EuroBSCon: 18-20 Sept 2009

2009-05-07 Thread Marc Balmer

EuroBSDCon 2009 - Call for Papers
9th European BSD Conference
September 18 - 20, 2009
University of Cambridge, UK
http://2009.eurobsdcon.org/


Introduction

The European BSD Community is once again gathering for
EuroBSDcon. In 2009, we invite you to join us in Cambridge,
England for the latest in discussion, dissemination and
development of material from the many BSDs and their related
communities. This, the ninth European BSD conference is a
great opportunity to present new ideas to the community and
to meet some of the developers behind the different BSDs.

The two day conference program (September 19 - 20) will be
complemented by a tutorial day preceding the conference
(Sept 18).

Call for Papers



The Conference is inviting authors to submit innovative and
original papers not submitted to other European conferences on the
applications, architecture, implementation, performance and security of
BSD-derived operating systems. Investigations on economic aspects  
regarding the
operation of BSD systems are also welcome. Topics of interest for the  
EuroBSD

Conference 2009 include, but are not limited to:

application development and deployment
device drivers
security and safe coding practices
methods others should know about
system administration: techniques and tools of the trade
operational and economic aspects

Prospective authors of contributions to the technical program are
requested to submit an abstract via http://2009.eurobsdcon.org/ .
All submissions will be acknowledged. Presentations may last from
15 to 45 minutes - please indicate how long you would like.

This is the initial call for papers; a more focussed call based on
initial accepted submissions will follow in March 2009. We will
begin accepting talks early in 2009.


Authors of accepted submissions should provide a full paper for
publication in the conference proceedings and give permission to the
organizers to publish the results in the printed proceedings and on
the conference web site at www.eurobsdcon.org



Call for Tutorial Proposals



Selected tutorials on practical and problem-solving aspects of
BSD-derived operating systems will be offered on the day before the
Conference. The tutorials will be presented by speakers who
have wide experience in developing and administering the different
BSDs. Potential tutorial themes could include, but are not limited to:


Safe coding practices to provide secure solutions
System load testing and tuning
BSD in a large network
Solving sets of problems


If you are interested in presenting a tutorial, please contact the
organisers on eurobsd...@ukuug.org with what you're thinking. Initial
exploratory conversations are as welcome as full proposals.


Sponsorship Opportunities

We are seeking companies or institutions to sponsor various
elements of the conference in order to keep delegate fees as
low as possible. Sponsorship opportunities include: paying
for a speaker's travel or accommodation; providing bursaries
for delegates who cannot pay the conference fee themselves;
sponsoring catering, lunches, or the conference dinner.

All sponsors will be listed in the conference proceedings
and included on our website with a link back to your
site. You will also have the opportunity to provide
literature for distribution in delegate packs. Please
contact the UKUUG Secretariat (off...@ukuug.org) to discuss
the possibilities or see http://www.eurobsdcon.org


Important Dates

Final abstract deadline: May 31st 2009
Final tutorial deadline: May 31st
Final papers due:   August 1st
Tutorial day:   September 18
Conference: September 19 - 20


For more, see www.eurobsdcon.org



Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

2009-04-05 Thread Marc Balmer

Am 05.04.2009 um 19:44 schrieb ropers:


I'm looking for a colour laser printer that's so cheap that I can put
it on my birthday wish list and stand a chance of getting it (too
broke to buy one myself).

- The printer should work with OpenBSD without a hitch, and by that I
don't mean can sometimes be gotten to work by endlessly tweaking
CUPS, and I also don't mean can be gotten to work with compat_linux
and a binary blob,
- the printer should also be Linux-compatible (Windows-compatibility
not required),
- it should be a colour laser printer,
- replacement cartridges shouldn't be prohibitively expensive,
- and it should be as cheap as possible without totally sucking  
monkey balls.**


Oh, and I have an aversion to HP, so it would be better if it wasn't  
from them.


we use some quite cheap HP printers with OpenBSD.  Since you have an  
aversion

to HP, I did not look up the number.

They work nicely with LaTeX and cost in the $300-400 range I've been  
told.




All-in-one stuff and similar shenanigans aren't important at all. In
fact, I'd prefer it if the device didn't offer that, as BSD/Linux
support of such features tends to be spotty.
I looked at http://openbsd.org/i386.html#hardware and didn't see any
printers mentioned there, though I suppose they sort of fall under
RJ45 support or ulpt(4)
http://www.openbsd.org/cgi-bin/man.cgi?query=ulptsektion=4 and the
rest is lpd/CUPS? If a printer is supported by CUPS/Linux, will it
work on OpenBSD? Sorry for the daft questions, but a cursory Google
search didn't reveal much. I found this:
http://www.onlamp.com/pub/a/bsd/2004/07/08/FreeBSD_Basics.html and
this: http://openprinting.org/printer_list.cgi , but while it offers
good info on specific printers, entering requirements such as
blob-free and colour laser and then searching for a list of
suitable models doesn't seem to be possible there.

If anyone could recommend anything, or even warn me against buying
certain models, I'd be very grateful.

Thanks and regards,
--ropers

**My current inkjet printer takes well over a minute to print a single
page, so my definition of not totally sucking monkey balls is
actually quite modest.




Re: HowTo gpio with com-port?

2009-03-29 Thread Marc Balmer

Jan,

I want to get some signals from a electronic circuit at my serial- 
port com0. I don't know how to attach the pin's from the serial port  
with the gpioctl tool. I think it my hardware is not supported, but  
I don't know exactly. In my dmesg there is nothing like this:


gpio0 at gscpcib0: 64 pins

What could I do to get the signals from my circuit or to get support  
with gpio?


I am sorry, but doing this with the gpio framework is not possible.   
To make this
happen, it would require a small driver that wins over the standard  
serial port
driver during system auto configuration and that provides the modem  
control lines
as GPIO.  While I think such a driver would be fairly easy to write,  
it does not yet

exist to my best knowledge.

You can, however, open the serial port's tty device and query the  
modem control

signals.

- Marc Balmer

[...]



Re: PF and CLamAV Integration - how to do it?

2009-03-21 Thread Marc Balmer

Am 20.03.2009 um 12:15 schrieb jmc:


--- Marc Balmer [Thu, Mar 19, 2009 at 07:36:18PM +0100]: ---

Am 19.03.2009 um 15:27 schrieb Protocol Six Consulting:


Hi,

I was wondering if anyone here knows how to integrate the PF  
firewall

with ClamAV.


smtp-vilter, which is in ports, does that,


i started paying attention to this thread because i've been interested
in setting up clamav for sometime. i noticed that there's a
clamav-milter(8) that gets installed as part of the clamav package.

is the general consensus of those in the know to use smtp-vilter  
instead

of clamav-milter for these purposes?



Well, I am biased (I wrote smtp-vilter).  I wrote it quite some time ago
because clamav-milter's quality was really bad.  And I needed
LDAP and PF integration.  smtp-vilter was written with OpenBSD in
mind.



Re: PF and CLamAV Integration - how to do it?

2009-03-19 Thread Marc Balmer

Am 19.03.2009 um 15:27 schrieb Protocol Six Consulting:


Hi,

I was wondering if anyone here knows how to integrate the PF  
firewall with ClamAV.


smtp-vilter, which is in ports, does that,



I am planning on putting into production an OpenBSD firewall and  
would like to do virus scanning at the network perimeter.
I am definitely interested in scanning email traffic, but also  
possibly Web and IRC (and any other traffic types that makes sense)  
for a group of 25 people.


Unfortunately I've not seen any real discussion or howtos for this  
type of integration.
I've also looked in the PF FAQ pages and in the archives of Openbsd- 
misc or Openbsd-PF.
Finally, the BookOfPF (which I like a lot!!) doesn't seem to touch  
on this topic either.


I suspect my mental picture of how PF and ClamAV work together may  
be flawed or incomplete.
I guess I'm assuming there is a way to have PF pass information  
directly to ClamAV, but perhaps some middle-ware glue is necessary.


Any pointers and/or info would be greatly appreciated by this newbie.


smtp-vilter can add virus senders to a pf table.



Thanks and best regards,

:-)

Sarah




Re: openbsd in virtualization

2009-03-18 Thread Marc Balmer

Am 18.03.2009 um 09:13 schrieb sonjaya:


Hi...

My boss ask how to move current obsd server to virtualiaztion ( such
as  openvz, vmare , etc ) .
anyone in here sucsess moving obsd to Environment  virtualization (
openvz , vmware  etc ) , may be want share to me ?
So obsd become guest OS  ?


I am running OpenBSD under VMware Fusion on Mac OS X and
on ESXi.  These virtual machines are used internally only, for
development, testing, package building.  No problems, so far.

Machines that are exposed to the internet run on real hardware,
for security reasons.  I don't trust the underlying virtualization  
software

to be secure/stable/good.



ps: i'm so sory to ask this because Efficiency  and reduce IT cost .
thank's


And, quite obviously, reduce stability and after all security.



Re: Using ldap everywhere ...

2009-03-05 Thread Marc Balmer

Am 05.03.2009 um 19:24 schrieb a. e.:

But It seems that serving ns zones over ldap is not possible on  
OpenBSD...

The
sdb-ldap backend is not in the OpenBSD ports...


You can add dlz-ldap backend to OpenBSD's bind.

All you need to do (assuming that you've got OpenBSD's sources in / 
usr/src

and bind-9.4.2-P2.tar.gz unpacked in your working directory):
1) cp -R bind-9.4.2-P2/contrib /usr/src/usr.sbin/bind/
2) cp bind-9.4.2-P2/configure /usr/src/usr.sbin/bind/
3) edit configure script and remove all *tests* from ac_config_files
4) add --with-dlz-ldap=yes to CONFIGURE_OPTS in Makefile.bsd- 
wrapper

5) rebuild bind

Best regards,
Piotr Sikora  pi...@sikora.nu 



Thank you !
I'll try this way. I'll come back to tell you how it is... ^^

Anyway I'm still looking for a documentation about mod_ldapvhost ...


There is none.  Sorry.



Regards
ae.

_
Dicouvrez toutes les possibilitis de communication avec vos proches
http://www.microsoft.com/windows/windowslive/default.aspx




Re: Using ldap everywhere ...

2009-03-04 Thread Marc Balmer

Am 04.03.2009 um 15:15 schrieb Alexander Hall:

Since you seem to get few responses to this, I'll give you my $.02  
here:


After years of using OpenBSD, I've come to the conclusion that  
OpenBSD is best served with as little fuzz as possible (using what's  
in the base system if at all possible). Of course you can install  
ISC bind if that helps and mod_ldapvhost too but I really fear all  
that will give you in the end is a frankenstein system that requires  
quite a struggle to keep up-to-date and patched etc.


Using a module in httpd does not frankensteinice your system.  modules  
are there to
extend the webserver.  and mod_ldapvhost is particularly stable and  
used on some
larger webserver, trust me, I know the developer... (though the module  
certainly has

some rough edges)



Asking for howto's (not even finding any from the googling you seem  
to have done) on how to setup this is to me a warning sign that  
things are going to be messy at best. Those you'll find, if any,  
will likely be quite outdated.


But what the heck - go ahead! Take one service at the time, and have  
fun trying. You'll definitely learn stuff on the way. If you succeed  
you can even write a howto for others in the same situation! :-)


/Alexander (who has never really used ldap, btw)

a. e. wrote:

Hi everybody,
I'm trying to set up a web/mail/dns/ftp/etc. ... using ldap  
everywhere...
But It seems that serving ns zones over ldap is not possible on  
OpenBSD... The

sdb-ldap backend is not in the OpenBSD ports...
For the Apache vhosts, i've found that module mod_ldapvhost. But  
it's almost

not documented...
I can manage easily the link between Postfix/ldap Ftp/ldap courrier/ 
ldap.
Do you have some advices, comments, links to provide for the setup  
of dns/ldap

 apache/ldap on OpenBSD ?...
I really don't want to do this on ubuntu...
Regards.
ae.
_
Tiliphonez gratuitement ` tous vos proches avec Windows Live  
Messenger  ! Tilichargez-le maintenant !

http://www.windowslive.fr/messenger/1.asp




Re: TNC Packet Radio for OpenBSD

2009-02-25 Thread Marc Balmer

Am 26.02.2009 um 00:27 schrieb ropers:


2009/2/25 Joseph C. Bender jcben...@bendorius.com:

Marc Balmer wrote:


I am using a TNC7multi.  http://nt-g.de/de/tnc7multi/tnc7multi.php5



The venerable KPC-3 from Kantronics is always a good choice as well.

http://www.kantronics.com/products/kpc3.html


Apologies if this is very naive and thoroughly uninformed (it is) and
possibly stupid, but seeing this on the above page --


Data Rate (radio port)   1200 bps (default); 300, 400, 600


-- do these TNCs offer the same data transmission speeds that people
used to get with early generation modems and acoustic couplers way
back when? So what are people using TNCs for, then? What data are you
actually exchanging this way? What are the modern-day practical
applications of this technology? You're probably not using this to
download install44.iso...


