Re: Patch: porters guide chapter 2.2, item no. 23

2014-07-25 Thread Edward
On Fri, Jul 25, 2014 at 11:22:44AM -0700, patrick keshishian wrote: > On 7/25/14, Edward wrote: > > Hi, > > > > The original wording doesn't seems to flow too well: > > > > "Create pkg/PLIST. After the install is complete use the developer's > > command, make plist which makes the file PLIST in th

Re: add a new partition in USB ( clone )

2014-07-25 Thread Tuyosi Takesima
Hi, all . this is a method to make clone USB larger size than original . 1) use linux (because openbsd fdisk is hard to use) by fdisk , make /dev/sdb4 Id:a6 2)then use 'openbsd5.5 install CD disk' for <> on installing OpenBSD use OpenBSD area <- 1) mount point / (because

Re: carp setup firewall

2014-07-25 Thread Stuart Henderson
On 2014-07-24, Peter Hessler wrote: > if the addresses on the carp interface are out of sync, then the hashes > won't mash, and the firewalls *WILL* conflict with each other. > > I recommend one IP per carp interface. Far nicer in case you screw that > bit up, and much easier to balance IPs to on

Re: l2tp / ipsec issue

2014-07-25 Thread mxb
Probably, but you can play with ipsec-config and send your results over here. On 24 jul 2014, at 13:23, Stefan Krueger wrote: > In mailing.openbsd.misc, you wrote: >> the public_ip in your ipsec.conf should be the external ip of your router, >> not the openbsd box. >> >> other setup checks can

Re: carp setup firewall

2014-07-25 Thread Stuart Henderson
On 2014-07-24, Waldemar Brodkorb wrote: > Hi OpenBSD hackers, > > we like to use OpenBSD for our corporate firewall. > We have two appliances and want to setup carp and pfsync. > In the past I used this for a simple firewall connected to > a provider via dsl without a DMZ. This worked fine and I k

Re: Patch: porters guide chapter 2.2, item no. 23

2014-07-25 Thread patrick keshishian
On 7/25/14, Edward wrote: > Hi, > > The original wording doesn't seems to flow too well: > > "Create pkg/PLIST. After the install is complete use the developer's > command, make plist which makes the file PLIST in the pkg directory. > This file is a candidate packing list." > > I would like to sug

Re: openbsd and chromebooks

2014-07-25 Thread Mike Burns
On 2014-07-25 11.59.33 -0400, Stuart McMurray wrote: > Anybody know of any small laptops (not necessarily chromebooks) that run > OpenBSD well? Thinkpad X1 Carbon. -current works well: wifi, keyboard, mouse, touchscreen, suspend, resume, USB, headphones. See my recent thread "zzz + /dev/wsmouse" i

MinnowBoard MAX

2014-07-25 Thread emigrant
new toy for OpenBSD? ;) -> http://www.minnowboard.org/meet-minnowboard-max/

Re: [Bulk] Re: openbsd and chromebooks

2014-07-25 Thread Kevin Chadwick
previously on this list Stuart McMurray contributed: > The other thing that kept me from putting OpenBSD on here is that > dual-booting is kinda kooky and has security implications for the ChromeOS > side. A better question: > Is that because you have to unlock the bootloader or root it? > Any

Re: reload isakmpd

2014-07-25 Thread Atanas Vladimirov
On 25.07.2014 19:42, James Shupe wrote: Note that this doesn't clear old config, so you can't use it to tear down sessions that you no longer want - you can paste the relevant config lines to "ipsecctl -df -" to delete them though. As an added note for ipsecctl -df, you can break all your pe

Re: reload isakmpd

2014-07-25 Thread James Shupe
> Note that this doesn't clear old config, so you can't use it to tear > down sessions that you no longer want - you can paste the relevant > config lines to "ipsecctl -df -" to delete them though. > > > As an added note for ipsecctl -df, you can break all your peers into their own files and in

Re: reload isakmpd

2014-07-25 Thread Stuart Henderson
On 2014-07-25, Andy wrote: > Try ipsecctl -f /etc/ipsec.conf Sometimes this works ok, but I do have some occasions when I need to shutdown isakmpd, ipsecctl -F and restart. Note that this doesn't clear old config, so you can't use it to tear down sessions that you no longer want - you can paste

Re: reload isakmpd

2014-07-25 Thread motty cruz
Thank you all, I used this command. ps aux kill 29309 kill 7908 ps aux isakmpd -S sasyncd Thanks, On Fri, Jul 25, 2014 at 8:29 AM, Reyk Floeter wrote: > On Fri, Jul 25, 2014 at 08:17:15AM -0700, motty cruz wrote: > > Hello, how to reload configuration without restarting isakmpd? > > >

Re: openbsd and chromebooks

2014-07-25 Thread Peter Hessler
the keyboard and trackpad are horrendeous. I hate typing on it. no wifi, which is also really annoying. On 2014 Jul 25 (Fri) at 17:40:24 +0200 (+0200), frantisek holop wrote: :has anyone tried any of the existing chromebooks? :any dmesgs? : :http://en.wikipedia.org/wiki/Chromebook#Chromebook_mo

