Re: Running another OS under OpenBSD

2008-12-12 Thread Jukka Ruohonen
On Thu, Dec 11, 2008 at 09:04:48PM +0100, Toni Mueller wrote:
  On Thu, Dec 11, 2008 at 10:30:50AM -0800, Jeff_1981 wrote:
   Please can you indicate me how to run Windows or Linux under OpenBSD ?
   Under Linux for example there is possibility to virtualize another OS.
   If the other OS is hacked from the web does it compromizes the security of
   OpenBSD ?
 
 this is generally possible. If you kept an eye on the virtualization
 methods under Linux, you will have encountered several cases where it
 was possible for virtual machines to break out of their compartment,
 and invade the host or other guest systems. Search eg. for blue pill
 if you want more details.

As a footnote: Rafal Wojtczuk recently (October, 2008) published an
interesting paper demonstrating an escape from a Xen guest to dom0 on i386
Fedora 8.[1]

- Jukka.


[1] http://invisiblethingslab.com/pub/xenfb-adventures-10.pdf



Re: PHP5 And Apache on 4.4

2008-12-12 Thread Richard Toohey

On 12/12/2008, at 4:51 PM, Marcos Laufer - Ipv4networks.com wrote:


Or you could just enable short tags in php.ini:

short_open_tag = On


[cut]

Yes, that's what I used to do.  And then I used someone else's server.

Or a fresh install of PHP 5.  Or something.  And I/you forget about  
short tags.


And then you wonder why PHP is broken on this other/new server.  And
waste several hours re-installing, testing, etc., etc., etc.

Best to break the old habit and use long tags ... obviously if you've  
got a
legacy app with short tags, the short tags directive is attractive.   
But you

are going to have to take the pain one day (probably when you least
want to/expect it.)



PHP 5, mate, you have got to use long tags

?php

phpinfo();

?





Well just everybody PLEASE Laugh at me... No I mean Laugh with me...
Thats what I get for using an old learn Apache, MySQL and PHP  
book


Thanks and Yes I was LMAO ;-D

Bret




Re: Running another OS under OpenBSD

2008-12-12 Thread Aram Havarneanu
On Thu, Dec 11, 2008 at 9:47 PM, Scott Francis darkun...@gmail.com wrote:
 in theory, you could install the linux compatibility packages (see
 compat_linux(8)) and run e.g. VMware Server as a platform for a
 Windows VM. I haven't tried this myself yet (although it is on my list
 of things to do the next time I'm bored).


It won't work. VMware needs to load Linux kernel modules.
linux_compat(8) can run userspace applications only.

-- 
Aram Hcvcrneanu



Re: pf: how to set per-rule options?

2008-12-12 Thread Toni Mueller
Hi,

On Thu, 11.12.2008 at 21:12:43 +, Stuart Henderson s...@spacehopper.org 
wrote:
 On 2008-12-11, Toni Mueller openbsd-m...@oeko.net wrote:
  On Thu, 11.12.2008 at 02:29:22 +, Stuart Henderson 
  s...@spacehopper.org wrote:
  On 2008-12-10, Toni Mueller openbsd-m...@oeko.net wrote:
   Example:
   pass on $ext_if all max-mss 1400
  you should use scrub on ... max-mss 1400
 
  I have seen, and verified, that that works, but I hoped to apply such a
  rule to only some of the packets (think different transport media
  etc.pp.).
 
 scrub supports that.

I've recently run into problems which looked to me like PMTUD does not
work across IPSEC.

But I'll check again.


Kind regards,
--Toni++



type of softraid

2008-12-12 Thread Michael
Hi,

is it somehow possible to read the type of a softraid partition?

When I have the following... (it actually is a crypto raid volume) ...
how could I figure out if it is RAID 0, 1 or C?


# fdisk sd0
Disk: sd0   geometry: 491/255/63 [7897088 Sectors]
Offset: 0   Signature: 0xAA55
Starting Ending LBA Info:
 #: id  C   H   S -  C   H   S [   start:size ]
---
 0: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 1: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
*3: A6  0   1   1 -490 254  63 [  63: 7887852 ] OpenBSD

# disklabel sd0
# Inside MBR partition 3: type A6 start 63 size 7887852
# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label:
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 491
total sectors: 7897088
rpm: 3600
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize  cpg]
  a:  7887852   63RAID
  c:  78970880  unused  0 0

# bioctl sd0
sd0: , , 0.00, serial \\037 0.00

# bioctl sd0a
sd0a: , , 0.00, serial \\037 0.00



bge vs nfe in a Sun Fire X2200

2008-12-12 Thread Dave Wilson
Hi all,

I'm about to build a router using a Sun Fire X2200, which comes with 4
on-board gigabit ethernet interfaces:

nfe0 at pci0 dev 8 function 0 NVIDIA MCP55 LAN rev 0xa3
eephy0 at nfe0 phy 2: Marvell 88E1149 Gigabit PHY, rev. 1
nfe1 at pci0 dev 9 function 0 NVIDIA MCP55 LAN rev 0xa3
eephy1 at nfe1 phy 3: Marvell 88E1149 Gigabit PHY, rev. 1

bge0 at pci6 dev 4 function 0 Broadcom BCM5715 rev 0xa3, BCM5715 A3
brgphy0 at bge0 phy 1: BCM5714 10/100/1000baseT PHY, rev. 0
bge1 at pci6 dev 4 function 1 Broadcom BCM5715 rev 0xa3, BCM5715 A3
brgphy1 at bge1 phy 1: BCM5714 10/100/1000baseT PHY, rev. 0

Given I will need one to be a trunk port to a cisco switch, which will
carry the bulk of the data, and one to be the pfsync link to its CARP
twin, and possibly a management interface on a third, I was wondering if
there's any difference between the two chips, eg bge does more work and
uses fewer interrupts, so use that for the trunk, or similar? I have
seen discussions on here on which NICs to choose for the best router
performance, but I was wondering if anyone knew of any noticeable
differences between the ones I already have.

