp.gz.gpg - ... - 
hostX-root-Y.dmp.gz.gpg - ...


would be appreciated. i expect that the relevant clues are all in the 
manpages but i'm obviously looking at the wrong switches or commands and 
clues along these lines would be great.


cheers,
jake



Re: CVS server question

2007-03-30 Thread Matthew Clarke
Fri, Mar 30, 2007 at 07:50:43PM +0300, Zoli may have written:

 Sorry because I ask a stupid question, I need to configure my sendmail
 for loginfo?
 
 DEFAULT $CVSROOT/CVSROOT/log_accum2 -m [EMAIL PROTECTED] -f
 $CVSROOT/CVSROOT/ChangeLog -s %s
 
 After CVS commit I don't receive the message on e-mail.

log_accum2 submits mail via sendmail, so yes, your sendmail needs to be
configured to accept mail from the local system and deliver it on to
whereever it should go.  Check /var/log/maillog for clues.

-- 
 Thus again, we have successfully proven that I cannot read minds. 
 It doesn't help.  Almost all you ever get is This mind intentionally
 left blank. 
-- Steve VanDevender, to AJS, in ASR

 Thanks!
 
 On 3/30/07, Matthew Clarke [EMAIL PROTECTED] wrote:
 Fri, Mar 30, 2007 at 05:47:53PM +0300, Zoli may have written:
 
  Hi
  I have a cvs server running on OpenBSD 4.0. I use this documentation
  to create the CVS server :
  http://davespicks.com/writing/programming/cvsonopenbsd.html
 
  The cvs server work great!
 
  I use this command for login:
 
  $ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs login
 
  And for checkout:
 
  $ cvs -d :pserver:[EMAIL PROTECTED]:/home/cvs co folder
 
  If someone commit changes all user want to receive an e-mail on
  mailing list. Exist a script to do this ? To send an e-mail with
  changes to mailing list ? I need something like OpenBSD-cvs mailing
  list.
 
  I appreciate any help!
 
  Thanks
 
 I like Russ Allbery's cvslog and cvsprep scripts for this.
 
 http://www.eyrie.org/~eagle/software/cvslog/
 
 --
 On two occasions I have been asked [by members of Parliament!], `Pray, Mr.
 Babbage, if you put into the machine wrong figures, will the right answers
 come out?'  I am not able rightly to apprehend the kind of confusion of
 ideas that could provoke such a question.  -- Charles Babbage



Re: monitoring APC UPSes

2007-03-30 Thread System Administrator
On 30 Mar 2007 at 10:21, Aaron Poffenberger wrote:

 I was recently running apcupsd without problem.  Nevertheless I
 swtiched, recently, to nut [1] because it's so much better.  It has
 excellent APC monitoring.  If your APC is Smart or a Backups Pro model,
 it can control all the exposed functions.  Even cooler, it's called nut
 because it's the Network UPS Tools kit.  If you have more than one
 system plugged into the same UPS, the system monitoring the UPS can let
 other systems know they should shutdown so everything goes down cleanly.
  Lastly, it has a nice scheduler that send you alerts when the UPS has
 been on battery power for some n period of time and let you know when
 it's back on the mains.
 
 Use nut.  You'll be happy you did.
 
 Aaron

Actually your information is inacurate and unfairly biased.

Both NUT and APCUPSd have very similar capabilities for shared UPSes 
and notifying other servers, as well as reporting, graphing, etc. In 
fact, they share a lot of code (pls review the changelogs) and even the 
comm protocol is similar although by default it runs on different 
ports.

The major difference has to do with their development cycles, goals and 
sponsorship. Namely, APCUPSd is totally independent development of UPS 
management code for only one brand of UPS (APC) and with frequent 
releases. In the last 3 years NUT has not been properly updated; its 
original goal was to support as many UPS brands as possible; and in 
recent years it has been sponsored by MGE. (I believe that includes 
full-time employment for the primary developer.) Now, an interesting 
recent development may change this analysis completely -- the fact that 
APC has been acquired by MGE, but only time will tell the story...

 
 [1] Found in ports.  Online documentation at
 http://www.networkupstools.org/compat/.
 
 Thierry Lacoste wrote:
  I'd like to know if it is safe to run apcupsd-3.14.0.
  There are some issues regarding pthreads on OpenBSD
  raised in the apcupsd-3.12.x user's guide but these issues
  are not mentioned anymore in the apcupsd-3.14.x user's guide.
 
