Re: Adding default IPv6 route fails on 6.1

2017-04-18 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04/18/17 17:05, Stuart Henderson wrote: > > Mine is in the pkg-readme. > > A pkg-readme? Is this included in the binary package? # find / -iname \*readme\* -print | grep -i dhcp # echo $? 1 Regards Harri -BEGIN PGP SIGNATURE- iQEz

howto show IPv6 address lifetime?

2017-04-18 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi folks, AFAIR IPv6 addresses have a lifetime and some other attributes. Is there some way to show? "sysctl -a", "ifconfig -a" and netstat don't. Probably I am just missing the right command. Every helpful hint is highly appreciated. Harri -

Re: kqueue

2017-04-18 Thread Luke Small
It looks like you will be limited to 4096 timers and to valid file descriptors that don't exceed INT_MAX. My guess is that if you need more, you could run another kqueue for more timers or different kevents on identical file descriptors. Otherwise, the man page says: kevent() returns the number of

Re: kqueue

2017-04-18 Thread Philip Guenther
On Tue, Apr 18, 2017 at 9:40 AM, Friedrich Locke wrote: > just started to play winth kqueue and i wonder what happens if i request to > add n events to the queue there is memory only for a subset of the events. > Will the subset be added or the whole operation will fail ? The former. Changes in

Re: Is randomizing UID/GUID would make sense?

2017-04-18 Thread Philip Guenther
On Tue, Apr 18, 2017 at 10:12 PM, wrote: ... > Yes, it may be "standards mandated" in some cases (r1.39, bin/ksh/var.c) or > used by 60 pieces of software, but why would software require a PRNG to be > deterministic? > > That is my question, not "what apps and standards need it?" but "what usage

Re: Is randomizing UID/GUID would make sense?

2017-04-18 Thread bytevolcano
An idiot whose question lacks clarity. My apologies. Of course software uses it. What I was trying to ask was *why* would software actually nee a deterministic PRNG, rather than "what software uses it." In other words, what will break if the PRNG was non-deterministic? Yes, it may be "standards m

Re: flaky network connection after 6.1 upgrade

2017-04-18 Thread Colton Lewis
> Can you show me a dmesg please, specifically the lines which are > related to your wifi card? athn0 at pci6 dev 0 function 0 "Atheros AR9281" rev 0x01: apic 8 int 17 athn0: AR9280 rev 2 (1T2R), ROM rev 11, address 00:15:af:cd:f2:4f

kqueue

2017-04-18 Thread Luke Small
I suspect that you will sooner run out of file descriptors. but I assume that if it runs into a problem, kevent() will return -1 and it may be unrecoverable. I suspect that it would first occur because the kernel is being overutilized. The information that is being created, I suspect, is being sto

Re: [vmm] SSL read error: read failed: error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt

2017-04-18 Thread Mike Larkin
On Wed, Apr 19, 2017 at 02:38:42AM +, Tinker wrote: > On 2017-04-18 21:16, Stuart Henderson wrote: > > On 2017-04-18, Jan Lambertz wrote: > > > I had similar issues, mostly with crypto things in vmd. Can this > > > happen > > > because we get out of entropy? > > > > Run "ftp -o- https://www.g

Re: GUI desktop autologin options

2017-04-18 Thread Ax0n
Also, check the man page for the new XenoDM in base. It appears to offer autologin via Xresources. I haven't gotten myself familiarized with it yet, but I'd recommend looking at that before installing a third party display manager if you want to be dropped straight into a user session on boot. On

Re: GUI desktop autologin options

2017-04-18 Thread Ax0n
I'm using slim as the Display Manager on 6.1-RELEASE on my main laptop, with Lumina for the time being as my DE. I just added the following to the end of /etc/slim.conf and it does auto-login for me. Frustratingly, "log out" immediately logs me back in instead of prompting. If you're okay with that

GUI desktop autologin options

2017-04-18 Thread Sha'ul
I'm trying to figure how setup an auto login from boot to some kind of GUI desktop interface. What are my options? I'm not interested in Gnome 3, but I will use anything else like Lumina, KDE, XFCE, etc. as long as it can load straight into desktop environment when I turn on computer. Which ones, b

Sites in firefox stop loading with "out of memory" in console

2017-04-18 Thread Daniel Bolgheroni
Ultimately some sites opened with Firefox 52 stop loading with "out of memory" in console. Two ofenders are https://app.wire.com and https://www.protonmail.com/login, and both seem related to asm.js. Note that Firefox doesn't crash, but the sites beeing loaded just stop being loaded, and the F12

Re: [vmm] SSL read error: read failed: error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt

