Re: Capturing kernel debugger output without serial console

2008-12-18 Thread Lars D . Noodén
On Wed, 17 Dec 2008, Stuart Henderson wrote: Are your userland and kernel in sync? I update bsd and bsd.rd along with the other sets from each snapshot, so if that works, then yes. Regards, -Lars

Re: Capturing kernel debugger output without serial console

2008-12-18 Thread Lars D . Noodén
Thanks! On Wed, 17 Dec 2008, Josh Grosse wrote: ... * ddb boot crash The ddb output can be found in the dmesg saved in the core dump. See the -M and -N options of dmesg(8). That puts the dumps in /var/crash. crash(8) mentions a little about how to retrieve information from the dump:

Re: Capturing kernel debugger output without serial console

2008-12-18 Thread Lars D . Noodén
On Wed, 17 Dec 2008, Josh Grosse wrote: ... * ddb boot crash The ddb output can be found in the dmesg saved in the core dump. ... It may be useful to add that setting systctl ddb.panic=0 will automatically save the core dump, saving a step and some time. Regards, -Lars

securelevel(7) and gpioctl(8)

2008-12-09 Thread Lars D . Noodén
On Mon, 8 Dec 2008, Marc Balmer wrote: NB: not all arches have GPIO. Thanks. Ok. I see now. The online pages return a result only for items present in all architectures. The need for Securelevel 0 was mentioned. Does that mean the device must operate in securelevel 0 in order to turn

manpage for gpioctl(8) missing?

2008-12-08 Thread Lars D . Noodén
gpioctl(8) seems to be missing from the web version: http://www.openbsd.org/cgi-bin/man.cgi?query=gpioctl it is present in 4.4-current on i386 and 4.3 on i386 Regards, -Lars Lars NoodC)n ([EMAIL PROTECTED])

Re: bundling the speed of two ADSL lines with OpenBSD

2008-07-04 Thread Lars D . Noodén
On Thu, 3 Jul 2008, Vinicius Vianna wrote: ... take a look at http://www.openbsd.org/faq/faq6.html#Multipath ... ... Remember that you will be splitting the outgoing connections between the two gateways (adsl lines in your case), so a single connection will have the bandwidth of only one of

Re: ssh-keygen not reading stdin as expected

2008-06-16 Thread Lars D . Noodén
On Sun, 15 Jun 2008, Philip Guenther wrote: ssh-keygen's -l option is not designed for operation with pipes. In particular, depending on the key type in the file, it generally needs to open and read the file multiple times. That is, it first passes the filename to the read file as RSA1

Re: developer laptop choices

2008-06-16 Thread Lars D . Noodén
On Mon, 16 Jun 2008, Michiel van Baak wrote: On 09:33, Mon 16 Jun 08, Michael Gale wrote: I just picked up a IBM Thinkpad T61p. I have the same and really love it. How were either of you able to get one without the Windows tax? EU reports last autumn showed that is about half the cost.

Re: developer laptop choices

2008-06-16 Thread Lars D . Noodén
On Mon, 16 Jun 2008, Ted Unangst wrote: Woah. I can get a two grand notebook for only one grand without windows? Varies depending on overall prices, and only if the savings are not pocketed entirely. http://www.cybersource.com.au/users/conz/why_the_unbundling_windows_sceptics_ are_wrong.html

Re: alternatives to sendmail

2007-06-04 Thread Lars D . Noodén
Exim and postfix are probably your two easiest options. http://www.postfix.org/ http://www.exim.org/ -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now and in the future http://opendocumentfellowship.org/about_us/contribute On Mon, 4 Jun 2007,

Re: Linux and Novell article in Linux Journal

2007-06-01 Thread Lars D . Noodén
Admirable sentiment. However, problem is with the methods, which are in the US governed by software patents. Don't get that confused with copyright which governs distribution. In the case of the software patents, it doesn't matter how the code is made or even if the code is visisble, only what

Re: vpn in OBSD 4.1

2007-05-11 Thread Lars D . Noodén
On Fri, 11 May 2007, Adam Hawes wrote: You're well advised to go do some reading on your own. If you had you would have discovered that OpenVPN ahs a tutorial page for configuring the server, as does the readily available PPTP server. It's not a funny joke to be recommending PPTP to anybody.

Re: vpn in OBSD 4.1

2007-05-11 Thread Lars D . Noodén
On Fri, 11 May 2007, sonjaya wrote: so i must using ipsec for security reason , IPsec or SSL. You may wish to try IPsec with IPv6. That will future-proof your VPN, at least in theory, and raise the bar slightly for intrusion. how about the client ( such us Microsoft ) can they use ipsec too.

