Re: making ospfd populate the inet routes on two hosts

2005-05-19 Thread Stephen Marley
  192.168.7.17 show neighbor -
 ID  Pri State DeadTime  Address Interface
 192.168.7.180   2-WAY/DROTHER 00:00:30  192.168.7.18fxp1
 
  192.168.7.18 show neighbor -
 ID  Pri State DeadTime  Address Interface
 192.168.7.170   2-WAY/DROTHER 00:00:35  192.168.7.17em0
 
   it seems like they can see each other ok and 
   have ospf-ness between them, but nothing happens?
 

Your routers are stuck in 2-way because you don't specify a
router-priority in their configs (the default was 0 until recently).
This, and redistribute not actually doing anything were only fixed
recently (around May 12). Download a recent snapshot.

-- 
[EMAIL PROTECTED]



Re: Router question

2005-05-19 Thread Phillip Eviston
And this would be related to the OpenBSD Miscellanea mailing list how?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Sreenath G
Sent: Thursday, 19 May 2005 6:57 PM
To: misc@openbsd.org
Subject: Router question

Hi all,


I am Sreenath.G from India,doing CCNA now.I the lab we are using
Windows2000.Using telnet to connect.
My question is that whether i can use SSH for connecting to a Cisco
router.



Re: 802.3ad

2005-05-19 Thread Damien Miller
Kory Talmage wrote:
This is kinda off topic, but does anyone know if Openbsd has support  
for 802.3ad (ethernet trunking).  I recently found out that NetBSD now  
officially supports 802.3ad, it would be nice if Openbsd did as well  
since a dedicated pf box can benefit from this :-).
Not yet, but maybe soon.
-d


user-land ppp radius custom attributes

2005-05-19 Thread Ivo Petrov
Hi all,

I new to the mailing list. I wander if it is possible
to compile user land ppp daemon with added custom
radius attributes and if so how can I achieve it. I am
partly interested in transferring freeradius
attributes to ppp in order to use poptop plus some
traffic shaping. I did make poptop working but these
enhancements can help me much. Can I insert my custom
attributes in the header files of the ppp source or
that would not be enough?

I would appreciate any suggestion or advice how to do
that.

Thanks in advance. 



Yahoo! Mail
Stay connected, organized, and protected. Take the tour:
http://tour.mail.yahoo.com/mailtour.html



Re: problem booting amd64 w/ 3.6 [SOLVED, partially]

2005-05-19 Thread Toni Mueller
Hi,

the problem could be nailed down to be related to a hardware defect.
Please see below:

On Tue, 17.05.2005 at 17:09:21 +0200, Toni Mueller [EMAIL PROTECTED] wrote:
 bge0 at pci1 dev 13 function 0 Broadcom BCM5705 rev 0x03, BCM5705 A3 
 (0x3003): irq 9 address 00:e0:81:64:6f:97
 brgphy0 at bge0 phy 1: BCM5705 10/100/1000baseT PHY, rev. 2
 bge1 at pci1 dev 14 function 0 Broadcom BCM5705 rev 0x00, BCM5705 A3 
 (0x3003): irq 10bge1: firmware handshake timed out
 bge1: RX CPU self-diagnostics failed!
 bge1: chip initialization failed

This looks like the critical section of the dmesg. At this point, I
assumed that bge initialization was complete and assumed that the
problem should be related to the mpt interface because I had no trouble
booting and installing when I removed the LSI card and plugged in an
IDE drive.

Further experiments with OpenBSD 3.7, Linux and the other box and a
second LSI card confirmed that the bge1 is really defective, and also
that the LSI card should be ok and not at fault, as well as OpenBSD
(3.7 at least) not having any problem - a 1030 card in the other box
ran just fine. This turned my view back to the bge problem. Using a
pre-installed disk on this box yielded this:

wskbd0 at pckbd0: console keyboard, using wsdisplay0
lm0 at isa0 port 0x290/8: W83627HF
uvm_fault(0x808c3560, 0x1, 0, 1) - e
kernel: page fault trap, code=0
Stopped at  bge_intr+0x43:  movl0x1(%rcx),%edx
ddb trace
bge_intr() at bge_intr+0x43
Xintr_legacy10() at Xintr_legacy10+0xf5
ddb ps
   PID   PPID   PGRPUID  S   FLAGS  WAIT   COMMAND
*0 -1  0  0  7 0x80204 swapper
ddb


Why the problem only surfaces with a crash when the LSI card is plugged
in is well beyond me at this point. I'd also prefer OpenBSD to just say
bge1 doesn't work, and continue (setups using it would fail at the
application level later anyway).



Best,
--Toni++



mission impossible

2005-05-19 Thread =?ISO-8859-1?Q?Kaj_M=E4kinen?=
Is this secure?
I have set up an authpf on my firewall. When I authenticate with an ssh2 
des keyfile the firewall passes
and  forwards it to my windows computer according to my rules in 
authpf.rules. On my windows computer I run Cygwin sshd also with ssh2 
PubkeyAuthentication.

Of courseI have PasswordAuthentication no , PubkeyAuthentication yes 
and  Protocol 2 in my sshd_config.
An attackeron my open-bsd box gets the login prompt but no password 
prompt withouth the keyfile.
The error is then this:  Received disconnect from xxx.xxx.xxx.xxx 11: No 
supported authentication methods available
Won't this be a mission impossible to hack?



