Re: Widescreen flat panel

2007-04-04 Thread Damian Wiest
On Mon, Apr 02, 2007 at 06:33:25PM +0200, Eric Dillenseger wrote:
 On Sun, Apr 01, 2007 at 10:44:46AM -0700, J.C. Roberts wrote:
  On Sunday 01 April 2007 09:22, Srebrenko Sehic wrote:
   On 3/31/07, Eric Dillenseger [EMAIL PROTECTED] wrote:
I tried different ModeLine generators from the net, and tried to do
it myself using Xorg' logfile. Not helping me out.
  
   I have a Dell 20 inch monitor and it works fine with it's native
   1680x1050. I had to tweak the Modeline manually but eventually got it
   to work. On a oldish S3 card though. But it just might work for you
   too.
  
   Section Monitor
  
   Identifier   Monitor0
   VendorName   DEL
   ModelNameDELL 2007WFP
   #HorizSync30.0 - 83.0
   #VertRefresh  56.0 - 76.0
   Option  DPMS
  
   ModeLine[EMAIL PROTECTED] 119.0 1680 1728 1760 1840 1050
   1053 1059 1080 -HSync +VSync
   EndSection
  
  Monitor timing/sync is hardware specific and in some cases, if you get 
  it wrong, you can do permanent damage to your monitor.
  
  Use gtf(1) to probe your hardware to figure out timings/sync for your 
  desired resolution/refresh, and then do a sanity check of the reported 
  values against the hardware documentation.
  
 
 Hi,
 
 Now I have it working with the right resolution, but I can't go over
 16bit colors. My photos don't look very good but at least it works for
 most common tasks. Or perhaps it isn't even 16, anyway.
 I'm wondering why X doesn't handle 24 bit, even with videoram defined.
 
 -- 
 Linux is for Windows(c) haters while BSD is for UNIX lovers.
 http://teardrop.free.fr/

I'm using a Dell 2405FPW with an on-board Intel 82915G/P/GV graphic 
adapter under OpenBSD 3.9 without issue.

Newer displays will automatically report their capabilities; have you 
tried running X without a config file?  

-Damian



Re: Sendmail Issue

2007-02-05 Thread Damian Wiest
On Mon, Feb 05, 2007 at 02:07:02PM -0200, Giancarlo Razzolini wrote:
 Hi all,
 
   I'm having some trouble with sendmail. My problem is the following: i
 do have many firewalls in many places and would like to receive all the
 daily/weekly/monthly reports in my e-mail. All the machines have their
 fqdn hostnames as frw.domain.com. And most of then have dynamic ip. When
 i issue a mail command from any of then and try to send an e-mail to me,
 my MTA reject the message because of the sender domain, which sendmail
 send as frw.domain.com. I tried changing the SMART_HOST and the
 DOMAIN_NAME directives in sendmail, to relay the e-mail to my MTA and to
 send another domain, not the frw.domain.com, respectively. But neither
 of them worked. I would like to have another solution than configuring
 my MTA to accept mail from those domains. I would like to have the
 domain rewrited to domain.com not frw.domain.com. Any ideias?
 
 My regards,
 --
 Giancarlo Razzolini
 Linux User 172199
 Red Hat Certified Engineer no:804006389722501
 Moleque Sem Conteudo Numero #002
 Slackware Current
 OpenBSD Stable
 Ubuntu 6.10 Edgy Eft
 Snike Tecnologia em Informatica
 4386 2A6F FFD4 4D5F 5842  6EA0 7ABE BBAB 9C0E 6B85

It's been awhile since I've configured sendmail on OpenBSD,
so I'm hoping I didn't botch the procedure too badly.

Read the Masquerading and Relaying section from 
/usr/share/sendmail/README,

You'll most likely want to use the following features on your external 
systems:

FEATURE(`MASQUERADE_AS', `domain.com')
FEATURE(`MASQUERADE_ENVELOPE')

...and this on your main server:

FEATURE(`access_db', `hash -TTMPF /etc/mail/access_map')

I see two problems with your desired configuration.  All of the
messages from your remote systems are going to appear to be from
senders like [EMAIL PROTECTED], and you're not going to be able to tell
which machine really sent the message unless you read the headers.
Secondly, since some of your machines are on dynamic IP addresses 
you're going to have to keep updating the access map.  You could just
not use it, but then you can be spammed from remote systems that claim 
to be sending mail from domain.com.

-Damian



Re: install image to computer

2007-01-26 Thread Damian Wiest
On Fri, Jan 26, 2007 at 03:53:48PM -0500, Steve Shockley wrote:
 smith wrote:
 Why?:
 
 I've received a few new computers that I have to configure.
 
 http://www.openbsd.org/faq/faq4.html#Multiple

Disk imaging

Unfortunately, there are no known disk imaging packages which are 
FFS-aware and can make an image containing only the active file space. 
Most of the major disk imaging solutions will treat an OpenBSD partition 
as a generic partition, and can make an image of the whole disk. This 
often accomplishes your goal, but usually with huge amounts of wasted 
space -- an empty, 10G /home partition will require 10G of space in the 
image, even if there isn't a single file in it. While you can typically 
install a drive image to a larger drive, you would not be able to 
directly use the extra space, and you would not be able to install an 
image to a smaller drive.

---

I don't believe that section is entirely correct, frisbee includes 
both filesystem aware as well as filesystem naive compression algorithms 
to be used when creating disk images.  Frisbee can also do installs via 
multicast and the paper referenced below includes data showing that 
install times remain pretty much constant no matter how many systems are 
being setup at once.  Emulab (emulab.com) can push images to hundreds 
of their machines in under two minutes.

I must admit that I have yet to use frisbee myself.  I'm cloning disks
at this very minute, but due to time constraints have had to use our
existing solution (Acronis).  We're having problems due to lack of nic
driver support with newer systems, but I expect to be able to create a
BSD boot disc with the needed drivers along with the frisbee client in 
the near future.

Another method that might work for you is to get one machine setup and
then mirror the boot drive.  You may then be able to detach a sub-mirror
and move it to a different system.

-Damian

[1] http://www.cs.utah.edu/flux/papers/frisbee-usenix03-base.html



Re: IBM ServeRAID

2007-01-22 Thread Damian Wiest
On Mon, Jan 22, 2007 at 08:57:58PM -0500, Nick Holland wrote:
 Peter Matulis wrote:
  Hi.  I would like to install OpenBSD 4.0 on an IBM eServer (xSeries 220) 
  that contains a ServeRAID SCSI controller.  I see that in OpenBSD 
  Current a driver has been added (ips).  Does that mean I cannot install 
  OpenBSD 4.0 and have access to the controller on this machine?  Any 
  comments welcome.
  
  Thanks in advance,
  
  Peter
 
 yep.
 New drivers are never back-ported.
 
 See FAQ 5 for more info on the OpenBSD development process...
 
 Keep in mind: whatever your hesitation is about installing -current on
 your machine is pretty completely negated by the fact that 4.0 won't
 work.  (though, admittedly, you can't beat the stability and security
 of a non-functioning system. :)
 
 Nick.

I'm guessing that it's not worth the time and potential problems of 
attempting to recompile a 4.0 kernel with the new driver or just running
a current kernel with an old userland?

-Damian



Re: reading sensor RS-232/485 output

2007-01-18 Thread Damian Wiest
On Thu, Jan 11, 2007 at 10:23:31PM -0800, J.C. Roberts wrote:

[snip]

 Since I'm probably the worst person you could ask, hopefully one of the 
 many shell scripting gods inhabiting this mailing list will chime in on 
 how do useful work in shell scripts with serial.

I've typically used kermit (C-Kermit) for this sort of thing.  The man
page includes some examples of kermit based shell scripts.

You could also probably put something together with tip/cu and Expect 
(or Tcl).

[snip]

-Damian



Re: Which tools the OpenBSD developers are using?

2006-11-29 Thread Damian Wiest
On Tue, Nov 28, 2006 at 02:48:27PM -0600, Alvaro Mantilla Gimenez wrote:
 Hi OpenBSD developers,
 
 
   Which are your preferred tools for develop? (For C, C++, Java, 
 etcno matter the language)
 
   It is good to know which tools and why...
 
 
   Thanks,
 
 
   Alvaro

I'm assuming you mean software tools and not hardware (just got a Dell 
2405FPW that I'm lovin').

Here's a typical list in no particular order:

1)  visual editor -- ed, vi, emacs
2)  revision control system -- RCS, CVS, Subversion
3)  portability tools -- autotools (autoconf, automake, libtool)
4)  build system -- make, gmake, bmake
5)  packaging system -- pkgsrc, Open and FreeBSD ports systems
6)  debugger -- ddb, gdb
7)  decompiler -- jad (for fixing Java bytecode)
8)  bug tracking/feature request system -- gnats, bugzilla
9)  team collaboration tools -- email, IRC 
10) typesetting tools -- teTeX
11) Web browser -- lynx, w3m, Mozilla

Apologies to the list for the lack of snide comments.

