hardware monitoring

2005-08-04 Thread Shawn K. Quinn
I'm able to get sensor data from the BIOS; is there something I'm missing to be able to get them from within OpenBSD on this system? dmesg follows... OpenBSD 3.7-current (GENERIC) #1: Sat Jul 30 19:44:49 CDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: AMD-K7(tm)

Re: login_ldap

2005-08-04 Thread John Wright
On Thu, Aug 04, 2005 at 09:43:28AM +0200, Alexander Farber wrote: Also, does anybody know, how to run /usr/local/libexec/auth/login_-ldap on a command line, to see if it works at all? I try following: blowfish# /usr/local/libexec/auth/login_-ldap afarber blowfish# echo $?

Re: raid for boot/root disk ?

2005-08-04 Thread Stefan Sczekalla-Waldschmidt
Would a hardware el-cheapo raid-controller be of any help in a way that the joe-user standard setup procedure will work ? If your mobo supports booting from the controller that would probably be the easies way, just create the array and install onto it just as if it had been a normal

Re: login_ldap

2005-08-04 Thread Alexander Farber
2005/8/4, John Wright [EMAIL PROTECTED]: /usr/libexec/auth/login_-ldap -d afarber should be more verbose. Thank you, now I get: blowfish# /usr/local/libexec/auth/login_-ldap -d afarber Password: couldn't get x-ldap-server reject Aug 4 10:11:43

Re: login_ldap

2005-08-04 Thread Alexander Farber
Here is what I get on the command line (a result: 0 Success, so I wonder why does login_-ldap fail?) blowfish# ldapsearch -x -h 172.25.93.242 \ -b o=bonmp.XXX.com (uid=afarber) # extended LDIF # # LDAPv3 # base o=bonmp.XXX.com with scope sub # filter: (uid=afarber) #

Re: Device not configured (APM, sound, modem)

2005-08-04 Thread Rogier Krieger
On 8/4/05, Z L [EMAIL PROTECTED] wrote: I installed OBSD3.7 on my laptop. Things that are not working are: sound and modem (dial-up internal laptop modem) and apm. Apart from providing the *complete* dmesg output already requested by someone else, you will also want to check the notes on the

Re: login_ldap

2005-08-04 Thread Alexander Farber
2005/8/4, John Wright [EMAIL PROTECTED]: On Thu, Aug 04, 2005 at 10:47:00AM +0200, Alexander Farber wrote: # base o=bonmp.XXX.com with scope sub Maybe the scope? If I'm reading the code correctly the default is onelevel (or -s one on the ldapsearch command line) but the default for

Re: Device not configured (APM, sound, modem)

2005-08-04 Thread Z L
Apart from providing the *complete* dmesg output already requested by someone else Below is the complete dmesg output: OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Mobile Intel(R) Pentium(R) 4 CPU 3.20GHz

pf problem

2005-08-04 Thread westboy
hi: my content of pf.conf is #set macros ext_if=vr0 int_if=bge0 ext_ip=222.185.xxx.xxx int_ip=192.168.0.1 webserver=192.168.0.2 priv_net={127.0.0.0/8,192.168.0.0/16,172.16.0.0/12,10.0.0.0/8} scrub in all #give NAT to the internal address nat on $ext_if from $webserver to any -$ext_if #ftp

ospfd priority problem

2005-08-04 Thread Lars Hansson
Running a recent snapshot (a few days ago) ospfd seems to have a problem with correctly joining an ospf area unless it's router-priority is 0 or higher than the current BDR. Ospfd is here connected to our ospf backbone wich is a mix of openbsd boxes running gated, Huawei 1760's and Cisco's running

VPN behind a router, now with OpenVPN

2005-08-04 Thread Helio Santana
Hi, I've disabled AH in my sysctl.conf but it doesn't work... No I have been trying to do with OpenVPN. After read all how-to, and some samples the connection successfull with 2 obsd behind routers. It's very simple to do... I can see servers, but, how can I do to check my connections is

Re: isakmpd question

2005-08-04 Thread jared r r spiegel
On Wed, Aug 03, 2005 at 09:28:32AM -0400, Brandon Mercer wrote: I've tried running the debug, but I can't figure out which part of the proposal is incompatible. My config has: when i had to setup a tunnel against a speedstream 5930 ( dsl modem/router ), i told the speedstream to make an

nForce SATA testers required

2005-08-04 Thread Jonathan Gray
Can people who are able to test SATA on any nForce board mail me off list?

