Syncing users between two OpenBSD systems

2022-02-21 Thread Dave Wilson
Hi all, I am setting up a pair of OpenBSD jump boxes, to be a pair of bastion hosts of a large network. I would like to have a primary and backup, with the same set of users on each one. I do not want to use YP or any other form of authentication server, because part of the use case for these

Re: openbsd 5.8 pre-orders

2015-08-19 Thread Dave Wilson
On 19 August 2015 at 16:29, Theo de Raadt dera...@cvs.openbsd.org wrote: This is being stretched out to ensure the CD2 production problems happen again. ARGh, to ensure they DON'T happen again. I just assumed you were being sarcastic ;-)

Re: using relayd in transparent mode

2012-03-28 Thread Dave Wilson
2012/3/28 Eric Furman ericfur...@fastmail.net: To reinforce again to those that don't get it. EVERYTHING at Calomelshit.fuck is bullshit out of date fucking garbage. That is C a l o m e l dot o r g It is an insult to OBSD that this site still exists. It displays open contempt to the OBSD

Re: a secure web server

2010-05-24 Thread Dave Wilson
On 24/05/2010 11:44, Jozsi Vadkan wrote: I want to use a secure web server on OpenBSD. It would serve only static html filest, no cgi, no php, etc. It just have to be secure, no need to be fast, just secure [only using it with https]. What would be the best web server software?

Re: Hardware input / output modules

2010-01-20 Thread Dave Wilson
On 20/01/2010 17:45, Jean-Francois wrote: Hi All, May I ask if someone ever used a PCI card integrating some input / output (anaolg and/or digital signals) in OpenBSD ? I am looking forward to incorporate external measurements to the webserver, making available environement variables to

Re: How to turn on the numlock?

2009-12-27 Thread Dave Wilson
On 27/12/2009 23:47, xeagle linux wrote: *Hi,* ** *I would like to open the numeric keys automatically every time when OpenBSD starts !* *Who can help me?* ** *Mysorrow* Easiest way is, most BIOSes these days have an option to have numlock default to on at boot. I'm sure you could do

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability

2009-11-08 Thread Dave Wilson
Toni Mueller wrote: now you only need to educate us about how such machines can be used in an economic fashion. Blaming people for not running PDA cpus for core routers or not shelling out $40k for Niagara machines (supported by OpenBSD???) when these are even outperformed by $4k PCs in

Re: 4.6 arriving

2009-10-16 Thread Dave Wilson
Lars Nooden wrote: patrick keshishian wrote: ...So long as Theo continues his no compromise/no bullshit attitude and keeps the project truly free and secure, I will continue my support of the project (what little it may be). +1 Hey, I'm not for a moment suggesting its a /bad/ thing.

Re: 4.6 arriving

2009-10-15 Thread Dave Wilson
Robert McGillshaw wrote: my 4.6 arrived in the uk today from openbsd europe... thanks for the release to all developers. keep going! btw. my favourite 'looking' release to date. the cds looks cool. thank you -robbo Same here in Coventry, UK. Cheers OpenBSD Europe! Is it me, or

Can someone tell me if my disk is dying...

2009-07-08 Thread Dave Wilson
Or if I just have a munged partition? Background: Box is a Sun Fire T1000, running 4.5, used as a mirror for my various internal boxes. It was running OpenBSD shortly after the T1 gained support, and what with running snapshots to test and whatnot, has hung and had to fsck more times than I care

ipmi support on a Dell PowerEdge SC1425

2009-04-17 Thread Dave Wilson
... isn't working, at least not for me. Google has found me this sample dmesg from 4.0: http://www.armorlogic.com/openbsd_information_server_compatibility_list.html?action=detailid=dsc1425 And this from Marco Peereboom announcing ipmi support: http://marc.info/?l=openbsd-miscm=112993650617151w=2

Re: Parallel build in ports - make -j4

2009-03-26 Thread Dave Wilson
Christian Weisgerber wrote: I'm not happy with this approach of delaying all parallel building until things are perfect. In practice, a lot could be gained by simply marking all ports that are parallel-safe right now (or conversely, marking all those that aren't), without attempting to fix

Re: European orders

2009-03-25 Thread Dave Wilson
frantisek holop wrote: that is all i am asking. more transparency in this open project. Whilst transparency is a good thing, and the project is known for its open stance, surely in this particular case it would be imprudent for us to comment further until the parties directly involved have

Re: 1.2GHz US$99 ARM wall plug

2009-02-25 Thread Dave Wilson
Nick Holland wrote: Dave Wilson wrote: http://linuxdevices.com/news/NS9634061300.html Marvell Semiconductor, eh? They look rather nifty. Even the hardware design is to be released under some sort of open license. a company with a spotty history on open -- see malo(4) (spotty

1.2GHz US$99 ARM wall plug

2009-02-24 Thread Dave Wilson
http://linuxdevices.com/news/NS9634061300.html They look rather nifty. Even the hardware design is to be released under some sort of open license. We've already got the armish port. If Dale Rahn or another OpenBSD dev wants to do a port to this thing, I'll buy them the dev kit to do it with.

