Re: specific X.org segmentation fault
tomas.bod...@gmail.com (Tomas Bodzar), 2012.02.03 (Fri) 20:34 (CET): On Wed, Feb 1, 2012 at 2:53 PM, Mihai Popescu mihp...@gmail.com wrote: I've run in some able to repeat issue using X.org doing some software try. The result is a complete X.org server shut down. I'm not good in reporting things, but this is very interesting because it repeats every time. See the details down there, I'm curious if someone can reproduce it. If more details needed, I can provide them. OpenBSD 5.1-beta from snapshots (dmesg attached) X.org running without /etc/xorg.conf scrotwm-0.10.0 xxxterm-1.10.0v0 Each time I go to neworder.box.sk there is a X.org stop and shutdown with the following error: That page works fine for me +1 $ pkg_info -S scrotwm Information for inst:scrotwm-0.10.0 Signature: scrotwm-0.10.0,X11.15.0,Xrandr.6.1,Xtst.10.0,c.62.0,dmenu-4.4.1,util.11.2 scrotwm-0.10.0,X11.15.0,Xrandr.6.1,Xtst.10.0,c.62.0,dmenu-4.4.1,util.11.2 $ pkg_info -S xxxterm Information for inst:xxxterm-1.10.0v0 Signature: xxxterm-1.10.0v0,GL.12.0,X11.15.0,Xcomposite.3.0,Xcursor.4.0,Xdamage.3.1,Xext .12.0,Xfixes.5.1,Xi.11.0,Xinerama.5.0,Xrandr.6.1,Xrender.5.0,atk-1.0.2801.0,c .62.0,cairo.11.1,desktop-file-utils-0.19,expat.9.0,fontconfig.7.0,freetype.18 .1,gcrypt.15.0,gdk-x11-2.0.2400.0,gdk_pixbuf-2.0.2200.1,gettext-0.18.1p1,gio- 2.0.2992.0,glib-2.0.2992.0,gmodule-2.0.2992.0,gnutls.18.1,gobject-2.0.2992.0, gthread-2.0.2992.0,gtk-x11-2.0.2400.0,iconv.6.0,intl.6.0,javascriptcoregtk-1. 0.0.0,libiconv-1.14,m.7.0,pango-1.0.2903.0,pangocairo-1.0.2903.0,pangoft2-1.0 .2903.0,pixman-1.22.2,png.13.0,pthread-stubs.1.0,pthread.13.3,soup-2.4.31,ut il.11.2,webkit-1.6.1p0v0,webkitgtk-1.0.2.0,xcb-render.0.0,xcb-shm.0.0,xcb.2.2 ,z.4.1 xxxterm-1.10.0v0,GL.12.0,X11.15.0,Xcomposite.3.0,Xcursor.4.0,Xdamage.3.1, Xext.12.0,Xfixes.5.1,Xi.11.0,Xinerama.5.0,Xrandr.6.1,Xrender.5.0, atk-1.0.2801.0,c.62.0,cairo.11.1,desktop-file-utils-0.19,expat.9.0, fontconfig.7.0,freetype.18.1,gcrypt.15.0,gdk-x11-2.0.2400.0, gdk_pixbuf-2.0.2200.1,gettext-0.18.1p0,gio-2.0.2992.0,glib-2.0.2992.0, gmodule-2.0.2992.0,gnutls.18.1,gobject-2.0.2992.0,gthread-2.0.2992.0, gtk-x11-2.0.2400.0,iconv.6.0,intl.5.0,javascriptcoregtk-1.0.0.0, libiconv-1.14,m.7.0,pango-1.0.2903.0,pangocairo-1.0.2903.0, pangoft2-1.0.2903.0,pixman-1.22.2,png.13.0,pthread-stubs.1.0, pthread.13.3,soup-2.4.3.1,util.11.2,webkit-1.6.1p0v0,webkitgtk-1.0.2.0, xcb-render.0.0,xcb-shm.0.0,xcb.2.2,z.4.1 $ sysctl kern.version kern.version=OpenBSD 5.1-beta (GENERIC.MP) #172: Mon Jan 30 16:30:40 MST 2012 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP kern.version=OpenBSD 5.1-beta (GENERIC) #144: Mon Jan 30 16:22:03 MST 2012 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC But HW is different $ dmesg | grep -i vga vga1 at pci0 dev 2 function 0 Intel GT2+ Video rev 0x09 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) intagp0 at vga1 inteldrm0 at vga1: apic 2 int 16 vga1 at pci1 dev 0 function 0 ATI Radeon Mobility M7 rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) radeondrm0 at vga1: irq 11 Server terminated with error (1). Closing log file. XIO: fatal IO error 35 (Resource temporarly unavailable) on X server :0 after 2650 requests (2650 known processed) with 0 events remaining. assertion #ret != invalid_id failed: file /usr/xenocara/lib/libX11/src/xcb_io.c, line 528, function _xAllocID xinit: connection to X server lost. Abort trap (core dumped). There is a xxxter.core file. I will send