date:20060320

On Mon, Mar 20, 2006 at 08:31:42AM +0100, Anthony Howe wrote:
 Joachim Schipper wrote:
 On Fri, Mar 17, 2006 at 07:36:13PM +0100, Anthony Howe wrote:
 Joachim Schipper wrote:
 --wd0a----wd1a--
 / (bootable)/ (bootable)
 /tmp/tmp
 /usr/usr
 /var/var
 
 --wd0d----wd1d--  
 raid0(root) raid0 (root)
 
   --raid0a-   --raid0a-
   /   /
   /usr/usr
 Hmm - why include / and /usr again? OpenBSD will boot just fine off a
 RAID array, even a failed one, provided you can get the kernel read
 somehow.
 You have to have a RAID slice with / and /usr.  If you mount just wd0a 
 for / and /usr then if the wd0 dies you have to reboot to mount with 
 wd1a. If you happen to be a long way away from the console, then you're 
 toast, unless you went the extra distance and setup the backup fstab on 
 wd1a in advance.
 
 If you have them in a RAID and if a disk dies, you can continue to use 
 the system (degraded of course) without having to reboot until the new 
 disk and your are present at the console.
 
 Maybe I don't understand, but how does it follow from the above that it
 is useful to have a third and fourth copy?
 
 I see the point in keeping / and /usr on RAID - the system will stay
 running and come up even if one of the underlying disks fails.
 
 How would you reboot a degraded system where wd0 containing your /  
 /usr is dead? How would you reboot a system in order to reconstruct a 
 replacement? Maybe a full /usr is unnecessary, but what if you had to 
 rebuild the kernel for some reason before you could autoconfigure and 
 transfer to the RAID? If you only have the one machine at hand, which is 
 the one with the RAID. Both disks must be bootable and should have all 
 the necessary tools you deem necessary to recover.

Both disks must be bootable, yes, but only sufficiently far to
(auto)mount the RAID. RAID drives can be configured to be automounted as
root at boot; if you make sure that *some* kernel is always accessible
that, at least, has RAID support, you should always be able to mount /
and /usr.

Now, it might be useful having a second, non-autoconfiguring, kernel,
plus a minimal system, lying around; this could be very valuable if the
RAID is somehow hosed badly enough that it will not mount.

However, having two such systems seems a little excessive. Of course,
failing disks do strange things... so it might be useful. But it should
not typically be necessary.

 Now on smallish disks, installing more than just base system might not 
 be possible (necessary) spacewise and so you have alternative recovery 
 methods ready (if you can remember where you put them), but when you're 
 talking 40G+ disks, then there is ample space. Todays hard disks are so 
 large these days that I worry how SOHO sites can afford suitable backup 
 solutions, but that be another discussion. The point being, if I'm 
 building a RAID, its typically for large disks and I don't want to take 
 any chances being caught short when one of those disks dies, so I burn 
 one or two gigas for bootable self-sufficient rescue slices per disk.

Of course, that's the other side - there is little incentive not to be
wasteful. Nonetheless, it *is* wasteful.

Joachim

Re: textfile tabstops oder sqlite

On Mon, Mar 20, 2006 at 10:34:06AM +0100, Marco Fretz wrote:
 hello
 
 i need an a feedback to the following situation:
 
 i want to script a backup script with bash script. a script that reads a
 file / database that contains the backup jobs (remote server, remote
 user, remote dir, ...).
 
 i think, that file would contain about 10-30 rows. additionally i want
 to to some logging into a file or database. and i need some files / rows
 to define the excludes for each remote dir.
 
 now my question: should i use sqlite or a textfile and awk for this?

Whatever you feel most comfortable with, but databases are not
necessarily easy to get up in the face of disaster and your dataset is
so small they do not produce a meaningful performance benefit.

Another pointer: it's not too hard to work without bash-specific
features, and portable scripts are much more useful. Try to be
sh-compatible unless there's a very good reason to use shell-specific
features.

Joachim

[1] As in, especially awk can be abused as a general-purpose programming
language, but it will be rather painful.

crashed

2006-03-20 Thread Jinxi Cheng

HI, I recently installed openbsd and 2 days back openbsd shutdown
byitself. Probably a system crash. I hope it is not some one that has
rooted the box and shut it down. Is there any tool to scan the system
to see if it is rooted or not?


best regards

--
Jinxi Cheng,

Re: crashed

2006-03-20 Thread edgarz


type: last

Jinxi Cheng wrote:

HI, I recently installed openbsd and 2 days back openbsd shutdown
byitself. Probably a system crash. I hope it is not some one that has
rooted the box and shut it down. Is there any tool to scan the system
to see if it is rooted or not?


best regards

--
Jinxi Cheng,

Small office with BSD blueprint

Looking for feedback on a basic blueprint for a small office using BSD.
Situation:  Small office with maybe five workstations.
Question: What would an all BSD setup look like?
Solution that comes to mind:
* Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
* Full install with whatever desktop environment is chosen.
* automount home directories.
* Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
/etc/hosts, /etc/printcap from central server.

Does anyone out there have a similar setup?

--
Will Backman - Network Administrator
Coastal Enterprises, Inc.
http://www.ceimaine.org

Re: Strange carp issues

2006-03-20 Thread Steven S

It would appear my issues are related to timekeeping on these boxes (Compaq
DL360 G1).  

If I bump advbase to '3' on each box everything is more stable.  Given this,
I now have a roughly 10 second fail-over time, but that is still acceptable.

Since these are production boxes I'll probably wait until my 3.9 arrives to
see if any of the kern_time/kern_clock changes help.  I'll let everyone know
more when I do.  

Thanks for all the pointers and assistance!

Steve's corollary to Henning's carp theorem (carp works.):  Unless the
system clock is broken:-)

-Steve S.

Re: crashed

On Mon, Mar 20, 2006 at 02:54:32PM +0100, Jinxi Cheng wrote:
 HI, I recently installed openbsd and 2 days back openbsd shutdown
 byitself. Probably a system crash. I hope it is not some one that has
 rooted the box and shut it down. Is there any tool to scan the system
 to see if it is rooted or not?

chkrootkit is made for this, but the chances of it being a hacker are
pretty slim. At least, it'd be a pretty bad hacker, as you are going to
look for him now...

Joachim

Re: Small office with BSD blueprint

On Mon, Mar 20, 2006 at 09:53:30AM -0500, Will H. Backman wrote:
 Looking for feedback on a basic blueprint for a small office using BSD.
 Situation:  Small office with maybe five workstations.
 Question: What would an all BSD setup look like?
 Solution that comes to mind:
 * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
 * Full install with whatever desktop environment is chosen.
 * automount home directories.
 * Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
 /etc/hosts, /etc/printcap from central server.
 
 Does anyone out there have a similar setup?

No, but I wanted to have that, so I might have a couple of ideas.

- A separate firewall is good for security, and very easy.
- Building an install script is good, but see below ...
- Rdist(1) is also very useful. Build a complete client install on the
  server, then call rdist to update all clients. As long as you do some
  simple things right - like not wiping /tmp or some of the files in
  /etc that change when you get a DHCP lease or under /etc/ssh or
  somesuch - this works perfectly.
  Rdist *is* a bit old; cfengine or somesuch will be more modern, but I
  find that rdist with a largish Makefile does exactly what I want.
- DHCP is not generally useful, unless you implement ...
- ... netboot, which is massively cool and very easy on the admin

And why not {N,A}FS-mount /home? That way, automounting is not necessary.

Joachim

Re: crashed

2006-03-20 Thread edgarz


Pretty bad hacker who pwned openbsd box? :)
I think just friend who have acess to that machine :)

Joachim Schipper wrote:

On Mon, Mar 20, 2006 at 02:54:32PM +0100, Jinxi Cheng wrote:


HI, I recently installed openbsd and 2 days back openbsd shutdown
byitself. Probably a system crash. I hope it is not some one that has
rooted the box and shut it down. Is there any tool to scan the system
to see if it is rooted or not?



chkrootkit is made for this, but the chances of it being a hacker are
pretty slim. At least, it'd be a pretty bad hacker, as you are going to
look for him now...

