NAT66 with temporary address

2016-04-03 Thread Steven Mestdagh
I was trying to use NAT66, from some internal subnets to my IPv6
internet address, using the following line with 5.9 release.

match out on $intout inet6 from !(egress:network) to any nat-to ($intout:0)

The last part expands to the link local address of the interface, which
is the first address but not really useful for NAT.
I would like it to use the relevant temporary address set by autoconf.
Is there a way to specify this? Maybe we would need additional modifiers for it?



Re: MacBook remote control

2007-11-12 Thread Steven Mestdagh
Richard Storm [2007-11-11, 00:03:37]:
 Hello!
 I have macbook:
 hw.model=Intel(R) Core(TM)2 CPU T7400 @ 2.16GHz
 hw.vendor=Apple Inc.
 hw.product=MacBook2,1
 hw.version=1.0
 
 On http://wiki.freebsd.org/AppleMacbook IR receiver section there is
 tool available at http://fnop.net/~rpaulo/priv/freebsd/aird.tgz.
 
 Here is patch that makes it compile/work under openbsd with my macbook
 and remote control.
 
 Ignore manpage, run like this:
 ./aird -vd -f /dev/uhid1 -M echo menu -P echo play -F echo
 forward -B echo backward -U echo volumeup -D echo volumedown

works nicely on my macbook.  maybe this can be added to the ports tree?



request for new [nl] translators of OpenBSD's web pages

2007-04-11 Thread Steven Mestdagh
hi,

As you might know, the OpenBSD web pages are translated in a number of
different languages as explained on
http://www.openbsd.org/translation.html

Currently, the [nl] translation team, consisting of Jasper and myself,
is looking for new contributors who can maintain the existing translation
or even add new translated pages.

To get an idea of what this work involves, please read
http://www.openbsd.org/translation-explained.html

If you are interested in contributing to OpenBSD this way, please
contact me by private mail.

steven



Re: 4.0 and64 ogg123 Error: Cannot open device sun.

2007-01-09 Thread steven mestdagh
Siju George [2007-01-09, 21:25:26]:
 Hi,
 
 Just wondering how people on amd64 architecture are playing ogg files.
 
 Mplayer plays but no sound output.
 XMMS plays the file but the output is very fast and sounds llike caroon :-)
 ogg123 gives this error while following
 http://www.openbsd.org/faq/faq13.html#playaudio
 
 
 $ ogg123 -d sun bsdtalk090.ogg
 
 Audio Device:   Sun audio driver output
 
 Playing: bsdtalk090.ogg
 Ogg Vorbis stream: 1 channel, 44100 Hz
 Error: Cannot open device sun.

maybe you can drop the -d sun from the above command?

providing a dmesg could be useful, as well as the output of 'mixerctl -a'.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: java on openbsd 4.0?

2007-01-09 Thread steven mestdagh
Gustavo Rios [2007-01-09, 13:37:37]:
 Is it possible to build jdk;java directly from openbsd: I always
 believed i had to install linux emulation first.

if something is unclear about the section 'Building the Sun JDK' in
FAQ 8, please let us know what it is.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: automatic packages upgrade from ports

2006-12-12 Thread steven mestdagh
fv [2006-12-12, 19:29:45]:
 pkg_add -ui does what you want to do. (No, it doesn't go to ports, but
 you shouldn't, especially not if you must ask how to do this.)
 
  Joachim
 
 I just would like to maintain a local up-to-date package database 
 compiled from ports so i can dot periodicaly:
 PKG_PATH=/usr/ports/packages/sparc64/All/
 pkg_add -ui
 
 It's like a bulk build, but only for packages installed on my box.
 I don't why i should not do this as it's what is done on the openbsd 
 main site but for all packages...

sounds like you want to build a SUBDIRLIST with pkg_info(1).

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: links in the OpenBSD FAQs

2006-12-07 Thread steven mestdagh
Igor Sobrado [2006-12-07, 20:29:23]:
 Attached is the first draft of the patch.  Once it has been debugged
 I will open a bug report on it.  Please, check carefully all the entries
 in the patch and do not trust on my English skills.  Some suggestions:
 
   - replacing references to threads in the mailing lists (now the
 thread subject) for its exact reference.  There is a risk for
 two threads having the same subject.
 
   - there are some manual pages references (in the form command(section))
 that are no links.  Should these references to man pages be links?
 diff -urNp www/faq1.html www.new/faq1.html
 --- www/faq1.html 2006-12-07 17:05:55.0 +0100
 +++ www.new/faq1.html 2006-12-07 18:55:51.0 +0100
 @@ -275,7 +275,8 @@ Theo de Raadt, located in Canada.
  
  The OpenBSD team makes a new release every six months, with target release
  dates in May and November.  More information on the development cycle 
 -can be found a href=faq5.html#Flavorshere/a.
 +can be found in the a href=faq5.html#FlavorsOpenBSD's Flavors/a
 +subsection of this FAQ.
  
  a name=Included/a
  h21.8 - What is included with OpenBSD?/h2
 @@ -362,7 +363,7 @@ Of course, additional applications can b
  !-- XXXrelease --
  
  The complete list of changes made to OpenBSD 3.9 to create OpenBSD 4.0
 -can be found a href=../plus40.htmlhere/a, however here are a few
 +can be found in the a href=../plus40.htmlOpenBSD 4.0 changes/a list, 
 however here are a few
  changes the OpenBSD team anticipate will require or warrant some special
  note to people upgrading or installing OpenBSD 4.0 who are familiar with
  older versions:
 diff -urNp www/faq12.html www.new/faq12.html
 --- www/faq12.html2006-12-07 17:05:55.0 +0100
 +++ www.new/faq12.html2006-12-07 19:02:48.0 +0100
 @@ -546,7 +546,7 @@ Yes!
  lt;pgt;
  The lt;a href=quot;A 
 HREF=http://simh.trailing-edge.com/;http://simh.trailing-edge.com//Aquot;gt;SIMHlt;/agt;
  VAX simulator
  can be used to effectively emulate a real VAX.
 -Instructions can be found lt;a 
 href=quot;../vax-simh.htmlquot;gt;herelt;/agt;.
 +Instructions can be found in the lt;a 
 href=quot;../vax-simh.htmlquot;gt;OpenBSD/vax on the SIMHlt;/agt; VAX 
 simulator URL.
  
  
  lt;pgt;
 @@ -564,4 +564,4 @@ Instructions can be found lt;a href=qu
  lt;smallgt;$OpenBSD: faq12.html,v 1.79 2006/11/01 03:07:32 nick Exp 
 $lt;/smallgt;
  lt;/bodygt;
  lt;/htmlgt;
 -/PRE
 \ No newline at end of file
 +/PRE
 diff -urNp www/faq13.html www.new/faq13.html
 --- www/faq13.html2006-12-07 17:05:55.0 +0100
 +++ www.new/faq13.html2006-12-07 20:10:58.0 +0100
 @@ -915,8 +915,8 @@ with normal DVD players.
  lt;pgt;
  The important thing is you use media which suit your DVD writer.
  If you expect compatibility with other DVD players, watch your step and
 -be sure to read
 -lt;a href=quot;A 
 HREF=http://www.dvddemystified.com/dvdfaq.html;http://www.dvddemystified.com/dvdfaq.html/A#4.3.1quot;gt;this
  sectionlt;/agt;
 +be sure to read the
 +lt;a href=quot;A 
 HREF=http://www.dvddemystified.com/dvdfaq.html;http://www.dvddemystified.com/dvdfaq.html/A#4.3.1quot;gt;compatibility
  problems sectionlt;/agt;
  of the DVD FAQ.

seriously, i don't know how you are doing this, but it sure does not
look like a diff against our cvs.

furthermore, saad@ already started replacing here links and such a
while back, but even though it was reviewed by a few people, somehow it
never got into the tree.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Missing section in FAQ - 6 Networking ?