the dmesg and some snippet from X.org.log.old. If all X.org.log is needed, can I send it here ? [dmesg] OpenBSD 5.1-beta (GENERIC) #143: Thu Jan 26 16:02:00 MST 2012 B B dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Pentium(R) 4 CPU 3.20GHz (GenuineIntel 686-class) 3.20 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,xTPR real mem B = 1071751168 (1022MB) avail mem = 1044127744 (995MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 07/07/06, BIOS32 rev. 0 @ 0xffe90, SMBIOS rev. 2.3 @ 0xf0450 (72 entries) bios0: vendor Dell Inc. version A08 date 07/07/2006 bios0: Dell Inc. Precision WorkStation 370 acpi0 at bios0: rev 0 acpi0: sleep states S0 S1 S3 S4 S5 acpi0: tables DSDT FACP SSDT APIC BOOT ASF! MCFG HPET acpi0: wakeup devices VBTN(S4) PCI0(S5) PCI1(S5) PCI2(S5) PCI3(S5) PCI4(S5) MOU_(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 199MHz ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 8 acpimcfg0 at acpi0 addr 0xe000, bus 0-255 acpihpet0 at acpi0: 14318179 Hz acpiprt0
Jetway JNC9KDL-2700 acpiec error
Hello, I bought a Jetway_JNC9KDL-2700 mini-itx motherboard that has a Intel NM10 chipset and a Intel Cedar Trail 2700 (Dual Atom D2700 2x2.13Ghz) processor (see [1], [2]). At the very first I tried to boot with the amd64 arch, though it failed immediately at the beginning of the boot process (if I recall and conducted right, it was because of the lacking processor support). Then, I fetched the i386 snapshot from 31.1.2012 and booted. I was able to complete installation now. On the next boot it got a bit further as compared on amd64 arch, though it froze on the acpiec line(see [3]). Power off/power on and 'boot -c disable acpiec quit' helped for the freeze. The motherboard has a wireless ethernet device in the PCI-bus and the card should work flawlessly (have used it in the earlier obsd versions). I also tried with other pci-device, though it gave watchdog timeout errors. Reading the manual page of acpiec and rapid googling of 'acpi embedded controller' did not reveal whether it has something to do with the PCI-bus. Now, I am curious, for what acpiec affects? SUMMARY AFAIK CPU and ACPI aren't fully supported (see [3], [4]): Relevant lines from dmesg.boot: OpenBSD 5.1-beta (RAMDISK_CD) #75: Sat Jan 21 00:57:12 MST 2012 boot -c disable apciec; quit cpu0: unknown i686 model 0x36, can't get bus clock (0xc4081400) cpu1: unknown i686 model 0x36, can't get bus clock (0xc4081400) cpu2: unknown i686 model 0x36, can't get bus clock (0xc4381400) cpu3: unknown i686 model 0x36, can't get bus clock (0xc4381400) System information can be found from: http://weezel.fsck.fi/dump/ Dump directory includes the following files: Jetway_JNC9KDL-2700.APIC.3 Jetway_JNC9KDL-2700.DSDT.2 Jetway_JNC9KDL-2700.FACP.1 Jetway_JNC9KDL-2700.HPET.5 Jetway_JNC9KDL-2700.MCFG.4 Jetway_JNC9KDL-2700.RSDT.0 Jetway_JNC9KDL-2700.SSDT.6 Jetway_JNC9KDL-2700.headers acpiec_freeze.jpg dmesg.boot dump.tar.gz pcidump-vv.txt Please let me know if I left some crucial information out, so I can fulfill the missing parts. [1] http://www.mini-box.com/Jetway-JNC9KDL-2700 [2] http://www.mini-itx.com/store/?c=34 [3] http://weezel.fsck.fi/dump/acpiec_freeze.jpg [4] http://weezel.fsck.fi/dump/ Kind regards, Ville Valkonen
Re: Jetway JNC9KDL-2700 acpiec error
