Re: Opensmtpd auth in 6.4

2019-01-12 Thread Carlin Bingham
On Sat, Jan 12, 2019 at 05:36:11PM +0100, Flipchan wrote:
> Hey, am tryin to upgrade my opensmtpd 
> email server running on openbsd 6.3 towards a new one on 6.4, 
> i have used a simple config with the new syntax:
>  cat /etc/mail/smtpd.conf 
> 
> table aliases file:/etc/mail/aliases 
> 
> #table other-relays file:/etc/mail/other-relays 
> 
> pki mail.example.com cert "/etc/ssl/mail.example.com.crt" 
> pki mail.example.com key "/etc/ssl/private/mail.example.com.key" 
> 
> listen on lo0 
> listen on vio0 port 587 hostname example.com tls-require pki mail.example.com 
> auth mask-source 

mask-source was changed to mask-src 

I think because mask-source is no longer a valid keyword its being
interpreted as a parameter to auth.


--
Carlin



Re: demystifying trap

2019-01-12 Thread Juan Francisco Cantero Hurtado
On Sat, Jan 12, 2019 at 01:10:19PM -0800, Philip Guenther wrote:
> On Sat, Jan 12, 2019 at 10:49 AM Predrag Punosevac 
> wrote:
> 
> > Could one of peple with some rudimental knowledge of kernel interals
> > tell me what am I seeing here
> >
> > Jan 12 13:42:37 oko /bsd: trap [mmonit-bin]89524/427284 type 6: sp
> > 122488ae75d0 not inside 7f7fffbf4000-7f7f4000
> >
> 
> 'sp' means "stack pointer" in here.  The kernel is killing your process
> because it moved its stack pointer outside the memory which was mapped with
> MAP_STACK.  This is most often seen with userspace thread implementations
> that haven't been updated to use MAP_STACK when allocating memory for
> thread stacks.

Predrag, if you're a mmonit customer, ask for a binary compiled on
OpenBSD 6.4. They're using quite old libraries. ldd shows the binary is
linked with libc.so.88.0 and libpthread.so.22.0. OpenBSD 6.4 is shipped
with libc.so.92.5 and libpthread.so.25.1.


-- 
Juan Francisco Cantero Hurtado http://juanfra.info



Re: demystifying trap

2019-01-12 Thread Philip Guenther
On Sat, Jan 12, 2019 at 10:49 AM Predrag Punosevac 
wrote:

> Could one of peple with some rudimental knowledge of kernel interals
> tell me what am I seeing here
>
> Jan 12 13:42:37 oko /bsd: trap [mmonit-bin]89524/427284 type 6: sp
> 122488ae75d0 not inside 7f7fffbf4000-7f7f4000
>

'sp' means "stack pointer" in here.  The kernel is killing your process
because it moved its stack pointer outside the memory which was mapped with
MAP_STACK.  This is most often seen with userspace thread implementations
that haven't been updated to use MAP_STACK when allocating memory for
thread stacks.


Philip Guenther


Re: Opensmtpd auth in 6.4

2019-01-12 Thread edgar
On Sat, Jan 12, 2019 at 05:36:11PM +0100, Flipchan wrote:
> Hey, am tryin to upgrade my opensmtpd 
> email server running on openbsd 6.3 towards a new one on 6.4, 
> i have used a simple config with the new syntax:
>  cat /etc/mail/smtpd.conf 
> 
> table aliases file:/etc/mail/aliases 
> 
> #table other-relays file:/etc/mail/other-relays 
> 
> pki mail.example.com cert "/etc/ssl/mail.example.com.crt" 
> pki mail.example.com key "/etc/ssl/private/mail.example.com.key" 
> 
> listen on lo0 
> listen on vio0 port 587 hostname example.com tls-require pki mail.example.com 
> auth mask-source 
> listen on vio0 port 25 hostname example.com tls pki mail.example.com 
> 
> action "mbox" mbox alias  
> action "relay" relay
> 
> match for local action "mbox" 
> match for any action "relay" 
> match from any for domain example.com action "mbox" 
> 
> 
> i cant login with a users regular username and passwd which is weird. 
> In the documentation it says that it is suppose to take regular user creds if 
> not a table is defined which it is not.
>  https://man.openbsd.org/smtpd.conf#listen_on
> 
>  "Users are authenticated against either their own normal login credentials 
> or a credentials table authtable, the format of which is described in 
> table(5)."
> 
>  Does anyone know what im doing wrong here? 
> 
> maillog: 
> Jan 12 16:47:49 host smtpd[95842]: XXX smtp connected address=ip 
> host=ip Jan 12 16:47:49 host 
> smtpd[95842]: XXX smtp starttls address=ip host=ip 
> ciphers="version=TLSv1.2, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256" Jan 
> 12 16:47:49 host 
> smtpd[95842]: XXX smtp authentication user=user address=ip 
> host=ip result=permfail Jan 12 16:47:49 host 
> smtpd[95842]: XXX smtp failed-command address=ip host=ip 
> command="AUTH PLAIN (...)" result="535 Authentication failed" Jan 12 16:47:49 
> host 
> smtpd[95842]: XXX smtp authentication user=user address=ip 
> host=ip result=permfail Jan 12 16:47:50 host 
> smtpd[95842]: XXX smtp failed-command address=ip host=ip 
> command="AUTH LOGIN (password)" result="535 Authentication failed"
> 
> 
>  Sincerely flipchan