Re: openbsd and chromebooks

2014-07-25 Thread Stuart McMurray
The other thing that kept me from putting OpenBSD on here is that dual-booting is kinda kooky and has security implications for the ChromeOS side. A better question: Anybody know of any small laptops (not necessarily chromebooks) that run OpenBSD well? J. Stuart McMurray On Fri, Jul 25, 2014 a

Re: openbsd and chromebooks

2014-07-25 Thread frantisek holop
hmm, on Fri, Jul 25, 2014 at 11:45:32AM -0400, Stuart McMurray said that > I tried putting it on an SD card on my acer c270. I don't have a dmesg at > the moment. > > Wireless and the trackpad didn't work, but a cheapy USB wireless device > did. The biggest problem was putting it on the SD card

Re: openbsd and chromebooks

2014-07-25 Thread Stuart McMurray
I tried putting it on an SD card on my acer c270. I don't have a dmesg at the moment. Wireless and the trackpad didn't work, but a cheapy USB wireless device did. The biggest problem was putting it on the SD card made disk IO really, really slow. The lack of 802.11n was also kinda a bummer. J.

openbsd and chromebooks

2014-07-25 Thread frantisek holop
has anyone tried any of the existing chromebooks? any dmesgs? http://en.wikipedia.org/wiki/Chromebook#Chromebook_models -f -- tap here >>> <<< with hammer for a new monitor.

reload isakmpd

2014-07-25 Thread motty cruz
Hello, how to reload configuration without restarting isakmpd? Thanks,

Re: reload isakmpd

2014-07-25 Thread Reyk Floeter
On Fri, Jul 25, 2014 at 08:17:15AM -0700, motty cruz wrote: > Hello, how to reload configuration without restarting isakmpd? > > Thanks, > Have a look at THE FIFO USER INTERFACE in isakmpd(8): NOTE: Sending isakmpd a SIGHUP or an "R" through the FIFO will void any upda

Re: reload isakmpd

2014-07-25 Thread Andy
Try ipsecctl -f /etc/ipsec.conf On Fri 25 Jul 2014 16:17:15 BST, motty cruz wrote: Hello, how to reload configuration without restarting isakmpd? Thanks,

Re: LDAPD attribute and ACL'S

2014-07-25 Thread Matthew Weigel
On 07/25/2014 05:48 AM, Bambero wrote: Hi Is it possibile to give write access only for userPassword field ? sth like: allow write access to attr=userPassword by self There are no per-attribute permissions in the base ldapd(8). I think the 'normal' way to accomplish this is to create a user

LDAPD attribute and ACL'S

2014-07-25 Thread Bambero
Hi Is it possibile to give write access only for userPassword field ? sth like: allow write access to attr=userPassword by self Regards Bambero

[Cannot allocate memory][Qemu][x86 & i386] limits ? login.conf ?

2014-07-25 Thread Jan Lambertz
Hi, had same Problem.the only (poor) workaround i found is running qemu as root .

Patch: porters guide chapter 2.2, item no. 23 (again)

2014-07-25 Thread Edward
Hi, I thought pkg_create(1) is worth mentioning in the porting checklist so that a new porter would know where to find more information on PLIST variables & annotations that's useful to the PLIST file. The below patch appended the sentence "PLIST variables/annotations can be found in pkg_create(

Re: carp setup firewall

2014-07-25 Thread Kim Zeitler
Hello Waldemar, On 24.07.2014 17:44, Waldemar Brodkorb wrote: > Hi Peter, > Peter Hessler wrote, > >> if the addresses on the carp interface are out of sync, then the hashes >> won't mash, and the firewalls *WILL* conflict with each other. >> >> I recommend one IP per carp interface. Far nicer i

Patch: porters guide chapter 2.2, item no. 23

2014-07-25 Thread Edward
Hi, The original wording doesn't seems to flow too well: "Create pkg/PLIST. After the install is complete use the developer's command, make plist which makes the file PLIST in the pkg directory. This file is a candidate packing list." I would like to suggest changing to the followig: "Create pk

Re: pfctl: DIOCADDQUEUE: No such process

2014-07-25 Thread Loïc Blot
Erf... i found the error. An admin has configured a queue on a inexisting interface... Maybe the pfctl tell us the interface doesn't exists ? Sorry for the inconvenience -- Best regards, Loïc BLOT, Engineering UNIX Systems, Security and Network Engineer http://www.unix-experience.fr Le vendr

Re: pfctl: DIOCADDQUEUE: No such process

2014-07-25 Thread Loïc Blot
Hello after the reboot the problem persists... pfctl: DIOCADDQUEUE: No such process The default ruleset has been loaded: block drop all pass out inet6 proto ipv6-icmp all icmp6-type neighbrsol pass out inet6 proto ipv6-icmp all icmp6-type routersol pass out inet6 proto udp from any port = 546 to