2006-09-03 Thread steven mestdagh
Bruno Carnazzi [2006-09-03, 16:49:45]:
  Hi misc,
 
 There is a numbering problem or a missing section in FAQ - 6
 Networking : http://www.openbsd.org/faq/faq6.html#6.8

it's a section that has been removed. afaik, the numbering is preserved
because of possible references to the articles. a new article may be
inserted there in the future.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: pkg_add

2006-07-21 Thread steven mestdagh
Andris [2006-07-21, 09:09:45]:
 I do this when I know the package name:
 
 1. ftp $PKG_PATH
 
 2. ls kdel*
 
 -r--r--r--  1 100  100  20614454 Mar  4 18:38 kdelibs-3.5.1p0.tgz
 
 3. bye
 
 4. sudo pkg_add kdelibs-3.5.1p0.tgz

you could just use

pkg_add -i kdelibs

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Icecast manual page

2006-07-17 Thread steven mestdagh
Karel Kulhavy [2006-07-17, 16:53:40]:
 Hello
 
 After pkg_add icecast 2.3.1 into OpenBSD 3.9 I realized there is no manual
 page. No man icecast, although there is an executable called icecast.
 Also no info icecast.
 
 I suggest that this manpage is added if one exists, or at least a dummy one
 which points to the URL and says that the original project doesn't have one.

Next to man pages, other forms of ports documentation are installed into
/usr/local/share/doc/.  You will find icecast documentation there.
If you want a man page, I suggest you contact the icecast authors...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Upgrading questions

2006-07-04 Thread steven mestdagh
Joachim Schipper [2006-07-04, 15:13:35]:
 Several Java implementations are in ports; Sun Java works on i386 only,
 I believe.

kurt has enabled jdk 1.5 on amd64 as well some time ago (-current only).

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: pkg_add -u not working

2006-06-20 Thread steven mestdagh
[EMAIL PROTECTED] [2006-06-20, 18:41:09]:
 *my oppinion*
 There are not so many updates in the STABLE-Branch so I realy don`t
 understand why nobody can spend 3hrs of Compiling (a day, in the night,
 even developers have to speel :)) ) STABLE Packages (just the updated
 software! Not ALL Packages..).
 It`s realy something I can`t understand if it deals with the great idea of
 pkg_add -ui.
 */my oppinion*

we need a machine for this. see the recent story on undeadly:
http://undeadly.org/cgi?action=articlesid=20060619214229

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: pkg_add -ui - Using Ports except or real Packages?

2006-06-19 Thread steven mestdagh
Will Maier [2006-06-19, 11:04:00]:
 Yes, they are. Packages are built for stable, too, if security
 updates are backported to the stable ports tree. What's the problem
 here?

note that due to lack of resources, updated -stable packages are only
built for the i386 platform.

you can build your own packages from a -stable ports tree, though.
the out-of-date script will even give you a list that you can feed into
the ports Makefile...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Package configurations

2006-06-09 Thread steven mestdagh
Allen Theobald [2006-06-09, 05:06:48]:
 Hello!
 
 For installing a package how can I tell what the configure
 script (./configure) or command line arguments to the build were?

cd to the corresponding port directory, and use e.g.
make show=CONFIGURE_ARGS

CONFIGURE_ENV also contains some flags, see bsd.port.mk(5).

or just read the Makefile...

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Issue after erroneous package update

2006-06-03 Thread steven mestdagh
Andris Delfino [2006-06-03, 11:38:13]:
 Hi, I updated my packages (pkg_add -u), two of them weren't updated
 because they had several candidates, so I updated them manually
 (pkg_add -iu pkg-name).
 
 They were curl, and mozilla-firefox. curl updated ok, mozilla-firefox 
 didn't.
 
 The error was: Can't install mozilla-firefox-1.5.0.3 because of
 conflicts (.libs-mozilla-firefox-1.5.0.1). For sanity, I decided to
 delete mozilla-firefox-1.5.0.1 and reinstall it again (pkg_delete
 mozilla-firefox ; pkg_add mozilla-firefox-1.5.0.1.tgz ).
 
 Now, I receive the same error: Can't install mozilla-firefox-1.5.0.1
 because of conflicts (.libs-mozilla-firefox-1.5.0.1).
 
 How can I solve this? :S

pkg_delete .libs-mozilla-firefox-1.5.0.1

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: pf logging: tcpdump: need root privileges

2006-05-29 Thread steven mestdagh
Daniel Polak [2006-05-29, 00:37:06]:
 Martin,
 
 The solution in the FAQ was ok for 3.8 but things changed in 3.9.
 
 For now if you run the script underneath from root's crontab every 5 
 minutes you'll most likely be ok.
 There should be a check in the script to see if it is already running to 
 prevent another instance starting when the old one hasn't finished yet. 
 The check in the script in the FAQ was actually not working anyway so if 
 the script in the FAQ wasn't causing any problems this one will be ok too.
 With this script there is just one script and no need for the user 
 pflogger anymore as everything is done as root. This allows tcpdump to 
 privsep which makes things safer.
 
 /etc/pflogrotate:
 
 #!/bin/sh
 # rotate pflog file and feed to syslog
 FILE=/var/log/pflog5min.$(date +%Y%m%d%H%M)
 kill -ALRM $(cat /var/run/pflogd.pid)
 if [ $(ls -l /var/log/pflog | cut -d   -f 8) -gt 24 ]; then
mv /var/log/pflog $FILE
kill -HUP $(cat /var/run/pflogd.pid)
tcpdump -n -e -ttt -r $FILE | logger -p local0.info
rm $FILE
 fi

I've adjusted the FAQ page with the new script, thanks!

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Splitting xbaseXY.tgz - stupid idea?

2006-05-22 Thread steven mestdagh
Liviu Daia [2006-05-22, 12:27:18]:
 Ok, let me rephrase this.  How realistic will be to run an OpenBSD
 firewall or router without xbase a few years from now?

Huh? You do not and will not need xbase to run a firewall/router.

 With the release of 3.9, there seems to be a new trend among port
 maintainers to make running a systems without xbase a PITA

You are completely blowing up your own gd/xbase/no space left on device
problem beyond proportion, and accusing/insulting port maintainers for it?

 compiling ports that
 don't depend on X at run time now requires X (example: nmap-no_x11),
 and building ports without xbase is now unsupported (FAQ 15.4.1).

You do not understand.  Unsupported does not mean impossible, it means
you are on your own to do it.  If you can't do this, just use the no_x11
package, as has been said many times now.

 what I'm asking is: is all this an accident, or the new official policy?
 Will there be any effort put into making sure ports don't depend on X
 when that's reasonably feasible?  Does anybody still care?  What's the
 official take on this?

Clearly, this no_x11 stuff has a low priority.
If you are still talking about making no_x11 flavors for the gd library
and everything that depends on it, I doubt this will happen.
But yeah, no_x11 packages can be created when it's feasible and useful;
this has been done in the past and can continue in the future.
As for building ports on system without X11, nobody cares AFAIK.

Now please stop wasting people's time with this.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: FAQ section numbering?

