Re: __guard_local issue

2013-05-23 Thread Matthew Dempsky
On Wed, May 22, 2013 at 3:30 AM, Bogdan Andu bo...@yahoo.com wrote:
 I compile from source Erlang R14B04 on a freshly installed OpenBSD 5.3 amd64 
 machine, configured with preinstalled opensssl library 
 /usr/lib/libssl.so.19.0 .

This was fixed upstream in R15B03:
https://github.com/erlang/otp/commit/c282f35cf30d87b61baa30cc7b57ed8c858759ef

Our R15B02 port includes the same fix.  You should be able to backport
it to R14B04 without trouble if you need to stick with an older Erlang
release.



Re: current/macppc on Mac Mini

2013-05-23 Thread Martin Pieuchot
On 26/12/12(Wed) 20:54, Miod Vallat wrote:
  Just upgraded to a current again, with the same problem,
  and the same solution:
 
 [...]
  wdc1 at kauaiata0 irq 39: DMA
  atapiscsi0 at wdc1 channel 0 drive 0
  scsibus0 at atapiscsi0: 2 targets
  cd0 at scsibus0 targ 0 lun 0: MATSHITA, DVD-R UJ-825, DAND ATAPI 5/cdrom 
  removable
  wd0 at wdc1 channel 0 drive 1: ST9808211A
  wd0: 16-sector PIO, LBA, 76319MB, 156301488 sectors
 [...]
  bootpath: /pci@f400/ata-6@d/disk@1:/bsd
 
 I think I understand what goes wrong. The code responsible for matching
 the boot device to the actual kernel device on macppc is quite crude,
 especially for non-SCSI disks.
 
 Your bootpath specifies `disk@1' because the disk drive is the second
 device (slave) on the ATA channel, the cdrom drive being master.
 However, the kernel wants to match this information against a `wd1'
 device (as if there were two hard disks on the ATA channel).
 
 The kernel code needs to be fixed to use device_register() to match the
 boot path against actual attachment information, instead of walking the
 device tree at the end of autoconf. If nobody beats me to do this, I'll
 try to cook a diff in a few days.

Were you thinking of something like that? It works for me (c) tm, with
my PowerBooks (disk@0/wd0), I haven't tried NFS boot yet.

Jan, does it improve something for you?

Index: autoconf.c
===
RCS file: /cvs/src/sys/arch/macppc/macppc/autoconf.c,v
retrieving revision 1.39
diff -u -p -r1.39 autoconf.c
--- autoconf.c  11 Nov 2010 17:58:21 -  1.39
+++ autoconf.c  22 May 2013 19:00:45 -
@@ -68,7 +68,7 @@
 
 void   dumpconf(void);
 static struct devmap *findtype(char **);
-void   makebootdev(char *cp);
+void   parseofwbp(char *);
 intgetpno(char **);
 
 /*
@@ -79,6 +79,9 @@ int   getpno(char **);
 intcold = 1;   /* if 1, still working on cold-start */
 char   bootdev[16];/* to hold boot dev name */
 struct device *bootdv = NULL;
+enum devclass bootdev_class = DV_DULL;
+intbootdev_type = 0;
+intbootdev_unit = 0;
 
 struct dumpmem dumpmem[VM_PHYSSEG_MAX];
 u_int ndumpmem;
@@ -165,9 +168,9 @@ findtype(char **s)
  *  '/ht@0,f200/pci@2/bcom5704@4/bsd'
  */
 void
-makebootdev(char *bp)
+parseofwbp(char *bp)
 {
-   int unit, ptype;
+   int ptype;
char   *dev, *cp;
struct devmap *dp;
 
@@ -184,6 +187,8 @@ makebootdev(char *bp)
} while((dp-type  T_IFACE) == 0);
 
if (dp-att  dp-type == T_IFACE) {
+   bootdev_class = DV_IFNET;
+   bootdev_type = dp-type;
strlcpy(bootdev, dp-dev, sizeof bootdev);
return;
}
@@ -193,24 +198,9 @@ makebootdev(char *bp)
ptype = dp-type;
dp = findtype(cp);
if (dp-att  dp-type == T_DISK) {
-   unit = getpno(cp);
-   if (ptype == T_SCSI) {
-   struct device *dv;
-   struct sd_softc *sd;
-
-   TAILQ_FOREACH(dv, alldevs, dv_list) {
-   if (dv-dv_class != DV_DISK ||
-   strcmp(dv-dv_cfdata-cf_driver-cd_name, 
sd))
-   continue;
-   sd = (struct sd_softc *)dv;
-   if (sd-sc_link-target != unit)
-   continue;
-   snprintf(bootdev, sizeof bootdev,
-   %s%c, dv-dv_xname, 'a');
-   return;
-   }
-   }
-   snprintf(bootdev, sizeof bootdev, %s%d%c, dev, unit, 'a');
+   bootdev_class = DV_DISK;
+   bootdev_type = ptype;
+   bootdev_unit = getpno(cp);
return;
}
printf(Warning: boot device unrecognized: %s\n, bp);
@@ -239,25 +229,44 @@ getpno(char **cp)
 void
 device_register(struct device *dev, void *aux)
 {
+   const char *drvrname = dev-dv_cfdata-cf_driver-cd_name;
+   const char *name = dev-dv_xname;
+
+   if (bootdv != NULL || dev-dv_class != bootdev_class)
+   return;
+
+   switch (bootdev_type) {
+   case T_SCSI:
+   if (strcmp(drvrname, sd) == 0) {
+   struct sd_softc *sd = (struct sd_softc *)dev;
+
+   if (sd-sc_link-target == bootdev_unit)
+   bootdv = dev;
+   }
+   case T_IDE:
+   /*
+* Do not require the bootpath unit number to match
+* against the driver's one, a slave disk on the ATA
+* channel `disk@1' can attach as `wd0'.
+*/
+   if (strcmp(drvrname, wd) == 0)
+   bootdv = dev;
+   break;
+   case T_IFACE:
+   if (strcmp(name, bootdev) == 0)
+ 

Re: current/macppc on Mac Mini

2013-05-23 Thread Jan Stary
On May 23 08:41:50, mpieuc...@nolizard.org wrote:
 On 26/12/12(Wed) 20:54, Miod Vallat wrote:
   Just upgraded to a current again, with the same problem,
   and the same solution:
  
  [...]
   wdc1 at kauaiata0 irq 39: DMA
   atapiscsi0 at wdc1 channel 0 drive 0
   scsibus0 at atapiscsi0: 2 targets
   cd0 at scsibus0 targ 0 lun 0: MATSHITA, DVD-R UJ-825, DAND ATAPI 
   5/cdrom removable
   wd0 at wdc1 channel 0 drive 1: ST9808211A
   wd0: 16-sector PIO, LBA, 76319MB, 156301488 sectors
  [...]
   bootpath: /pci@f400/ata-6@d/disk@1:/bsd
  
  I think I understand what goes wrong. The code responsible for matching
  the boot device to the actual kernel device on macppc is quite crude,
  especially for non-SCSI disks.
  
  Your bootpath specifies `disk@1' because the disk drive is the second
  device (slave) on the ATA channel, the cdrom drive being master.
  However, the kernel wants to match this information against a `wd1'
  device (as if there were two hard disks on the ATA channel).
  
  The kernel code needs to be fixed to use device_register() to match the
  boot path against actual attachment information, instead of walking the
  device tree at the end of autoconf. If nobody beats me to do this, I'll
  try to cook a diff in a few days.
 
 Were you thinking of something like that? It works for me (c) tm, with
 my PowerBooks (disk@0/wd0), I haven't tried NFS boot yet.
 
 Jan, does it improve something for you?