Booting OpenBSD without any console output

2005-05-19 Thread Rickard Dahlstrand
Hi,

I'm trying to connect a modem to the serial port on my PC Engines
Wrap1E-board and I can't seem to boot a kernel without having anything
sent to the com-port.

This device doesn't have a screen controller so it uses the serial port
for bios and boot messages. It seems like the bios are redirecting pc0
to com0 up until the kernel booting. There is a boot-option to disable
this, but since there is no way for me to get a kernel to boot on pc0 it
makes no difference.

If I boots the a kernel without the PCCOMCONSOLE-option I can boot the
kernel providing I set the tty to com0 in either the boot loader or
/etc/boot.conf. But if I set the tty to pc0 and tries to boot it freezes
just after the entry point message.

I have even tried to set the tty to com1 in boot.conf to see if that
made any difference, but it seems to freeze up in the same way.

I need to find a way to boot a kernel without any messages on the
serial-port.

Thankful for any help, Rickard.


---

Loading;.
probing: pc0 com0 pci mem[640K 127M a20=on]
disk: hd0
 OpenBSD/i386 BOOT 2.06
boot set tty pc0
switching console to pc0
 OpenBSD/i386 BOOT 2.06
boot bsd
booting hd0a:bsd: 14062692+352328 [52+108048+95427]=0xdf1128
entry point at 0x100120
[FREEZE]



Loading;.
probing: pc0 com0 pci mem[640K 127M a20=on]
disk: hd0
 OpenBSD/i386 BOOT 2.06
boot set tty com0
switching console to com0
 OpenBSD/i386 BOOT 2.06
boot stty com0 57600
com0: changing speed to 57600 baud in 5 seconds, change your terminal to
match!

com0: 57600 baud
boot bsd
booting hd0a:bsd: 14062692+352328 [52+108048+95427]=0xdf1128
entry point at 0x100120

[ using 203900 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2005 OpenBSD. All rights reserved. 
http://www.OpenBSD.org

OpenBSD 3.7 (TILDECOS020) #0: Thu May 19 14:34:58 CEST 2005
[EMAIL PROTECTED]:/root/cvsflashboot/obj/TILDECOS020
RTC BIOS diagnostic error 80clock_battery
cpu0: Geode(TM) Integrated Processor by National Semi (Geode by NSC
586-class)
 267 MHz
cpu0: FPU,TSC,MSR,CX8,CMOV,MMX
cpu0: TSC disabled
real mem  = 133804032 (130668K)
avail mem = 112906240 (110260K)
using 331 buffers containing 1355776 bytes (1324K) of memory
RTC BIOS diagnostic error 80clock_battery
mainbus0 (root)
bios0 at mainbus0: AT/286+(fa) BIOS, date 05/02/05, BIOS32 rev. 0 @ 0xfc5f2
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xe/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Cyrix GXm PCI rev 0x00
sis0 at pci0 dev 14 function 0 NS DP83815 10/100 rev 0x00: DP83816A,
irq 10, a
ddress 00:0d:b9:01:94:e8
nsphyter0 at sis0 phy 0: DP83815 10/100 PHY, rev. 1
sis1 at pci0 dev 15 function 0 NS DP83815 10/100 rev 0x00: DP83816A,
irq 9, ad
dress 00:0d:b9:01:94:e9
nsphyter1 at sis1 phy 0: DP83815 10/100 PHY, rev. 1
sis2 at pci0 dev 16 function 0 NS DP83815 10/100 rev 0x00: DP83816A,
irq 11, a
ddress 00:0d:b9:01:94:ea
nsphyter2 at sis2 phy 0: DP83815 10/100 PHY, rev. 1
gscpcib0 at pci0 dev 18 function 0 NS SC1100 ISA rev 0x00
gpio0 at gscpcib0: 64 pins
NS SC1100 SMI/ACPI rev 0x00 at pci0 dev 18 function 1 not configured
NS SCx200 IDE rev 0x01 at pci0 dev 18 function 2 not configured
NS SCx200 AUDIO rev 0x00 at pci0 dev 18 function 3 not configured
geodesc0 at pci0 dev 18 function 5 NS SC1100 X-Bus rev 0x00: iid 6
revision 3
wdstatus 0
isa0 at gscpcib0
isadma0 at isa0
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: STI Flash 7.2.0
wd0: 1-sector PIO, LBA, 122MB, 250880 sectors
wd0(wdc0:0:0): using BIOS timings
gscsio0 at isa0 port 0x2e/2: SC1100 SIO rev 1: ACB1 ACB2
iic0 at gscsio0
iic1 at gscsio0
lmtemp0 at iic1 addr 0x48: LM77
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
biomask f1ef netmask ffef ttymask ffef
rd0: fixed, 22528 blocks
dkcsum: wd0 matched BIOS disk 80
root on rd0a
rootdev=0x1100 rrootdev=0x2f00 rawdev=0x2f02
clock: unknown CMOS layout



OpenBGP Setup Question

2005-05-19 Thread Manon Goo
Hi,

I have setup openbgp on two routers (Config below). I am connecting to
two uplink routers at my ISP.

My ISP Complains that one of the his sessions allways is idle. (He is
running a cisco
12000 IOS 12.0.something) and this is filling his logs.

He asked me to accept the bgp session on both routers and
only anounce my network on one of them.

Is this something taht can be done with openBGPD ?

Thanks in advance for any hints.