On Sat, Feb 04, 2012 at 01:40:22PM +0200, Ville Valkonen wrote: Hello, I bought a Jetway_JNC9KDL-2700 mini-itx motherboard that has a Intel NM10 chipset and a Intel Cedar Trail 2700 (Dual Atom D2700 2x2.13Ghz) processor (see [1], [2]). At the very first I tried to boot with the amd64 arch, though it failed immediately at the beginning of the boot process (if I recall and conducted right, it was because of the lacking processor support). Then, I fetched the i386 snapshot from 31.1.2012 and booted. I was able to complete installation now. On the next boot it got a bit further as compared on amd64 arch, though it froze on the acpiec line(see [3]). Power off/power on and 'boot -c disable acpiec quit' helped for the freeze. The motherboard has a wireless ethernet device in the PCI-bus and the card should work flawlessly (have used it in the earlier obsd versions). I also tried with other pci-device, though it gave watchdog timeout errors. Reading the manual page of acpiec and rapid googling of 'acpi embedded controller' did not reveal whether it has something to do with the PCI-bus. Now, I am curious, for what acpiec affects? SUMMARY AFAIK CPU and ACPI aren't fully supported (see [3], [4]): Relevant lines from dmesg.boot: OpenBSD 5.1-beta (RAMDISK_CD) #75: Sat Jan 21 00:57:12 MST 2012 boot -c disable apciec; quit cpu0: unknown i686 model 0x36, can't get bus clock (0xc4081400) cpu1: unknown i686 model 0x36, can't get bus clock (0xc4081400) cpu2: unknown i686 model 0x36, can't get bus clock (0xc4381400) cpu3: unknown i686 model 0x36, can't get bus clock (0xc4381400) This is only used for estimating low/high as a speedstep fallback. The problem you alude to earlier seems to be that the processor doesn't advertise long mode in the amd64 case. See ie http://www.astaro.org/astaro-gateway-products/hardware-installation-up2date-licensing/40935-64-bit-installation.html http://www.mini-itx.com/store/?c=47 64-bit OS Support: Currently EMT64 is *not* enabled on these boards. We expect Jetway to release a BIOS update when 64-bit drivers become available from Intel Intel only documents the MSRs for the first generation of Atoms, perhaps this one is the same. You don't have EST in cpuid flags though so there is no way for you to test that this does anything at the moment... Index: sys/arch/i386/i386/machdep.c === RCS file: /cvs/src/sys/arch/i386/i386/machdep.c,v retrieving revision 1.506 diff -u -p -r1.506 machdep.c --- sys/arch/i386/i386/machdep.c2 Nov 2011 23:53:44 - 1.506 +++ sys/arch/i386/i386/machdep.c4 Feb 2012 13:37:48 - @@ -2075,6 +2075,8 @@ p3_get_bus_clock(struct cpu_info *ci) } break; case 0x1c: /* Atom */ + case 0x26: /* Atom Z6xx */ + case 0x36: /* Atom [DN]2xxx */ msr = rdmsr(MSR_FSB_FREQ); bus = (msr 0) 0x7; switch (bus) { @@ -2131,6 +2133,7 @@ p3_get_bus_clock(struct cpu_info *ci) break; case 0x2a: /* Core i5/i7 2nd Generation */ case 0x2d: /* Xeon E5 */ + case 0x2f: /* Xeon E7 */ /* BUS100 */ break; case 0x1d: /* Xeon MP 7400 */ Index: sys/arch/amd64/amd64/est.c === RCS file: /cvs/src/sys/arch/amd64/amd64/est.c,v retrieving revision 1.25 diff -u -p -r1.25 est.c --- sys/arch/amd64/amd64/est.c 19 Apr 2011 22:14:54 - 1.25 +++ sys/arch/amd64/amd64/est.c 4 Feb 2012 13:37:48 - @@ -198,6 +198,8 @@ p3_get_bus_clock(struct cpu_info *ci) } break; case 0x1c: /* Atom */ + case 0x26: /* Atom Z6xx */ + case 0x36: /* Atom [DN]2xxx */ msr = rdmsr(MSR_FSB_FREQ); bus = (msr 0) 0x7; switch (bus) { @@ -228,6 +230,7 @@ p3_get_bus_clock(struct cpu_info *ci) break; case 0x2a: /* Core i5/i7 2nd Generation */ case 0x2d: /* Xeon E5 */ + case 0x2f: /* Xeon E7 */ /* BUS100 */ break; case 0x1d: /* Xeon MP 7400 */
Re: Long delay updating xenocara source tree?