2017-04-18 Thread Tinker
On 2017-04-18 21:16, Stuart Henderson wrote: On 2017-04-18, Jan Lambertz wrote: I had similar issues, mostly with crypto things in vmd. Can this happen because we get out of entropy? Run "ftp -o- https://www.gov.uk/ > /dev/random" from time to time, you won't run out of entropy ever :) (Ope

Re: [vmm] SSL read error: read failed: error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt

2017-04-18 Thread Paul Chakravarti
>On 2017-04-17, David Coppa wrote: >> On Sun, Apr 16, 2017 at 11:17 AM, Paul Chakravarti wrote: >>> Hello, >>> >>> I am trying out vmm on 6.1 and can setup/boot vm etc. however when I try to >>> download a large file using SSL I consistenetly get the following error: >>> SSL read error: read

Re: [vmm] SSL read error: read failed: error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt

2017-04-18 Thread Stuart Henderson
On 2017-04-18, Jan Lambertz wrote: > I had similar issues, mostly with crypto things in vmd. Can this happen > because we get out of entropy? Run "ftp -o- https://www.gov.uk/ > /dev/random" from time to time, you won't run out of entropy ever :) (OpenBSD doesn't do the "run out of entropy" thing

[vmm] SSL read error: read failed: error:06FFF064:digital envelope routines:CRYPTO_internal:bad decrypt

2017-04-18 Thread Jan Lambertz
I had similar issues, mostly with crypto things in vmd. Can this happen because we get out of entropy? I have no evidence yet, but i will test things tomorrow.

Running Debian in vmd - succes

2017-04-18 Thread Jan Lambertz
That sounds great. Hopefully the grub Problem can be fixed too. My vms did not work with grub over serial even with a working grub.cfg for serial use.

Re: Running Debian in vmd - succes

2017-04-18 Thread Mike Larkin
On Tue, Apr 18, 2017 at 05:45:16PM +0200, Jan Lambertz wrote: > My process is this: > > Install Debian with qemu to a raw disk file > Boot Debian > apt install extlinux > Install extlinux to /Boot > Create extlinux cfg > Write extlinux mbr > Shutdown qemu vm > Put raw disk into vmd vm > Boot vmd v

Modulate state now fails with OpenBSD 6.1

2017-04-18 Thread Sjöholm Per-Olov
Hi I have had this rule for some time without issues. But since the upgrade from OpenBSD 6.0 to 6.1 yesterday I have had issues. Today when I sniffed incoming traffic on port 80 on my FW internet interface, the firewall did no longer send it out on my dmz1 to the web server. After removing “mo

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Karel Gardas
On Tue, Apr 18, 2017 at 7:02 PM, Ian Watts wrote: > Thanks for the feedback, Karel, Allan, and Kamil. The motivation is > long-term data storage reliability. For example, my wife creates > graphical books, which involves large files, plus other work and > personal files. > so kind of SOHO NAS?

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Ian Watts
Thanks for the feedback, Karel, Allan, and Kamil. The motivation is long-term data storage reliability. For example, my wife creates graphical books, which involves large files, plus other work and personal files. Having a mirror is not terribly important, so doing a nightly sync to anothe

kqueue

2017-04-18 Thread Friedrich Locke
Hi folks, just started to play winth kqueue and i wonder what happens if i request to add n events to the queue there is memory only for a subset of the events. Will the subset be added or the whole operation will fail ? Thanks in advance.

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Karel Gardas
loose -> lose. Sorry not native English speaker here. On Tue, Apr 18, 2017 at 6:09 PM, Karel Gardas wrote: > How much data can you loose on this mirror? The rebuild time is long > and the chance of another drive dying is higher during rebuild so I > would consider either increasing redundancy to

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Karel Gardas
On Tue, Apr 18, 2017 at 1:56 AM, Ian Watts wrote: > After 17 hours it is 24% complete, so it'll be about three > days to complete. The system is: How much data can you loose on this mirror? The rebuild time is long and the chance of another drive dying is higher during rebuild so I would conside

Running Debian in vmd - succes

2017-04-18 Thread Jan Lambertz
My process is this: Install Debian with qemu to a raw disk file Boot Debian apt install extlinux Install extlinux to /Boot Create extlinux cfg Write extlinux mbr Shutdown qemu vm Put raw disk into vmd vm Boot vmd vm Habe fun All extlinux steps can be found via Google,manpages etc. I can post a wo

Re: Running Debian in vmd - succes

2017-04-18 Thread Stephane HUC "CIOTBSD"
Hi, Could you explain more the process? or, an url to understand? Le 04/18/17 à 17:09, Jan Lambertz a écrit : > For those who did not already know, vmd can run Linux guests with its > seabios Firmware. However this does not work out of the box for Linux > guests with grub bootloader even with gr

Re: Minor error in strftime man page

2017-04-18 Thread Hrishikesh Muruk
Looks like I do. On Tue, Apr 18, 2017 at 8:25 PM, Claus Assmann wrote: > On Tue, Apr 18, 2017, Hrishikesh Muruk wrote: > > > http://man.openbsd.org/man3/strftime.3 > > > The there are two definitions for the %I option > > Nope. Use an editor and search for > %I > and you'll find only one. The ot

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Stuart Henderson
On 2017-04-18, Allan Streib wrote: > Ian Watts writes: > >> With this much disk space, should I be looking at another way of >> achieving data redundancy? > > Buy a hardware RAID controller. I'd sooner have decent software RAID with disks spread across multiple controllers..