Yes.  The normal speed for packet radio over UHF/SHV is 1200 or 9600
bps, over HF usually 300 bps.

Heck, a very popular tranmission technique on HF, PSK31, uses 31 bps.

Maybe you should google a bit a see what TNCs are used for ;)



regards,
--ropers




Re: TNC Packet Radio for OpenBSD

2009-02-24 Thread Marc Balmer

Am 24.02.2009 um 16:23 schrieb Dan Colish:


I just got a radio for my car and it is capable to handling TNC
tranceiver traffic. So, now I'm on a search for a decent packet radio,
but it looks like the only ones I've found are Windows only. It not
as concerned with the software as I am with the HW being detected
correctly, although having both work with be nice. Any suggestions are
welcome.


A decent TNC uses a serial port or USB, I am using such a thingie
and it works nicely.

OpenBSD does not directly support AX.25.




Thanks
Dan
N2VQV



Marc
HB9SSB



Re: TNC Packet Radio for OpenBSD

2009-02-24 Thread Marc Balmer

Am 24.02.2009 um 19:41 schrieb Dan Colish:



On Tue, Feb 24, 2009 at 05:50:55PM +0100, Marc Balmer wrote:


Am 24.02.2009 um 16:23 schrieb Dan Colish:


I just got a radio for my car and it is capable to handling TNC
tranceiver traffic. So, now I'm on a search for a decent packet  
radio,

but it looks like the only ones I've found are Windows only. It not
as concerned with the software as I am with the HW being detected
correctly, although having both work with be nice. Any suggestions  
are

welcome.


A decent TNC uses a serial port or USB, I am using such a thingie
and it works nicely.

OpenBSD does not directly support AX.25.




Thanks
Dan
N2VQV



Marc
HB9SSB



Marc,

 Thanks for the tips. I've been checking out a varity of tncs that are
 available online. The choices seem endless. What particular model do
 you use?


I am using a TNC7multi.  http://nt-g.de/de/tnc7multi/tnc7multi.php5



Dan


0x49,
Marc



EuroBSDCon 2009, Cambridge, UK

2009-02-22 Thread Marc Balmer
  EuroBSDCon 2009 - Cambridge, UK
   18-20 September 2009

 The Berkeley Software Distribution (BSD) family of
 computer operating systems is derived from software
 developed at the University of California at Berkeley.
 The various family members (Dragonfly-, Free-, Net- and
 OpenBSD, among others) are extensively used both for
 embedded appliances and for large internet servers and
 have an excellent reputation for stability and state-of-the-
 art technology. BSD-derived software is a driving force
 for IT research and development and is well-received as
 a building block in commercial software due to its
 unique license scheme.

 The ninth European BSD conference is a great opportunity
 to present new ideas to the community and to meet some
 of the developers behind the different BSDs.

 The two day conference program (September 19 - 20) will
 be complemented by a tutorial day preceding the
 conference (Sept 18).

 Call for Papers

 The Conference is inviting authors to submit innovative
 and original papers not submitted to other European
 conferences on the applications, architecture,
 implementation, performance and security of BSD-derived
 operating systems. Investigations on economic aspects
 regarding the operation of BSD systems are also welcome.
 Topics of interest for the EuroBSD Conference 2009
 include, but are not limited to:

 - embedded application development and deployment
 - device drivers
 - security and safe coding practices
 - methods others should know about
 - system administration: techniques and tools of the trade
 - operational and economic aspects

 Prospective authors of contributions to the technical
 program are requested to submit an abstract by email to
 eurobsd...@ukuug.org All submissions will be
 acknowledged. Presentations may last from 15 to 45
 minutes - please indicate how long you would like.

 This is the initial call for papers; a more focussed
 call based on initial accepted submissions will
 follow in March 2009. We will begin accepting talks
 early in 2009.

 Authors of accepted submissions should provide a full
 paper for publication in the conference proceedings and
 give permission to the organizers to publish the
 results in the printed proceedings and on the
 conference web site.


 Call for Tutorial Proposals

 Selected tutorials on practical and problem-solving
 aspects of BSD-derived operating systems will be offered
 on the day before the Conference. The tutorials will be
 presented by speakers who have wide experience in
 developing and administering the different BSDs.
 Potential tutorial themes could include, but are not
 limited to:

 - Safe coding practices to provide secure solutions
 - System load testing and tuning
 - BSD in a large network
 - Solving sets of problems

 If you are interested in presenting a tutorial, please
 contact the organisers on eurobsd...@ukuug.org with what
 you're thinking. Initial exploratory conversations are
 as welcome as full proposals.


 Sponsorship Opportunities

 We are seeking companies or institutions to sponsor
 various elements of the conference in order to keep
 delegate fees as low as possible. Sponsorship
 opportunities include: paying for a speaker's travel or
 accommodation; providing bursaries for delegates who
 cannot pay the conference fee themselves; sponsoring
 catering, lunches, or the conference dinner.

 All sponsors will be listed in the conference
 proceedings and included on our website with a link back
 to your site. You will also have the opportunity to
 provide literature for distribution in delegate packs.
 Please contact the UKUUG Secretariat (off...@ukuug.org)
 to discuss the possibilities.


 Important Dates

 Final abstract deadline: May 31st 2009 Final
 tutorial deadline: May 31st Final papers due:
 August 1st Tutorial day: September 18 Conference:
 September 19 - 20



Re: usr.sbin/wake removal

2009-02-10 Thread Marc Balmer

Am 10.02.2009 um 23:59 schrieb Brynet:


Hey,

The removal of this utility is unfortunate, but not the end of the
world.. the ports database at openports.se didn't list net/wol but I
contacted them and they gratefully corrected it.

Still, having such functionality in the base system.. without
requiring devel/gettext.. would be nice. :-)

Could something like the following be considered? not as-is probably,
I'm not the best programmer on earth.. and maybe it should be part of
ping(1) instead?

Example: sudo ifconfig int wake 00:00:00:00:00:00

The code is respectfully copy  pasted from the old wake(8), written
by Marc Balmer/Eugene M. Kim.


wake was added to the tree for some reason.
it was then removed for some reason.

now we look at what is the best place for this
functionality.

I'd honestly prefer if we could close the wake
discussion for now.  we will eventually come
up with a solution.




-Brynet

[demime 1.01d removed an attachment of type application/octet-stream  
which had a name of ifconfig-wol.diff]




Re: Survey on the usage of IPv6

2009-01-30 Thread Marc Balmer
* Tom Van Looy wrote:
 Will (when) the results and the paper be published publicly?

yes.  after AsiaBSDCon (which is where we present the paper) it
will be publicly available.


 Claudio Jeker wrote:
 For an IPv6 related paper we are currently working on, Claudio and I are
 doing a small online survey on the use of IPv6 among OpenBSD developers
 and users.

 It would be nice if you could spare 10-15 minutes of your time and
 answer the questions.  Please do that also if you don't use IPv6,
 since that helps us evaluating how much it is used.

 You find the survey online at

 http://ilias.msys.ch/goto.php?target=svy_41client_id=ipv6

 and you start the survey by pressing the button on the top left.

 Many thanks,
 Marc  Claudio

-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: Trouble ticket system suggestions

2008-12-23 Thread Marc Balmer
* Toni Mueller wrote:
 Hi,
 
 On Tue, 23.12.2008 at 19:44:57 +0200, open...@bgone.net open...@bgone.net 
 wrote:
  I would like to get your suggestions and experience with some Trouble
  Ticket Systems on OpenBSD.
  It should be rather simple.
  Users should be able to sand notes to support and check status of it.
  Support should be able to answer the tickets and check old tickets from
  the same user, etc.
  No need of phone integration.
 
 this is still very sparse information about what you need. I suggest
 test-driving some systems and then deciding to use one.
 
 Ticket systems out there are quite different, according to their
 intended usage, so what might work for me, might not work for you.
 
 Some somewhat popular projects to look at should imho include Request
 Tracker, Trac, Roundup, and maybe OTRS.

for otrs I have a port.  we use it since years, it is nice.

 
 
 Kind regards,
 --Toni++
 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: Trouble ticket system suggestions

2008-12-23 Thread Marc Balmer
* Jason Dixon wrote:
 On Tue, Dec 23, 2008 at 08:23:16PM +0100, Marc Balmer wrote:
  * Toni Mueller wrote:
   Hi,
   
   On Tue, 23.12.2008 at 19:44:57 +0200, open...@bgone.net 
   open...@bgone.net wrote:
I would like to get your suggestions and experience with some Trouble
Ticket Systems on OpenBSD.
It should be rather simple.
Users should be able to sand notes to support and check status of it.
Support should be able to answer the tickets and check old tickets from
the same user, etc.
No need of phone integration.
   
   this is still very sparse information about what you need. I suggest
   test-driving some systems and then deciding to use one.
   
   Ticket systems out there are quite different, according to their
   intended usage, so what might work for me, might not work for you.
   
   Some somewhat popular projects to look at should imho include Request
   Tracker, Trac, Roundup, and maybe OTRS.
  
  for otrs I have a port.  we use it since years, it is nice.
 
 The application is quite usable.  The code is bad.  I had to make a
 number of customizations to it years ago for a NASA installation.  While
 it works fine and is user-friendly, it's really ugly Perl.

I did not notice, since I never look at any Perl code.  For me everything
in Perl is ugly ;)

-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: pppoe not reconnecting

2008-12-20 Thread Marc Balmer
* Christian Weisgerber wrote:
 Every few weeks...months, the PPPoE session for my ADSL line goes
 away (some time during the night) and is not reestablished.  The
 corresponding pppoe interface is down, state initial, a number
 of PADIs have been sent, but no further retries seem to be happening.
 When I become aware of the problem, I only need to do ifconfig
 pppoe0 up and a new session is established immediately.
 
 In this part of the world, PPPoE sessions for consumer ADSL lines
 are dropped after 24h, so there is a daily disconnect, but pppoe
 reconnects right away.  No problem there.  Other session drops
 happen from time to time and look suspiciously like scheduled
 maintenance work at the ISP.  When I've been around to witness this,
 pppoe has reconnected eventually.
 
 However, sometimes pppoe just seems get wedged and stop retrying.
 Does anybody else see this too?

I am using pppoe(4) on 14 different ADSL lines, with different
modems and different hardware, but all OpenBSD and I have never
seen this happen.  But them I am not sure if the ISPs drop the
connection at all, since all these use fix IP addresses.

 
 -- 
 Christian naddy Weisgerber  na...@mips.inka.de
 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: Soekris equivalent

2008-12-17 Thread Marc Balmer
* Christopher Sean Hilton wrote:
 Is anyone aware of an equivalent for the Soekris Net 5501-70. I'm  
 looking to prototype an OpenBSD border gateway that offers web proxy  
 capabilities through
 squid cache but squid is a bit of a memory hog and I'd like to have  
 something with a Gig of RAM. Power footprint is a consideration which is 
 why the Soekris is at the top of the list.

ALIX boards serve me well.  See www.pcengines.ch.


 -- Chris

 Chris Hilton   tildeChris -- http://myblog.vindaloo.com
 email -- chris/at/vindaloo/ 
 dot/com
 .~~.--.~ 
 ~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.
  I'm on the outside looking inside, What do I 
 see?
Much confusion, disillution, all around 
 me.
  -- Ian McDonald / Peter  
 Sinfield

-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: OT, .. but eCommerce?

2008-12-13 Thread Marc Balmer
* Marc Espie wrote:
 There are oodles of plugins for drupal for ecommerce sites.
 I have mostly not ported these because I don't have the usage for it, but
 it's generally very easy to do (put it under sites/all/modules, check
 that it works, package).
 
 I remember a framework called Hdndel based off catalyst (maybe without the
 umlaut)

It is not directly related, but we have a port for the Swiss Telekurs/Six
Card Solutions Saferpay Software wich allows for credit card transactions
over the internet.

Since saferpay is commercial, our port is not in the ports tree.  But
interested parties can always contact us.

 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: securelevel(7) and gpioctl(8)

2008-12-09 Thread Marc Balmer
* Lars D. Noodin wrote:
 On Mon, 8 Dec 2008, Marc Balmer wrote:
 NB:  not all arches have GPIO.

 Thanks. Ok.  I see now.  The online pages return a result only for items
 present in all architectures.

 The need for Securelevel 0 was mentioned.  Does that mean the device must
 operate in securelevel 0 in order to turn on and off one of the JP5 pins?
 Or just that they must be attached and then can be used for IO after
 switching to securelevel 1?

