Re: Writing "ones" instead of "zeroes" when wiping disk

2018-01-11 Thread L. V. Lammert
On Thu, 11 Jan 2018, STeve Andre' wrote:

> Don't bother.   Wiping the disk twice is enough.   If you are storing state
> secrets melt the disk.
>
An anvil big hammer also works well and gives some exercise in the
process.

Lee



Re: Can I use OpenBSD in a virtual machine, for example, VirtualBox?

2017-06-26 Thread L. V. Lammert
On Mon, 26 Jun 2017, SOUL_OF_ROOT 55 wrote:

> Can I use OpenBSD in a virtual machine, for example, VirtualBox?
>
Yep, .. have had them for many years, VirtualBox & Xen.

Lee



FW Hardware

2016-09-22 Thread L. V. Lammert
There have been some good discussions lately about HW capable of running a
lot of traffic, .. but this question is about the other end of the
spectrum.

Have a need for a small FW appliance that can be used to protect a single
machine and provide a simple way to whitelist a single IP or two.

Two HW ethernet ports, OBSD compatible, small form factor, low cost.

Any recommendations?

Thanks!

Lee



5.7 & Nagios

2015-09-30 Thread L. V. Lammert
What is the intended upgrade path for i386 versions of monitoring
software? No Nagios in packages, .. icinga is reported amd only, .. Nagios
in ports is amd only, .. and nagioscore will not build:

# make all
cd ./base && make
make -C ../lib
Using $< in a non-suffix rule context is a GNUmake idiom (Makefile:157)
*** Error 2 in /usr/src/nagioscore (Makefile:71 'all')

Inquiring minds want with Nagios installations want to know!

Lee



nginx & Perl on 5.6

2015-09-29 Thread L. V. Lammert
What is the prefered configuration for using Perl & Nginx? php is fairly
straightforward, .. but can't find anything for perl except some Linux
notes to recompile.

Thanks!

Lee



Slightly OT, .. 5.5 Nagios

2015-09-28 Thread L. V. Lammert
Trying to upgrade our 5.4 Nagios system to 5.5, .. everything went fine
with the system, but it appears that there are some new dependencies for
the web UI:

# pkg_add nagios-web-4.0.1-chroot
Can't install php-gd-5.4.24 because of libraries
|library X11.16.0 not found
| not found anywhere
|library Xpm.9.0 not found
| not found anywhere
|library freetype.22.0 not found
| not found anywhere

X has never been installed on this box, .. why now?

Lee



Re: Slightly OT, .. 5.5 Nagios

2015-09-28 Thread L. V. Lammert
On Mon, 28 Sep 2015, Philip Guenther wrote:

> On Mon, Sep 28, 2015 at 1:31 PM, L. V. Lammert <l...@omnitec.net> wrote:
> > Trying to upgrade our 5.4 Nagios system to 5.5, .. everything went fine
> > with the system, but it appears that there are some new dependencies for
> > the web UI:
> ...
> > X has never been installed on this box, .. why now?
>
> http://www.openbsd.org/faq/faq4.html#FilesNeededX
>
Of course, .. the question was about Nagios [hence the slightly OT].

Lee



Re: Slightly OT, .. 5.5 Nagios

2015-09-28 Thread L. V. Lammert
On Tue, 29 Sep 2015, Stuart Henderson wrote:

> Also note: if this is on a 32-bit machine (e.g. i386), the time_t
> change breaks things with nagios and icinga. Fixed for icinga in
> the OpenBSD 5.7 package (patches in 200+ places for this) but nagios
> is comparatively unloved. ;)
>
Interesting, .. so, the nagios package is broken? Removing and
reinstalling after upgrading to 5.5 DNW on i386?

In this case, the nagios 4.0.1 chroot does run, but it does exhibit some
weird symptoms:

 * It will not start daemonized - it can only be started in the foreground
   and detached;

Thanks!
Lee



Re: alternative places to buy the CDs in US are needed

2015-06-26 Thread L. V. Lammert
On Fri, 26 Jun 2015, Boris Goldberg wrote:

 Hello misc,

   I've looked (and registered) at openbsdstore.com (USA site) - don't
 like it (a lot). Use to buy OpenBSD stuff from a US book store, but can't
 find it (there was a link to it on the openbsd.org, but not any more). Are
 there alternative (local) options to buy the OpenBSD CDs in the US?

 --
 Best regards,
  Boris  mailto:bo...@twopoint.com

That's actually a good idea, .. I suspect many other US purchasers may
have stopped purchasing [as have we] due to VAT assessment.

Lee



Re: Backup of OpenBSD to Linux box

2015-06-15 Thread L. V. Lammert
On Mon, 15 Jun 2015, Bernd Schoeller wrote:

 Hi -

 I have got an OpenBSD box, and I would like to create regular full
 backups of that box to a Linux server at a different location.

 The main purpose of this backup is to be able to restore the OpenBSD box
 on a severe hardware failure (HD corruption, fire, etc.). If possible,
 the backup should be incremental as I am somewhat bandwidth constrained
 between the two sites.

IME, one seldom does a 'full' restore, as upgrades, hardware changes, et
al get in the way.

For us, rsnapshot is an excellent tool - full versioning at the file level
(enable simple restore of a single file, as well as the working contents
of an entire system).

When a system rebuild was necessary, installing the OS and restoring from
the last snapshot worked well.

Lee



Re: OpenBSD as a Mailserver

2015-03-25 Thread L. V. Lammert
ros...@ghweb.de (Markus Rosjat), 2015.03.25 (Wed) 13:58 (CET):
 what's the usual setup these days for mailserver ?

mailserv is my favorite - MySQL back end with a nice Rails management GUI.
Currently hosted on github:

https://github.com/mailserv/mailserv

5.5 is stable, 5.6 also available.

Lee



Re: Software for time management calendar

2015-03-22 Thread L. V. Lammert
On Sun, 22 Mar 2015, Jason Crawford wrote:

 I use redmine for project management and that includes a calendar and time
 tracking system.

Seconded.

Lee



Re: disk change-out and packages

2015-03-04 Thread L. V. Lammert
On Wed, 4 Mar 2015, Raf Czlonka wrote:

 In the same manual, however, it reads:

  However, cp copies hard linked files as separate files.  To
  preserve hard links, use a utility such as pax(1) or tar(1)
  instead.

 So using 'cp' to, effectively, mirror the disk, is not the best of
 ideas.

rsync -avH will copy hard linked files, .. and is a much better option -
especially if using a network connection [e.g. to the backup disk mounted
on another machine].

Lee



Re: disk change-out and packages

2015-03-04 Thread L. V. Lammert
On Wed, 4 Mar 2015, Raf Czlonka wrote:

 Hi Lee,

 I was meant to mention it but given the issues the OP had with (seemingly)
 simple 'tar' syntax, I did not want to get into explaining yet another
 tool (i.e. trailing slash, etc.). Besides, it's not in base.

 Regards,

 Raf

Raf,

No issue there, .. but rsync is much better than anything IN base for
file synchronization (cross-filesystem, works over ssh [et al], properly
handles permissions and hardlinks, . ). If there is an issue installing
packages I would think that should probably be addressed first.

Lee



Re: DigitalOcean's BSD debut is FreeBSD only

2014-12-18 Thread L. V. Lammert
On Thu, 18 Dec 2014, andrew fabbro wrote:

 Rather than discuss provider by provider, when looking for an OpenBSD VPS,
 look for KVM.  OpenBSD runs on virtually any KVM provider and there are
 many, at both the low $3-4/month end and at the high end.  I've run OpenBSD
 on KVM for several years at a variety of providers.