  Is it better to use apc-upsd from ports?
  It seems to be a bit old and I could not find any documentation
  on how to configure and use it.
 
  Any recommandations would be much appreciated.
 
  Regards,
  Thierry.
 
 

-
System Administrator[EMAIL PROTECTED]
Bitwise Internet Technologies, Inc.
22 Drydock Avenue tel: (617) 737-1837
Boston, MA 02210  fax: (617) 439-4941



Re: Very slow raid performance with ami(4)

2007-03-30 Thread Stuart Henderson
On 2007/03/30 13:18, Roy Kim wrote:
 I didn't realize there's two different batteries. What does the
 'intelligent' version of the battery do extra?

LSIiBBU01 (intelligent) has some kind of comms relating to charge state
etc, I think it may also have a longer runtime.

LSIBBU03 (non-intelligent) doesn't, and was something like a third of the
price where I bought mine (scan.co.uk).

My approach was to get the cheaper one and spend the difference on
drives to backup at least some of the data onto, the amount of data you
can lose in one go with SATA RAID gets a bit worrying (-: (dump over
ssh to a hard drive on another machine is simple and quite effective).

Other tips include not rushing the installation (spend some time making
the cables nice and tidy) and setup some monitoring (sensorsd is fine);
besides RAID status, it is useful to check temperature, voltages, and
fan speed if you can.



lsi logic sparc64 config?

2007-03-30 Thread Bryan Irvine

This might be a little off-topic, but I can't find the answer anywhere.

Since the LSI logic sata 150-4 cards need to be configured via the
cards bios (at bootup on i386)  I can't figure out if there is a way
to configure a RAID when using a sparc64 platform.

Is this possible?

--Bryan



Re: monitoring APC UPSes

2007-03-30 Thread Aaron Poffenberger
System Administrator wrote:
 On 30 Mar 2007 at 10:21, Aaron Poffenberger wrote:

   
 I was recently running apcupsd without problem.  Nevertheless I
 swtiched, recently, to nut [1] because it's so much better.  It has
 excellent APC monitoring.  If your APC is Smart or a Backups Pro model,
 it can control all the exposed functions.  Even cooler, it's called nut
 because it's the Network UPS Tools kit.  If you have more than one
 system plugged into the same UPS, the system monitoring the UPS can let
 other systems know they should shutdown so everything goes down cleanly.
  Lastly, it has a nice scheduler that send you alerts when the UPS has
 been on battery power for some n period of time and let you know when
 it's back on the mains.

 Use nut.  You'll be happy you did.

 Aaron
 

 Actually your information is inacurate and unfairly biased.
   
Inaccurate -- quite possibly.  Biased -- not.  I have no particular
interest or association with either project.  I offered my opinion after
running both straight from the ports tree.  The tag on apc-upsd in ports
(apc-upsd-19991128) certainly implies its very old.  So it's quite
possible the OP meant a newer version.  I'll offer this clarification --
the version of nut in the 4.0 ports tree SMOKES the apc-upsd-19991128
port in the same.  See reasons above.  ;-)
 Both NUT and APCUPSd have very similar capabilities for shared UPSes 
 and notifying other servers, as well as reporting, graphing, etc. In 
 fact, they share a lot of code (pls review the changelogs) and even the 
 comm protocol is similar although by default it runs on different 
 ports.

 The major difference has to do with their development cycles, goals and 
 sponsorship. Namely, APCUPSd is totally independent development of UPS 
 management code for only one brand of UPS (APC) and with frequent 
 releases. In the last 3 years NUT has not been properly updated; its 
 original goal was to support as many UPS brands as possible; and in 
 recent years it has been sponsored by MGE. (I believe that includes 
 full-time employment for the primary developer.) Now, an interesting 
 recent development may change this analysis completely -- the fact that 
 APC has been acquired by MGE, but only time will tell the story...

   
 [1] Found in ports.  Online documentation at
 http://www.networkupstools.org/compat/.

 Thierry Lacoste wrote:
 
 I'd like to know if it is safe to run apcupsd-3.14.0.
 There are some issues regarding pthreads on OpenBSD
 raised in the apcupsd-3.12.x user's guide but these issues
 are not mentioned anymore in the apcupsd-3.14.x user's guide.