Yes it does: with this patch, I don't need to hardcode

config bsd root on wd0a

into my kernel, it figures the bootpath itself.
Thank you!

Jan


[ using 500872 bytes of bsd ELF symbol table ]
console out [ATY,RockHopper2_A]console in [keyboard] , using USB
using parent ATY,RockHopper2Paren:: memaddr 9800 size 800, : consaddr 
9c008000, : ioaddr 9002, size 2: memtag 8000, iotag 8000: width 1280 
linebytes 1280 height 1024 depth 8
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2013 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 5.3-current (GENERIC.MP) #5: Thu May 23 09:02:44 CEST 2013
r...@www.stare.cz:/usr/src/sys/arch/macppc/compile/GENERIC.MP
real mem = 1073741824 (1024MB)
avail mem = 1032151040 (984MB)
mainbus0 at root: model PowerMac10,2
cpu0 at mainbus0: 7447A (Revision 0x102): 1499 MHz: 512KB L2 cache
mem0 at mainbus0
spdmem0 at mem0: 1GB DDR SDRAM non-parity PC3200CL3.0
memc0 at mainbus0: uni-n rev 0xd2
hw-clock at memc0 not configured
kiic0 at memc0 offset 0xf8001000
iic0 at kiic0
mpcpcibr0 at mainbus0 pci: uni-north
pci0 at mpcpcibr0 bus 0
pchb0 at pci0 dev 11 function 0 Apple UniNorth AGP rev 0x00
appleagp0 at pchb0
agp0 at appleagp0: aperture at 0x0, size 0x1000
vgafb0 at pci0 dev 16 function 0 ATI Radeon 9200 rev 0x01, mmio
wsdisplay0 at vgafb0 mux 1: console (std, vt100 emulation)
mpcpcibr1 at mainbus0 pci: uni-north
pci1 at mpcpcibr1 bus 0
pchb1 at pci1 dev 11 function 0 Apple UniNorth PCI rev 0x00
bwi0 at pci1 dev 18 function 0 Broadcom BCM4318 rev 0x02: irq 52, address 
00:11:24:bf:cb:2a
macobio0 at pci1 dev 23 function 0 Apple Intrepid rev 0x00
openpic0 at macobio0 offset 0x4: version 0x4614 feature 3f0302 LE
macgpio0 at macobio0 offset 0x50
modem-reset at macgpio0 offset 0x1d not configured
modem-power at macgpio0 offset 0x1c not configured
macgpio1 at macgpio0 offset 0x9 irq 47
programmer-switch at macgpio0 offset 0x11 not configured
gpio5 at macgpio0 offset 0x6f not configured
gpio6 at macgpio0 offset 0x70 not configured
extint-gpio15 at macgpio0 offset 0x67 not configured
escc-legacy at macobio0 offset 0x12000 not configured
zsc0 at macobio0 offset 0x13000: irq 22,23
zstty0 at zsc0 channel 0
zstty1 at zsc0 channel 1
aoa0 at macobio0 offset 0x1: irq 30,1,2
audio0 at aoa0
timer at macobio0 offset 0x15000 not configured
adb0 at macobio0 offset 0x16000apm0 at adb0: battery flags 0x0, 0% charged
piic0 at adb0
iic1 at piic0
maxtmp0 at iic1 addr 0xc8: max6642
kiic1 at macobio0 offset 0x18000
iic2 at kiic1
wdc0 at macobio0 offset 0x2 irq 24: DMA
ohci0 at pci1 dev 24 function 0 Apple Intrepid USB rev 0x00: couldn't map 
interrupt
ohci1 at pci1 dev 25 function 0 Apple Intrepid USB rev 0x00: couldn't map 
interrupt
ohci2 at pci1 dev 26 function 0 Apple Intrepid USB rev 0x00: irq 29, version 
1.0, legacy support
ohci3 at pci1 dev 27 function 0 NEC USB rev 0x43: irq 63, version 1.0
ohci4 at pci1 dev 27 function 1 NEC USB rev 0x43: irq 63, version 1.0
ehci0 at pci1 dev 27 function 2 NEC USB rev 0x04: irq 63
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 NEC EHCI root hub rev 2.00/1.00 addr 1
usb1 at ohci2: USB revision 1.0
uhub1 at usb1 Apple OHCI root hub rev 1.00/1.00 addr 1
usb2 at ohci3: USB revision 1.0
uhub2 at usb2 NEC OHCI root hub rev 1.00/1.00 addr 1
usb3 at ohci4: USB revision 1.0
uhub3 at usb3 NEC OHCI root hub rev 1.00/1.00 addr 1
mpcpcibr2 at mainbus0 pci: uni-north
pci2 at mpcpcibr2 bus 0
pchb2 at pci2 dev 

Re: Canceled SSH forwarding

2013-05-23 Thread Lars Nooden
On Wed, 22 May 2013, Lars Nooden wrote:
[snip]
 However, the remote machine is still able to use the forwarded port until 
 the connection is finally closed.  The same syntax seems to shutdown 
 regular (-L) forwarded ports, just not for reverse (-R) forwarding.  What 
 am I missing?  

What I was missing was patience.  With Chromium and Firefox, the 
connection is kept open for only a short while longer, but definitely not 
immediately shut down.  With other programs, the tunnel seems to shut 
right away.

Regards,
/Lars



Re: BCM5719C/BCM5720 partially working

2013-05-23 Thread David Imhoff

Hi,

Having finally found the BCM5718 Programmers guide from 
http://www.broadcom.com/support/ethernet_nic/open_source.php I managed 
to get a bit further with this problem.


The problem seems to be in the Auto polling of the mac link state. 
ifconfig shows the correct link state, but the BGE_STS_LINK bit in the 
driver is never set. Debugging the interrupt routine I found the driver 
never receives a link state changed attention, instead the last 
interrupt indicates a auto-poll error and bit 0 of register 
BGE_AUTOPOLL_STS is set.


Looking at the FreeBSD and Linux drivers I found that they don't use 
auto-polling. Also the programmers guide of the BCM5718 family(page 204) 
doesn't describe the auto-polling method anymore, as was done in the PG 
of other BCM57xx.


So I disabled Auto-polling for the BCM5718 family. This made all ports 
work on my Dell R320(BCM5720) and BCM5719. My BCM5719 still doesn't 
fully work because now i run into bge_watchdog reset's when sending big 
packet, the same issue reported by Robert Young on 5 April.


Attached is a patch that disables mac polling for the BCM5717, 5719 and 
5720. Tested on BCM5719, BCM5720 and BCM5750 C1.


I also noticed if_bge.c line 2293:
BGE_SETBIT(sc, BGE_MI_MODE, BGE_MIMODE_AUTOPOLL|1016);
Does any one have a clue why the (1016) is there? it changes the MI 
clock. But why? and why OR 0xA with the default 0xC, instead of 0x2? 
FreeBSD and Linux use the default of 0xC for the MI Clock.


Kind regards,

David

Index: sys/dev/pci/if_bge.c
===
RCS file: /cvs/src/sys/dev/pci/if_bge.c,v
retrieving revision 1.320
diff -u -r1.320 if_bge.c
--- sys/dev/pci/if_bge.c4 Mar 2013 01:33:18 -   1.320
+++ sys/dev/pci/if_bge.c21 May 2013 13:18:36 -
@@ -2288,7 +2288,9 @@
/* Enable PHY auto polling (for MII/GMII only) */
if (sc-bge_flags  BGE_PHY_FIBER_TBI) {
CSR_WRITE_4(sc, BGE_MI_STS, BGE_MISTS_LINK);
-   } else {
+   } else if (!(BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5717 ||
+   BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5719 ||
+   BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5720)) {
BGE_STS_SETBIT(sc, BGE_STS_AUTOPOLL);
BGE_SETBIT(sc, BGE_MI_MODE, BGE_MIMODE_AUTOPOLL|1016);
if (BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5700)
@@ -4386,18 +4388,13 @@
if_link_state_change(ifp);
ifp-if_baudrate = 0;
}
-   /*
-	 * Discard link events for MII/GMII cards if MI auto-polling 
disabled.