Joachim

Re: UPEK Fingerprint-Reader (ThinkPad Notebooks)

2006-03-20 Thread Karsten McMinn

On 3/19/06, Theo de Raadt [EMAIL PROTECTED] wrote:


 In that sense I am happy too.  I don't accept the compromise of vendor
 lock-in, so I am totally thrilled with whatever devices manage to we
 get to work.


I abhor vendor driver and documentation runarounds as much as the
next bloke, but with the advent of my recent purchase of a z60t thinkpad
thinking I'd have at least a working atheros, auich  i810 driver, I quickly
learned otherwise. I'm kicking myself for not dropping the extra cash for
an x40 now. Yup, adding a linux distro to the boot list is a compromise
I have to make for the time being. So shoot me.

I've already been doing work on gathering information on the current
unsupport hardware on newer lenovo thinkpad laptops. Is there
any current efforts underway on newer lenovo thinkpads already?

Re: Small office with BSD blueprint

2006-03-20 Thread John R. Shannon


Will H. Backman wrote:

Looking for feedback on a basic blueprint for a small office using BSD.
Situation:  Small office with maybe five workstations.
Question: What would an all BSD setup look like?
Solution that comes to mind:
* Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
* Full install with whatever desktop environment is chosen.
* automount home directories.
* Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
/etc/hosts, /etc/printcap from central server.

Does anyone out there have a similar setup?

--
Will Backman - Network Administrator
Coastal Enterprises, Inc.
http://www.ceimaine.org



I have that. I suppose I can send details on what I've setup if you 
want. Let me make some comments relative to your solution:


1. You want more that one server for availability. If your single server 
goes down, all 5 employees will be non-productive.


2. I don't see a firewall.

3. I don't see a backup solution. This is critical.

4. You might consider a network printer rather than sharing one through 
your server.


--
John R. Shannon, CISSP
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]

Re: UPEK Fingerprint-Reader (ThinkPad Notebooks)

2006-03-20 Thread pauljgreene

 -- Original message --
From: Karsten McMinn [EMAIL PROTECTED]
 On 3/19/06, Theo de Raadt [EMAIL PROTECTED] wrote:
 
 
  In that sense I am happy too.  I don't accept the compromise of vendor
  lock-in, so I am totally thrilled with whatever devices manage to we
  get to work.
 
 
 I abhor vendor driver and documentation runarounds as much as the
 next bloke, but with the advent of my recent purchase of a z60t thinkpad
 thinking I'd have at least a working atheros, auich  i810 driver, I quickly
 learned otherwise. I'm kicking myself for not dropping the extra cash for
 an x40 now. Yup, adding a linux distro to the boot list is a compromise
 I have to make for the time being. So shoot me.
 
 I've already been doing work on gathering information on the current
 unsupport hardware on newer lenovo thinkpad laptops. Is there
 any current efforts underway on newer lenovo thinkpads already?


Oops, that's a good heads up. I was considering getting an R51. Is that going 
to have an unsupported wireless NIC?

Paul

Re: Small office with BSD blueprint


Joachim Schipper wrote:

On Mon, Mar 20, 2006 at 09:53:30AM -0500, Will H. Backman wrote:


Looking for feedback on a basic blueprint for a small office using BSD.
Situation:  Small office with maybe five workstations.
Question: What would an all BSD setup look like?
Solution that comes to mind:
* Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
* Full install with whatever desktop environment is chosen.
* automount home directories.
* Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
/etc/hosts, /etc/printcap from central server.

Does anyone out there have a similar setup?



No, but I wanted to have that, so I might have a couple of ideas.

- A separate firewall is good for security, and very easy.


Yes, firewall/NAT router is assumed.  Could even be a simple $40 Linksys 
box.



- Building an install script is good, but see below ...
- Rdist(1) is also very useful. Build a complete client install on the
  server, then call rdist to update all clients. As long as you do some
  simple things right - like not wiping /tmp or some of the files in
  /etc that change when you get a DHCP lease or under /etc/ssh or
  somesuch - this works perfectly.
  Rdist *is* a bit old; cfengine or somesuch will be more modern, but I
  find that rdist with a largish Makefile does exactly what I want.


I'm looking for as simple and generic as possible.  I'm not sure what 
would be the most simple.



- DHCP is not generally useful, unless you implement ...


Do you usually assign static IPs?


- ... netboot, which is massively cool and very easy on the admin

And why not {N,A}FS-mount /home? That way, automounting is not necessary.


I guess a straight NFS mount could be easier.  Fewer config files to 
mess with.



Joachim

Re: Small office with BSD blueprint


John R. Shannon wrote:

Will H. Backman wrote:


Looking for feedback on a basic blueprint for a small office using BSD.
Situation:  Small office with maybe five workstations.
Question: What would an all BSD setup look like?
Solution that comes to mind:
* Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
* Full install with whatever desktop environment is chosen.
* automount home directories.
* Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
/etc/hosts, /etc/printcap from central server.

Does anyone out there have a similar setup?

--
Will Backman - Network Administrator
Coastal Enterprises, Inc.
http://www.ceimaine.org



I have that. I suppose I can send details on what I've setup if you 
want. Let me make some comments relative to your solution:


1. You want more that one server for availability. If your single server 
goes down, all 5 employees will be non-productive.


Is there a simple way to provide high availability for home directories? 
 I don't care if IMAP is still running if the home directories are down.




2. I don't see a firewall.


I assume something like a $40 linksys.



3. I don't see a backup solution. This is critical.


Yes, that would be included also.  Then we can start the whole dump vs. 
tar vs. pax vs. amanda debate.  I'll stick with dump, given that it used 
for the examples in the FAQ for OpenBSD.




4. You might consider a network printer rather than sharing one through 
your server.

Re: UPEK Fingerprint-Reader (ThinkPad Notebooks)

2006-03-20 Thread Karsten McMinn

On 3/20/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

 Oops, that's a good heads up. I was considering getting an R51. Is that
 going to have an unsupported wireless NIC?

 Paul


ath0 at pci4 dev 0 function 0 Atheros AR5212 (IBM MiniPCI) rev 0x01:
cannot map register space

I've turned all knobs on the laptop (rf switch, varios bios settings, bios
versions etc) to
no avail. Its on my todo list though.

sftp and scp and chroot

2006-03-20 Thread Michael Schmidt


Hello,

OpenBSD version 3.8
Architecture i386

After having read several man pages and faqs I have found nothing 
describing sftp jailed by chroot and scp jailed by chroot.
I am looking for both sftp and scp configurations where client users are 
forced into chroot jails from where they cannot escape from and cannot 
break.


I cannot imagine that this is not possible.
May be I missed something?
Or would you please be so nice to post any helpful hints?

Have a nice day
Michael

--
Michael Schmidt MIRRORS:
DJGPP   ftp://ftp.fh-koblenz.de/pub/DJGPP/
Ghostscript ftp://ftp.fh-koblenz.de/pub/Ghostscript/

Install defaults

2006-03-20 Thread Bruno Carnazzi

  Hi all,

Why not use soft update as a default for created file system on
install ? It seems to be a good practice, no ?

Best regards,

Bruno.

Re: sftp and scp and chroot

2006-03-20 Thread Tobias Ulmer

On Mon, Mar 20, 2006 at 05:35:31PM +0100, Michael Schmidt wrote:
 Hello,
 
 OpenBSD version 3.8
 Architecture i386
 
 After having read several man pages and faqs I have found nothing 
 describing sftp jailed by chroot and scp jailed by chroot.
 I am looking for both sftp and scp configurations where client users are 
 forced into chroot jails from where they cannot escape from and cannot 
 break.
 
 I cannot imagine that this is not possible.
 May be I missed something?
 Or would you please be so nice to post any helpful hints?
 
 Have a nice day
 Michael
 
 -- 
 Michael Schmidt MIRRORS:
 DJGPP   ftp://ftp.fh-koblenz.de/pub/DJGPP/
 Ghostscript ftp://ftp.fh-koblenz.de/pub/Ghostscript/
 


Look at scponly. However, do not enable additional stuff,
espcially the rsync has gaping holes if my last look into the code was
correct. scponly uses a blacklist to prevent bad guys passing
dangerous arguments to them, a thing wich obviously doesn't work very
well. But it's the best you can get if you need this kind of
functionality.