 Is it better to use apc-upsd from ports?
 It seems to be a bit old and I could not find any documentation
 on how to configure and use it.

 Any recommandations would be much appreciated.

 Regards,
 Thierry.
   
 

 -
 System Administrator[EMAIL PROTECTED]
 Bitwise Internet Technologies, Inc.
 22 Drydock Avenue tel: (617) 737-1837
 Boston, MA 02210  fax: (617) 439-4941

   
Cheers,

Aaron



Re: no AMANDA: backing up to a remote tape

2007-03-30 Thread Jon Simola

On 3/30/07, Jacob Yocom-Piatt [EMAIL PROTECTED] wrote:


NOTE: TAPE=/dev/nrst0 here so it doesn't rewind after tar-ing


That's your problem.

unset TAPE, or just use the default /dev/rst0 device.

(hysterical raisins and all)

--
Jon



Re: SMP causing uvm_fault

2007-03-30 Thread Matthew Szudzik
On Fri, 30 Mar 2007 at 16:48 -0400, Matthew Szudzik wrote:
 I suspect that I may be experiencing the same problem.

After talking with Art, we've decided that I'm probably experiencing a 
problem with the ath driver, and not the SMP uvm_fault bug.  My problem 
disappears when I boot -c and disable ath.



Re: Very slow raid performance with ami(4)

2007-03-30 Thread Clint Pachl

Marco Peereboom wrote:

LSI megaraid cards will ALWAYS disable write cache whenever there is no
battery backed up memory on the card.  No exceptions.  The only thing
you can do is purchase a BBU and replace the current DIMM.
  


People state disk throughput numbers, but how are these measured? I know 
there are utilities in ports for this kind of measurement, but I would 
just like to get a general idea using standard utilities (dd, time cp, 
etc.).


I have (no BBU):
ami0 at pci0 dev 16 function 0 AMI MegaRAID rev 0x20: apic 2 int 16 
(irq 5)

ami0: AMI 475, 64b/lhc, FW 163D, BIOS v5.07, 32MB RAM
ami0: 1 channels, 0 FC loops, 1 logical drives
sd0 at scsibus2 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
sd0: 140180MB, 140180 cyl, 64 head, 32 sec, 512 bytes/sec, 287088640 sec 
total


$ sudo bioctl sd0
Volume  Status   Size Device 
ami0 0 Online   146989383680 sd0 RAID0
 0 Online36747345920 0:1.0   noencl FUJITSU 
MAP3367NP   0108
 1 Online36747345920 0:2.0   noencl FUJITSU 
MAP3367NP   0108
 2 Online36747345920 0:3.0   noencl FUJITSU 
MAP3367NP   0108
 3 Online36747345920 0:4.0   noencl FUJITSU 
MAP3367NP   0108


Do the following simple tests seem reasonable for my setup?

-

$ dd if=/dev/zero of=JUNK bs=1k count=10
10+0 records in
10+0 records out
10240 bytes transferred in 1.690 secs (60575479 bytes/sec)

$ ls -lh JUNK
-rw-r--r--  1 pachl  wheel  97.7M Mar 30 12:12 JUNK

$ time cp JUNK /dev/null  
   0m3.20s real 0m0.00s user 0m0.45s system


$ echo 97.7 / 3.2 | bc -l
30.53125000

-

$ dd if=/dev/zero of=JUNK bs=2k count=1
1+0 records in
1+0 records out
2048 bytes transferred in 0.266 secs (76988719 bytes/sec)

$ ll -h JUNK   
-rw-r--r--  1 pachl  wheel  19.5M Mar 30 12:49 JUNK


$ time cp JUNK /dev/null  
   0m0.60s real 0m0.01s user 0m0.08s system


$ echo 19.5 / 0.6 | bc -l
32.5000

-

$ dd if=/dev/zero of=JUNK bs=2k count=10
10+0 records in
10+0 records out
20480 bytes transferred in 3.994 secs (51265915 bytes/sec)

$ ls -lh JUNK 
-rw-r--r--  1 pachl  wheel   195M Mar 30 12:56 JUNK


$ dd if=JUNK of=/dev/null bs=4k 
5+0 records in

5+0 records out
20480 bytes transferred in 6.458 secs (31708284 bytes/sec)

-

~30MB/s read bandwidth seems kind of crappy for a 4 stripe RAID0. Are my 
tests/numbers inaccurate? Are there better ways to get performance 
numbers using standard utilities?