FYI, Xen [free] is also usable with OpenBSD, .. makes a great VM
platform, been using it for years here in the shop.

Lee



Re: [Bulk] Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-06 Thread L. V. Lammert
On Mon, 6 Oct 2014, Matti Karnaattu wrote:

 Disabling Javascript is like disabling ability to run modern application
 software. It is same if I just turn off computer. It is then secured.

Sorry, that is totally bogus! The **FIRST** thing one should do when
sitting down at a new browser is install NoScript [which is the most
important reason TO use Firefox] and CookieMonster, so you can SEE what JS
code is running and have the option to block individual sites.

I interpreted the comment to which you are referring as 'controlling' what
JS is running, so YOU have the choice as to whether to allow tracking code
(e.g. googleanalytics) or block.

As you state, it is *not* possible to use anything more than a basic
website without JS, however it *is* realistic and reasonable to *limit*
the cross-site JS code that is only there for the use of other third
parties.

Lee



Re: Seagate ST3250310AS not recognized

2014-03-26 Thread L. V. Lammert
On Wed, 26 Mar 2014, Charlie Farinella wrote:

 I'm trying to install OpenBSD 5.4 on a Dell Vostro 400, it's several
 years old but not ancient.  4GB RAM, 250GB Seagate ST3250310AS hard
 drive.  The installation goes normally until it tries to find the hard
 drive and then tells me no hard drive is available.

Assuming it is recognized in the machine BIOS, .. you mmight have to
install a DOS partition table first - it probably still has an ESX
partition table, even after wiping.

Lee



Re: Seagate ST3250310AS not recognized

2014-03-26 Thread L. V. Lammert
On Wed, 26 Mar 2014, Shawn K. Quinn wrote:

 On OpenBSD the drive itself should show up in the installer regardless
 of whatever garbage is in the partition table. For a Windows install,
 your advice would be spot-on, but OpenBSD's installer is much more
 intelligent than anything that came out of Redmond, WA, US.

I would have thought so, but that is the only explanation that makes
sense. Anyone ever built on an ESX drive?

Lee



SpamAssassin Consult

2014-03-24 Thread L V Lammert
We have a mailserver that will not post email, and it appears that
SpamAssassin is not running [via Mailscanner]. Load isn't the problem,
something apparently changed this evening.

Looking for someone that can take a look [paid gig] now, .. if possible.
[Not a current system.]

Thanks!

Lee



Re: Missing A DNS record for openbsd.org ?

2014-02-28 Thread L. V. Lammert
On Fri, 28 Feb 2014, nobody wrote:

 umm, but isn't a CNAME or redirect or whatever should be needed? So if
 people type in the browser:

 openbsd.org

 they can be redirected to www.openbsd.org ?

 Thanks.

It SHOULD be that way, .. nobody that cares about security wants maybe if
something do this type of situations anywhere in the system, even in DLS.

Forcing www is adhering to good practices, and that's what OpenBSD is
about, IMHO.

Lee



Re: Upgrade path from 4.1?

2014-02-06 Thread L. V. Lammert
On Thu, 6 Feb 2014, davy wrote:

 Can I do a 4.1 - 5.4 in one shot?

Nope. One version at a time, .. though the better solution would be to do
a fresh install and copy data.

Lee



Re: Upgrade path from 4.1?

2014-02-06 Thread L. V. Lammert
On Thu, 6 Feb 2014, Kenneth Westerback wrote:

 Shudder. NO! :-)

 Aside from the very valid hardware concerns Nick mentioned, there are
 too many flag days of various kinds strewn along that path. Skip them
 all, start fresh with a -current
 snapshot.

Much better to start with new CD set, eh?

Lee



Re: Upgrade path from 4.1?

2014-02-06 Thread L. V. Lammert
On Thu, 6 Feb 2014, Kenneth Westerback wrote:

 Well, that would imply waiting for May 1 or whenever the physical CD's
 are available.

5.4 is available now, ..

 Starting now with a -current snapshot means getting everything working
 in the meantime and then ordering the new CD's and installing the

Far better to recommend CD installs, .. -current or -release may require a
tad more expertise to manage.

Lee



Re: Upgrade path from 4.1?

2014-02-06 Thread L. V. Lammert
On Thu, 6 Feb 2014, Chris Cappuccio wrote:

 I don't see why everyone recommends install one version at a time.

It's not a recommendation, it is reality. Each upgrade is based on the
previuos version - skipping versions is not supported.

Lee



Re: Upgrade path from 4.1?

2014-02-06 Thread L. V. Lammert
On Thu, 6 Feb 2014, Chris Cappuccio wrote:

 What I'm recommending isn't really an upgrade so much as using the old
 box to bootstrap a newest snapshot. As long as the bootblocks are still
 compatible, you can do it.

Why? A clean build on a new machine would be the best solution in that
case, .. then reconfigure with data from the old box/disk.

Also, it is not good to recommend snapshots - most users do not need that
level of complexity. CDs are a much better alternative, and give something
back to the project. You DO purchase more than one set of CDs for every
release, right?

Lee



Re: Upgrade path from 4.1?

2014-02-06 Thread L. V. Lammert
On Thu, 6 Feb 2014, Marc Espie wrote:

 Nah, if you know what you're doing you can skip lots of versions.
 It's not recommmended because if you fuck up, well, you're on your own.

The OP gave no such indication, .. hence my recommendation for
step-by-step or new machine.

 Developers will laugh at you and not help (even more so than usual, I mean)

AND create a lot of troll fodder, .. best avoided.

Lee



ARM Emulators

2014-01-18 Thread L. V. Lammert
After building an ARM VM to build packages for a project, I was very
surprised at the 256MB limitation [of the QEMU version], when hardware was
at least 512MB.

As folks are mentioning using one for a kernel compile (good idea or not),
there must be a VM version with decent specs?

Don't suppose someone would send me info on what WOULD be a good ARM VM
usable for compiling?

Thanks!

Lee



Re: Virtualize or bare-metal?

2014-01-13 Thread L. V. Lammert
On Mon, 13 Jan 2014, Christopher Ahrens wrote:

 I have recently inherited a set of high-spec machines that I intend to
 use for OpenBSD.  I am planning on using these machines for DNS, HTTP,
 mail, LDAP, netboot, build system for following -stable, etc.  So my
 question is, is it recommended to load all these
 services on a single instance OpenBSD running on bare metal or to
 virtualize and use much smaller OpenBSD virtual machines?

It would be much better to use a set of small machines (we use older
Compaq 386s  486s) for most of those servers, .. save the 'big iron' for
a web server where it might be beneficial.

Virtualization does not make sense for core services - higher chance of a
single failure taking down multiple services and security can be a
problem.

Lee



Re: NFS/Samba Alternative

2013-12-15 Thread L. V. Lammert
On Sat, 14 Dec 2013, Byron Klippert wrote:

 Hello,

 I'm looking at options for sharing machine resources
 (drives/directories/files) over LAN between OpenBSD server and Windows7
 clients.

sftp//sshfs using winscp works great from Windows, . GUI based, secure,
Explorer interface (or MC).

cmbclient works from the Unix side, though I'm not sure what hoops you
may have authenticating to a domain.