Tobias

Re: Small office with BSD blueprint

2006-03-20 Thread Samurai Chef

I would be interested in the details on that also.

Thanks in advance.

On 3/20/06, John R. Shannon [EMAIL PROTECTED] wrote:
 Will H. Backman wrote:
  Looking for feedback on a basic blueprint for a small office using BSD.
  Situation:  Small office with maybe five workstations.
  Question: What would an all BSD setup look like?
  Solution that comes to mind:
  * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
  * Full install with whatever desktop environment is chosen.
  * automount home directories.
  * Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
  /etc/hosts, /etc/printcap from central server.
 
  Does anyone out there have a similar setup?
 
  --
  Will Backman - Network Administrator
  Coastal Enterprises, Inc.
  http://www.ceimaine.org
 

 I have that. I suppose I can send details on what I've setup if you
 want. Let me make some comments relative to your solution:

 1. You want more that one server for availability. If your single server
 goes down, all 5 employees will be non-productive.

 2. I don't see a firewall.

 3. I don't see a backup solution. This is critical.

 4. You might consider a network printer rather than sharing one through
 your server.

 --
 John R. Shannon, CISSP
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]

Re: crashed

2006-03-20 Thread Edi Mitrea

first, you should lock in your logs, situated in /var/logs/. Check the deamon 
or messages. Then, try last command to see who's on your box and who's still 
in The last but not the least, maybe this could you help to give away any 
doubts:
www.chkrootkit.org. download and install it. then run the command:
./chkrootkit

best regards

Jinxi Cheng [EMAIL PROTECTED] wrote: HI, I recently installed openbsd and 2 
days back openbsd shutdown
byitself. Probably a system crash. I hope it is not some one that has
rooted the box and shut it down. Is there any tool to scan the system
to see if it is rooted or not?


best regards

--
Jinxi Cheng,
Bring photos to life! New PhotoMail  makes sharing a breeze.

Re: Small office with BSD blueprint

On Mon, Mar 20, 2006 at 11:14:04AM -0500, Will H. Backman wrote:
 Joachim Schipper wrote:
 On Mon, Mar 20, 2006 at 09:53:30AM -0500, Will H. Backman wrote:
 
 Looking for feedback on a basic blueprint for a small office using BSD.
 Situation:  Small office with maybe five workstations.
 Question: What would an all BSD setup look like?
 Solution that comes to mind:
 * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
 * Full install with whatever desktop environment is chosen.
 * automount home directories.
 * Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
 /etc/hosts, /etc/printcap from central server.
 
 Does anyone out there have a similar setup?
 
 
 No, but I wanted to have that, so I might have a couple of ideas.
 
 - A separate firewall is good for security, and very easy.
 
 Yes, firewall/NAT router is assumed.  Could even be a simple $40 Linksys 
 box.

OpenBSD does a better job, though. ;-)

 - Building an install script is good, but see below ...
 - Rdist(1) is also very useful. Build a complete client install on the
   server, then call rdist to update all clients. As long as you do some
   simple things right - like not wiping /tmp or some of the files in
   /etc that change when you get a DHCP lease or under /etc/ssh or
   somesuch - this works perfectly.
   Rdist *is* a bit old; cfengine or somesuch will be more modern, but I
   find that rdist with a largish Makefile does exactly what I want.
 
 I'm looking for as simple and generic as possible.  I'm not sure what 
 would be the most simple.

I've found rdist(1) to be very powerful, albeit old. It's also scary
when misconfigured, as it will happily rm -rf every machine it has
access to.

That being said, it's easy to set up and part of the base system.

 - DHCP is not generally useful, unless you implement ...
 
 Do you usually assign static IPs?

Yes, on a small LAN such as this - why not? It cuts out one bad idea
(DHCP), and does not have any disadvantages I can see. Except maybe that
you need to update the DNS server(s) on all the Windows boxes if it
changes. And yes, that's happened to me...

 - ... netboot, which is massively cool and very easy on the admin
 
 And why not {N,A}FS-mount /home? That way, automounting is not necessary.
 
 I guess a straight NFS mount could be easier.  Fewer config files to 
 mess with.

That would be the obvious solution, yes.

Joachim

Re: textfile tabstops oder sqlite

2006-03-20 Thread Ted Unangst

On 3/20/06, Joachim Schipper [EMAIL PROTECTED] wrote:
  now my question: should i use sqlite or a textfile and awk for this?

 Whatever you feel most comfortable with, but databases are not
 necessarily easy to get up in the face of disaster and your dataset is
 so small they do not produce a meaningful performance benefit.

sqlite is pretty damn easy to get up.  i'd recommend using it, since
it makes various queries you may want to perform very easy.

Re: binutils port

2006-03-20 Thread Ted Unangst

On 3/20/06, Niklaus [EMAIL PROTECTED] wrote:
  1)  I was trying to install binutils2.16 from source and it didn't make it
 2) So how do i build binutils 2.16 from source and what is target . Why
 3)I wanted to build gcc without propolice gcc-3.4.6. So what is the target
 6)  I saw from the CVS that binutils 2.15 , someone had added a target obsd  .

is there a reason why you want all this?  is there a problem you are
trying to solve?

Re: Small office with BSD blueprint

2006-03-20 Thread Bill

On Mon, 20 Mar 2006 19:00:49 +0100
Joachim Schipper [EMAIL PROTECTED] spake:

  - DHCP is not generally useful, unless you implement ...
  
  Do you usually assign static IPs?
 
 Yes, on a small LAN such as this - why not? It cuts out one bad idea
 (DHCP), and does not have any disadvantages I can see. Except maybe that
 you need to update the DNS server(s) on all the Windows boxes if it
 changes. And yes, that's happened to me...

One note on this I have run into...  If you work at home and at the
office on a portable, then having DHCP running helps you transition
from one network to another (no changing IP's).  But other than that...

Re: Small office with BSD blueprint

--- Joachim Schipper [EMAIL PROTECTED] wrote:

[snip]

  Do you usually assign static IPs?
 
 Yes, on a small LAN such as this - why not? It cuts out one bad idea
 (DHCP), and does not have any disadvantages I can see. Except maybe
 that
 you need to update the DNS server(s) on all the Windows boxes if it
 changes. And yes, that's happened to me...

Why is DHCP a bad idea?

--
Peter
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

Re: Small office with BSD blueprint


Peter wrote:

--- Joachim Schipper [EMAIL PROTECTED] wrote:

[snip]



Do you usually assign static IPs?


Yes, on a small LAN such as this - why not? It cuts out one bad idea
(DHCP), and does not have any disadvantages I can see. Except maybe
that
you need to update the DNS server(s) on all the Windows boxes if it
changes. And yes, that's happened to me...



Why is DHCP a bad idea?

--
Peter
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



Perhaps I should also explain the reason for my original post.  There is 
a lot of choice, which is a good thing for the well informed.  While 
there can never be the right way, I don't see a lot of material out 
there that describes the most common way to deal with the typical 
scenarios.

Re: Small office with BSD blueprint

2006-03-20 Thread L. V. Lammert


At 02:02 PM 3/20/2006 -0500, Peter wrote:

 Yes, on a small LAN such as this - why not? It cuts out one bad idea
 (DHCP), and does not have any disadvantages I can see. Except maybe
 that
 you need to update the DNS server(s) on all the Windows boxes if it
 changes. And yes, that's happened to me...

Why is DHCP a bad idea?


It isn't - DHCP simplifies network management. I can't count the number of 
times somebody brings a machine into the shop here; having to boot it and 
assign network/getway addresses would take WAY too long. *Especially* for 
some troublesome OSs that require rebooting to change IPs (not OBSD, of 
course).


For a small network with no 'traveling' machines, NP, but for anything 
else, it's the only solution.


Lee

[CVE-2006-0745] X.Org potential privilege elevation and DoS

2006-03-20 Thread Matthieu Herrb


Hi,

The vulnerability in X.Org 6.9 presented in this recent advisory:
http://lists.freedesktop.org/archives/xorg/2006-March/013992.html 
partially applies to OpenBSD-current.


The impact of the vulnerability is limited on OpenBSD thanks to the 
privilege separation code in the X server. Elevating the privileges is 
not directly possible as presented in the advisory, since the code in 
the loaded module will be executed by the unprivileged user. Overwriting 
system files with -logfile is still possible.