SD



Re: type of softraid

2008-12-12 Thread Todd T. Fries
tried 

bioctl -h softraid0
lately?
-- 
Todd Fries .. t...@fries.net

 _
| \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
| ..in support of free software solutions.  \  250797 (FWD)
| \
 \\
 
  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
http://todd.fries.net/pgp.txt

Penned by Michael on 20081212 11:15.55, we have:
| Hi,
| 
| is it somehow possible to read the type of a softraid partition?
| 
| When I have the following... (it actually is a crypto raid volume) ...
| how could I figure out if it is RAID 0, 1 or C?
| 
| 
| # fdisk sd0
| Disk: sd0   geometry: 491/255/63 [7897088 Sectors]
| Offset: 0   Signature: 0xAA55
| Starting Ending LBA Info:
|  #: id  C   H   S -  C   H   S [   start:size ]
| 
---
|  0: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
|  1: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
|  2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
| *3: A6  0   1   1 -490 254  63 [  63: 7887852 ] OpenBSD
| 
| # disklabel sd0
| # Inside MBR partition 3: type A6 start 63 size 7887852
| # /dev/rsd0c:
| type: SCSI
| disk: SCSI disk
| label:
| flags:
| bytes/sector: 512
| sectors/track: 63
| tracks/cylinder: 255
| sectors/cylinder: 16065
| cylinders: 491
| total sectors: 7897088
| rpm: 3600
| interleave: 1
| trackskew: 0
| cylinderskew: 0
| headswitch: 0   # microseconds
| track-to-track seek: 0  # microseconds
| drivedata: 0
| 
| 16 partitions:
| #size   offset  fstype [fsize bsize  cpg]
|   a:  7887852   63RAID
|   c:  78970880  unused  0 0
| 
| # bioctl sd0
| sd0: , , 0.00, serial \\037 0.00
| 
| # bioctl sd0a
| sd0a: , , 0.00, serial \\037 0.00



Re: type of softraid

2008-12-12 Thread Michael
Todd T. Fries schrieb:
 tried 
 
   bioctl -h softraid0
 lately?


Well, yes... but it only works if I already activated the softraid device...

# bioctl -h softraid0
Volume  Status   Size Device
softraid0 0 Online   3.8G sd1 CRYPTO
  0 Online   3.8G 0:0.0   noencl sd0a
# bioctl -d sd1
# bioctl -h softraid0


...but I would like to know what kind of type sd0a is before I try to use

bioctl -c [01C] -l /dev/... softraid0

to be able to use bioctl from a script, only for CRYPTO.

Only other way I currently see is to set the label from disklabel of sd0
to some name and check what to do from that information.



CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
We have a simple two-node CARP cluster, each with three em(2)'s and one
fxp0() interface. The setup runs fine since OpenBSD 3.7.

Being part of University Zurich our firewall has a 1GBit uplink to the
central Uni infrastructure. Recently we have seen that utilizing this
link heavily (e.g. when our Tivoli Storage Manager Client behind our
firewall starts backing up some Gigabytes to Uni) both CARP interfaces
of both nodes would go into MASTER state.

I could imagine that CARP advertisments are no longer sent and/or
received 'in time' due to the heavy load so that the BACKUP believes it
should become MASTER.

Wouldn't this be a general CARP problem under heavy load? And if so, how
do people here deal with it? I was thinking of adding a simple
priq-based ALTQ rule only for CARP. Does this make sense? Or would it be
possible (theoretically) to send carp ads over a dedicated link?

(Almost) any comments welcome. ;)

-- 

 Stephan A. Rickauer

 ---
 Institute of Neuroinformatics Tel  +41 44 635 30 50
 University / ETH Zurich   Sec  +41 44 635 30 52
 Winterthurerstrasse 190   Fax  +41 44 635 30 53
 CH-8057 ZurichWebwww.ini.uzh.ch



Re: CARP under heavy load

2008-12-12 Thread ropers
2008/12/12 Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch:
 We have a simple two-node CARP cluster, each with three em(2)'s and one
 fxp0() interface. The setup runs fine since OpenBSD 3.7.

 Being part of University Zurich our firewall has a 1GBit uplink to the
 central Uni infrastructure. Recently we have seen that utilizing this
 link heavily (e.g. when our Tivoli Storage Manager Client behind our
 firewall starts backing up some Gigabytes to Uni) both CARP interfaces
 of both nodes would go into MASTER state.

 I could imagine that CARP advertisments are no longer sent and/or
 received 'in time' due to the heavy load so that the BACKUP believes it
 should become MASTER.

 Wouldn't this be a general CARP problem under heavy load? And if so, how
 do people here deal with it? I was thinking of adding a simple
 priq-based ALTQ rule only for CARP. Does this make sense? Or would it be
 possible (theoretically) to send carp ads over a dedicated link?

 (Almost) any comments welcome. ;)

What link are you sending the CARP advertisements over? E.g. do you
use a dedicated link (separate NICs and cable connection between the
CARPed machines) or do you send the CARP advertisements over existing
other links? (Which? Please illustrate.)

regards,
--ropers



Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 14:11 +0100, ropers wrote:
 What link are you sending the CARP advertisements over? E.g. do you
 use a dedicated link (separate NICs and cable connection between the
 CARPed machines) or do you send the CARP advertisements over existing
 other links? (Which? Please illustrate.)

I didn't know I had a choice what link to send the ads over. In other
words, the CARP ads are send over the corresponding underlying, physical
interfaces, without a dedicated link.

e.g.: em0.a/em0.b=carp0 = ads send over em0's

Can I use 'carppeer' to specify *one* dedicated link for all the other
CARP interfaces?

We do have a dedicated link for pfsync, though.

-- 

 Stephan A. Rickauer

 ---
 Institute of Neuroinformatics Tel  +41 44 635 30 50
 University / ETH Zurich   Sec  +41 44 635 30 52
 Winterthurerstrasse 190   Fax  +41 44 635 30 53
 CH-8057 ZurichWebwww.ini.uzh.ch



Re: CARP under heavy load

2008-12-12 Thread ropers
2008/12/12 Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch:
 On Fri, 2008-12-12 at 14:11 +0100, ropers wrote:
 What link are you sending the CARP advertisements over? E.g. do you
 use a dedicated link (separate NICs and cable connection between the
 CARPed machines) or do you send the CARP advertisements over existing
 other links? (Which? Please illustrate.)

 I didn't know I had a choice what link to send the ads over. In other
 words, the CARP ads are send over the corresponding underlying, physical
 interfaces, without a dedicated link.

 e.g.: em0.a/em0.b=carp0 = ads send over em0's

 Can I use 'carppeer' to specify *one* dedicated link for all the other
 CARP interfaces?

 We do have a dedicated link for pfsync, though.

Maybe --possibly-- my own understanding is sorely lacking. Let me try
to explain. The following requires a non-proportional font:

Is this what your CARP setup looks like?

 external network
||
OpenBSD#0OpenBSD#1
||
 internal network

If so, are the CARP advertisements being sent via the external or
internal network?