Manon


# CFG Router 1
peer_mesh_edge1_dus1=xx.xx.213.17
peer_mesh_edge2_dus1=xx.xx.213.25

# global configuration
#AS 65001
AS 65112
router-id xx.xx.152.246
log updates
network xx.xx.213.32/27

# neighbors and peers
group peering ASN25074 {
remote-as 25074
neighbor $peer_mesh_edge1_dus1 {
descr   Primary Peer Mesh
local-address xx.xx.213.19
announce self
depend on carp1124
tcp md5sig password XX
}
neighbor $peer_mesh_edge2_dus1 {
descr Secondary Peer Mesh
local-address 213.203.213.27
announce self
depend on carp1146
tcp md5sig password XX
}
}

# CFG Router 2
peer_mesh_edge1_dus1=xx.xx.213.17
peer_mesh_edge2_dus1=xx.xx.213.25

# global configuration
#AS 65001
AS 65111
router-id xx.xx.152.245
log updates
network xx.xx.213.32/27

# neighbors and peers
group peering ASN25074 {
remote-as 25074
neighbor $peer_mesh_edge1_dus1 {
descr   Primary Peer Mesh
local-address xx.xx.213.18
announce self
depend on carp1124
tcp md5sig password Y
}
neighbor $peer_mesh_edge2_dus1 {
descr Secondary Peer Mesh
local-address xx.xx.213.26
announce self
depend on carp1146
tcp md5sig password YYYX
}
}

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: WEP shared key authentication

2005-05-19 Thread Stephen Hassard
Hi Ralf,
From the wicontrol man page:
http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrolapropos=0
---
 -A 1|2|3
 [Prism2/Symbol only] Sets the authentication type for a
given in-
 terface.  Permitted values are 1 (Open System
Authentication), 2
 (Shared Key Authentication) and 3 (104-bit Shared Key
Authentica-
 tion).  The 104-bit Shared Key Authentication mode is only
avail-
 able on Symbol cards.
 When Open System Authentication is used, any station may
associ-
 ate with an access point.  In effect, no authentication is
done.
 Note, however, that if WEP is enabled on the access point,
sta-
 tions will be able to associate with the access point but
will be
 unable to send and receive data packets unless they have
the cor-
 rect WEP key.
 With Shared Key Authentication, on the other hand, only
stations
 that have the same WEP key as the access point may
associate with
 it.
 The default is 1 (Open System Authentication).
 Note: It is not valid to enable Shared Key Authentication
when no
 valid WEP keys have been defined.
---
This is what I'm looking for, but it doesn't seem to be implemented on
any of the other wireless drivers. ipw, iwi, and ral all seem to be
affected. If you try to use the above switch, the drivers report that
the function is unavailable.
Thanks,
Steve
Ralf M|ller wrote:
Moin,
how about the ath driver ?
http://www.openbsd.org/cgi-bin/man.cgi?query=atharch=i386sektion=4  

says ath supports hardware WEP. It's what you meant? 



Re: mission impossible

2005-05-19 Thread Jordan Klein
On May 19, 2005, at 6:47 AM, Kaj Mdkinen wrote:
Is this secure?
I have set up an authpf on my firewall. When I authenticate with an  
ssh2 des keyfile the firewall passes
and  forwards it to my windows computer according to my rules in  
authpf.rules. On my windows computer I run Cygwin sshd also with  
ssh2 PubkeyAuthentication.

Of courseI have PasswordAuthentication no , PubkeyAuthentication  
yes and  Protocol 2 in my sshd_config.
An attackeron my open-bsd box gets the login prompt but no password  
prompt withouth the keyfile.
The error is then this:  Received disconnect from xxx.xxx.xxx.xxx  
11: No supported authentication methods available
Won't this be a mission impossible to hack?


Nothing is impossible.  It's possible an attacker could discover a  
flaw in pf or authpf and find a way around it's restrictions.  It's  
also possible that someone could discover a security hole in OpenBSD  
and use that to compromise your system.  The likelihood is small,  
since this is OpenBSD, and it's a very tight ship, but not impossible.

I'm no security guru, but it sounds to me like your setup is secure,  
in that you're putting multiple levels of walls between outside users  
and your system.

Enjoy restful nights, while Windows and Linux admins nervously toss  
and turn in their sleep.  :-)

--
Jordan Klein~  Beware of dragons
[EMAIL PROTECTED] ~  for you are crunchy
Unix Administrator  ~  and go well with ketchup


Re: WEP shared key authentication

2005-05-19 Thread Stephen Hassard
On Thu, 2005-05-19 at 17:31 +0200, Rogier Krieger wrote:
 On 5/19/05, Stephen Hassard [EMAIL PROTECTED] wrote:
  [WEP] doesn't seem to be implemented on any of the other wireless
  drivers. ipw, iwi, and ral all seem to be affected. If you try to use the
  above switch, the drivers report that the function is unavailable.
 Try ifconfig(8) and search for 'nwkey' and 'nwid'. I think you'll find
 that confirms the claim in ath(4) about WEP being supported.

I realize that WEP is supported by these drivers, but they don't seem to
support the shared key authentication mechanism required by some access
points. If one disables shared key authentication within the AP you can
associate without problems, but having authentication enabled prevents
the ipw, iwi, and ral drivers from associating.