Re: openbsd 3.7 in-kernel pppoe issues

2005-08-04 Thread Schöberle Dániel
There's no /etc/mygate. That's why I suggested hardwiring the IP. But in your case there was, so this is completely another issue. From: Alexis de BRUYN [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 03, 2005 6:23 PM To: Schvberle Daniel; misc@openbsd.org Subject: RE: openbsd 3.7

Re: ospfd priority problem

2005-08-04 Thread Claudio Jeker
On Thu, Aug 04, 2005 at 06:49:58PM +0800, Lars Hansson wrote: Running a recent snapshot (a few days ago) ospfd seems to have a problem with correctly joining an ospf area unless it's router-priority is 0 or higher than the current BDR. Ospfd is here connected to our ospf backbone wich is a mix

Re: VPN behind a router, now with OpenVPN

2005-08-04 Thread Janne Johansson
Helio Santana wrote: Hi, I've disabled AH in my sysctl.conf but it doesn't work... No I have been trying to do with OpenVPN. After read all how-to, and some samples the connection successfull with 2 obsd behind routers. It's very simple to do... I can see servers, but, how can I do to

Re: ospfd priority problem

2005-08-04 Thread Lars Hansson
On Thu, 4 Aug 2005 13:39:57 +0159 Claudio Jeker [EMAIL PROTECTED] wrote: Could you test the following diff and see if this fixes the problem. It looks like the RFC is busted and we need to find out how to fix it without generating more troubles. Getting the CVS as I type and will test as soon

Re: nForce SATA testers required

2005-08-04 Thread Matteo Mancini
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ya ..I could test it Bye Matteo Jonathan Gray wrote: Can people who are able to test SATA on any nForce board mail me off list? iD8DBQFC0lwE/TjXD9LUVswRAjQfAJ4tC4p05yvI9b1Xz4KpG0n9xTr2BwCfQxqL 4UvYnTItQViOd+OotekeeNk= =WKFS -END PGP

Stupid Carp question

2005-08-04 Thread Monah Baki
Hi all, Implementing carp, I have 2 net4801's that seem to be synchronizing, when I do a ifconfig -a on the secondary I see carp0 on the slave becomes Master when the primary goes down. The internal machines are working fine accessing the internet and all. The pf.conf rule has the 2 rules: pass

Re: Stupid Carp question

2005-08-04 Thread Todd Boyer
On Thursday, August 04, 2005 Monah Baki wrote: However when I physiclly remove the ethernet cable from sis0 on the master, the internal machine cannot access the net anymore. Do I need to copy the pf.conf from the master to the scondary unit, have them both identical Sorry about my

Re: Stupid Carp question

2005-08-04 Thread Todd Boyer
On Thursday, August 04, 2005 Monah Baki wrote: However when I physiclly remove the ethernet cable from sis0 on the master, the internal machine cannot access the net anymore. Do I need to copy the pf.conf from the master to the scondary unit, have them both identical arp cache on the

Re: Ammunition needed to defend OpenBSD/pf

2005-08-04 Thread J.C. Roberts
On Wed, 3 Aug 2005 18:26:52 -0600 (MDT), Diana Eichert [EMAIL PROTECTED] wrote: just use some 50cal BMG rounds, that should be effective ammunition. sorry, I just had to after following this thread for awhile I think you're taking the phrase Bullet-Proof Software a bit too literally. ;-) JCR

IPSEC between OpenBSD (isakmpd) and Linux (FreeS/Wan)