On Fri, Feb 03, 2012 at 12:47:02PM +0100, Otto Moerbeek wrote: On Thu, Feb 02, 2012 at 03:15:29PM +0100, Steffen Daode Nurpmeso wrote: Henning Brauer wrote: there aren't all that many repositories the size of ours out there. That's true. But no Henning, i don't believe it's that; you know, it's just that i don't have anything to say, because i have no knowledge about the internals of cvs(1). I always thought of this as some kind of misbehaviour in between OpenCVS and GNU cvs, because i would think of cvs(1) as something like this: cvs up . | read CVS/Entries | for those files with diff. timestamps, checksum file | send list [+ checksums] to server | server compare revision/timestamp/[checksum] - client unmodified: send diff (expected final checksum?) - client modified: send full file (if size treshold), otherwise do blockwise checksumming etc. (i.e. rsync-like) [I don't really believe cvs(1) does the latter though.] | integrate diffs / replace locally modified files Wether cvs(1) does do some rsync-like block-checksumming for locally modified files or not, uploading 10% of the repositories size or more before any data is sent from the server just can't be correct anyhow. Even more for my usage case because there were no locally modified files at all. And also the problem goes away if you do specify files directly, as with a file glob, so it makes a difference wether you say $ cvs -fz9 up -PAC . or $ cvs -fz9 up -PAC *.* I don't remember wether i've used -d or not. So for me this turned out as either look into the code, instrument some functions and try to fix it or turn over to cvsync. And GNU cvs is hard to look at, with a lot of comments which refer to some (numeric or so) error reports. But it would surely be interesting to know what is going wrong. --steffen I like to say that long delays I have seen when using cvs had to do with multiple different values of CVS/Root files in my local tree. Those different entries can be created when doing a cvs up -d that creates a new dir. If a cvs -d option is used at the same time, the CVS/Root entry for tht dir wil be different than the other's. The exact cause of the slowdown is not known to me. But when you are switch repositories once in a while it's easy to get this case. I repair this by find . -name Root | xargs rm and using a explicit cvs root. -Otto My experience is identical to Otto's. Including his fix. :-) Ken
iwn firmware load fails in Sony VPCCA25FX
A Sony Vaio (VPCCA25FX) cannot configure its Intel WiFi Link 1000, complaining thusly: iwn0: could not read firmware iwn0: error, 2, could not read firmware iwn-1000 I have installed iwn-firmware-5.6. There is a /etc/firmware/iwn-1000 file present, 335056 bytes, dated Dec 31, permissions 400, owned root:bin. I changed permissions to 600 to match the other firmware files, but ifconfig status still says no network. ifconfig scan finds the networks that I know are nearby. Dmesg below the signature. What have I missed? -- Edward Ahlsen-Girard Ft Walton Beach, FL OpenBSD 5.1-beta (GENERIC.MP) #196: Thu Feb 2 02:20:47 MST 2012 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8496082944 (8102MB) avail mem = 8255762432 (7873MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xeb3a0 (17 entries) bios0: vendor American Megatrends Inc. version R1100V2 date 04/15/2011 bios0: Sony Corporation VPCCA25FX acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC HPET SSDT SLIC MCFG SSDT SSDT ECDT SSDT acpi0: wakeup devices B0D4(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3)\ USB5(S3) USB6(S3) USB7(S3) EHC1(S3) EHC2(S3) PXSX(S3) PXSX(S3) PXSX(S3) RP03(S3) PXSX(S3) RP04(S3) PWRB(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2295.15 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 99MHz cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2294.79 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu1: 256KB 64b/line 8-way L2 cache cpu2 at mainbus0: apid 1 (application processor) cpu2: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2294.79 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu2: 256KB 64b/line 8-way L2 cache cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2294.79 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu3: 256KB 64b/line 8-way L2 cache ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpihpet0 at acpi0: 