Thanks,
Steve



Re: iwi problems with OpenBSD i386 -current and Dell X1

2005-05-19 Thread sbr
Shoot me now for the lack of science in this, but i too have an iwi card
using the firmware found at the same site.

It all worked fine without wep, then i tried adding wep and it just
stoped.  At first i was calling the nwid mydomain.org.

I changed it to wirelessland.mydomain.org  and it all just worked, using
128bit wep and dhcpd.

Like i said, no science, no sense. But it worked.

Perhaps it was something todo with the dhcpd, once it worked i just left
it working.

sbr

On Wed, 18 May 2005, [ISO-8859-1] Pablo Mindez Hernandez wrote:

 Hi all:

 I've bought a new Dell X1 and I'm having problems configuring iwi on
 it. The access point is a post 3.5 machine using wi (11b)

 After installing -current from yesterday, dmesg reports:
 # dmesg | grep iwi
 iwi0 at pci2 dev 3 function 0 Intel PRO/Wireless 2200BG rev 0x05:
 irq 10, address 00:12:f0:0c:6c:75

 I've installed the firmware files from damien@ page:
 # pkg_add
http://damien.bergamini.free.fr/iwifw/OpenBSD/iwi-firmware-2.2.tgz

 (I've noted that the owners of the files in /etc/firmware were
 root:wheel instead of root:bin as the rest of the files in that
 directory, but it doesn't seem to matter).

 After modifying /etc/hostname.iwi0 like other atw (11b) card I have:
 # cat /etc/hostname.iwi0
 inet 172.26.2.5 255.255.255.0 NONE nwid quark nwkey wep_key

 (Adding mode 11b at the end doesn't seem to work)

 # ifconfig iwi0
 iwi0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladr 00:12:f0:0c:6c:75
ieee80211: nwid quark nwkey wep_key 100dBm
media: IEEE802.11 autoselect
status: no network
inet 172.26.2.5 0xff00 boradcast 172.26.2.255
inet6 fe80::212:f0ff:fe0c:6c75%iwi0 prefixlen 64 scopeid 0x2

 Does anyone know if I'm doing something wrong? Is it a bug?


 TIA



3.7 is released!

2005-05-19 Thread Theo de Raadt

May 19, 2005.

We are pleased to announce the official release of OpenBSD 3.7.
This is our 17th release on CD-ROM (and 18th via FTP).  We remain
proud of OpenBSD's record of eight years with only a single remote
hole in the default install.  As in our previous releases, 3.7
provides significant improvements, including new features, in nearly
all areas of the system:

- New platforms:
  o OpenBSD/zaurus
Expanding the arm porting effort by supporting the
Sharp Zaurus SL-C3000, bringing a secure ssh-capable machine
to your pocket.
  o OpenBSD/sgi
Starting out support with the SGI O2 machines.

- Support for a number of much faster 64-bit machines (in 32-bit
  mode) in the OpenBSD/hppa port.

- Many enhancements in the OpenBSD/mac68k port:
  o Switch to a bsd.rd-based install.
  o Improved interrupt system.
  o Create partitions with pdisk(8).
  o Add mc(4) support and enhance zsc(4) support.

- New tools:
  o ospfd(8), implementing the OSPFv2 routing protocol.
  o getcap(1), providing easy access to the capability database.

- New functionality:
  o Repaired mirroring mode in ccd(4).
  o Privilege separation for ftpd(8)
  o Bash-style prompt expansion and POSIX hex and octal constants
in ksh(1).
  o Improved TCP send performance.
  o Reentrant getproto*_r(3) and getserv*_r(3) functions.
  o In-kernel pppoe(4) support.
  o pim(4) (Protocol Independent Multicast) support added.

- Improved hardware support, including:
  o New ath(4) driver for Atheros IEEE 802.11a/b/g wireless
network adapters.
  o New iwi(4) driver for Intel PRO/Wireless 2200BG/2225BG/2915ABG
IEEE 802.11a/b/g wireless network adapters.
  o New ipw(4) driver for Intel PRO/Wireless 2100 IEEE 802.11b
wireless network adapters.
  o New atu(4) driver for Amtel AT76C50x USB IEEE 802.11b
wireless network adapters.
  o New ral(4) and ural(4) [USB] drivers for Ralink Technology
RT25x0 IEEE 802.11a/b/g wireless network adapters.
  o New rtw(4) driver for Realtek 8180 IEEE 802.11b wireless
network adapters.
  o Added support to re(4) driver for Realtek 8169 CardBus
Ethernet adapters.
  o New udav(4) driver for Davicom DM9601 USB Ethernet adapters.
  o New vge(4) driver for VIA Networking Technologies VT6122 PCI
Gigabit Ethernet adapters.
  o New piixpm(4) driver for the Intel PIIX Power Management
controller.
  o New ubt(4) driver for USB Bluetooth adapters.
 
- New functionality for bgpd(8), the Border Gateway Protocol Daemon:
  o Allow sessions to depend on a CARP interface's master/backup
state, reducing failover times in redundant setups.
  o Lower latency for requests from other peers or bgpctl while
under heavy load, e.g. initial table transfer when a session
comes up.
  o Allow for the peer descriptions to be used in bgpctl commands
where previously only their IPs were allowed.
  o Allow bgpd to not prepend its own AS number and to not modify
the nexthop on updates sent out.
  o Show associated interfaces and their state on show nexthop,
to help pointing out why nexthops are invalid.
  o Allow for relative metrics modification, i.e. set localpref
+20.

