Re: nmea/udcf recommendation

2021-08-02 Thread Brian Empson
Sounds like a good  driver to learn from for driver dev stuff.

On 8/2/2021 6:11 PM, Christian Weisgerber wrote:
> Jan Stary:
>
>> playing with ntpd a bit, I am looking for a working
>> nmea or udcf sensor. Can people please recommend
>> an easy to use device known to work?
> The Gude mouseCLOCKs were discontinued years ago, so I don't think
> you could buy any udcf(4) hardware even if you wanted to, and udcf
> is literally the most stupid device possible.  Don't believe me?
> The hardware supplies a single bit of information that needs to be
> polled for changes.  In practice, it is read by the kernel at HZ
> (= 100 on most archs) times per second, limiting the precision
> correspondingly.  From ntpd's point of view, a udcf sensor will
> frequently jump back and forth by 10 ms.  ntpd's frequency correction
> is effectively a differentiator, which is not very happy with jumps.
> I mean, you can keep time with it, but it's just poor compared to
> the ~1 ms precision you get from public NTP servers on the Internet.
>
> I don't have any practical experience with nmea(4), but I'd like
> to draw attention to ldattach(8)'s -t option.  Unless your receiver
> offers a pulse per second signal, you are limited to a very jittery
> timestamp from the serial telegram, mirroring udcf's fundamental
> problem.  The last time I looked--admittedly it's been a few years--
> if you wanted to have a PPS on a serial port, you had to get some
> industrial GPS module and do your own soldering.  And you can't do
> it over USB.  Also, GPS doesn't work well indoors and mounting a
> roof antenna presumably does not qualify as "easy to use".
>
> Basically, OpenBSD does not support any useful sensor devices unless
> you are desperate and need to keep time in a remote mountain cabin
> without Internet access.
>



udp sendto performance

2021-07-05 Thread Brian Empson
Hello,

I'm writing an snmp poller and I can't seem to get past around 60k hosts
(1 packet per host) in 2 seconds with sendto(). I'm using kqueue() and
batching the packets as the socket becomes ready for writes (it's always
ready as far as I can tell from debugging). I've done some profiling and
the application is waiting for sendto() for the majority of the
execution time. I've set the socket to non-blocking and it never
indicates that it would have blocked. All of the writes are
single-threaded using kqueue().

My question is, is there a way to squeeze more performance out of this?
I'm running 6.5, is there any significant performance improvements in
the newer versions of OpenBSD that would improve sendto()'s performance?
My biggest question would be where can I learn more to debug this myself
so I don't have to bug the mailing list?

Thanks to anyone who can point me in the right direction,

Brian



TTY Count

2021-06-18 Thread Brian Empson
What is the proper way to increase the number of TTYs available on the 
system? I have alot of users logged in on a machine and we run out of 
TTYs every once in awhile.


Thanks,

Brian




More than 200 users in a group

2019-09-11 Thread Brian Empson
I ran into a problem where I can only have 200 users per group. I was
thinking about changing the static buffer size in the libc code, is
there another way to get past the users per group limit?


Thank you,

Brian



Re: YP Alternative

2015-01-03 Thread Brian Empson
This sounds interesting. What would you replace krb5 with, if you don't 
mind me asking? I was contemplating krb5, but the setup and such is a 
pain for me (because I am not familiar with it). I'll probably wind up 
rolling something custom with LDAP and YP mappings thrown in.


On 1/4/2015 2:26 AM, David Gwynne wrote:

On 2 Jan 2015, at 9:52 pm, Brian Empson br...@teamhandbanana.com wrote:

I'm looking into a way to sync up group and user information across a network 
of OpenBSD machines. I like YP, except that I don't need the password hashes 
transferred across the network. I like that it's built right into the base 
install, are there better ways to handle synchronizing login details across 
multiple machines that is built into the base install? Preferably written by 
the OpenBSD team, too?

while not directly answering your question, i can say openbsd can do this kind 
of stuff without yp on the wire.

at work i use ypldap to get user/group information from active directory. we 
populate the rfc2307 attributes on our users and groups to make them useful on 
unix systems. we use the single directory as a name service backend for 
openbsd, solaris, linux, and windows (of course).