2005-08-04 Thread Guido Tschakert
Hello All, I'm trying to build a vpn between an OpenBSD and a Linux Router. (If I could, I would directly replace the linux box to simplify matters ;-) but that's not possible at the moment :-( BTW: I want to use RSA-based authentication using x509 certificates. I have already build the CA

Re: IPSEC between OpenBSD (isakmpd) and Linux (FreeS/Wan)

2005-08-04 Thread Hans-Joerg Hoexer
Hi, yes, this howto is basically unmaintained since, uhm, several years and I actually should remove it. However, I have configs for interop with Openswan (don't know what's different to Freeswan) somewhere, will dig them out tonight... On Thu, Aug 04, 2005 at 04:09:56PM +0200, Guido Tschakert

Re: Stupid Carp question

2005-08-04 Thread Barry, Christopher
-Original Message- From: Monah Baki [mailto:[EMAIL PROTECTED] Sent: Thursday, August 04, 2005 8:29 AM To: misc@openbsd.org Subject: Stupid Carp question Hi all, Implementing carp, I have 2 net4801's that seem to be synchronizing, when I do a ifconfig -a on the secondary I

make /dev/pf world readable? CLOSED

2005-08-04 Thread Jan Sepp
On Jul 27 09:31 AM, Jan Sepp wrote: Hello, I am creating a shell script that gathers PF statistics for my various interfaces, as in pfctl -i if -vvsI . (Yes, I am aware of the existence of rpfcd, but as I want to monitor only one local box and write the output directly to console, that

Re: Stupid Carp question

2005-08-04 Thread Jon Hart
On Thu, Aug 04, 2005 at 08:28:49AM -0400, Monah Baki wrote: Hi all, Implementing carp, I have 2 net4801's that seem to be synchronizing, when I do a ifconfig -a on the secondary I see carp0 on the slave becomes Master when the primary goes down. The internal machines are working fine

Re: make /dev/pf world readable? CLOSED

2005-08-04 Thread Artur Grabowski
Jan Sepp [EMAIL PROTECTED] writes: The answer was surprisingly simple. I just had to create a second pf device, chown it and make it read-only for the new owner, and I could get my statistics. These are the actual commands: soekris # mknod /dev/pf2 c 73 0 soekris # chown myUser /dev/pf2

Re: ospfd priority problem

2005-08-04 Thread Lars Hansson
On Thu, 4 Aug 2005 13:39:57 +0159 Claudio Jeker [EMAIL PROTECTED] wrote: Could you test the following diff and see if this fixes the problem. No go, still the same problem with router-priority set to 1 and now i doesnt work with router-priority set to 0 either. Other routers shows it as

non-prased headers in openbsd apache

2005-08-04 Thread Ami Emanuel Bizamcher
hey all, how i can use non-prased headers in apache ?!? i have mod_perl installed! im using CGI written in perl. this is my script: (i have used a famous one) #!/usr/local/bin/perl $server_protocol = $ENV{'SERVER_PROTOCOL'}; $server_software = $ENV{'SERVER_SOFTWARE'}; print $server_protocol

Re: non-prased headers in openbsd apache

2005-08-04 Thread Henning Brauer
* Ami Emanuel Bizamcher [EMAIL PROTECTED] [2005-08-04 17:58]: how i can use non-prased headers in apache ?!? maybe by reading the supplied documentation... i have mod_perl installed! im using CGI written in perl. Directory /somewhere Files something.pl SetHandler perl-script

fw(s) w/ NAT, pf and carp - failover during large download

2005-08-04 Thread Barry, Christopher
Hi. I researched this on MARC, and while I did find posts relating to it, I found no definitive answer as to how to solve the problem. I setup two firewalls, each with in/dmz/out/sync interfaces - 4 interfaces each. preempt=1,forward=1,allow=1 I have basic failover working great, but

x86 rings?

2005-08-04 Thread Ed White
Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security?