The fix will be present in OpenBSD 3.9, and is included in binary 
snapshots since March 10. If you're using a snapshot built between 
january and March 10, I recommend that you upgrade at least xserv39.tgz.


If you're building X from sources, update your sources, and make sure 
that you have at least 
XF4/xc/programs/Xserver/hw/xfree86/common/xf86Init.c revision 1.14.


OpenBSD 3.8 and 3.7 are not affected.
--
Matthieu Herrb

Re: Small office with BSD blueprint

2006-03-20 Thread Ste Jones

 Why is DHCP a bad idea?


rogue dhcp servers, broken clients, possible man in the middle attacks
and unauthorised access problems
http://www.networkpenetration.com/dhcp_flaws.html

cheers
ste

Re: Small office with BSD blueprint


Will H. Backman wrote:

Looking for feedback on a basic blueprint for a small office using BSD.
Situation:  Small office with maybe five workstations.
Question: What would an all BSD setup look like?
Solution that comes to mind:
* Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
* Full install with whatever desktop environment is chosen.
* automount home directories.
* Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
/etc/hosts, /etc/printcap from central server.

Does anyone out there have a similar setup?



Also, am I crazy for avoiding NIS in a small, trusted network like a 
small office?

Re: Small office with BSD blueprint

2006-03-20 Thread eric

On Mon, 2006-03-20 at 20:02:24 +, Ste Jones proclaimed...

 rogue dhcp servers, broken clients, possible man in the middle attacks
 and unauthorised access problems
 http://www.networkpenetration.com/dhcp_flaws.html

Right, cause that doesn't happen w/o DHCP.

Quit spreading FUD.

Re: Recommendations for an OpenBSD-based Backup Solution

2006-03-20 Thread Donald J. Ankney

I threw together a Perl script that uses tar and external firewire 
drives. Tar has flags that will let it backup over SMB (for the windows 
boxes) and one can always do use scp (via certificates) piped through 
tar for remote linux/BSD boxes. I've been using this solution across 
several platforms (all servers) for a year now, and it has worked well.



Obi Okeke wrote:

An appeal to the Gods of OpenBSD!  Let me write up
front that I am most grateful for all that the OpenBSD
project has done.

Some friends of mine need a backup solution that can
easily handle regular, automated backups from some M$
Win 2k and Linux workstations as well as an OpenBSD
3.8 based Samba file server that I had set up for them
a while ago. 


I've used FreeBSD 5x running Bacula at another site,
but I am looking for an all OpenBSD solution so I
don't have to install another box running
FreeBSD/Bacula on their site since they already have 2
OBSD boxes up and running (perfectly thanks to OBSD) -
one for firewall/router/nat/squid and one for the
Samba fileserver.  I would like to add the backup
solution to the file server box since its not heavily
loaded at all.  Any recommendations would be greatly
appreciated.  Thanks in advance.
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

Re: X problems with touchpad

2006-03-20 Thread C. Bensend

The problem I have is with the touchpad - it is hyper-sensitive,
 and my hand brushing the edges of it as I type scrolls my xterms
 up and down wildly.  I try to keep my hands away from it, but it's
 just inevitable.

Most of the time, I don't even use the touchpad - I prefer to
 use my little mini USB mouse instead, when I have the room.

For the archives' sake:

   It was pointed out to me offlist that disabling the pmsi and
pms options in the kernel would at least disable the touchpad,
which is definately a fine option for me (since I use the USB
mouse most of the time).

   So, using config, I saved a touchpad-less kernel, and I can
just boot into that when I like.  Oh, happy day.

Thanks!

Benny


-- 
A computer lets you make more mistakes faster than any invention
in human history, with the possible exceptions of handguns and
tequila.  -- Found on usenet

Re: Small office with BSD blueprint

2006-03-20 Thread Henning Brauer

* Peter [EMAIL PROTECTED] [2006-03-20 20:08]:
 Why is DHCP a bad idea?

it isn't.

ipsec.conf with fqdn

2006-03-20 Thread Rod.. Whitworth

I've looked at both the ipsec.conf man page and the Zero to IPSec in 4
minutes article and I'm none the wiser about how to define flows using
srcid and dstid. Both of those resources blithely say it is possible
and never say how, either by example or BNF.

Can someone please give a simple explanation? A translation of the
ipsec.conf examples from the 4 minute paper would be fine.

I guess it is a Q that is not very F A.

Thanks,
Rod/
From the land down under: Australia.
Do we look umop apisdn from up over?

Do NOT CC me - I am subscribed to the list.
Replies to the sender address will fail except from the list-server.

Re: textfile tabstops oder sqlite

On Mon, Mar 20, 2006 at 10:30:54AM -0800, Ted Unangst wrote:
 On 3/20/06, Joachim Schipper [EMAIL PROTECTED] wrote:
   now my question: should i use sqlite or a textfile and awk for this?
 
  Whatever you feel most comfortable with, but databases are not
  necessarily easy to get up in the face of disaster and your dataset is
  so small they do not produce a meaningful performance benefit.
 
 sqlite is pretty damn easy to get up.  i'd recommend using it, since
 it makes various queries you may want to perform very easy.

On the other hand, plain text files can be pretty much completely
manipulated by what's on the install floppy (for i386 at least). Of
course, this is painful, but quite possible.

I gues it boils down to 'what you are most comfortable with'. For me,
sed, awk and the like are very easy, and you can count on them being
available on every UNIX-ish machine you sit at. However, far be it from
me to suggest that Ted does not make a good point - it might indeed make
complex queries easier.

Joachim

Re: Recommendations for an OpenBSD-based Backup Solution

On Mon, Mar 20, 2006 at 10:37:42AM -0800, Donald J. Ankney wrote:
 I threw together a Perl script that uses tar and external firewire 
 drives. Tar has flags that will let it backup over SMB (for the windows 
 boxes) and one can always do use scp (via certificates) piped through 
 tar for remote linux/BSD boxes. I've been using this solution across 
 several platforms (all servers) for a year now, and it has worked well.

Amavisd has a very good algorithm for balancing backups. It is, sadly,
otherwise a bit of a pain to get going.

That said, it's very solid, and can even print pretty reports.

Joachim

 Obi Okeke wrote:
 An appeal to the Gods of OpenBSD!  Let me write up
 front that I am most grateful for all that the OpenBSD
 project has done.
 
 Some friends of mine need a backup solution that can
 easily handle regular, automated backups from some M$
 Win 2k and Linux workstations as well as an OpenBSD
 3.8 based Samba file server that I had set up for them
 a while ago. 
 
 I've used FreeBSD 5x running Bacula at another site,
 but I am looking for an all OpenBSD solution so I
 don't have to install another box running
 FreeBSD/Bacula on their site since they already have 2
 OBSD boxes up and running (perfectly thanks to OBSD) -
 one for firewall/router/nat/squid and one for the
 Samba fileserver.  I would like to add the backup
 solution to the file server box since its not heavily
 loaded at all.  Any recommendations would be greatly
 appreciated.  Thanks in advance.
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com

Re: Small office with BSD blueprint

On Mon, Mar 20, 2006 at 03:23:36PM -0500, Will H. Backman wrote:
 Will H. Backman wrote:
 Looking for feedback on a basic blueprint for a small office using BSD.
 Situation:  Small office with maybe five workstations.
 Question: What would an all BSD setup look like?
 Solution that comes to mind:
 * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
 * Full install with whatever desktop environment is chosen.
 * automount home directories.
 * Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
 /etc/hosts, /etc/printcap from central server.
 
 Does anyone out there have a similar setup?
 
 
 Also, am I crazy for avoiding NIS in a small, trusted network like a 
 small office?

I don't see the point in using it, either. As I pointed out elsewhere,
rdist can do the same job for a small number of users.

Joachim

Re: Small office with BSD blueprint

On Mon, Mar 20, 2006 at 02:02:58PM -0500, Peter wrote:
 --- Joachim Schipper [EMAIL PROTECTED] wrote:
 
 [snip]
 
   Do you usually assign static IPs?
  
  Yes, on a small LAN such as this - why not? It cuts out one bad idea
  (DHCP), and does not have any disadvantages I can see. Except maybe
  that you need to update the DNS server(s) on all the Windows boxes
  if it changes. And yes, that's happened to me...
 