-pachl



Re: panic on fresh snap (was: [ppc] Daily digest, Issue 573 (1 messages))

2007-03-30 Thread marius

On 3/30/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

The pre-dawn daily digest
Volume 1 : Issue 573 : text Format

Messages in this Issue:
 panic on fresh snap

--

Date: Fri, 30 Mar 2007 13:15:06 +0200
From: Tim Saueressig, thepixelz.com [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: panic on fresh snap
Message-ID: [EMAIL PROTECTED]

hi,
my old powerbook panics while getting the src tree form cvs.
dmesg, trace and ps below.


Tim's full message is at http://marc.info/?l=openbsd-ppcm=117525731115500w=2



panic: allocbuf: stealing pages from dirty buffer

[snip]

Hi Tim,

This is not PPC-specific. I'm seeing the same thing on a
Turion64-based laptop running the March 29th amd64 snap. I'm cc'ing
the misc@ list on this (Antoine Jacoutot has reported the same problem
as well on macppc with the March 29th snap (I don't run into this on
the March 26th macppc snap)).

On my amd64, I can 'cvs up' an individual port, or a directory (like
/usr/ports/net), but I repeatedly get 'panic: allocbuf: stealing pages
from dirty buffer' when running 'cvs up' in /usr/ports.

Below are my trace and ps outputs (copied by hand) as well as the
dmesg. Please cc me, as I'm not subscribed to misc@ and only get the
daily digest of [EMAIL PROTECTED]

Thanks, Marius

ddb trace
Debugger() at Debugger+0x5
panic() at panic+0x12a
allocbuf() at allocbuf+0x1bc
getblk() at getblk+0x138
bread() at bread+0x1e
ffs_buffatoff() at ffs_bufatoff+0x74
ufs_lookup() at ufs_lookup+0x2d2
VOP_LOOKUP() at VOP_LOOKUP+0x2e
lookup() at lookup+0x209
namei() at namei+0x19c
sys_rename() at sys_rename+0x4e
syscall() at syscall+0x225
--- syscall (number 128) ---
end of kernel
end trace frame: 0x485d6200, count -12
0x43f369da

ddbps
  PIDPPIDPGRP   UID SFLAGS  WAIT  COMMAND
1400168196819 0 3   0x4082  selectssh
* 6819   199066819 0 7   0x4002cvs
19906   24779   19906 0 3   0x4082  pause ksh
24799   21494   24799  1000 3   0x4082  pause ksh
27431   21494   27431  1000 3   0x4082  ttyin ksh
214949635   21494  1000 3 0x80  selectscreen
 9635   282999635  1000 3   0x4082  pause screen
 5342   15342 0 3   0x4082  ttyin getty
22458   1   22458 0 3   0x4082  ttyin getty
14209   1   14209 0 3   0x4082  ttyin getty
14439   1   14439 0 3   0x4082  ttyin getty
28299   1   28299  1000 3   0x4082  pause ksh
31094   1   31094 0 3 0x80  selectcron
  750   1 750 0 3 0x80  kqreadacpid
32435   1   32435 0 3  0x40180  selectsendmail
16121   1   16121 0 3 0x80  selectsshd
28500   1   28500 0 30x180  selectinetd
289343773377373 30x180  poll  syslogd
 3773   13773 0 3 0x88  netio syslogd
 4291   1429177 30x180  poll  dhclient
19446   1   19254 0 3 0x82  poll  dhclient
   17   0   0 0 3 0x100200  crypto_wa crypto
   16   0   0 0 3 0x100200  aiodoned  aiodoned
   15   0   0 0 3 0x100200  syncerupdate
   14   0   0 0 3 0x100200  cleaner   cleaner
   13   0   0 0 3 0x100200  reaperreaper
   12   0   0 0 3 0x100200  pgdaemon  pagedaemon
   11   0   0 0 3 0x100200  pftm  pfpurge
   10   0   0 0 3 0x100200  cardslote cardslot0
9   0   0 0 3 0x100200  usbevtusb3
8   0   0 0 3 0x100200  usbevtusb2
7   0   0 0 3 0x100200  usbevtusb1
6   0   0 0 3 0x100200  wait  wskbd_hotkey
5   0   0 0 3 0x100200  usbtskusbtask
4   0   0 0 3 0x100200  usbevtusb0
3   0   0 0 3 0x100200  slacking  scsi
2   0   0 0 3 0x100200  acpi_idle acpi0
1   0   0 0 3   0x4080  wait  init
0   0   0 0 3  0x80200  scheduler swapper