-Damian

ps. Two items regarding the AK47.  I've heard that the majority of these 
are being produced illegally (manufacturer didn't get the required 
license from the Soviet inventor) and that, besides the gun barrel, most 
parts can be stamped out of sheet metal instead of having to be machined.



Re: Problem with Intel PRO/1000GT (82541GI) adaptors

2006-11-17 Thread Damian Wiest
On Wed, Nov 15, 2006 at 09:25:38AM -0800, Kian Mohageri wrote:
 On 11/14/06, Brian Keefer [EMAIL PROTECTED] wrote:
 
 
  FWIW I was having very similar problems with em(4) in OpenBSD 4.0-
  release under VMware (amd64 SMP).  It would cease to recognize ARP
  replies and just flood the network with ARP requests endlessly.  It
  was enough to bring VMware to it's knees and totally swamp my cheap
  switch.
 
 
 The same card too?
 
 -- 
 Kian Mohageri

I'm pretty sure it was the same card, but my info was second-hand and I
don't have a part number for you in the event that Intel is now using a
different revision of the chipset.  Have you tried using a more recent 
version of the em(4) driver?

-Damian



Re: java on openbsd

2006-11-17 Thread Damian Wiest
On Wed, Nov 15, 2006 at 11:31:21AM +0800, Lars Hansson wrote:
 On Tue, 14 Nov 2006 10:53:54 -0500
 Josh Grosse [EMAIL PROTECTED] wrote:
 
  Per FAQ 8.3, Java 1.5 or 1.4 must be built from source.  An overnight 
  download  have an
  of the files should not be a huge problem, considering how much time, 
  computing, memory, and storage resource is needed to build it.
 
 Except that you need to navigate the Sun download pages mess, click thru
 license agreements and have an account (I think). Then you need to
 install X number of Linux JDK's, wich pulls in all the Linux emulation
 packages and then you have to actually compile it and hope you enough
 disk and ram. Wouldnt it be possible for someone other then the OpenBSD
 project to legally share their built packages?
 
 ---
 Lars Hansson

I don't suppose it's possible to enable Solaris emulation and just rip 
the necessary bits from their x86 Java packages?

-Damian



Re: java on openbsd

2006-11-17 Thread Damian Wiest
On Tue, Nov 14, 2006 at 11:27:36PM +0100, Matthias Kilian wrote:

[snip]

 It does not run on arm/OpenBSD. It does not run on powerpc/OpenBSD.
 It does not run on vax/OpenBSD. Heck, it even behaves differently
 in on i386/Linux, i386/Windows, sparc/Solaris and pSeries/Linux,
 and to this platform diversity the vendor diversity (Sun vs. IBM)
 yet adds more subtile differences, especially if it comes to threads
 or GC behaviour.
 
 Believe it or not: Java is *not* platform independent, at least not
 in so-called enterprise environments.

[snip]

 Ciao,
   Kili, making a life with Java since about 1998.

Java, the language, is an open specification that can be implemented by
anyone.  Java, the brand, requires the implementor to license Sun's
test suite (for like $10,000 if memory serves me) and pass the tests
in order to use their logos, etc.  The Java Virtual Machine is also an
open specification that can be implemented by anyone.  Not every part
of the system is defined and various implementors have done certain 
things differently.  Also, the JVM must run on top of an operating 
system, so bugs in the OS may impact its performance.  The bytecode 
should be portable assuming that the JVM works as advertised.

I agree that Sun makes it a pain in the ass for people not running 
certain operating systems to use their Java tools.  Whatever.  Either 
deal with it, don't use it, work on one of the non-commercial JVMs or 
use a different OS for your Java environment.  That being said, I've 
run Blackdown's JVM and class libraries for Java2 rev. 1.4.X on BSD 
without issue.  Actually, that's not true I did run into some issues
with cryptographic classes (license validation), but it was easy enough 
to work around that problem.

Java may make certain classes of applications extremely easy to develop,
but it's not going to replace something like C.  Indeed, some Java 
classes in the standard class library require callouts to C routines via 
JNI.  Also, remember that Java was initially called Oak and was 
targetting the embedded space.  I'm not surprised there have been issues
in the non-embedded space.

http://ei.cs.vt.edu/book/chap1/java_hist.html

-Damian



Re: AMD dual core, deciding factors for a platform?

2006-11-17 Thread Damian Wiest
On Thu, Nov 16, 2006 at 07:56:03PM +0200, turha turha wrote:
 I haven't got the final specs yet, probably a MoBo with a nVidia chipset,
 since those are the only ones I've seen with enough SATA controller, I'd
 prefe eight, but so far all I've found has been six.

If you like working devices I'd advise against buying a system board 
with an nVidia chipset.  I picked up an Asus K8N-E some time ago, but 
my on-board audio, gig ethernet, video and some other miscellaneous 
devices didn't work under OpenBSD 3.8.  I have yet to try a current 
release; maybe this weekend.

 Was the problems with seagates OBSD related, or general to the HDDs? I've
 had nothing but good experience with seagates so far, quiet, fast and cheap.
 The newest I have is in 24/7 use, and has been for the past year or so...

ISTR there being some bad runs of Seagate drives a few years ago, maybe that
was the problem?  I have a small Seagate drive from maybe 2000 that's worked
without issue.  I've been buying Maxtor SATA drives these days.

 The first thing I'd need to know is there any real gain from dual core's on
 OBSD (I think they do work, but how well?), if there's a real performance
 gain using dual cores then I'm probably going with dual cores and need to
 find out if there are some chipsets that work better, or more importantly if
 there are chipsets that don't work at all. Also I'd like to know if there's
 improvement on amd's 64bit vs 32bit.

I think this is really going to depend on your application.  If none of 
your processes are threaded, you're probably not going to see a big 
performance gain by going multi-proc.  Likewise, a 64-bit CPU will give
you more memory bandwidth, but if you're not using it what's the point?
If you use any binary device drivers, you'll want to check that they're
available for your specific platform.

 And of course if there's some knowledge about running software RAID (SATA)
 on OBSD, how much it takes CPU, what kinda speeds people have gotten with
 it, etc.
 
 Btw, better to keep these thru the misc mailing list, in case somebody else
 needs similar info.
 
 - turha

-Damian



Re: Problem with Intel PRO/1000GT (82541GI) adaptors

2006-11-14 Thread Damian Wiest
On Mon, Nov 13, 2006 at 03:03:55PM -0800, Joe wrote:
 I have 2 of these adaptors
 Intel PRO/1000GT (82541GI) rev 0x05
 
 The 82541GI chipset is supported by em(4).
 
 Every day, the box drops of the network. The interfaces show 
 themselves as active, but I can't ping, arp, or sniff any traffic. A 
 reboot solves the problem. Is anyone else having this problem?
 
 For now, I had to remove the NICs because the box is a firewall and goes 
 down at random times throughout the day. I didn't notice any particular 
 traffic patterns.

We've encountered similar problems in the past with that chip.  I 
believe we resolved the issue by using a newer driver, but this was not 
under OpenBSD.

Can you try a more recent version of the em(4) driver?  Some commits 
were made very recently.

-Damian



Re: OpenBSD hoodies

2006-11-13 Thread Damian Wiest
On Sat, Nov 11, 2006 at 12:25:10PM -0600, Sam Fourman Jr. wrote:
 that is VERY Cool, you did a Great job on that
 
 Someone should do a Puffy one :)
 
 Sam Fourman Jr.
 
 On 11/11/06, Jeroen Massar [EMAIL PROTECTED] wrote:
 Damian Wiest wrote:
 [..]
  I'm hoping I won't get scolded for mentioning this: http://bsd.ee/~olev/
 
 If you spend 770+ hours on that, I don't think anybody will even try to
 make an argument with you ;) Looks really cool!
 
 Greets,
  Jeroen

For the record neither I, nor my mother, made that blanket.

-Damian



Re: layout of filesystems on OpenBSD

2006-11-10 Thread Damian Wiest
On Fri, Nov 10, 2006 at 05:55:27PM +0100, Igor Sobrado wrote:
 Hello.

[snip]

   2. Are the sizes of the filesystems right ones?  I am thinking on
 
- /var (on the installation booklet provided with the OS
it is recommended a size of 200 MB for this filesystem,
I *never* found a /var filesystem larger than 10-20 MB).
Can it really be so large?

Don't some of the database ports install into /var?  It seems to me
that you're not running one, so it's probably not an issue.  I've made
the mistake before of only allocating a gigabyte of space to /var and
then had someone install a database that eats up close to 80% of that.
Needless to say, that can cause some problems if users aren't paying
attention and fill the filesystem (ISTR some database ports keeping
log files in the same filesystem as the data files by default).

If you have any applications writing logs to /var, you may want to take
a look at how much data they're writing in a given amount of time.
I've seen systems where /var is large enough most of the time, but
as soon as someone turns on the debugging flags for an application,
/var is filled extremely quickly.