 Why is DHCP a bad idea?

It introduces nasty points of failure and is generally useless for a
static machine population. Not to mention the fact that spoofing DHCP
isn't very hard, though the same goes for many other important
networking protocols.

If you receive lots of visitors with laptops, allow them their own
DHCP'ed /24, or /25, or something. Otherwise, static IPs work just fine,
and I like knowing which machine has which address all the time
(granted, a halfway decent DHCP implementation does that too).

Joachim

Re: Recommendations for an OpenBSD-based Backup Solution

2006-03-20 Thread Tim Donahue

On Monday 20 March 2006 18:36, Joachim Schipper wrote:
 On Mon, Mar 20, 2006 at 10:37:42AM -0800, Donald J. Ankney wrote:
  I threw together a Perl script that uses tar and external firewire
  drives. Tar has flags that will let it backup over SMB (for the windows
  boxes) and one can always do use scp (via certificates) piped through
  tar for remote linux/BSD boxes. I've been using this solution across
  several platforms (all servers) for a year now, and it has worked well.

 Amavisd has a very good algorithm for balancing backups. It is, sadly,
 otherwise a bit of a pain to get going.

 That said, it's very solid, and can even print pretty reports.

   Joachim


Which amavisd are you refering to, do you have a link to the website for us?  
The 2 amavisd's that I could find on google (amavisd and amavisd-new) are 
both email filtering programs and don't have anything to do with backups for 
servers (though amavisd-new does run quite happily on backup MX servers).

Tim Donahue

SCSI disk from an Alpha box, in a Sparc

2006-03-20 Thread Larry O'Neill (H.S.A.)

Hi.
I have a disk from an Alpha server that I need to get data from... The
Alpha server no longer boots, and I dont have the time right now to
diagnose the problem. So I took the disk and lashed it into a Sun Ultra60,
which is also running OpenBSD. My problem is that I cant remember all of
the details of the partitioning that the disk had... So in terms of
getting access to the data, how do I find out what to put into disklabel
for it? Unfortunately due to other complications, I currently dont have
fdisk on the machine.

(only 2 slots for Ultra2 SCSI Wide, one was root disk, other was /usr.
Copied as much stuff onto the root disk that space would alow, so that I
could remove the origional /usr disk and put in the one I need the data
from. This caused some stuff not to work because not all of it could be
copied over)



Larry



machine$ disklabel sd1
# /dev/rsd1c:
type: SCSI
disk: SCSI disk
label: RZ2DD-LS (C) DEC
flags:
bytes/sector: 512
sectors/track: 168
tracks/cylinder: 20
sectors/cylinder: 3360
cylinders: 5273
total sectors: 17773524
rpm: 10045
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

3 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
  c:  17773524 0  unused  0 0  # Cyl 0 -
5289*
disklabel: warning, partition c: size % cylinder-size != 0
machine$
machine$ disklabel -r sd1
disklabel: no disklabel found. scanning.
disklabel: no disk label
machine$









machine$ dmesg
console is /[EMAIL PROTECTED],4000/[EMAIL PROTECTED]/[EMAIL PROTECTED],40:a
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2005 OpenBSD. All rights reserved.
http://www.OpenBSD.org

OpenBSD 3.7-current (GENERIC) #453: Thu Apr 14 23:32:06 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/sparc64/compile/GENERIC
total memory = 268435456
avail memory = 235053056
using 1638 buffers containing 13418496 bytes of memory
bootpath: /[EMAIL PROTECTED],4000/[EMAIL PROTECTED],0/[EMAIL PROTECTED],0
mainbus0 (root): Sun Ultra 60 UPA/PCI (2 X UltraSPARC-II 296MHz)
cpu0 at mainbus0: SUNW,UltraSPARC-II @ 295.998 MHz, version 0 FPU
cpu0: physical 32K instruction (32 b/l), 16K data (32 b/l), 2048K external
(64 b/l)
psycho0 at mainbus0 addr 0xfffb4000
SUNW,psycho: impl 0, version 4: ign 7c0 bus range 0 to 0; PCI bus 0
STC0 on /mainbus enabled
DVMA map: fe00 to e000
IOTDB: a136 to a1368000
pci0 at psycho0
ebus0 at pci0 dev 1 function 0 Sun PCIO Ebus2 rev 0x01
auxio0 at ebus0 addr 726000-726003, 728000-728003, 72a000-72a003,
72c000-72c003, 72f000-72f003
power at ebus0 addr 724000-724003 not configured
SUNW,pll at ebus0 addr 504000-504002 not configured
uperf0 at ebus0 addr 50-57: model SUNW,sc-qp (0/1) ports 9
sab0 at ebus0 addr 40-40007f ipl 43: rev 3.2
sabtty0 at sab0 port 0: console i/o
sabtty1 at sab0 port 1
comkbd0 at ebus0 addr 3083f8-3083ff ipl 41: no keyboard
com0 at ebus0 addr 3062f8-3062ff ipl 42, mouse: ns16550a, 16 byte fifo
lpt0 at ebus0 addr 3043bc-3043cb, 300398-300399, 70-7f ipl 34:
polled
fdthree at ebus0 addr 3023f0-3023f7, 706000-70600f, 72-720003 ipl 39
not configured
clock1 at ebus0 addr 0-1fff: mk48t59: hostid 80b3c979
flashprom at ebus0 addr 0-f not configured
audioce0 at ebus0 addr 20-2000ff, 702000-70200f, 704000-70400f,
722000-722003 ipl 35 ipl 36: nvaddrs 0
audio0 at audioce0
hme0 at pci0 dev 1 function 1 Sun HME rev 0x01: address
08:00:20:b3:c9:79
qsphy0 at hme0 phy 1: QS6612 10/100 PHY, rev. 1
hme0: using ivec 3021 for interrupt
siop0 at pci0 dev 3 function 0 Symbios Logic 53c875 rev 0x14: ivec 20,
using 4K of on-board RAM
scsibus0 at siop0: 16 targets
sd0 at scsibus0 targ 0 lun 0: IBM, DDRS34560SUN4.2G, S98E SCSI2 0/direct
fixed
sd0: 4094MB, 3882 cyl, 16 head, 135 sec, 512 bytes/sec, 8385121 sec total
sd1 at scsibus0 targ 1 lun 0: DEC, RZ2DD-LS (C) DEC, 0306 SCSI2 0/direct
fixed
sd1: 8678MB, 5273 cyl, 20 head, 168 sec, 512 bytes/sec, 17773524 sec total
st0 at scsibus0 targ 3 lun 0: HP, C1537A, L907 SCSI2 1/sequential
removable
st0: density code 0x25, variable blocks, write-enabled
siop1 at pci0 dev 3 function 1 Symbios Logic 53c875 rev 0x14: ivec 26,
using 4K of on-board RAM
scsibus1 at siop1: 16 targets
psycho1 at mainbus0 addr 0xfffc6000
SUNW,psycho: impl 0, version 4: ign 7c0 bus range 128 to 128; PCI bus 128
STC0 on /mainbus enabled
STC1 on /mainbus enabled
pci1 at psycho1
timer0 at mainbus0 addr 0xfff9fc00 irq vectors 7ec and 7ed
creator0 at mainbus0 addr 0xfebc: Elite3D, model SUNW,XXX-, dac 0
wsdisplay0 at creator0
wsdisplay0: screen 0 added (std, sun emulation)
pcons at mainbus0 not configured
root on sd0a
siop0: target 0 now using tagged 16 bit 20.0 MHz 15 REQ/ACK offset xfers
rootdev=0x700 rrootdev=0x1100 rawdev=0x1102
siop0: target 1 now using tagged 16 bit 20.0 MHz 15 REQ/ACK offset xfers
machine$

Re: SCSI disk from an Alpha box, in a Sparc

2006-03-20 Thread Theo de Raadt

 I have a disk from an Alpha server that I need to get data from... The
 Alpha server no longer boots, and I dont have the time right now to
 diagnose the problem. So I took the disk and lashed it into a Sun Ultra60,
 which is also running OpenBSD. My problem is that I cant remember all of
 the details of the partitioning that the disk had... So in terms of
 getting access to the data, how do I find out what to put into disklabel
 for it?