2006-05-16 Thread steven mestdagh
James Hartley [2006-05-15, 23:32:08]:
 The numbering of the FAQ sections proceeds through 1 - 15 excluding 11.
 Is there a historical reason for skipping section 11?

The articles in 11 have recently been relocated to make way for a FAQ page
about the X window system. Just look at the CVS log to see its history.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: flash plugin mozilla-firefox

2006-03-21 Thread steven mestdagh
Hannah Schroeter [2006-03-21, 16:35:50]:
 Hello!
 
 On Tue, Mar 21, 2006 at 10:29:50AM -0500, Roy Morris wrote:
 Try this 
 http://www.openbsd.org/faq/faq13.html#javaflash
 
 Nowadays, the recommendation to fetch a flashplugin and install it by
 hand is outdated. There's /usr/ports/www/opera/opera-flashplugin.

yes, the FAQ follows -stable, and will be updated when 3.9 is released.
the opera-flashplugin port does not exist on 3.8.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Problem to read dvd on openbsd!

2006-03-17 Thread steven mestdagh
Joco Salvatti [2006-03-16, 18:49:34]:
 Hi all,
 
 I'd like to know if anyone could help on the following problem:
 1. First I've copied the contents of a DVD to my HD
 2. After copying I've burned the DVD, as it is specified in the
 official OpenBSD FAQ. Everything works fine.
 3. When it comes to use the DVD for playing with gmplayer or in any
 other DVD equipment an error occurs. Using gmplayer, the error message
 is Can't open VGM info!. Has anyone ever experienced this problem?
 Could please anyone help me?

iirc you have to write video dvd content in the right physical order.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: pf and ftp

2006-02-27 Thread steven mestdagh
On Mon, Feb 27, 2006 at 03:40:17PM +0100, vladimir plotnikov wrote:
 Hello!
 
 Sorry for stupid question.
 part of pf.conf:
 
 pass in on $ext_if proto tcp from any to any port 21 keep state
 pass in on $ext_if proto tcp from any to any port  49151  keep state
 ...
 block return-rst in log on $ext_if proto tcp all

the last matching rule wins, as explained in the pf.conf(5) man page.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: python2.4 glitch

2006-02-22 Thread steven mestdagh
On Wed, Feb 22, 2006 at 03:21:38AM -0800, Tony Sterrett wrote:
 I just compiled python2.4 which recommended for Zope 2.9.0. There a  
 small glitch in configure. You'll get an error like below. Its late  
 so just all reference to define_xopen_source starting around 1488.  
 this has to do with select. But the configure file is not set up to  
 handle kqueue/kqueue declartion of u_short and u_long. This  
 configuration file doesn't handle 3.8 either. After removing  
 define_xopen_source it compiled and tested.
 
 ---
 OpenBSD/2.* | OpenBSD/3.@:@0123456@:@)
  define_xopen_source=no;;

why don't you use the python-2.4 packages, or the ports system?

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: error installing python 2.3 from OpenBSD 3.8 ports

2006-02-16 Thread steven mestdagh
On Thu, Feb 16, 2006 at 12:43:15PM +0530, Siju George wrote:
 Hi all,
 
 I was trying to install Python 2.3 from OpenBSD 3.8 ports for
 
 http://www.jackal-net.at/tiki-read_article.php?articleId=1
 
 The install did not succeed and I got an error message.
 Could someone please help me troubleshoot it?
 
 The error messagr is shown below
 
 
 
 # cd ports/lang/python/2.3/
 # make install
 ===  Checking files for python-2.3.5p2
  Python-2.3.5.tgz doesn't seem to exist on this system.
  Attempting to fetch /usr/ports/distfiles/Python-2.3.5.tgz from 
  ftp://ftp.pyth
 on.org/pub/python/2.3.5/.
 ftp: connect: Connection refused
 ftp: Can't connect or login to host `ftp.python.org'
  Attempting to fetch /usr/ports/distfiles/Python-2.3.5.tgz from 
  http://python.
 mirrors.pair.com/ftp/python/2.3.5/.
 ftp: Error retrieving file: 404 Not Found
  Attempting to fetch /usr/ports/distfiles/Python-2.3.5.tgz from 
  http://python.
 mirrors.ilisys.com.au/ftp/python/2.3.5/.
 100% |**|  8335 KB02:31
  Size matches for /usr/ports/distfiles/Python-2.3.5.tgz
  Checksum OK for Python-2.3.5.tgz. (sha1)
 ===  python-2.3.5p2 depends on: db-4.2.52p2 - not found
 ===  Verifying install for db-4.2.52p2 in databases/db/v4
 ===  Checking files for db-4.2.52p2
  db-4.2.52.tar.gz doesn't seem to exist on this system.
  Attempting to fetch /usr/ports/distfiles/db-4.2.52.tar.gz from 
  http://www.sle
 epycat.com//update/snapshot/.
 ftp: Error retrieving file: 404 Not Found
  Attempting to fetch /usr/ports/distfiles/db-4.2.52.tar.gz from 
  ftp://sleepyca
 t1.inetu.net/releases/.
 100% |**|  3827 KB01:52
  Size does not match for /usr/ports/distfiles/db-4.2.52.tar.gz

unfortunately this distfile has been rerolled.
it will be fixed in -current.

is installing python from packages too easy...? see pkg_add(1).
in future please send this type of question to the ports mailing list.

steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: SSH publickey authentication - identity logging

2006-01-24 Thread steven mestdagh
On Tue, Jan 24, 2006 at 11:04:33AM -0700, Spruell, Darren-Perot wrote:
 Is it possible to have sshd log information about the key used to
 authenticate to a given user account upon connection?
 
 Our situation is that we have a user account that multiple people have
 access to log into to retrieve files. Each user authenticates to that
 account with their own SSH key. Current log entry shows:
 
 Jan 24 11:01:20 sftp sshd[23555]: Accepted publickey for transfers from
 10.2.58.44 port 1420 ssh2
 
 Would be useful to have information logged for the connection identifying
 the key used to authenticate, by the key comment if possible. Does sshd
 already have this capability? Would anyone consider this a useful feature
 addition?

Have you tried LogLevel VERBOSE in sshd_config(5)? That prints lines
like 'Found matching DSA key: fingerprint in the log file.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: anoncvs prompts for password

2006-01-15 Thread steven mestdagh
On Sun, Jan 15, 2006 at 01:40:23AM -0800, Ramiro Aceves wrote:
  # cvs up -Pd
  [EMAIL PROTECTED]'s password:
  Permission denied, please try again.
  [EMAIL PROTECTED]'s password: cvs [update aborted]: received
  interr

yes, i'm seeing the same.  Wim?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Updrading to stable branch --- rebuilding ports?

2006-01-07 Thread steven mestdagh
On Sat, Jan 07, 2006 at 10:12:10AM +0100, Ramiro Aceves wrote:
 Hello dear OpenBSD friends.
 
 I have just upgraded my 3.8 release CD install trough CVS to the stable
 branch (OPENBSD_3_8)( src, ports and XF4). I have rebuilt my kernel, the
 userland and X Window. Everything runs fine and smoothly as expected. I
 also removed the installed packages and I am reinstalling them again
 trough ports.
 
 A question arises now to me: as I have read on the FAQ, everything must
 be kept in sync. Is it mandatory to remove the packages and reinstall
 them again from ports when I upgrade the base system to the STABLE
 branch?.

no. keeping stuff in sync is much more of an issue when running -current.