Re: OT: GUI programming languages

2007-05-08 Thread Lars D . Noodén
On Mon, May 07, 2007 at 11:34:55AM -0500, Jacob Yocom-Piatt wrote: ... the applications in question are click here, prints something in a text box, etc ones that are not very complex. a language that allows me to generate GUIs quickly and securely would be nice. Python and ruby are getting a

Re: Chances of this hardware running OpenBSD?

2007-05-08 Thread Lars D . Noodén
It's been an awfully long time since the last model. What's the expected timeline on the release date for the hardware? It looks interesting. I'd be even more interested in a PPC-based equivalent of the MacMini. -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now

Re: Openbsd ipsec with cisco vpn client

2007-04-20 Thread Lars D . Noodén
On Fri, 20 Apr 2007, Claer wrote: On Thu, Apr 19 2007 at 53:12, carlopmart wrote: Somebody have tried to use cisco vpn client to connect to openbsd ipsec gateway using user and pass or x509 certificates? Can somebody sends me some examples ? It's explicitely forbidden in the license. So I

Audio for OpenAFS presentations

2007-04-17 Thread Lars D . Noodén
While we're on the topic of OpenAFS ... are there any good conference workshops, presentations or interviews online (MP3 / Vorbis / AAC) covering OpenAFS on OpenBSD? Or failing that, on OpenAFS security or OpenAFS in general? -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your

Re: cron doesn't run commands in /etc/crontab?

2007-03-28 Thread Lars D . Noodén
Feel free to laugh if this is a stupid question, but have you made sure to leave an extra empty line at the end of the crontab? Are you in /var/cron/cron.allow ? Also, I usually pack everything into a script and then have cron call the script. It makes verbose comments and multi-line commands

Re: VPN

2007-03-26 Thread Lars D . Noodén
Is the VPN using IPsec or SSL? -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now and in the future http://opendocumentfellowship.org/about_us/contribute

Re: sshd.config and AllowUsers

2007-03-26 Thread Lars D . Noodén
Others have mentioned the correct syntax already. One suggestion which helps administration is to assign or revoke access (or other privileges) based on groups rather than individual users. In otherwords, make the users members of a group and grant that group access. It helps scalability,

Re: VPN

2007-03-26 Thread Lars D . Noodén
It may not be the wisest thing to be trying PPTP. In addition to the technical problems you are encountering, there seem to be some grave issues with the protocol itself, http://www.schneier.com/pptp-faq.html which are apparently not resolved entirely even in later versions. IPsec and

Re: Microsoft gets the Most Secure Operating Systems award

2007-03-22 Thread Lars D . Noodén
On Thu, 22 Mar 2007, RedShift wrote: Siju George wrote: http://www.internetnews.com/security/article.php/3667201 Just for some entertainment, no troll :-) IMHO it's not a fair comparison, most linux distributions ship with alot more software than microsoft windows does, and most bugreports

Re: Does anyone know a good file manager for OpenBSD?

2007-03-21 Thread Lars D . Noodén
Others have recommended wget. I strongly recommend it as well, there are loads of ways to use it: http://www.die.net/doc/linux/man/man1/wget.1.html curl also is quite useful. I also highly recommend ncftp. -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now

adding X11 libraries after the fact

2007-03-20 Thread Lars D . Noodén
I excluded X11 from an installation of OpenBSD 4.0 and now find that some packages I would use seem to depend on some of the X11 libraries. What is the best way to resolve package dependencies and/or install X11? I recall in the installation there were some sets that could be chosen. Or else,

Re: adding X11 libraries after the fact

2007-03-20 Thread Lars D . Noodén
Thanks. That's it. I was even looking in right part (#4) of the FAQ, but needed that direct pointer. -Lars On Tue, 20 Mar 2007, Josh Grosse wrote: FAQ 4.10, Adding a fileset after install is what you're looking for. Here's a handy link: http://openbsd.rt.fm/faq/faq4.html#AddFileSet On Tue,

Re: No Blob without Puffy

2007-03-19 Thread Lars D . Noodén
On Mon, 19 Mar 2007, Dave Anderson wrote: You've left out the extremely important fact that many vendors interpret acceptance of blobs by any free OS as validating their position of not releasing adequate documentation -- so accepting blobs (even when there's no other choice) actively harms

verification of downloads - signature, checksums, fingerprints

2007-03-17 Thread Lars D . Noodén
What's the best practice for ensuring that the correct files are downloaded and that they are unmodified either at the mirror, in transit, or by someone masquerading as a mirror? The CD images seem to come with some checksums, but is there some certificate or key that can be acquired to ensure