The latter is the case.


 Also, can a custom kernal be avoided?  One appears to be needed in this
 note:
   http://www.vnode.ch/reworking_gpio

A custom kernel is no longer needed.


 Regards,
 -Lars
 Lars Nooden

--
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel,
Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we
code.



Re: manpage for gpioctl(8) missing?

2008-12-08 Thread Marc Balmer
* Lars D. Noodin wrote:
 gpioctl(8) seems to be missing from the web version:
   http://www.openbsd.org/cgi-bin/man.cgi?query=gpioctl

No, it is not missing:

http://www.openbsd.org/cgi-bin/man.cgi?query=gpioctlapropos=0sektion=0manp
ath=OpenBSD+Currentarch=i386format=html

But it is not up-to date.

NB:  not all arches have GPIO.


 it is present in 4.4-current on i386 and 4.3 on i386

 Regards,
 -Lars
 Lars NoodC)n ([EMAIL PROTECTED])

--
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel,
Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we
code.



Re: 4.4 apachectl configtest segfaul

2008-12-06 Thread Marc Balmer
* Gabri Mate wrote:
 Dear List,
 
 I've upgraded 4.3 to 4.4 today. Apachectl configtest returns with Syntax
 OK but right after that it segfaults. I can't run gdb on the dump file
 because it says it can't recognize the file. Please give me some advice
 where to start because i'm totally noob on debugging. 

If your configuration file does not contain any secrets, can you please
mail it to me so that I can take a look at it?

Thanks,
Marc

 
 Thanks in advance!
 -- 
 Gabri Mate
 [EMAIL PROTECTED]
 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: 4.4 apachectl configtest segfaul

2008-12-06 Thread Marc Balmer
* Gabri Mat wrote:
 2008/12/6 Stuart Henderson [EMAIL PROTECTED]

  On 2008-12-05, Gabri Mate [EMAIL PROTECTED] wrote:
   Dear List,
  
   I've upgraded 4.3 to 4.4 today. Apachectl configtest returns with
Syntax
   OK but right after that it segfaults. I can't run gdb on the dump file
   because it says it can't recognize the file. Please give me some advice
   where to start because i'm totally noob on debugging.
  
   Thanks in advance!
 
  Did you upgrade your packages?
 
  Yes. Apache runs smoothyl. Just the configtest segfaults.

well, without more information it is impossible to help you...

dmesg, the configfile, the usual stuff


--
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel,
Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we
code.



Re: Latest Portable OpenNTPD?

2008-11-22 Thread Marc Balmer
* Anirban Sinha wrote:
 On Fri, Nov 21, 2008 at 04:36:36PM +0100, Henning Brauer wrote:
   * Anirban Sinha [EMAIL PROTECTED] [2008-11-21 04:33]:
On 2008-11-21, Don Hiatt [EMAIL PROTECTED] wrote:
 I was looking at http://openntpd.org/ for the latest Portable
 OpenBSD an saw that it is at 3.9p1 while the non-portable is
 at 4.3. A colleague of mine is tired of fighting with ntpd.org's
 ntpd server so I suggested OpenNTPD. Is there a newer version
 of the Portable OpenNTPD or is 3.9p1 the latest?
   
That's the latest portable version, but the OpenBSD one has
since been improved.
   
I am wondering if any work is currently underway to port the
 latest
OpenNTPD to other platforms? Looks like there has been lot of good
 work
in OpenNTPD since version 3.9. It would be really nice to have it
 for
other platforms as well.
  
   not as far as I am aware. which is a pity.
 
  Robert Nagy did a bunch of work pulling in much of the recent changes.
  I put up a snapshot[1] a while back with these, but there's been no
  release.
 
  There's more work to be done, and some of it is going to be nontrivial
  to port (eg sensors, adjtime(NULL, olddelta) returning the remaining
  offset) and I have been busy with other things and slacking in this
  department.
 
  [1] http://www.zip.com.au/~dtucker/openntpd/snapshot/
 
 
 Thanks a lot. This is very useful. Does your snapshot tarballs compile
 under, say Linux? I will try them nevertheless. Meanwhile it will be
 really nice to have a complete release of the portable version with all
 the latest changes pulled in. I have been digging into doing this for a
 while, but the sensor stuff is really turning out to be a good
 challenge.

The sensor framework will not help you a lot without the device drivers.
It's probably easier to switch your timeservers to OpenBSD than going
through the pain of porting this to Linux... In some areas we are just
better ;)

 
 Ani
 

-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: Ralink RT2860 based cards

2008-11-19 Thread Marc Balmer
* Chris Jones wrote:
 Hey all,
 
 I am in the market to buy a Ralink RT2860 based wifi card for my Soekris
 net4501. Before I go out an buy one I am curious if anyone has had good
 experience with the Asus WL-130N card. I will be running this in Host AP
 mode using WPA2-PSK.

I use these (you can buy them at different companies):

http://shop.msys.ch/product_info.php?products_id=48osCsid=0h1sq50c1ftgva5k1g0mpm7b32

They work as expected.

 
 Cheers,
 -Chris
 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: (open)smtpd, the mystery smtpd daemon

2008-11-10 Thread Marc Balmer
* Mathias Reitinger wrote:
 On 22:46 10 Nov 08, Jason Beaudoin wrote:
  oh.. is the stuffed puffy (seen in your photos) available for
  purchase? I threw out my stress-tux, but my speaker needs a
  replacement toy :P
 
 you can order the Pluffy from wim at
 
 http://www.kd85.com/notforsale.html

and here: http://shop.msys.ch/product_info.php?cPath=29products_id=43
(shipping cost valid in .ch only, all others please inquire)

 
 -- 
 Mathias Reitinger   [EMAIL PROTECTED]
 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: Apache 1.3 in base or 2.2.8 from ports ?

2008-11-08 Thread Marc Balmer
* Francisco Valladolid Hdez. wrote:
 Hi folks.
 
 I need a recomendation for using one or other web server for a shared web 
 hosting for a small company.
 
 Always prefer using Apache from base, whenever I watch that Apache 2 include 
 best performance compared to 1.3 (included in base), and best reverse proxy 
 for dynamic web sites.
 
 Which must be the best choice for web hosting company  having web 2.0, 
 mod_perl and rails app's ?

Keep in mind that the Webserver in base has seen a lot of security and other
improvements like chroot() by default etc.  It is not a stock 1.3 Apache,
it is only based on Apache 1.3.

Apache 2 in ports was only imported to make it possible to test certain
thinks.

If you care for security, go with the one in base.  Huge and highly loaded
websites are served with it.

 
 Regards.
 
 
 --- 
 
 ---
 ficovh - http://bsdguy.net
 In the beginning God created the heavens and the earth. Gen. 1:1
 
-- 
Marc Balmer, Micro Systems, Wiesendamm 2a, Postfach, CH-4019 Basel, Switzerland
http://www.msys.ch/ http://www.vnode.ch/   In God we trust, in C we code.



Re: current support for Asus Eee PC 4G

2008-10-05 Thread Marc Balmer
* Daniel Polak wrote:
 How well do the different Eee PC models currently work with OpenBSD?
 Any limitations?
 I'm especially interested in the Eee PC 4G as they are really cheap (a  
 little over 200 euro) now.

The integrated WLAN adapter does not work, other than that it is working
great.


 Daniel



Re: PCI Compliant Vulnerability Scanner

2008-10-03 Thread Marc Balmer
* Stuart VanZee wrote:
 Once again it is time for the quarterly security review
 required for my company to maintain PCI compliance.
 Unfortunately, It seems that the Nessus scanner that we
 had been using is no longer free.  Can anyone recommend
 a PCI compliant vulnerability scanner that I can use
 on OpenBSD.  It will need to be able to scan both OpenBSD
 and Windows boxen.
 
 Really, Nessus has worked so well for us in the past that
 I wouldn't be opposed to just buying it except for the
 fact that it went from free to $1200.  That really blows
 a huge hole in the budget of the small co I work for.
 
 For those USians who have to maintain PCI compliance,
 what are you guys using?

I am not American, but I use a PCI Bus for PCI compliance.
Helped me a lot and most cards work just fine.  And I scan
using pcidump, it scans PCI compliant, I guess.

 
 Stuart van Zee
 [EMAIL PROTECTED]



Re: Can't start Apache... MaxCPUPerChild is invalid??

2008-09-02 Thread Marc Balmer
* Sunnz wrote:
 Ok I am totally lost... googling MaxCPEPerChild gives no result,
 while MaxCPUPerChild gives lots of OpenBSD httpd.conf file with the
 exact same conf I have,
 http://kerneltrap.org/mailarchive/openbsd-misc/2008/6/16/2138454 where
 MaxCPUPerChild 0...
 

The httpd optionis MaxCPUPerChild.  If your httpd binary contains the
string MaxCPEPerChild, then data on the disk must have changed.  Maybe
your disk is failing?  Or something changed some date on the disk.

You config is ok, your httpd binary is not, whatever the cause for
this is.



Any users in Romania?

2008-08-26 Thread Marc Balmer
Do we have any OpenBSD users/hackers/afficionados in Romania?  If
so, please contact me off list...

- Marc



Re: [semi-OT] using IPv4 addresses in alternative formats (i.e. not dotted decimal notation)

2008-08-23 Thread Marc Balmer
* ropers wrote:
 Hiya,
 
 I only recently learned that when addressing an Internet server/host
 by IPv4 address, it is possible to not use the standard dotted decimal
 notation (abc.def.uvw.xyz) but instead use any of a number of
 alternative formats; for example it is possible to specify the IP
 address in all-decimal dword format, or as an octal or hexadecimal
 number, etc.

it actually took me by surprise.  I named my package build machines
4.2, 4.3, etc., for obvious reasons, but when I tried to ping them
'$ ping 4.2' I was really surprised about the smart-ass stupidity
someone fiddled into ping...

 
 If this is news to you, and if you have a bit of time to waste, you
 could read a bit more here:
 http://www.reddit.com/comments/6usfd/case_study_is_php_embarrasingly_slower_than_java/c04xgjf
 http://www.pc-help.org/obscure.htm
 
 Now, I was really surprised to learn of all of this, as this info is
 hardly ever mentioned everywhere, and it seems to me that even many
 fairly seasoned IT people aren't aware of these possibilities. E.g.
 the http://www.3com.com/other/pdfs/infra/corpinfo/en_US/501302.pdf
 that's linked from the OpenBSD FAQ also doesn't mention these
 alternative notations at all.
 
 So I wonder:
 
 Does anyone know whether these alternative notations
 (dword/octal/hexadecimal...) are officially *supposed* to work? Or is
 it more of an accident that they do? Are there any RFCs on this? (A
 cursory search didn't turn up anything that seemed appropriate.)
 Presumably it's a matter of the TCP/IP stack that they do work? But it
 seems not all tools appear to do support this; e.g. I couldn't find a
 way to look up 2172650943 with whois or host, but ping and ftp work
 fine, as does the traditional notation 129.128.5.191. Firefox however
 appears to work fine with dword/all-decimal IPv4 addresses, as does
 lynx. So I wonder what's expected behaviour here, and whether the
 tools that don't work with alternate notations should work? Also, does
 all of this have implications for pf.conf? A bit of googling told me
 that black hats sometimes try to use these alternate notations to get
 around restrictions.
 
 Thanks and regards,
 --ropers



Re: How to copy an entire directory to my home directory

2008-08-15 Thread Marc Balmer
* Pedro Martelletto wrote:
 On Thu, Aug 14, 2008 at 12:40:38PM -0700, Johan Beisser wrote:
  man cp(1)
 
 You're all apparently missing out on a great tool called GHome Mover
 (http://www.brookepeig.com/ghomemover/). I know the guy said he is
 logging in from remote, but it is definitely worth the effort having X
 installed on your server and tunneled through SSH just to use this
 absolutely revolutionary tool!

There is also a console version, so X is not strictly needed.

 
 -p.
 
-m.



Re: slapd hangs, was: Re: OpenLDAP and Berkeley DB 4.6

2008-08-05 Thread Marc Balmer
* Toni Mueller wrote:
 Hi,
 
 On Sun, 09.03.2008 at 16:31:27 +, Stuart Henderson [EMAIL PROTECTED] 
 wrote:
  You have several recommended options:
  
  - dump your database, uninstall, install the unFLAVORed version
  and restore your database.
 
 I tried that, but now run into the problem that now, slapd can't be
 stopped. Maybe it has something to do that the server in question runs
 as a syncrepl client together with TLS (master is
 openldap-server-2.3.33p1-bdb on 4.2). In any case, the only way to get
 slapd down seems to be to kill -9 it, which is _very_ugly_ for other
 reasons. My other slapd instances don't have such a problem.
 