14318179 Hz acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpiec0 at acpi0 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG0) acpiprt2 at acpi0: bus 1 (RP01) acpiprt3 at acpi0: bus 2 (RP02) acpiprt4 at acpi0: bus 3 (RP03) acpiprt5 at acpi0: bus 4 (RP04) acpicpu0 at acpi0: C1, PSS acpicpu1 at acpi0: C1, PSS acpicpu2 at acpi0: C1, PSS acpicpu3 at acpi0: C1, PSS acpitz0 at acpi0: critical temperature is 96 degC acpitz1 at acpi0: critical temperature is 96 degC acpibat0 at acpi0: BAT0 type LiOn oem Sony Corp. acpiac0 at acpi0: AC unit online acpibtn0 at acpi0: LID0 acpibtn1 at acpi0: PWRB acpivideo0 at acpi0: GFX0 acpivout0 at acpivideo0: DD02 cpu0: Enhanced SpeedStep 2294 MHz: speeds: 2301, 2300, 1800, 1600, 1400, 1200, 1000, 800 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Core 2G Host rev 0x09 vga1 at pci0 dev 2 function 0 Intel GT2 Video rev 0x09 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xe000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 drm0 at inteldrm0 Intel 6 Series MEI rev 0x04 at pci0 dev 22 function 0 not configured ehci0 at pci0 dev 26 function 0 Intel 6 Series USB rev 0x04: apic 2 int 16 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 6 Series HD Audio rev 0x04: msi azalia0: codecs: Realtek ALC269, Intel/0x2805, using Realtek ALC269 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 6 Series PCIE rev 0xb4: msi pci1 at ppb0 bus 1 iwn0 at pci1 dev 0 function 0 Intel WiFi Link 1000 rev 0x00: msi,\ MIMO 1T2R, BGS, address FOO ppb1 at pci0 dev 28 function 1 Intel 6 Series PCIE rev 0xb4: msi pci2 at ppb1 bus 2 sdhc0 at pci2 dev 0 function 0 Ricoh 5U823 SD/MMC rev 0x04: apic 2 int 17 sdmmc0 at sdhc0 vendor Ricoh, unknown product 0xe232 (class system subclass miscellaneous, rev 0x04) at pci2 dev 0 function 1 not configured ppb2
Re: sendmail TLS errors
Thanks, particularly for the Try_TLS:rci.rcimx.net NO If fact I had to use Try_TLS:rcimx.net NO Try_TLS:securence.com NO To get all the ones that I know about -Original Message- From: Philip Guenther [mailto:guent...@gmail.com] Sent: Saturday, February 04, 2012 1:53 AM To: Peter Fraser Cc: misc@openbsd.org Subject: Re: sendmail TLS errors On Sat, Jan 28, 2012 at 1:59 PM, Peter Fraser p...@thinkage.ca wrote: I am getting the following errors, with sendmail (Openbsd 5.0 and errors were there for 4.9 as well) ... Jan 28 16:34:51 mail sm-mta[372]: STARTTLS=client: 372:error:1411809D:SSL routines:SSL_CHECK_SERVERHELLO_TLSEXT:tls invalid ecpointformat list:/usr/src/lib/libssl/ssl/../src/ssl/t1_lib.c:1470: ... From peering around with google these seem to come from an error in ssl. I assume that it is edgewave.com.mx1.rci.rcimx.net that has the error, not OpenBSD 5.0 but none the less I cannot send email to this site, with TLS enabled. This was a bug in the EC point extension support in OpenSSL versions before 1.0.0c, including the version in OpenBSD 5.0. It's fixed in the version of OpenSSL that's been imported since then for OpenBSD 5.1. It my surprise I found that not configuring TLS on sendmail.mc only turns it off for receiving not sending. That's true. There's a fundamental asymmetry to SSL/TLS, where servers have to be configured with certs and such but clients require nothing. My reading of the history of the design of SSL is that that was intentional. So, how do you turn TLS client support off completely in sendmail? The easiest method is probably to use LOCAL_TRY_TLS in your .mc file to define a try_tls ruleset that always returns NO. The only way I can find to turn it off for sending is by adding Try_TLS:edgewave.com.mx1.rci.rcimx.net NO Try_TLS:edgewave.com.mx2.rci.rcimx.net NO Try_TLS:edgewave.com.mx3.rci.rcimx.net NO Try_TLS:edgewave.com.mx4.rci.rcimx.net NO to sendmail's map access database. That looks correct. You could also apply that to the entire rci.rcimx.net domain with a single entry: Try_TLS:rci.rcimx.net NO It would have been nice if sendmail falls back to a none TLS connection if the handshake occurs. Well, the handshake also fails whenever an attackers interferes with the connection. A revert to insecure when attacked behavior makes you secure except when it matters. Philip Guenther
Re: iwn firmware load fails in Sony VPCCA25FX
