Re: npppd l2tp/ipsec - openbsd client

[haris]

Hi,

first of all, thanks @sthen for your answer (OP has no net access atm).

We are to the point where the clients get ip (windows/linux/OpenBSD) and
traffic is passing through the server as expected.

There is a very strange problem with ssh service though. While internet
traffic
is being routed as expected, when we try to ssh, we can't connect (from
OpenBSD
clients) to any server.

[..snip..]
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(102430728192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP

and it just hangs there.

Test time with windows, and with PuTTY, there is absolutely no problem. I can
connect anywhere with absolutely no problem. At this point, I went with the
crazy idea to try PuTTY on OpenBSD. And ssh with PuTTY works... We can't get
our heads aroun this problem and why this is happening.

## pf.conf @ server ##
NIC=interface
set skip on {lo0}
block   # block stateless traffic
pass# establish keep-state
block in on ! lo0 proto tcp to port 6000:6010
block in on vic0
#vpn
extip=ip
pass in quick inet proto tcp from any to $NIC port {ports} flags S/SA keep
state
pass quick proto { esp, ah } from any to any
pass in quick on egress proto udp from any to any port {500, 4500} keep state
pass quick on enc0 from any to any keep state (if-bound)
pass out quick on egress inet from 10.0.10.0/24 to any nat-to (egress:0)
pass out on vic0


Does anyone has a solution to this problem?

Thanks.

--
A: Because we read from top to bottom, left to right.
Q: Why should I start my reply below the quoted text?

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

[demime 1.01d removed an attachment of type application/pgp-signature]

Re: npppd l2tp/ipsec - openbsd client

[haris]

On Fri, Nov 22, 2013 at 06:41:37PM +0200, Jeff Goettsch wrote:
 What does /etc/ssh/ssh_config look like on the OpenBSD client?

The file is the default that comes with OpenBSD. No change there...

--
A: Because we read from top to bottom, left to right.
Q: Why should I start my reply below the quoted text?

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

[demime 1.01d removed an attachment of type application/pgp-signature]

Re: suspend/resume not working on thinkpad X41

[haris]

As ports are now locked, I decided to give a try with the new snapshot
to report if the problem still persists.

OpenBSD 5.4 (GENERIC) #31: Sun Jul 21 19:11:18 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC

Everything back to normal and suspend resume is working like a charm
after testing as many times as I could during the day.

--

[demime 1.01d removed an attachment of type application/pgp-signature]

Re: suspend/resume not working on thinkpad X41

[haris]

On Tue, Jul 16, 2013 at 03:36:16PM +0300, Jonathan Gray wrote:
 There is something not quite right with acpi on the x41.
 It might be related to something along the lines of
 interrupt mapping or memory regions not being setup correctly.

 While disabling acpi in ukc will let you suspend/resume
 it doesn't get us any closer to figuring out what is
 going on.  Does disabling acpithinkpad help at all?

Thanks for the advice.

`disable acpithinkpad` changes nothing. Only `disable acpi` works for
suspend/resume for now.

Best to just wait for next build and try again I guess while using
disable acpi. :)

--
A: Because we read from top to bottom, left to right.
Q: Why should I start my reply below the quoted text?

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

[demime 1.01d removed an attachment of type application/pgp-signature]

suspend/resume not working on thinkpad X41

[haris]

Hi.

Just updated today with new snapshot and suspend
seems broken. After closing lid or typing `zzz`, the laptop tries to go
to sleep, and then resumes with blank screen.

All sets show the same date (July 14th), so I think it's not due to an
older X build date.

Last upgrade was about 1 and 1/2 month, so it's dofficult to trace where
the suspend stopped working.

Blindly typing reboot/halt -p does the trick for now.

dmesg:

