Re: xfce issue

2015-07-18 Thread Matthew Martin
On 7/18/15, Mohammad BadieZadegan  wrote:
> Hi dear OpenBSD users.
> I installed OpenBSD and then XFCE on multiple computers but on a computer
> while I startx , it runs XFCE but every clickable icons such as terminal or
> browsers or ... does not running anything!
> On the other computers XFCE runs OK but a computer don't running any icons!
> How can I resolve this issue?
> Thanks in advance.
>
>
Find out what's different about the affected computer, and make it not
different.
XFCE works fine here with 5.7.



xfce issue

2015-07-18 Thread Mohammad BadieZadegan
Hi dear OpenBSD users.
I installed OpenBSD and then XFCE on multiple computers but on a computer
while I startx , it runs XFCE but every clickable icons such as terminal or
browsers or ... does not running anything!
On the other computers XFCE runs OK but a computer don't running any icons!
How can I resolve this issue?
Thanks in advance.



Re: how to install OpenBSD in a computer with Linux and Grub2

2015-07-18 Thread tuyosi

Hi all .

recently i use debian's grub2 as openbsd boot loader .

install debian in ext2fs. no swap , if 2GB space ok .
  ^^
and debian's
/etc/grub.d/40_custom

#!/bin/sh
exec tail -n +3 $0
# This file provides an easy way to add custom menu entries.  Simply 
type the

# menu entries you want to add after this comment.  Be careful not to change
# the 'exec tail' line above.

#1
menuentry 'openbsd wd11' {
#root (hd1,3)
set root='(hd1,msdos4)'
chainloader +1
}

#2
menuentry 'openbsd wd0' {
#root (hd0,3)
set root='(hd0,msdos4)'
chainloader +1
}

#3
menuentry 'openbsd install-5.7' {
kopenbsd /bsd.rd-57
}

#4
menuentry 'openbsd install-snap' {
kopenbsd /bsd.rd-snap

#2 is used main openbsd .
#1 is used as spare or experimental  .
#3 is used as openbsd 5.7 installer or  upgrader .
#4 is used as openbsd snapshot installer .

in order to **update** bsd.rd-snap ,i run next script on **openbsd**(no 
need boot debian) .


 cat bsd-rd.bat

umont /mnt-deb
mount_ext2fs  /dev/wd0i /mnt-deb
rm /mnt-deb/bsd.rd
wget -c  ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/amd64/bsd.rd
mv bsd.rd /mnt-deb/bsd.rd-snap
ls -ltr /mnt-deb/bsd.rd*

i use rental server , so this procedure is very convinient .

thanks.



Re: 'ldap_bind: Operations error (1)' with ldapd-5.6

2015-07-18 Thread Matthew Martin
I'm running ldapd on 5.7. {CRYPT} with bcrypt works fine for moodle,
dokuwiki, and phpbb. encrypt(1) can generate them or PHP's
password_hash() with (possibly without?) something like:
// {CRYPT} is part of the string at this point
$newdata['userPassword'][9] = 'b'; // $2y$ -> $2b$

Far as I know the LDAP RFC's only talk about md5/sha1, but who cares.

On 7/18/15, Matthew Weigel  wrote:
> On 7/18/15 4:27 AM, Olivier Mehani wrote:
>
>> My root user is authenticated with BSDAUTH. The rest of the users with
>> an md5crypt in the userPassword. This works with the version from 5.5
>> with a range of applications (ownCloud, Wordpress, PHPLDAPAdmin, ...).
>
> md5crypt...?  Well, there's your problem.
>
>  From http://www.openbsd.org/plus56.html:
>
>   * Removed md5crypt from crypt(3).
>
> So ldapd(8) is passing the hash string along to crypt(3) when checking
> the user's password and crypt(3) is unable to handle it.  You'll need to
> start migrating these password hashes.
> --
>   Matthew Weigel
>   hacker
>   unique & idempot . ent



Re: 'ldap_bind: Operations error (1)' with ldapd-5.6

2015-07-18 Thread Matthew Weigel

On 7/18/15 4:27 AM, Olivier Mehani wrote:


My root user is authenticated with BSDAUTH. The rest of the users with
an md5crypt in the userPassword. This works with the version from 5.5
with a range of applications (ownCloud, Wordpress, PHPLDAPAdmin, ...).


md5crypt...?  Well, there's your problem.

From http://www.openbsd.org/plus56.html:

 * Removed md5crypt from crypt(3).

So ldapd(8) is passing the hash string along to crypt(3) when checking 
the user's password and crypt(3) is unable to handle it.  You'll need to 
start migrating these password hashes.