Running Debian in vmd - succes

2017-04-18 Thread Jan Lambertz
For those who did not already know, vmd can run Linux guests with its seabios Firmware. However this does not work out of the box for Linux guests with grub bootloader even with grub serial settings. Replacing grub with syslinux/extlinux made my Debian 8.7.1 amd64 run. No problems so far. This sho

Re: Adding default IPv6 route fails on 6.1

2017-04-18 Thread Stuart Henderson
On 2017-04-13, Harald Dunkel wrote: > > Hi Sterling, > > On 04/12/17 01:20, Sterling Archer wrote: >> Hello everyone. >> >> After upgrading to 6.1 about an hour ago, I noticed that I didn't have an >> IPv6 connection anymore. >> >> I use dhcpcd over a pppoe session, which worked fine in 6.0-sta

Re: Minor error in strftime man page

2017-04-18 Thread Claus Assmann
On Tue, Apr 18, 2017, Hrishikesh Muruk wrote: > http://man.openbsd.org/man3/strftime.3 > The there are two definitions for the %I option Nope. Use an editor and search for %I and you'll find only one. The other is 'l' (0x6c) Maybe you need a better font?

Re: Minor error in strftime man page

2017-04-18 Thread Allan Streib
Hrishikesh Muruk writes: > Minor error in the strftime man page online > > http://man.openbsd.org/man3/strftime.3 > > The there are two definitions for the %I option > > %I is replaced by the hour (12-hour clock) as a decimal number (01-12). > > %l is replaced by the hour (12-hour clock) as a d

Minor error in strftime man page

2017-04-18 Thread Hrishikesh Muruk
Minor error in the strftime man page online http://man.openbsd.org/man3/strftime.3 The there are two definitions for the %I option %I is replaced by the hour (12-hour clock) as a decimal number (01-12). %l is replaced by the hour (12-hour clock) as a decimal number (1-12); single digits are p

Re: 6.1 dhcpd

2017-04-18 Thread Bryan Vyhmeister
On Tue, Apr 18, 2017 at 11:01:47AM +0200, Bastien Durel wrote: > Since I upgraded to 6.1, my printer does not get its IP from dhcpd > anymore. > > Printer is a xerox phaser 6022. > > dhcpd gets dhcp requests and reponds to it (I've show packets with > tcpdump, and here are the logs) I am seeing

Re: Broken ipsecctl validation in 6.1 ("-n -f " flags) - illegal transform aes-256-gcm

2017-04-18 Thread Bob Jones
> This is not supported. Look at ipsec.conf(5): Marc, That's not quite the point I was making. The point I was making is that '-n -f" should tell me its not supported (or a config error or whatever). I shouldn't have to wait for the nasty surprise awaiting me when I go "-f" after "-n -f" decla

Re: softraid mirror & large drives (3T)

2017-04-18 Thread trondd
On Tue, April 18, 2017 8:48 am, Kamil CholewiÅ*ski wrote: > On Tue, 18 Apr 2017, Jiri B wrote: >> On Tue, Apr 18, 2017 at 08:23:56AM -0400, Allan Streib wrote: >>> Buy a hardware RAID controller. >> >> I suppose you wanted to write - 'buy two equal hardware RAID >> controllers', >> or how would yo

Re: Broken ipsecctl validation in 6.1 ("-n -f " flags) - illegal transform aes-256-gcm

2017-04-18 Thread Marc Peters
Am 04/18/17 um 14:08 schrieb Bob Jones: > Hi, > > I have the below in my ipsec.conf : > ike esp from 198.51.100.0/24 to 10.20.30.0/24 \ > local 198.51.100.15 \ > peer 203.0.113.114 \ > main auth hmac-sha2-512 enc aes-256-gcm group modp8192 lifetime 14400 > \

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Kamil Cholewiński
On Tue, 18 Apr 2017, Jiri B wrote: > On Tue, Apr 18, 2017 at 08:23:56AM -0400, Allan Streib wrote: >> Buy a hardware RAID controller. > > I suppose you wanted to write - 'buy two equal hardware RAID controllers', > or how would you be solving problem in broken hw raid controller in > cca 10 yrs fr