OpenBSD 4.1-current (GENERIC) #896: Thu Mar 29 21:38:05 MDT 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 1475801088 (1441212K)
avail mem = 1252827136 (1223464K)
using 22937 buffers containing 147787776 bytes (144324K) of memory
mainbus0 (root)
bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf9ab0 (45 entries)
bios0: AVERATEC 4100 Series
acpi0 at mainbus0: rev 0
acpi0: tables DSDT FACP APIC OEMB
acpitimer at acpi0 not configured
acpiprt0 at acpi0: bus 0 (PCI0)
acpiec at acpi0 not configured
acpibtn at acpi0 not configured
acpibat at acpi0 not configured
acpiac at acpi0 not configured
acpibtn at acpi0 not configured
acpibtn at acpi0 not configured
acpicpu at acpi0 not configured
acpitz at acpi0 not configured
cpu0 at mainbus0: (uniprocessor)
cpu0: AMD Turion(tm) 64 Mobile Technology MT-30, 1596.69 MHz
cpu0: 

Re: monitoring APC UPSes

2007-03-30 Thread Henning Brauer
* System Administrator [EMAIL PROTECTED] [2007-03-30 23:37]:
 The major difference has to do with their development cycles, goals and 
 sponsorship. Namely, APCUPSd is totally independent development of UPS 
 management code for only one brand of UPS (APC) and with frequent 
 releases. In the last 3 years NUT has not been properly updated;

ah, really.
2.0.5 was released in january 2007.

 its  original goal was to support as many UPS brands as possible; and 
 in recent years it has been sponsored by MGE. (I believe that includes 
 full-time employment for the primary developer.)

and there are several other developers working on other brand UPSes, 
and arnauld is not working on mge only either.

nut is actually quite ok.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



Re: Is OpenBSD good/best for my 486?

2007-03-30 Thread Douglas Allan Tutty
On Sun, Mar 25, 2007 at 12:44:46PM -0400, Nick Holland wrote:
 Shawn K. Quinn wrote:
  On Fri, 2007-03-23 at 10:49 -0400, Douglas Allan Tutty wrote:
  On Fri, Mar 23, 2007 at 06:56:32AM -0500, Shawn K. Quinn wrote:
   On Wed, 2007-03-21 at 22:37 -0400, Douglas Allan Tutty wrote:

I've got a 486DX4-100 with 32 MB ram, ISA bus, with two drives: 840 MB
and 1280 MB IDE.  Currently running Debian GNU/Linux Sarge.
   
 
 32M is at a point where if it isn't enough, you need a better machine.
 Tweaking the kernel to make it run better in 32M is just perfume on the
 pig.  If that's what you need to do, get a less smelly pig.
 
 
 As I indicated recently, probably on this thread, ssh on a 486 is painful.
 Works fine, but painfully slow.   

 X?  oh, ick.  It will work, but you may need the XF3 support, as a lot of
 old, 486-vintage video chips haven't been ported to X.org.  If you need to
 use the XF3 servers, you will be out of luck starting with OpenBSD v4.2,
 as (hopefully) we will have switched to Xenocara, and probably drop XF3
 support.
 
 I believe at some point, it was indicated that this 486 is or may be the
 OP's first OpenBSD experience.  If that is true, I'd highly recommend a
 better machine to get your feet wet with.   

 MY recommendation for minimum HW for OpenBSD for a first-timer would be
 a Pentium, 100MHz or better, 32M RAM or better.  If you want X, I'd bump
 that up to a P200, 64M RAM or better.  Again, it isn't that it won't run
 on slower machines, it is just that you will skip important steps in the
 learning process if your machine is too slow.
 
 

Right now, I only have two boxes:  my 486 and my Athlon.  The Athlon
runs Debian Etch amd64.  Its the box that does all my work so I don't
want to get on a BSD learning curve on it.  The 486 is only a
convenience piece.