 Or perhaps,  can I asume that the STABLE patch branch does
 not modify the base system enough to break the ports?

yes.

 This is a very
 time consuming task as my computer has got a slow Internet connection
 (5kB/s) and a not too fast processor (1200 MHz). A friend of mine
 downloaded for me all 3.8 packages from OpenBSD servers and perhaps I
 have to discard them from now.  :-(

the stable ports branch mostly adds security fixes. for some
architectures the updated packages are on the ftp servers, for others
you need to build them yourself.

you don't need to rebuild all your packages.
maybe just a few which have had security fixes... if your friend did not
already download the updated packages.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: x11 forwarding does not work until pf is disabled

2005-12-27 Thread steven mestdagh
On Tue, Dec 27, 2005 at 02:43:48PM +0100, Didier Wiroth wrote:
 Hello,
 I'm running current (built a few hours ago) on a test machine. 
 I'm connecting via ssh (from a windows box) and I try to launch an X
 application.
 X forwarding fails, here is a sample output:
 
 ~ $ xclock 
 [1] 10951
 [EMAIL PROTECTED]
 ~ $ Error: Can't open display: localhost:11.0
 
 Unfortunately, as you see, I'm not able to forward X11 until I disable
 pf (pfctl -d).
 After disabling pf, forwarding works well and I'm able to forward any X
 application.
 
 Did I miss something, what is my problem?
 Thank you very much
 Didier
 
 Here is the (simple) pf.conf of the ssh server:
 ext_if=bge0
 table friends persist 
 table hostile persist
 
 #OPTIONS
 set loginterface $ext_if
 
 #NORMALIZE
 scrub in on $ext_if fragment reassemble
 
 #REDIRECTING
 
 #DEFAULT BLOCK
 block log quick inet from hostile
 block quick inet6

you can debug this kind of stuff using tcpdump(8).
try passing inet6 on lo0.


 block log (all) all
 
 pass quick on lo0
 pass in quick on $ext_if inet proto tcp from friends to $ext_if\
port 22 modulate state label ssh
 pass out quick on $ext_if inet proto { tcp, udp } from $ext_if to any \
 keep state label out_traffic

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: BerkeleyDB on 3.8

2005-12-22 Thread steven mestdagh
On Thu, Dec 22, 2005 at 05:10:56PM -0600, J.D. Bronson wrote:
 How can I tell what version the BDB is that comes within OpenBSD 3.8?

see FAQ 15.2.3.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Access CD as user using cdrtools

2005-12-21 Thread steven mestdagh
On Wed, Dec 21, 2005 at 10:26:38PM -0700, Ludwig Mises wrote:
 It seems that only root can access /dev/rcd0c when using tools such as
 cdrdao, cdda2wav and cdparanoia, even when the user is in the operator
 group:
 
 $ cdparanoia -v -d /dev/rcd0c -B
 
 Checking /dev/rcd0c for cdrom...
 Testing /dev/rcd0c for SCSI interface
 generic device: /dev/rcd0c
 ioctl device: /dev/rcd0c
 Could not open generic SCSI device /dev/rcd0c: Permission 
 denied
 Testing /dev/rcd0c for SCSI interface
 
 uid=1000(lm) gid=1000(lm) groups=1000(lm), 0(wheel), 5(operator)
 
 I get similar results with cdda2wav and cdrdao.  Oddly enough, cdio
 works just fine for this user.  Even changing the permissions on
 /dev/rcd0c to 644 didn't change anything and  I still get errors
 indicating that I have no permission, yet clearly the account is in
 the correct group:
 
 $ ls -l /dev/rcd0c
 crw-r-  1 root  operator   15,   2 Dec 15 21:32 /dev/rcd0c
 
 Is it possible to read /dev/rcd0c as a user in the operator group
 using cdda2wav or other cdrtools?  I would rather not have to use su
 or sudo just to read a CD.  And I see nothing special about cdio (i.e.
 no SUID) to make it work differently.

try adding write permission for the operator group to this device?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: disklabel and ext3 partitions on amd64

2005-12-20 Thread steven mestdagh
On Mon, Dec 19, 2005 at 12:00:52PM +, Simon Morgan wrote:
 On 18/12/05, steven mestdagh [EMAIL PROTECTED] wrote:
  I see the same happening on 3.8-release vs. 3.8-current on i386 for
  systems with foreign filesystems. Not sure why.
 
 Think it could be a bug?

this change in behavior is caused by
sys/arch/amd64/amd64/disksubr.c v 1.4
sys/arch/i386/i386/disksubr.c v 1.46

because the context is gone, here is the OP's problem summarized:
'D' in the disklabel editor now wipes everything except the 'c' partition,
whereas it used to leave 'c', a modified 'a', and foreign filesystem ( 'i')
partitions in place.

maybe someone can comment on this?

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: disklabel and ext3 partitions on amd64

2005-12-18 Thread steven mestdagh
On Fri, Dec 16, 2005 at 01:40:29PM +, Simon Morgan wrote:
 I'm currently running OpenBSD/i386 3.8 on an AMD64 machine and just went to
 install the latest AMD64 snapshot. The hard drive I'm installing to has a
 number of ext3 partitions contained in an extended partition.
 
 When I installed OpenBSD/i386 3.8 on this machine I issued the D command
 during the disklabel stage to start with a clean label and although all the
 BSD partitions were removed, all the ext3 partitions remained. When I tried
 the same with the amd64 snapshot, the ext3 partitions were not kept and the
 only thing remaining was the c partition. Obviously I didn't want to go
 ahead with the installation for fear of data loss so I would just like to
 know if this is normal, whether it's a change in behaviour between 3.8 and
 the snapshot or if it's an i386/amd64 thing. If it makes any difference, the
 label I reset when installing 3.8 was left over from a FreeBSD install.

I see the same happening on 3.8-release vs. 3.8-current on i386 for
systems with foreign filesystems. Not sure why.

 I've had a look through the latest disklabel man page and it says:
 
   Note that when a disk has no real BSD disklabel, the kernel creates a de-
   fault label so that the disk can be used.  This default label will in-
   clude other partitions found on the disk if they are supported on your
   architecture.  For example, on systems that support fdisk(8) partitions
   the default label will also include DOS and Linux partitions.
 
 I'm assuming this behaviour also applies to the D command, in which case
 does this mean that ext2/3 isn't supported on AMD64 machines?

by default ext2fs is enabled for all architectures:

$ grep -i ext2fs /usr/src/sys/conf/GENERIC
option  EXT2FS  # Second Extended Filesystem

 If I proceed
 with the install, will the ext3 partitions still be there afterwards (even
 if OpenBSD can't see them)?

Normally, yes. However, you should make sure that all partitions in the
disklabel are within the OpenBSD fdisk partition (normally and unless you
have been doing strange things, they should). Then OpenBSD should leave
your data in other fdisk partitions (like your ext3 partitions) alone.
In any case it's a good idea to really understand what you are doing
when altering partition tables, and you always have backups of your data,
of course.

If you want to access those ext3 partitions from OpenBSD they will need
to be listed in the disklabel again. There is a section in the FAQ about
foreign filesystems (14.16) and Nick has also rewritten 14.1 for hopefully
better understanding. :)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: A question about the adduser.perl file

2005-11-28 Thread steven mestdagh
On Mon, Nov 28, 2005 at 10:21:58AM +0100, frantisek holop wrote:
 hmm, on Sun, Nov 27, 2005 at 04:31:31PM +0100, Said Outgajjouft said that
  Line 92
  @pwd_mkdb = (pwd_mkdb, -p);# program for building passwd database
  and line 133
  @pwd_mkdb = (pwd_mkdb, -p, -d, .);
  
  Isn't it more secure to use absolute path for running the pwd_mkdb?
 