Also, savecore will write crash dumps to /var/core by default, so you'll 
need to allocate at least as much space as you have RAM if you want to 
capture that information.

[snip]

- /usr/ports (is 512 MB enough for it?)  I usually stay
at binary packages, but sometimes I need to build software
from source and would like to know the recommended space
for this filesystem.

I'm most likely doing something improperly, but if you're not careful
about cleaning up after yourself, you can easily leave object files 
lying around in /usr/ports and run out of space during a large build.

I don't separate out /usr/ports, but I typically allocate at least 10 
gigabytes to /usr.  Then again, that's for a workstation with a lot
of dev. tools installed.

[snip]

   3. Any though about the filesystem layout?  I know that it is
  certainly complex, but worked nicely for me in the last years.
  All these filesystems (except /var/tmp) are recommended in
  the documentation and, as I said, I do not remember any of
  these filesystem growing up to 60% in either space or inodes
  usage in the last years... but I never did a full rebuild
  of the operating system nor installed large packages from
  source code (mwm is soo nice, and it comes in the official
  CD-ROMs!)

It seems to me that you have a relatively large number of filesystems 
present.  This may cause you problems in the future if you're using
that as a standard layout in a heterogeneous environment.  I typically
create only five filesystems: /, /usr, /var, /home and /tmp.

 ...I do not need a large /usr/local either.  I just install mwm,
 firefox, nmh and a LaTeX distribution.  Most utilities I need come
 with the operating system (nearly all, and for making figures I like
 MetaPost that comes with the LaTeX distribution.)  No problem at all
 with these filesystems: its size is highly site dependent, but very
 easy to work out for me.  As I said, I usually do not install third
 party applications.
 
 Thanks a lot for reading this post.
 
 Igor.

I've had the misfortune of running AIX for a short time and am aware of
how Veritas Volume Manager encapsulates disks, but what's the
equivalent in OpenBSD?  One benefit of those systems is that they allow
you to resize filesystems on the fly, which is helpful if you're not
sure how much space you're going to need.  I sometimes end up performing
two installs.  The first one lets me see how much space the OS 
distribution is likely to occupy and I then use those numbers when I redo 
the install.

HTH.

-Damian



Re: OpenBSD hoodies

2006-11-10 Thread Damian Wiest
On Fri, Nov 10, 2006 at 10:17:09AM -0600, Sam Fourman Jr. wrote:
 ok I would REALLY like a hoodie, but a Sweater would be even better,
 even if the price tag was some $65 i would still buy it.
 
 Sam Fourman Jr.
 
 On 11/10/06, Radu-Cristian FOTESCU [EMAIL PROTECTED] wrote:
  https://kd85.com/notforsale.html
 
 Any place to see pics with items like: sweater, fleece, badge, t-shirt?
 
 Also, for people who have bought from CafePress and the like: it's 
 important
 to know what means XL, XXL, or any size for the particular maker used, as
 they usually vary.
 
 Thx,
 B#233;ranger
 Tired of spam?  Yahoo! Mail has the best spam protection around
 http://mail.yahoo.com

I'm hoping I won't get scolded for mentioning this: http://bsd.ee/~olev/

-Damian



Porting GEOM

2006-11-09 Thread Damian Wiest
Has anyone attempted to port GEOM from FreeBSD to OpenBSD?  I'm inclined 
to try my hand at it, but I thought I'd check to see if anyone else was
working on it.

-Damian



ifconfig and authmode

2006-11-07 Thread Damian Wiest
Can the authentication mode for an 802.11 wireless connection be 
configured using ifconfig?  I'd like to be able to configure my
cards without having to use a driver-specific utility.

I haven't yet installed 4.0, but I saw this entry from the What's New
document:

spppcontrol(8) and wicontrol(8) functionality has been merged into 
ifconfig(8).

Does this change address the authmode issue?  I didn't see anything
mentioned in the current manpage for ifconfig (rev. 1.135).

Thanks!

-Damian



Re: spamd

2006-11-07 Thread Damian Wiest
On Tue, Nov 07, 2006 at 08:47:27AM -0700, Bob Beck wrote:
   No, not yet. see http://www.ualberta.ca/~beck/nycbug06/spamd/
 
 * edgarz [EMAIL PROTECTED] [2006-11-07 01:54]:
  Hi misc!
  
  Is it possible to keep in sync two or more spamdb over the network? :)
  
  Thanks.
  Edgars.
  
 
 -- 
 #!/usr/bin/perl
 if ((not 0  not 1) !=  (! 0  ! 1)) {
print Larry and Tom must smoke some really primo stuff...\n; 
 }

Great talk, BTW.  I'm listening to it right now.

Have people had any complaints from users that were blacklisted due to 
an attempt to send a message to a non-existant email address?  It seems
to me that accidentally transposing characters in an email address is a 
fairly common occurance.

-Damian



Re: OpenBSD Audio series other than bsdtalk ?

2006-11-03 Thread Damian Wiest
On Tue, Oct 31, 2006 at 11:09:17PM -0500, Jason Dixon wrote:
 On Oct 31, 2006, at 9:44 PM, Damian Wiest wrote:
 
 On Tue, Oct 31, 2006 at 05:10:25PM +, Douglas Hunter wrote:
 NYCBSDCon2006 now has its talks available in MP3 and with slides  
 in pdf from
 http://www.fetissov.org/public/nycbsdcon06/
 
 I saw this in the OpenBSD Journal ( http://undeadly.org/)
 
 I suppose this saves me the trouble, or should I go ahead and post my
 recordings?
 
 I was one of two people doing audio recording at the conference, but I
 used a MiniDisc recorder.  It's a really old one, so I have to do  
 analog
 transfer which will take like 10+ hours for everything.
 
 If yours sounds substantially better than Nikolai's, I'd like to get  
 a copy.  I might start over from scratch to remove some unexpected  
 encoding artifacts.  If I'm going to, it would be nice to have the  
 best audio available too.
 
 Thanks,
 
 --
 Jason Dixon
 DixonGroup Consulting
 http://www.dixongroup.net

From what I've heard so far, Nikolai's recordings sound great!  I'd be 
interested to know what sort of digital recorder he used.

I haven't been feeling so well the past few days, but I've started 
converting things.  If I'm lucky, I'll have everything done this weekend.  
A few people have contacted me about getting copies so I imagine the 
easiest thing to do would be to mail out CD-R's (DVD-R?) and post mp3's 
for the general public.

-Damian



Re: Nintendo Wifi Connector and Nintendo DS (WEP)

2006-11-03 Thread Damian Wiest
On Fri, Nov 03, 2006 at 12:56:07PM -0600, Sam Fourman Jr. wrote:
 Does OpenBSD accually run on a Nintendo DS?
 
 is it a i386? or ARM?
 
 Sam Fourman Jr.

The OP's not running OpenBSD on the DS, he's trying to connect his DS 
to an OpenBSD server with a Nintendo Wi-Fi adapter plugged in.

I'll pick up an adapter this weekend and see if I can get it working
with 4.0.  My guess is that it's either an issue with the transmit speed 
setting, or possibly the auth mode the OP's using.

-Damian



Re: Sun BlackBox

2006-11-02 Thread Damian Wiest
On Wed, Nov 01, 2006 at 01:31:01PM -0500, Nick Guenther wrote:
 On 11/1/06, Chris Cameron [EMAIL PROTECTED] wrote:
 
 
 On Wed, 2006-11-01 at 14:55 -0300, Gustavo Rios wrote:
  Dear list members,
 
  While visiting sun blackbox home page, i saw they have a new project
  called blackbox. But i don't know whether openbsd could be used within
  it.
 
  Gustavo Rios
 
 Do you plan to need a trailer full of Sun hardware?
 
 
 They're just normal Sun machines in a trailer.
 
 Why would you ever want a trailer of computers? So you can go RV'ing
 and still hack?; get a double degree in Hick/Nerdism?
 
 -Nick

I haven't priced shipping containers lately, but I imagine this sort of 
setup could be useful in more rural areas instead of building out a 
facility.  Plus, they're shipping containers so you could stack a bunch 
of them together.

-Damian



Re: Lenovo notebooks

2006-10-31 Thread Damian Wiest
On Thu, Oct 26, 2006 at 10:57:27PM +0200, ropers wrote:
 On 26/10/06, stuartv [EMAIL PROTECTED] wrote:
 On 10/26/06, Johan P. Lindstrvm [EMAIL PROTECTED] wrote:
 
  You should really get yours too, not buying the CD's will not improve
  the hardware support now will it?
 
 
 The way it works here is boss, I need to buy an openbsd license for each
 openbsd box we run.  It's $50 each, + shipping.  Sign here please.
 
 Speaking of that, I need to get off my ass and buy my 4.0 licenses 
 already.
 