Lee



Re: Help troubleshooting performance problem

2013-11-30 Thread L. V. Lammert
On Sat, 30 Nov 2013, John Hynes wrote:

 I'm having some trouble figuring out what is causing a systemic performance
 issue.  By systemic I mean that running even seemingly trivial things
 (i.e. 'ls' on a directory with only a few files in it) is accompanied by a
 substantial delay before any response, say, of 15-30 seconds.  Not *every*
 single time, but pretty frequently.  Looking at top, load average is higher
 than expected on a largely idle web  smtp server, usually between .7 and
 1.6.  This is a dual-core opteron box (Sun Fire X2100) with 8GB RAM. (dmesg
 below).

Check messages  dmesg for any HW problems - this sounds like you have bad
disk sectors that are getting hit and timing out.

Lee



Re: mailx : mime handling?

2013-09-25 Thread L. V. Lammert
On Wed, 25 Sep 2013, Eric Johnson wrote:

 pine/alpine

2nd, 3rd. pine/alpine is much more flexible that Mutt, as it can handle
mutliple 'personalities'.

Lee



Re: SSHD setup

2013-08-10 Thread L. V. Lammert
On Sat, 10 Aug 2013, Lance Ferrer wrote:

 Thank you for the help, I think I hadn't done a reboot. I saw sshd
 starting during the boot I believe.

 What else would I need to do to be able to use my MacBook to ssh to the
 openbsd system? My domain is hostname.my.domain. On my MacBook I type
 ssh hostname.my.domain and after awhile it returns operation timed
 out.

That would probably be a DNS issue; check the IP of the OBSD box

ifconfig -a to see all interfaces
ifconfig active interface to see just the active one

If you ssh to that IP from your MacBook you will not need a DNS or hosts
entry.

Lee



Re: Sturdy and secure mail server

2013-05-02 Thread L. V. Lammert
On Thu, 2 May 2013, Matthew Weigel wrote:

 On 2013-05-02 16:56, Chris Cappuccio wrote:

  You are going to spend a bit of time in the MTA and Dovecot docs to
  figure out some of these things. Now, if you use fdm, you really
  don't need an MTA at all. fdm would have to deliver to the dovecot
  LDA or use its own LDA in the same directory structure that
  Dovecot retrieves mail from...

 This is the important part: dovecot and postfix or opensmtpd can do what
 you need.  There are a ton of details to understand and get right, so
 reading the docs is really your best starting point.  Most of what
 you've described is a bog standard mail server with IMAP hosting, plus a
 mail client that knows about multiple mail accounts, plus an IMAP fetch
 (maybe?).

A better solution would be mailserv - OpenBSD based and it includes all of
the management tools for a mail server:

github.com/mailserv

The Rails manager app is way cool.

Lee



Re: Versioning file system?

2013-04-29 Thread L. V. Lammert
On Mon, 29 Apr 2013, [iso-8859-1] Zé Loff wrote:

 Not sure, but it sounds like you are looking for something like this:
 http://blog.interlinked.org/tutorials/rsync_time_machine.html

Much more useful than a time machine lookalike: rsnapshot

 http://www.rsnapshot.org/

No fancy gui (who needs it?), .. configurage for as may versions as you
like - hourly, daily, weekly, yearly, and keep each as long as you wish.

The key is using hardlinks on the target filesystem, so browse to any date
(e.g. daly.0) and you have a complete directory listing.

It's not CVS, but in some cases it is more usable.

Lee



Re: offline mail setup for road warrior

2013-03-09 Thread L. V. Lammert
On Sat, 9 Mar 2013, Jiri B wrote:

 I was recently looking for a way how to suck mails
 from mail proxy in DMZ to intranet mail server.

Postfix can work that way, but you might be better served using an IMAP
connection with a mail client first to downloaded headers  remove
cruft, *then* downloading.

Lee



Re: The ultimate OpenBSD email server

2012-09-06 Thread L. V. Lammert

At 08:38 AM 8/16/2012, Joel Carnat wrote:

Le 15 août 2012 à 16:16, L. V. Lammert a écrit :

This looked interesting so I had a look at it for a few hours.
My (2 cents) conclusions are:
- it has a pretty interface indeed ;
- it has a few configuration bugs (php modules are not enabled and it

expects

5.2, not 5.3) ;
- it is supposed to use sqlgrey but it seems it isn't linked to postfix ;
- why isn't it using spamd(8) ;
- it stores clear passwords ;
- roundcube and suhosin don't play well together ;
- it has to be installed with its own mysql db. no way to use external (if

not

using the console).

I have written a quick review on my WordPress instance.
Just PM for the URL if you wish to read more.


Hi Joel,

I would appreciate reading your review, .. we
have a number of Mailserv installations in
service, and I had planned on tweaking the
installation so we could use it internally once
the github version had stabilized.

Lee



Re: The ultimate OpenBSD email server

2012-08-15 Thread L. V. Lammert
On Wed, 15 Aug 2012, Mikkel Bang wrote:

 But with so many people recommending so many different tools, it gets hard
 to come to a conclusion. Looks like I'm finally arriving at this though:
 postfix (postfix-anti-UCE.txt) + dspam - what do you guys think?

Take a look at mailserv, https://github.com/mailserv. The admin interface
is nice, and all components are integrated.

Lee



Re: Sendmail at home

2012-05-10 Thread L. V. Lammert

At 12:30 PM 5/10/2012, you wrote:

I want to setup sendmail so that I can send mail from my home network.

I have no experience with sendmail outside a corporate environment where
DNS makes everything happen automagically.

I have a Gmail account. Is sending via Gmail possible or sensible?

Any advice would be appreciated.


Google sendmail forward gmail and register your domain name with 
gmail. Your local sendmail instance will login and forward SMTP 
traffic via gmail, .. you can either IMAP from gmail or use the web 
interface. Free for small domains.


Lee 



Re: locate weirdness

2012-01-22 Thread L. V. Lammert
On Sun, 22 Jan 2012, Anonymous wrote:

 Whooever told him to man up was justified.

HUH?? WTF?? That's a CROCK!!

It's amuzing to watch the flames flying, however, there *ARE* some people
on the list that have an interest in solving problems.

It IS unfortunate, however, that the actual PROBLEM and RESOLUTION may be
hard to identify through all the noise.

Lee



Re: locate weirdness

2012-01-22 Thread L. V. Lammert
On Sun, 22 Jan 2012, Philip Guenther wrote:

 And yet you, L.V. Lammert, use the code, don't clearly explain what
 was failing on your system, and behave in exactly the way you rant
 about.

Now THAT's quite laughahble! The ONLY problem here is with all the IDIOTS
spouting CRAP with no interest whatsoever in solving the PROBLEM that was
expressed.

 For those that happen to google this thread trying to find the
 solution: upgrading *would* have fixed his system due to the various
 steps done during upgrades,

BZZZT! WRONG! If the system rebooted clean [which this one did], the
problem would not have been found during a normal upgrade.

Again, misdirection, tons of rheotiric deflecting the issues, and normal
behavior of many on this list DID totally obscure the problem. *BUT*
that's the way it works here.

Lee



Re: locate weirdness

2012-01-22 Thread L. V. Lammert
On Sun, 22 Jan 2012, Amit Kulkarni wrote:

 a recent system does a fsck -fp of each partition, so it would have
 fixed your problem.