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Jiri B
On Tue, Apr 18, 2017 at 08:23:56AM -0400, Allan Streib wrote: > Ian Watts writes: > > > With this much disk space, should I be looking at another way of > > achieving data redundancy? > > Buy a hardware RAID controller. I suppose you wanted to write - 'buy two equal hardware RAID controllers',

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Allan Streib
Ian Watts writes: > With this much disk space, should I be looking at another way of > achieving data redundancy? Buy a hardware RAID controller. Allan

Re: softraid mirror & large drives (3T)

2017-04-18 Thread Nick Holland
On 04/17/17 19:56, Ian Watts wrote: > Hello, > > I'm planning on replacing an old fileserver that has a single 1T drive > with something a little newer having 3T of space. I have two 3T drives > and have installed OpenBSD 6.0 to both as a softraid mirror. Works well > and I simulated a drive

Broken ipsecctl validation in 6.1 ("-n -f " flags) - illegal transform aes-256-gcm

2017-04-18 Thread Bob Jones
Hi, I have the below in my ipsec.conf : ike esp from 198.51.100.0/24 to 10.20.30.0/24 \ local 198.51.100.15 \ peer 203.0.113.114 \ main auth hmac-sha2-512 enc aes-256-gcm group modp8192 lifetime 14400 \ srcid 198.51.100.15 dstid 203.0.113.114 \ psk “MY_SECRE

vmd memory bigger 2G

2017-04-18 Thread Jan Lambertz
yes. daemon should be the one. daemon:\ :ignorenologin:\ :datasize=infinity:\ :maxproc=infinity:\ :openfiles-max=1024:\ :openfiles-cur=128:\ :stacksize-cur=8M:\ :localcipher=blowfish,a:\ :tc=default:

ipsec ... again

2017-04-18 Thread Markus Rosjat
Hi there, since my attempt with ikev2 failed I thought I go back to ikev1 but it seems since the last time I used it something has changed with that too. I simply try to set up a site to site tunnel with a PSK here is the ipsec.conf on the openbsd machine ike from {10.10.10.0/24} to 10.10.15

Attempting to carpdev lo interface causes panic

2017-04-18 Thread Bob Jones
HI, Ok, yes, I know, I'm probably stupid for even trying to do it (I was curious, sorry !) but surely CARP should be able to handle this more gracefully ! The following commands : ifconfig lo1 192.168.2.2/24 ifconfig carp1 192.168.2.1/24 carpdev lo1 vhid 2 On OpenBSD 6.1 causes the below pret

vmd memory bigger 2G

2017-04-18 Thread Jan Lambertz
right now i can succesfully run vms with memory of 2G. Anything above will bring following error: vmd_configure: not creating vm vm1.virt.net (disabled) vmd_configure: not creating vm vm2.virt.net (disabled) vmd_configure: not creating vm vm3.virt.net (disabled) vmd_configure: not creating vm vm4.

Re: flaky network connection after 6.1 upgrade

2017-04-18 Thread Stefan Sperling
On Tue, Apr 18, 2017 at 01:15:38AM -0500, Colton Lewis wrote: > I tried channels 2, 5, and 10 with no better luck. > > Could you explain what made you think interference? > My computer and AP have been in their current spots for months with no > issue, and no new sources of come around > to the be

6.1 dhcpd

2017-04-18 Thread Bastien Durel
Hello, Since I upgraded to 6.1, my printer does not get its IP from dhcpd anymore. Printer is a xerox phaser 6022. dhcpd gets dhcp requests and reponds to it (I've show packets with tcpdump, and here are the logs) Apr 16 10:26:52 fremen.geekwu.org dhcpd[77052]: DHCPOFFER on 10.42.0.49 to 9c:93:

Re: Does CARP need Layer 2 ?

2017-04-18 Thread Bob Jones
> off the top of my head, you have two paths you could take. > > firstly, you could advertise the vpn service as the same ip addresses bound > to loopback (lo(4)) interfaces on each of the hosts. ie, a cheap and cheerful > anycast setup. bgp as your routing protocol should work well for this if

Re: OpenBSD on HPE DL20 G9

2017-04-18 Thread BARDOU Pierre
Hello, Unfortunately, I don't have this server any more : as it didn't worked I sent it back to HP. But thanks for the info, the trick may be useful for other servers. -- Cordialement, Pierre BARDOU -Message d'origine- De : Naoki Fukaumi [mailto:fuka...@soum.co.jp] Envoyé : lundi 17 a

httpd and my misunderstanding of user/group permissions

2017-04-18 Thread Thanos Tsouanas
I am running httpd(8) to serve some sites, and I have setup groups like so: www: only has www in it webdevels: has www and users who have access to at least one domain under /var/www/sites, there is a per-domain directory that holds that domain's website: /var/www/sites/domain1 /