 
 Awww... Too late for that for me, I had to use the whole Look Boss, it's
 free line along with plenty of documentation that OpenBSD is as secure as
 it gets for them to let me put in the first OpenBSD box.  They are pretty
 happy with them so far.  I'm going to try to hit them up with the whole
 Wouldn't it be nice to support such a great project that we use so much
 argument as soon as things slow down here a bit and there is time to chat.
 That should work.
 
 stuart
 
 That's what I'm planning to do as well... but it may be a pipe dream
 -- the single small department that I sysadmin for on a part time
 basis took a lot of convincing to even let me put in that one OpenBSD
 firewall... OTOH, if I wait half a year and we haven't gotten the
 Windows 2003 server rootkitted again by that time, I may have a much
 stronger case. Look guys, this seems to be doing us some good right
 here... It prolly works in OpenBSD's advantage that the software can
 be paid for after the fact. You wouldn't believe the politics and red
 tape that's getting in the way of buying and deploying just about any
 additional security product. We've already got our antivirus program,
 now why would we want to buy an antispyware program.? We're already
 using Firefox, now why do we need a firewall? Slightly embellished,
 but in the broad strokes that's what took place. I am not making this
 up.
 

Why do you continue to work there?

Sorry, I just left that sort of environment and have been kicking myself
for not leaving earlier.

-Damian



Re: OpenBSD Wiki

2006-10-31 Thread Damian Wiest
On Thu, Oct 26, 2006 at 08:52:20PM -0500, Kenny Mann wrote:
 Dudes,
 
 Many months ago I started a website called OpenBSD-Wiki (located at 
 http://www.openbsd-wiki.org).
 
 The orginal goal was pretty selfish: Document what it took to get my 
 systems going so I wouldn't forget.
 
 I'm not a complete moron (eek! I hope!) , but I'm no where near as 
 skilled as many on this list -- so I needed some documentation for 
 myself. Wiki seemed to make the most sense, especially considering that 
 many articles on the web are out of date and could use some minor (and 
 sometimes major) adjustments.
 
 As I lurked the misc@ list, I found some pretty helpful things, emailed 
 the offer off-list asking if their works can be placed on that site 
 released under the BSD license and so far everyone I've asked has been 
 kind enough to say yes.
 
 Anyone is welcome to create articles or create content they think is 
 useful for other people to know (so long as either you or the original 
 author will release it under the BSD license).
 
 As far as how thinks should be organized and all that, I haven't 
 entirely thought that through and am open to suggestions. My orginal 
 thoughts where to make it close to the Gentoo-Wiki project (located at: 
 http://www.gentoo-wiki.org).
 
 I've been pretty busy lately and haven't had time to produce as many 
 articles as I'd like but I'm also waiting for the 4.0 CD to arrive (it's 
 already shipped and I have a tracking number! yay! I'm excited!) and I 
 will update as many articles to that as possible.
 
 I lack design abilities, so any criticism is welcome. Well _any_ 
 criticism is welcome.
 
 I'm trying to figure out a sane method to extract the articles into 
 being a plain-text dump, so everyone can take copies if they need, once 
 I get that figured out I'll post on the site.
 
 Those that have already contributed or allowed me to take their articles 
 and place them their, I thank you very much and would like to say: You rock!
 
 One final thing, this is hosted off of my SBC DSL Business Elite line. 
 This means I have 3-6mb down and 384-618 up (static IP's), so if the 
 lines start getting clogged too hard then I'm willing to pay for some 
 real hosting -- so no worries.
 
 
 --Kenny

I typically use LaTeX for this sort of thing.  You can create a simple 
makefile that will produce output in many different formats.  I also 
typically have an rsync based installer that pushes the changes out from 
my CVS working copy to the webserver.

LaTex is pretty easy to pick up; an example article should be enough to
get you going.  I can also recommend Leslie Lamport's book, 
LaTeX: A Document Preparation System 

http://research.microsoft.com/users/lamport/pubs/pubs.html#latex

-Damian



Re: Sun x2100 M2 DMESG weirdenn and remote access. OpenBSD 4.0

2006-10-31 Thread Damian Wiest
On Sat, Oct 28, 2006 at 09:17:11AM -0700, Pawel S. Veselov wrote:
 stan wrote:
 On Tue, Oct 24, 2006 at 11:11:43PM -0700, Pawel S. Veselov wrote:
   
 Daniel Ouellet wrote:
 
 stan wrote:
   
 That's actually not a given IFIRK Sun says the RAID on the 2100's
 is Windows only.
 
 
 Why Sun picks that kinda hardware for it's servers, is another kinda
 question But the controller manufacturers play evil here...
 
 
 
 Might be beacuse these machines are about $750US each list.
 
   
 What about v65x then ? :)

I don't know if I mentioned this already, but the Intel Gigabit Ethernet 
chip on Sun's AMD64 systems isn't even supported under Solaris.  
Windows drivers only.  I have heard rumors that a recent build
of OpenSolaris includes driver support though.

-Damian



Re: understanding the kernel

2006-10-31 Thread Damian Wiest
On Sun, Oct 29, 2006 at 11:18:28PM -0700, George Mihai IACOB wrote:
 Jonathan Gray wrote:
 On Sun, Oct 29, 2006 at 08:24:16PM -0700, George Mihai IACOB wrote:
 Hello!
 
 I am a not-so-experienced programmer and I started a personal project 
 which requires a deep understanding of the OpenBSD kernel - no, I am not 
 going to fork another BSD style operating system. I wonder if there is 
 documentation describing the kernel, other that the comments in the 
 source. For a start, I am reading Andrew Tanenbaum's Modern Operating 
 Systems, 2nd edition and trying to follow the code in the kernel 
 source, starting with sys/kern/init_main.c
 Is this a wrong approach? Do you have other suggestions? I know there's 
 no easy way and I am not looking for one, all I want is a starting point.
 Regards,
 George
 
 You don't mention what you had in mind so it is hard to point at anything.
 The Design and Implementation of the 4.4 BSD Operating System by
 McKusick and friends is likely to be more relevant for implementation
 details, Tanebaum's book is more high level theory.
 
 
 Well, I want to be able to write software which should run in kernel 
 mode and/or modify the kernel. Basically, I'm just like a college 
 student taking an operating systems course and using OpenBSD as an example.

Operating System Concepts by Silbershatz, Galvin and Gagne:
http://codex.cs.yale.edu/avi/os-book/os7/

As a bonus, there are pretty dinosaur pictures at the start of each 
chapter.

Also, get the BSD book mentioned above.

-Damian



Re: Nintendo Wifi Connector and Nintendo DS (WEP)

2006-10-31 Thread Damian Wiest
On Tue, Oct 31, 2006 at 11:08:15AM +0100, Guido Tschakert wrote:
 Hello,
 
 after reading through the ralink broken after last update thread and
 seeing that Bruno is using an Nintendo Wifi Connector
 I wonder if someone has connected a Nintendo DS via an OpenBSD Box and
 the Nintendo Wifi Connector as AP using WEP.
 Without WEP everything works fine for me (i put my /etc/hostname.ural0
 at the bottom of this message)
 But I haven't worked out how to configure WEP.
 What worked was using WEP for a connection between the Wifi Connector as
 Accesspoint and my notebook.
 So if anybody know in which format I have to use the WEP Key on both the
 OpenBSD Box and the Nintendo DS, I really would like to know.
 
 thanks
 
 guido
 
 
 
 
 
 /etc/hostname.ural0
 inet 192.168.22.1 255.255.255.252 NONE media DS2 mediaopt hostap mode
 11b nwid zelda chan 12 -nwkey
 
 (btw the DS only works with 2Mbps)

I've got a couple DS's (and a PSP :( ) at home and have been using them 
with various systems (FreeBSD and OpenBSD with Aironet and Prism cards 
and a Linksys 54WRTG) acting as access points.  I don't seem to recall 
encountering any problems.  What does the Nintendo wireless adapter
attach as?

Is there some reason you're hardcoding the transmit speed on your AP?  
I had no end of trouble trying to connect when I tried this.  I believe 
that if you specify the transmit speed, then all devices must use that 
speed.  Meaning, you can't have one using DS2, one using DS11 and your 
AP doing autoselect.  At least I couldn't get that sort of setup to
function.

As for the WEP key, you should enter it just like you did on your AP.

-Damian



Re: Sun x2100 M2 DMESG weirdenn and remote access. OpenBSD 4.0

2006-10-31 Thread Damian Wiest
On Tue, Oct 31, 2006 at 04:22:52PM -1000, [EMAIL PROTECTED] wrote:
 On 31-Oct-06, at 3:59 PM, Damian Wiest wrote:
 
 On Sat, Oct 28, 2006 at 09:17:11AM -0700, Pawel S. Veselov wrote:
 stan wrote:
 On Tue, Oct 24, 2006 at 11:11:43PM -0700, Pawel S. Veselov wrote:
 
 Daniel Ouellet wrote:
 
 stan wrote:
 
 That's actually not a given IFIRK Sun says the RAID on the 2100's
 is Windows only.
 