Would 4.4? 4.5? I don't think so, .. if you recall, the system is 4.3 so a
normal upgrade (i.e. not a clean install) would not have fixed the
problem.

 you are very ungrateful, by insulting a person who helped you, for free.

Sorry, Insults beget Insults - that's the OBSD way, is it not?

If you would take a little less effort to divert the original question, we
would all have a much nicer experience.

Lee



Re: locate weirdness

2012-01-22 Thread L. V. Lammert
On Sun, 22 Jan 2012, Philip Guenther wrote:

snip the BS

There is no way of knowing if it would have found the problem, so why
continue with this drivel? Contrary to the lengthy diatribes here trying
to distract from the original problem an solution:

1) The problem with locate was traced to a bunch of session files;
2) The problem was fixed by cleaning them the hard way.

There is no way to know if an upgrade would have fixed the problem, as
upgrading is/was/would be just a distraction; it is not good practice to
try and obscure the problem, and I do not understand why some people here
like to expouse such practices.

Sure, there is no support for 4.3, but, then I did not ASK for support on
4.3 (to read the OP). Don't bother to try and dixtract from the original
problem - it juse makes it harder for those LOOKING for the problem and
solution to find it in all the noise.

Lee



Re: locate weirdness

2012-01-19 Thread L. V. Lammert
On Thu, 19 Jan 2012, Paul de Weerd wrote:

 With apologies to all, this will be my last reply on this thread.

Really? That WOULD be nice. Hopefully you will abide by your promise.

Lee



Re: locate weirdness

2012-01-18 Thread L. V. Lammert
It was truly a shame that so many people here prefer to start their 
flamethrowers rather than offer any sort of constructive information! 
In this case, THE PROBLEM HAS BEEN IDENTIFIED AND IT WOULD MOST 
LIKELY NOT HAVE BEEN FIXED WITH A NORMAL UPGRADE! !! !!! 


Before reading further, please REREAD the statement above.

As it turns out, there WERE some folks here that had excellent 
suggestions [privately], and that helped significantly in isolating 
the problem. Thanks to  who got me back on topic and reminded me 
of this possible issue, .. and  who suggested the simplest solution:


find / ! \( -fstype ffs -or -fstype ufs -or -fstype ext2fs \) -prune 
-or -path /tmp -prune -or -path /var/tmp -prune -or -path /usr/tmp 
-prune -or -print  /tmp/locate test


Running the find separately identified the file system problem, and 
it was easily fixed as a result.


Lee



Re: locate weirdness

2012-01-18 Thread L. V. Lammert
On Wed, 18 Jan 2012, Theo de Raadt wrote:

  On 2012 Jan 18 (Wed) at 10:15:34 -0600 (-0600), L. V. Lammert wrote:
  :Running the find separately identified the file system problem, and
  :it was easily fixed as a result.
 
  So, what was the actual problem?  Permissions?

 Idiot near the keyboard.

Guess it takes one to try and identify another!

Seriously, I have nothing but respect for the Dev team, .. which is why
the OP was has anyone ever seen. I did not EXPECT support from Dev's,
so, to some degree, your insistance on upgrading was totally OT and not
worth posting.

Someone may experience a similar problem in the future, .. and as was
mentioned, others have in the past. The solution posted may be of help in
such cases.

Lee



Re: locate weirdness

2012-01-18 Thread L. V. Lammert
On Wed, 18 Jan 2012, Peter Hessler wrote:

 On 2012 Jan 18 (Wed) at 10:15:34 -0600 (-0600), L. V. Lammert wrote:
 :Running the find separately identified the file system problem, and
 :it was easily fixed as a result.

 So, what was the actual problem?  Permissions?

No, a file system problem. In this case, cross-linked files from a Rails
application.

Lee



Re: locate weirdness

2012-01-18 Thread L. V. Lammert

At 03:59 PM 1/18/2012, you wrote:

Wait - so there's an issue that you have identified, with help from
members on this list ?  And you're refusing to divulge the exact
details that would probably help resolve the problem in future OpenBSD
releases ?


Of course, an exposition was to be expected, ... an off topic one 
that proves that you don't read what I posted!


If you check the rest of the thread, you will see that I did post the 
exact cause; more details I will not provide as what's there is 
sufficient to describe the problem and any *more* detail would just 
be flame fodder.



That's a great thank you to all those people that helped you, Lee,
especially the ones you don't mention by name here below.  Just great.


Well, if you DO want credit, thanks for the wisdom hidden after the 
exegis! (I do not name names without permission, *especially* on this list.)



Good that you have at least taken the time and effort to make us
reread your own little flame (in all caps, because that helps so much
to bring the message across).


Confirmed - thanks!

Lee



Re: locate weirdness

2012-01-14 Thread L. V. Lammert
On Sat, 14 Jan 2012, Philip Guenther wrote:

 Any progress?  I see plenty of replies to the people that you *don't*
 think are helping you but no reply to my question about what user you
 think locate.updatedb runs as, something which does factor into being
 able to solve this...

The answer was already posted, .. perhaps you missed it?

Lee



Re: locate weirdness

2012-01-13 Thread L. V. Lammert
On Thu, 12 Jan 2012, Kevin Chadwick wrote:

 I'm surprised you've had so much help.

You shouldn't be, .. there *ARE* a few decent folks here on the list.

 Personally and If I had time I'd want to find out the problem but I'd be
 wiping and reinstalling from scratch anyway, especially with an unknown
 cause.

So, which is it? The attitude 'an upgrade will fix everything' is really
pretty dumb [though the core folks are certainly justfied as the problem
is most like not an issue for ongoing development, but that wasn't the
original question, was it?].

If something isn't working properly, throwing it away is ***NOT*** the
best solution! Would you take your car to the junkyard just because you
have a dome light that isn't working?

*Especially* in this case since locate is a standard utility with a shell
script that has not changed between 4.3  4.9, and I expect it hasn't for
5.0 either. If the system utilities have not changed, then the problem
must be elsewhere; blowing away a system just because you can't find the
problem is just plain stupid.

Thanks again to those that actually read the original question, .. I am
continuing to try and resolve the issue.

Lee



Re: locate weirdness

2012-01-12 Thread L. V. Lammert

At 05:59 AM 1/12/2012, you wrote:


Is this a new phenomenon? That is, did it use to work earlier and
something is now broken? In that case, what did you change? :-)


Yes, .. nothing.


(I'm not even gonna comment on the rest of this discussion. Ah, yet I
just did, didn't I? Oh well, in that case...


Of course! Can't resist g!


I feel it would have been prudent of you not to insult this community
when denied help because of *your* own failure to play by the rules.


ExCUSE me? Who is insulting whom? I asked a simple question 
[forgetting for a moment the propensities of this list], and was 
totally flamed for trying to solve a problem. We happily participate 
in the user community, as you, because OBSD is a quality product 
maintained by good folks that value technology; the fact that USERS 
like to crap on OTHER users is exactly why many people just turn off 
and tune out.


Recommendations to upgrade are total BS - the system is 4.3 for 
reasons which I will not share with the list because they are not 
germaine to any issue raised herein. Such comments (beyond Theo's 
first one, to which he is more than entltled) are pure Obsd MISC - 
off topic, provide no useful information, and only worth reading for 
entertainment value.



Not only is it counterproductive for your own problem's sake, all this
annoying bickering that flares up from time to time wears on everyones
patience, and I for one don't like to see this community wither away
because some individuals can't accept that there are a certain set of
rules by which to act in order to both get something out of the community
and to contribute to it.