-* This should not happen since mii callouts are locked now, but
-* we keep this check for debug.
-*/
-   } else if (BGE_STS_BIT(sc, BGE_STS_AUTOPOLL)) {
+   } else {
/*
 * Some broken BCM chips have BGE_STATFLAG_LINKSTATE_CHANGED bit
 * in status word always set. Workaround this bug by reading
 * PHY link status directly.
 */
-   link = (CSR_READ_4(sc, BGE_MI_STS)  BGE_MISTS_LINK)?
+   link = (CSR_READ_4(sc, BGE_TX_STS)  BGE_TXSTAT_LINK_UP)?
BGE_STS_LINK : 0;

if (BGE_STS_BIT(sc, BGE_STS_LINK) != link) {


David Imhoff schreef op 2013-05-10 14:12:

Hi,

I'm having problems with a 4-ports BCM5719C based PCI-E network card
and the 2-ports BCM5720 network interfaces build into a Dell R320
server. The first network port functions fine but the other ports do
not, partially(only receive) or sometimes function. Where the most
common situation is that a port only receives packets, but do not
transmit packets. Forcing packets to be send on one of these broken
interfaces, by creating a static arp entry and flood pinging that
address, always results in the following error:
 ping: sendto: No buffer space available
Currently i have the second port of the BCM5719C based card working,
only if a bring up all ports of the interface in the order from 0 to 
4.


I tested with two different R320 servers, two different BCM5719C 
cards,

and two different firmware versions for the BCM5719C cards. All with
the same results.

I'm sorry that I can't be more specific, but i'm available for
questions or running tests/debugging.

Kind Regards,

David

dmesg of server with BCM5719C cards:
OpenBSD 5.3-current (GENERIC.MP) #108: Tue Apr 30 11:35:41 MDT 2013
t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4273274880 (4075MB)
avail mem = 4151812096 (3959MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xcfb9c000 (67 entries)
bios0: vendor Dell Inc. version 2.5.0 date 10/13/2008
bios0: Dell Inc. PowerEdge 1950
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC SPCR HPET MCFG WD__ SLIC ERST HEST BERT 
EINJ TCPA

acpi0: wakeup devices PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 

Re: Canceled SSH forwarding

2013-05-23 Thread Darren Tucker
On Thu, May 23, 2013 at 10:58:32AM +0300, Lars Nooden wrote:
 On Wed, 22 May 2013, Lars Nooden wrote:
 [snip]
  However, the remote machine is still able to use the forwarded port until 
  the connection is finally closed.  The same syntax seems to shutdown 
  regular (-L) forwarded ports, just not for reverse (-R) forwarding.  What 
  am I missing?  
 
 What I was missing was patience.  With Chromium and Firefox, the 
 connection is kept open for only a short while longer, but definitely not 
 immediately shut down.  With other programs, the tunnel seems to shut 
 right away.

The port should stop listening immediately, but any connections that
were established before the port stopped listening will continue until
they're closed by either end of the forwarded connection or the ssh
connection is forcibly terminated.  In your case, I'd guess you were
seeing HTTP/1.1 keep-alives.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.



Re: __guard_local issue

2013-05-23 Thread Bogdan Andu
Thank you all for your answers.

The migration to R15 or even R16 is
complicated, as a lot of code must be modified and a lot of teste must be
conducted
in order to make things correctly.

The fact is newer does not make
it better. There are so many applications that run a lot better in R14 than in
R15

The migration is very tricky and upgrading production code only to have
R15 does not make any sense to me
and I'm happy with R14.

On the other hand I
have applied the patches:
cd $OTP_SRC_DIRR14B04
patch -p0 
/usr/ports/lang/erlang/patches/patch-erts_configure_in
patch -p0 
/usr/ports/lang/erlang/patches/patch-erts_emulator_Makefile_in 
patch -p0 
/usr/ports/lang/erlang/patches/patch-erts_lib_src_Makefile_in
patch -p0 
/usr/ports/lang/erlang/patches/patch-lib_tools_c_src_Makefile_in 
patch -p0 
/usr/ports/lang/erlang/patches/patch-make_target_mk

*all patches succedded,
and then:

./configure
sudo gmake install
the same error

I modified
erts/configure.in:
from:
openbsd*)
    DED_LD=$CC
    DED_LD_FLAG_RUNTIME_LIBRARY_PATH=$CFLAG_RUNTIME_LIBRARY_PATH
    DED_LDFLAGS=-shared
    ;;
in:
openbsd*)
   
DED_LD=$CC
   
DED_LD_FLAG_RUNTIME_LIBRARY_PATH=$CFLAG_RUNTIME_LIBRARY_PATH
   
DED_LDFLAGS=-shared /usr/lib/crtbeginS.o /usr/lib/crtbegin.o
    ;;
because:
$ nm /usr/lib/crtbegin.o
 U _GLOBAL_OFFSET_TABLE_
 U
_Jv_RegisterClasses
 D __dso_handle
 T __fini
 D
__guard_local
 T __init
 W __register_frame_info
 U
atexit
$ nm /usr/lib/crtbeginS.o
 U _GLOBAL_OFFSET_TABLE_
 U
_Jv_RegisterClasses
 U __cxa_finalize
 D __dso_handle

D __guard_local
 T _fini
 T _init

gmake clean
./configure
sudo gmake install
the same error

In the topic I opened here brings Stanislav
Sedov has a very strong opinion about this error (but does not solve my
problem):
https://groups.google.com/forum/?hl=enfromgroups#!topic/erlang-programming/q
lHg-RXa0x4
He says:

I found this message on the mailing list, which seems to
be relevant:
http://www.mail-archive.com/cdesktopenv-devel@lists.sourceforge.net/msg00598.
html

It looks like the __guard_local symbol is generated by new
stack_protector code,
and according to the patch it seems that linking against
libcrtbeginS.o and
libcrtendS.o fixes the issue for CDE.  It might be worth
trying to modify the
erlang linker flags (or at least crypto linking flags) to
link against these
objects.

Does anyone has an idea of how to solve this
issue, because I really need R14B04.

Please help. I am really out of ideas.
Maybe I should link against other libraries but I do not know what they are.
How can I dicover these libraries that I should link erlang against?

Bogdan

 From: Matthew Dempsky matt...@dempsky.org
To: Bogdan Andu bo...@yahoo.com 
Cc: misc@openbsd.org misc@openbsd.org
Sent: Thursday, May 23, 2013 9:04 AM
Subject: Re: __guard_local issue
 

On
Wed, May 22, 2013 at 3:30 AM, Bogdan Andu bo...@yahoo.com wrote:
 I compile
from source Erlang R14B04 on a freshly installed OpenBSD 5.3 amd64 machine,
configured with preinstalled opensssl library /usr/lib/libssl.so.19.0 .

This
was fixed upstream in R15B03:
https://github.com/erlang/otp/commit/c282f35cf30d87b61baa30cc7b57ed8c858759ef
Our R15B02 port includes the same fix.  You should be able to backport
it to
R14B04 without trouble if you need to stick with an older Erlang
release.



dpb -D PARAM typo will build everything?