we're still using krb5 for password authentication. i really have to fix that.

we've also augmented the AD schema to store users ssh keys in the directory 
too. sshd gets access to them via AuthorizedKeysCommand and a perl script. this 
allows ssh key based single sign on across all our unixish systems, even if 
their home directories are not available on the system. this is useful for 
providing services over ssh. an example of such a service we provide is svn and 
git on a dedicated server. all our users are on the system via ypldap, and they 
can auth using their own username and either a password or ssh key.

dlg




YP Alternative

2015-01-02 Thread Brian Empson
I'm looking into a way to sync up group and user information across a 
network of OpenBSD machines. I like YP, except that I don't need the 
password hashes transferred across the network. I like that it's built 
right into the base install, are there better ways to handle 
synchronizing login details across multiple machines that is built into 
the base install? Preferably written by the OpenBSD team, too?


Thanks,
Brian



Re: YP Alternative

2015-01-02 Thread Brian Empson

Thanks for all the ideas. It's given me avenues for testing.

On 1/2/2015 5:32 PM, Craig Skinner wrote:

On 2015-01-02 Fri 14:02 PM |, Christopher Barry wrote:

I can't speak to ksh being 'better', but it may well be.

Aye, not subject to bash's many security problems, such as #ShellShock 
#BashBug that brought loonix to it's knees a couple of months ago.

Who wants to be patching boxes at work at weekends when there's more
important fun to be had;-
Edinburgh FolkSoc Ceilidh Band: Military Two-Step
http://www.youtube.com/watch?v=DNVLDOwxVx4feature=related


I have 20 years experience with bash, so I default to it.



Cool Christopher. The smart men on @tech keep ksh slick, so for
scripters there's not much difference. Have a go.



If I was going to craft something today to solve this problem,
I think I would probably use rsync over shh though, and not scp.


Like ksh, rdist is in base, (unlike either bash or rsync),
and uses ssh by default.

A root cronjob like this might be all that is needed:
@hourly rdist -f /root/rdist.yp


Then it's off to a castle for more flinging of fit Scottish lassies:
http://www.youtube.com/watch?v=gBCayM6aFJQfeature=related




Re: OT:Password strength

2014-11-29 Thread Brian Empson

The latter, I would bet.

On 11/29/2014 10:07 PM, Eric Furman wrote:

OFF TOPIC. This has nothing to do with OpenBSD,
but a lot of guys here know about this stuff.
I've done some reading, but still not sure.
OK, at the risk of looking stupid,which of these passwords is better;
kMH65?3
or
mylittlelambjumpedovertenredbarns




Re: Android Studio

2014-09-26 Thread Brian Empson
Basic phones are distracting enough as it is, more so with all the 
widgets. I agree: call, sms. That's all I'd need anyway. It seems that 
the more we march forward the more we take for granted tech wise. We 
have processors that go into the Ghz range but it still feels sluggish. 
I guess I like OpenBSD for that reason, it feels like it's not bloated 
and everything is integrated better than other OSes.


On 9/27/2014 1:11 AM, Jay Patel wrote:

We should have our own Phone OS. :D :) just like Nokia 3310 series. I
  would like that .

just call , sms, and alarm.

I make living making android apps also but i hope SDK don't come to OpenBSD.

On Wed, Sep 24, 2014 at 2:52 PM, Kevin Chadwick ma1l1i...@yahoo.co.uk
wrote:


http://marc.info/?l=openbsd-miscm=132934643309355w=2

That thread mentions getting the Android emulator running and creating
a hello world program on OpenBSD but I think required? linux emulation
and so i386 and copying from a linux install.

A recent Intellij is in ports which Android Studio Beta is based on and
whilst I hope Gnome/KDE requirments for Linux are mis-prints and not on
the OSX version maybe there's a chance it will work without Linux
emulation like netbeans does compared to the pain of recompiling
eclipse.




Heimdal base system configuration

2012-10-26 Thread Brian Empson
Hello,

I'm trying to recompile heimdal with LDAP support, what are the config options 
used on the install for the base system version? I'm running OpenBSD current on 
i386. What I'm looking to do is install everything as it was on the base 
system, but with LDAP enabled.