It is way more complicated than that.  The disklabel is at a different
place, the filesystems are a different byte order, and there are other
issues.

You are trying to do something very hard.

Re: Recommendations for an OpenBSD-based Backup Solution

2006-03-20 Thread Rogier Krieger

On 3/21/06, Joachim Schipper [EMAIL PROTECTED] wrote:
 Amavisd has a very good algorithm for balancing backups. It is, sadly,
 otherwise a bit of a pain to get going.

I suspect you mean amanda (misc/amanda in ports).

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.

How to get crash details onto another system?

2006-03-20 Thread viq

I'm playing with OpenBSD in a virtual machine (VMWare) on my linux box. The 
box has two CPUs, so every once in a while I try to set the machine to have 
two as well - which every singe time ends in a crash after some time. Any 
hints as to how I could get the trace etc out of it short of typing it all on 
the 'real' computer? Or is that error unlikely to be a sign of a real 
problem?

Thanks for any replies

-- 
viq

Re: Install defaults

2006-03-20 Thread Nick Holland


Bruno Carnazzi wrote:

  Hi all,

Why not use soft update as a default for created file system on
install ? It seems to be a good practice, no ?


Well...assuming you:
  * Have some extra RAM to spare.
  * Don't mind added complexity
  * aren't running on a Sun4c

sure, soft updates are a fine idea for most people to use on most of 
their systems.


However, no one's system is broke because of not having softdeps on.  No 
one's system will crash because of no softdeps.


Softdeps is an added complexity.  You don't add complexity and get a 
more solid result.


IF you always want softdeps on the systems you work with, it is two 
lines of shell script in a siteXX.tgz file (or less if you know what you 
are doing, or more if you know of some edge cases I didn't think of). 
However, I don't think it will be defaulting to on anytime in the next 
release (and probably not the one after that). :)


Nick.

Re: Small office with BSD blueprint

2006-03-20 Thread Smith

I would even consider doing away with dns and point everyone to the isp
dns along with using static ip addresses. You only need dns if you
anticipate a lot of users making dns queries to the point of affecting
your bandwidth or you need a dns server to point the rest of the
internet to your websites. With 5 users, I don't think you will deal
with these issues.

I would definitely, on such a small setup, get rid of lpd. Use direct
ip, meaning everyone prints directly to the printer. I work in a
network with about 50 printers and 300 users, and I almost never hear a
user complain about print jobs jamming. And some of my users do heavy
duty printing. Of course we buy HP network printers or use HP Jetdirect
boxes for printers that don't have network cards built in. Do a google
for Windows *Print Migrator* 3.1
http://www.microsoft.com/downloads/details.aspx?FamilyID=9B9F2925-CBC9-44DA-B2C9-FFDBC46B0B17displaylang=en
from MS's site (assuming you are catering to a windows workshop). This
program is free from MS will make installing printers a breeze. I
played with LPD before and it seems more of a headache than direct IP.

For full install ... desktop... google for g4u and consider creating an
internal ftp server (this is especially great for a unix worksop). Or,
in theory, you can create a samba server, do some research on
www.*netboot**disk*.com and buy a single copy of norton ghost and thus
build yourself a enterprise ghost server without paying for ghost
enterprise, in theory. Or, create an ssh server, download insert
linux, play around with sshfs and ntfsclone on the insert cd to clone
workstations (this method I haven't really experimented with other than
to create the image).

With such a small network, minimize as much work as you can by avoiding
services.

Joachim Schipper wrote:

On Mon, Mar 20, 2006 at 03:23:36PM -0500, Will H. Backman wrote:

Will H. Backman wrote:

Looking for feedback on a basic blueprint for a small office using BSD.
Situation: Small office with maybe five workstations.
Question: What would an all BSD setup look like?
Solution that comes to mind:
* Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
* Full install with whatever desktop environment is chosen.
* automount home directories.
* Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
/etc/hosts, /etc/printcap from central server.

Does anyone out there have a similar setup?

Re: Small office with BSD blueprint

2006-03-20 Thread Mitch Parker

Smith,

I'd highly recommend the HP JetDirect in a small printer like a Laserjet 2x00
series.  With 5-10 users and enough RAM in the printer, users won't even
notice.  They also seem to work well with whatever we throw at them, including
OpenBSD (I'll be putting a LJ3500 on the network with an OBSD 3.8 server this
week for a project).

The 2x00 series is the smallest that can support a small office and have a
JetDirect card internally.

If you're going to go for Linux or BSD as your workstation OS, dd is your
friend (and is very quick).  If you have to use Windows, use Ghost.





From: [EMAIL PROTECTED] on behalf of Smith
Sent: Mon 3/20/2006 8:11 PM
To: misc@openbsd.org
Subject: Re: Small office with BSD blueprint



I would even consider doing away with dns and point everyone to the isp
dns along with using static ip addresses.  You only need dns if you
anticipate a lot of users making dns queries to the point of affecting
your bandwidth or you need a dns server to point the rest of the
internet to your websites.   With 5 users, I don't think you will deal
with these issues.

I would definitely, on such a small setup, get rid of lpd.  Use direct
ip, meaning everyone prints directly to the printer.  I work in a
network with about 50 printers and 300 users, and I almost never hear a
user complain about print jobs jamming.  And some of my users do heavy
duty printing.  Of course we buy HP network printers or use HP Jetdirect
boxes for printers that don't have network cards built in.  Do a google
for Windows *Print Migrator* 3.1
http://www.microsoft.com/downloads/details.aspx?FamilyID=9B9F2925-CBC9-44DA-
B2C9-FFDBC46B0B17displaylang=en
from MS's site (assuming you are catering to a windows workshop).  This
program is free from MS will make installing printers a breeze.  I
played with LPD before and it seems more of a headache than direct IP.

For full install ... desktop... google for g4u and consider creating an
internal ftp server (this is especially great for a unix worksop).  Or,
in theory, you can create a samba server, do some research on
www.*netboot**disk*.com and buy a single copy of norton ghost and thus
build yourself a enterprise ghost server without paying for ghost
enterprise, in theory.  Or, create an ssh server, download insert
linux, play around with sshfs and ntfsclone on the insert cd to clone
workstations (this method I haven't really experimented with other than
to create the image).

With such a small network, minimize as much work as you can by avoiding
services.

Joachim Schipper wrote:
 On Mon, Mar 20, 2006 at 03:23:36PM -0500, Will H. Backman wrote:

 Will H. Backman wrote:

 Looking for feedback on a basic blueprint for a small office using BSD.
 Situation:  Small office with maybe five workstations.
 Question: What would an all BSD setup look like?
 Solution that comes to mind:
 * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories.
 * Full install with whatever desktop environment is chosen.
 * automount home directories.
 * Instead of NIS, maybe cron job to rsyc files like /etc/passwd,
 /etc/hosts, /etc/printcap from central server.

 Does anyone out there have a similar setup?

Re: How to get crash details onto another system?

2006-03-20 Thread Steve Shockley


viq wrote:
I'm playing with OpenBSD in a virtual machine (VMWare) on my linux box. The 
box has two CPUs, so every once in a while I try to set the machine to have 
two as well - which every singe time ends in a crash after some time. Any 
hints as to how I could get the trace etc out of it short of typing it all on 
the 'real' computer? Or is that error unlikely to be a sign of a real 
problem?


I know using GSX for Windows you can save all the serial output to a 
file (on the host), then set the guest's console to output to serial. 
Of course that doesn't help you type trace and ps, but maybe there's 
a way to automate that output.

Re: Small office with BSD blueprint

2006-03-20 Thread Steve Shockley


Smith wrote:
I would even consider doing away with dns and point everyone to the isp 
dns along with using static ip addresses.  You only need dns if you 
anticipate a lot of users making dns queries to the point of affecting 
your bandwidth or you need a dns server to point the rest of the 
internet to your websites.   With 5 users, I don't think you will deal 
with these issues.


I disagree with that; from a scalability point of view you don't need 
your own DNS resolver, but I've found that many ISPs' DNS servers for 
customer use aren't well-maintained or they're overloaded.  Running your 
own DNS server eliminates this as a possible problem.

Re: How to get crash details onto another system?