ExCUSE me again? If you don't like flame wars, why do YOU participate?

Enough said - thanks to the folks that actually had some 
*CONSTRUCTIVE* suggestions, they are the 'wheat' that provide value 
on this list, as opposed to folks like yourself that are purely 'chaff'.


Lee 



locate weirdness

2012-01-11 Thread L. V. Lammert
Have a 4.3 server with a really weird problem: locate ONLY indexes 
one [user file] partition! IOW, no binaries are indexed, nor is /usr/, /var, ..


All filesystems are ffs;

I deleted /var/db/locate.db and recreated 
with  /usr/libexec/locate.updatedb more than once;


locate.rc is stock:

==
TMPDIR=/var/tmp
FCODES=/var/db/locate.database
SEARCHPATHS=/
PRUNEPATHS=/tmp /var/tmp /usr/tmp
FILESYSTEMS=ffs ufs ext2fs

[comments pruned]
=

The locate database seems to be normal:

Database: /var/db/locate.database
Compression: Front: 19.48%, Bigram: 65.90%, Total: 14.52%
Filenames: 218512, Characters: 14825215, Database size: 2153551
Bigram characters: 734303, Integers: 5440, 8-Bit characters: 3

=

Trying to troubleshoot a Perl module problem, and locate is not 
returning any hits except user files g!


Any pointers on what is 'intefering' with the process?

Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert

At 10:41 AM 1/11/2012, Theo de Raadt wrote:

 Have a 4.3 server [rest deleted]

There is a ton of documentation that makes it clear you are on your
own more than two releases back.


So, you're advocating incomplete information? Is that not a bigger problem?

Lee 



Re: locate weirdness

2012-01-11 Thread L. V. Lammert

At 01:04 PM 1/11/2012, Barry Grumbine wrote:

Bite the bullet, upgrade, life is better at 5.0


Sorry, but *UPGRADING* isn't the question - the question is why 
locate is not working properly. If nobody has ever seen such a 
problem, it would be quite more forthright to just admit that than 
spout the normal crap this list promulgates. But, then, I should have 
expected multiple replies that are off topic, of no help, and not 
worth the time to read. Sorry, I had momentarily forgotten the 
definition of OBSD Misc - my bad.


If nobody can answer the question, that's is not a problem, just say so!

Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert

At 01:30 PM 1/11/2012, Jeremy O'Brien wrote:


4.3 was released May 1, 2008. That's almost 4 years old software. What
are you expecting here? Someone to check out the code from that
version and deeply inspect what may be causing your problem, that is
more than likely already fixed in a later version?


Another typical reply - the question was has anyone ever seen 
anything like this, .. or, perhaps, what could be causing it. No 
need for the off-topic diatribes - a simple no would more than suffice.


Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert
On Wed, 11 Jan 2012, Marian Hettwer wrote:

 Hi,


 Am 11.01.12 20:17, schrieb L. V. Lammert:
  At 01:04 PM 1/11/2012, Barry Grumbine wrote:
  Bite the bullet, upgrade, life is better at 5.0
 
  Sorry, but *UPGRADING* isn't the question - the question is why locate
  is not working properly.

 No. You were advised to upgrade, since 4.3 is not supported anymore.
 Heck, probably nobody can even remember whether something was odd with
 locate in 4.3.
 Upgrade to a supported release and if you still face problems, come back
 to the list.

 Try to look from a different angle here.
 Say, you would have an old Debian Sarge release (years old) and you
 would approach a debian mailing list with something is weird with
 locate, pretty sure you would get a lot of advises to upgrade first,
 test then, and if problem persists, come back.

 All good and jolly!

 ./Marian

Hope you got off on the bs, .. as usual, offtopic, nothing useful, not
worth readying. Quite repetitive of the other BS, actually.

Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert
On Wed, 11 Jan 2012, Philip Guenther wrote:

 Also, in order to help others when they encounter a similar issue,
 please be sure to post what the problem and/or solution were once you
 figure them out.

 Philip Guenther

Amen! At least there's a chance it would turn up in the search engines.

Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert
On Wed, 11 Jan 2012, Philip Guenther wrote:

 Lesson #1: examine the anomalous data for clues.

 So, you're saying that
 locate /usr | grep ^/usr | head

 returns nothing but

Yep! As does locate /usr

 locate /home | grep ^/home | head

 returns something?  (/home being a stand-in for whatever your unsaid
 [user file] partition is)

 Perhaps you should investigate how those two directories differ?

That was the original question - both are ffs, both are rw, the only
difference between then that /home is nosuid, however that does not
affect locate on 3.3, 4.9, or 5.0 (just tested).

TFTR!

Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert
On Wed, 11 Jan 2012, Philip Guenther wrote:

 On Wed, Jan 11, 2012 at 3:02 PM, Marian Hettwer m...@kernel32.de wrote:
 ...
  ([foobar@bistromath] ~)$ time sudo /usr/libexec/locate.updatedb
  Password:

 Ah, but that's *not* how locate.updatedb is invoked by the cronjob!
 There's a reason I called out the need to mimic that when trying to
 replicate the problem while walking through locate.updatedb
 manually...

Agreed, .. but if locate.update does NOT run as root, that would seem to
indicate some problem other than permissions.

BTW - Looked at a couple of other possiblities, .. mysql had a lot of
space in log files so I freed up most of them, no change; the other
possibility could be that of a memory problem, but I have no knowledge of
'bigmem' and how that works.

Lee



Re: locate weirdness

2012-01-11 Thread L. V. Lammert
On Wed, 11 Jan 2012, Philip Guenther wrote:

  Agreed, .. but if locate.update does NOT run as root, that would seem to
  indicate some problem other than permissions.

 If you're saying what I think you're saying, then I disagree and think
 your logic is backwards.
 What user do you think locate.updatedb is run as?

If it does not run as root, then it isn't a permission issue as running as
root provides all required permissions, eh?

I have never seen locate.updatedb fail when run as root (3.0 to 5.0,
actually), .. but, then, it isn't exactly 'failing', it just isn't
indexing anything except /home.

The only other possible hypothesis, is that it is running out of memory;
one would expect some sort of error to be returned in that case and a
blank database as a result, not one partially populated.

Lee



p5 mysql

2012-01-09 Thread L. V. Lammert
Trying to get Perl MySQL working on an older production server, 
..  MySQL is running fine for php.


Installed p5-DBD-mysql-4.005, .. however it DNW. Some of the cpan 
notes indicate a configuration step is to be executed after the 
installation process?


Any pointers would be appreciated.

Lee



milter-greylist / postfix

2011-12-29 Thread L. V. Lammert
One of our mailservers (Obsd 4.8, Postfix 2.6.5, milter-greylist 4.2.5)
decided to stop passing incoming email this AM, .. milter-greylist is
giving all incoming mail a 451, even though the souce IP is listed in the
greylist database.

Might there be a way to isolate the exact issue? It's been working fine
for a couple of years now, so I hate to start mucking with things if there
is a way to actually isolate and fix the problem.

TIA,

Lee



Re: create a backup of an online server

2011-12-28 Thread L. V. Lammert
On Wed, 28 Dec 2011, Wesley M. wrote:

 Hi,
 I want to backup our mailserver(4.7) in production.
 I read :
 http://www.openbsd.org/faq/faq10.html#DupFS

Much simpler to:

 Do a mysqldump and direct to a known backup location
 Use rsnapshot to backup all of your data (including the email system,
home, and the mysqlbackup)

mysqldump will provide a 'known state' of the database, which will make a
restore possible; backing up files will only work if you shut down mysql
during the backup process - something not realistic for a production
server.