 At the end of the log, it says
 
 --
 daemon: shutdown requested and initiated.
 slapd shutdown: waiting for 2 threads to terminate
 --
 
 which points to a handful of tickets in the OpenLDAP tracker.
 
 It would be very nice if you could suggest something with less impact
 than backporting 2.3.43 from -current.
 
 In any case, I'd like to know whether you'd prefer such problems to be
 reported on misc@, ports@ (I didn't do that to keep clutter out while
 approaching freeze), or upstream's tracker directly.

ports@, and CC the maintainer (in this case, me).

 
 
 TIA!
 
 
 Kind regards,
 --Toni++



Re: openbsd web server failure

2008-08-04 Thread Marc Balmer
* John Nietzsche wrote:

 i am migrating a web application from a linux server to an openbsd
 one. I am having a hard time trying to execute a cgi program, the only
 thing i get on the browser is:
 
 Software error:
 
 Can't locate Bio/SearchIO.pm in @INC (@INC contains:
 /usr/libdata/perl5/amd64-openbsd/5.8.8
 /usr/local/libdata/perl5/amd64-openbsd/5.8.8 /usr/libdata/perl5
 /usr/local/libdata/perl5
 /usr/local/libdata/perl5/site_perl/amd64-openbsd
 /usr/libdata/perl5/site_perl/amd64-openbsd
 /usr/local/libdata/perl5/site_perl /usr/libdata/perl5/site_perl
 /usr/local/lib/perl5/site_perl .) at
 /asd/var/data/html/cgi-bin/blastXtract.cgi line 9.
 BEGIN failed--compilation aborted at
 /asd/var/data/html/cgi-bin/blastXtract.cgi line 9.
 
 For help, please send mail to the webmaster ([EMAIL PROTECTED]), giving this
 error message and the time and date of the error

In OpenBSD, the webserver runs chrooted.  It is likely
that this is causing you the problem.

 Does anybody know the path to the right portage for installation?

OpenBSD does not have portages, but packages.  But you fail to
give even the least information.  The output of the 'dmesg' is
generally useful and to mention the software you are trying to
install would hurt nobody, either.

- Marc Balmer



Re: ldattach dies after gpsd starts

2008-08-04 Thread Marc Balmer
* Rolf Sommerhalder wrote:

 since a few i386 snapshot, and also in the latest GENERIC#1012 i386, I
 observe that
  # /sbin/ldattach -p -s 4800 -t dcd nmea tty00
 dies once I start
  # /usr/local/sbin/gpsd -N -D 2 /dev/ttyp1

Do you see this as well when you use ldattach on cua00?

 This was working fine still with GENERIC#936 from mid January, shortly
 after mbalmer@ added the '-p' option to ldattach.
 
 I sthere anything I can do to help debugging this? Thanks.
 
 Regards,
 Rolf



Re: config GENERIC error

2008-08-03 Thread Marc Balmer
* pezking wrote:
 Hello,
 
 This is my first OpenBSD mailing list post so I hope I am in the correct
 place, and if I am not I apologize in advance. I'm having some trouble
 upgrading from OpenBSD 4.2 to 4.3 - particularly at the config GENERIC
 stage. I am a little bit stumped as I have not edited the kernel in any way
 in my previous install, or in this one (thus just using GENERIC). I've
 followed the steps in the handbook but this is the error I get when I do
 config GENERIC inside /usr/src/sys/arch/i386/conf/:

please download a snapshot and install that, that will be much easier.

(the kernel config file syntax had changed and you would have to rebuild
the config binary prior to configuring a kernel, and some more stuff
might also have changed, so you are better of with a snapshot).

 
 ../../../../conf/files:1005: syntax error
 ../../../../conf/files:1006: syntax error
 ../../../../conf/files:1007: syntax error
 ../../../../conf/files:1008: syntax error
 ../../../../conf/files:1009: syntax error
 ../../../../conf/files:1010: syntax error
 ../../../../conf/files:1011: syntax error
 ../../../../conf/files:1012: syntax error
 ../../../../conf/files:1013: syntax error
 ../../../../conf/files:1014: syntax error
 ../../../../conf/files:1015: syntax error
 ../../../../conf/files:1016: syntax error
 ../../../../conf/files:1017: syntax error
 ../../../../conf/files:1018: syntax error
 ../../../../conf/files:1019: syntax error
 ../../../../conf/files:1020: syntax error
 ../../../../conf/files:1021: syntax error
 ../../../../conf/files:1022: syntax error
 ../../../../conf/files:1023: syntax error
 ../../../../conf/files:1024: syntax error
 ../../../../conf/files:1025: syntax error
 ../../../../conf/files:1026: syntax error
 ../../../../conf/files:1027: syntax error
 ../../../../conf/files:1028: syntax error
 ../../../../conf/files:1029: syntax error
 ../../../../conf/files:1030: syntax error
 ../../../../conf/files:1031: syntax error
 ../../../../conf/files:1032: syntax error
 ../../../../conf/files:1033: syntax error
 ../../../../conf/files:1034: syntax error
 ../../../../conf/files:1035: syntax error
 ../../../../conf/files:1036: syntax error
 ../../../../conf/files:1037: syntax error
 ../../../../conf/files:1038: syntax error
 *** Stop.
 
 Oddly, the conf directory does not even exist where it is supposedly
 having all these errors. I've retrieved the src files via CVSup, and here is
 my CVSup file in case I may have something wrong:
 
 # Defaults that apply to all the collections
 *default release=cvs
 *default delete use-rel-suffix
 *default umask=002
 *default host=anoncvs1.usa.openbsd.org
 *default base=/var/db
 *default prefix=/usr
 *default tag=OPENBSD_4_3
 
 # If your network link is a T1 or faster, comment out the following line.
 # *default compress
 
 OpenBSD-ports
 #OpenBSD-all
 OpenBSD-src
 #OpenBSD-www
 #OpenBSD-x11
 #OpenBSD-xenocara
 
 Any and all help is appreciated, I'm sure I'm missing a step somewhere.
 
 Thanks in advance,
 
 Shane



Re: free plot software

2008-07-29 Thread Marc Balmer
* Pau wrote:
 Hi,
 
 do you know of a command-line, active, FREE programme to produce
 scientific plots? I am getting more and more used to gnuplot, but I
 don't like their conditions:
 
 http://en.wikipedia.org/wiki/Gnuplot#License
 
 I have read something about gri, but it doesn't seem to be as powerful
 as gnuplot is, and the license is, well, gpl. There are some other
 gpl-lincesed projects but they look either not active or not
 well-advanced, or are GUI-specific, as grace is.

I suggest that you try out R.  It is in ports, math/R and I
use it a lot for statistics and graphing.

 
 Supermongo -which I used in the past- is not very freedom-friendly and
 I don't like the ps result: Everything is converted into a curve,
 included the labels (letters). This makes very difficult the
 (potential) per-hand edition/modification of the ps.
 
 Just asking. Thanks in advance.
 
 Pau



Re: Dynamic filtering in PF based on httpd error log

2008-07-26 Thread Marc Balmer
* aeonsystems.com wrote:
 Hi,

 I saw this thread from 2003

 http://marc.info/?l=openbsd-pfm=104540589312892w=2

 This is a very nice idea which I'd like to implement in some form on my 
 network(s).

 One question though...
 Is there an easy and secure way to update a banned table on the firewall 
 box (from the webserver), if my webserver and firewall are on two different 
 OpenBSD machines on a LAN?

yes.  use the tabled daemon and associated client program which is
provided in the tabled package (or sysutils/tabled port).

It does exactly what you want, in a secure manner, over IPv4 and IPv6.


 Thanks in advance for any info!

 Sarah

- Marc


 P.S.: Does anyone know of any other ideas or neat tricks related to Dynamic 
 Filtering based on logfiles?
 I'm having too much fun here.  :-)



Re: clock on alic3 board

2008-07-22 Thread Marc Balmer
* Stuart Henderson wrote:
 On 2008-07-19, Marc Balmer [EMAIL PROTECTED] wrote:
  Remember that the ALIX.2/3 boards usually do not have a battery
  to backup a realtime clock.
 
 3c3 does. I think it's basically all the ones with a VGA bios.

Yes.  the 1b, 1c, and 3c3



Re: Light HTTP servers.

2008-07-21 Thread Marc Balmer
* Stuart Henderson wrote:
 On 2008-07-20, Marc Balmer [EMAIL PROTECTED] wrote:
  * Henning Brauer wrote:
  lighttpd.
 
  can it  do reverse proxying, as needed for zope?
 
 it definitely can in 1.5, I'm not sure about the in-tree version
 but I think it's likely.

nice.  btw, there is also a light http server called nostromo,
developed by [EMAIL PROTECTED]



Re: Light HTTP servers.

2008-07-20 Thread Marc Balmer
* Henning Brauer wrote:
 lighttpd.

can it  do reverse proxying, as needed for zope?

 
 -- 
 Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
 BS Web Services, http://bsws.de
 Full-Service ISP - Secure Hosting, Mail and DNS Services
 Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



Re: clock on alic3 board

2008-07-19 Thread Marc Balmer
* Alexander Hall wrote:

[...]

 True. A little addition for the archives (since it's been a while now):

 $ date -r 86908
 Fri Jan  2 01:08:28 CET 1970

 Oops. My bad. A better approach (combined with correct reading):

 $ date -ur 0
 Thu Jan  1 00:00:00 UTC 1970
 $ date -ur 86908
 Fri Jan  2 00:08:28 UTC 1970

 So that would mean a little more than _one_day_ and eight minutes... No 
 wonder it would take a few months (I was surprised and not at all convinced 
 by my calculations). :-)

Remember that the ALIX.2/3 boards usually do not have a battery
to backup a realtime clock.  Their clocks always start at 0 when
powered up, and 0 is the epoch, Jan. 1 1970.  A mechanism like
ntpd -s is needed for those boards.

The ALIX.1B/C do have a battery, btw.

- Marc Balmer



Re: clock on alic3 board

2008-07-18 Thread Marc Balmer
* riwanlky wrote:
 Hai all,

 I have problem on clock with Alic3 board from Pc Engines on OpenBSD 4.3

 dmesg-
 OpenBSD 4.3 (GENERIC) #698: Wed Mar 12 11:07:05 MDT 2008
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Geode(TM) Integrated Processor by AMD PCS (AuthenticAMD 586-class) 
 499 MHz
 cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX
 real mem  = 268009472 (255MB)
 avail mem = 251097088 (239MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 12/10/07, BIOS32 rev. 0 @ 0xfceb2
 pcibios0 at bios0: rev 2.1 @ 0xf/0x1
 pcibios0: pcibios_get_intr_routing - function not supported
 pcibios0: PCI IRQ Routing information unavailable.
 pcibios0: PCI bus #0 is the last bus
 bios0: ROM list: 0xe/0xa800
 cpu0 at mainbus0
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 1 function 0 AMD Geode LX rev 0x33
 glxsb0 at pci0 dev 1 function 2 AMD Geode LX Crypto rev 0x00: RNG AES
 vr0 at pci0 dev 9 function 0 VIA VT6105M RhineIII rev 0x96: irq 10, 
 address 00:0d:b9:14:ef:48
 ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
 0x004063, model 0x0034
 vr1 at pci0 dev 10 function 0 VIA VT6105M RhineIII rev 0x96: irq 11, 
 address 00:0d:b9:14:ef:49
 ukphy1 at vr1 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
 0x004063, model 0x0034
 vr2 at pci0 dev 11 function 0 VIA VT6105M RhineIII rev 0x96: irq 12, 
 address 00:0d:b9:14:ef:4a
 ukphy2 at vr2 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
 0x004063, model 0x0034
 ath0 at pci0 dev 12 function 0 Atheros AR5212 rev 0x01: irq 9
 ath0: AR5213 5.9 phy 4.3 rf5112a 3.6, FCC2A*, address 00:0b:6b:87:67:39
 glxpcib0 at pci0 dev 15 function 0 AMD CS5536 ISA rev 0x03: rev 0, 32-bit 
 3579545Hz timer, watchdog, gpio
 gpio0 at glxpcib0: 32 pins
 pciide0 at pci0 dev 15 function 2 AMD CS5536 IDE rev 0x01: DMA, channel 0 
 wired to compatibility, channel 1 wired to compatibility
 wd0 at pciide0 channel 0 drive 0: SanDisk SDCFH2-004G
 wd0: 4-sector PIO, LBA, 3919MB, 8027712 sectors
 wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
 pciide0: channel 1 ignored (disabled)
 ohci0 at pci0 dev 15 function 4 AMD CS5536 USB rev 0x02: irq 15, version 
 1.0, legacy support
 ehci0 at pci0 dev 15 function 5 AMD CS5536 USB rev 0x02: irq 15
 usb0 at ehci0: USB revision 2.0
 uhub0 at usb0 AMD EHCI root hub rev 2.00/1.00 addr 1
 isa0 at glxpcib0
 isadma0 at isa0
 pcppi0 at isa0 port 0x61
 midi0 at pcppi0: PC speaker
 spkr0 at pcppi0
 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
 pccom0: console
 usb1 at ohci0: USB revision 1.0
 uhub1 at usb1 AMD OHCI root hub rev 1.00/1.00 addr 1
 biomask e1ef netmask ffef ttymask ffef
 mtrr: K6-family MTRR support (2 registers)
 nvram: invalid checksum
 softraid0 at root
 root on wd0a swap on wd0b dump on wd0b
 clock: unknown CMOS layout

 and the ntpd message on tail /var/log/daemon
 Jul 17 16:14:44 pceng4 ntpd[5847]: adjusting local clock by 86915.408347s
 Jul 17 16:18:00 pceng4 ntpd[5847]: adjusting local clock by 86914.457013s
 Jul 17 16:20:37 pceng4 ntpd[5847]: adjusting local clock by 86913.683080s
 Jul 17 16:21:46 pceng4 ntpd[5847]: adjusting local clock by 86913.389878s
 Jul 17 16:26:04 pceng4 ntpd[5847]: adjusting local clock by 86912.104979s
 Jul 17 16:26:33 pceng4 ntpd[5847]: adjusting local clock by 86911.965071s
 Jul 17 16:27:03 pceng4 ntpd[5847]: adjusting local clock by 86911.859542s
 Jul 17 16:31:19 pceng4 ntpd[5847]: adjusting local clock by 86910.603973s
 Jul 17 16:33:26 pceng4 ntpd[5847]: adjusting local clock by 86910.009693s
 Jul 17 16:37:10 pceng4 ntpd[5847]: adjusting local clock by 86908.914398s


 and possible configuration error?