- New functionality for ntpd(8), the Network Time Protocol Daemon:
  o ntpd can now set the time immediately on startup itself,
eliminating the need to run rdate -n beforehand.
  o Use median instead of average when collapsing all the peers'
offsets into one, greatly improving resistance against
falsetickers.
  o Calculate rootdelay, stratum, and precision properly; include
these in replies sent out in server mode.
  o Many logging improvements: ntpd is now almost completely
silent in normal operation (unless in debug mode, of course).

- New functionality and improvements for pf(4), the packet filter:
  o Improved carp(4), new carpdev mode for IP-less interfaces.
  o Support limiting TCP connections by establishment rate,
automatically adding flooding IP addresses to tables and
flushing states (max-src-conn-rate, overload table, flush
global).
  o Improved functionality of tags (tag and tagged for
translation rules, tagging of all packets matching state
entries).
  o Improved diagnostics (error messages and additional counters
from pfctl -si).
  o New keyword set skip on to skip filtering on arbitrary
interfaces, like loopback.
  o Filtering on route(8) labels.
  o Several bugfixes improving stability.

- New functionality and improvements for isakmpd(8), the Internet
  Security Association and Key Management Daemon:
  o Allow the Address, Network, or Netmask values of the
IPsec-ID to be specified with an interface name or the
keyword default (in which case the address is selected
based on the default route).
  o Improved NAT-T and DPD stability and interoperability.

- New functionality and improvements for spamd(8), the Spamd Spam
  Deferral Daemon:
  o Allow the addition of 

Nagios

2005-05-19 Thread Lester
quick question

Does a package exist for Nagios the host and server monitor software ?
Thanks


A. Lester Burke
Network Analyst
Arlington Public Schools, VA
V 703-228-6057
E [EMAIL PROTECTED]

-- A complaint is a gift
   Anon



Re: 3.7 is released!

2005-05-19 Thread Han Boetes
CVS log for www/index.html
[snip]
Revision 1.459 / (download) / (as text) - annotate - [select for diffs] , 
Fri Apr 30 20:28:15 2004 UTC 
(12 months, 2 weeks ago) by deraadt
^^^
Branch: MAIN
Changes since 1.458: +2 -2 lines
Diff to previous 1.458 (colored)

ok.. it is 8 years... spotted by millert


9 years! :-)



# Han



Re: 3.7 is released!

2005-05-19 Thread Diana Eichert
Congratulations to the OpenBSD developers for a job well done.

diana



Re: 3.7 is released!

2005-05-19 Thread J.C. Roberts
On Thu, 19 May 2005 10:40:27 -0600, Theo de Raadt
[EMAIL PROTECTED] wrote:


May 19, 2005.

We are pleased to announce the official release of OpenBSD 3.7.

Happy Birthday Theo! 

Thank you for yet another year of hard work on OpenBSD.

Best of luck to you and all the developers at the hackathon.

Kind Regards,
JCR



Re: 3.7 is released!

2005-05-19 Thread Michael Shalayeff
Making, drinking tea and reading an opus magnum from Han Boetes:
 CVS log for www/index.html
 [snip]
 Revision 1.459 / (download) / (as text) - annotate - [select for diffs] , 
 Fri Apr 30 20:28:15 2004 UTC 
 (12 months, 2 weeks ago) by deraadt
 ^^^
 Branch: MAIN
 Changes since 1.458: +2 -2 lines
 Diff to previous 1.458 (colored)
 
 ok.. it is 8 years... spotted by millert
 
 
 9 years! :-)

not yet little butterfly...
cu
-- 
paranoic mickey   (my employers have changed but, the name has remained)



Dell HW?

2005-05-19 Thread L. V. Lammert
We have been requested to use Dell HW for some new systems. Any recommended 
models (RM) for:

1) Gateway/firewall?
2) SAN?
In the alternative, any to avoid?
Thanks!
Lee


Re: 3.7 is released!

2005-05-19 Thread Will H. Backman
Thank you to the team!

So...what neat things are on the plate for 3.8?



Re: 3.7 is released!

2005-05-19 Thread Gordon Grieder
On Thu, May 19, 2005 at 10:40:27AM -0600, Theo de Raadt wrote:
 
 May 19, 2005.
 
 We are pleased to announce the official release of OpenBSD 3.7.
[snip]

Where can I download the ISO images?
Just kidding, put down the axe!

 gord



amd64 4gb memory won't boot

2005-05-19 Thread Need Coffee
I've been searching but can't find anything concrete... amd64.html 
and the FAQ's amd64 section do not mention any problems, so I'm 
asking here.  (I found little bits here and there about this problem 
affecting a lot of freenixes but nothing tangible.  Apologies if I've 
missed something major...)

Trying to boot a sun v40z with 4GB RAM fails with OpenBSD/amd64 
3.6 and 3.7-current from yesterday.  i386 3.7-current works.

(begin snippet from amd64 3.7-current from yesterday)

 OpenBSD/amd64 PXEBOOT 1.06
booting tftp:bsd.rd: 1468848+300494+2137464+0+469256 [80+156528+90879]=0x8692c8
entry point at 0x1001e0 [7205c766, 3404, 24448612, 68a0a304]
WARNING: CAN'T ALLOCATE EXTENDED MEMORY FROM IOMEM EXTENT MAP!
skipping 3824615424 bytes of memory above 4GB
panic: init_x86_64: can't find end of memory

The operating system has halted.
Please press any key to reboot.