works for me

smtpd.conf
listen on egress port 588 pki pkistuff auth

openssl s_client -connect host:588 -starttls smtp
lots of output...
250 HELP
ehlo laptop.my.domain
250-host Hello laptop.my.domain [ip], pleased to meet you
250-8BITMIME
250-ENHANCEDSTATUSCODES
250-SIZE 36700160
250-DSN
250-AUTH PLAIN LOGIN
250 HELP
auth plain "base64 encoded user/password"
235 2.0.0: Authentication succeeded
quit
221 2.0.0: Bye

maillog
Jan 12 13:08:15 mail smtpd[37141]: cbd466550ed95895 smtp connected
address=ip host=
Jan 12 13:08:15 mail smtpd[37141]: cbd466550ed95895 smtp tls
ciphers=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256
Jan 12 13:08:37 mail smtpd[37141]: cbd466550ed95895 smtp authentication
user=edgar result=ok
Jan 12 13:09:49 mail smtpd[37141]: cbd466550ed95895 smtp disconnected
reason=quit



demystifying trap

2019-01-12 Thread Predrag Punosevac
Could one of peple with some rudimental knowledge of kernel interals
tell me what am I seeing here

Jan 12 13:42:37 oko /bsd: trap [mmonit-bin]89524/427284 type 6: sp
122488ae75d0 not inside 7f7fffbf4000-7f7f4000


I was trying to run MMonit binaries on my desktop.

https://mmonit.com/download/

Most Kind Regards,
Predrag

P.S. predrag@oko$ uname -a
OpenBSD oko.int.bagdala2.net 6.4 GENERIC.MP#3 amd64



Opensmtpd auth in 6.4

2019-01-12 Thread Flipchan
Hey, am tryin to upgrade my opensmtpd 
email server running on openbsd 6.3 towards a new one on 6.4, 
i have used a simple config with the new syntax:
 cat /etc/mail/smtpd.conf 

table aliases file:/etc/mail/aliases 

#table other-relays file:/etc/mail/other-relays 

pki mail.example.com cert "/etc/ssl/mail.example.com.crt" 
pki mail.example.com key "/etc/ssl/private/mail.example.com.key" 

listen on lo0 
listen on vio0 port 587 hostname example.com tls-require pki mail.example.com 
auth mask-source 
listen on vio0 port 25 hostname example.com tls pki mail.example.com 

action "mbox" mbox alias  
action "relay" relay

match for local action "mbox" 
match for any action "relay" 
match from any for domain example.com action "mbox" 


i cant login with a users regular username and passwd which is weird. 
In the documentation it says that it is suppose to take regular user creds if 
not a table is defined which it is not.
 https://man.openbsd.org/smtpd.conf#listen_on

 "Users are authenticated against either their own normal login credentials or 
a credentials table authtable, the format of which is described in table(5)."

 Does anyone know what im doing wrong here? 

maillog: 
Jan 12 16:47:49 host smtpd[95842]: XXX smtp connected address=ip 
host=ip Jan 12 16:47:49 host 
smtpd[95842]: XXX smtp starttls address=ip host=ip 
ciphers="version=TLSv1.2, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256" Jan 12 
16:47:49 host 
smtpd[95842]: XXX smtp authentication user=user address=ip host=ip 
result=permfail Jan 12 16:47:49 host 
smtpd[95842]: XXX smtp failed-command address=ip host=ip 
command="AUTH PLAIN (...)" result="535 Authentication failed" Jan 12 16:47:49 
host 
smtpd[95842]: XXX smtp authentication user=user address=ip host=ip 
result=permfail Jan 12 16:47:50 host 
smtpd[95842]: XXX smtp failed-command address=ip host=ip 
command="AUTH LOGIN (password)" result="535 Authentication failed"


 Sincerely flipchan


Re: bgplg doesn't work with wildcard httpd servers

2019-01-12 Thread Martin Hein
On Fri, 11 Jan 2019 10:50:21 -0600
Adam Thompson  wrote:
> server "*" {

server "default"

/Martin