OTOH, if you have a dedicated link, maybe your setup looks like this?

 external network
||
OpenBSD#0OpenBSD#1
||
 internal network

I was under the impression that it should be possible to exchange CARP
advertisements via the dedicated link (), though I have to
admit that I haven't actually built such a network yet -- I'm planning
to do that shortly. Maybe others can weigh in?

regards,
--ropers



OT: Granting access from DMZ servers to iSCSI network

2008-12-12 Thread carlopmart

Hi all,

 Sorry for the off-topic but I need some help with a specific implemantation. I 
have two OpenBSD firewalls with 4 interfaces each one: one for internal lan, one 
for sync lan, one for dmz lan and another for Internet access.


 I need to grant access from dmz servers to iscsi storage servers located on 
internal lan. Which can be the best form to accomplish this??


 a) Connect DMZ servers directly to iscsi servers using another private lan.
 b) connect DMZ servers to iscsi server using private lan but using openbsd 
firewalls to grant access to iscsi network
 c) Using a third openbsd firewall (with a snort IDS to control traffic 
content) configured as a bridge between DMZ servers and iSCSI servers ..


 Any other solution??

 Many thanks for your help.

--
CL Martinez
carlopmart {at} gmail {d0t} com



Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 14:57 +0100, ropers wrote:
 Maybe --possibly-- my own understanding is sorely lacking. Let me try
 to explain. The following requires a non-proportional font:
 
 Is this what your CARP setup looks like?
 
  external network
 ||
 OpenBSD#0OpenBSD#1
 ||
  internal network
 
 If so, are the CARP advertisements being sent via the external or
 internal network?

Your diagram would use two CARP interfaces, not just one. One for the
external and one for the internal network. Thus, you'd have carp0
(external) and carp1 (internal), both would exchange ads via multicast
by default over their underlying physical interfaces.

Yes, this is our setup ;) - at least the relevant part of it.

 I was under the impression that it should be possible to exchange CARP
 advertisements via the dedicated link (), though I have to
 admit that I haven't actually built such a network yet -- I'm planning
 to do that shortly. Maybe others can weigh in?

One can use 'carppeer' to not send multicast but unicast. However, I was
under the impression one still needs to do peering on the same link as
the carp interfaces sit.

Can one use the same 'carppeer ded.ica.ted.ip' statement for all carp
interfaces altogether (and the other dedicated peer IP on the other)?

This would come in handy.

-- 

 Stephan A. Rickauer

 ---
 Institute of Neuroinformatics Tel  +41 44 635 30 50
 University / ETH Zurich   Sec  +41 44 635 30 52
 Winterthurerstrasse 190   Fax  +41 44 635 30 53
 CH-8057 ZurichWebwww.ini.uzh.ch



Re: OT: Granting access from DMZ servers to iSCSI network

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 15:05 +0100, carlopmart wrote:
   Sorry for the off-topic but I need some help with a specific 
 implemantation. I 
 have two OpenBSD firewalls with 4 interfaces each one: one for internal lan, 
 one 
 for sync lan, one for dmz lan and another for Internet access.
 
   I need to grant access from dmz servers to iscsi storage servers located on 
 internal lan. Which can be the best form to accomplish this??

Depends on how you define 'best' ;)

   a) Connect DMZ servers directly to iscsi servers using another private lan.

Simplest approach. Works for some.

   b) connect DMZ servers to iscsi server using private lan but using openbsd 
 firewalls to grant access to iscsi network

Do you mean another interface/vlan for iscsi on the same physical
OpenBSD firewalls? Wouldn't do it. I'd keep iscsi and all the rest
strictly separated. Problem is when your OpenBSD setup is under heavy
load or even DOS'ed you may get nasty scsi timeouts on the dmz servers.
scsi isn't really tolerant ;) I saw linux servers just freeze because of
that.

   c) Using a third openbsd firewall (with a snort IDS to control traffic 
 content) configured as a bridge between DMZ servers and iSCSI servers ..

Sounds reasonable. Don't know about the snort part, but you can also use
pf on that bridge ...

-- 

 Stephan A. Rickauer

 ---
 Institute of Neuroinformatics Tel  +41 44 635 30 50
 University / ETH Zurich   Sec  +41 44 635 30 52
 Winterthurerstrasse 190   Fax  +41 44 635 30 53
 CH-8057 ZurichWebwww.ini.uzh.ch



Re: bge vs nfe in a Sun Fire X2200

2008-12-12 Thread Stuart Henderson
On 2008-12-12, Dave Wilson richard.wil...@senokian.com wrote:
 Given I will need one to be a trunk port to a cisco switch, which will
 carry the bulk of the data, and one to be the pfsync link to its CARP
 twin, and possibly a management interface on a third, I was wondering if
 there's any difference between the two chips, eg bge does more work and
 uses fewer interrupts, so use that for the trunk, or similar?

hit it with heavy traffic (ping -f will do) while systat vmstat
is running and watch the interrupt rates, cpu times etc.



OT, .. but eCommerce?

2008-12-12 Thread L. V. Lammert
A friend of mine is trying to get a small cCommece site up on one of our
4.4 servers, .. he is trying to get eCommerce Templates running but is
having problems with curl  it looks like others are ahead.

This seems that is something from ASP land, so before I try to help him
get it working thought I'd ask to see what other folks are using.

Basic inventory control  shopping cart is all he needs - does anyone
have a recommendation?

TIA,

Lee



Re: OT, .. but eCommerce?

2008-12-12 Thread Michiel van Baak
On 09:33, Fri 12 Dec 08, L. V. Lammert wrote:
 A friend of mine is trying to get a small cCommece site up on one of our
 4.4 servers, .. he is trying to get eCommerce Templates running but is
 having problems with curl  it looks like others are ahead.
 
 This seems that is something from ASP land, so before I try to help him
 get it working thought I'd ask to see what other folks are using.
 
 Basic inventory control  shopping cart is all he needs - does anyone
 have a recommendation?

We have some ppl running oscommerce with mixed feelings.
Maybe you can have a look at it to see if it will work for your friend.

-- 

Michiel van Baak
mich...@vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x71C946BD

Why is it drug addicts and computer aficionados are both called users?