not an error, but you might want to start ntpd with the -s option.
put 'ntpd_flags=-s' into your /etc/rc.conf.local file.


 Best regards,
 Riwan


- Marc Balmer



Re: OpenBSD 4.3 and relayd from -current (make fails)

2008-07-18 Thread Marc Balmer
* Marco Fretz wrote:

 thanks. yes i did so, but OpenBSD 4.4 -current is not really stable at
 the moment :(

I am using it, so are my colleagues at work.  We have no
issues

 
 relayd in 4.3 is buggy and i cant find a patch...
 
 
 marco
 
 Stuart Henderson wrote:
  On 2008-07-16, Marco Fretz [EMAIL PROTECTED] wrote:
  So I tested relayd in openbsd -current (4.4 beta i think) and it works
  fine. now the stupid question: how to compile this version of relayd
  for 4.3.
  
  the simple answer: you don't. If you want -current relayd, the
  rest of -current comes along for the ride.



Re: This is what Linus Torvalds calls openBSD crowd

2008-07-17 Thread Marc Balmer
* Shizzle Cash wrote:
 On Jul 17, 2008, at 8:42 AM, Giancarlo Razzolini wrote:

 agreed. I barely can wait to see Ty Semaka artwork for 4.4. Definitively
 it should include monkeys.  And amoebas too.

 I agree, monkeys should definitely be somehow incorporated into the artwork 
 for the next release.

ty draws openbsd developers as fish.  and I think that we, the openbsd
developers, did enough to warrant a nice topic for the next release.
no need to resort to that strange monkey business.

or do you want to honour a stupid remark made by l. by making him
the main theme of our next release?  I don't think so.  we have
more substantial work that goes into our next release than the
stupid remark of a wanking fat penguin that all to obviously does
not understand what we do.



Re: in-kernel pppoe issue with username/password length

2008-07-16 Thread Marc Balmer
* asd asd wrote:
First of all I would like to say you hello! I have some problems on 
 setting up a OpenBSD box as gateway for pppoe connection. I'm using a DSL 
 modem running in bridge mode / well, i try
 to use it :) /. PPPOE username/password are 16 character in length and i 
 believe this is a issue with in-kernel pppoe / only allow 9 character 
 usernames/passwords /, otherwise generate error in setspppname/. My provider 
 ain't gonna help me to change my user and pass lenght because it is illegal 
 to change mode of DSL modem in first place! Using userland pppoe leads to 
 another problems, this time with the not so unfamiliar - No Buffer space 
 avalible. All this experience with buffer space is identical on two PCs - 
 Intel Pentium 2 233mhz on i 440ex with 192MB and another Pentium  [EMAIL 
 PROTECTED]  on i440bx. NIC's are also the same - one pair rtl8139 and one 
 pair of 3com's 3C905B. No matter how i mix stuff i always
 get overwhelmed
 by the 12Mbps of my DSL.
  Today i setup a  [EMAIL PROTECTED]  and everything run almost fine,
 one hour with no problems and then about 20
 pings were lost due
 buffer blah, blah. What powerfull router ei?! No thanks, i will try other 
 alternatives. Question is how to solve problem with user/pass
 in built-in pppoe and
 test to see if there is any improvement.
 Maybe in 4.4 length will be expanded, but on current changelog there is no 
 such info.   
   Appreciate your help...  
   p.s. Sorry but my english is not so good.  
 

what makes you think that the pppoe(4) interface has a limit of 9 chars
for the username?  There is no such limit, I am using a much longer
username in my /etc/hostname.pppoe0 file myself.



Re: This is what Linus Torvalds calls openBSD crowd

2008-07-16 Thread Marc Balmer
* Denis Doroshenko wrote:
 On Wed, Jul 16, 2008 at 8:33 PM, Siju George [EMAIL PROTECTED] wrote:
  http://article.gmane.org/gmane.linux.kernel/706950
 
  Again a mis representation in pulic?
 
 haha, poor linus cries like a baby coz not everyone is gonna kiss his
 ass these days.
 
 of course security is not that important! there is no doubt, we've
 seen numerous examples by linux indeed.
 
 well, guess what is worse: a db server crashed and rebooted, or a db
 server rooted and all valuable information sucked out of it. jeez, i
 always thought that linux wants to get into serious game of big
 servers etc., but with the leader like that?.. gimme a break.
 
 he made my day with that comment! sorry guys for contributing to this,
 just couldn't resist :-)
 
 p.s. i guess dr. freud would find some serious troubles deep in the guy ;-)

maybe it is noteworthy here that Sigmund Freud received his Dr. med degree
with a work on the spinal cord of lower fish species.



note for faq, maybe

2008-07-10 Thread Marc Balmer
if you use pppoe(4) for internet, and want to do a remote
update from 4.2 to 4.3, over said pppoe(4) link, then the
normal update procedure will not work, because the 4.3
kernel and the 4.2 ifconfig binary can not work together.

after rebooting the new 4.3 bsd kernel, the network will
not be configure and you will walk/drive to the system (just
like I did today).

so, brefore rebooting to 4.3, at least unpack the 4.3 ifconfig
binary from base43.tgz

- Marc



Re: OT: cases for geode LX 800 board

2008-07-01 Thread Marc Balmer
* Bryan wrote:
 For all of you who have the AMD Geode series boards...  Where did you
 get your cases?  homemade? custom ordered?  I bought the LX800 board,
 but I think to realize that it would need a case.  OR a power supply.

What is _the_ LX800 board?  I have about ten different ones.  And all
but one supplier also have cases.

 I bought a 12VDC adapter for it, but I can't power it up (no power
 button, or jumper to toggle the on jumper).

Use a screwdriver and touch the contacts.

 If you can help, I'd appreciate it.  Otherwise, I'm going to have to
 make a case out of something, like a book...
 
 Regards,
 Bryan



Re: eeepc 900 4.3-current

2008-06-29 Thread Marc Balmer
 today I got my eeepc 900 and was eager to install 4.3-current on it.
 So I downloaded the latest snapshot of bsd.rd and pxeboot and netbooted
 the eee. Sadly the kernel boot stops after attaching pciide0 at pci0.
 
 I also tried to boot /bsd.rd -d  in the hope to get more information
 about what is going on but with no difference. Anyone here who has made
 experiences with the 9 model? I'd like to provide the dmesg but I don't
 have a USB-RS232.

That is a known problem, my Eee PC 900 behaves the same.  It will,
however, boot correctly in about 1 out of 10 boots.



Re: booting a different kernel

2008-06-23 Thread Marc Balmer
* James Hartley wrote:
 On Mon, Jun 23, 2008 at 7:07 AM, annne annnie [EMAIL PROTECTED] wrote:
  If I had windows installed first, then I installed openbsd, what would I 
  type
  to boot into windows?
 
 Read FAQ 4.8  FAQ 14.6.

Any maybe Matthew 22:14 ...



Re: Apache theoretical questions (was Re: no thttpd.conf for OpenBSD?)

2008-06-19 Thread Marc Balmer
* Edwin Eyan Moragas wrote:
 On Fri, Jun 20, 2008 at 10:42 AM, Ted Unangst [EMAIL PROTECTED] wrote:
  For better or worse, the base web server is Apache 1, and that's how
  things are going to be.
 
 
 
 Since the subject of apache came up, i was reminded of a
 thread some time back about improving (?) apache in base.
 anybody (aside from the obsd devs) doing that now?
 i think it was about code cleanups, etc.
 
 are there any objections with overhauling apache's current design?
 (making apache not pre-fork, etc).
 
 are there any roadmaps existing anywhere (even in the obsd's
 minds) of how apache in base will ideally look like?
 
 yes, i'm blowing a lot of dust on this one. i'm just curious.

If you have any diffs that make httpd better, fix bugs, or make the
code more readable (KNF, see style(9)), please mail them.

But small steps, please.

- Marc Balmer



nmeaattach(8) removed in -current, superseeded by ldattach(8)

2008-06-09 Thread Marc Balmer
If you are using a GPS device with nmeaattach(8), please switch to
ldattach(8) now.

The nmeaattach command has been removed in -current, so has the
nmeaattach_flags option in /etc/rc.conf (replaced with ldattach_flags).

Please note that ldattach(8) has a slightly different synopsis than
nmeaattach(8) had:

nmeaattach cuaU0

becomes

ldattach nmea cuaU0



Re: nmeaattach(8) removed in -current, superseeded by ldattach(8)

2008-06-09 Thread Marc Balmer
* James Hartley wrote:
 On Mon, Jun 9, 2008 at 3:36 PM, Marc Balmer [EMAIL PROTECTED] wrote:
  If you are using a GPS device with nmeaattach(8), please switch to
  ldattach(8) now.
 
 Thanks Marc for passing on this information.  Can you describe in
 short why this change was made?

we do not want more than one utility to attach line disciplines.  and
ldattach(8) superseedes nmeaattach(8).  there is no need to keep
the latter.



Re: cannot link to ftp

2008-05-25 Thread Marc Balmer
* Dan Liu wrote:
 export PKG_PATH=ftp://obsd.cec.mtu.edu/pub/OpenBSD/4.3/i386/

The correct path on the server would be pub/OpenBSD/4.3/packages/i386/

 pkg_add -i screen
 Error from ftp://obsd.cec.mtu.edu/pub/OpenBSD/4.3/i386/:
 ftp: Login failed.
 ftp: No control connection for command.
 ftp: Login failed.
 ftp: No control connection for command.
 ftp: Can't connect or login to host 'obsd.cec.mtu.edu'
 No packages available in the PKG_PATH
 Can't resolve screen
 
 I can not link to any ftp site listed on the openBSD site.
 The document suggest us to use the binary file not the source file.
 I even can not link them use firefox or gftp.

I can connect to obsd.cec.mtu.edu from Switzerland.  So the problem
seems to be on your side.



Re: [OT] Can i connect two box directly using wireless cards ?

2008-05-25 Thread Marc Balmer
* elflord woods wrote:

 I have two laptops running linux and openbsd, both with a working
 wireless card.
 
 I am wondering if i can connect these two computers directly and
 communicate between each other wirelessly
 
 I'm a network nut and have no idea if this is possible.
 Thanks

this is possible and it is easy.  give both machines a (different)
IP address within the same net.  which parts of the IP addresses
are consider the net depends on the netmask.  for simplicity,
choose the following values, e.g.:

netmask 255.255.255.0 on both machines
broadcast address 192.168.1.255 on both machines

host A

IP address 192.168.1.1

host B

IP address 192.168.1.2

you configure the network using the ifconfig command (enter it
without any options to see the list of available interfaces).

Once setup, you ping the other host using these (private) IP
addresses.

Good luck, there is a lot information in the man pages and in the
FAQ, go read it if you run into trouble.



Re: [OT] Python License [WAS: Re: Why Perl for pkg_* tools ?]