Re: user-friendliness and netbsd

2009-02-23 Thread Dave Wilson
Snip possibly trolling stuff Only one OS has been holding out against HappyNewWorld's rampaging user-friendliness, GUIs co. armies: OpenBSD! On the contrary, I find OpenBSD remarkably user-friendly. Almost everything I want is already in base, most things are set up with intelligent and safe

Silly serial console question

2009-02-10 Thread Dave Wilson
In my grandfather's attic (RIP) I unearthed one of these: http://www.omnidatasys.net/product/spec_dataterminal_ti703.htm which in a nutshell is a paper terminal which runs at 300 baud. I figured it could be fun to set it up as a serial console on one of my machines, and maybe useful if I left

Serial port on ThinkPad T41 docking station

2009-02-04 Thread Dave Wilson
Hi all, I've got an IBM ThinkPad T41, dmesg below, and the appropriate docking station, 74P6733. Said docking station has a serial port on it. I can't find any referance to serial devices in the dmesg, and trying cu -l /dev/cua00, and indeed cua01 and all the rest, gives device not configured.

Re: Serial port on ThinkPad T41 docking station

2009-02-04 Thread Dave Wilson
Jonathan Gray wrote: If it's anything like the T42 the serial port is disabled by default in the bios, it is included in the laptop but you need something like a port replicator/docking station to get a physical connector. After changing the bios option it should just work, you can even

Re: Capturing useful debugging info on a hung machine (T1000)

2009-01-19 Thread Dave Wilson
Stuart Henderson wrote: set ddb.console=1 (needs to be done with securelevel=0; add to sysctl.conf and reboot), then you can send a BREAK over the serial port and usually it will put you into DDB. I set the sysctl a while ago. It hung again today whilst I was trying to SSH an ISO to it, so

Capturing useful debugging info on a hung machine (T1000)

2009-01-15 Thread Dave Wilson
I have a Sun Fire T1000 (sparc64), which a while ago was occasionally panicking, and I submitted a bug. kettenis@ commited a fix, and it stopped panicking. All good. Now I have a different problem. Every now and then, it just hangs. As far as I can tell, its a complete hardlock. I can't get it to

Re: Port ZFS to OpenBSD

2009-01-15 Thread Dave Wilson
Khalid Schofield wrote: Dev's. What are the chances of getting a port of ZFS to OpenBSD? I can't quite bring myself to run solaris since it lacks so much of what I love about OpenBSD and Linux is back to square one because of the reasons I moved to OpenBSD. Khalid Given the Dev's

Re: environmental prerequisites for kernel development (was Re: Any Dev interested in SIS Ethernet/SATA driver development?)

2008-12-27 Thread Dave Wilson
Lars NoodC)n wrote: bofh wrote: I think Marco's point was that if there are crashes, lockups, etc, it is a pain in the ass not to have console access, or to be able to unplug the power and reboot into a working config/kernel, etc etc. ... Access to a second box, for control, which has both

Re: /usr/obj slice size

2008-12-15 Thread Dave Wilson
Paul de Weerd wrote: On Mon, Dec 15, 2008 at 06:17:53AM -0600, Ed Ahlsen-Girard wrote: 2. In any case, how big does that slice need to be? Mine is 2G, but the size depends on a lot of things. What arch are you building for ? Do you only build kernels ? Full make build ? Making Xorg ? I

bge vs nfe in a Sun Fire X2200

2008-12-12 Thread Dave Wilson
Hi all, I'm about to build a router using a Sun Fire X2200, which comes with 4 on-board gigabit ethernet interfaces: nfe0 at pci0 dev 8 function 0 NVIDIA MCP55 LAN rev 0xa3 eephy0 at nfe0 phy 2: Marvell 88E1149 Gigabit PHY, rev. 1 nfe1 at pci0 dev 9 function 0 NVIDIA MCP55 LAN rev 0xa3 eephy1 at

Missing command in ddb after panic in Sparc64 MP

2008-12-10 Thread Dave Wilson
: Dave Wilson [EMAIL PROTECTED] To: [EMAIL PROTECTED] As subject, was doing a cvs up of /usr/src from a cvs mirror on the local machine (its my anoncvs/OS packages mirror), and it panic'd. This is the third time its done this since I switched from -stable to -current, each time with a later snap