OpenBSD 5.4-beta (GENERIC) #26: Sat Jul 13 15:15:49 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.50GHz (GenuineIntel 686-class) 1.50 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE,NXE,EST,TM2,PERF
real mem  = 2137452544 (2038MB)
avail mem = 2091094016 (1994MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 12/19/06, BIOS32 rev. 0 @ 0xfd750, SMBIOS 
rev. 2.33 @ 0xe0010 (59 entries)
bios0: vendor IBM version 75ET60WW (2.06 ) date 12/19/2006
bios0: IBM 1867WEF
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT ECDT TCPA APIC MCFG BOOT
acpi0: wakeup devices LID_(S3) SLPB(S3) UART(S3) EXP0(S4) EXP1(S4) EXP2(S4) 
EXP3(S4) PCI1(S4) DOCK(S4) USB0(S3) USB1(S3) USB3(S3) USB7(S3) AC9M(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiec0 at acpi0
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 99MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (EXP0)
acpiprt2 at acpi0: bus -1 (EXP1)
acpiprt3 at acpi0: bus -1 (EXP2)
acpiprt4 at acpi0: bus -1 (EXP3)
acpiprt5 at acpi0: bus 4 (PCI1)
acpiprt6 at acpi0: bus -1 (DOCK)
acpicpu0 at acpi0: C2, C1, PSS
acpipwrres0 at acpi0: PUBS
acpitz0 at acpi0: critical temperature is 97 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model IBM-COMPATIBLE serial 26534 type LION oem 
PSPSP
acpibat1 at acpi0: BAT1 not present
acpibat2 at acpi0: BAT2 not present
acpiac0 at acpi0: AC unit offline
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK not docked (0)
bios0: ROM list: 0xc/0xf600! 0xcf800/0x1600 0xd1000/0x1000 0xdc000/0x4000! 
0xe/0x1
cpu0: Enhanced SpeedStep 1497 MHz: speeds: 1500, 1400, 1300, 1200, 1100, 1000, 
900, 800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82915GM Host rev 0x03
vga1 at pci0 dev 2 function 0 Intel 82915GM Video rev 0x03
intagp0 at vga1
agp0 at intagp0: aperture at 0xc000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1024x768
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
Intel 82915GM Video rev 0x03 at pci0 dev 2 function 1 not configured
ppb0 at pci0 dev 28 function 0 Intel 82801FB PCIE rev 0x03: apic 1 int 20
pci1 at ppb0 bus 2
bge0 at pci1 dev 0 function 0 Broadcom BCM5751M rev 0x11, BCM5750 B1 
(0x4101): apic 1 int 16, address 00:16:d3:22:13:5a
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 Intel 82801FB USB rev 0x03: apic 1 int 16
uhci1 at pci0 dev 29 function 1 Intel 82801FB USB rev 0x03: apic 1 int 17
uhci2 at pci0 dev 29 function 2 Intel 82801FB USB rev 0x03: apic 1 int 18
uhci3 at pci0 dev 29 function 3 Intel 82801FB USB rev 0x03: apic 1 int 19
ehci0 at pci0 dev 29 function 7 Intel 82801FB USB rev 0x03: apic 1 int 19
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xd3
pci2 at ppb1 bus 4
cbb0 at pci2 dev 0 function 0 Ricoh 5C476 CardBus rev 0x8d: apic 1 int 16
sdhc0 at pci2 dev 0 function 1 Ricoh 5C822 SD/MMC rev 0x13: apic 1 int 17
sdmmc0 at sdhc0
ath0 at pci2 dev 2 function 0 Atheros AR5212 rev 0x01: apic 1 int 21
ath0: AR5213A 5.9 phy 4.3 rf5112a 3.6, WOR2W, address 00:16:cf:00:ed:c9
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 5 device 0 cacheline 0x0, lattimer 0xb0
pcmcia0 at cardslot0
auich0 at pci0 dev 30 function 2 Intel 82801FB AC97 rev 0x03: apic 1 int 22, 
ICH6 AC97
ac97: codec id 0x41445374 (Analog Devices AD1981B)
ac97: codec features headphone, 20 bit DAC, No 3D Stereo
audio0 at auich0
Intel 82801FB Modem rev 0x03 at pci0 dev 30 function 3 not configured
ichpcib0 at pci0 dev 31 function 0 Intel 82801FBM LPC rev 0x03: PM disabled
pciide0 at pci0 dev 31 function 2 Intel 82801FBM SATA rev 0x03: DMA, channel 
0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: HTC426040G9AT00
wd0: 16-sector PIO, LBA, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
ichiic0 at pci0 dev 31 function 3 Intel 82801FB SMBus rev 0x03: apic 1 int 23
iic0 at ichiic0
spdmem0 at iic0 addr 0x51: 2GB DDR2 SDRAM non-parity PC2-5300CL5 

Re: No binary packages in snapshots lately

[haris]

On Thu, Sep 15, 2011 at 02:06:05PM +0200, Alexis Fouilhe wrote:
 Hi list !
 
 There seem to be no binary packages in snapshots since at least the beginning 
 of
 the week. I was primarily interested in amd64 but I checked several other
 architectures and they seem to be in the same situation. The file index.txt
 seems to be updated daily, though.
 
 I have not had much time to follow the current state of affairs lately and the
 fact that none seems to ask questions about it leads me to think I have missed
 something obvious. Yet, could someone enlighten me of the situation?
 
 Thanks,
 
 Alexis
 
 PS: in case I am silly enough not the look at the right place, the folder I am
 looking at is pub/OpenBSD/snapshots/packages/amd64 on ftp.openbsd.org and
 several (if not all) French mirrors.
 

It's a time before release so this is something expected. 

If you need a package, just update to a recent snapshots and compile from ports 
tree. ;)