2008-05-24 Thread Marc Balmer
* Martin Marcher wrote:
 Hello,
 
 How about the python license? Not that I'm really capable of rewriting
 and/or patching the pkg_* tools but from a license point of view I
 think that the license under which python is distributed is quite
 similiar to a BSD license. Especiall this:

do you really think anybody will rewrite the pg_tools using any other
language?  get a break, get a kit-kat.

 
 
 GPL-compatible doesn't mean that we're distributing Python under
 the GPL.  All Python licenses, unlike the GPL, let you distribute
 a modified version without making your changes open source.  The
 GPL-compatible licenses make it possible to combine Python with
 other software that is released under the GPL; the others don't.
 
 
 as a footnote in the license makes me think that way. Given that is
 there any chance realistic chance that python will be part of the obsd
 default at some point in the forseeable future? In any case is it
 missing auditing, general interest (or any other point I can't think
 of right now). Personally I'd really like to see python being included
 in obsd base
 
 License is here: http://www.python.org/download/releases/2.5/license/
 http://www.python.org/download/releases/version/license/
 
 It's probably, as with all languages, just personal favor, but mine
 goes in the direction of python :)
 
 /martin
 
 On Thu, May 22, 2008 at 5:23 PM, hyjial [EMAIL PROTECTED] wrote:
  Hi list !
  Reading through OpenBSD's codebase, I have noticed that the code
  living
  under src/usr.sbin/pkg_add is written in Perl. Perl is distributed
  under the Artistic license, though. The latter is not as permissive
  as the BSD
  license under which monst of OpenBSD is released. No doubt
  that is the reason
  why Perl lives in src/gnu.
  Why have such a tool using a non-BSD package when
  there was choice
  not to do so ?
  What technical reasons have lead the
  developers to elect this
  language ?
  I am just curious about the fact and
  didn't manage to find information
  in tech@ and mis@ archives.
  Thanks in
  advance.
  Hyjial.
 
 -- 
 http://www.xing.com/profile/Martin_Marcher
 
 You are not free to read this message,
 by doing so, you have violated my licence
 and are required to urinate publicly. Thank you.



Re: Why Perl for pkg_* tools ?

2008-05-23 Thread Marc Balmer
* Almir Karic wrote:
 On Fri, May 23, 2008 at 9:37 AM, Marc Espie [EMAIL PROTECTED] wrote:
  As far as perl goes, it's about the only language that fit the bill.
  The older pkg_* were totally impossible to maintain and extend, and
  I needed a sensible script language that was in base.
 
 at the risk of starting a flame war, considered python? beside not
 being in the base, any other downsides for this particular task?

you know, marc espie probably used a language he knows well, does the job
well and is in base.  as for python, many people do not like how this
language does blocking.  and not being in base is am absolute show-stopper
for software that will be in base.

(we usually do not make academic exercises before we start a new project.

or maybe I should write my next radio clock driver in forth, I heard it is
fast and small, so I am sure it is the right tool for drivers...)



Re: [OT] developers running -current on laptops

2008-05-23 Thread Marc Balmer
* Otto Moerbeek wrote:

  I can see from the recent undeadly posts and pictures that most
  developers are using laptops and I know you have to run -current to do
  development work. I was just wondering if these laptops are for
  development use only or development+personal use? I know -current can
  break sometimes and am just curious to know if developers risk putting
  personal stuff on a laptop that is being used for active development.
  
  Thanks.
 
 Ehh, for me personal use very much equals development (plus some mail
 and browsing of cousre). 
 
 If developers don't run current, bugs will be found too late.  If
 current isn't good enough, developers will be bitten, and action will
 be taken VERY soon. 

We even run our production system on -current, that is several servers.
We want to catch problems before the hit our customers with the next
update...

This can of course backfire, but only very rarely:  E.g. the update of
the spamd protocol to version 2 now leads to our mailserver no longer
being able to talk to the other mailserver we operate for customer and
that run OpenBSD 4.2 or 4.3... ;)  But that's life.

 Data destroying bugs are really rare in any case. Data loss caused by
 hardware going broken or personal mistakes is much more likely. 
 
 I like what art@ said a long time ago: if your work destroys itself,
 it's not good enough. 
 
 Kind of genetic programming without all the AI fluff ;-)

I like that ;)  Yet we have tape backups of everything..

- Marc



Re: Problems with apache vhosts

2008-05-21 Thread Marc Balmer
Taleon wrote:
 Thanks for the fast vhost-fix.  I rebuilded my system some minutes ago and 
 now it works perfectly without any error-messages.

It is very important that the IPv6 additions do not break existing
IPv4 installations.  People should really look out for IPv4
breakage.

Thanks for your feedback.



Re: Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-20 Thread Marc Balmer

Owain Ainsworth wrote:


I'm very pleased to announce that about 2.5 hours after the initial
email went out, enough money had been donated to fulfill the needed
amount! I'm shocked at how fast that all happened.


Well, actually it took a little bit longer than just 2.5 hours, but
nevertheless it was very quick and I shall say that we have a user
community we can count on if needed.  That was very motivating, thanks
to all that donated.



Re: Problems with apache vhosts

2008-05-20 Thread Marc Balmer
Taleon wrote:
 Hi, I meet the same problem.  The error messages looks like following:
 
 $ sudo apachectl start
 [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost 
 *:80, the first has precedence, perhaps you need a NameVirtualHost directive
 [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost 
 *:80, the first has precedence, perhaps you need a NameVirtualHost directive
 [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost 
 *:80, the first has precedence, perhaps you need a NameVirtualHost directive
 [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost 
 *:80, the first has precedence, perhaps you need a NameVirtualHost directive
 [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost 
 *:80, the first has precedence, perhaps you need a NameVirtualHost directive
 [Tue May 20 16:45:58 2008] [warn] NameVirtualHost *:80 has no VirtualHosts
 /usr/sbin/apachectl start: httpd started
 
 
 The Apache works great but simetimes, if I enter the URL of my domain in the 
 browser, there is displayed the hostname of my server (titan) infront of the 
 url like `http://titan.wellenform.net' - and I did not add any subdomain in 
 the httpd.conf.
 
 Greetings
 Christian Ruesch
 
 PS: Sorry for the wrong last mail.

I found what causes this issue and I will commit a fix soon.  Sorry that
I forgot to mention that here earlier (only mailed the OP).

- Marc



Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-19 Thread Marc Balmer
Dear OpenBSD Users

A short while ago, Owain Ainsworth's (oga@) laptop was stolen.  As
you all know, oga@ is working on DRI/DRM and on X11 (xenocara)
together with Matthieu Herrb.

With the general hackathon in Edmonton just ante portas, this brings
oga in the very uncomfortable position to have no laptop to hack on.
But oga's work is crucial for the X11 support on OpenBSD.

His laptop was insured, but the insurance will only cover 1000 british
pounds whereas a replacement will cost 1700 british pounds.  We are
short of 700 pounds.  oga knows exactly what model of laptop he needs,
these figures are accurate.  Being a PhD student, he needs the
community's help.

If you think you can step in and help oga and the project, then please
contact me off-list.  We can accept donations by wire, Visacard and
Mastercard (creditcard fees are covered by my company).

I started myself by tossing in CHF 200 (approx $ 200).

(And any excess money would go as a donation to OpenBSD, btw.)

Thanks,
Marc Balmer



Re: Problems with apache vhosts

2008-05-16 Thread Marc Balmer

Pedro de Oliveira wrote:

Hello,
 
I'm having a little problem with vhosts with OpenBSD apache, not really a

problem, more a Warning cause everything is working nicely, i just dont like
the warnings.


On which version do you see this problem?  Are you running -current?  If
so, from when does your system date exactly?

 
I created a vhosts.conf in /var/www/conf/modules with the following:


-vhosts.conf-
NameVirtualHost *:80

VirtualHost *:80
DocumentRoot /htdocs
ServerName domain1.com
/VirtualHost

VirtualHost *:80
DocumentRoot /htdocs/stats
ServerName sub.domain2.com
/VirtualHost

VirtualHost *:80
DocumentRoot /htdocs/blog
ServerName domain2.com
ServerAlias www.domain2.com
/VirtualHost
-vhosts.conf-

Everything works as expected, but when I do a apachectl configtest I get the
following:

# apachectl configtest
Processing config directory: /var/www/conf/modules/*.conf
 Processing config file: /var/www/conf/modules/php5.conf
 Processing config file: /var/www/conf/modules/vhosts.conf
Warning: DocumentRoot [/htdocs] does not exist
Warning: DocumentRoot [/htdocs/stats] does not exist
Warning: DocumentRoot [/htdocs/blog] does not exist
[Fri May 16 12:03:50 2008] [warn] VirtualHost *:80 overlaps with VirtualHost
*:80, the first has precedence, perhaps you need a NameVirtualHost directive
[Fri May 16 12:03:50 2008] [warn] VirtualHost *:80 overlaps with VirtualHost
*:80, the first has precedence, perhaps you need a NameVirtualHost directive
[Fri May 16 12:03:50 2008] [warn] NameVirtualHost *:80 has no VirtualHosts
Syntax OK

Can anyone help me out figuring a way to remove those warnings?




Re: Problems with apache vhosts

2008-05-16 Thread Marc Balmer

Pedro de Oliveira wrote:


I'm running -current from Mon May 12 10:57:47 WEST 2008.


ok, can you please mail in private your full httpd configuration, so 
that I can look into this?




-Mensagem original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Marc
Balmer
Enviada: sexta-feira, 16 de Maio de 2008 12:11
Para: Pedro de Oliveira
Cc: misc@openbsd.org
Assunto: Re: Problems with apache vhosts

Pedro de Oliveira wrote:

Hello,
 
I'm having a little problem with vhosts with OpenBSD apache, not 
really a problem, more a Warning cause everything is working nicely, i 
just dont like the warnings.


On which version do you see this problem?  Are you running -current?  If so,
from when does your system date exactly?

 
I created a vhosts.conf in /var/www/conf/modules with the following:


-vhosts.conf-
NameVirtualHost *:80

VirtualHost *:80
DocumentRoot /htdocs
ServerName domain1.com
/VirtualHost

VirtualHost *:80
DocumentRoot /htdocs/stats
ServerName sub.domain2.com
/VirtualHost

VirtualHost *:80
DocumentRoot /htdocs/blog
ServerName domain2.com
ServerAlias www.domain2.com
/VirtualHost
-vhosts.conf-

Everything works as expected, but when I do a apachectl configtest I 
get the

following:

# apachectl configtest
Processing config directory: /var/www/conf/modules/*.conf  Processing 
config file: /var/www/conf/modules/php5.conf  Processing config file: 
/var/www/conf/modules/vhosts.conf

Warning: DocumentRoot [/htdocs] does not exist
Warning: DocumentRoot [/htdocs/stats] does not exist
Warning: DocumentRoot [/htdocs/blog] does not exist [Fri May 16 
12:03:50 2008] [warn] VirtualHost *:80 overlaps with VirtualHost *:80, 
the first has precedence, perhaps you need a NameVirtualHost directive 
[Fri May 16 12:03:50 2008] [warn] VirtualHost *:80 overlaps with 
VirtualHost *:80, the first has precedence, perhaps you need a 
NameVirtualHost directive [Fri May 16 12:03:50 2008] [warn] 
NameVirtualHost *:80 has no VirtualHosts Syntax OK


Can anyone help me out figuring a way to remove those warnings?




Re: Problems with apache vhosts

2008-05-16 Thread Marc Balmer

Pedro de Oliveira wrote:


Hum, so I should just ignore it! Well, at least it is now *reported*.


I am working on this.  Even if the warnings are bogus, they should not
be there.



Thanks Marc and Stuart

-Mensagem original-
De: Stuart Henderson [mailto:[EMAIL PROTECTED] 
Enviada: sexta-feira, 16 de Maio de 2008 13:43

Para: Pedro de Oliveira
Assunto: Re: Problems with apache vhosts

On 2008/05/16 13:03, Pedro de Oliveira wrote:

Yes, the DocumentRoot ones I know that are because of the chroot.
But the VirtualHosts warnings shoulnt appear, and yes, it is working 
correctly.


btw, it's fallout from the v6 support, I noticed it too.




Re: Editing C with...

2008-05-08 Thread Marc Balmer
The nice thing about editors is that we have so many of them to choose  
from.

Everyone will be happy, like some prefer blondes, other brunettes ... ;)

Today one of our servers decided to send one of it's disks to the abyss,
I was happy to be able to edit /etc/fstab in ed while in single user  
mode.


ymmv, yemv!



Re: Editing C with...

2008-05-04 Thread Marc Balmer
Am 03.05.2008 um 19:56 schrieb Jordi Espasa Clofent:

 Yes, I know, it's completely a dumb question; but I'm curious about  
 it.

 I'm just learning C applied in networking area and I wonder what  
 editor is preferred by OpenBSD developers.