2013-05-23 Thread f5b
I want to auto clean old distfiles no longer associated with new ports source.

first
# /usr/ports/infrastructure/bin/dpb -D HISTORY-ONLY
dpb begin fetch all distfiles and build packages!
I realize mistype PARAM HISTORY-ONLY instead of HISTORY_ONLY
then I press ctrl+c to break it.

and then
# /usr/ports/infrastructure/bin/dpb -D HISTORY_ONLY
now dpb will figure out old distfiles and update ${FULLDISTDIR}/history

at last
# /usr/ports/infrastructure/bin/clean-old-distfiles 



so, dpb -D PARAM typo make me feel not well.



key/cert fingeprint as ssh env variable

2013-05-23 Thread Jiri B
Hello,

I was reading about ssh  certificates and was curious how to
inform logging user about this certificate expiration.

IIRC it is not possible by default now, so an option would be to
have a repository with all signed certificates and check the certs
for expiration. Then next idea was how to inform logging user via
a ForceCommand script before he gets login shell.

But the issue here is how to get trusted info about the certificate
the logging user is using for the session?

Maybe it would be nice to have certificate fingerprint in environment
variable which would be created by SSH, something like

  SSH_USERFPRINT=7a:e7:60:fd:e8:ac:3a:52:fe:c9:e2:6c:74:34:95:a1

then it would be piece of cake to query the repository with all signed
certs.

I can see same benefit for ssh keys too, for example one could work
with comments inside public keys (of course not writable authorized_key
by logged user).

  sshd[22652]: Found matching RSA key: 
7a:e7:60:fd:e8:ac:3a:52:fe:c9:e2:6c:74:34:95:a1

Or do you know other easy way to inform an user about cert expiration
during login?

jirib



Re: how long should CD orders take?

2013-05-23 Thread Michael Stevens
On Tue, May 21, 2013 at 07:52:01PM +0200, mxb wrote:
 Try openbsdeurope.com next time. I already got mine. Last week.
 
 //mxb
 
 On 21 maj 2013, at 19:26, Peter J. Philipp p...@centroid.eu wrote:
 
  I ordered my CD through a german bookstore that is listed at 
  www.openbsd.org/orders.html.  Only it's now the 21st of May and my 
  computers have all been upgraded via FTP around the 1st of May.  And I 
  still have no CD (and no stickers).
  
  Last year they were slow as well, which leads me to believe that the store 
  is sloppy in its orders.  Can someone confirm that the CD's have all been 
  sent out from Calgary?  It's really a shame that I must use resources of 
  OpenBSD when not needed, my order went in around the end of March 2013 and 
  there was lots of time to deliver this as a pre-order.
  
  -peter

My openbsdeurope order arrived very quickly after release.

I think the t-shirt sizes may be a little smaller this time though which
makes me sad.

Michael



Re: Thinkpad X230t convertible and openbsd

2013-05-23 Thread Thanos Tsouanas
Christian Weisgerber wrote:
 FWIW, the Intel Centrino Ultimate-N 6300 iwn(4) in my non-t X230
 works just fine.  That's the 3x3 card on their order site.

Could you please check the exact model and FCC ID of that card?

The (non-t) X230 that I bought came with the
Intel Centrino Wireless-N 2200 card
(model: 2200BNHMW, FCC ID: PD92200BNHU)
which does not work on OpenBSD, so I bought the
Intel Centrino Ultimate-N 6300 card
(model: 633ANHMW, FCC ID: PD9633ANH)
which I was hoping it to be in the whitelist of the X230.
However, it is not..  So, either the whitelist is different depending on
the configuration settings (so that they only whitelist the card you
bought it with), or it is a problem with the specific model of my 6300 card.

Any info/ideas, appreciated.. thanks!


On Thu, May 9, 2013 at 4:11 PM, Edd Barrett vex...@gmail.com wrote:
 On Wed, May 08, 2013 at 01:28:05PM +0200, David Coppa wrote:
 It depends if it is a serial wacom tablet or a usb one.

 See:
 http://openbsd.7691.n7.nabble.com/X60-Tablet-Wacom-Atheros-5213-amp-others-td67571.html#a67575

 Hmm, I am not sure to be honest.

 --
 Best Regards
 Edd Barrett

 http://www.theunixzoo.co.uk




-- 
Thanos Tsouanas
http://perso.ens-lyon.fr/thanos.tsouanas/



Re: Thinkpad X230t convertible and openbsd

2013-05-23 Thread Thanos Tsouanas
Sorry for the quick re-post, apparently the whitelist checks
the FRU P/N, and this seems to be the full list:
http://download.lenovo.com/parts/ThinkPad/x230_x230i_fru_bom_20130410.pdf
So, when buying one for a thinkpad make sure its FRU is in that list.
I got a generic one and it is not working..
See also:
http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/X230-1802-error-after-WLAN-card-upgrade/ta-p/867893

Hope that helps somebody..


On Thu, May 23, 2013 at 2:26 PM, Thanos Tsouanas tha...@sians.org wrote:
 Christian Weisgerber wrote:
 FWIW, the Intel Centrino Ultimate-N 6300 iwn(4) in my non-t X230
 works just fine.  That's the 3x3 card on their order site.

 Could you please check the exact model and FCC ID of that card?

 The (non-t) X230 that I bought came with the
 Intel Centrino Wireless-N 2200 card
 (model: 2200BNHMW, FCC ID: PD92200BNHU)
 which does not work on OpenBSD, so I bought the
 Intel Centrino Ultimate-N 6300 card
 (model: 633ANHMW, FCC ID: PD9633ANH)
 which I was hoping it to be in the whitelist of the X230.
 However, it is not..  So, either the whitelist is different depending on
 the configuration settings (so that they only whitelist the card you
 bought it with), or it is a problem with the specific model of my 6300 card.

 Any info/ideas, appreciated.. thanks!


 On Thu, May 9, 2013 at 4:11 PM, Edd Barrett vex...@gmail.com wrote:
 On Wed, May 08, 2013 at 01:28:05PM +0200, David Coppa wrote:
 It depends if it is a serial wacom tablet or a usb one.

 See:
 http://openbsd.7691.n7.nabble.com/X60-Tablet-Wacom-Atheros-5213-amp-others-td67571.html#a67575

 Hmm, I am not sure to be honest.

 --
 Best Regards
 Edd Barrett

 http://www.theunixzoo.co.uk




 --
 Thanos Tsouanas
 http://perso.ens-lyon.fr/thanos.tsouanas/



-- 
Thanos Tsouanas
http://perso.ens-lyon.fr/thanos.tsouanas/



Re: Updating ports via anoncvs hangs

2013-05-23 Thread Eivind Evensen
On Thu, May 23, 2013 at 07:43:56AM +1000, John Tate wrote:
 When I go to update ports by anoncvs it just hangs, it's been like this for
 hours. Something doesn't seem right.
 
 elijah:usr # cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_5_3
 -P ports

Did you check what ^T tells?

-- 
Eivind



Re: ospf and multiple areas

2013-05-23 Thread Kapetanakis Giannis

On 19/04/13 15:53, Kapetanakis Giannis wrote:


ps. msg thread in http://marc.info/?t=13626767111r=1w=2



On 23/05/13 17:49, Stuart Henderson wrote:

On 2013/05/17 15:33, Kapetanakis Giannis wrote:


Thanks for replying.

When I have remote OSPF routers on those areas then everything works fine.
When the remote routers shutdown OSPF then I loose the routes...

G

Could you follow-up to your misc@ post with this information?
I suspect it is a problem with DR/BDR selection..



As Stuart requested I'm adding this information here.

If remote routers shutdown OSPF then the routes are not advertised any more.

In advance if there are no remote routers at all (in area 0.0.0.7 for 
instance)

then the route is also not announced.

If I have remote routers doing OSPF in 0.0.0.7 then the route is 
announced normally, probably originating from them.