(end snippet)

Removing all but 4GB of memory allows the system to boot without 
issue.

So, the inevitable question:  is there any workaround or fix in 
development that I may test?  I would happily do so.  Should I
sendbug(1) this?  My guess is that this is already well known to
everyone except me...

Thanks in advance.



3.7 kde packages

2005-05-19 Thread Dave Feustel
It appears that 3.7 uses kde version 3.2.3.
Were there problems upgrading to a newer
version of kde?

Thanks,
Dave Feustel



Re: 3.7 is released!

2005-05-19 Thread Adam Gleave
Thanks! My Wireframe shirt is just in time, waiting for it to dry...



Re: Dell HW?

2005-05-19 Thread Frank Denis \(Jedi/Sector One\)
On Thu, May 19, 2005 at 02:10:06PM -0500, L. V. Lammert wrote:
 We have been requested to use Dell HW for some new systems. Any recommended 
 models (RM) for:
 
 1) Gateway/firewall?
 2) SAN?

  It really depends on your exact needs (how many NICs, how many disks, etc).
  
  Almost every Dell seems to work fine with OpenBSD, but definitely avoid
CERC controllers, especially the SATA ones. Go with PERC 4 that are way more
reliable.

  The company I'm working for is almost exclusively buying Dell 1850
nowadays. They work flawlessly with Linux, DragonFlyBSD and OpenBSD even in
64-bit mode.

  And unless you absolutely need Dell, also have a look at Transtec
hardware, which is almost half the price of Dell's for the same features and
the same support.

  http://www.transtec.de/D/E/index.html
  
  We use their Opteron systems (1001L for web servers and processing and
2500L for databases and file servers) with no issue so far. For a SAN, their
2500L are really nice, as you can put up to 10 disks there, without the need
for any external enclosure.

  Best regards,

-- 
Frank - my stupid blog: http://00f.net



Re: amd64 4gb memory won't boot

2005-05-19 Thread ddp
On 5/19/05, Need Coffee [EMAIL PROTECTED] wrote:
 I've been searching but can't find anything concrete... amd64.html
 and the FAQ's amd64 section do not mention any problems, so I'm
 asking here.  (I found little bits here and there about this problem
 affecting a lot of freenixes but nothing tangible.  Apologies if I've
 missed something major...)
 
 Trying to boot a sun v40z with 4GB RAM fails with OpenBSD/amd64
 3.6 and 3.7-current from yesterday.  i386 3.7-current works.
 
 (begin snippet from amd64 3.7-current from yesterday)
 
  OpenBSD/amd64 PXEBOOT 1.06
 booting tftp:bsd.rd: 1468848+300494+2137464+0+469256 
 [80+156528+90879]=0x8692c8
 entry point at 0x1001e0 [7205c766, 3404, 24448612, 68a0a304]
 WARNING: CAN'T ALLOCATE EXTENDED MEMORY FROM IOMEM EXTENT MAP!
 skipping 3824615424 bytes of memory above 4GB
 panic: init_x86_64: can't find end of memory
 
 The operating system has halted.
 Please press any key to reboot.
 
 (end snippet)
 
 Removing all but 4GB of memory allows the system to boot without
 issue.
 
 So, the inevitable question:  is there any workaround or fix in
 development that I may test?  I would happily do so.  Should I
 sendbug(1) this?  My guess is that this is already well known to
 everyone except me...
 
 Thanks in advance.
 
 

If I understand and remember things correctly, the boot code is still 32bit.



Re: Dell HW?

2005-05-19 Thread Mitch B. Parker
L.V.,

I am running the Poweredge 650 at a customer site right now running OpenBSD 3.5 
(soon to go to 3.7). It would make an excellent firewall (right now I am using 
it for syslog and testing) as all the parts work correctly.

Mitch



-Original Message-
From:   L. V. Lammert [mailto:[EMAIL PROTECTED]
Sent:   Thu 5/19/2005 3:10 PM
To: misc@openbsd.org
Cc: 
Subject:Dell HW?
We have been requested to use Dell HW for some new systems. Any recommended 
models (RM) for:

1) Gateway/firewall?

2) SAN?

In the alternative, any to avoid?

Thanks!

Lee





CONFIDENTIALITY NOTICE: This electronic message is intended to be viewed
only by the individual or entity to whom it is addressed. It may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. Any dissemination, distribution or copying of this
communication is strictly prohibited without our prior permission. If the
reader of this message is not the intended recipient, or the employee or
agent responsible for delivering the message to the intended recipient, or
if you have received this communication in error, please notify us
immediately by return e-mail and delete the original message and any
copies of it from your computer system.