Lee



Re: What generates the OpenBSD page?

2011-12-10 Thread L. V. Lammert
On Sat, 10 Dec 2011, Eric Furman wrote:

 The only reason I haven't added you to my kill file is your
 questions and responses are sooo idiotically moronic that
 you are hilarious! You are so fucking stupid you are falling
 down hilarious. What makes it even more funny is how smart
 you think you are! LMFAO!
 God, if I had a nickle for every fucking retard like you
 I've met that thought that they were a genius
 Oh yea, I sent this to the list also to humiliate you.
 Please keep posting though, you really crack me up.

Thanks for the post - it is MUCH more entertaining to read such drivel
than the original quesiton.



Re: USB mouse

2011-10-26 Thread L. V. Lammert
On Wed, 26 Oct 2011, Zantgo wrote:

 How I can run USB mouse?

 Zantgo

Fully supported in SuSE, ..



Re: Are there any virtualization solutions for OpenBSD? (!important: no package from ports!)

2011-09-19 Thread L. V. Lammert
On Tue, 20 Sep 2011, Joel Wiramu Pauling wrote:

 If you are Going to use linux as your dom0 I STRONGLY recommend against
 virtual box. Vb is the retarded stillborn twin of kvm. Kvm is twice as fast
 in mainline and not controlled by oracle

For production use, Xen and orchestrate seems to be getting pretty good
reviews, .. the only advantage to VirtualBox is phpVirtualBox.

Lee



Re: Apache problems

2011-09-18 Thread L. V. Lammert
On Sun, 18 Sep 2011, Tomas Bodzar wrote:

  *Something* seems to be breaking, causing Apache to 'think' it's out of
  resources.

 Eg. for amd64 limit of ~4000 processes was resolved only before couple
 of months/weeks (not sure about correct time). A LOT of improvements
 from 4.3 times regarding performance and speed of system so you will
 be better to try upgrade first and see if problems are still in place.

Hi Thomas,

TFTR, but you missed the original premise - the system has been running
for many years with MORE children authorized, and no resource limits have
*changed*, so I don't see how it can be a resource issue.

Something is borking Apache and causing it to use UP all resources in an
'unauthorized' manner, or *think* they have all bee used.

Lee



Re: Apache problems

2011-09-18 Thread L. V. Lammert
On Sun, 18 Sep 2011, Denis Fondras wrote:

 Could this be linked to some Apache Killer ?

That would make sense, is/was there any way to identify vectors of the
Apache attacks?

Lee



Re: Apache problems

2011-09-18 Thread L. V. Lammert
On Sun, 18 Sep 2011, Amit Kulkarni wrote:

 Recently there was a security issue with Apache. It was based on a
 perl script, search google. Maybe you are experiencing traffic and the
 realted problems because of that.

Is there any way to find out if the version in 4.3 was susceptable to the
attack?

Lee



Apache problems

2011-09-17 Thread L. V. Lammert
We have an older server (4.3) that is getting cranky - two or three times
a week Apache just 'stops', and the only issue I can find is in the common
error log (i.e. not one of the VHs), which shows unable to fork:

[error] (35)Resource temporarily unavailable: fork: Unable to fork new process

It *may* be related to cronolog, as it seems to happen when one of the VHs
looses track of it's log connection.

Has anyone experienced a random problem like this? Any thought on how to
isolate the problem?

Lee



Re: Apache problems

2011-09-17 Thread L. V. Lammert
On Sun, 18 Sep 2011, Jeremie Courreges-Anglas wrote:

  [error] (35)Resource temporarily unavailable: fork: Unable to fork new 
  process

 Isn't running 4.3 kinda cranky?

Only in the past six months - pretty much bulletproof for many years.

 $SEARCH_ENGINE $your_error_message

 gives, for example, this result:
 http://www.mail-archive.com/misc@openbsd.org/msg36388.html

Unfortunatley, that isn't the issue. It has run fine with max_clients set
at 150; when this started happening, I ran it down to 64.

 All the others results lead to the same conclusion: your httpd process has
 reached its resources limits. Either your problem is due to the use of
 sudo apachectl (use /etc/rc.d/httpd), or you'll have to give httpd more room,
 by tweaking login.conf.

It isn't a resource problem, however, ..

:datasize=infinity:\
:maxproc=infinity:\
:openfiles-cur=128:\
:stacksize-cur=8M:\

*Something* seems to be breaking, causing Apache to 'think' it's out of
resources.

Lee



Anyterm or ??

2011-09-08 Thread L. V. Lammert
Like to setup an ssh client behind an SSL connection, .. is there
anything like anyterm available?

Lee



Re: build from source vs. rc.d files

2011-07-25 Thread L. V. Lammert
On Mon, 25 Jul 2011, Owain Ainsworth wrote:

 man 8 sysmerge

pkg_add mc is another good solution.

Lee



Re: Control of OpenBSD through a web interface

2011-06-15 Thread L. V. Lammert
On Wed, 15 Jun 2011, [ISO-8859-1] Jean-Frangois SIMON wrote:

 Hi,

 I have a remote controlled machine which I manage by ssh and yet I'm in the
 process of making up a small web page through which basic commands can be
 passed.

 I have no clear idea regarding how to design this, in the first place I
 thought about a cgi script written in C which I did manage to have it say
 hello world at the present time, but not yet much more.

 There's not yet clear clues regarding how to make this peace of web
 interface talk to the system and I would like to make it clean by means of
 elegant way to deal with web page - system communication.

 Any clue regarding the way it could be ?

 Thanks,

 Jean-Frangois

If you really need a web-GUI, Why not use webmin?

Lee



Re: fdisk(8) missing from sparc64 install48.iso?

2011-03-10 Thread L. V. Lammert
On Thu, 10 Mar 2011, Kent Watsen wrote:

 Welcome to the OpenBSD/sparc64 4.8 installation program.
 (I)nstall, (U)pgrade or (S)hell? S

 # fdisk
 sh: fdisk: not found

Ahh, ... why would you want to do put DOS MBR on a Sparc system???

Lee



SMP Advice

2011-02-26 Thread L. V. Lammert
Can't seem to find the SMP HCL results posted anywhere - does anyone have
a recommendation?

Lee



Re: Computer stops responding (freezes up) during uncorrectable data error

2011-01-27 Thread L. V. Lammert
On Thu, 27 Jan 2011, Gordon Ferris wrote:

 We waited too long to replace the failed drive, so there were errors on
 both drives in the mirror, so the data was not completely restored.
 Backups were not as recent as we would have liked.  Since the drive
 didn't completely fail, it seemed worth trying to retrieve some data
 where possible from it.

dd_rescue will give you the best chance of recovering bad sectors.

Lee



GigE Chipset

2011-01-19 Thread L. V. Lammert
Looking for some low cost GigE NICs for a lab setup, .. as usual, however,
the chipset is not listed on the card description. Is anyone aware of the
chipset/compatibility for any of these?

NETGEAR GA311
Allied Telesis AT 2916T
Linksys EG1032

Thanks!

Lee



Re: opensmtpd with custom passwd file

2010-12-14 Thread L. V. Lammert
On Mon, 13 Dec 2010, Hugo Osvaldo Barrera wrote:

 Hi!
 I've been using smtpd on my server for some time now, and I want to host
 e-mail accounts for a couple of friends who've asked me to.