On Sat, Feb 4, 2012 at 5:34 PM, Ed Ahlsen-Girard eagir...@cox.net wrote: A Sony Vaio (VPCCA25FX) cannot configure its Intel WiFi Link 1000, complaining thusly: iwn0: could not read firmware iwn0: error, 2, could not read firmware iwn-1000 from man iwn iwn%d: could not load firmware An attempt to load the firmware into the adapter failed. The driver will reset the hardware. from man ifconfig debug Enable driver-dependent debugging code; usually, this turns on extra console error logging. so try it if it will bring more details I have installed iwn-firmware-5.6. There is a /etc/firmware/iwn-1000 file present, 335056 bytes, dated Dec 31, permissions 400, owned root:bin. I changed permissions to 600 to match the other firmware files, but ifconfig status still says no network. ifconfig scan finds the networks that I know are nearby. Dmesg below the signature. What have I missed? -- Edward Ahlsen-Girard Ft Walton Beach, FL OpenBSD 5.1-beta (GENERIC.MP) #196: Thu Feb B 2 02:20:47 MST 2012 B B dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8496082944 (8102MB) avail mem = 8255762432 (7873MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xeb3a0 (17 entries) bios0: vendor American Megatrends Inc. version R1100V2 date 04/15/2011 bios0: Sony Corporation VPCCA25FX acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC HPET SSDT SLIC MCFG SSDT SSDT ECDT SSDT acpi0: wakeup devices B0D4(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3)\ USB5(S3) USB6(S3) USB7(S3) EHC1(S3) EHC2(S3) PXSX(S3) PXSX(S3) PXSX(S3) RP03(S3) PXSX(S3) RP04(S3) PWRB(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2295.15 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 99MHz cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2294.79 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu1: 256KB 64b/line 8-way L2 cache cpu2 at mainbus0: apid 1 (application processor) cpu2: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2294.79 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu2: 256KB 64b/line 8-way L2 cache cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, 2294.79 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,\ PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,PCLMUL,\ MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,\ POPCNT,XSAVE,AVX,NXE,LONG,LAHF cpu3: 256KB 64b/line 8-way L2 cache ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpihpet0 at acpi0: 14318179 Hz acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpiec0 at acpi0 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG0) acpiprt2 at acpi0: bus 1 (RP01) acpiprt3 at acpi0: bus 2 (RP02) acpiprt4 at acpi0: bus 3 (RP03) acpiprt5 at acpi0: bus 4 (RP04) acpicpu0 at acpi0: C1, PSS acpicpu1 at acpi0: C1, PSS acpicpu2 at acpi0: C1, PSS acpicpu3 at acpi0: C1, PSS acpitz0 at acpi0: critical temperature is 96 degC acpitz1 at acpi0: critical temperature is 96 degC acpibat0 at acpi0: BAT0 type LiOn oem Sony Corp. acpiac0 at acpi0: AC unit online acpibtn0 at acpi0: LID0 acpibtn1 at acpi0: PWRB acpivideo0 at acpi0: GFX0 acpivout0 at acpivideo0: DD02 cpu0: Enhanced SpeedStep 2294 MHz: speeds: 2301, 2300, 1800, 1600, 1400, 1200, 1000, 800 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Core 2G Host rev 0x09 vga1 at pci0 dev 2 function 0 Intel GT2 Video rev 0x09 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xe000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 drm0 at inteldrm0 Intel 6 Series MEI rev 0x04 at pci0 dev 22 function 0 not configured ehci0 at pci0 dev 26 function 0 Intel 6 Series USB rev 0x04: apic 2 int 16 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 6 Series HD Audio rev 0x04: msi azalia0: codecs: Realtek ALC269, Intel/0x2805, using Realtek
Re: sendmail TLS errors
On Sat, Jan 28, 2012, Peter Fraser wrote: It would have been nice if sendmail falls back to a none TLS connection if the handshake occurs. See the RFC about STARTTLS why this isn't possible within a single session. Hence the MTA would have to remember that TLS failed before and not try it in a subsequent session. That's not exactly trivial with sm8: the information has to be stored somewhere, there has to be some decision which kind of errors actually cause avoiding TLS, how often an error should occur before doing so, when an error condition should time out, etc. All of this has to work together with any TLS related requirements specified in the access map and other delivery decisions.