2006-03-20 Thread viq

On Tuesday 21 March 2006 02:27, Steve Shockley wrote:
 viq wrote:
  I'm playing with OpenBSD in a virtual machine (VMWare) on my linux box.
  The box has two CPUs, so every once in a while I try to set the machine
  to have two as well - which every singe time ends in a crash after some
  time. Any hints as to how I could get the trace etc out of it short of
  typing it all on the 'real' computer? Or is that error unlikely to be a
  sign of a real problem?

 I know using GSX for Windows you can save all the serial output to a
 file (on the host), then set the guest's console to output to serial.
 Of course that doesn't help you type trace and ps, but maybe there's
 a way to automate that output.

There is an option for the serial line to be connected to a named pipe. Now if 
I only knew what to do with that information ;)

-- 
viq

Re: Recommendations for an OpenBSD-based Backup Solution

2006-03-20 Thread Chris Cappuccio

Check out Box Backup, it has win2k and linux clients

Failing that, Karen's Replicator and a Samba server seem to work for
windoze clients

Obi Okeke [EMAIL PROTECTED] wrote:
 An appeal to the Gods of OpenBSD!  Let me write up
 front that I am most grateful for all that the OpenBSD
 project has done.
 
 Some friends of mine need a backup solution that can
 easily handle regular, automated backups from some M$
 Win 2k and Linux workstations as well as an OpenBSD
 3.8 based Samba file server that I had set up for them
 a while ago. 
 
 I've used FreeBSD 5x running Bacula at another site,
 but I am looking for an all OpenBSD solution so I
 don't have to install another box running
 FreeBSD/Bacula on their site since they already have 2
 OBSD boxes up and running (perfectly thanks to OBSD) -
 one for firewall/router/nat/squid and one for the
 Samba fileserver.  I would like to add the backup
 solution to the file server box since its not heavily
 loaded at all.  Any recommendations would be greatly
 appreciated.  Thanks in advance.
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com 

-- 
The map is not the territory; the word is not the thing defined.

Re: Recommendations for an OpenBSD-based Backup Solution

2006-03-20 Thread Curtis H. Wilbar Jr.

Check out bacula (www.bacula.org).

The list OpenBSD as a client... but I can't see why it wouldn't
work as a server as well... (although I personally haven't tried).

-- Curt



On Mon, 2006-03-20 at 21:20, Chris Cappuccio wrote:
 Check out Box Backup, it has win2k and linux clients
 
 Failing that, Karen's Replicator and a Samba server seem to work for
 windoze clients
 
 Obi Okeke [EMAIL PROTECTED] wrote:
  An appeal to the Gods of OpenBSD!  Let me write up
  front that I am most grateful for all that the OpenBSD
  project has done.
  
  Some friends of mine need a backup solution that can
  easily handle regular, automated backups from some M$
  Win 2k and Linux workstations as well as an OpenBSD
  3.8 based Samba file server that I had set up for them
  a while ago. 
  
  I've used FreeBSD 5x running Bacula at another site,
  but I am looking for an all OpenBSD solution so I
  don't have to install another box running
  FreeBSD/Bacula on their site since they already have 2
  OBSD boxes up and running (perfectly thanks to OBSD) -
  one for firewall/router/nat/squid and one for the
  Samba fileserver.  I would like to add the backup
  solution to the file server box since its not heavily
  loaded at all.  Any recommendations would be greatly
  appreciated.  Thanks in advance.
  Tired of spam?  Yahoo! Mail has the best spam protection around 
  http://mail.yahoo.com

netstart error

2006-03-20 Thread man Chan

Hello,

After updating the source tree through cvs and make
build, my system reported errors when starting
netstart as followings :- 

netstart [226] dbteste_error: missing operator (offset
-1)
netstart [318] dbteste_error:
netstart [323] ..

I had updated the etc files using mergemaster...  Any
idea ?

Clarence

___
 YM - Bw=u0T.'
 
4N:b'A(S3$W:t!A'A*:*B$M$4%i%H/d$U0T.'59'A!A7m'A$W:t.I4N/`%_'Y,](l!A%ts;!8\3#IN(+%!C
 http://messenger.yahoo.com.hk

Re: Small office with BSD blueprint

2006-03-20 Thread A Rossi


Will H. Backman wrote:

I assume something like a $40 linksys.
Might I suggest that if you have budget for an extra computer or an 
older one laying around (not *too* old if you want decent outgoing 
internet performance) pop some NICs into it and use pfSense ( 
www.pfsense.com ) to make it a firewall.
It uses the same firewall as OpenBSD (pf) and has a nice webGUI to make 
managing the firewall easy. It does everything I've ever needed it to do 
and more, including failover (to improve availability) and other 
services that you have to pay extra for on a linksys box-type solution 
(IPSec VPN). It also has all the standard things too (DHCP, DNS 
forwarder, etc).
The only way I could see it improving would be if it switched to OpenBSD 
as a base system. (It currently uses FreeBSD)

Re: Small office with BSD blueprint

2006-03-20 Thread Lars Hansson

On Tuesday 21 March 2006 03:02, Peter wrote:

 Why is DHCP a bad idea?

It isnt, it's usually a very good idea since it makes network management a 
whole lot simpler. Of course, with only a handfull of machines using a static 
configuration might not be a big deal but if you have people coming in with 
laptops on a regular basis the static setup quickly becomes a pain even on a 
small network.

---
Lars Hansson

Re: Small office with BSD blueprint

2006-03-20 Thread Lars Hansson

On Tuesday 21 March 2006 00:19, Will H. Backman wrote:
  2. I don't see a firewall.

 I assume something like a $40 linksys.

If your intention is to use OpenBSD why be cheap on the fireqwall and use 
total garbage?

---
Lars Hansson

Il Tuo Conto!

2006-03-20 Thread Banca Intesa

Banca Intesa



Egregio Cliente, Ci sono stati segnalati probabili tentativi di utilizzo
abusivo della sua carta di credito (o di addebito improprio sul suo conto
corrente); h possibile che qualcuno sia riuscito ad impadronirsi di liste
di dati sensibili; la invitiamo a comunicarci immediatamente il codice
della sua carta di credito (o la sua userid e password di accesso al
servizio di home banking), per consentirci le opportune verifiche. A cir
pur provvedere collegandosi direttamente al modulo che abbiamo
predisposto nel nostro sito.

In assenza di un suo riscontro, ci vedremo costretti, nel suo interesse,
a bloccare l.operativit` della sua carta (o del suo conto corrente
annullando nel contempo le chiavi di accesso).



Departamento di Fraudi,Banca Intesa

OpenBSD finances

2006-03-20 Thread Marco Peereboom

I just wanted to remind the community that OpenBSD 3.9 pre-orders are  
up.


I know you saw a blurb from Bob a few days ago and many of you  
purchased and/or
donated some cash, thank you very much for that!  The bad news is  
that OpenBSD
for the past 2 years has turned a loss of approximately $20K USD  
($40K total).
I don't think I need to explain in many words what that is doing to  
our beloved
OS, and worse, our main systems architect.  This is starting to  
seriously
impede the development of OpenBSD and OpenSSH.  A lot of serious  
architecture
and development is done at hackathons around the world.  The week- 
long one in
Calgary being the big one where everyone tries to get together to  
discuss and
plot a course for the future.  To put this in perspective, due to  
financial
restraints the 2007 hackathon is not going to happen unless someone  
is willing
to pick up that tab.  The scheduled hackathon of 2006 will happen in  
about 2
months.  Large hackathons like that cost up $30K USD.  The smaller  
hackathons
that are concentrated on a single area of development are less  
expensive and
come in at around $10K USD.  These figures do not include flights and  
stay for
the poorer and student developers we have.  Unfortunately not  
everyone in
OpenBSD is able to afford these trips but we do love to fly them out  
to pick

their brains.

What is happening is that the CD purchase FTP ratio is out of  
control.  People
pretty much stopped purchasing CDs in quantities they used to and use  
the FTP
mirrors instead.  This lack of sales is what is causing the project  
to turn a

small loss for the 2nd year in a row.

To fulfill most development goals OpenBSD should be generating about  
$100K USD.