You might want to consider github.com/mailserv for multiple domain and/or
'mail only' users. Allard's Mailserver was recently open sourced. Nice
Ruby/Rails management interface, .. currently 4.8 and will track Release
going forward.

We have it installed at a number of locations.

Lee



Re: OT - gmail alternatives

2010-12-09 Thread L. V. Lammert
On Thu, 9 Dec 2010, James Hozier wrote:

 The only issue I have with running my own mail server is that I can
 receive e-mails, but for whatever reason I cannot send out e-mails. I'm
 assuming it's because mail servers are denying e-mails from my IP or
 something since I'm on a residential connection. It doesn't even reach
 the Spam box, just doesn't show up at all even though a test with telnet
 says the mail was successfully sent out.

Two things are probably occurring:

1) Many ISPs block outbound email on port 25 to prevent SPAM abuse.
2) You will not be able to send email directly to most email servers
because your server identify cannot be verified.

The best solution is to forward your SMTP traffic trough your ISP.

Lee



Re: OT - gmail alternatives

2010-12-09 Thread L. V. Lammert
On Thu, 9 Dec 2010, James Hozier wrote:

 I checked DNSBL and my IP seems OK for all of them. So it's just 3, and
 Verizon won't set DNS settings for me so unless I run my own DNS servers
 there's nothing I can do to resolve my IP address into my domain name
 instead of my ISP hostname? (Instead of @verizon.net hostname
 translation @mydomain.com)

Even IF you run your own DNS servers, you don't have access to setup the
reverse DNS. The only way to get reverse DNS is to purchase the service
from Verizon with a static IP.

The only way to run your own server with dymanic IP and have it validate
properly is to forward through Verizon's SMTP server that is authorized
for your location. [Or use Gmail or another public provider for your SMTP
traffic.]

Lee



Re: Donations

2010-12-05 Thread L. V. Lammert
On Sun, 5 Dec 2010, Randal L. Schwartz wrote:

  Theo == Theo de Raadt dera...@cvs.openbsd.org writes:

 Theo If you don't know why I am sending this mail.. you are reading US
 Theo managed news, and need to much much more informed

Assuming you're talking about PayPal freezing the WikeLeaks account,
Assange could only have been looking for publicity, as nobody but a total
idiot would use PayPal for such a political hot potato!

I agree totally that there are a lot of idiots running parts of the US
system, but at least they ARE predictable.

Lee



Re: Donations

2010-12-05 Thread L. V. Lammert
On Sun, 5 Dec 2010, Robert Bronsdon wrote:

 On Sun, 05 Dec 2010 21:41:13 -, L. V. Lammert l...@omnitec.net wrote:

  Assuming you're talking about PayPal freezing the WikeLeaks account,
  Assange could only have been looking for publicity, as nobody but a total
  idiot would use PayPal for such a political hot potato!

 You talk like Assange did something wrong. The right to free press is
 never wrong.

Didn't say he did anything *wrong* - I said that he must have planned it
for publicity. I would not accuse him of the other possibility, being too
dumb as to not anticipate such an action.

 Theo asking donations are not given to a company that arbitrarily decide
 if/when they wish to pass that money on, whether driven by the wikileaks
 cause or not, is a sensible decision.

Have you ever tried to read the TOS? Any such organization with unlimited
legal resources can do whatever the wish - as long as it's not contrary to
the current legal winds, they will get away with it.

 I would not wish my donation to a project eated up by politics along its
 way.

Agree there - I'm not saying USE PayPal, just that he must have done it
for the publicity, as the other possibility does not say much for his
intelligence.

Lee



Re: Donations

2010-12-05 Thread L. V. Lammert
On Sun, 5 Dec 2010, Dmitrij D. Czarkoff wrote:

  On Sun, 5 Dec 2010, Randal L. Schwartz wrote:
  I agree totally that there are a lot of idiots running parts of the US
  system, but at least they ARE predictable.

 Being predictable is just not enough. Hardly You would enjoy predictibility of
 You being put to prison on suspection of possibility of You commiting some
 crime.

Actually, being predictable ALLOWS planning to avoid such problems!

Ever head of Don Quixote? THe moral of the storey - pick the battles you
have a chance of winning and avoid the rest.

Lee



Re: Donations

2010-12-05 Thread L. V. Lammert
On Sun, 5 Dec 2010, Theo de Raadt wrote:

  Ever head of Don Quixote? THe moral of the storey - pick the battles you
  have a chance of winning and avoid the rest.

 Such an American viewpoint.

It was intended to be common sense. I'll be the first to agree that some
of the companies here in the US don't operate honorably, but, then you
should know that in the first place and not complain so loudely when
something does happen to prove it.

 It didn't work out for Don Quixote either.

It does make a nice play, however.

Lee



Re: installation sets not found on CD

2010-11-30 Thread L. V. Lammert
On Tue, 30 Nov 2010, Joachim Schipper wrote:

 On Mon, Nov 29, 2010 at 06:52:38PM -0800, Scott Stanley wrote:
 
  Installer makes it all the way to installation set(s) location, then
  kernel says:
 
  ASC/ASCQ: ASC 0X20 ASCQ 0X00
  cd0(atapiscsi0:0:0): Check condition (error 0x70) on opcode 0x20
  SENSE KEY: Illegal Request
  ASC/ASCQ: ASC 0X20 ASCQ 0X00
 
If you're having problems with the CD drive, why not mount or copy the  CD
on another machine and install via ftp??

Lee



Re: Building a Practical Penetration Test Lab

2010-11-12 Thread L. V. Lammert

At 04:01 AM 11/12/2010, Kevin Chadwick wrote:


If you insist and I don't know about the latest version, then vmware is
likely much more reliable than virtualbox but still more problematic
than a true install. There is a blog on the virtual box site by theo
stating he can't believe any OS allows the problems virtualbox
introduces(d).


VirtualBox might have problems, but at least it produces a working 
install with a UI - VMWare seems to have so many variations that they 
forgot to include a USABLE one without purchasing the expensive 
management tools.


We did find out that VirtualBox must run on a hardware-capable 
platform [AMD-3 or better] to successfully build an OBSD image, however.


Lee



Re: 2-3 General Question

2010-09-22 Thread L. V. Lammert
On Wed, 22 Sep 2010, Stuart Henderson wrote:

 On 2010-09-22, LOL elvis4...@gmail.com wrote:
  Does openBSD have a tools that search packages ? The only way I found it's
  by installing ports tree but I think it's a bit stupid to have all the tree
  just to a search.

 pkg_add pkg_mgr


For *packages*, it's much simpler to create a pkg_find alias (originaly
from Matt Van Mater):

export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/`uname -a | cut -d  -f
3`/packages/`uname -a | cut -d  -f 5`/
alias pkg_find=echo ls | ftp -a $PKG_PATH | sed 's/.*\ //g' | grep -i 

If you have a local repository, just substitute in PKG_PATH.

Lee



Re: MTA choice

2010-08-13 Thread L. V. Lammert
On Fri, 13 Aug 2010 open...@e-solutions.re wrote:

 Hi,

 I want to install a mailserver.
 What is the easiest and the most secure solution ?
 OpenBSD comes with Sendmail. I seen a lot of people use Postfix instead
 Sendmail.
 Is there someone to advice me about the choice of the MTA ?