Re: 4.4 in Poissy, near Paris, France

2008-10-13 Thread Dave Wilson
Freddy DISSAUX wrote: Thanks to all the developers for a job well done. Just arrived by morning post here in Coventry, Great Britain. 2 T-shirts and a shiny shiny disk set. Cheers Wim! SD

Re: Using trunk(4) to put a router in a switch ring

2008-09-24 Thread Dave Wilson
Pete Vickers wrote: well i think you could insert your dual NIC openbsd host into the switch 'ring' physically, then bridging between the 2 NICs and firing up STP, but be aware that every time you up/down an interface or reboot your openbsd box, you'll trigger an STP recalc - which is around

Re: Using trunk(4) to put a router in a switch ring

2008-09-23 Thread Dave Wilson
Pete Vickers wrote: 1. create a layer 2 (switched) ring, using spanning tree. - completely independent of openbsd box 2. connect your (dual NIC) openbsd box to 2 separate switches for redundancy, and add both NICs to a trunk group. - redundancy of switch, cabling and NICs. Pete, thanks for

Using trunk(4) to put a router in a switch ring

2008-09-22 Thread Dave Wilson
I am trying to work out a way to add some redundancy to my network, by putting my switches in a ring. I have a pair of CARP'd routers, each with 2 GigE interfaces, and the ability to add more on PCI-E cards. I have a number of switches with 24x100Mb ports and 2 GigE uplink ports. Currently

Re: Can't start Apache... MaxCPUPerChild is invalid??

2008-09-03 Thread Dave Wilson
Sunnz wrote: Ahh I see, so how does memtest to compare to something like building the userland? memtest is targeted specifically at extensively testing your machine's memory, where building the userland will place load on not only the memory, but also the hard drive, testing both. The fact

Re: pf visualization

2008-08-31 Thread Dave Wilson
and running a patched version? I am a sysadmin rather than a coder, but I will happily do anything I can to assist you. Dave Wilson. [0] Although granted, what I know about programming could fit on the back of an envelope.

Re: postgresql

2008-08-07 Thread Dave Wilson
bofh wrote: Hi all, I'm looking at a project that I'm trying to run on openbsd. All that box will have is postgresql. At this time, it's just 2 programmers and 1 sysadmin type person that's involved, no DBAs, so apologies if the questions are... too simplistic. And I realize if I want to

Re: syslogd -a question

2008-08-06 Thread Dave Wilson
Stuart VanZee wrote: Hello OpenBSD Misc, I have been doing some work with chrooting user accounts for a project, and now I am looking to get syslogd working. I found out that I need a log socket in the chroot environ for this to work and the -a option does this fine and works great! BUT... now

Re: Identifying Bandwidth Hogs

2008-07-16 Thread Dave Wilson
Sean Malloy wrote: Hello, Maybe NetFlow. Checkout the pfflowd and flowd packages. I seem to recall it being said that the recent change if the pfsync protocols (which pfflowd uses as its datasource) means that since 4.3 (possibly 4.2, I forget when the pfsync stuff went in) pfflowd doesn't

DHCPd with CARP

2008-05-20 Thread Dave Wilson
IPs per subnet (CARPd gateway IP, dhcp for firewall A, dhcp for firewall B) rather than 1 if I can do it all on the carp interface. Ta all, Dave Wilson PS: I apologise if this post is overly verbose, but after seeing so many posts saying there's not enough information, I'm trying to not leave

Sparc64 and T1 support (also the nature of MP)

2008-04-09 Thread Dave Wilson
I may soon get the opportunity to obtain a Sun Fire T1000, which I believe uses a T1 CPU. I think sparc64.html says that this is now supported in 4.3-current, ie HEAD as of right now. I am highly tempted to take up the offer of the machine, just because I've fancied playing with something not

Sparc64 and T1 support (also the nature of MP)

2008-04-09 Thread Dave Wilson
I must apologise, since my last reinstall I lost my text wrapping. Reposted at 72cols as per the list guidelines. Sorry for noise. I may soon get the opportunity to obtain a Sun Fire T1000, which I believe uses a T1 CPU. I think sparc64.html says that this is now supported in 4.3-current, ie

Re: Why Sendmail?

2008-03-14 Thread Dave Wilson
Gustavo Polillo wrote: Why is sendmail a default smtp server and not is postfix or qmail? Why is it that this message got attatched to an existing thread in my mail client? Ah. Because it has the exact same subject line, and covers the exact same subject. Funny that. To make this email