Re: CARP under heavy load

2008-12-12 Thread Felipe Alfaro Solana
On Fri, Dec 12, 2008 at 3:12 PM, Stephan A. Rickauer 
stephan.ricka...@ini.phys.ethz.ch wrote:

 On Fri, 2008-12-12 at 14:57 +0100, ropers wrote:
  Maybe --possibly-- my own understanding is sorely lacking. Let me try
  to explain. The following requires a non-proportional font:
 
  Is this what your CARP setup looks like?
 
   external network
  ||
  OpenBSD#0OpenBSD#1
  ||
   internal network
 
  If so, are the CARP advertisements being sent via the external or
  internal network?

 Your diagram would use two CARP interfaces, not just one. One for the
 external and one for the internal network. Thus, you'd have carp0
 (external) and carp1 (internal), both would exchange ads via multicast
 by default over their underlying physical interfaces.

 Yes, this is our setup ;) - at least the relevant part of it.

  I was under the impression that it should be possible to exchange CARP
  advertisements via the dedicated link (), though I have to
  admit that I haven't actually built such a network yet -- I'm planning
  to do that shortly. Maybe others can weigh in?

 One can use 'carppeer' to not send multicast but unicast. However, I was
 under the impression one still needs to do peering on the same link as
 the carp interfaces sit.

 Can one use the same 'carppeer ded.ica.ted.ip' statement for all carp
 interfaces altogether (and the other dedicated peer IP on the other)?


What's the point on using CARP to send advertisements over a dedicated link?
The dedicated link is typically a cross-over cable (i.e. used for pfsync)
and hence, in case of a switch port failure (or cable failure), CARP won't
be able to see this.



Re: rx descriptor error

2008-12-12 Thread Chris Smith
On Tue, Dec 9, 2008 at 5:17 PM, Chris Smith obsd_m...@chrissmith.org wrote:
 how strange. that line is printed if em(4) is unable to allocate
 any memory at all to put on the rx ring. ive never known the mbuf
 cluster allocator to fail.

 is this reproducable?

 Yes, every boot provides the same error, even after compiling the
 userland and running the makedev.

Looks like some commit finally fixed this issue as I've updated and
built current several times since posting this but just now after
building the kernel and rebooting the error is not being posted. I see
something about if_vic.c and that using 9k frames for rx breaks vic on
esx but this is real hardware and not a VM, so haven't a clue what
commit fixed it.

Chris



Re: CARP under heavy load

2008-12-12 Thread Tom Van Looy

Stephan A. Rickauer wrote:

One can use 'carppeer' to not send multicast but unicast. However, I was
under the impression one still needs to do peering on the same link as
the carp interfaces sit.


Yes, because if you send carp messages on an other (dedicated) link and
the link to the external/internal network goes down, carp messages will
still reach the backup firewall. So, it won't become master.



Re: type of softraid

2008-12-12 Thread Marco Peereboom
It isn't pretty but:
dd if=/dev/wd1a skip=8244 bs=1 count=4 | hexdump -C
4+0 records in
4+0 records out
4 bytes transferred in 0.001 secs (3263 bytes/sec)
  41 00 00 00   |A...|
0004

wd1a is the cooked RAID partition.  In this case this is an AOE target.
If it was crypto it would have been 4c 00 00 00 |C...|

Currently the possible values are: 0x00 (RAID 0), 0x01 (RAID 1), 0x41
(AOE target), 0x4c (CRYPTO)  0x61 (AOE initiator).
Note that softraid is not endian neutral so on big endian machines the
numbers are flipped.

FWIW,
/marco

On Fri, Dec 12, 2008 at 01:33:14PM +0100, Michael wrote:
 Todd T. Fries schrieb:
  tried 
  
  bioctl -h softraid0
  lately?
 
 
 Well, yes... but it only works if I already activated the softraid device...
 
 # bioctl -h softraid0
 Volume  Status   Size Device
 softraid0 0 Online   3.8G sd1 CRYPTO
   0 Online   3.8G 0:0.0   noencl sd0a
 # bioctl -d sd1
 # bioctl -h softraid0
 
 
 ...but I would like to know what kind of type sd0a is before I try to use
 
 bioctl -c [01C] -l /dev/... softraid0
 
 to be able to use bioctl from a script, only for CRYPTO.
 
 Only other way I currently see is to set the label from disklabel of sd0
 to some name and check what to do from that information.



Re: CARP under heavy load

2008-12-12 Thread Liam J. Foy
2008/12/12 Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch

 We have a simple two-node CARP cluster, each with three em(2)'s and one
 fxp0() interface. The setup runs fine since OpenBSD 3.7.

 Being part of University Zurich our firewall has a 1GBit uplink to the
 central Uni infrastructure. Recently we have seen that utilizing this
 link heavily (e.g. when our Tivoli Storage Manager Client behind our
 firewall starts backing up some Gigabytes to Uni) both CARP interfaces
 of both nodes would go into MASTER state.

 I could imagine that CARP advertisments are no longer sent and/or
 received 'in time' due to the heavy load so that the BACKUP believes it
 should become MASTER.

 Wouldn't this be a general CARP problem under heavy load? And if so, how
 do people here deal with it? I was thinking of adding a simple
 priq-based ALTQ rule only for CARP. Does this make sense? Or would it be
 possible (theoretically) to send carp ads over a dedicated link?

 (Almost) any comments welcome. ;)


I *think* I understand what you mean. What are your CARP options? (sysctls).

I think if I understand your problem you might want to look at:

net.inet.carp.preempt

-- 
Liam J. Foy
liamj...@netbsd.org



Re: CARP under heavy load

2008-12-12 Thread Liam J. Foy
2008/12/12 ropers rop...@gmail.com

 2008/12/12 Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch:
  On Fri, 2008-12-12 at 14:11 +0100, ropers wrote:
  What link are you sending the CARP advertisements over? E.g. do you
  use a dedicated link (separate NICs and cable connection between the
  CARPed machines) or do you send the CARP advertisements over existing
  other links? (Which? Please illustrate.)
 
  I didn't know I had a choice what link to send the ads over. In other
  words, the CARP ads are send over the corresponding underlying, physical
  interfaces, without a dedicated link.
 
  e.g.: em0.a/em0.b=carp0 = ads send over em0's
 
  Can I use 'carppeer' to specify *one* dedicated link for all the other
  CARP interfaces?
 
  We do have a dedicated link for pfsync, though.

 Maybe --possibly-- my own understanding is sorely lacking. Let me try
 to explain. The following requires a non-proportional font:

 Is this what your CARP setup looks like?

 external network
||
 OpenBSD#0OpenBSD#1
||
 internal network

 If so, are the CARP advertisements being sent via the external or
 internal network?