Giannis



Re: Thinkpad X230t convertible and openbsd

2013-05-23 Thread Ted Unangst
On Thu, May 23, 2013 at 14:26, Thanos Tsouanas wrote:
 Christian Weisgerber wrote:
 FWIW, the Intel Centrino Ultimate-N 6300 iwn(4) in my non-t X230
 works just fine.  That's the 3x3 card on their order site.
 
 Could you please check the exact model and FCC ID of that card?
 
 The (non-t) X230 that I bought came with the
 Intel Centrino Wireless-N 2200 card
 (model: 2200BNHMW, FCC ID: PD92200BNHU)
 which does not work on OpenBSD, so I bought the
 Intel Centrino Ultimate-N 6300 card
 (model: 633ANHMW, FCC ID: PD9633ANH)
 which I was hoping it to be in the whitelist of the X230.
 However, it is not..  So, either the whitelist is different depending on
 the configuration settings (so that they only whitelist the card you
 bought it with), or it is a problem with the specific model of my 6300 card.
 
 Any info/ideas, appreciated.. thanks!

I don't know what those IDs are, but I specifically bought a 6300 from
ebay that said it was for Lenovo laptops. It works.



Re: Thinkpad X230t convertible and openbsd

2013-05-23 Thread Mike Larkin
On Thu, May 23, 2013 at 02:26:39PM +0200, Thanos Tsouanas wrote:
 Christian Weisgerber wrote:
  FWIW, the Intel Centrino Ultimate-N 6300 iwn(4) in my non-t X230
  works just fine.  That's the 3x3 card on their order site.
 
 Could you please check the exact model and FCC ID of that card?
 
 The (non-t) X230 that I bought came with the
 Intel Centrino Wireless-N 2200 card
 (model: 2200BNHMW, FCC ID: PD92200BNHU)

I've got a start of a driver for this in my tree. It can detect the card,
upload the firmware, start the device up but presently has problems calibrating
the RF crystal. I haven't had time to debug it further but maybe at the 
upcoming hackathon (doubtful though).

-ml


 which does not work on OpenBSD, so I bought the
 Intel Centrino Ultimate-N 6300 card
 (model: 633ANHMW, FCC ID: PD9633ANH)
 which I was hoping it to be in the whitelist of the X230.
 However, it is not..  So, either the whitelist is different depending on
 the configuration settings (so that they only whitelist the card you
 bought it with), or it is a problem with the specific model of my 6300 card.
 
 Any info/ideas, appreciated.. thanks!
 
 
 On Thu, May 9, 2013 at 4:11 PM, Edd Barrett vex...@gmail.com wrote:
  On Wed, May 08, 2013 at 01:28:05PM +0200, David Coppa wrote:
  It depends if it is a serial wacom tablet or a usb one.
 
  See:
  http://openbsd.7691.n7.nabble.com/X60-Tablet-Wacom-Atheros-5213-amp-others-td67571.html#a67575
 
  Hmm, I am not sure to be honest.
 
  --
  Best Regards
  Edd Barrett
 
  http://www.theunixzoo.co.uk
 
 
 
 
 -- 
 Thanos Tsouanas
 http://perso.ens-lyon.fr/thanos.tsouanas/



Re: current/macppc on Mac Mini

2013-05-23 Thread Miod Vallat
 Were you thinking of something like that? It works for me (c) tm, with
 my PowerBooks (disk@0/wd0), I haven't tried NFS boot yet.

Not exactly, but your version is probably better than what I was
thinking of. However, it will not allow for root on the second wd disk
of a controller, or on any secondary pciide controller.

Borrowing the sparc64 logic is a larger work but less error-prone.

Miod

 Index: autoconf.c
 ===
 RCS file: /cvs/src/sys/arch/macppc/macppc/autoconf.c,v
 retrieving revision 1.39
 diff -u -p -r1.39 autoconf.c
 --- autoconf.c11 Nov 2010 17:58:21 -  1.39
 +++ autoconf.c22 May 2013 19:00:45 -
 @@ -68,7 +68,7 @@
  
  void dumpconf(void);
  static   struct devmap *findtype(char **);
 -void makebootdev(char *cp);
 +void parseofwbp(char *);
  int  getpno(char **);
  
  /*
 @@ -79,6 +79,9 @@ int getpno(char **);
  int  cold = 1;   /* if 1, still working on cold-start */
  char bootdev[16];/* to hold boot dev name */
  struct device *bootdv = NULL;
 +enum devclass bootdev_class = DV_DULL;
 +int  bootdev_type = 0;
 +int  bootdev_unit = 0;
  
  struct dumpmem dumpmem[VM_PHYSSEG_MAX];
  u_int ndumpmem;
 @@ -165,9 +168,9 @@ findtype(char **s)
   *'/ht@0,f200/pci@2/bcom5704@4/bsd'
   */
  void
 -makebootdev(char *bp)
 +parseofwbp(char *bp)
  {
 - int unit, ptype;
 + int ptype;
   char   *dev, *cp;
   struct devmap *dp;
  
 @@ -184,6 +187,8 @@ makebootdev(char *bp)
   } while((dp-type  T_IFACE) == 0);
  
   if (dp-att  dp-type == T_IFACE) {
 + bootdev_class = DV_IFNET;
 + bootdev_type = dp-type;
   strlcpy(bootdev, dp-dev, sizeof bootdev);
   return;
   }
 @@ -193,24 +198,9 @@ makebootdev(char *bp)
   ptype = dp-type;
   dp = findtype(cp);
   if (dp-att  dp-type == T_DISK) {
 - unit = getpno(cp);
 - if (ptype == T_SCSI) {
 - struct device *dv;
 - struct sd_softc *sd;
 -
 - TAILQ_FOREACH(dv, alldevs, dv_list) {
 - if (dv-dv_class != DV_DISK ||
 - strcmp(dv-dv_cfdata-cf_driver-cd_name, 
 sd))
 - continue;
 - sd = (struct sd_softc *)dv;
 - if (sd-sc_link-target != unit)
 - continue;
 - snprintf(bootdev, sizeof bootdev,
 - %s%c, dv-dv_xname, 'a');
 - return;
 - }
 - }
 - snprintf(bootdev, sizeof bootdev, %s%d%c, dev, unit, 'a');
 + bootdev_class = DV_DISK;
 + bootdev_type = ptype;
 + bootdev_unit = getpno(cp);
   return;
   }
   printf(Warning: boot device unrecognized: %s\n, bp);
 @@ -239,25 +229,44 @@ getpno(char **cp)
  void
  device_register(struct device *dev, void *aux)
  {
 + const char *drvrname = dev-dv_cfdata-cf_driver-cd_name;
 + const char *name = dev-dv_xname;
 +
 + if (bootdv != NULL || dev-dv_class != bootdev_class)
 + return;
 +
 + switch (bootdev_type) {
 + case T_SCSI:
 + if (strcmp(drvrname, sd) == 0) {
 + struct sd_softc *sd = (struct sd_softc *)dev;
 +
 + if (sd-sc_link-target == bootdev_unit)
 + bootdv = dev;
 + }
 + case T_IDE:
 + /*
 +  * Do not require the bootpath unit number to match
 +  * against the driver's one, a slave disk on the ATA
 +  * channel `disk@1' can attach as `wd0'.
 +  */
 + if (strcmp(drvrname, wd) == 0)
 + bootdv = dev;
 + break;
 + case T_IFACE:
 + if (strcmp(name, bootdev) == 0)
 + bootdv = dev;
 + break;
 + default:
 + break;
 + }
  }
  