 @path = ('/bin', '/usr/bin', '/usr/local/bin');

that's the path where it looks for shells.  a bit further you can see

$ENV{'PATH'} = /sbin:/bin:/usr/sbin:/usr/bin;

and that is where pwd_mkdb will be found.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: A question about the adduser.perl file

2005-11-28 Thread steven mestdagh
On Mon, Nov 28, 2005 at 04:30:25PM +0100, Said Outgajjouft wrote:
 $ENV{'PATH'} = /sbin:/bin:/usr/sbin:/usr/bin;
 
 and that is where pwd_mkdb will be found.
 
 
 Hmm that doesn't answer my question.
 The answer I am looking for could be one of the following.
 
 1. The PATH environment is local to the process and cannot be tampered with.
 
 2. The PATH environment is global but if someone can tampered with it 
 you are screwed
 anyway so it doesn't matter that the pwd_mkdb is called using a 
 relative path.
 
 3. The PATH environment however very slim can be tempered with so 
 adduser instead calls
/evilfiles/pwd_mkdb then adding an absolute path sounds like 
 something that should be done.

$ENV is inherited from the parent process, but $ENV{'PATH'} is set
explicitly inside the script, so it will have the desired value
mentioned above.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: apache doesn't interpret php

2005-11-20 Thread steven mestdagh
On Sun, Nov 20, 2005 at 06:22:15PM +0100, noob lenoobie wrote:
 Hello.
 
 I installed a Fresh OpenBSD 3.8 in order to make a
 firewall/webserver.But I can't make apache interpret php.
 
 I did run phpxs -s, I checked my httpd.conf (with Loadmodule and
 AddType), I restarted apache with apacheclt stop  sleep 1 
 apachectl start (apachectl restart fails).
 
 I've read many maillinglists and newsgroups, but the answer is always
 run phpxs -s ou add the required lines to httpd.conf. So I really
 don't know what to do next.
 
 You may want to see some commands :
 
 #phpxs -s seems ok to me
 phpxs -s
   [activating module php5 in /var/www/conf/httpd.conf]
   cp /usr/local/lib/php/libphp5.so /usr/lib/apache/modules/libphp5.so
   chmod 755 /usr/lib/apache/modules/libphp5.so
   cp /var/www/conf/httpd.conf /var/www/conf/httpd.conf.bak
   cp /var/www/conf/httpd.conf.new /var/www/conf/httpd.conf
   rm /var/www/conf/httpd.conf.new
 
   You should copy the sample configuration files from
   /usr/local/share/examples/php5 to /var/www/conf/php.ini

you did perform this last step, right?

the next thing to look at is your httpd log file e.g.
/var/www/logs/error_log

p.s. this question belongs on @ports

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Slow DVD Speed

2005-11-13 Thread steven mestdagh
On Wed, Nov 09, 2005 at 10:40:16PM -0800, Dan Smythe wrote:
 I am having slow DVD burning speeds. I am running
 OpenBSD 3.6 Release.

try 3.8 instead!

 I'm getting speeds of about 0.2x. I will attach my
 dmesg file. What should I do to fix this problem?
 
 [demime 1.01d removed an attachment of type application/octet-stream which 
 had a name of dmesg.boot]

if your problem persists with 3.8, try again by posting your dmesg and any
other relevant info in-line (not as attachment).

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: OpenBSD Desktop Document

2005-11-09 Thread steven mestdagh
On Wed, Nov 09, 2005 at 02:41:05PM -0500, Roy Morris wrote:
 Thanks to all those that replied. I have made the changes suggestedand 
 placed the document as {ps,pdf,txt} at 
 www.openalternatives.com/OpenBSD/OpenBSD-Desktop.txt
 www.openalternatives.com/OpenBSD/OpenBSD-Desktop.ps
 www.openalternatives.com/OpenBSD/OpenBSD-Desktop.pdf

This document is no good. A lot of relevant info is missing, and a lot of
useless info is given. And it's also written in a do this, then that,
but don't think style.

For example, your part about system tweaks and linux emulation, do you
really think some newbie user will understand this? Besides it works only
on i386. You also got PKG_PATH wrong. And you can just answer yes during
installation to have ntpd started. Using cdrecord with a .tgz? Have you
tried that?

Your section about X11 is very incomplete. For instance, you mention
.xinitrc, later (even in a totally different section) xdm_flags, total
chaos. You suggest people to set DefaultDepth 24, but you don't even say
what this is.

Double check what you write, and ask yourself whether it is well
organized and can be understood by your target audience (that's windows
users, according to the title!) ...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: OpenCVS Questions

2005-11-04 Thread steven mestdagh
On Fri, Nov 04, 2005 at 01:17:29PM -0800, J.C. Roberts wrote:
 I was looking to learn more about OpenCVS, in particular, reading the
 cvsintro docs mentioned here:
 
 http://www.opencvs.org/manual.html

OpenCVS is not yet released and still under development.

 Unfortunately the links are broken. Could someone drop-kick me in the
 right direction? I need to (better) learn both CVS usage and CVS
 setup/administration.

As always, try the manual page. It will point you to 'info cvs', which
should give a good overview.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Help on pkg_add error

2005-10-29 Thread steven mestdagh
On Sat, Oct 29, 2005 at 11:47:45AM -0700, PARAMVIR DHINDSA wrote:
 #pkg_add gnome-desktop-2.8.1.tgz
 gnome-desktop-2.8.1: Can't find libiconv-1.9.2
 /usr/sbin/pkg_add: libiconv-1.9.2: Fatal error.

what is your PKG_PATH variable set to?

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: setxkbmap dumping core?

2005-10-28 Thread steven mestdagh
On Fri, Oct 28, 2005 at 12:35:07PM +0200, frantisek holop wrote:
 hi there,
 
 i am using a snapshot from
 
 OpenBSD 3.8-current (GENERIC) #196: Mon Oct 17 14:32:07 MDT 2005
 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
 
 and setxkbmap is dumping core:
 
 amaaq setxkbmap
 Couldn't interpret _XKB_RULES_NAMES property
 Use defaults: rules - 'xorg' model - 'pc101' layout - 'us'
 setxkbmap: (0xcfbece4c)
 setxkbmap in free(): error: ifree: junk pointer, too high to make sense
 Abort trap (core dumped)
 
 
 is anybody seeing this?

no. upgrading does not install xetc38.tgz. did you extract it manually?

-- 

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Migrating to a new HD

2005-10-26 Thread steven mestdagh
On Wed, Oct 26, 2005 at 12:42:04PM +0200, Han Boetes wrote:
 Hi,
 
 I just wrote this article about migrating to a new HD after the
 old one got too flakey.
 
 I maintain the original over here:
 
   http://www.xs4all.nl/~hanb/documents/hd-migration
 
 
 HD MIGRATION:
 
 It started with my HD failing to sync when I was rebooting. And
 some odd errormessages I saw. So I was holding my breath hoping
 for it to be something else or just an incident. But it only got
 worse. So After a reboot and nearly loosing a lot of important
 stuff I decided to make the switch. And after a struggle with cp
 and rsync I had everything set like I should I found out that an
 old lilo was still haunting the MBR and I knew no way to get rid
 of it since I had no floppy. So, I could start all over again.
 