 OTOH, if you have a dedicated link, maybe your setup looks like this?

 external network
||
 OpenBSD#0OpenBSD#1
||
 internal network

 I was under the impression that it should be possible to exchange CARP
 advertisements via the dedicated link (), though I have to
 admit that I haven't actually built such a network yet -- I'm planning
 to do that shortly. Maybe others can weigh in?


This wouldn't make sense with CARP. You'd only use a dedicated link for
something such as pfsync.

-- 
Liam J. Foy
liamj...@netbsd.org



Re: type of softraid

2008-12-12 Thread Stuart Henderson
On 2008-12-12, Marco Peereboom sl...@peereboom.us wrote:
 It isn't pretty but:
 dd if=/dev/wd1a skip=8244 bs=1 count=4 | hexdump -C
 4+0 records in
 4+0 records out
 4 bytes transferred in 0.001 secs (3263 bytes/sec)
   41 00 00 00   |A...|
 0004

Here's a fragment you can add to /etc/magic so that these can be
recognised with file -s /dev/wd1a.

8192string  marcCRAMOpenBSD softraid
8244   long03777  RAID 0
8244   long03777  0001RAID 1
8244   long03777  0041AOE target
8244   long03777  004ccrypto
8244   long03777  006cAOE initiator

Filling in more flags from softraidvar.h sr_metadata is left as
an exercise for the reader :)



Re: type of softraid

2008-12-12 Thread Stuart Henderson
On 2008-12-12, Stuart Henderson s...@spacehopper.org wrote:
 On 2008-12-12, Marco Peereboom sl...@peereboom.us wrote:
 It isn't pretty but:
 dd if=/dev/wd1a skip=8244 bs=1 count=4 | hexdump -C
 4+0 records in
 4+0 records out
 4 bytes transferred in 0.001 secs (3263 bytes/sec)
   41 00 00 00   |A...|
 0004

 Here's a fragment you can add to /etc/magic so that these can be
 recognised with file -s /dev/wd1a.

 8192string  marcCRAMOpenBSD softraid
8244   long03777  RAID 0
8244   long03777  0001RAID 1
8244   long03777  0041AOE target
8244   long03777  004ccrypto
8244   long03777  006cAOE initiator

 Filling in more flags from softraidvar.h sr_metadata is left as
 an exercise for the reader :)



better:

8192string  marcCRAMOpenBSD softraid
8200   long0x 0  version %u
8244  long0x RAID 0
8244  long0x 0001RAID 1
8244  long0x 0041AOE target
8244  long0x 004ccrypto
8244  long0x 006cAOE initiator



Re: Setting time range and timeout for authpf rules

2008-12-12 Thread carlopmart

carlopmart wrote:

Hi all,

 How can I establish a time range and timeout for an authpf rule? For 
example I will to permit access from my windows servers access (previous 
ssh authentication) to windowsupdate servers from 10:00 am to 13:00 am 
and block this traffic if any connection is established during 10 minutes.


Many thanks.



Please, any hints?

--
CL Martinez
carlopmart {at} gmail {d0t} com



Re: Setting time range and timeout for authpf rules

2008-12-12 Thread carlopmart

Thanks Daniel, but I had already thought about this option but exists some 
problems:

 a) I need to mantain several pf.conf files for every access
 b) i can't control timeouts when servers doesn't generate traffic ...



Wade, Daniel wrote:

Crontab job to load a different pf.conf



-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On
Behalf Of carlopmart
Sent: Friday, December 12, 2008 1:30 PM
To: openbsd misc
Subject: Re: Setting time range and timeout for authpf rules

carlopmart wrote:

Hi all,

 How can I establish a time range and timeout for an authpf rule?

For

example I will to permit access from my windows servers access

(previous

ssh authentication) to windowsupdate servers from 10:00 am to

13:00 am

and block this traffic if any connection is established during 10

minutes.

Many thanks.


Please, any hints?

--
CL Martinez
carlopmart {at} gmail {d0t} com






--
CL Martinez
carlopmart {at} gmail {d0t} com



Re: Running another OS under OpenBSD

2008-12-12 Thread Scott Francis
2008/12/12 Aram Havarneanu ara...@mgk.ro:
 On Thu, Dec 11, 2008 at 9:47 PM, Scott Francis darkun...@gmail.com wrote:
 in theory, you could install the linux compatibility packages (see
 compat_linux(8)) and run e.g. VMware Server as a platform for a
 Windows VM. I haven't tried this myself yet (although it is on my list
 of things to do the next time I'm bored).


 It won't work. VMware needs to load Linux kernel modules.
 linux_compat(8) can run userspace applications only.

that makes sense (and it should have occurred to me, but it's been
about a year since I last installed VMware Server on Linux). Thanks
for the heads-up; you saved me at least a little bit of wasted time.
:)

cheers,
-- 
darkun...@{gmail.com,darkuncle.net} || 0x5537F527
  http://darkuncle.net/pubkey.asc for public key



Re: possible bug in OpenNTPD code?

2008-12-12 Thread Anirban Sinha
I'd take a look at your other diff later.


Thanks for patching the upstream source in cvs with my patch.

Ani



   -Otto



Re: OT, .. but eCommerce?

2008-12-12 Thread Jacob Yocom-Piatt

Michiel van Baak wrote:

On 09:33, Fri 12 Dec 08, L. V. Lammert wrote:
  

A friend of mine is trying to get a small cCommece site up on one of our
4.4 servers, .. he is trying to get eCommerce Templates running but is
having problems with curl  it looks like others are ahead.

This seems that is something from ASP land, so before I try to help him
get it working thought I'd ask to see what other folks are using.

Basic inventory control  shopping cart is all he needs - does anyone
have a recommendation?



We have some ppl running oscommerce with mixed feelings.
Maybe you can have a look at it to see if it will work for your friend.

  



oscommerce works but is a mixed bag.

there are tons of modules you can add with very little work that give 
very useful features, e.g. automated label printing, but the code 
quality and maintainability sucks.


if you have the patience to tune oscommerce it is very powerful. getting 
the site to have a proper appearance is the most challenging part with 
it imo.


cheers,
jake



Re: Running another OS under OpenBSD

2008-12-12 Thread Mike Swanson

Felipe Alfaro Solana wrote:

Does QEMU work under OpenBSD? But even if it does, it's probably too slow to
use it in production. Also, it might contain bugs and crash, decrease the
security of the host or guest, etc. If I were you and decided on using
virtualization, I'd go with a proven, mature solution. I don't think QEMU is
that mature or that it got enough exposure.
  