 Thank's.

For a basic mailserver, there's no reason to not use standard Senamdaill
To make it even simpler, install Webmin - the sendmail manager tool is
very useful.

Lee



Re: Mysql connection from within php

2010-06-01 Thread L. V. Lammert
On Tue, 1 Jun 2010, What you get is Not what you see wrote:

 Freshly installed on openbsd 4.6 mysql,php and php5-mysql packages.
 Done the configs. Now php and mysql works. But I couldnt make it
 connect to mysql from within php with such a command
 mysql_connect(localhost,user,pass)
 It used to give Cant connect to mysql through socket error till I
 change the command to
 mysql_connect(127.0.0.1,user,pass)
 I want to learn why?

Because the socket is in /var, .. and default apache chroot's to /var/www.
I believe there are tricks to make it work, but it's simpler to
just connect @127.0.0.1.

Lee



Re: OpenBSD 4.7 Released, May 19 2010

2010-05-19 Thread L. V. Lammert
On Wed, 19 May 2010, Bryan Irvine wrote:

 You sure?

 FTP Listing of /pub/OpenBSD/ at ftp.openbsd.org
 Parent Directory

Works fine here, .. you must have a problem with your /etc/hosts?

ftp://ftp.openbsd.org/pub/OpenBSD/4.7/

Lee



Re: Differences between www.openbsd.org and openbsd.org

2010-05-19 Thread L. V. Lammert
On Wed, 19 May 2010, Ted Unangst wrote:

 On Wed, May 19, 2010 at 4:54 PM, Bohdan Tashchuk btashc...@yahoo.com wrote:

  I suggest that there are many clueless people like me out there. The
 default behavior should be changed. opendbsd.org should redirect to
 www.openbsd.org, and the people who need to access the machine in Theo's
 basement should go to cvs.openbsd.org.

 Telling the people who access the machine in Theo's basement what they
 should do has never been particularly well received by those people.

OTOH, *directing* the muddled masses to HIS machine [even if by mistake]
would give pause, would it not? Doesn't seem like a good policy security
to me, ..

Lee



Re: OpenBSD 4.7 pkg_add error

2010-05-19 Thread L. V. Lammert
On Thu, 20 May 2010, Andreas Gerdd wrote:

 # PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/4.7/packages/i386/
 # pkg_add -vvi nano

 Nano installation stucked at 76%, did not move for a long time,
 then I terminated the process by CTRLC,

The main repository is getting hammered, .. try a 2nd or 3rd level mirror.

Lee



Re: crontab last day of the month

2010-04-06 Thread L. V. Lammert
On Tue, 6 Apr 2010, Antti Harri wrote:

 Hi all,

 I want to hijack this thread a little because it sounds like
 OP has similar problem to mine.

 I'm rotating logs with newsyslog and for example for web logs
 I keep 12 logs available (actually it looks like count=12 keeps 13
 files available but anyway that's not my problem..), rotated monthly so I
 have logs from present moment to one year back like this:

Instead of rotating logs, consider using cronolog - no restart of Apache
requierd.

It maintains a daemon for each virtual host, and automatically rolls files
over at the end of any defined period.

Lee



Re: Backup and monitoring

2010-03-24 Thread L. V. Lammert
On Wed, 24 Mar 2010, axl melkhov wrote:

 Hello Community
 I'm new to OpenBSD, I want to write a script for
 backup and monitoring changes
 all files on the disk.

2nd the recommendation for rsnapshot. Simple solution to many problems
(including backing up files with root privledges) that are tricky with
rsync, as the rsnapshot machine is logging into the machine you're backing
up.

 What do you think will be the most elegant solution
 for this problem?

rsnapshot will also keep as many versions as you configure, .. e.g. seven
days, four weeks, six months, ..

Lee



Re: Joomla - MySQL Problem: Could not connect to MySQL

2010-03-13 Thread L. V. Lammert
On Sat, 13 Mar 2010, Sunnz wrote:

 2010/3/12 Daniel Gracia Garallar danie...@electronicagracia.com:
  Not quite a solution, I think. What about if /var/www mounts in a different
  filesystem than /var?
 
  Hardlinks from chrooted environments don't seem to be a wise solution
  anyway... Just IMHO.
 

 In that case you could change the location mysqld itself uses to be
 inside the chroot.

 Or do you actually have a solution?

The solution is to use 127.0.0.1 for the connection, as stated previously.

Lee



Re: Joomla - MySQL Problem: Could not connect to MySQL

2010-03-08 Thread L. V. Lammert
On Mon, 8 Mar 2010, Jan wrote:

 Unable to connect to the database: Could not connect to MySQL

1) Create a simple phpinfo() page  check to see that your MySQL is
configured properly. Did you install php-mysql?

2)
 I'm also able open the DB using mysql -u root -p.

The only valid test is with the UID  PW that you created for Joomla - you
did create it, didn't you?

Lee



Re: How to create an installation image of OpenBSD for a USB stick?

2010-03-03 Thread L. V. Lammert
On Wed, 3 Mar 2010, Ron McDowell wrote:

 I have used UNetbootin http://unetbootin.sourceforge.net/ to build an
 OpenBSD USB stick image from the OpenBSD ISO image.  I don't remember
 the exact details, but it was pretty straightforward.  I built it on a
 friend's XP machine but looks like there's a Linux version too.

The Linux version works well - it will build bootable USB image from any
bootable ISO.

Lee



Re: OT, .. but has anyone seen a crontab editor

2010-02-21 Thread L. V. Lammert
On Sun, 21 Feb 2010, chefren wrote:

 Hehe, mentioning Amsterdam, you dare!  Seriously seeking trouble?

Moi? I didn't bring up the subject, ..

 p.s. Frantisek mentioned webmin,

Suggested earlier, .. and replied.

 Your OT, stands for I'm lazy and not so competent nor creative but willing
 to scream like a puppy on misc! for me.

No, you haven't been reading this thread, but I'm not going to review it -
it's a shame that some people here take more pleasure in creating
something to bitch about than either providing useful information.

Thanks anyway, .. BTW - There were neither screaming nor insults coming
from this direction.

Lee



Re: OT, .. but has anyone seen a crontab editor

2010-02-20 Thread L. V. Lammert
On Sat, 20 Feb 2010, Bret S. Lambert wrote:

 Your original post[1] said, and I cut'n'paste, that would be useable
 for basic sysadmin types. How the fuck can anyone comprehend a question
 you're incapable of asking correctly?

Certainly not you, .. who, amongst others, are far more interested in
spouting crap than providing any useful information. Sometimes it's
amazing how vocal some people are, .. I guess we're lucky that thare are a
good bunch of folks out there more interested in creating good code tham
spouting bs.

Lee



Re: OT, .. but has anyone seen a crontab editor

2010-02-20 Thread L. V. Lammert
On Sat, 20 Feb 2010, Tobias Ulmer wrote:

 In the time you've been spamming my inbox, every half-competent sysadmin
 could have learned ncurses(3) and write the perfect(tm) interface for
 his purpose.

Sorryk, my posts have been but a pittance in the BS spouted on this
thread, .. it's a shame that nobody bothered to reply with any useful
information.

 I'll just leave this here:
 http://doxfer.com/Webmin/ScheduledCommands#The_Scheduled_Commands_module

Guess you didn't read my original reply - but that's OK, I know it might
have been buried inthe crap.

Lee



  1   2   3   4   5   >