Re: mission impossible

2005-05-19 Thread =?iso-8859-1?Q?Jens_Teglhus_M=F8ller?=
Won't this be a mission impossible to hack?
If you ever watched mission impossible you would know that there is no 
such thing as impossible.

btw. this message will self destruct in five seconds.
/jtm 



Re: Nagios

2005-05-19 Thread N.J. Reuvers
No. You just have to build it from source and use -- options to tell nagios
where your png libraries are. Don't now the exact build phrase anymore, but
just google for it and you'll find it. (I just remember; it might be in the
online docs of www.nagios.org)

You'll be wise to install its dependant packages in forward:
freetype-1.3.1p1free and portable TrueType font rendering engine
gd-1.8.3graphics library for fast PNG creation
jpeg-6b IJG's JPEG compression utilities
png-1.2.5p5 library for manipulating PNG images
popt-1.7getopt(3)-like library with a number of enhancements

Nils 

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Lester
Verzonden: donderdag 19 mei 2005 18:25
Aan: misc@openbsd.org
Onderwerp: Nagios

quick question

Does a package exist for Nagios the host and server monitor software ?
Thanks


A. Lester Burke
Network Analyst
Arlington Public Schools, VA
V 703-228-6057
E [EMAIL PROTECTED]

-- A complaint is a gift
   Anon



greek website out of release-number

2005-05-19 Thread Thorsten von Plotho-Kettner
Hello,
openbsd.org is just updated, the other language-sites are on the run, 
I think, but the el(greek)-site is just at 3.5.

Maybe someone of the hellenic geeks is reading this one.
Regards,
Thorsten


Re: 3.7 is released!

2005-05-19 Thread Peter S Scudamore
Very stoked about the Atheros support! I cant wait to install it on my
Linux Certified laptop tonight...



Re: Dell HW?

2005-05-19 Thread Allie D.
I run SC400's, various laptops (old and new),and desktops (old and new)
without any issues.
-- 
Allie D.
Allnix,LLC.
http://www.allnix.net
PGP Public key:
http://www.allnix.net/ads_public_key

Marco Peereboom said:
 I run just about any imaginable server they sell.  Works for me tm.

 On May 19, 2005, at 2:10 PM, L. V. Lammert wrote:

 We have been requested to use Dell HW for some new systems. Any
 recommended models (RM) for:

 1) Gateway/firewall?

 2) SAN?

 In the alternative, any to avoid?

 Thanks!

 Lee



OpenBSD 3.7 Torrents are now available

2005-05-19 Thread andrew fresh
You can get OpenBSD 3.7 from the torrent site here:

http://openbsd.somedomain.net/index.php?version=latest+release


quick links:

AMD 64:
http://openbsd.somedomain.net/torrents/OpenBSD_3_7_amd64-2005-05-19-1824.torrent

i386:
http://openbsd.somedomain.net/torrents/OpenBSD_3_7_i386-2005-05-19-2115.torrent

Anything else you should be able to get from the url above.  Not all 
architectures are synced yet, but they are going.

l8rZ,
-- 
andrew - ICQ# 253198 - JID: [EMAIL PROTECTED]
 Proud member: http://www.mad-techies.org

BOFH excuse of the day: Your computer's union contract is set to expire 
at midnight.



Re: amd64 4gb memory won't boot

2005-05-19 Thread Jason George
On 5/19/05, Need Coffee [EMAIL PROTECTED] wrote:
 I've been searching but can't find anything concrete... amd64.html
 and the FAQ's amd64 section do not mention any problems, so I'm
 asking here.  (I found little bits here and there about this problem
 affecting a lot of freenixes but nothing tangible.  Apologies if I've
 missed something major...)

 Trying to boot a sun v40z with 4GB RAM fails with OpenBSD/amd64
 3.6 and 3.7-current from yesterday.  i386 3.7-current works.

 (begin snippet from amd64 3.7-current from yesterday)

  OpenBSD/amd64 PXEBOOT 1.06
 booting tftp:bsd.rd: 1468848+300494+2137464+0+469256
[80+156528+90879]=0x8692c
8
 entry point at 0x1001e0 [7205c766, 3404, 24448612, 68a0a304]
 WARNING: CAN'T ALLOCATE EXTENDED MEMORY FROM IOMEM EXTENT MAP!
 skipping 3824615424 bytes of memory above 4GB
 panic: init_x86_64: can't find end of memory

 The operating system has halted.
 Please press any key to reboot.

 (end snippet)

 Removing all but 4GB of memory allows the system to boot without
 issue.

 So, the inevitable question:  is there any workaround or fix in
 development that I may test?  I would happily do so.  Should I
 sendbug(1) this?  My guess is that this is already well known to
 everyone except me...

 Thanks in advance.




This issue is known to the pertinent developers - I worked with them a few
few weeks ago on the issue.  My 4-way/16GB v40z was barking the same way.

We were able to exclude the extra memory using machine memory at the
boot prompt, but it became evident that more work with memory mapping on
large-memory devices is required.  The network and SCSI/RAID drivers could
not be mapped even after we were able to boot bsd.rd.

We'll discuss the issue (and others) in the next 9 or 10 days over a lot
of beer at the hackathon.

--Jason



Re: 3.7 kde packages

2005-05-19 Thread Dave Feustel
On Thursday 19 May 2005 04:44 pm, Marc Espie wrote:
 On Thu, May 19, 2005 at 02:31:40PM -0500, Dave Feustel wrote:
  It appears that 3.7 uses kde version 3.2.3.
  Were there problems upgrading to a newer
  version of kde?
 
 First, you're dyslexic. It's 3.3.2.

The PACKAGES file mentioned in the 3.7 announcement is where
I saw the 3.2.3 package names. I just got a list of packages from the 
3.7 package directory in a mirror in which I was pleased to see 3.3.2 packages
listed. I appreciate the work you did compiling kde. I have tried to do that
quite a few times but I have not yet succeeded.