Thanks,
Brian



Re: OpenBSD rocks

2012-10-14 Thread Brian Empson
I have two LDAP boxes running in multi-master configuration (I had to recompile 
it to get ACIs, wish that was a package option) for the root of the directory 
tree, it holds user/access information as well as the kerberos database, and 
network topology and state information (what mac is connected to what, 
interface names and descriptions, mapping rules) and documentation. There are 
two other BSD boxes that serve as collectors/pollers with collectd for servers 
and my own SNMP poller that stores volatile information (interface utilization 
every X minutes, etc) in an SQL database and not-so-volatile information in the 
LDAP tree. All of this is stored on an ATA over Ethernet box that the root and 
collector/poller boxes mount over le network. Then this setup is replicated in 
various network segments (LDAP partitioning, separate SQL databases) and merged 
periodically to give a consistent picture of what the network is doing. I have 
some cheap $400 supermicro 1U
 boxes that take care of everything, it works out nicely when you spread the 
load out on multiple servers. Then it's all backed up periodically with a 
custom version of git to create diff'd snapshots of the entire system 
(excluding database information, which is backed up separately). Then I manage 
it using a QT frontend that I wrote to control all the various subsystems in a 
more user friendly way, so maintaining a changing network is easy, no more 
loose scripts everywhere.

Whew, what a project, but worth it.
Thanks,
Brian




 From: Tomas Bodzar tomas.bod...@gmail.com
To: Brian Empson brian_emp...@yahoo.com 
Cc: misc@openbsd.org misc@openbsd.org 
Sent: Sunday, October 14, 2012 2:52 AM
Subject: Re: OpenBSD rocks
 
On Sat, Oct 13, 2012 at 10:02 PM, Brian Empson brian_emp...@yahoo.com
wrote:
 Hello all,

 I've been trying out different BSDs and Linux distros over the past few
weeks for a project, and hands down I like OpenBSD the best. I can't believe
I'd never tried it before, I like the lack of bloat that you basically have to
live with in a Linux system. Less problems getting it installed too.

Would you mind to share for which project you want to use OpenBSD?
It's always good to know real world examples :-)


 Nice job OpenBSD team! Keep up the awesome job!

 Brian



Heimdal

2012-10-14 Thread Brian Empson
Hello,

What configure flags did the dev team use to compile heimdal as is included in 
the base system? Newer versions don't seem to compile cleanly and I was going 
to try to submit a patch to get the version a bit more up to date. Were there 
any patches that had to be applied beforehand with the 0.7.2 version? (The 
included version)

Thanks,
Brian



Heimdal 1.4 Patch

2012-10-14 Thread Brian Empson
All,

I have created a patch for heimdal 1.4 
(http://www.h5l.org/dist/src/heimdal-1.4.tar.gz) that will allow it to compile 
properly. I know it's not the newest version, but it's at least somewhat newer. 
I'm still working on the latest version.

To apply:

-cd to the untar'd source directory
-run patch -p1  heimdal-1.4.patch
-./configure
-make

Thanks,
Brian

[demime 1.01d removed an attachment of type application/octet-stream which had 
a name of heimdal-1.4.patch]



Re: Heimdal 1.4 Patch

2012-10-14 Thread Brian Empson
Apologies,

I'll just paste the patch file here:

diff -rupN
heimdal-1.4/lib/otp/version-script.map
heimdal-1.4-patched/lib/otp/version-script.map
+++
heimdal-1.4-patched/lib/otp/version-script.map  Sun Oct 14 22:43:25 2012
@@ -0,0 +1,25 @@
+HEIMDAL_OTP_1.0 {
+   global:
+  
otp_challenge;
+   otp_checksum;
+   otp_db_close;
+   otp_db_open;
+   otp_delete;
+  
otp_error;
+   otp_get;
+   otp_parse;
+  
otp_parse_altdict;
+   otp_parse_hex;
+  
otp_parse_stddict;
+   otp_print_hex;
+  
otp_print_hex_extended;
+   otp_print_stddict;
+  
otp_print_stddict_extended;
+   otp_put;
+  
otp_simple_get;
+   otp_verify_user;
+  
otp_verify_user_1;
+   otp_find_alg;
+   local:
+   *;
+};