 I decided to write it all down so noone would have to suffer the
 same as me. After some tips on #OpenBSD I found the following
 procedure:
 
 My original harddisk was wd0 and the usb2 external drive sd0 is
 the new drive, which I will swap with the old drive after all is
 done.
 
 # I use the whole disk and this is the command I had to use in the
 # first instance to get rid of lilo.
 
 fdisk -i sd0
 
 # Now I could also reconsider my partitiontable and I increased my
 # /var partition which I wanted to do for a long time. You can
 # also add or remove partitions if you like that. After having the
 # right partition table in my mind I disklabel. It's a pretty
 # straightforward tool, so I won't bother explaining how it works.
 
 disklabel -e sd0
 
 # newfs is also really simple.
 
 newfs /dev/sd0a
 newfs /dev/sd0d
 # etc, etc.
 
 # And then I mounted the new filesystem. The extra options speed
 # up the copying of files.
 
 mkdir /mnt/new
 mount -o async,noatime,softdep /dev/sd0a /mnt/new
 cd /mnt/new
 mount -o async,noatime,softdep /dev/sd0d tmp
 mount -o async,noatime,softdep /dev/sd0e var
 mount -o async,noatime,softdep /dev/sd0f usr
 mount -o async,noatime,softdep /dev/sd0g home
 
 # First I prepared the dirs I didn't want to copy.
 
 mkdir dev
 cp /dev/MAKEDEV dev
 cd dev
 ./MAKEDEV all
 cd ..
 
 mkdir altroot kern mnt proc stand tmp
 
 # Also make sure you set the right permissions for /tmp
 
 chmod 1777 /tmp
 
 # There are two ways I found pretty comfortable to copy dirs. cp
 # -Rp is fast. rsync shows what's going on, and you can easily
 # update the remaining differences. So if you don't want to use
 # rsync you'll have to do the copying in single user mode.
 
 cp -Rp /etc .
 rsync -aP /var .
 
 # And so on and so forth for all remaining dirs and files and
 # symlinks in /
 
 # Actually right before I swapped the drives I went into single
 # usermode and copied over the last changes to /var and /home with
 # rsync.
 
 # Then I installed the bootloader.
 
 cp usr/mdec/boot .
 cd usr/mdec
 ./installboot /mnt/new/boot ./biosboot sd0
 
 # After that I switched the drives, double-checking the
 # master/slave selector. And I booted with the new and HD and
 # rejoiced.

some thoughts:
1. make backups: dump(8) and restore(8) are your friends.
2. wouldn't it be much easier to use the installer to install OpenBSD onto
   the new hard disk, boot from the new disk when finished, mount your old
   disk and copy over files as desired? (you could consider unplugging
   the old disk if it is going bad, and plug it back in when you're
   ready to start copying.)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Problem installing nmap from packages

2005-10-26 Thread steven mestdagh
On Wed, Oct 26, 2005 at 02:55:02PM +0200, Rico wrote:
 Hi,
 
 I tried installing nmap and got some dependency problems. I am running 
 snapshots.
 
 pkg_add
 ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/i386/nmap-3.93.tgz
 Can't install 
 ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/i386/nmap-3.93.tgz: 
 lib not found pcap.3.1
 Even by looking in the dependency tree:
 gettext-0.10.40p3, libiconv-1.9.2p1, libdnet-1.10p0, 
 glib-1.2.10p0, pcre-4.5p1, gtk+-1.2.10p3
 Maybe it's in a dependent package, but not tagged with @lib ?
 (check with pkg_info -K -L)
 If you are still running 3.6 packages, update them.

try a newer snapshot. you probably have an older version of the libpcap
library.

and please ask this kind of questions on ports@ ...

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: DISKLESS tutorial that need feedback

2005-10-22 Thread steven mestdagh
On Sat, Oct 22, 2005 at 10:13:06PM +0100, Stuart Henderson wrote:
 On 2005/10/22 21:05:25, [EMAIL PROTECTED] wrote:
  But I see no difference to simple ASCII-Textfiles anymore
 
 Ahh, do you know of a nice simple console-mode pdf viewer then?

try pdftotext, it's in the xpdf package.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: passwd: /sbin/nologin --- not working for me

2005-10-21 Thread steven mestdagh
On Fri, Oct 21, 2005 at 07:53:52AM +0200, morla wrote:
 hello all,
 
 i just made up a second account on my box and wanted to prevent the old 
 one from loging into it, due i want to keep it for email retrival.
 
 when i enter something like
 
  morla:*:1000:1000:morla:/home/morla:/sbin/nologin
 
 into /etc/passwd and a similary entry into /etc/master.passwd should'nt 
 this keep me out???

did you use vipw(8) ?  this automatically updates the user database.


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Opera Confusion

2005-10-18 Thread steven mestdagh
On Tue, Oct 18, 2005 at 09:44:41AM -0400, Roy Morris wrote:
 Does the port (not pkg) of Opera contain flash?
 I was checking through the mail list, one guy
 says it works great and another says you can't
 include it on Openbsd. I saw something about a
 port FLAVOR but didn't see it in the makefile. I'd
 rather not install all the shit from scratch just to
 find out.

you should ask this type of question on the ports@ mailing list !

-current has a port in www/opera-flashplugin, 3.7 and 3.8 do not have flash
in the tree.  but you can use flash with opera, after unpacking the flash
files it comes down to

cp libflashplayer.so /usr/local/lib/opera/plugins

but of course this bypasses the pkg* system...

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: cvs usage question

2005-10-17 Thread steven mestdagh
On Mon, Oct 17, 2005 at 09:49:21AM -0400, stan wrote:
 I;m trying to update the source tree on a 3.7 machine to current I did the
 following (based upon my reading of the web site docs on this):
 
 cd /usr/src
 setenv [EMAIL PROTECTED]:/cvs
 cvs -q get -P src
 
 But all I got were these error messages:
 
 cvs server: cannot find module `src' - ignored
 cvs [checkout aborted]: cannot expand modules
 
 
 What am I doing wrong?

you don't need the equation sign:
setenv CVSROOT [EMAIL PROTECTED]:/cvs

or you need to use export if you use ksh.
use 'echo $CVSROOT' to see if this variable is set correctly.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: wi(4) or wicontrol broken

2005-10-16 Thread steven mestdagh
On Sat, Oct 15, 2005 at 11:53:42PM -0600, Ludwig Mises wrote:
 I upgraded to OPENBSD_3_8_BASE (after first upgrading to the snapshot from
 10/14) and wicontrol no longer seems to work:

quoting http://www.openbsd.org/faq/faq5.html#Flavors :

One should also understand that the update process is supported in only
one direction: from older to newer, and from -stable to -current. You
can not run 3.7-current (or a snapshot), then decide you are living too
dangerously, and step back to 3.7-stable. You are on your own if you
choose any path other than the supported option of reloading your system
from scratch, do not expect assistance from the OpenBSD development team.

You tried to go back...  (3.8-current - OPENBSD_3_8_BASE which
corresponds to 3.8-release).  If you want 3.8-release, the easiest thing to
do will be to wait for the actual release, and then install from scratch.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: HOWTO on spamd+transparent bridge under OpenBSD

2005-10-14 Thread steven mestdagh
On Fri, Oct 14, 2005 at 03:11:59PM -0500, Graham Toal wrote:
 For anyone who is interested, I've written up a document on
 how to install OpenBSD, configure it as a transparent bridge,
 then install spamd on it.  It was written primarily for our
 campus computer center who want to know how to do it if something
 happens to me (like I get a better job elsewhere for example ;-) )
 but I think I've written it generally enough that it will be
 of use to anyone.
 