Re: make /dev/pf world readable? CLOSED

2005-08-04 Thread Matt Provost
On Aug 04 05:21 PM, Artur Grabowski wrote: Jan Sepp [EMAIL PROTECTED] writes: The answer was surprisingly simple. I just had to create a second pf device, chown it and make it read-only for the new owner, and I could get my statistics. These are the actual commands: soekris # mknod

Re: x86 rings?

2005-08-04 Thread Tobias Weingartner
On Thursday, August 4, Ed White wrote: Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? Can you enlighten me how that would improve security? If you can show me a way that does not break the unix/posix model of the universe, I'm all ears. --Toby.

Re: x86 rings?

2005-08-04 Thread Jon Simola
On 8/4/05, Ed White [EMAIL PROTECTED] wrote: Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? /usr/src/sys/arch/i386/i386/machdep.c has: #if defined(I486_CPU) || defined(I586_CPU) || defined(I686_CPU) /* * On a 486 or above, enable ring 0 write

Re: x86 rings?

2005-08-04 Thread Theo de Raadt
Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? Ed, Will you please stop asking uneducated questions like that?

Re: x86 rings?

2005-08-04 Thread eric
On Thu, 2005-08-04 at 17:56:06 +0200, Ed White proclaimed... Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? No, so go back to using Windows and leave us alone.

Re: Eschelon IPO

2005-08-04 Thread Karsten McMinn
On 8/4/05, Scott Call [EMAIL PROTECTED] wrote: On Thu, 2005-08-04 at 13:07 -0500, Tom Kegerreis wrote: Despite everything we've been told, Eschelon went public today. ESCH on the Nasdaq There was an all associates call about an hour ago where they made it pretty clear they were public.

Re: Eschelon IPO

2005-08-04 Thread Karsten McMinn
oh snap. hi [EMAIL PROTECTED] sorry! On 8/4/05, Karsten McMinn [EMAIL PROTECTED] wrote: On 8/4/05, Scott Call [EMAIL PROTECTED] wrote: On Thu, 2005-08-04 at 13:07 -0500, Tom Kegerreis wrote: Despite everything we've been told, Eschelon went public today. ESCH on the Nasdaq There was

Re: Eschelon IPO

2005-08-04 Thread Karsten McMinn
On 8/4/05, Tom Kegerreis [EMAIL PROTECTED] wrote: Previous calls had all said it would be at the end of the year - thats what I meant And since I work nights, I was asleep during the surprise conference call :-) yea its kind of a odd feeling aint it?? remember back in the day were

Re: x86 rings?

2005-08-04 Thread Dave Feustel
On Thursday 04 August 2005 10:56 am, Ed White wrote: Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? Intel VanderPool and AMD Pacifica Virtual PC technologies will add the equivalent of ring(-1) to the x86 architecture. This new hardware capability will permit

Re: x86 rings?

2005-08-04 Thread Ed White
Can you enlighten me how that would improve security? I'm not saying that rings improve security. In fact I'm asking *if* there is any plan to use them to improve security. I think that OpenBSD (and Linux and Windows) uses ring 0 for kernel and ring 3 for userland. I was asking if they

pf syntax error (nat tag)

2005-08-04 Thread Roland Penner
I am setting up new firewall running OpenBSD 3.7. I am trying to implement rules using tagging. I ran into trouble with the following line: nat on $ext_if tagged LAN_INET tag LAN_INET_NAT - ($ext_if) I get the following error: /etc/pf.conf:16: syntax error I am starting with a sample rule

Re: x86 rings?

2005-08-04 Thread Theo de Raadt
However, I think that the uneducated answer by Theo means no. No, what I mean is that asking a stupid question, which shows you did NO WORK AT ALL TO LEARN ABOUT THIS, just makes you look like some low-grade slashdot dumbfuck. You heard about rings somewhere. Whooptie doo. You didn't even

Re: make /dev/pf world readable? CLOSED

2005-08-04 Thread Jan Sepp
Matt Provost wrote: On Aug 04 05:21 PM, Artur Grabowski wrote: Jan Sepp [EMAIL PROTECTED] writes: The answer was surprisingly simple. I just had to create a second pf device, chown it and make it read-only for the new owner, and I could get my statistics. These are the actual

Re: x86 rings?