 
 Why Sun picks that kinda hardware for it's servers, is another  
 kinda
 question But the controller manufacturers play evil here...
 
 
 
 Might be beacuse these machines are about $750US each list.
 
 
 What about v65x then ? :)
 
 I don't know if I mentioned this already, but the Intel Gigabit  
 Ethernet
 chip on Sun's AMD64 systems isn't even supported under Solaris.
 Windows drivers only.  I have heard rumors that a recent build
 of OpenSolaris includes driver support though.
 
 -Damian
 
 
 That is incorrect.  The Intel chipset on the Sun AMD64 servers is  
 supported under Solaris with the Sun e1000g driver (and the older  
 ipge driver on SPARC systems that have that same chipset, anyway).   
 The e1000g adds jumbo frames and a few other features over the ipge  
 driver.
 
 Also, the RAID controller configuration is available via the BIOS and  
 in Solaris as raidctl(1M)
 
 -Mike

I'll have to talk to one of my co-workers about this.  I seem to recall 
there being a driver available, but that it didn't work properly.

Getting OT, but are you using the SUNWintgige package?

Are you talking about the Nvidia RAID controller?

-Damian



Re: OpenBSD Audio series other than bsdtalk ?

2006-10-31 Thread Damian Wiest
On Tue, Oct 31, 2006 at 05:10:25PM +, Douglas Hunter wrote:
 NYCBSDCon2006 now has its talks available in MP3 and with slides in pdf from 
 http://www.fetissov.org/public/nycbsdcon06/
 
 I saw this in the OpenBSD Journal ( http://undeadly.org/)
 
 
 Douglas

I suppose this saves me the trouble, or should I go ahead and post my 
recordings?

I was one of two people doing audio recording at the conference, but I
used a MiniDisc recorder.  It's a really old one, so I have to do analog
transfer which will take like 10+ hours for everything.

-Damian



Re: Sun x2100 M2 DMESG weirdenn and remote access. OpenBSD 4.0

2006-10-25 Thread Damian Wiest
On Tue, Oct 24, 2006 at 11:11:43PM -0700, Pawel S. Veselov wrote:
 Daniel Ouellet wrote:
 stan wrote:
 
 That's actually not a given IFIRK Sun says the RAID on the 2100's
 is Windows only.
 
 
 Interesting! I didn't read that. Must have skip my reading then 
 somehow. The choice are in the BIOS to enable it. I didn't buy two 
 drives as it was for testing only, so I can't say if it would work or 
 not for sure, or if it would be supported in OpenBSD or not. No clue.
 
 If there is feedback as to it should be supported, not only in 
 Windows, and some are interested to know if it does or not, I could 
 buy an other drive and try it. Not that I will need two drives for 
 what this baby will be use in.
 So, what's the controller in x2100 ? In v65x it was a u320 aic79xx,
 Adaptec only provides Windows drivers for it, and is not so willing
 to share with the microcode needed to support built-in RAID.
 Someone also mentioned that enabling these kind of RAIDs is of
 little use, since they put almost the same strain on the CPU, making
 it run controller's microcode.
 
 Why Sun picks that kinda hardware for it's servers, is another kinda
 question But the controller manufacturers play evil here...
 
 
 Thanks,
  Pawel.

Well, I just found about a half-dozen of these machines in the back room...

It's not easy to get to, but the RAID controller is an 
NVidia nf4-ultra-n-a3; I didn't see any sort of EEPROM or SRAM chip to hold
metadata.  From what I've heard, there are only Windows drivers available.

-Damian



Re: Modemsupport?

2006-10-25 Thread Damian Wiest
On Tue, Oct 24, 2006 at 08:23:06PM -0400, STeve Andre' wrote:
 On Tuesday 24 October 2006 19:47, Stuart Henderson wrote:
  On 2006/10/25 01:18, [EMAIL PROTECTED] wrote:
   I had a old Laptop and in my Dmesg was a Modemchip from VIA wich wasn`t
   supported. Now I do own a Thinkpad and I`ve a INTEL Modem-Chip wich isn`t
   supported either.
 
  Often they're no modem chip, just a telephone line interface to
  the sound codec, and the modulation/demodulation is done on the cpu.
 
   So does OpenBSD support any Modems except some via USB?
 
  Anything with a standard RS232 interface - puc(4), com(4) - and some
  USB (though other USB will not work).
 
 I have a cardbus modem that I've used for years.  The relevant line in
 the dmesg data is
 
 pccom3 at pcmcia1 function 0 U.S. Robotics, XJ/CC1560, Megahertz 56kbps \
 Modem port 0xa3f8/8: ns16550a, 16 byte fifo
 
 --STeve Andre'

FWIW, I've got a bunch of cardbus modems like the one Steve mentioned.  
If anyone wants them and is going to be at NYCBSDCon this weekend I can 
bring 'em.

-Damian



Re: OpenBSD AJAX

2006-10-25 Thread Damian Wiest
On Wed, Oct 25, 2006 at 02:43:21PM +1000, Damien Miller wrote:
 On Tue, 24 Oct 2006, Sam Fourman Jr. wrote:
 
  I am Searching the Internet for a Basic Hello World Ajax sample
  written in C if anyone has one laying around please reply to this post
 
 I think you would be nuts to write your web applications in C, unless
 you are a master with a good reason.
 
 -d

I did that back in the mid-nineties.  More than half of the code ends up being
calls to string, memory and regex functions.

-Damian



Re: OpenBSD AJAX

2006-10-25 Thread Damian Wiest
On Wed, Oct 25, 2006 at 03:06:36PM +0200, Joachim Schipper wrote:

[snip]

 
 Just a half-baked thought, but escaping any non-constant expression
 (i.e., actual variable, not fixed string) passed to the browser or a
 database would go a long way toward solving most problems.
 
 That is,
 
 $hello = Hello World;
 echo Hello World , $hello;
 
 could produce
 Hello World lt;Hello Worldgt;
 
 And
 
 do_query('select var1, var2 from mydb where id = ' . $my_id);
 
 would not be as dangerous as it is now.
 
 Of course, this is an ugly hack [1]. But a hack that would make my life
 quite a bit easier.
 
   Joachim
 
 [1] The first example is not that bad, treating constants and variables
 differently is just one sin; the interesting part is figuring out a sane
 way to do the latter.
 

Or you could use DBI's bind parameters and not have to worry about the 
issue.

My main problem with PHP is that it allows programmers to be extremely 
sloppy and embed application logic into what would otherwise be an HTML 
page.  Using code to iterate through a list and display the values 
contained within is fine, but I see a lot of people doing transactional 
processing in PHP pages.  This isn't unique to PHP, as JSPs tend to have 
the same problems.

-Damian



Re: Whatever happened to the 64bit SH-5 dsign?

2006-10-25 Thread Damian Wiest
On Wed, Oct 25, 2006 at 02:28:22PM -0600, Jack J. Woehr wrote:
 On Oct 25, 2006, at 2:09 PM, Miod Vallat wrote:
 
  Ahhh, crap, I'm so much more a Winter Solstice kind of person.   
  Besides,
 
  This is so has been. Smart people celebrate Agnostica those days.
 
 I celebrate Sir Isaac Newton's Birthday. (12/25)
 
 -- 
 Jack J. Woehr
 Director of Development
 Absolute Performance, Inc.
 [EMAIL PROTECTED]
 303-443-7000 ext. 527

It's Festivus for the rest of us.

-Damian



Re: NOD32 Antivirus and OpenBSD?

2006-10-24 Thread Damian Wiest
 On 10/24/06, Leonardo Rodrigues [EMAIL PROTECTED] wrote:
 Hello everyone,
 
 I'm thinking on purchasing this NOD32 anti-virus solution from
 ESET.COM and use it here at work. I really want to use it with
 OpenBSD, since every other server machine runs OpenBSD as well. The
 problem is that eset.com claims that their product will run on Linux
 and FreeBSD, they say nothing about OpenBSD. I've heard rumors of
 NOD32 being also able to run on OpenBSD, but I *think* that was for
 earlier versions of NOD32. I'm not very fond of rumors, so I came here
 to ask your opinion about it. Does anyone here have any experience
 with NOD32 and OpenBSD? Or another really good antivirus that I may
 consider?
 
 Thanks in advance,
 
 Leonardo Rodrigues
 --
 An OpenBSD user... and that's all you need to know =)

On Tue, Oct 24, 2006 at 01:07:36AM -0500, Der Engel wrote:
 lol?

Some people like to run antivirus software on UNIX boxes to ensure 
they're not carriers for Windows viruses, etc.  Personally, I
think it should be the responsibility of the Windows users to secure
their own machines rather than relying on the kindness of others.