 The page is here:  
 http://wiki.utpa.edu/InfoSec/GreyListingInstall?action=print

Some quick feedback...
You write (allow me to turn off caps):

 The disk formatting is a major pain.

Why?

[...]
 password for root acct?  write it down, you'll need it later

Writing down passwords, are you serious?

[...]
 OpenBSD doesn't appear to support multiple consoles using the F keys the
 way linux does.

Try CTRL+ALT+F2/F3...  it's in the FAQ.

Also, I don't see the need for a ports tree on this type of system,
and your installation of the screen application looks horrible.

Wouldn't it be better to skip the installation part, and point people to
the OpenBSD FAQ (especially faq4.html), and to the afterboot(8) manual page?

When you copy over pf.conf, do you set its owner/permissions correctly?
Anyway, /etc/security will let you know if you didn't. :)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: HOWTO on spamd+transparent bridge under OpenBSD

2005-10-14 Thread steven mestdagh
On Fri, Oct 14, 2005 at 04:54:24PM -0500, Graham Toal wrote:
   The disk formatting is a major pain.
 
  Why?
 
 I don't know why, I just know that both myself (experienced in BSD and BSDI
 from days gone by, and linux in recent years, but not OpenBSD at all)
 plus a colleague at work who has a fair bit of OpenBSD experience both
 have wasted literally days with formatting problems.  So having found
 a working recipe that seems easy, I thought it was worth pointing out
 to folks that if you do something else, you might hit the hassles we
 did.  I had tried to reuse an old partition table and failed even though
 it sure looked OK to me - the install program wouldn't progress past
 the formatting section; my friend had problems when he formatted the
 swap partition before the data partition.

never had any such problems. really, the FAQ covers disk setup quite
extensively!

  Writing down passwords, are you serious?
 
 To each his own :-)  I generally find that if you create a 'strong'
 password, you pretty much have to write it down until you remember it.

that sounds really funny. have you really written down everything that
is now stored in your brain? :)

  Try CTRL+ALT+F2/F3...  it's in the FAQ.
 
 So I've been told :-/  Unless you know something is there to go look
 for it, you don't come across it

well, the FAQ index is really not that long to have a quick look.

  Also, I don't see the need for a ports tree on this type of system,
  and your installation of the screen application looks horrible.
 
 Problem with 3.6 boot CD and 3.7 installation I think.  The Jove
 ports install was smooth, but for some reason screen screamed.

you can just skip screen since you now know you can use multiple
terminals with ctrl+alt+F2 etc.

  Wouldn't it be better to skip the installation part, and point people to
  the OpenBSD FAQ (especially faq4.html), and to the afterboot(8) manual page?
 
 No, but I'll certainly add those pointers.  And it *is* a wiki page.  If
 you feel that what I've said is just plain wrong or misleading, please
 feel free to go in there yourself and correct it.  Just bear in mind
 it was written by someone who needed to use OpenBSD to support a
 specific tool and who before this had no OpenBSD experience, for an
 audience who are in the same boat.  It's definitely not a proper
 it's a How I managed to make it work after two weeks of
 struggling, so that hopefully you can make it work in two hours
 of slavishly typing exactly what I say :-)

Well... that will encourage people to not think, which is an evil thing!
If you take a look at the OpenBSD documentation (manuals and FAQ), you
will see it has been written very carefully, and it never just lists a
bunch of commands that people can blindly copy. Instead it explains what
is happening, so people _understand_.

I'm not sure people will really save time with this document.
You fetch the ports tree (the wrong one, even if it worked for you it is the
wrong one) from CVS, while you do not need it. No need to make coffee then,
either. :) Using pkg_add and PKG_PATH will work fine.
People also don't need bash, ksh is fine. If you're really worried about
Linux users, point them to faq9.html.
Where you point people to lynx, it's easier to use ftp(1), and it's also
useless since your next line is saying pkg_add.

Instead of releasing this worked for me type of documents, maybe your
efforts would be better spent writing a clean document that does not
suffer factual inaccuracies, does not deviate too much from the actual
topic, adds explanations where appropriate, etc. Yes, it's not an easy
task. :)

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: boot-problem

2005-10-09 Thread steven mestdagh
On Sun, Oct 09, 2005 at 08:26:19PM +0200, Roelof Wobben wrote:
 Hello,
 
 After installing Openbsd 3.7 i have accidently booted the process before i
 could copy openbsd.pbr to win xp.

Accidentally? Are you positive your installation is finished?

 Is there a way i could get into Openbsd with the installation cd so i could
 copy openbsd.pbr or do i have to do the installation again.

(assuming your installation was really finished...)
The installation cd boots the OpenBSD kernel. After that, choose the shell
option, mount your disk, copy the file as needed.

OR you can use boot -a at the boot prompt, then it will ask for your root
device and boot into your installed OpenBSD system. note that in this case
you will still be using the RAMDISK kernel from the cd, not the usual
GENERIC kernel...


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Documentation bug in WWW FAQ???

2005-10-03 Thread steven mestdagh
On Mon, Oct 03, 2005 at 04:35:36PM +0100, Bryan wrote:
 I recently attempted to dualboot my laptop with Windows XP.  I was
 following the FAQ and came to the point where I issued this command:
 
 dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1
 
 And the system tells me that:
 
 
 /dev/rsd0a not configured
 
 I did a google search to see if I did anything wrong and I found this site:
 
 
 http://darkuncle.net/OpenBSD/OpenBSD_dualboot.txt
 
 I found the following passage:
 
 -
 When you're done installing, pop in a USB key or floppy, mount it
 (for a USB key, I do mount_msdos /dev/sd0i /mnt; for a floppy, it's
 mount_msdos /dev/fd0a /mnt) and do the following to grab your OpenBSD
 primary boot record:
 
 # dd if=/dev/rwd0a of=/mnt/openbsd.pbr bs=512 count=1
 
 Now reboot the machine into Windows, and copy the openbsd.pbr file you just
 created to C:\openbsd.pbr in Windows. If you don't have a floppy or USB key
 available to tranfer your openbsd.pbr with, you can copy it to another
 machine on your network, reboot into Windows, and copy it back.
 -
 
 
 The dd command above does allow me to save openbsd.pbr, and with
 this, I can dualboot.  I just wanted to give a heads-up that if the
 FAQ doesn't allow you to dualboot, then the above might work.  I
 thought that maybe it was a typo, since rsd0a and rwd0a differ by
 one letter, and those differing letters lie close on the keyboard.

it is not a typo, just another possibility. maybe you want to have a look
at the wd(4) and sd(4) manual pages.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Java with mozilla-firefox

2005-09-30 Thread steven mestdagh
On Fri, Sep 30, 2005 at 03:53:48PM +0200, Rico wrote:
 Hi
 
 I am trying to get java working on mozilla-firefox on obsd37.
 
 I have installed the jdk1.4 from ports and the installation went well. I 
 have created the symbolic link from libjavaplugin_oji.so to 
 /home/user/.mozilla/plugins
 
 Doing about:plugins in the browser java shows up as installed.
 
 When I try to look at a page with java, firefox crashes.
 