I am using two editors on a regular base: vi that is in base and nedit  
from ports.

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]



Re: i have lost /etc

2008-03-28 Thread Marc Balmer

Rafael Morales wrote:


Please someone help me I have deleted my /etc dir (rm
-rf /etc), is there any way to recover it, or there is
a way to recover  my data stored in /home ??? 


restore(8)



Upcoming PostgreSQL Update to version 8.3.1

2008-03-23 Thread Marc Balmer

(This is a crosspost from [EMAIL PROTECTED]; I want to make
sure this reaches all OpenBSD/PostgreSQL users)


PostgreSQL users,

shortly the PostgreSQL port in OpenBSD will be updated from version
8.2.6 to 8.3.1.  This is a major update and you have to dump your
databases before update and restore them afterwards.

** DUMP AND RESTORE IS NEEDED **

But there is more to look after:  Versions of PostgreSQL prior to
8.3.x had a feature (or bug...) implicit typecast.  Functions
that expect an argument to be of a certain type would cast a variable
of any other type to the expected type, if possible.

E.g.  the function now() returns a date and time, but not a 'text'
varriable.  But an expression like substr(now(), 1, 5) was valid,
because the result of now() was implicitely cast to ::text.

With PostgreSQL 8.3.x, this is no longer the case.  Implicit typecasts
are gone.  You have to explicitely cast to the right type, above
example would have to be written as substr(now()::text, 1, 5).

If you make use of functions or use PL/PGSQL, watch for such
constructs.

It is, however, unlikely that you run into trouble, from the
applications simon@ and I looked at, we found only one that was
affected by this and the problem was fixed in about ten minutes.

NB: the update is not yet committed.  This is an _advance_ information
so that you don't forget to dump/restore your databases.  I included
a few people in BCC that mailed me after the last PostgreSQL update;
people who forgot to dump their databases before they updated the
port (and got into trouble)  See this as a gentle reminder ;P

(The update to 8.3.1 was mostly prepared by simon@ and tested by
him and me.)



Re: glxpcib: tiny bug fix

2008-03-18 Thread Marc Balmer

Rolf Sommerhalder wrote:

Without the fix below, reading back the state of the impulse switch
(GPIO24) on my ALIX always returned '0' (e.g. switch is pressed). Now it
returns '1' if depressed, and '0' only while pressing it, as expected.

As AMD5536_GPIO_READ_BACK was already #defined but so far unused, I
assume it was just a small oversight which crept through testing while
reading back the LEDs' state only. See p. 480ff in the CS4436 Companion
Data Book for a detailed description of the registers in question.

Note: This fix changes the values returned while reading the LEDs' state
(GPIO6, 25 and 27). Before, they alway reflected the last state written
(LED on or off). Now, they always return '0', unless you set 'in' flag,
upon which it returns always '1'.
The LEDs' current state can't be read back anymore this manner because
these GPIOs do not support the 'inout' flag.


Thanks, Rolf, I will look into this.

- Marc



Rolf


--- sys/arch/i386/pci/glxpcib.c.origSat Nov 24 09:21:00 2007
+++ sys/arch/i386/pci/glxpcib.c Tue Mar 18 15:55:51 2008
@@ -291,7 +291,7 @@
u_int32_t data;
int reg;

-   reg = AMD5536_GPIO_OUT_VAL;
+   reg = AMD5536_GPIO_READ_BACK;
if (pin  15) {
pin = 0x0f;
reg += AMD5536_GPIOH_OFFSET;




Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Marc Balmer

Henning Brauer wrote:

* Marcus Andree [EMAIL PROTECTED] [2008-03-18 12:31]:

snip

 back in time (but not to long ago), I served 3000 email accounts for
 a Swiss multinational insurance company on a P133 with 32MB RAM.

 That is no big deal, however.  sendmail and any Unix like system
 can handle that without problem.

Agreed. People nowadays seem to wrongly associate email with
Exchange Server bloatware.


well. it depends a LOT on your users' usage profile. I could not serve 
our customers from such an old machine.


well, we can't either nowadays, of course. much, much more iron in
place now;)

ok, the frontends are still 360MHz Sun netra t1s. But the storage 
backend is a 14 disk raid5 of 15k RPM U320 drives, plus a 6 disk raid5 of 
10k RPM U320 drives - and that is needed.



It's amazing how little knowledge tech workers have about
network protocols...


ack ack ack ack ack




Re: the death of the oldest OpenBSD system on the net...

2008-03-17 Thread Marc Balmer

Marcus Andree wrote:


I've just finished a small argument with some colleages here at work.
They just couldn't believe a Pentium 133 was serving a hundred e-mail
accounts...


back in time (but not to long ago), I served 3000 email accounts for
a Swiss multinational insurance company on a P133 with 32MB RAM.

That is no big deal, however.  sendmail and any Unix like system
can handle that without problem.



Re: Samba(SMB) or Netatalk(AFP)?

2008-03-10 Thread Marc Balmer

Sunnz wrote:


Basically I want to set up a network share on my OpenBSD box which my
Mac laptops and Linux laptops can access to.

Smb seems kind of weird in a environment with no M$ systems... however
this is probably what I am most familiar with because I did it in the
past on OpenBSD and it was a breeze to set up.


SMB works nicely with Mac OS X.  It what I use to in my lab.  NFS is 
also a choice.  SMB is very easy to setup.




Re: multiple connections to GPS device?

2008-03-07 Thread Marc Balmer

James Hartley wrote:


Is it possible to watch the NMEA traffic originating from a USB GPS
device *while* attached via nmeaattach(8)?

Once nmeaattach(8) has attached to the device, any subsequent
connection attempted via cu(1) fails with an all ports busy message.
 The manpage for cu(1) states that connections are locked for UUCP
integrity reasons, so I'm guessing that nmeaattach(8) is doing
something similar (Sorry, I haven't traced the code yet...).

Is there some other manner in which I can tap into this connection?


No.  And here is some information why:

Only one process can open a tty device at the time.  If the nmea data
is to be used for a timedelta sensor, then the process opening the
device must attach the nmea(4) line discipline using the appropriate
ioctl(). nmeattach(8) and the newer ldattach(8) do just that and they
can be used when no other software runs that would use the NMEA data
and attach the line discipline.  gpsd, e.g., can attach nmea(4).

Of course it would desirable to attach a line discpline by running
sth like ldattach and _still_ be able to use the NMEA data from
software that knows nothing about the nmea(4) line discipline.  But
at the moment that is not possible.

- Marc



Re: multiple connections to GPS device?

2008-03-07 Thread Marc Balmer

James Hartley wrote:

On Thu, Mar 6, 2008 at 11:19 PM, Chris Kuethe [EMAIL PROTECTED] wrote:

On Thu, Mar 6, 2008 at 11:01 PM, James Hartley [EMAIL PROTECTED] wrote:
   Is there some other manner in which I can tap into this connection?

 ports/misc/gpsd


This looks really cool!  Am I correct to assume that I can run this
daemon while still using nmeaattach(8)?


see also my previous mail.  nmeattach(8) (or ldattach(8)) is not needed
with gpsd since gpsd attaches the line discipline.



Re: openbsd router hardware

2008-03-02 Thread Marc Balmer

Brian A. Seklecki (Mobile) wrote:


I'm looking for hardware to install an openbsd based dsl-router.
I already searched the list archives and looked at WRAP and Soekris,
but it seems that they do not match my requirements:

- fanless
- as small as possible


- Soekris
- Routerboard
- Axiomtek
- ARInfotek
- Nexcom
- Advantech
- Acrosser
- Win Enterprises


For the sake of completeness, let's add PC-Engines to the list.  The
ALIX boards probably come close to what is needed here, so does the
Soekris net5501.  Bot are small (the ALIX even smaller), have at least
3 LAN Ifs, fanless and USB 2.0.



Re: /etc/ttys fields for reading from tty00

2008-03-02 Thread Marc Balmer

AE sysadmin wrote:


I am crafting C util to read data from tty00  (amd64, i386;
connected to the data src device directly by serial cable).

What should I put in /etc/ttys for the tty00 to make sure
I am doing things correctly? The util is to be run as root.


you don't need to edit /etc/ttys, your C program has to open
/dev/cua00 (not /dev/tty00) and everything will just work.



Re: OT: supposed advantages of threads

2008-02-18 Thread Marc Balmer

Geoff Steckel wrote:

This is my last posting on this, take heart.

The threads advocates have never specified any
advantages of a program written using that model
(multiple execution points in a single image)
over a multiple process model, assuming that
parallelism is useful.

If the purported advantage is access to shared
data structures without explicit access mechanisms,
let's say I strongly disagree that that is an advantage.
It is a whole set of fatal bugs waiting to happen.

Please enlighten me if there are any -other-
qualities of this model which are supposed to be
advantageous to the people paying for and using
the programs. I count faster development as an
advantage, increased maintenance (bugs) as a
disadvantage. The second strongly outweighs the
first.


I suggest that you read Programming with POSIX Threads by
David Butenhof and then draw your own conclusion.

For some applications, threading is a good tool, for others not.
But you have to be proficient in the area to make the decision.



Re: take threads off the table

2008-02-17 Thread Marc Balmer

Marco Peereboom wrote:

If you want to run more of the same you fork.

Threads usefulness are limited in scope.  Threads dangers are endless.
Nonetheless there are good reasons for threading; just not as many as
people give it credit for.  Ssh is not one of those use cases where
threading is important.


I did not want to imply that threads would be any good for ssh.
It was a general remark on threads.  and I stand by that.

[...]



Re: Where is NAN Defined?

2008-02-10 Thread Marc Balmer

Jim Razmus wrote:

I'm trying to compile a program that uses NAN.  It includes math.h which
I'm told C99 says should define it.  I've grepped the entire source tree
and read up on man 3 math and man 3 isinf.  Still no joy.

Trying to compile the program yields error: `NAN' undeclared (first use
in this function).

Can anyone point me in the right direction?


you can use the isnan(3) function to test for NaN.  Does that not work
in your program?



Re: Dell SC440 reboot

2008-02-08 Thread Marc Balmer

sandro guly zaccarini wrote:

hi, i have two sc440 running 4.2 and i have some problem. i don't have 
the box here so i can't paste the trace or similar but i will try to 
explain and maybe if i'm not the only one that use this crappy hardware..
first of all, the raid controller is awful. this has been discussed in 
past so i know what choices we have. booting is very slow and seems to 
hold some seconds on the disks, maybe for the problem exposed before.


the most annoying thing is that reboot doesnt work. simply doesnt. it 
hangs for hours, we can just push reset button. am i the only what who 
have this problem? i will attach a more detailed description as soon as 
i can setup a test-box, this is just to let you know..and if there's 
some way to debug this problem let me know and i will.


we have two SC440 and I don't see these problems.



Re: Prolific USB-Serial Controller

2008-02-02 Thread Marc Balmer

Chris wrote:

I am trying to a access a switch connected to a USB-Serial controller
to my laptop's USB port. When I plug in the USB port to my laptop I
get the following in my /var/log/messages. But I am not sure which
/dev/device to use in minicom to access the switch. I can see there
is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
/dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
device not configured.


use /dev/cuaU0 (or /dev/cuaUn)



Any help would be much appreciated. Thanks.

Feb  2 20:31:58 red /bsd: uplcom0 at uhub1 port 2
Feb  2 20:31:58 red /bsd:
Feb  2 20:31:58 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
Controller, rev 1.10/3.00, addr 2
Feb  2 20:31:58 red /bsd: ucom0 at uplcom0




Re: Prolific USB-Serial Controller

2008-02-02 Thread Marc Balmer

Stuart Henderson wrote:


/dev/ttyU0


you should use /dev/cuaU0 for dial-out.



On 2008/02/02 20:53, Chris wrote:

I am trying to a access a switch connected to a USB-Serial controller
to my laptop's USB port. When I plug in the USB port to my laptop I
get the following in my /var/log/messages. But I am not sure which
/dev/device to use in minicom to access the switch. I can see there
is no /dev/uplcom0 or /dev/ucom0 or /dev/uhub1. I tried /dev/tty00,
/dev/tty01, /dev/tty02, /dev/tty03 and /dev/cua00 but minicom says
device not configured.

Any help would be much appreciated. Thanks.

Feb  2 20:31:58 red /bsd: uplcom0 at uhub1 port 2
Feb  2 20:31:58 red /bsd:
Feb  2 20:31:58 red /bsd: uplcom0: Prolific Technology Inc. USB-Serial
Controller, rev 1.10/3.00, addr 2
Feb  2 20:31:58 red /bsd: ucom0 at uplcom0




Re: low-MHz server

2008-01-31 Thread Marc Balmer

Douglas A. Tutty wrote:

Hello,

I have an unusual situation and problem at which I've been chipping
away.  The resultant system will need to run OpenBSD so I'm asking here
for the accumulated wisdom.  The base technology predates my IT
experience.