Re: Contradictory statement on vulnerability

2007-03-16 Thread Lars D . Noodén
On Fri, 16 Mar 2007, Tobias Weisserth wrote: A nice newbie site explaining this with examples is www.openbsd101.com, if you don't understand the OpenBSD FAQ. Thanks for posting that one. It hadn't turned up in any of my searches and if it was in any documents I already looked at, I must have

Re: Patching and/or updating

2007-03-11 Thread Lars D . Noodén
On Sun, 11 Mar 2007, Nico Meijer wrote: To speed things up, download src.tar.gz and sys.tar.gz from a local mirror; cd *into* /usr/src/ and untar: tar zxf /path/to/both/files.tar.gz. Yeah, I noticed that it would take a long time and a lot of disk space to download the whole works. So, I just

Patching and/or updating

2007-03-10 Thread Lars D . Noodén
I've the stable branch of OpenBSD 4.0 on an i386 and am searching for a concise description of how to apply a patch and how to upgrade a specific application. Currently the FAQ[1] and Following Stable[2] have no concrete examples. (At least nothing that jumps out and bites me.) So what steps

Re: Patching and/or updating

2007-03-10 Thread Lars D . Noodén
Thanks. On Sat, 10 Mar 2007, Nico Meijer wrote: Read release(8) and follow that procedure. Build once, deploy at will. Building my own release looks useful when I deal with more machines later. I didn't this time so, so there is no /usr/src directory to work with. ie. The first step in that

tun/tap + bridge (was: ssh in to a qemu guest)

2007-03-06 Thread Lars D . Noodén
On Mon, 5 Mar 2007, Tobias Weisserth wrote: You are posting to the wrong list. This is OpenBSD misc, not qemu users. What you are trying to solve is perfectly described on the qemu homepage in the qemu manual... It looks from the qemu docs (which mostly use linux in their examples) like I have

Re: qemu disk images

2007-03-05 Thread Lars D . Noodén
How do you start qemu AFTER the install is completed? Something like this? qemu -k fi -hda debian.ext2.dmg -hdb debian.swap.dmg I can't get that far: It's not possible to complete the installation because the drives used in -hda -hdb cannot be partitioned or mounted by the

Re: qemu disk images -- resolved

2007-03-05 Thread Lars D . Noodén
Ok. I figured out how to resolve the problem, but through a work-around. One main difference was I had to use qemu-img instead of dd to create the disk images. The other was during the guest system install to make logical partitions *not* primary partitions. qemu-img create -f qcow

ssh in to a qemu guest

2007-03-05 Thread Lars D . Noodén
qemu is now running on an OpenBSD host, with Debian as the guest system. I can reach the net from inside the guest systems. What changes must be made to the networking on the host so that I can ssh *into* the guest systems from outside? -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure

qemu disk images

2007-03-04 Thread Lars D . Noodén
How can I create disk images that I can use in qemu on OpenBSD to install debian as a guest system? I've got qemu installed on openbsd and have been trying to install some guest systems but there is difficulty mounting any of the disk images. The installation process seems to progess nicely,

Re: jails in openbsd

2007-03-02 Thread Lars D . Noodén
Yes. I want to run several separate instances of Debian under OpenBSD. I've started looking at sysjail and can look at qemu. Would there be any special reasons to choose qemu over others, besides that it's available in ports? -Lars Lars Nooden ([EMAIL PROTECTED]) On the Internet,

Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
How does OpenBSD handle mounting ext2 filesystems? What's wrong or missing from the attempt below? $ sudo vnconfig svnd0 debian.img $ sudo vnconfig -l vnd0: covering debian.dmg on wd0h, inode 41670 vnd1: not in use vnd2: not in use vnd3: not in use $ mkdir debian $ sudo mount -t

Re: Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
On Fri, 2 Mar 2007, Paul de Weerd wrote: [snip] You might want to check out chapter 9 of the very nice FAQ OpenBSD has, find it on http://www.openbsd.org/faq/faq9.html ... [snip] Thanks. It's useful, but neither ch 9 nor ch 14 explicitly show an OpenBSD analog to this from the other system:

Re: Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
On Fri, 2 Mar 2007, [EMAIL PROTECTED] wrote: A See fstab(5) for types of supported filesystems in the already excellent man page would have been helpful. Or is this seen as already overly obvious? It was one of the first things I checked. From fstab's man page: ext2fs A local

jails in openbsd

2007-03-01 Thread Lars D . Noodén
I'd like to look at some virtualization options for openbsd. The ultimate goal would be to get several isolated Debian systems running inside some kind of enironment for virtualization. Can you point me to an openbsd package, port or source code for the freebsd jail or an equivalent? -Lars