 -/*
 - * Now that we are fully operational, we can checksum the
 - * disks, and using some heuristics, hopefully are able to
 - * always determine the correct root disk.
 - */
  void
  diskconf(void)
  {
 - dev_t temp;
 - int part = 0;
 -
   printf(bootpath: %s\n, bootpath);
 - makebootdev(bootpath);
  
 - /* Lookup boot device from boot if not set by configuration */
 - bootdv = parsedisk(bootdev, strlen(bootdev), 0, temp);
 - setroot(bootdv, part, RB_USERREQ);
 + setroot(bootdv, 0, RB_USERREQ);
   dumpconf();
  }
  
 Index: machdep.c
 ===
 RCS file: /cvs/src/sys/arch/macppc/macppc/machdep.c,v
 retrieving revision 1.135
 diff -u -p -r1.135 machdep.c
 --- machdep.c 6 Dec 2012 12:35:22 -   1.135
 +++ machdep.c 22 May 2013 18:24:25 -
 @@ -114,6 

kern.maxclusters

2013-05-23 Thread james
We had a short outage today and I think it might have been due to our 
firewall. I can see that we hit the limit for this variable but I'm not 
really sure what it does or if it is safe to set it higher. I found the 
following at the time of the outage in the log:

May 23 09:57:27 shiva2 /bsd: WARNING: mclpool limit reached; increase 
kern.maxclusters
May 23 09:58:27 shiva2 /bsd: WARNING: mclpool limit reached; increase 
kern.maxclusters
May 23 10:00:27 shiva2 last message repeated 2 times

netstat -m shows this now: 

-bash-3.1$ netstat -m
199 mbufs in use:
195 mbufs allocated to data
1 mbuf allocated to packet headers
3 mbufs allocated to socket names and addresses
194/6152/6144 mbuf clusters in use (current/peak/max)
13860 Kbytes allocated to network (3% in use)
0 requests for memory denied
0 requests for memory delayed
0 calls to protocol drain routines

Can anyone offer any advice?



Re: how long should CD orders take?

2013-05-23 Thread Kenneth R Westerback
On Thu, May 23, 2013 at 12:03:48PM +0100, Michael Stevens wrote:
 On Tue, May 21, 2013 at 07:52:01PM +0200, mxb wrote:
  Try openbsdeurope.com next time. I already got mine. Last week.
  
  //mxb
  
  On 21 maj 2013, at 19:26, Peter J. Philipp p...@centroid.eu wrote:
  
   I ordered my CD through a german bookstore that is listed at 
   www.openbsd.org/orders.html.  Only it's now the 21st of May and my 
   computers have all been upgraded via FTP around the 1st of May.  And I 
   still have no CD (and no stickers).
   
   Last year they were slow as well, which leads me to believe that the 
   store is sloppy in its orders.  Can someone confirm that the CD's have 
   all been sent out from Calgary?  It's really a shame that I must use 
   resources of OpenBSD when not needed, my order went in around the end of 
   March 2013 and there was lots of time to deliver this as a pre-order.
   
   -peter
 
 My openbsdeurope order arrived very quickly after release.
 
 I think the t-shirt sizes may be a little smaller this time though which
 makes me sad.
 
 Michael

Either they're smaller or ... :-).

 Ken



Re: how long should CD orders take?

2013-05-23 Thread Maurice McCarthy
Hi

I'm brand new to OpenBSD and live in Swansea UK. I received my installation cds 
from Manchester over a weekend and Matt Lucas's book within about 10 days from 
the USA.

Thanks for all the great documentation to get me started.

Moss


On Thu, May 23, 2013 at 01:53:59PM -0400 or thereabouts, Kenneth R Westerback 
wrote:
 On Thu, May 23, 2013 at 12:03:48PM +0100, Michael Stevens wrote:
  On Tue, May 21, 2013 at 07:52:01PM +0200, mxb wrote:
   Try openbsdeurope.com next time. I already got mine. Last week.
   
   //mxb
   
   On 21 maj 2013, at 19:26, Peter J. Philipp p...@centroid.eu wrote:
   
I ordered my CD through a german bookstore that is listed at 
www.openbsd.org/orders.html.  Only it's now the 21st of May and my 
computers have all been upgraded via FTP around the 1st of May.  And I 
still have no CD (and no stickers).

Last year they were slow as well, which leads me to believe that the 
store is sloppy in its orders.  Can someone confirm that the CD's have 
all been sent out from Calgary?  It's really a shame that I must use 
resources of OpenBSD when not needed, my order went in around the end 
of March 2013 and there was lots of time to deliver this as a pre-order.

-peter
  
  My openbsdeurope order arrived very quickly after release.
  
  I think the t-shirt sizes may be a little smaller this time though which
  makes me sad.
  
  Michael
 
 Either they're smaller or ... :-).
 
  Ken



Re: kern.maxclusters

2013-05-23 Thread Stuart Henderson
On 2013-05-23, james ja...@wintercastle.net wrote:
 We had a short outage today and I think it might have been due to our 
 firewall. I can see that we hit the limit for this variable but I'm not 
 really sure what it does or if it is safe to set it higher. I found the 
 following at the time of the outage in the log:

 May 23 09:57:27 shiva2 /bsd: WARNING: mclpool limit reached; increase 
 kern.maxclusters
 May 23 09:58:27 shiva2 /bsd: WARNING: mclpool limit reached; increase 
 kern.maxclusters
 May 23 10:00:27 shiva2 last message repeated 2 times

 netstat -m shows this now: 

 -bash-3.1$ netstat -m
 199 mbufs in use:
 195 mbufs allocated to data
 1 mbuf allocated to packet headers
 3 mbufs allocated to socket names and addresses
 194/6152/6144 mbuf clusters in use (current/peak/max)

If this is under normal conditions then it suggests kern.maxclusters
is probably high enough, most likely you ran into an mbuf leak in which
case raising nmbclusters might help in the short term, but would only
delay the inevitable.

You could try logging this line periodically and determine if there's
a slow leak or a fast increase in mbuf clusters in use..

 13860 Kbytes allocated to network (3% in use)
 0 requests for memory denied
 0 requests for memory delayed
 0 calls to protocol drain routines

 Can anyone offer any advice?

Other than the above, you missed including the dmesg that is requested
for any problem reports, and an overview of the network configuration
might suggest areas to look at.

Also since you are running a version of the OS which can be no newer
than December 2008, you might like to investigate the option of
upgrading, because bugs do get fixed..



Re: BCM5719C/BCM5720 partially working

2013-05-23 Thread Mike Belopuhov
On Thu, May 23, 2013 at 11:04 +0200, David Imhoff wrote:
 Hi,
 
 Having finally found the BCM5718 Programmers guide from
 http://www.broadcom.com/support/ethernet_nic/open_source.php I
 managed to get a bit further with this problem.
 
 The problem seems to be in the Auto polling of the mac link state.
 ifconfig shows the correct link state, but the BGE_STS_LINK bit in
 the driver is never set. Debugging the interrupt routine I found the
 driver never receives a link state changed attention, instead the
 last interrupt indicates a auto-poll error and bit 0 of register
 BGE_AUTOPOLL_STS is set.
 
 Looking at the FreeBSD and Linux drivers I found that they don't use
 auto-polling. Also the programmers guide of the BCM5718 family(page
 204) doesn't describe the auto-polling method anymore, as was done
 in the PG of other BCM57xx.
 

I agree that this might be a better solution than what I had:
setting the BGE_STS_LINK_EVT flag back in bge_link_upd to force
the bge_intr into running it every time untill it gets the link;
and it seems to work.

 So I disabled Auto-polling for the BCM5718 family. This made all
 ports work on my Dell R320(BCM5720) and BCM5719. My BCM5719 still
 doesn't fully work because now i run into bge_watchdog reset's when
 sending big packet, the same issue reported by Robert Young on 5
 April.
 