KQEMU has been ported to OpenBSD (see ports), it's rather fast though
I'm not sure if it's stable enough to really put your services in it.



Re: OT, .. but eCommerce?

2008-12-12 Thread Michiel van der Kraats
2008/12/12 Jacob Yocom-Piatt j...@fixedpointgroup.com


 oscommerce works but is a mixed bag.

 there are tons of modules you can add with very little work that give very
 useful features, e.g. automated label printing, but the code quality and
 maintainability sucks.

 if you have the patience to tune oscommerce it is very powerful. getting
 the site to have a proper appearance is the most challenging part with it
 imo.


We run a few sites with osCommerce. They work, but like you say, the code
is, well, shall we say, less than elegant? We've also run into the problem
that once you have made your own custom osCommerce setup with a proper
appearance ( Code and markup are not seperated at all, it's a big, ugly mess
), it's quite difficult to backport security fixes. I have write a proper
webstore application on my long list. There are no good alternatives, sadly
because most are A: forks of osCommerce or B: not updated in months.

-- 
Michiel van der Kraats



Re: OT, .. but eCommerce?

2008-12-12 Thread Gaby Vanhegan

On 12 Dec 2008, at 17:10, Michiel van der Kraats wrote:


oscommerce works but is a mixed bag.



I've heard similar things about osCommerce.  I have been recommended  
this:


http://www.shopify.com/

If you can let go of the hosting then it looks rather sweet.

G.

--
Imagine there were no hypothetical situations.
http://playr.co.uk/



Re: OT, .. but eCommerce?

2008-12-12 Thread Daniel Polak

We4ve used Zen Cart for several webshops.
No problems running it on OpenBSD.

Zen Cart does have some rough edges but if you spend the time it will 
work the way you want it to.


Several people have told me they are using Magento and that they like 
it. May be worth a look too.


Daniel
 Original message from L. V. Lammert at 12-12-2008 16:33

A friend of mine is trying to get a small cCommece site up on one of our
4.4 servers, .. he is trying to get eCommerce Templates running but is
having problems with curl  it looks like others are ahead.

This seems that is something from ASP land, so before I try to help him
get it working thought I'd ask to see what other folks are using.

Basic inventory control  shopping cart is all he needs - does anyone
have a recommendation?

TIA,

Lee




Re: Running another OS under OpenBSD

2008-12-12 Thread patric conant
I'm sorry but I am a little foggy, is kqemu a kernel module, is it
fairly straightforward  to get working, or do you really have to alter
your openbsd installation a lot, and does it deliver the 8X- 10X
performance increase over qemu on openbsd that it does on other
platforms. I suppose what I am really getting at is: I thought kqemu
was a Linux thing.

On 12/12/08, Mike Swanson mikeonthecompu...@gmail.com wrote:
 Felipe Alfaro Solana wrote:
 Does QEMU work under OpenBSD? But even if it does, it's probably too slow
 to
 use it in production. Also, it might contain bugs and crash, decrease the
 security of the host or guest, etc. If I were you and decided on using
 virtualization, I'd go with a proven, mature solution. I don't think QEMU
 is
 that mature or that it got enough exposure.

 KQEMU has been ported to OpenBSD (see ports), it's rather fast though
 I'm not sure if it's stable enough to really put your services in it.



Re: OT, .. but eCommerce?

2008-12-12 Thread raven

Michiel van der Kraats ha scritto:

2008/12/12 Jacob Yocom-Piatt j...@fixedpointgroup.com

  

oscommerce works but is a mixed bag.

there are tons of modules you can add with very little work that give very
useful features, e.g. automated label printing, but the code quality and
maintainability sucks.

if you have the patience to tune oscommerce it is very powerful. getting
the site to have a proper appearance is the most challenging part with it
imo.




We run a few sites with osCommerce. They work, but like you say, the code
is, well, shall we say, less than elegant? We've also run into the problem
that once you have made your own custom osCommerce setup with a proper
appearance ( Code and markup are not seperated at all, it's a big, ugly mess
), it's quite difficult to backport security fixes. I have write a proper
webstore application on my long list. There are no good alternatives, sadly
because most are A: forks of osCommerce or B: not updated in months.
  
It depends to what language you wanna use... for python exist satchmo[1] 
or for ruby, substruct[2] .



[1] http://www.satchmoproject.com/
[2] http://code.google.com/p/substruct/



Comparez gratuitement et sans engagement votre mutuelle !

2008-12-12 Thread choisir-sa-mutuelle.com
Si vous ne parvenez pas ` lire ce message cliquez ici

[IMAGE]

* Selon la formule choisie

Cliquez ici si vous ne souhaitez plus recevoir nos offres priviligiies
CABINET AG CONSEIL SARL 08 Allie Maryse Hilsz. 94550 CHEVILLY LARUE - Tel
: 0810552525 - Fax : 01-34-29-59-33 RCS CRETEIL 450-005-426 - SARL au
capital de 7600€ - ORIAS N0 07-003-194 -
site Web ORIAS: www.orias.fr ACAM : 61 rue Taitbout 75436 Paris Cedex 09
Assurance de Responsabiliti Civile Professionnelle et Garantie Financihre
conformes aux articles L512-6 et L512-7 du code des assurances.[IMAGE]



Dual-Head on Dell Inspiron 1525 - Intel GM965/GL960 Graphics Controller

2008-12-12 Thread HDC
Hi,

I need use Dual-Head on my laptop, but is no possible switch between
the laptop display and the external LCD monitor.

my tests:

- Push the FN+F8 Button (to switch display), don't work after load the
S.O. (yes before)
- Use xrandr, this app only show information about the display
selected (before load the S.O.), but no of the other display.
- Google, google and more google.
- a lot of modification on my xorg.conf.

I attach the dmesg and the xorg.conf.

Any suggestion?