--
 Matthew Weigel
 hacker
 unique & idempot . ent



Re: SPARC minimum hardware specification

2015-07-18 Thread Patrick Dohman
If I’m not mistaken the PS3 had a PPC as well.

Many of the intel alternatives do a better job at math & calculations in my 
opinion while PPC & SPARC may need additional time to execute operations often 
there are fewer errors and the results are far more accurate.

This quite obvious on the PS3. Things like X & Y coordinate mappings were often 
very accurate. Seemingly intel aims to disregard this type of accuracy.

Regards
Patrick


> On Jul 18, 2015, at 9:19 AM, Seth  wrote:
> 
> On Fri, 17 Jul 2015 09:15:14 -0700, BSD  wrote:
>> The replies to the OP seem discouraging. If not Oracle, and not
>> Fujitsu, then what? If not a sparc desktop, then what about a sparc
>> router? A RISC anything??
> 
> You might be interested in Bunny's Novena project [1] [2]
> 
> [1] http://www.mail-archive.com/misc%40openbsd.org/msg126490.html
> 
> [2] https://www.crowdsupply.com/sutajio-kosagi/novena



Re: OpenNTPD - no constraint reply - no time sync

2015-07-18 Thread Brent Cook
> On Jul 18, 2015, at 1:52 PM, Mikolaj Kucharski  wrote:
> 
> On Sat, Jul 18, 2015 at 11:44:17AM -0600, Brent Cook wrote:
>> On Thu, May 28, 2015 at 5:24 PM, Mikolaj Kucharski
>>  wrote:
>>> minimalisic patch as below fixed the issue for me:
>>> 
>>> Index: constraint.c
>>> ===
>>> RCS file: /cvs/src/usr.sbin/ntpd/constraint.c,v
>>> retrieving revision 1.12
>>> diff -u -p -u -r1.12 constraint.c
>>> --- constraint.c28 May 2015 21:34:36 -  1.12
>>> +++ constraint.c28 May 2015 23:14:47 -
>>> @@ -279,7 +279,7 @@ constraint_check_child(void)
>>>&cstr->addr->ss), 
>>> CONSTRAINT_SCAN_INTERVAL);
>>>}
>>> 
>>> -   if (fail || cstr->state < STATE_REPLY_RECEIVED) {
>>> +   if (fail || cstr->state < STATE_QUERY_SENT) {
>>>cstr->senderrors++;
>>>constraint_close(cstr->fd);
>>>}
>> 
>> Thank you for the in-depth analysis. I have been running this patch
>> the last couple
>> of days and have not experienced any issues as well. What say you reyk?
> 
> I can confirm that I run this patch from the end of May (from the time
> when I've posted this to the misc mailing list) on amd64 and i386 and I
> don't have any issues with it. I did not test portable.
> 

Thanks, I have committed your simpler patch.



Re: OpenNTPD - no constraint reply - no time sync

2015-07-18 Thread Mikolaj Kucharski
On Sat, Jul 18, 2015 at 11:44:17AM -0600, Brent Cook wrote:
> On Thu, May 28, 2015 at 5:24 PM, Mikolaj Kucharski
>  wrote:
> > minimalisic patch as below fixed the issue for me:
> >
> > Index: constraint.c
> > ===
> > RCS file: /cvs/src/usr.sbin/ntpd/constraint.c,v
> > retrieving revision 1.12
> > diff -u -p -u -r1.12 constraint.c
> > --- constraint.c28 May 2015 21:34:36 -  1.12
> > +++ constraint.c28 May 2015 23:14:47 -
> > @@ -279,7 +279,7 @@ constraint_check_child(void)
> > &cstr->addr->ss), 
> > CONSTRAINT_SCAN_INTERVAL);
> > }
> >
> > -   if (fail || cstr->state < STATE_REPLY_RECEIVED) {
> > +   if (fail || cstr->state < STATE_QUERY_SENT) {
> > cstr->senderrors++;
> > constraint_close(cstr->fd);
> > }
> 
> Thank you for the in-depth analysis. I have been running this patch
> the last couple
> of days and have not experienced any issues as well. What say you reyk?

I can confirm that I run this patch from the end of May (from the time
when I've posted this to the misc mailing list) on amd64 and i386 and I
don't have any issues with it. I did not test portable.