Yes, X is a problem no matter Debian or BSD.  Right now, the 486 has
Debian Sarge on it but I've tweaked the XFree86 configs so it uses the
previous versions S3 driver since its not available for the current
version.  That wont be an option in Debian Etch eiter.  Bottom line, I
may have to give up on X.  Its not that great a loss.

Debian's Sarge installer doesn't work on it and neither will Etch's.  If
ever I need to reinstall or change something fundamental (e.g. the hard
drive crashes), I have to install woody base and upgrade.  The trouble
is that its a pain to do that over dial-up.  This is one of my reasons
for looking at OpenBSD.

So I want to learn BSD on the 486.  As for taking a long time to
install, everything is relative.  It takes a long time to upgrade Debian
over dial-up too.  I _think_ I can download the tarballs from the ftp
site, burn them onto a CD so I have a local repository to point the
install at, then I _think_ the time-consuming thing is something about
generating keys.  Assuming that it can do that without me sitting there,
I can get it started then go camping :)

Besides, I'm a bit attached to my trusty 486.  It has never given me a
moments trouble (hardware wise) since I bought it new from IBM in
1993/4.  My P-100 is so unreliable its unusable except as a terminal
emulator.  My PII was given to me full of cat hair; not one fan turned.
It dies after 45 seconds.  The 486 runs quiet, cool, and error free.  My
only concern is that I upgraded the memory from 8 MB to 16 then 32 and
in the process of SIMM swapping, I don't have IBM ECC memory anymore.
Rather than compare it to a smelly pig, try an old uncle.  I want to get
BSD on it before it gets Alzheimer's (memory loss) or Parkinson's (as in
Parkinson's Law about available space).

Then there's aesthetics.  I learn best by understanding.  Since UNIX
culture was born on slow (by today's standards) machines, why not learn
in that mode to start?  What steps would I skip if my machine is too
slow if I'm dedicated to learning on it and not trying to cut corners to
make it run faster?

Once I have a working OpenBSD system and learn about it, I can decide if
I want to make the switch on my Athlon.

Thanks for your comments.

Doug.



Re: lsi logic sparc64 config?

2007-03-30 Thread David Gwynne

On 31/03/2007, at 8:16 AM, Bryan Irvine wrote:

This might be a little off-topic, but I can't find the answer  
anywhere.


Since the LSI logic sata 150-4 cards need to be configured via the
cards bios (at bootup on i386)  I can't figure out if there is a way
to configure a RAID when using a sparc64 platform.

Is this possible?


the ami(4) driver isn't enabled on sparc64, so aside from not being  
able to configure the card in the machine, we're not sure you'll be  
able to use it either. we have taken care to make it as portable as  
possible, but i doubt it will work too well.


dlg



Re: [OT] Re: Long WEP key

2007-03-30 Thread Sunnz

Actually...

16^40
1461501637330902918203684832716283019655932542976
60^27
1023490369077469249536000

Most advice I get from people are 8 characters or more... this is
stronger than 27 alphanumeric characters.

Yea, end of discussion...

Let's talk about VPN!!! :D

So both OpenVPN and Ipec are VPN? Which one is more secure? If I have
UNIX(like) OS only in my network which one can be used?

2007/3/31, Jeremy Huiskamp [EMAIL PROTECTED]:

On 30-Mar-07, at 10:58 AM, Sunnz wrote:

 But would any hacker actually try to brute force it by 16 character of
 from length 1 to length 40? Maybe I only used 16 possible characters
 instead of 60, but it is a really long key.

$ bc
16^40
1461501637330902918203684832716283019655932542976

  3656158440062976

60^30
22107391972073335789977600

This is probably a pointless discussion and I'm sure your password is
far better than most (it's better than mine for sure).

Jeremy





--
Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html



Re: hw.sensor empty

2007-03-30 Thread Matthew R. Dempsky
On Fri, Mar 30, 2007 at 10:34:44AM +0200, giovanni wrote:
 on my box, 4.1-current,
 
 sysctl -a hw.sensor
 
 is empty

Assuming you actually typed ``sysctl -a hw.sensors'' at the
command-line, I would suspect you compiled and are running a new
kernel, but did not recompile sysctl against the new sys/sensors.h
interface.