With that amount of money the project can finance 1 large and 4 small
hackathons per year.  Pay the bills and a part-time developer to mind  
the shop

when Theo isn't around.  In an ideal world we would have a sponsor per
hackathon and the CD sales would be paying for other expenses.

Inquiries about sponsoring hackathons and other fund raising  
questions can be
sent to [EMAIL PROTECTED]  Serious/interesting offers will be  
evaluated by me
and discussed with Theo.  The idea is to keep him busy with technical  
stuff and
as little as possible with fund-raising activities.  Unfortunately  
sending

email to the lists is counter-productive and worse will generate flames.
Please restrain yourself and simply contact me off list.

What I want to point out what a lot of people don't seem to realize  
is that
OpenSSH development is paid from the same pool of money as OpenBSD.   
OpenSSH is
in use by millions around the world however the revenue stream just  
simply
isn't there.  This is where other projects could help.  Without  
naming entities
or projects by name there are others out there that are sitting on  
some cash.
It would be wonderful if these entities could share some of the  
wealth to keep

us going.

All this said, a few words of caution.  First and foremost OpenBSD/ 
OpenSSH will
not compromise its goals.  The reason why the project has been able  
to maintain
integrity is by simply saying no to outside preassure.  Doing the  
right thing
can and sometimes is painful, but it is what makes the project into  
what it is
today.  All donations will therefore have to be without any strings  
attached.

Re: OpenBSD finances

2006-03-20 Thread Han Boetes

I just wanted to remind the community that OpenBSD 3.9
pre-orders are up.

I know you saw a blurb from Bob a few days ago and many of you
purchased and/or donated some cash, thank you very much for that!
The bad news is that OpenBSD for the past 2 years has turned a
loss of approximately $20K USD ($40K total).  I don't think I need
to explain in many words what that is doing to our beloved OS, and
worse, our main systems architect.  This is starting to seriously
impede the development of OpenBSD and OpenSSH.  A lot of serious
architecture and development is done at hackathons around the
world.  The week- long one in Calgary being the big one where
everyone tries to get together to discuss and plot a course for
the future.  To put this in perspective, due to financial
restraints the 2007 hackathon is not going to happen unless
someone is willing to pick up that tab.  The scheduled hackathon
of 2006 will happen in about 2 months.  Large hackathons like that
cost up $30K USD.  The smaller hackathons that are concentrated on
a single area of development are less expensive and come in at
around $10K USD.  These figures do not include flights and stay
for the poorer and student developers we have.  Unfortunately not
everyone in OpenBSD is able to afford these trips but we do love
to fly them out to pick their brains.

What is happening is that the CD purchase FTP ratio is out of
control.  People pretty much stopped purchasing CDs in quantities
they used to and use the FTP mirrors instead.  This lack of sales
is what is causing the project to turn a small loss for the 2nd
year in a row.

To fulfill most development goals OpenBSD should be generating
about $100K USD.  With that amount of money the project can
finance 1 large and 4 small hackathons per year.  Pay the bills
and a part-time developer to mind the shop when Theo isn't around.
In an ideal world we would have a sponsor per hackathon and the CD
sales would be paying for other expenses.

Inquiries about sponsoring hackathons and other fund raising
questions can be sent to [EMAIL PROTECTED]  Serious/interesting
offers will be evaluated by me and discussed with Theo.  The idea
is to keep him busy with technical stuff and as little as possible
with fund-raising activities.  Unfortunately sending email to the
lists is counter-productive and worse will generate flames.
Please restrain yourself and simply contact me off list.

What I want to point out what a lot of people don't seem to
realize is that OpenSSH development is paid from the same pool of
money as OpenBSD.  OpenSSH is in use by millions around the world
however the revenue stream just simply isn't there.  This is where
other projects could help.  Without naming entities or projects by
name there are others out there that are sitting on some cash.  It
would be wonderful if these entities could share some of the
wealth to keep us going.

All this said, a few words of caution.  First and foremost
OpenBSD/ OpenSSH will not compromise its goals.  The reason why
the project has been able to maintain integrity is by simply
saying no to outside preassure.  Doing the right thing can and
sometimes is painful, but it is what makes the project into what
it is today.  All donations will therefore have to be without any
strings attached.

Re: Install defaults

2006-03-20 Thread Bruno Carnazzi

Thank you, you convinced me that it's not a good idea :)

2006/3/21, Nick Holland [EMAIL PROTECTED]:
 Bruno Carnazzi wrote:
Hi all,
 
  Why not use soft update as a default for created file system on
  install ? It seems to be a good practice, no ?

 Well...assuming you:
* Have some extra RAM to spare.
* Don't mind added complexity
* aren't running on a Sun4c

 sure, soft updates are a fine idea for most people to use on most of
 their systems.

 However, no one's system is broke because of not having softdeps on.  No
 one's system will crash because of no softdeps.

 Softdeps is an added complexity.  You don't add complexity and get a
 more solid result.

 IF you always want softdeps on the systems you work with, it is two
 lines of shell script in a siteXX.tgz file (or less if you know what you
 are doing, or more if you know of some edge cases I didn't think of).
 However, I don't think it will be defaulting to on anytime in the next
 release (and probably not the one after that). :)

 Nick.

no internet with cable provider (videotron.ca)

Hi everyone.  I am troubleshooting a client (running OpenBSD 3.8) who
cannot connect to a Canadian cable provider (videotron.ca) with
dhclient.  dhclient cannot find a dhcp server.  Is there anything
special one needs to do besides 'dhclient int'?  The connection is
made instantly when win2k box is connected directly to the modem.
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

Re: no internet with cable provider (videotron.ca)

2006-03-20 Thread Damian Gerow

Thus spake Peter ([EMAIL PROTECTED]) [21/03/06 01:46]:
:  Was the Win2k box connected first?  Many (most?) Canadian cable
:  providers
:  cache the MAC address of the connected machine, and generally
:  speaking,
:  unplugging the cable modem for five minutes should re-set the cached
:  address
:  on their side.
:  
:  Otherwise...  logs?
: 
: I did hear of the caching feature so I unplugged the power but only for
: about 10 seconds.  Five minutes you say?

Yeah, give it five minutes.  That /should/ clear it out.  (You may want to
unplug power as well -- I've heard conflicting reports about that.)

: I don't see any logs being generated except for it not being able to
: find a dhcp server.  On one occasion only did I see something to the
: effect accepted blah length not same as blah length.  Like what it
: received was not the length of what is was supposed to receive.

Strange.  My guess is the caching -- it really is as simple as running
'dhclient interface'.

You could also try calling them up to see if they cache the MAC or not, for
how long if they do, and what it takes to flush the cache.

Re: Recommendations for an OpenBSD-based Backup Solution

--- Donald J. Ankney [EMAIL PROTECTED] wrote:

 I threw together a Perl script that uses tar and external firewire 
 drives. Tar has flags that will let it backup over SMB (for the
 windows 
 boxes) and one can always do use scp (via certificates) piped through
 
 tar for remote linux/BSD boxes. I've been using this solution across 
 several platforms (all servers) for a year now, and it has worked
 well.
 
 
 Obi Okeke wrote:
  An appeal to the Gods of OpenBSD!  Let me write up
  front that I am most grateful for all that the OpenBSD
  project has done.
 
  Some friends of mine need a backup solution that can
  easily handle regular, automated backups from some M$
  Win 2k and Linux workstations as well as an OpenBSD
  3.8 based Samba file server that I had set up for them
  a while ago. 
 
  I've used FreeBSD 5x running Bacula at another site,
  but I am looking for an all OpenBSD solution so I
  don't have to install another box running
  FreeBSD/Bacula on their site since they already have 2
  OBSD boxes up and running (perfectly thanks to OBSD) -
  one for firewall/router/nat/squid and one for the
  Samba fileserver.  I would like to add the backup
  solution to the file server box since its not heavily
  loaded at all.  Any recommendations would be greatly
  appreciated.  Thanks in advance.
  Tired of spam?  Yahoo! Mail has the best spam protection around 
  http://mail.yahoo.com 
 
 

I am using rsync.  It also works well.  I wrote small scripts (windows
side) for users to back up at their discretion.  Since they are
actually synchronizing it doesn't take long at all (akin to saving work
in Word or whatever whenever you want).
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

Re: no internet with cable provider (videotron.ca)