-Damian



Re: Sun x2100 M2 DMESG weirdenn and remote access. OpenBSD 4.0

2006-10-24 Thread Damian Wiest
On Mon, Oct 23, 2006 at 01:24:11PM -0400, Daniel Ouellet wrote:
 Stuart Henderson wrote:
 On 2006/10/22 17:29, Daniel Ouellet wrote:
 It work,s but as soon as the setup for OpenBSD start to boot the bsd.rd, 
 the access to both the ethernet management port as well as the serial 
 console is lost and the only way is to use local keyboard and monitor.
 
 Usually BIOS serial redirection stops after the bootloader,
 so you have to 'set tty com0' (either typed or, if you're booting
 from PXE you can place it in $TFTPROOT/etc/boot.conf)
 
 But you can't do that if you boot from CD for example to do a fresh 
 install. I was trying to see if I could do that for future needs before 
 installing it in the field. But no success. (:
 
 As for regular operation, I will try this and see if that does any 
 difference.
 
 The ethernet management is probably asf/ipmi and I guess it would
 be on one of the broadcom nics, bge(4) doesn't support this at present
 (was added for a short while but removed again, if_bge.c 1.104-1.106)
 
 It is the bge1 interface actually on this box.
 
 4 ethernet, 2 card slots, LOM improvements... sounds like it's a lot
 more useful machine.
 
 So far looks like a very nice server. Front loaded SAS drives, could do 
 RAID as well, (don't know if that works well or not, didn't try yet), 
 dual core CPU and a bunch more of nice features.
 
 I wasn't sure OpenBSD was going to work, so I took a chance, got one for 
 testing and see. So, far, pretty nice!
 
 A few things don't look right in DMESG, but nothing that is a show 
 stopper yet anyway.
 
 Just this management interface, either serial, or Ethernet that doesn't 
 work. Would be nice, but I can live without. It's not to much of a 
 drive, about 40 minutes at worst.
 
 But I have to say that I much prefer that box to my IBM 326e or HP 145 
 G2 or G1 so far.
 
 I have nothing bad to say about it yet anyway. Minor things, that's all.

Besides the Broadcom, what other nic is on the system board?  ISTR newer 
x2100's shipping with Nvidia ck8-04 Gigabit Ethernet for the primary 
interface which may not be supported.

I believe all of our x2100's are running Solaris 10; I can check to see if
we have one available for testing with OpenBSD.  I know for a fact that we
have the BIOS and console writing to serial port A under Solaris 10.

-Damian



Re: How open is Intel?

2006-10-19 Thread Damian Wiest
On Thu, Oct 19, 2006 at 11:14:20AM +1000, Jonathan Gray wrote:

[snip]

 For the longest time it was quite hard to get documentation out
 of the networking side of Intel, but it recent years they
 publish reasonably detailed manuals for 10/100 (fxp) and
 10/100/1000 (em) controllers and some PHYs.  I have not
 been able to find any 10GbE (ixgb) manuals and suspect
 they don't publish them.  Anything at all to do with
 wireless there is no documentation from Intel at all also.
 
 fxp
 http://www.intel.com/design/network/manuals/8255x_opensdm.htm
 
 em
 http://www.intel.com/design/network/manuals/8254x_GBe_SDM.htm

Funny you should mention this as I just grabbed some docs for the 
82563EB (Intel Pro/1000).

Device driver writing is an area I haven't yet explored, but the
datasheet for the Pro/1000 looks pretty detailed and includes
block diagrams, pin descriptions, signalling, timing specs, etc.
Is this sort of document sufficient for device driver writers?

I apologize if this is a stupid question, but I really would like
to learn more about writing device drivers.

-Damian



Re: blobs are bad

2006-10-18 Thread Damian Wiest
On Wed, Oct 18, 2006 at 01:40:19PM +0200, Martin Schr?der wrote:
 2006/10/18, Sam Fourman Jr. [EMAIL PROTECTED]:
 Pardon me if my Knowledge is lacking, but is there actually *any*
 video card vendor that would support Full 3D acceleration and *most*
 of the stuff desktop users want?
 
 Not really. Matrox is open, but the cards don't do DVI higher than
 1280x1024. And ATI is as closed as NVIDIA, but the drivers are even
 more broken.
 
 Best
   Martin

Do you have more details regarding ATI versus NVIDIA video cards?  From 
what I understand, ATI's Radeon cards have pretty good support.  Meaning 
that all of the video-out ports work with the radeon driver and some 
versions have 3d support.  I don't believe the nv driver supports any 
video-out ports besides VGA (DVI?) and only does 2d.  I got burned by 
this some time ago when I discovered that while NVIDIA releases binary 
drivers for FreeBSD, they're only available for the x86 platform.

If you're looking to add dual, or triple-headed support or connect your 
system to a television or A/V receiver, good luck.  I've had nothing but 
problems trying to find a suitable card with BSD support.  I'm currently 
trying a Radeon 9600XT which some people have claimed will work.

-Damian



Re: UPS just delivered the 4.0 release CD-set

2006-10-13 Thread Damian Wiest
On Fri, Oct 13, 2006 at 10:25:15AM -0400, Jeff Quast wrote:
 On 10/13/06, Sideris Michael [EMAIL PROTECTED] wrote:
 On Fri, Oct 13, 2006 at 02:35:35PM +0200, Joris Van Herzele wrote:
  It's true this is hardly relevant for a discussion forum, but I hope you
  will all forgive me ... I just felt the need to voice my joy.
 
  We all agree it's great software, but other than that just look at it :
  The packaging in itself is already enough to put me in a festive mood :)
 
 Probably I am missing something here, but, isn't the release date
 20061101? If so, why the early shipping? Just out of curiosity.
 
 It has always been this way. Nico forgot to add your question in his
 very short explanation of 'the way it is'.
 
 Pressing, Printing, Packaging, Shipping -- these are all done early as
 necessary to ensure that the pre-ordered CD's arrive BEFORE the
 release date.
 
 So,
 If the CD's have been printed and packaged earlier than expected and
 are sitting around in somebody's living room -- why not begin shipping
 them off?
 
 Consequently,
 Those who make pre-orders are often rewarded specialy, getting the
 release earlier than those who did not pre-order. This is not WHY,
 this is just a consequence of good time management.
 
 I can't wait to see this post next release, too :) (only because I
 always enjoy releases)

Aw, heck.  I had to install FreeBSD 6.1 on a couple of servers because
they were needed before OpenBSD 4.0 would be released and we didn't want 
to run pre-release code (which resolved an ACPI issue on NetFrame 1420).  
I suppose the lesson here is to pre-order your copy.

-Damian



Re: OpenBSD 4.0 as a PostgreSQL Database Server

2006-10-12 Thread Damian Wiest
On Wed, Oct 11, 2006 at 03:08:36PM -0500, Sam Fourman Jr. wrote:
 For those of you that are knowledgeable, and have the time to respond
 
 does anyone see any troubles with this hardware selection?
 I am mostly concerned with the raid Controller selection I am
 expecting it to have raid 5 across 16 drives with 1 spare
 
 the intent is to run a PostgreSQL 8.2 Server with OpenBSD 4.0 when
 they are both released
 
 MotherBoard   GIGABYTE GA-4MXSV Socket T (LGA 775) Intel E7230 ATX
 Server CPUIntel Pentium D 940 Presler 3.2GHz 2 x 2MB L2 Cache LGA
 775 Dual Core
  16 Raid Drives Western Digital 200GB WD2000JS SATA II 7200RPM 8MB 
  - OEM
 Raid Card Areca ARC-1260 16-Port PCI Express x8 SATA 3Gb/s RAID
 Controller - Retail
 
 
 
 Thank you for any Help
 
 Sam Fourman Jr.

I know you have your reasons for wanting RAID-5, but check this out:

http://www.baarf.com/

-Damian



Re: FTP Account Lockout

2006-10-09 Thread Damian Wiest
On Fri, Oct 06, 2006 at 02:41:31PM -0400, stuartv wrote:
 Ryan,
 
 Thanks for your input.  I have been gently pushing those who make
 the decisions here towards sftp for some time now; however, 
 ultimately that is one decision that is out of my hands.  
 According to the inspector that is doing our PCI inspection the 
 only requirement we haven't met as reguards to our FTP server is the
 one for locking out an account that has failed 3 times in a row.
 Personally I think that this requirement is rather dumb and adds
 little to security, but we have to do what the inspector wants if 
 we want certification.  I have told my supervisor of your thoughts 
 as to encrypted passwords (or the lack of in FTP) so we'll see if
 that helps. 
 
 Thanks again,
 stuart
 
 You mean besides the fact that you're running FTP at all, right?
 - PCI requires that all passwords are encrypted in transmission, and FTP
   doesn't do this.
 - Depending on how you interpret the wording, PCI either prohibits or
   strongly discourages the use of FTP from 'untrusted' networks/hosts
 
 Consider replacing your FTP solution with scp/sftp.
 
 -Ryan

I've had the misfortune of working with auditors regarding SOX 
compliance.  I'm not sure who's coming up with these security 
policies, but they don't seem to have a background in security work.
To compound the problem, the auditors I've dealt with seemed to simply 
be following a checklist.  It's almost like the people creating the 
auditing requirements read Gene Spafford's article on Security Myths and 
Passwords [1] and decided to base their policies on the myths.