Greetings,

Hernan

--
# /dev/hdc
- OpenBSDeros.org
hdc [at] openbsderos [dot] org
OpenBSD 4.4 (CUSTOM.MP) #0: Wed Nov 19 03:04:02 ARST 2008
r...@lechuck.firelan.local:/usr/src/sys/arch/i386/compile/CUSTOM.MP
cpu0: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz (GenuineIntel 686-class) 2 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,CX16,xTPR
real mem  = 2137014272 (2038MB)
avail mem = 205152 (1962MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/10/08, BIOS32 rev. 0 @ 0xffa10, SMBIOS 
rev. 2.4 @ 0xf7190 (45 entries)
bios0: vendor Dell Inc. version A11 date 03/10/2008
bios0: Dell Inc. Inspiron 1525
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP HPET APIC MCFG SLIC OSFR BOOT SSDT
acpi0: wakeup devices PCI0(S5) PCIE(S4) USB1(S0) USB2(S0) USB3(S0) USB4(S0) 
USB5(S0) EHC2(S0) EHCI(S0) AZAL(S3) RP01(S5) RP02(S3) RP03(S3) RP04(S3) 
RP05(S3) RP06(S3) LID_(S3) PBTN(S4) MBTN(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 166MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz (GenuineIntel 686-class) 2 
GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,CX16,xTPR
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
acpiprt0 at acpi0: bus 2 (PCIE)
acpiprt1 at acpi0: bus 9 (RP01)
acpiprt2 at acpi0: bus 11 (RP02)
acpiprt3 at acpi0: bus -1 (RP03)
acpiprt4 at acpi0: bus -1 (RP04)
acpiprt5 at acpi0: bus 12 (RP05)
acpiprt6 at acpi0: bus -1 (RP06)
acpiprt7 at acpi0: bus 0 (PCI0)
acpicpu0 at acpi0: C3
acpicpu1 at acpi0: C3
acpitz0 at acpi0: critical temperature 85 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PBTN
acpibtn2 at acpi0: SBTN
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT0 model DELL RN8738 serial 15799 type LION
acpivideo at acpi0 not configured
acpivideo at acpi0 not configured
bios0: ROM list: 0xc/0xf000! 0xcf000/0x1000
cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130c2b06000c2b
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 2000 MHz (1388 mV): speeds: 2000, 1000 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel GM965 Host rev 0x0c
vga1 at pci0 dev 2 function 0 Intel GM965 Video rev 0x0c
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
agp0 at vga1: aperture at 0xe000, size 0x1000
drm at vga1 unsupported
Intel GM965 Video rev 0x0c at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 26 function 0 Intel 82801H USB rev 0x02: apic 2 int 20 (irq 
10)
uhci1 at pci0 dev 26 function 1 Intel 82801H USB rev 0x02: apic 2 int 21 (irq 
9)
ehci0 at pci0 dev 26 function 7 Intel 82801H USB rev 0x02: apic 2 int 22 (irq 
7)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 Intel 82801H HD Audio rev 0x02: apic 2 int 
21 (irq 9)
azalia0: /usr/src/sys/dev/pci/azalia.c/1348 invalid PCM format: 0x
azalia0: codec[s]: Conexant/0x2c06, CMD Technology/0x1392, Sigmatel/0x7616, 
using Sigmatel/0x7616
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801H PCIE rev 0x02: apic 2 int 16 (irq 
0)
pci1 at ppb0 bus 9
mskc0 at pci1 dev 0 function 0 Marvell Yukon 88E8040 rev 0x12, Yukon-2 FE+ 
(0x0): apic 2 int 16 (irq 11)
msk0 at mskc0 port A: address 00:1d:09:47:96:8b
eephy0 at msk0 phy 0: Marvell 88E3016 10/100 PHY, rev. 0
ppb1 at pci0 dev 28 function 1 Intel 82801H PCIE rev 0x02: apic 2 int 17 (irq 
0)
pci2 at ppb1 bus 11
wpi0 at pci2 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02: apic 2 int 
17 (irq 11), MoW1, address 00:1f:3c:33:10:4f
ppb2 at pci0 dev 28 function 4 Intel 82801H PCIE rev 0x02: apic 2 int 16 (irq 
0)
pci3 at ppb2 bus 12
uhci2 at pci0 dev 29 function 0 Intel 82801H USB rev 0x02: apic 2 int 20 (irq 
10)
uhci3 at pci0 dev 29 function 1 Intel 82801H USB rev 0x02: apic 2 int 21 (irq 
9)
uhci4 at pci0 dev 29 function 2 Intel 82801H USB rev 0x02: apic 2 int 22 (irq 
7)
ehci1 at pci0 dev 29 function 7 Intel 82801H USB rev 0x02: apic 2 int 20 (irq 
10)
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 Intel EHCI root hub rev 

Re: Setting time range and timeout for authpf rules

2008-12-12 Thread ropers
 carlopmart wrote:

  How can I establish a time range and timeout for an authpf rule?
 For example I will to permit access from my windows servers access 
 (previous
 ssh authentication) to windowsupdate servers from 10:00 am to 13:00 am
 and block this traffic if any connection is established during 10 minutes.

 Wade, Daniel wrote:

 Crontab job to load a different pf.conf

2008/12/12 carlopmart carlopm...@gmail.com:
 Thanks Daniel, but I had already thought about this option but exists some
 problems:

  a) I need to mantain several pf.conf files for every access
  b) i can't control timeouts when servers doesn't generate traffic ...

About (a):
I guess if you're really worried about maintaining two pf.conf files,
you could write a script that will edit your one single pf.conf (so
that it would comment out/de-comment specific lines; by content, not
by line number) and call that script via crontab. It would however be
really easy to clobber your pf.conf when doing this, if you're not
careful.

About (b):
I understand you would prefer to only permit your Windows-based
servers to access Microsoft's windowsupdate servers if and only if
they will actually try to reach windowsupdate between 10 and 13 am.

I'm no Hansteen, Hartmeier or Henning, but it is my understanding that
Pf has no clairvoyance feature. Is it really harmful to allow your
servers to access windowsupdate from 10 to 13, whether they actually
will do it or not? Also, from what I understand you want to
dynamically change your active ruleset to allow access once traffic
starts flowing during that time. What is the difference between that
and allowing access during that time anyway? Or what am I missing? Am
I horribly misunderstanding you?

A somewhat confused
--ropers



extract part of text

2008-12-12 Thread igor denisov

Hi there,
I need to extract part of text between /pat1/ and /pat2/ but /pat2/ may 
appear and may not,

awk '{if (/pat2/) /pat1/, /pat2/ {print}' filename
does not work. How to do that in shell?

Regards,
igor



Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 17:32 +0100, Felipe Alfaro Solana wrote:

 
 What's the point on using CARP to send advertisements over a dedicated
 link? The dedicated link is typically a cross-over cable (i.e. used
 for pfsync) and hence, in case of a switch port failure (or cable
 failure), CARP won't be able to see this.

That's true, of course. Then I don't see a chance to make CARP behave
under heavy load, cause it can always be misinterpreted as a link
failure by CARP. I'll try prioritizing carp ads with altq and see how
that goes.



Re: OT, .. but eCommerce?