-- 
best regards
q#



Re: OpenNTPD - no constraint reply - no time sync

2015-07-18 Thread Brent Cook
On Thu, May 28, 2015 at 5:24 PM, Mikolaj Kucharski
 wrote:
> Hi,
>
> I've initially reported this problem a while ago and I thought problem
> was related to IPv6. Now I belive it is not. I did some research and
> this is what I've found. I contacted Reyk couple of days ago, but didn't
> get any reply from him yet, so decided to post here.
>
> I'm using OpenNTPD's constraint from the time it was introduced. However
> I found that ntpd(8) often is getting stuck at the very beginning when
> it starts and never recovers from that scenario. Usually it looks as
> follows when you hit the problem:
>
> # ntpctl -sa
> 0/4 peers valid, clock unsynced
>
> peer
>wt tl st  next  poll  offset   delay  jitter
> 87.232.1.41 0.pool.ntp.org
> 1  2  -0s0s  peer not valid 
> 54.171.104.100 1.pool.ntp.org
> 1  2  -0s0s  peer not valid 
> 193.1.193.157 2.pool.ntp.org
> 1  2  -0s0s  peer not valid 
> 85.91.1.180 3.pool.ntp.org
> 1  2  -0s0s  peer not valid 
>
> All counters are zero and all peers are not valid. For me it usually
> stays like that and never recovers until rcctl restart ntpd. Then often
> it fails like above again. Multiple restarts in a row solve the problem.
>
> I did some debug modifications to ntpd and this is what I've found.
> I'm running my tests on:
>
> # sysctl -n kern.version
> OpenBSD 5.7-current (GENERIC) #955: Thu May 28 13:09:53 MDT 2015
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
>
> and to keep IPv6 out of the picture I have following settings in resolv.conf:
>
> # grep -w family /etc/resolv.conf
> family inet4
>
> The ntpd server itself is configured as follows:
>
> # grep -ve '^#' /etc/ntpd.conf
> server 0.pool.ntp.org
> server 1.pool.ntp.org
> server 2.pool.ntp.org
> server 3.pool.ntp.org
> constraints from www.google.com
>
> I'm running debug version of ntpd as follows:
>
> ./ntpd.debug -vd 2>&1 | ts
>
> Here is example debug session when I hit the issue. Lines which contain
> XXX MK are added by me via log_debug():
>
> May 28 23:25:54 ntp engine ready
> May 28 23:25:54 XXX MK STATE_NONE=0
> May 28 23:25:54 XXX MK STATE_DNS_INPROGRESS=1
> May 28 23:25:54 XXX MK STATE_DNS_TEMPFAIL=2
> May 28 23:25:54 XXX MK STATE_DNS_DONE=3
> May 28 23:25:54 XXX MK STATE_QUERY_SENT=4
> May 28 23:25:54 XXX MK STATE_REPLY_RECEIVED=5
> May 28 23:25:54 XXX MK STATE_INVALID=6
> May 28 23:25:54 XXX MK ntp_main() constraint_cnt=0, constraint_median=0
> May 28 23:25:54 XXX MK client_query() start
> May 28 23:25:54 XXX MK client_query() start
> May 28 23:25:54 XXX MK client_query() start
> May 28 23:25:54 XXX MK client_query() start
> May 28 23:25:54 XXX MK constraint_query() starts state=1
> May 28 23:25:54 XXX MK constraint_query() fail with default?
> May 28 23:25:54 XXX MK ntp_main() function constraint_query() returned -1
> May 28 23:25:54 XXX MK ntp_main() about to loop with control_dispatch_msg() 
> and j=3 i=3 nfds=1
> May 28 23:25:54 XXX MK ntp_main() about to loop with 
> constraint_dispatch_msg() and j=3 i=3 nfds=1
> May 28 23:25:54 XXX MK ntp_main() constraint_cnt=0, constraint_median=0
> May 28 23:25:54 XXX MK constraint_query() starts state=1
> May 28 23:25:54 XXX MK constraint_query() fail with default?
> May 28 23:25:54 XXX MK ntp_main() function constraint_query() returned -1
> May 28 23:25:55 XXX MK ntp_main() about to loop with control_dispatch_msg() 
> and j=3 i=3 nfds=0
> May 28 23:25:55 XXX MK ntp_main() about to loop with 
> constraint_dispatch_msg() and j=3 i=3 nfds=0
> May 28 23:25:55 XXX MK ntp_main() constraint_cnt=1, constraint_median=0
> May 28 23:25:55 XXX MK constraint_query() starts with 216.58.208.68 state=3
> May 28 23:25:55 constraint request to 216.58.208.68
> May 28 23:25:55 XXX MK constraint_query() succeeded?
> May 28 23:25:55 XXX MK httpsdate_query() with 216.58.208.68
> May 28 23:25:55 XXX MK httpsdate_init() with 216.58.208.68
> May 28 23:25:55 XXX MK httpsdate_request() with 216.58.208.68 port 443
> May 28 23:25:55 XXX MK httpsdate_request() date from 216.58.208.68 is Date: 
> Thu, 28 May 2015 22:25:56 GMT
> May 28 23:25:55 XXX MK httpsdate_request() success from 216.58.208.68
> May 28 23:25:55 XXX MK httpsdate_query() with 216.58.208.68 done
> May 28 23:25:55 XXX MK ntp_main() function poll() returned -1, errno=4 i=4
> May 28 23:25:55 XXX MK ntp_main() about to loop with control_dispatch_msg() 
> and j=3 i=4 nfds=-1
> May 28 23:25:55 XXX MK ntp_main() about to loop with 
> constraint_dispatch_msg() and j=3 i=4 nfds=-1
> May 28 23:25:55 XXX MK constraint_check_child() bummer, we bump senderrors 
> now senderrors=1 fail=0 state=4
> May 28 23:25:55 XXX MK constraint_close() are we going to set state to 
> STATE_INVALID? state=4
> May 28 23:25:55 XXX MK constraint_close() somehow we set the state to 
> STATE_INVALID state=6 senderrors=1
> May 28 23:25:55 XXX MK ntp_main() constraint_cnt=1, constraint_median=0