Re: specific X.org segmentation fault
I've run xxxterm from xterm on openbox this time, under some load stress pages (many big pictures slideshow style, waiting with patience for the pages to load). There it pops an error after each set of aprox. 100 pages: $ xxxterm xxxterm: config_parse: cannot open /home/uhmewrk/.xxxterm.conf: No such file or directory GLib-ERROR **: gmem.c:170: failed to allocate 8518 bytes Trace/BPT trap (core dumped) I've run xxxterm from gdb, and there is another message (sorry, I'm not a gdb expert): (gdb) file xxxterm Reading symbols from /usr/local/bin/xxxterm...(no debugging symbols found)...done. (gdb) run Starting program: /usr/local/bin/xxxterm xxxterm: config_parse: cannot open /home/uhmewrk/.xxxterm.conf: No such file or directory [New process 19921] [New process 19921, thread 0x855c4400] [New process 19921, thread 0x8a828c00] GLib-GIO-ERROR **: Creating pipes for GWakeup: Too many open files Program received signal SIGTRAP, Trace/breakpoint trap. [Switching to process 19921, thread 0x7c89f800] 0x02e1930c in g_logv () from /usr/local/lib/libglib-2.0.so.2992.0 I will move on to another snapshot, to see if those can be reproduced.
starting nsd via rc.d shows OK but not running
Hi all, I just upgraded to latest snapshot which contains NSD v3.2.9 imported at Jan 29th. /etc/rc.d/nsd start showed 'ok' but nsd was not running. I discovered that... # /usr/sbin/nsd -d [1328378679] nsd[5300]: error: corrupted database (read magic): /db/nsd.db [1328378679] nsd[5300]: error: cannot load database, incompatible version number. Please rebuild database and start again. [1328378679] nsd[5300]: error: unable to open the database /db/nsd.db: No such file or directory [1328378679] nsd[5300]: error: server preparation failed, nsd could not be started Unfortunatelly I was quicker to repair it then to check why nsd rc.d script return '0' for 'rc_check'. I could downgrade nsd again, build db and upgrade back... but if anybody else is planning upgrade now and could check this, it would be nice to see what's going on with 'rc_check'. Maybe the process doesn't die so early :) jirib
Re: iwn firmware load fails in Sony VPCCA25FX
How did you install the firmware? I've run once in troubles with an iwi0 interface because I messed up the .tgz firmware file unpack. I never used a laptop with wireless and OpenBSD so I was not aware that I need to download some firmware files. I don't remember what exactly I did wrong, the files were there but I got the same error with load. I saw the run of /usr/sbin/fw_update at boot time. I've deleted the firmware files that I've installed from /etc/firmware and run this script by hand. Then it was fine for iwi to load.
PF: table sync
Hi misc@, my question is probably directed to devs working with/on PF. Is something like table sync is planed to implement in PF? eg: table tbl persist sync would sync all entries to the remote peer, inc. tracking add/del to it. //maxim
account message
National Australia Bank E-Mail Address Change Notification. To Verify Your Identity, click : INTERNET BANKING and confirm your NAB Online banking account balance here: ACCOUNT BALANCE.