Thanks,
Dave



Re: making ospfd populate the inet routes on two hosts

2005-05-19 Thread jared r r spiegel
On Thu, May 19, 2005 at 10:02:57AM +0100, Stephen Marley wrote:
 Download a recent snapshot.

  worked like a champ1  now they're swappin' underwear like
  a healthy doctor-patient relationship!

  jared

-- 

[ openbsd 3.7 GENERIC ( may 17 ) // i386 ]



Re: Dell HW?

2005-05-19 Thread Bob Beck
* L. V. Lammert [EMAIL PROTECTED] [2005-05-19 13:01]:
 We have been requested to use Dell HW for some new systems. Any recommended 
 models (RM) for:
 
 1) Gateway/firewall?

I've been using lots and lots of dell 650/750 series for this
as well as dell 1650/1750. 


 2) SAN?
 
 In the alternative, any to avoid?

SAN in general :) use scsi it's cheaper.

-Bob

-- 
Bob Beck   Computing and Network Services
[EMAIL PROTECTED]   University of Alberta
True Evil hides its real intentions in its street address.



hp DL360 Smart Array 6i

2005-05-19 Thread Rod.. Whitworth
The HP DL360 series servers come with a raid controller that I can only
identify as a Smart Array 6i which is integrated into the motherboard.

It doesn't show up on the HCL and googling for it with OpenBSD only
found a vendor who also promotes OpenBSD but not the two in
conjunction.

I can't get my hands on one of these servers until Monday and my client
who asked for a solution based on OpenBSD would like some idea of the
probability of using the hotswap raid capability of the DL360.

Having managed to get the datacenter to approve OpenBSD but not to
approve equipment from other than HP I'll be unhappy if we can't use it
but if the news is bad I'd like to know early rather than later.

Anyone?

Thanks,
Rod/

From the land down under: Australia.
Do we look umop apisdn from up over?

Do NOT CC me - I am subscribed to the list.
Replies to the sender address will fail except from the list-server.



Re: Safe development

2005-05-19 Thread Aaron Glenn
On 5/19/05, Stephan Wehner [EMAIL PROTECTED] wrote:
 What is recommended for bare-metal backups? Scenario: I build a new
 application, but something breaks and I want to revert back. I thought
 a neat way would be to have the whole system under version control.
 Can it be done reliably with one PC only? How do porters go about
 this?

what do you expect to break? rcs works pretty well for system
configuration files. what are you trying to backup?

aaron.glenn



Re: hp DL360 Smart Array 6i

2005-05-19 Thread Steve Shockley
Rod.. Whitworth wrote:
I can't get my hands on one of these servers until Monday and my client
who asked for a solution based on OpenBSD would like some idea of the
probability of using the hotswap raid capability of the DL360.
It appears the dl360's 6i is a ciss card 
(http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/dev/ciss/), and it 
doesn't appear OpenBSD supports it from a quick browse through the source.



Re: 3.7 is released!

2005-05-19 Thread Will H. Backman
Could you describe your upgrade process to the list?


-Original Message-
From: [EMAIL PROTECTED] on behalf of Matthew S Elmore
Sent: Thu 5/19/2005 5:24 PM
To: misc@openbsd.org
Subject: Re: 3.7 is released!

Excellent!

I have already upgraded everything seems to be running great. :)

Is it your birthday Theo? If so, make it a happy one!



Re: hp DL360 Smart Array 6i

2005-05-19 Thread Rod.. Whitworth
On Thu, 19 May 2005 21:37:28 -0400, Steve Shockley wrote:

Rod.. Whitworth wrote:
 I can't get my hands on one of these servers until Monday and my client
 who asked for a solution based on OpenBSD would like some idea of the
 probability of using the hotswap raid capability of the DL360.

It appears the dl360's 6i is a ciss card 
(http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/dev/ciss/), and it 
doesn't appear OpenBSD supports it from a quick browse through the source.



Thanks for the lead Steve. Looks like FBSD has it alright BUT doen't
have any management tools for it according to ports/sysutils
@freebsd.org.

I really don't want to do Linux but hp AND the datacenter (one of
Aussie's biggest) do support the controller in a linux version or two.
Having gained permission to install OpenBSD (whenever the hardware
supports it) I don't want an egg-on-face right now and spoil future
chances.

Thanks again,
Rod/
From the land down under: Australia.
Do we look umop apisdn from up over?

Do NOT CC me - I am subscribed to the list.
Replies to the sender address will fail except from the list-server.



Re: WEP shared key authentication

2005-05-19 Thread Stan
Stephen Hassard wrote:
[]
I realize that WEP is supported by these drivers, but they don't seem to
support the shared key authentication mechanism required by some access
points. If one disables shared key authentication within the AP you can
associate without problems, but having authentication enabled prevents
the ipw, iwi, and ral drivers from associating.
Thanks,
Steve

I was under the impression that support for WEP authentication was not 
implemented on purpose, in recognition of the fact that this mechanism 
is broken and worthless by design, and that interoperating with this 
mechanism will only add to a false sense of security.



Re: 3.7 is released!

2005-05-19 Thread Jason Opperisano
On Thu, May 19, 2005 at 11:27:49PM -0400, Will H. Backman wrote:
 Could you describe your upgrade process to the list?

i don't mean to speak for the poster you're replying to, but:

  http://openbsd.org/faq/upgrade37.html

is meant to answer such questions.

-j

--
Stewie: Oh, forgive me for not being one of those anorexic babies from
 the diaper commercials.
--Family Guy