Re: SPARC minimum hardware specification

2015-07-18 Thread Seth

On Fri, 17 Jul 2015 09:15:14 -0700, BSD  wrote:

The replies to the OP seem discouraging. If not Oracle, and not
Fujitsu, then what? If not a sparc desktop, then what about a sparc
router? A RISC anything??


You might be interested in Bunny's Novena project [1] [2]

[1] http://www.mail-archive.com/misc%40openbsd.org/msg126490.html

[2] https://www.crowdsupply.com/sutajio-kosagi/novena



Re: hardware to run OpenBSD - choose between Intel and AMD

2015-07-18 Thread lists
> When it comes to choose a platform for OpenBSD

http://www.openbsd.org/faq/faq3.html#SelectHW

> from almost the same
> performance range,

Range can be defined by intended use, architecture, age, performance,
maintenance, pricing.

You may want to redefine your range for any of the other criteria and
not constrain the choice by performance only.

> what is better to take: AMD cpu + ATI video or
> Intel cpu + GMA video?

Whatever you like mostly, the choice usually is to pick the better for
the money according to availability.

Adding a low power Radeon graphics card gives more options.

Take into consideration the power usage, heat dissipation and noise as
primary factors.

> Is there another advantage from OpenBSD point of view to choose one
> brand over another.

ECC RAM is not usually on desktop CPUs. OpenBSD runs fine regardless of
brand. The preferred choice depends mostly on the age (release year) of
the CPU and main board.

> I know about ATI drivers, but I'm not aware about
> cpu business.

The newer CPUs will have more main boards supporting them and
replacements for add-on cards over time.
 
> If it helps, one example can be used for cpu, AMD Athlon II X4 B26 vs.
> Intel Core 2 Duo E8400.

You could try with newer CPUs (lithography process) in the same price
range for thermal and performance efficiency.



hardware to run OpenBSD - choose between Intel and AMD

2015-07-18 Thread Mihai Popescu
Hello,

When it comes to choose a platform for OpenBSD from almost the same
performance range, what is better to take: AMD cpu + ATI video or
Intel cpu + GMA video?
I've read the misc and some people are biased towards AMD, if I'm not mistaken.
Is there another advantage from OpenBSD point of view to choose one
brand over another. I know about ATI drivers, but I'm not aware about
cpu business.

If it helps, one example can be used for cpu, AMD Athlon II X4 B26 vs.
Intel Core 2 Duo E8400.

Thank you for your time.



Re: 'ldap_bind: Operations error (1)' with ldapd-5.6

2015-07-18 Thread Olivier Mehani
Hey Matthew,

On 2015-07-14, Matthew Weigel  wrote:
>> Did anybody encounter the same issue? Is there a known cause? How could 
>> this be
>> solved?
> I'm running 5.6 and using ldapd without issue.  Can you clarify how your 
> test user is authenticated (BSD Auth?  A crypt hash in the userPassword 
> attribute?)?

My root user is authenticated with BSDAUTH. The rest of the users with
an md5crypt in the userPassword. This works with the version from 5.5
with a range of applications (ownCloud, Wordpress, PHPLDAPAdmin, ...).

-- 
Olivier Mehani 
PGP fingerprint: 4435 CF6A 7C8D DD9B E2DE  F5F9 F012 A6E2 98C6 6655
Confidentiality cannot be guaranteed on emails sent or received unencrypted.