So where did the change passwords once a month dictum 
come from? Back in the days when people were using 
mainframes without networking, the biggest uncontrolled 
authentication concern was cracking. Resources, however, 
were limited. As best as I can find, some DoD 
contractors did some back-of-the-envelope calculation 
about how long it would take to run through all the 
possible passwords using their mainframe, and the result 
was several months. So, they (somewhat reasonably) set 
a password change period of 1 month as a means to defeat 
systematic cracking attempts. This was then enshrined 
in policy, which got published, and largely accepted by 
others over the years. As time went on, auditors began 
to look for this and ended up building it into their 
best practice that they expected. It also got written 
into several lists of security recommendations.

-Damian

[1] http://www.cerias.purdue.edu/weblogs/spaf/general/post-30/



Re: Slogan for OpenBSD goodies

2006-10-09 Thread Damian Wiest
 On 10/7/06, Samurai Chef [EMAIL PROTECTED] wrote:
 On 10/6/06, Jason Mao [EMAIL PROTECTED] wrote:
  Hi, Bruno
 
  I think that depends on your definiton for the word free.
 
 
  Best rgds,
 
  Jason
 
  On 10/6/06, Bruno Carnazzi [EMAIL PROTECTED] wrote:
   Hi misc,
  
   I was thinking to a slogan that could be printed on some openbsd 
 goodies :
  
   Free software can't exist without Free hardware.
  
   I think this is really the core of the current free software problem.
  
   Best regards,
  
   Bruno.
 
 
 
 s/Free/Open/g

On Sat, Oct 07, 2006 at 12:27:47AM +0800, Jason Mao wrote:
 Hi, Samurai
 
 Well, software may be open, but how could hardware be open
 in the same way as software?
 
 Anyway, this is also a neat idea, in that this is OpenBSD rather
 than FreeBSD.
 
 
 Jason

You've obviously never designed hardware or visited sites like 
opencores.org.

Briefly speaking, hardware designs are typically written in some 
language like VHDL, Verilog, etc. and then tested in a simulator.  
Once the bugs in the design are worked out, the source code is sent 
off to a factory to print the boards, build the chips, etc.

What's really exciting is the work being done with 3d printers and how
the ideals of open source software can be applied in that realm.

-Damian



Re: [MAYBE SPAM] Re: Version 4.0 release

2006-10-09 Thread Damian Wiest
On Mon, Oct 09, 2006 at 03:59:29PM -0600, Theo de Raadt wrote:
  I see 4.0 is coming out, and yet, no hardware raid support, no fixes for 
  raidframe,
  and still no SMP support, for sparc64 on Ultrasparc II machines.
  
  I'm using only 1 processor out of 4, and 4 hard drives out of 30 because I 
  can't hardware raid
  my enterprise fiberchannel array, I can't hardware raid the majority of the 
  drives in my
  E450, and because raidframe is so old and buggy, I can't raid5 any of it, 
  and am left
  mirroring my 2 boot drives together, and 2 data drives together.
  
  This is a $125,000 machine 5 years ago, and I treat it no better than some 
  crappy i686 box
  because security is my primary issue.  If I went with another OS, I could 
  get a lot of the
  functionality I want, but what good is it, if some 12 y/o kid in pakistan 
  can hack my box.
  
  I just can't see why SMP and hardware raid aren't supported on sparc64/II.
  
  Thanks at least for a very secure OS.  I've been online now for 6 months on 
  this E450 with
  no hacks.
 
 We welcome code submissions.  I think you have no idea at all how much
 effort it takes to support all the things we do, and you are just
 being rude.


Heh.  I've actually got an E450 at home myself that hasn't been setup yet.
It's got quad processors, a couple of gigs of RAM and one or two of the
disk expansion boards (with Symbios 2201, 2202 or 2204 cards).  
Do many people have these things?  I'm just wondering how much help I 
could be to the project if I ran OpenBSD on the thing versus Solaris 10.

I'd suggest the original poster just put Solaris on the damn thing and
lock it down; maybe put an OpenBSD firewall in front.

-Damian



Re: [MAYBE SPAM] Re: Version 4.0 release

2006-10-09 Thread Damian Wiest
Sorry about the subject line.  The spam filter here flagged the message
and I keep forgetting to check to see if it changed the subject.

-Damian



Re: Version 4.0 release

2006-10-09 Thread Damian Wiest
On Mon, Oct 09, 2006 at 05:16:09PM -0600, Jack J. Woehr wrote:
 On Oct 9, 2006, at 5:09 PM, Bryan Irvine wrote:
 
  [1] I'm pretty sure the 250 and 450 are similar, though I could be  
  wrong.
 
 Similar, but the 250 is typically half a 450, two procs instead of  
 four
 and less of other resources, otherwise quite similar.
 
 -- 
 Jack J. Woehr
 Director of Development
 Absolute Performance, Inc.
 [EMAIL PROTECTED]
 303-443-7000 ext. 527
 

Yup, very similar; I was responsible for a few e250's at my last job.

The 250 has six internal bays versus twenty on the 450 (four by default, 
and then an additional eight with each disk expansion board) and two power
supplies instead of three.  The 450 also has more PCI slots and is easier
to service IMHO.

You think the 250 is heavy, try the 450.  I had to pull the supplies and
system board to get the thing home.

http://sunsolve.sun.com/handbook_pub/Systems/E250/E250.html
http://sunsolve.sun.com/handbook_pub/Systems/E450/E450.html

-Damian



Re: [MAYBE SPAM] Can't start symux -- symux: could not get a semaphore

2006-10-06 Thread Damian Wiest
On Thu, Oct 05, 2006 at 11:39:25PM -0300, Marcos Laufer wrote:
 I have a problem starting symux on OpenBSD 3.7, it was working
 fine untill today that the machine crashed leaving no log at all, and
 when i went up again something went wrong with symux,
 maybe someone knows what's going on.
 
 
 I run the following command to start it:
 
 /usr/local/libexec/symon
 su -m nobody -c /usr/local/libexec/symux
 
 and i get this in /var/log/messages:
 
 Oct  5 23:29:01 srv1 symux: symux version 2.67
 Oct  5 23:29:01 srv1 symux: could not get a semaphore
 
 symon starts properly, i get no error or problem, but symux shows that
 message and doesn't start.

[snip]

 Best Regards,
 Marcos Laufer

What does ipcs show you?

-Damian



Re: Intel's Open Source Policy Doesn't Make Sense

2006-10-05 Thread Damian Wiest
On Wed, Oct 04, 2006 at 03:54:36PM -0600, Theo de Raadt wrote:
  Intel may just be worried that there _might_ be a problem they don't 
  know about and are trying to protect themselves.
 
 may just be?
 
  I imagine that there 
  are plenty of opportunities for someone to either willfully or 
  accidentally introduce patented technologies, for which Intel does not 
  hold a license, into their commercial products.
 
 imagine
 
  Rather than releasing
  information and potentially having to deal with an intellectual property 
  issue, Intel just doesn't release the information.
 
 No facts?  None at all?  Just theories as to why they might have to
 not give things away?  All phrased to let them get away with it?
 
 That's a lot of apologies you are making for a vendor who sells you
 broken hardware.

Sorry, I didn't mean to apologize for them.  Just making some guesses 
at how Intel is rationalizing the decision to not release information.
Personally, I don't buy their products.

-Damian



Re: Looking for HowTo instructions ...

2006-10-05 Thread Damian Wiest
 On 10/5/06, Greg Thomas [EMAIL PROTECTED] wrote:
 On 10/4/06, Marc G. Fournier [EMAIL PROTECTED] wrote:
 
  What the software is measuring, or is trying to measure, is the number of
  active *BSD installations there are ...
 
 
 So why doesn't it do only that?  Just Systems This Month:  2938 and
 the numbers broken down by country or continent.
 
 Greg


On Thu, Oct 05, 2006 at 02:38:49AM +, Sam Fourman Jr. wrote:
 I for one do not mind that, BSDstats breaks out the BSD operating systems.
 
 I  only wish that someone with sufficient knowledge would put the
 BSDstats script in the OpenBSD ports tree. because if I could install
 it I could add 27 OpenBSD systems.
 
 Sam Fourman Jr.

I just took a look at the script, all you have to do is schedule it to 
be run from cron and add a line to rc.conf.  I'm not sure what you'd 
gain by having a port.

-Damian



Re: Intel's Open Source Policy Doesn't Make Sense

2006-10-04 Thread Damian Wiest
On Tue, Oct 03, 2006 at 08:39:37PM -0600, Breen Ouellette wrote:
 Wolfgang S. Rupprecht wrote:
 a) Intel doesn't own the technology, but licensed it from another 
vendor.  The licensing terms don't allow Intel to release full 
details.
 
 b) Intel has agreements with other customers/vendors to not release 
information about a particular piece of hardware.
 
 c) Intel doesn't feel that it's worth the cost to provide information
for driver developers.
 
 
 d) There are so many patents issued for obvious techniques used in
computer peripheral chips that releasing documentation might tempt
an ethically challenged company to sue them for royalties.
 