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 09:33 -0600, L. V. Lammert wrote:
 A friend of mine is trying to get a small cCommece site up on one of our
 4.4 servers, .. he is trying to get eCommerce Templates running but is
 having problems with curl  it looks like others are ahead.
 
 This seems that is something from ASP land, so before I try to help him
 get it working thought I'd ask to see what other folks are using.
 
 Basic inventory control  shopping cart is all he needs - does anyone
 have a recommendation?
 
   TIA,
 
   Lee

We used osCommerce, but it's a nightmare to maintain. Now one shop has
been switched to Drupal/Ubercart and that works quite nice.



Re: OT, .. but eCommerce?

2008-12-12 Thread bofh
Really unfortunate nothing non-PHP based.

Hopefully one day, some one will have an itch to scratch that will not
be PHP based.

-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity.
-- Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks
factory where smoking on the job is permitted.  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=j1G-3laJJP0feature=related



MacBook5,1 on -current

2008-12-12 Thread Jason Dixon
Installed a Dec 11 snapshot on a MacBook5,1.  This is the new model with
the unibody chassis.  I have to use vesa for the NVIDIA 9400M (0x0863 
rev 0xb1).  There is no working wireless.  The BCM4322 chipset ID was 
removed from bwi(4) a few months ago 
(http://marc.info/?l=openbsd-cvsm=122116715708453w=2).  SpeedStep
looks broken from sysctl and dmesg.

The trackpad works mostly ok but takes a bit getting used to.  The
built-in iSight does captures stills fine with fswebcam.  It supports
YUV capture with luvcview, but I haven't figured out with to do with the
raw format yet.  It doesn't appear to save in AVI but that could just my
inexperience with the application.

sysctl hw and dmesg follows:


hw.machine=i386
hw.model=Intel(R) Core(TM)2 Duo CPU P7350 @ 2.00GHz (GenuineIntel
686-class)
hw.ncpu=1
hw.byteorder=1234
hw.pagesize=4096
hw.disknames=wd0,cd0
hw.diskcount=2
hw.sensors.acpiac0.indicator0=On (power supply)
hw.sensors.acpibat0.volt0=10.95 VDC (voltage)
hw.sensors.acpibat0.volt1=11.96 VDC (current voltage)
hw.sensors.acpibat0.watthour0=41.52 Wh (last full capacity)
hw.sensors.acpibat0.watthour1=0.25 Wh (warning capacity)
hw.sensors.acpibat0.watthour2=0.10 Wh (low capacity)
hw.sensors.acpibat0.watthour3=26.91 Wh (remaining capacity), OK
hw.sensors.acpibat0.raw0=2 (battery charging), OK
hw.sensors.acpibat0.raw1=18005 (rate)
hw.sensors.cpu0.temp0=65.00 degC
hw.cpuspeed=1991
hw.setperf=0
hw.vendor=Apple Inc.
hw.product=MacBook5,1
hw.version=1.0
hw.serialno=W8841TDA1AQ
hw.uuid=200a5462-069a-db4f-90c1-930d97f58286
hw.physmem=1853952000
hw.usermem=1853939712


OpenBSD 4.4-current (GENERIC.MP) #1202: Thu Dec 11 20:03:38 MST 2008
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
RTC BIOS diagnostic error 
ffclock_battery,ROM_cksum,config_unit,memory_size,fixed_disk,invalid_time
cpu0: Intel(R) Core(TM)2 Duo CPU P7350 @ 2.00GHz (GenuineIntel 686-class) 2 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
real mem  = 1853952000 (1768MB)
avail mem = 1783795712 (1701MB)
RTC BIOS diagnostic error 
ffclock_battery,ROM_cksum,config_unit,memory_size,fixed_disk,invalid_time
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 07/29/05, SMBIOS rev. 2.4 @ 0xe (41 
entries)
bios0: vendor Apple Inc. version MB51.88Z.0073.B02.0810061247 date 10/06/08
bios0: Apple Inc. MacBook5,1
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP HPET APIC MCFG ASF! SBST ECDT SSDT SSDT SSDT
acpi0: wakeup devices ADP1(S3) LID0(S3) EC__(S3) OHC1(S3) EHC1(S3) OHC2(S3) 
EHC2(S3) GIGE(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 2500 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 265MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU P7350 @ 2.00GHz (GenuineIntel 686-class) 2 
GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 11, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (IXVE)
acpiec0 at acpi0
acpicpu0 at acpi0: C3, C2
acpicpu1 at acpi0: C3, C2
acpiac0 at acpi0: AC unit offline
acpibtn0 at acpi0: LID0
acpibtn1 at acpi0: PWRB
acpibtn2 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model 3545803478581539170 type 3545803479086745932 
oem 3545803479086812499
bios0: ROM list: 0xc/0xe400
cpu0: unknown Enhanced SpeedStep CPU, msr 0x0617472206000617
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 600 MHz (1068 mV): speeds: 7100, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 NVIDIA MCP79 Host rev 0xb1
NVIDIA MCP79 Memory rev 0xb1 at pci0 dev 0 function 1 not configured
pcib0 at pci0 dev 3 function 0 NVIDIA MCP79 ISA rev 0xb2
NVIDIA MCP79 Memory rev 0xb1 at pci0 dev 3 function 1 not configured
nviic0 at pci0 dev 3 function 2 NVIDIA MCP79 SMBus rev 0xb1
iic0 at nviic0
iic1 at nviic0
NVIDIA MCP79 Memory rev 0xb1 at pci0 dev 3 function 3 not configured
vendor NVIDIA, unknown product 0x0a98 (class memory subclass RAM, rev 0xb1) 
at pci0 dev 3 function 4 not configured
NVIDIA MCP79 Co-processor rev 0xb1 at pci0 dev 3 function 5 not configured
ohci0 at pci0 dev 4 function 0 NVIDIA MCP79 USB rev 0xb1: apic 1 int 16 (irq 
11), version 1.0, legacy support
ehci0 at pci0 dev 4 function 1 NVIDIA MCP79 USB rev 0xb1: apic 1 int 16 (irq 
10)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 NVIDIA EHCI root hub rev 2.00/1.00 addr 1
ohci1 at pci0 dev 6 function 0 NVIDIA MCP79 USB rev 0xb1: apic 1 int 16 (irq 
7), version 1.0, legacy support
ehci1 at pci0 dev 6 function 1 NVIDIA MCP79 USB rev 0xb1: apic 1 int 16 (irq 
5)
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 NVIDIA EHCI root hub rev