Right, it seems like the TX completion interrupts never arrive
for large packets.  Forcing txeof doesn't help.  In fact I can
see some funny things going on here: for small ping packets 1
out of 1 tx buffer descriptors contain an mbuf to scratch, for
170 byte packets 1 out of 2 tx bd's contain an mbuf, for 250
byte packets 1 out of 3 tx bd's contain an mbuf, for 500 byte
packets TX completion interrupt never arrives.

I had a suspicion that this is because ASF mode is turned on
and we fail to share a port with IPMI firmware, but right now
I'm more inclined to believe that this is just another TX bug.

ChipID here is 0x5719001 as well but APE firmware NCSI 1.1.15.0.

 Attached is a patch that disables mac polling for the BCM5717, 5719
 and 5720. Tested on BCM5719, BCM5720 and BCM5750 C1.
 
 I also noticed if_bge.c line 2293:
 BGE_SETBIT(sc, BGE_MI_MODE, BGE_MIMODE_AUTOPOLL|1016);
 Does any one have a clue why the (1016) is there? it changes the
 MI clock. But why? and why OR 0xA with the default 0xC, instead of
 0x2? FreeBSD and Linux use the default of 0xC for the MI Clock.
 

I think it's a remnant of the original code and it should be
BGE_MIMODE_BASE (as in the other frequency).

 Kind regards,
 
 David
 
 Index: sys/dev/pci/if_bge.c
 ===
 RCS file: /cvs/src/sys/dev/pci/if_bge.c,v
 retrieving revision 1.320
 diff -u -r1.320 if_bge.c
 --- sys/dev/pci/if_bge.c  4 Mar 2013 01:33:18 -   1.320
 +++ sys/dev/pci/if_bge.c  21 May 2013 13:18:36 -
 @@ -2288,7 +2288,9 @@
   /* Enable PHY auto polling (for MII/GMII only) */
   if (sc-bge_flags  BGE_PHY_FIBER_TBI) {
   CSR_WRITE_4(sc, BGE_MI_STS, BGE_MISTS_LINK);
 - } else {
 + } else if (!(BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5717 ||
 + BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5719 ||
 + BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5720)) {
   BGE_STS_SETBIT(sc, BGE_STS_AUTOPOLL);
   BGE_SETBIT(sc, BGE_MI_MODE, BGE_MIMODE_AUTOPOLL|1016);
   if (BGE_ASICREV(sc-bge_chipid) == BGE_ASICREV_BCM5700)
 @@ -4386,18 +4388,13 @@
   if_link_state_change(ifp);
   ifp-if_baudrate = 0;
   }
 - /*
 -  * Discard link events for MII/GMII cards if MI auto-polling
 disabled.
 -  * This should not happen since mii callouts are locked now, but
 -  * we keep this check for debug.
 -  */
 - } else if (BGE_STS_BIT(sc, BGE_STS_AUTOPOLL)) {
 + } else {
   /*

I think you've missed some important bits here.

* Some broken BCM chips have BGE_STATFLAG_LINKSTATE_CHANGED bit
* in status word always set. Workaround this bug by reading
* PHY link status directly.
*/
 - link = (CSR_READ_4(sc, BGE_MI_STS)  BGE_MISTS_LINK)?
 + link = (CSR_READ_4(sc, BGE_TX_STS)  BGE_TXSTAT_LINK_UP)?
   BGE_STS_LINK : 0;
 
   if (BGE_STS_BIT(sc, BGE_STS_LINK) != link) {
 
 

Why did you change BGE_MI_STS to BGE_TX_STS?

Please inspect my diff below; I believe it's more complete.

diff --git sys/dev/pci/if_bge.c sys/dev/pci/if_bge.c
index 1d37192..d357443 100644
--- sys/dev/pci/if_bge.c
+++ sys/dev/pci/if_bge.c
@@ -1055,10 +1055,22 @@ bge_miibus_statchg(struct device *dev)
(mii-mii_media_active  IFM_ETH_FMASK) != sc-bge_flowflags) {
sc-bge_flowflags = mii-mii_media_active  IFM_ETH_FMASK;
mii-mii_media_active = ~IFM_ETH_FMASK;
}
 
+   if (!BGE_STS_BIT(sc, BGE_STS_LINK) 
+ 

divert-to with bridge

2013-05-23 Thread Luiz Gustavo S. Costa
Hi List !

I'm trying to implement a firewall with squid TPROXY in an environment with 
bridge.

vio0 = external if
vio1 = internal if
bridge0 = (vio0 + vio1)

I have these rules, the connections pass through it, but nothing comes on the 
side of the divert-to (did tests with nc -l 3128)

[17:31:25] root:logs # cat /etc/pf.conf
pass in log quick on vio1 inet proto tcp from any to any port 80 divert-to 
127.0.0.1 port 3128

pass out log quick on vio0 inet proto tcp from any to any port 80 divert-reply

pass all

[17:39:40] root:~ # pfctl -vvsr
@0 pass in log quick on vio1 inet proto tcp from any to any port = 80 flags 
S/SA divert-to 127.0.0.1 port 3128
  [ Evaluations: 92Packets: 194   Bytes: 43964   States: 1 ]
  [ Inserted: uid 0 pid 22438 State Creations: 21]
@1 pass out log quick on vio0 inet proto tcp from any to any port = 80 flags 
S/SA divert-reply
  [ Evaluations: 49Packets: 194   Bytes: 43964   States: 1 ]
  [ Inserted: uid 0 pid 22438 State Creations: 21]
@2 pass all flags S/SA
  [ Evaluations: 50Packets: 93Bytes: 13453   States: 6 ]
  [ Inserted: uid 0 pid 22438 State Creations: 50]

[17:35:54] root:~ # tcpdump -n -e -ttt -i pflog0
tcpdump: WARNING: snaplen raised from 116 to 160
tcpdump: listening on pflog0, link-type PFLOG
May 23 17:36:13.429174 rule 0/(match) pass in on vio1: 192.168.15.13.38330  
74.125.234.238.80: S 2238109532:2238109532(0) win 14600 mss 
1460,sackOK,timestamp 45163358 0,nop,wscale 7 (DF)
tcpdump: WARNING: compensating for unaligned libpcap packets
May 23 17:36:13.429228 rule 1/(match) pass out on vio0: 192.168.15.13.38330  
74.125.234.238.80: S 2238109532:2238109532(0) win 14600 mss 
1460,sackOK,timestamp 45163358 0,nop,wscale 7 (DF)

but, command nc not receiving any packet or connection.

divert-to not working with bridge ?

My reference is this - 
http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf

Thanks

---
Luiz Gustavo Costa (Powered by BSD)
*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+
mundoUnix - Consultoria em Software Livre
http://www.mundounix.com.br
ICQ: 2890831 / MSN: cont...@mundounix.com.br
Tel: 55 (21) 4063-7110 / 8194-1905 / (11) 4063-0407
Blog: http://www.luizgustavo.pro.br



FFS vs FFS2: newfs fsck

2013-05-23 Thread Clint Pachl
I created a new filesystem on a 232.9 GB partition on a 500 GB external 
USB drive that will be used as backup storage for dump files. Out of 
curiosity, I recreated the filesystem using FFS2 (I never created an 
FFS2 before). I noticed it was much faster, so I clocked it for comparison:


# ### FFS ###
# time newfs -O 1 sd1a
   ...
1m55.04s real 0m0.26s user 0m0.40s system
# time fsck -f /dev/rsd1a
...
1m13.89s real 0m0.30s user 0m0.10s system
# dumpfs -m sd1a
newfs -O 1 -b 32768 -e 8192 -f 4096 -g 16384 -h 64 -m 5 -o time -s 
488353792 sd1a



# ### FFS2 ###
# time newfs -O 2 sd1a
   ...
0m3.98s real 0m0.20s user 0m0.02s system
# time fsck -f /dev/rsd1a
...
0m7.58s real 0m0.40s user 0m0.16s system
# dumpfs -m sd1a
newfs -O 2 -b 32768 -e 4096 -f 4096 -g 16384 -h 64 -m 5 -o time -s 
488353792 sd1a


# ### END ###

The only difference in the default parametrization of `newfs` is the 
max blocks per group (-e). So I also tried `-e 4096` for FFS, but that 
did not change the result, still slow.