Re: starting nsd via rc.d shows OK but not running
Following the update to 3.2.9 you need to rebuild the database - this was supposed to have been added to faq/current.html but that might not have been done yet. On 2012-02-04, Jiri B ji...@devio.us wrote: Hi all, I just upgraded to latest snapshot which contains NSD v3.2.9 imported at Jan 29th. /etc/rc.d/nsd start showed 'ok' but nsd was not running. I discovered that... # /usr/sbin/nsd -d [1328378679] nsd[5300]: error: corrupted database (read magic): /db/nsd.db [1328378679] nsd[5300]: error: cannot load database, incompatible version number. Please rebuild database and start again. [1328378679] nsd[5300]: error: unable to open the database /db/nsd.db: No such file or directory [1328378679] nsd[5300]: error: server preparation failed, nsd could not be started Unfortunatelly I was quicker to repair it then to check why nsd rc.d script return '0' for 'rc_check'. I could downgrade nsd again, build db and upgrade back... but if anybody else is planning upgrade now and could check this, it would be nice to see what's going on with 'rc_check'. Maybe the process doesn't die so early :) jirib
Re: starting nsd via rc.d shows OK but not running
as to the rc.d thing; the daemon *does* start and is running when rc_check examines it, but exits afterwards. On 2012-02-04, Stuart Henderson s...@spacehopper.org wrote: Following the update to 3.2.9 you need to rebuild the database - this was supposed to have been added to faq/current.html but that might not have been done yet. On 2012-02-04, Jiri B ji...@devio.us wrote: Hi all, I just upgraded to latest snapshot which contains NSD v3.2.9 imported at Jan 29th. /etc/rc.d/nsd start showed 'ok' but nsd was not running. I discovered that... # /usr/sbin/nsd -d [1328378679] nsd[5300]: error: corrupted database (read magic): /db/nsd.db [1328378679] nsd[5300]: error: cannot load database, incompatible version number. Please rebuild database and start again. [1328378679] nsd[5300]: error: unable to open the database /db/nsd.db: No such file or directory [1328378679] nsd[5300]: error: server preparation failed, nsd could not be started Unfortunatelly I was quicker to repair it then to check why nsd rc.d script return '0' for 'rc_check'. I could downgrade nsd again, build db and upgrade back... but if anybody else is planning upgrade now and could check this, it would be nice to see what's going on with 'rc_check'. Maybe the process doesn't die so early :) jirib
Problem with load-balancing
Hello, I'm currently having some troubles with 4.6 configuration for a load-balancing configuration. $ext_if is the external interface to the Internet $vip is a valid routable IP address, but not bound to any interface, just used as a 'virtual' IP $server1, $server2 are also real routable IP addresses, on servers inside the network I'm also using CARP, both on the external interface and the internal interface but $ext_if is defined as the actual external interface On 4.6, this rules does exactly what I'm trying to accomplish rdr on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } - { $server1, $server2 } \ round-robin sticky-address However, currently trying this on 5.0 doesn't work at all: match in on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } - { $server1, $server2 } \ round-robin sticky-address I've been stuck on this for hours, so I'd appreciate any feedback that might help me get this working.
Re: Problem with load-balancing
Never mind, had a 'no state' rule that crept in. Gah, that was many hours wasted. On 2/4/2012 7:11 PM, Han Hwei Woo wrote: Hello, I'm currently having some troubles with 4.6 configuration for a load-balancing configuration. $ext_if is the external interface to the Internet $vip is a valid routable IP address, but not bound to any interface, just used as a 'virtual' IP $server1, $server2 are also real routable IP addresses, on servers inside the network I'm also using CARP, both on the external interface and the internal interface but $ext_if is defined as the actual external interface On 4.6, this rules does exactly what I'm trying to accomplish rdr on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } - { $server1, $server2 } \ round-robin sticky-address However, currently trying this on 5.0 doesn't work at all: match in on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } - { $server1, $server2 } \ round-robin sticky-address I've been stuck on this for hours, so I'd appreciate any feedback that might help me get this working.
Séminaire sur l’audit fiscal clôture des comptes 2011.
To view the message, please use an HTML compatible email viewer! [demime 1.01d removed an attachment of type application/octet-stream which had a name of Audit_fiscal__clture_des_comptes_fiche_pdagogique.pdf] [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of Bulletin_dinscription.16389DEFANGED-doc]