 Intel has been on record as stating that patent issues are now a
 significant problem for them.
 
 -wolfgang
   
 
 That's just their way of saying that AMD is patenting technology that 
 Intel has to licence, and that is just so very terrible for them. I 
 mean, shame on AMD for taking the shiny toy away from Intel.  :)
 
 And seriously, is Intel insinuating that they are using patented 
 technology without licencing it? That seems rather bogus to me. 
 Ignorance of breaking the law does not waive their liability under the 
 law, and if they get caught in this kind of lie then I hope the legal 
 system stomps all over them. It would serve them right. If Intel doesn't 
 like the patent system, then they can lobby against it. But they are 
 just a hair's width shy of admitting guilt if they actually make 
 arguments like the one attributed above.
 
 Breeno
 
 PS - before I get accused of being a 'commie' in this latest round of 
 discussions regarding bad corporate behaviour, I'd just like to say that 
 it was my understanding that believing the law should not be broken is 
 not how you define a communist.

Intel may just be worried that there _might_ be a problem they don't 
know about and are trying to protect themselves.  I imagine that there 
are plenty of opportunities for someone to either willfully or 
accidentally introduce patented technologies, for which Intel does not 
hold a license, into their commercial products.  Rather than releasing
information and potentially having to deal with an intellectual property 
issue, Intel just doesn't release the information.

-Damian



Re: Looking for HowTo instructions ...

2006-10-03 Thread Damian Wiest
On Mon, Oct 02, 2006 at 07:54:05PM -0400, Adam wrote:
 Damian Wiest [EMAIL PROTECTED] wrote:
 
  Suppose your cron jobs don't emit output, which any good job shouldn't do.
 
 Huh?  If you want a task to run on a schedule, and then mail you the results,
 then cron is exactly what you want.  Any good job does what its author
 wants it to.  If they want it to emit output, then having it be silent for
 no reason does not make it a good job.
 
 Adam

The way I structure my jobs, no output is _ever_ mailed by the cron 
daemon.  Instead, the job itself traps output and sends an appropriate 
email message, with an appropriate subject to the appropriate user.

An email message with a subject line of 'Output from cron job' is 
useless.  Messages with a subject of [SUCCESS] backup.sh or 
[FAILURE] backup.sh are much more useful.  I can filter the messages
more easily, I have more confidence in a junior admin not missing an 
important message and I can have success and error conditions notify 
different people.

I get daily email messages from too many jobs running as root on too 
many different machines for cron's default email output to be useful.

-Damian



Re: [MAYBE SPAM] Re: Looking for HowTo instructions ...

2006-10-03 Thread Damian Wiest
On Tue, Oct 03, 2006 at 03:06:20PM -0400, Adam wrote:
  Damian Wiest [EMAIL PROTECTED] wrote:
 
  On Mon, Oct 02, 2006 at 07:54:05PM -0400, Adam wrote:
   Damian Wiest [EMAIL PROTECTED] wrote:
   
Suppose your cron jobs don't emit output, which any good job shouldn't 
do.
   
   Huh?  If you want a task to run on a schedule, and then mail you the 
   results,
   then cron is exactly what you want.  Any good job does what its author
   wants it to.  If they want it to emit output, then having it be silent for
   no reason does not make it a good job.
   
   Adam
  
  The way I structure my jobs, no output is _ever_ mailed by the cron 
  daemon.  Instead, the job itself traps output and sends an appropriate 
  email message, with an appropriate subject to the appropriate user.
 
 Good for you.  But what Damian likes to do is not the definition of
 good.

It's my definition :)

  Like I said, if someone wants output mailed from cron, then
 making the job silent just because Damian thinks that's good is dumb.
 
 Adam

Do whatever you like.  I'm simply stating my preference and providing 
an alternative setup for people to consider.  I don't find receiving
200+ messages a day from cron jobs running on the network with identical 
subject lines to be a particularly good setup.  In this case, having 
cron mail me the results of the job is not exactly what I want as you
seem to believe.

If you can come up with a better scheme for managing emailed output from
hundreds of jobs running on hundreds of machines, then please share.
As it stands, you're merely trolling.

-Damian



Re: Looking for HowTo instructions ...

2006-10-02 Thread Damian Wiest
On Mon, Oct 02, 2006 at 08:21:30PM +0200, Manuel Bouyer wrote:
 On Mon, Oct 02, 2006 at 12:02:34AM -0300, Marc G. Fournier wrote:
  
  The point of using periodic, at least under FreeBSD, is that there is a 
  'report' that is issued at the end of the monthly periodic run letting the 
  admin know the status of various things on their servers ...
  
  So, for instance, it would give them a monthly reminder that the script 
  *is* running on their machine ...
 
 The standard output and errors of cron jobs is mailed to the owner of the
 cron tab. I'm not sure what periodic can do more in this area.
 
 -- 
 Manuel Bouyer, LIP6, Universite Paris VI.   [EMAIL PROTECTED]
  NetBSD: 26 ans d'experience feront toujours la difference
 --

Suppose your cron jobs don't emit output, which any good job shouldn't do.

-Damian



Re: Intel policy wrt OSS [was: Re: cvs.openbsd.org: src]

2006-10-02 Thread Damian Wiest
On Sat, Sep 30, 2006 at 03:03:57AM -0600, Theo de Raadt wrote:

[snip]

 Majid Awad at Intel has stated to developers that he is the current
 person who is responsible for this particular area.  So go ahead, let
 him know how you feel about this.
 
 Again, his email address is [EMAIL PROTECTED]
 
 So let's win back the rights to run the hardware we purchased.
 
 Please feel free to let other open source communities know about this
 matter.  Thank you.

Does anyone happen to have a snail-mail address for Majid?

-Damian



Re: Intel's Open Source Policy Doesn't Make Sense

2006-10-02 Thread Damian Wiest
On Sun, Oct 01, 2006 at 11:14:37AM -0700, Brian wrote:

[snip]

 What does Intel gain by not being open?  I am puzzled.  I am not an engineer,
 so is there something that I am overlooking?  
 
 Cheers,
 
 Brian

I can think of a few possibilities:

a) Intel doesn't own the technology, but licensed it from another 
   vendor.  The licensing terms don't allow Intel to release full 
   details.

b) Intel has agreements with other customers/vendors to not release 
   information about a particular piece of hardware.

c) Intel doesn't feel that it's worth the cost to provide information
   for driver developers.

I suspect that in most cases it's a matter of will rather than any 
technical or legal obstacles.

-Damian



Re: OpenBSD Paypal used against User Agreement?

2006-10-02 Thread Damian Wiest
On Sat, Sep 30, 2006 at 10:40:40AM +0200, viq wrote:

[snip]

 I read some not-really-nice comments about paypal, and as one of
 alternatives listed were moneybookers (.com) Can't say i tried either,
 but comments seemed positive.
 
 -- 
 viq

Google has a payment service, but it's restricted to pre-approved 
sellers: http://checkout.google.com/

From what I've heard, PayPal tends to simply lock accounts and ban 
people versus investigate allegations.  For example, a former co-worker 
had his account banned because one of his buyers included a comment in a
transaction about illicit drugs.  Needless to say the buyer was joking,
but PayPal refused to reinstate the seller's account.

-Damian



Re: soekris boot console

2006-09-19 Thread Damian Wiest
On Tue, Sep 19, 2006 at 02:17:35PM -0400, Michael Hernandez wrote:
 On Sep 19, 2006, at 1:58 PM, Gustavo Rios wrote:
 
 My soekris is a net4801-60. I am trying to access it before i can see
 the speed !
 
 
 
 You need a null modem cable.  Check this link out, I found it the  
 other day
 
 http://www.ultradesic.com/?section=34
 
 Mike

A plain old serial cable should work fine assuming the line settings 
are correct.  What are the specs for the serial port on the Soekris 
board?  Are you sure you have the flow control, data bits, stop bits, 
parity and speed set properly?  Also, you may find that kermit is easier
to use than tip.  I've been using it to interface with my Denon AVR2805
receiver and it works great.

My guess is that you have the flow control set improperly.  Sometimes 
the correct setting isn't documented, so you'll have to experiment.

-Damian



Re: Launching the Internet

2006-09-18 Thread Damian Wiest


Re: Kernel Hangs; Supermicro 5015M-MR (Intel E7230)

2006-09-18 Thread Damian Wiest
I was setting up a couple of NetFRAME 1420's this morning with OpenBSD 
3.9 and ran into the kernel hang that was mentioned on the list back in 
June. 

I just thought I'd let everyone know that the kernel on the current 4.0 
snapshot floppies works fine for me.

-Damian