2005-08-04 Thread Dave Feustel
Ed, Ever read anything about MIT's Multics and the GE 645?

Re: hardware monitoring

2005-08-04 Thread Rickard Dahlstrand
Shawn K. Quinn wrote: I'm able to get sensor data from the BIOS; is there something I'm missing to be able to get them from within OpenBSD on this system? dmesg follows... Give xmbmon a try. Rickard.

Re: pf syntax error (nat tag)

2005-08-04 Thread Johan Fredin
On Thu, 4 Aug 2005, Roland Penner wrote: I am setting up new firewall running OpenBSD 3.7. I am trying to implement rules using tagging. I ran into trouble with the following line: nat on $ext_if tagged LAN_INET tag LAN_INET_NAT - ($ext_if) I get the following error: /etc/pf.conf:16: syntax

Re: non-prased headers in openbsd apache

2005-08-04 Thread Ami Emanuel Bizamcher
Anyone on this list can help ?!? On 8/4/05, Ami Emanuel Bizamcher [EMAIL PROTECTED] wrote: i have tryed what you said but i get nothing... i just waits for the loop to finish then sends the data. i also checked the output directly echo GET /cgi-bin/somefile.pl | nc 127.0.0.1 80 but no

ath0: unable to gain access to wireless unencrypted network

2005-08-04 Thread Bryan
I've been trying to figure this out for a while now. I've consulted the man pages for ath, ifconfig, and dhclient. I've checked the mailing lists, and done many searches, even looking at Free and NetBSD examples... but I am stumped. I bought for my Dell Inspiron 5150 laptop a DWL-650. Hardware

syslogd udp port

2005-08-04 Thread poncenby
I remember asking how to stop syslogd opening udp port 514 a while ago and never doing anything about it, here goes again... hopefully a relevant part of /etc/rc echo 'starting system logger' rm -f /dev/log if [ X${named_flags} != XNO ]; then rm -f /var/named/dev/log

Re: x86 rings?

2005-08-04 Thread Tony
Unless I am very much mistaken, this is Unix not Multics. To do anything with the rings, you must make userland into a three-ring circus. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Feustel Sent: Thursday, August 04, 2005 4:05 PM To: Theo de Raadt

Re: syslogd udp port

2005-08-04 Thread Theo de Raadt
The port is also used to (potentially) send data out to other syslog servers. Therefore, it is left open. This is made ASTOUNDINGLY clear in the manual page, if you would read it: syslogd opens the above described socket whether or not it is running in secure mode. If syslogd is

Re: syslogd udp port

2005-08-04 Thread Tobias Weingartner
On Thursday, August 4, poncenby wrote: I remember asking how to stop syslogd opening udp port 514 a while ago and never doing anything about it, here goes again... And people asked you to search the archives. Proto Recv-Q Send-Q Local Address Foreign Address(state) udp

Re: syslogd udp port

2005-08-04 Thread Kevin
On 8/4/05, poncenby [EMAIL PROTECTED] wrote: I remember asking how to stop syslogd opening udp port 514 a while ago and never doing anything about it, here goes again... Sure, syslogd opens UDP/514, but unless you use the '-u' flag the very next thing it does is call shutdown(), which prevents

software testing

2005-08-04 Thread Gustavo Rios
Hey folks, i have written a piece of code i would like to test with openbsd on soekris hardware. My work is a replacement for DJB CDB with a the nice BSD license. I wonder if some in this list could provide me such environment in the following sense: 0) grant me a shell access for doing my

Re: Via C3 IPSec test result

2005-08-04 Thread Mike
On Wed, 2005-08-03 at 15:29 +0200, Massimo wrote: I've made up a test LAN built on two mini-ITX Via C3 based board to test the AES encryption functionality of this CPU on a real setup. I've used flashboot 0.7.2 from Damien simply for a matter of time (I've some flash card already configured)

Re: x86 rings?