A quick search of FFS vs FFS2 returns mailing list threads that mention 
FFS and FFS2 are identical in performance. The only difference, which 
the manual also states, is that FFS is the default for less than 1 TB 
filesystems while FFS2 becomes the default for larger filesystems.


I'm on an old snapshot, so maybe this is irrelevant:

OpenBSD 5.2-current (GENERIC.MP) #1: Wed Aug 29 21:17:12 MDT 2012
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

Nonetheless, I just thought it was interesting that the real time 
executions are an order of a magnitude different. Any thoughts?




Re: FFS vs FFS2: newfs fsck

2013-05-23 Thread Ted Unangst
On Thu, May 23, 2013 at 14:01, Clint Pachl wrote:
 I created a new filesystem on a 232.9 GB partition on a 500 GB external
 USB drive that will be used as backup storage for dump files. Out of
 curiosity, I recreated the filesystem using FFS2 (I never created an
 FFS2 before). I noticed it was much faster, so I clocked it for comparison:

FFS2 supports lazy allocated inodes, so initial filesystem creation
does that much less writing.



Re: __guard_local issue

2013-05-23 Thread Matthew Dempsky
On Thu, May 23, 2013 at 2:38 AM, Bogdan Andu bo...@yahoo.com wrote:
 ./configure
 sudo gmake install
 the same error

You need to run autoreconf, to regenerate configure from configure.in.



Re: kern.maxclusters

2013-05-23 Thread Claudio Jeker
On Thu, May 23, 2013 at 01:21:55PM -0400, james wrote:
 We had a short outage today and I think it might have been due to our 
 firewall. I can see that we hit the limit for this variable but I'm not 
 really sure what it does or if it is safe to set it higher. I found the 
 following at the time of the outage in the log:
 
 May 23 09:57:27 shiva2 /bsd: WARNING: mclpool limit reached; increase 
 kern.maxclusters
 May 23 09:58:27 shiva2 /bsd: WARNING: mclpool limit reached; increase 
 kern.maxclusters
 May 23 10:00:27 shiva2 last message repeated 2 times
 
 netstat -m shows this now: 
 
 -bash-3.1$ netstat -m
 199 mbufs in use:
 195 mbufs allocated to data
 1 mbuf allocated to packet headers
 3 mbufs allocated to socket names and addresses
 194/6152/6144 mbuf clusters in use (current/peak/max)
 13860 Kbytes allocated to network (3% in use)
 0 requests for memory denied
 0 requests for memory delayed
 0 calls to protocol drain routines
 
 Can anyone offer any advice?

Double the mclpool limit and see if that is enough else double again. 
Stop doubling when you grow beyond 50'000 -- now it is time to reconsider
and see if you have enough memory and kvm left for more.

In general busy servers with many open connections need more then the 6000
clusters to work well.
-- 
:wq Claudio



Re: ospfd loopback advertisment failure (adjacency fail?)

2013-05-23 Thread Hrvoje Popovski
On 21.5.2013. 23:23, Claudio Jeker wrote:

 Hi,

 sorry for delay, we are in the middle of the network migration from
 cisco to extreme and i thought when everything calms down to test it
 with cisco and extreme equipment. I'm planning to test it next week.

 
 I found some issues with the diff but I hope to be able to sit down
 somewhen and fix those problems I identified. The cisco I tested against
 seems to behave not like a rfc point-to-point interface (some messages I
 expected to be sent to the multicast address where unicast, etc.)
 
 I would be interested in some tcpdumps of extreme doing ospf to see if
 they behave the same.
 

Hi,

i have applied stuart's patch and tested it with extreme equipment

test between cisco and extreme
http://kosjenka.srce.hr/~hrvoje/extr-csco-ospf-ptp.pcap
everything is working fine


test between extreme and openbsd
http://kosjenka.srce.hr/~hrvoje/extr-openbsd-ospf-ptp.pcap
http://kosjenka.srce.hr/~hrvoje/logs.txt
http://kosjenka.srce.hr/~hrvoje/daemon

STATE is FULL/P2P on both side

openbsd:
ID  Pri StateDeadTime Address Iface
192.168.112.2   0   FULL/P2P 00:00:33 192.168.112.2   ix0
Uptime
1d00h04m

extreme:
Neighbor ID Pri StateUp/Dead Time
192.168.112.1 1 FULL/DROTHER 01:00:06:34/00:00:00:02
Address Interface
192.168.112.1   vl112


extreme can see openbsd routes, but openbsd doesn't have any extreme
route -  see logs.txt

link between extreme (vlan112) and openbsd (ix0) is working fine but
there is strange log (send_packet: error sending packet on interface
ix0: Network is unreachable) in daemon log

opebsd
# ping 192.168.112.2
PING 192.168.112.2 (192.168.112.2): 56 data bytes
64 bytes from 192.168.112.2: icmp_seq=0 ttl=64 time=0.552 ms
64 bytes from 192.168.112.2: icmp_seq=1 ttl=64 time=0.540 ms

extreme
ping 192.168.112.1
Ping(ICMP) 192.168.112.1: 4 packets, 8 data bytes, interval 1 second(s).
16 bytes from 192.168.112.1: icmp_seq=0 ttl=255 time=1.069 ms
16 bytes from 192.168.112.1: icmp_seq=1 ttl=255 time=4.388 ms


if you want to test something else, please let me know ..



Hyper-V drivers?

2013-05-23 Thread Guillaume Filion
Hi all,

I did some tests with OpenBSD 5.3 running as a Hyper-V 2012 virtual machine and 
the performance is disappointing (see 
http://guillaume.filion.org/blog/archives/2013/05/openbsd_networking_performance_hyperv_2012.php
 for data).

Is there anyone working on porting the FreeBSD Hyper-V drivers to OpenBSD? 
They're available under the BSD license: http://freebsdonhyper-v.github.io/

Thanks,
Guillaume



OpenBSD on Ouya/Tegra3

2013-05-23 Thread jordon
With Ouya consoles starting to make it to market, I'm wondering if
there's a chance that OpenBSD could be ported to it.  This is something
I would love to help with but have no idea where to begin.  The
documentation for the Tegra3 is available from nvidia's website, though
you have to register and then request access to the Tegra section (I
left most of the questions blank and just put I want to see the
documentation for the reasons and was granted access in about 3
minutes).

I have some microcontroller experience (PIC18 and currently playing
with a PIC32), and I did play with an ARM dev kit for a bit a long time
ago, but I have some questions on how OpenBSD/ARM works.  When I was
working with an ARM, the entire program was stored in the on-chip flash
memory - like a microcontroller.  With a larger OS like OpenBSD, what
is stored on the chip and what is loaded from external storage?  Is the
entire kernel stored on chip or just a bootloader?

As I understand, not all ARM chips are equal - each one pretty much
needs its own port, and currently BeagleBoard is the main one getting
worked on.  Right?

So... is this worth pursuing?  The idea of a $99 cube that could run
OpenBSD is pretty intriguing, but how possible is it?  Are there
licensing strings attached to Tegra3 that would make this difficult?

jordon