My wife is sensitive to what she describes as electromagnetic fields.
She gets headaches and other pains when exposed to equipment: the higher
the frequency, the worse her symptoms.  For example, a VT is better than
a regular CRT connected to even a P-II-233 MHZ while a 486DX4-100 is
better than the P-II.  Both are far better than my Athlon64 @3.5 GHz.
And any CRT is better than any LCD/plasma screen.  Even my Palm Zire (I
think 233 MHz) with its ~2x~3 screen is unsuitable within about 30
feet of her.  She can't wear a digital watch.


do the symptoms get worse when you run Linux instead of OpenBSD?

[...]



Re: Test Limerick, please ignore

2008-01-29 Thread Marc Balmer

Peter N. M. Hansteen wrote:

Darrin Chandler [EMAIL PROTECTED] writes:


There once was a message to test
Repeated unto being a pest
While marked to ignore
It was seen more and more
Until other begged, Give it a rest!


That one needs to be included in the faq somewhere, urgently.


Just Great...

That has the quality to go into fortune (where we already have
some limericks)



A note for PC-Engines ALIX board users

2008-01-21 Thread Marc Balmer

I you are using one of PC-Engines ALIX boards for OpenBSD use and
want to use the serial console, please make sure that you have at
least BIOS version 0.98g installed.  Earlier versions are problematic
wrt to serial console and some on-board devices like the watchdog
timer.

--
   SELECT services FROM companies WHERE name = 'micro systems'

marc balmer, micro systems, wiesendamm 2a, postfach, ch-4019 basel
internet www.msys.ch, phone +41 61 383 05 10, fax +41 61 383 05 12



Re: Problems with -current in CVS?

2008-01-21 Thread Marc Balmer

Colby W. wrote:

I tried two different AnonCVS repositories (one in the USA and one in
CAN) tonight but ran into the same problem when I tried rebuilding the
kernel to bring my recent -release install up to -current. Per the
instructions [1]:


cou have to rebuild config(8) in /usr/src/usr.sbin/config first, the
config file syntax changed.



# cd usr/ ; cvs checkout -P src
# cd /usr/src/sys/arch/i386/conf/
# config GENERIC
../../../../conf/files:1005: syntax error
../../../../conf/files:1006: syntax error
../../../../conf/files:1007: syntax error
../../../../conf/files:1008: syntax error
../../../../conf/files:1009: syntax error
../../../../conf/files:1010: syntax error
../../../../conf/files:1011: syntax error
../../../../conf/files:1012: syntax error
../../../../conf/files:1013: syntax error
../../../../conf/files:1014: syntax error
../../../../conf/files:1015: syntax error
../../../../conf/files:1016: syntax error
../../../../conf/files:1017: syntax error
../../../../conf/files:1018: syntax error
../../../../conf/files:1019: syntax error
../../../../conf/files:1020: syntax error
../../../../conf/files:1021: syntax error
../../../../conf/files:1022: syntax error
../../../../conf/files:1023: syntax error
../../../../conf/files:1024: syntax error
../../../../conf/files:1025: syntax error
../../../../conf/files:1026: syntax error
../../../../conf/files:1027: syntax error
../../../../conf/files:1028: syntax error
../../../../conf/files:1029: syntax error
../../../../conf/files:1030: syntax error
../../../../conf/files:1031: syntax error
../../../../conf/files:1032: syntax error
../../../../conf/files:1033: syntax error
../../../../conf/files:1034: syntax error
../../../../conf/files:1035: syntax error
../../../../conf/files:1036: syntax error
../../../../conf/files:1037: syntax error
../../../../conf/files:1038: syntax error
*** Stop.

Is this a problem with a config file checked into CVS or am I missing
something? From what I can determine, there is no
../../../../conf/files but there is ../../../conf/files (one
directory closer to /usr/src/sys/arch/i386/conf : ie.,
/usr/src/sys/conf/).

Thanks in advance,

Colby W.

[1] http://www.openbsd.org/faq/faq5.html




Re: building a kernel for net4801 from dmassage

2008-01-16 Thread Marc Balmer

Henning Brauer wrote:

* Piotrek Kapczuk [EMAIL PROTECTED] [2008-01-16 12:05]:

2008/1/16, Henning Brauer [EMAIL PROTECTED]:

* Lars Noodin [EMAIL PROTECTED] [2008-01-15 17:42]:

What is recommended for using a second machine to compile a kernel for
the soekris?

nothing. there is no need to compile a kernel for the soekris. further,
there is no use in compiling a !GENERIC kernel for soekris either.

(ok, rare exceptions exist, but that is not even soekris specific)

IMHO every embedded device should have console speed synced between
bios and the kernel. These options are very helpful.

# WRAP console settings
option PCCOMCONSOLE
option CONSPEED=38400


oh, of ocurse, that is s much easier and straightforward than

stty com0 38400
set tty com0

in /etc/boot.conf



and really die-hard, hardcore users can also change the console
speed in the BIOS...



Re: building a kernel for net4801 from dmassage

2008-01-16 Thread Marc Balmer

Paul de Weerd wrote:

[...]


port in /etc/ttys (see ttys(5) for more info). But yeah, like Henning
said .. absolutely no need to build a new kernel.


Definitely not worth the effort just to change the console speed.

I do custom kernels to build a ramdisk kernel that has some special
applications on the ramdisk occasionally.  But definitely not to
save some bytes.



Re: GENERIC -current kernel requires modification to boot on ALIX

2008-01-16 Thread Marc Balmer
* Rolf Sommerhalder wrote:

 To test, I have simpley disabled tickling by the kernel:
   sysctl kern.watchdog.auto=0
 The watchdog bites within 30 seconds which is the default
 kern.watchdog.period=30
 
 Running the userspace tickler watchdogd, which implicitly disables
 kern.watchdog.auto, successfully prevents the watchdog from biting, as
 it should be. Thanks to marc@ et al. who implemented  extended
 glxpcib for ALIX!

that would be mbalmer@, not marc@ ;)

 
 Rolf



Re: AMD Geode LX Video on fit-PC

2008-01-09 Thread Marc Balmer

Matt Jibson wrote:


I recently got a fit-PC. I found that after installing snapshots,
issuing startx simply blacks the screen. The normal methods to stop X
and recover the screen were unsuccessful. This is the behavior when
using the vesa driver. Under the vga driver, X starts, but the fonts
are unreadable and the resolution very low. It appears from the fit-PC
forums that the amd driver is needed. Has anyone had other success
with this machine, or previously ported this driver to OpenBSD? dmesg
below.


I have several AMD Geode LX devices that have Video.  The video port
on these devices must be programmed using some Geode specific
instructions (write MSR/read MSR).  Adding that support is in my
plans, but I have no idea when it will be ready.

[...]



Re: facts about OpenBSD

2008-01-09 Thread Marc Balmer

Nikns Siankin wrote:


Facts about OpenBSD:

# Stable release cycle. 
  If you want to run latest bugfree ClamAV or FireFox - upgrade to CURRENT! 
  But don't forget to buy release CD's!!!

# Secure By Default.
  OpenBSD uses broken WEP for securing WiFi networks.
  Has no WPA/WPA2 support.
# Do not let serious problems sit unsolved. 
  OpenBSD doesn't need MAC because it has their own security flawed systrace.
# Use of Cryptography. 
  OpenBSD uses file-backed encryption (svnd) which is very suited

  for Full-disk-encryption. NOT.
# Full Disclosure. 
  OpenBSD at first denies remote exploitable flaws. 
  DoS flaws gets marked as reliability not security issues.
# Easy maintainable. 
  OpenBSD distributes source patches to make your farm of

  Pentium2 firewalls updated easly.
# Secure Distribution.
  The most secure operation system gets distributed on FTP servers
  as unsigned binaries.


Disclaimer: Like it or not. I'm OpenBSD user for 4 years.
Shit on my head - shit on all OpenBSD supporters.


you are free to use any other operating system if you don't
like OpenBSD.





I'm not subscribed, cc me, if have something to say.




Re: NAT IPV4 and bridge only IPV6

2008-01-08 Thread Marc Balmer

Good Good wrote:

Thank you for your answers.

Free.fr http://Free.fr is the first general public ISP in France to 
provide IPV6 to its customers (it seems that I would be lucky) :)


Marc is right, with a /64 I cannot do anything, my ISP seems to be 
skinflint (/64 or nothing).


talk to them again.  a /64 is plain stupid.  you need a /48 and there
is no reason why they don't give it to you.

IPv6 solves exactly this problem:  not enough IPv4 addresses.

These idiots are still living in their very limited IPv4 world and
thinking...

A /48 should be better especially to be routed (in my dreams with 
Free.fr http://Free.fr).


Johan has ideas, but they are difficult (only the last one) to 
understand and to set up.


Claudio's solution seems to be realizable. I will test it on the occasion.



Thank you for all the work which you complete for the Openbsd project.

Julien




Re: Real men don't attack straw men

2008-01-07 Thread Marc Balmer

Dusty wrote:


WHY, please really, tell me WHY you do not do your own research. Everybody
on this list would LOVE to know why you do not do any of your own
research?!?!?!?!!?


Honestly I am not interested why this moron does not do any research.
He seems to be a case for the psychiatrists.



Re: Real men don't attack straw men

2008-01-06 Thread Marc Balmer

Richard Stallman wrote:

What is an operating system? An OS could be considered an application,

You could consider an OS an application, and you could consider
hardware software, just as you could consider the Earth a pumpkin.  My
response is that you're starting from assumptions I find questionable,
so I don't accept the conclusions.


Isn't that what you, Richard, do all the time here, starting from
assumptions?  Didn't you do that right from the start when you came
to our lists to post the wrong conclusions you draw from your
un-researched assumptions?



Re: NAT IPV4 and bridge only IPV6

2008-01-06 Thread Marc Balmer

Good Good wrote:

[...]


The problem :
The /64 provided by my ISP is made to fuel only one ethernet segment and no
more.
So, it is not possible to route a part of the /64 to another ethernet
segment (the private segment).


ask them to get a /48 network.  with a /64 network you can not do anything.



One solution :
The firewall NAT IPV4 traffic and bridge IPV6 traffic, that here:

SwitchFirewallISP BoxISP Network/Internet
   __ ___ ___
|PC1|---|   |  vr0 | | vr1   | |
   | x|---| || |--O
|PC2|---|__||  |___|  | |___|
|   |   |
|bridge0 |
|  _|_ |
| || |
|_|   |_ _|
  |__|
   IPV6 bridge only

Some clues :
I found some clues on the following web site where my need is summarized.
An English translation -
http://64.233.179.104/translate_c?hl=frie=UTF-8oe=UTF-8langpair=fr%7Cenu=http://www.ip6.fr/free-broute/prev=/language_tools
The original French link -
http://ip6.fr/free-broute/

Second problem :
The author of the previously quoted web site is running under Linux.
Here used commands :
brctl addbr br0
ifconfig br0 up
brctl addif br0 eth0
brctl addif br0 eth1
ebtables -t broute -A BROUTING -p ! ipv6 -j DROP

The magic command is ebtables -t broute -A BROUTING -p ! ipv6 -j DROP.

Questions :
1) Did you understand my problems ? :)
2) Is it the right solution to bridge only IPV6 traffic (I hope for it) ?
3) The most important question, how to do this type of bridging under
Openbsd (without ebtables) ?

According to the man page, brconfig can only perform layer 2 filtering.


Thank you for any help

Julien




Re: fvwm in base and repository with security issues?

2008-01-02 Thread Marc Balmer
* Douglas A. Tutty wrote:

[...]

 I also forgot that Enlightenment seems to be under a suitable licence,
 although probably too big to put in base.

enlightnment is development code that does not run stable.  It is not
usable for production or every day use machines.

 
 Doug.
 

- Marc Balmer



Re: Postfix(chroot) and Postgresql

2007-12-26 Thread Marc Balmer

badeguruji wrote:

[...]


i am searching on google and have not found anything yet. i am
therefore looking into generic ldap manuals. (i do not want to be a
ldap guru)


I maintaining some larger email installations that use LDAP.  If you are
not willing/don't want to dig deep into the matter, then I suggest that
you don't use it all.  It can be complicated and complex.

Of course, once installed it works like a charm (oh, and we even have an
LDAP enabled version of the venerable vacation(8) program).

- Marc Balmer

[...]

--
   SELECT services FROM companies WHERE name = 'micro systems'

marc balmer, micro systems, wiesendamm 2a, postfach, ch-4019 basel
internet www.msys.ch, phone +41 61 383 05 10, fax +41 61 383 05 12



  1   2   3   >