2005-08-04 Thread Dave Feustel
On Thursday 04 August 2005 04:47 pm, [EMAIL PROTECTED] wrote: Unless I am very much mistaken, this is Unix not Multics. To do anything with the rings, you must make userland into a three-ring circus. That is precisely the point. The C programming language and Unix are incompatible with the

Re: software testing

2005-08-04 Thread Bob Beck
if it's in userland you don't need to do anything special for it to run on soekris hardware i386 is i386 is i386. Have you run your stuff on OpenBSD i386? -Bob * Gustavo Rios [EMAIL PROTECTED] [2005-08-04 16:31]: Hey folks, i have written a piece of code i would like to

Re: software testing

2005-08-04 Thread Gustavo Rios
Yeah! On 8/4/05, Bob Beck [EMAIL PROTECTED] wrote: if it's in userland you don't need to do anything special for it to run on soekris hardware i386 is i386 is i386. Have you run your stuff on OpenBSD i386? -Bob * Gustavo Rios [EMAIL PROTECTED] [2005-08-04 16:31]:

Re: x86 rings?

2005-08-04 Thread Roger Neth Jr
Hello, I have been reading this thread as of some interest that I have read some stuff on rings. Are you able to elaborate on C programming and Unix incompatible with x86. Does this mean that other architectures such as Alpha, SGI and Sparc more compatible? Thank you, rogern From: Dave

Re: x86 rings?

2005-08-04 Thread Tony
Rings and segments are pretty much orthogonal concepts. C is hardly unique in not supporting segmentation. The only languages I am aware of that even come close are Burroughs Algol and PL/I (and as always Basic Assembly). (Lisp?) But overriding is the fact that x86 supporting segments does not

Requesting an change in the installer

2005-08-04 Thread sebastian . rother
Hello everybody, I wanna request a little change in the installer. If I install OpenBSD on SMP-Computers I select bsd.mp during the install. I noticed that bsd.mp will not be renamed to bsd if I don't select any other Kernels during the setup. Is it possible to provide a renaming in the

Re: Soekris OBSD as servers

2005-08-04 Thread Scott Francis
On 8/4/05, Gustavo Rios [EMAIL PROTECTED] wrote: I would like to set a obsd and soekris boxes as a server for about 100 users. This box is supposed to handle NIS + Kerberos. Does such configuration can handle the task ? I mean on a performance matter. Does anybody have such configuration?

Re: software testing

2005-08-04 Thread Scott Francis
On 8/4/05, Gustavo Rios [EMAIL PROTECTED] wrote: I asked to see how the box would behave in terms of performance. go grab the oldest PC you can find and you'll probably have roughly equivalent CPU and RAM performance. I hope you're not considering disk I/O as part of performance, because Soekris

Re: Soekris OBSD as servers

2005-08-04 Thread Gustavo Rios
On 8/5/05, Scott Francis [EMAIL PROTECTED] wrote: On 8/4/05, Gustavo Rios [EMAIL PROTECTED] wrote: I would like to set a obsd and soekris boxes as a server for about 100 users. This box is supposed to handle NIS + Kerberos. Does such configuration can handle the task ? I mean on a

Re: software testing

2005-08-04 Thread Gustavo Rios
You're also likely to get more useful responses if you include _any_ details about what your software does, what it's written in, or even a URL to the source (if you really want useful comments). Here you have it: http://www.cyberspace.org/~grios/project.html Since, i would really appreciate

Re: syslogd udp port

2005-08-04 Thread J.C. Roberts
On Thu, 04 Aug 2005 15:50:58 -0600, Theo de Raadt [EMAIL PROTECTED] wrote: The port is also used to (potentially) send data out to other syslog servers. Therefore, it is left open. This is made ASTOUNDINGLY clear in the manual page, if you would read it: syslogd opens the above described