 From: Brian Empson
brian_emp...@yahoo.com
To: misc@openbsd.org misc@openbsd.org 
Sent:
Sunday, October 14, 2012 11:20 PM
Subject: Heimdal 1.4 Patch
 
All,

I have
created a patch for heimdal 1.4
(http://www.h5l.org/dist/src/heimdal-1.4.tar.gz) that will allow it to compile
properly. I know it's not the newest version, but it's at least somewhat
newer. I'm still working on the latest version.

To apply:

-cd to the untar'd
source directory
-run patch -p1  heimdal-1.4.patch
-./configure
-make
Thanks,
Brian

[demime 1.01d removed an attachment of type
application/octet-stream which had a name of heimdal-1.4.patch]



OpenBSD rocks

2012-10-13 Thread Brian Empson
Hello all,

I've been trying out different BSDs and Linux distros over the past few weeks 
for a project, and hands down I like OpenBSD the best. I can't believe I'd 
never tried it before, I like the lack of bloat that you basically have to live 
with in a Linux system. Less problems getting it installed too.

Nice job OpenBSD team! Keep up the awesome job!

Brian



Re: SSI

2012-09-28 Thread Brian Empson
Wow

This mailing list is crazy





 From: noah pugsley noah.pugs...@gmail.com
To: Russell Garrison russell.garri...@gmail.com 
Cc: misc@openbsd.org 
Sent: Friday, September 28, 2012 2:03 PM
Subject: Re: SSI
 
Before Al Gore invented the internet he invented the Super-Serial
Interface.

On Fri, Sep 28, 2012 at 10:50 AM, Russell Garrison 
russell.garri...@gmail.com wrote:

 I initially thought this thread was about Social Security Insurance,
 but instead it is about something like SGI UV.



SSI

2012-09-27 Thread Brian Empson
Hello OpenBSD world,

Has there been/are there plan to include some SSI functionality for BSD? I've 
looked into Linux for this and the problem stems from the fact that the kernel 
has to be patched with the code to perform this functionality. The linux 
kernel, being a separate entity from the rest of the system, makes it difficult 
to keep an SSI system up to date kernel wise. BSD seems to develop the kernel 
and utilities as one, lending itself to easier integration of these features, 
perhaps? I'd be willing to donate money to the project to see functionality 
like this implemented! Thoughts? Is there anyone I can speak to about funding a 
sub project for OpenBSD SSI? Or is it not even being considered?

Thanks,
Brian



Re: SSI

2012-09-27 Thread Brian Empson
The SSI I'm talking about would be defined as making multiple separate
machines appear as one single system with one single process space, a shared
root filesystem, and shared virtual IP. Shared memory doesn't seem that
important, except for maybe moving a process from one machine to another.
Thanks,
Brian





 From: Otto Moerbeek
o...@drijf.net
To: Brian Empson brian_emp...@yahoo.com 
Cc:
misc@openbsd.org misc@openbsd.org 
Sent: Thursday, September 27, 2012 4:38
PM
Subject: Re: SSI
 
On Thu, Sep 27, 2012 at 01:04:23PM -0700, Brian Empson
wrote:

 Hello OpenBSD world,
 
 Has there been/are there plan to include
some SSI functionality for BSD? I've looked into Linux for this and the
problem stems from the fact that the kernel has to be patched with the code to
perform this functionality. The linux kernel, being a separate entity from the
rest of the system, makes it difficult to keep an SSI system up to date kernel
wise. BSD seems to develop the kernel and utilities as one, lending itself to
easier integration of these features, perhaps? I'd be willing to donate money
to the project to see functionality like this implemented! Thoughts? Is there
anyone I can speak to about funding a sub project for OpenBSD SSI? Or is it
not even being considered?
 
 Thanks,
 Brian

For starters, what is SSI? As
many TLAs go, it can mean multiple
things. I won't try to guess what you want.
    -Otto