 Is there anything I am missing perhaps.

yes, your resource limits are probably not high enough. change them with
'ulimit -d' or something similar.  my java_vm here is using about 200M
of memory, which is higher than the default limit in 3.7.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Time limited internet connection

2005-09-24 Thread steven mestdagh
On Sat, Sep 24, 2005 at 08:45:25PM +1000, Rod.. Whitworth wrote:
 On Sat, 24 Sep 2005 13:29:18 +0300, Kiraly Zoltan wrote:
 
 I want to build a home network using OpenBSD as gateway. A child in 
 network have a computer, and like to surf the Internet. I want to drop 
 her Internet connection at night (11:00AM) because the child don't go to 
 sleep.
 
 11 AM at night is a very strange time seeing that AM literally means
 before noon
 
 I don't want to unplug the network cable, i need to do this job with 
 OpenBSD.
 
 Exist a proxy server or solution which limit the Internet connection 
 using time? An example: Drop internet connection at 11:AM night and 
 allow Internet at 6:00 AM morning.
 
 Thank you very much
 
 
 
 
 How about two pf.conf files (pf6to23.conf and pf 23to6.conf) and a
 couple of cron entries to do pfctl -f pf6to23.conf and pfctl -f
 pf23to6.conf ?

wouldn't it be easier to set up a table with IPs to block and put the IP of
this computer in that table at night/remove it again in the morning?
should be easy with pfctl.

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: recommended USB 2.0 host adapters?

2005-09-24 Thread steven mestdagh
On Sun, Sep 18, 2005 at 02:34:10AM +0100, Niall O'Higgins wrote:
  I'm going to extend my i386 machine with a USB 2.0 (PCI) host adapter.
  Are there any recommended cards or cards that I should not buy or that
  do not work?
 
 I think they are pretty much all ehci(4).

yep, bought a Eminent EM1038 which has a NEC chip, it just works.
thanks,

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Mounting a ntfs partition..

2005-09-21 Thread steven mestdagh
On Wed, Sep 21, 2005 at 11:52:21AM +0200, tronss wrote:
 Hi,
 
 I'd like to know how can I mount a ntfs partition in my first hdd to 
 scan my windows xp with antivir antivirus.
 
 I have option ntfs in GENERIC kernel and compiled like that, but when I 
 try to do: mount -t ntfs /dev/wd0a /mnt tells me device not 
 configured. I see
 
 Can you help me?.
 
 Thanks.
 
 tronss
 
 
 My disklabel:
 
 disklabel: warning, DOS partition table with no valid OpenBSD partition
 # /dev/rwd0c:
 type: ESDI
 disk: ESDI/IDE disk
 label: Maxtor 6Y120P0
 flags:
 bytes/sector: 512
 sectors/track: 63
 tracks/cylinder: 16
 sectors/cylinder: 1008
 cylinders: 16383
 total sectors: 240121728
 rpm: 3600
 interleave: 1
 trackskew: 0
 cylinderskew: 0
 headswitch: 0   # microseconds
 track-to-track seek: 0  # microseconds
 drivedata: 0
 
 16 partitions:
 # sizeoffset  fstype [fsize bsize  cpg]
  c: 240121728 0  unused  0 0  # Cyl 0 
 -238215
  i: 24010742763 unknown   # Cyl 
 0*-238201*
 ^
you will need to use /dev/wd0i instead of /dev/wd0a

-- 

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



recommended USB 2.0 host adapters?

2005-09-17 Thread steven mestdagh
hi,

I'm going to extend my i386 machine with a USB 2.0 (PCI) host adapter.
Are there any recommended cards or cards that I should not buy or that
do not work?

thanks,

-- 
steven


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: Onboard and USB Sound Trouble

2005-07-19 Thread steven mestdagh
 Hello
 
 
 I have installed and used sound successfully in the past. I reread the
 man and faq pages
 about sound but still no good.
 
 This is an amd64 setup so I dont know if that is the reason for my
 trouble. On motherboard
 is nForce4 AC97 and USB is Creative Technology SB Live! 24-bit External.
 
 Neither one works (or seems to work) but both are supported as far as
 I know. The weirdest
 thing is that the usb audio comes up as uaudio0 and audio1 on the
 dmesg, however there
 is no /dev/audio1 nor /dev/uaudio0. Am I missing something here?

you can create extra device nodes with MAKEDEV(8).  in your case that
would be audio1 and mixer1.  then you can point audioctl and mixerctl
to the correct device with the -f flag or recreate the symlinks audio
and mixer to point to the right device.

if you decide to use only one sound device, you could also disable for
example the onboard sound in your kernel. then your USB sound will end
up at audio0 - see boot_config(8).

no idea why you onboard sound isn't working. do you get any errors when
using audio software, like mpg123, xmms, ... ?  if you don't get errors,
you could try unmuting all outputs, sometimes some of them get swapped.

steven



skc0: bad VPD resource id: expected 82 got 0

2005-05-13 Thread steven mestdagh
hello,

the sk integrated in the MSI K8N Neo4 Platinum mainboard of this machine
is giving device not configured. the following message appears
(full dmesg below):
skc0: bad VPD resource id: expected 82 got 0

also, the fd0 device is not recognized. it works fine with an i386 kernel.

thanks for any suggestions.
steven


OpenBSD 3.7-current (GENERIC) #89: Tue May 10 12:44:38 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 2147020800 (2096700K)
avail mem = 1836572672 (1793528K)
using 22937 buffers containing 214908928 bytes (209872K) of memory
mainbus0 (root)
cpu0 at mainbus0: (uniprocessor)
cpu0: AMD Athlon(tm) 64 Processor 3800+, 2412.63 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 
16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
pci0 at mainbus0 bus 0: configuration mode 1
vendor Nvidia, unknown product 0x005e (class memory subclass miscellaneous, 
rev 0xa3) at pci0 dev 0 function 0 not configured
vendor Nvidia, unknown product 0x0050 (class bridge subclass ISA, rev 0xa3) 
at pci0 dev 1 function 0 not configured
Nvidia nForce4 SMBus rev 0xa2 at pci0 dev 1 function 1 not configured
ohci0 at pci0 dev 2 function 0 vendor Nvidia, unknown product 0x005a rev 
0xa2: irq 10, version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: Nvidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 10 ports with 10 removable, self powered
ehci0 at pci0 dev 2 function 1 vendor Nvidia, unknown product 0x005b rev 
0xa3: irq 11
usb1 at ehci0: USB revision 2.0
uhub1 at usb1
uhub1: Nvidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub1: 10 ports with 10 removable, self powered
auich0 at pci0 dev 4 function 0 Nvidia nForce4 AC-97 rev 0xa2: irq 12, 
nForce4 AC97
ac97: codec id 0x414c4790 (Avance Logic ALC850)
audio0 at auich0
pciide0 at pci0 dev 6 function 0 Nvidia nForce4 IDE rev 0xa2: DMA 
(unsupported), channel 0 configured to compatibility, channel 1 configured to 
compatibility
wd0 at pciide0 channel 0 drive 0: WDC WD2000JB-00GVA0
wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
pciide0: channel 1 ignored (not responding; disabled or no drives?)
ppb0 at pci0 dev 9 function 0 vendor Nvidia, unknown product 0x005c rev 0xa2
pci1 at ppb0 bus 1
VIA VT6306 FireWire rev 0x80 at pci1 dev 12 function 0 not configured
pciide1 at pci1 dev 13 function 0 CMD Technology SiI3114 SATA rev 0x02: DMA
pciide1: using irq 11 for native-PCI interrupt
Nvidia CK804 LAN rev 0xa3 at pci0 dev 10 function 0 not configured
ppb1 at pci0 dev 11 function 0 vendor Nvidia, unknown product 0x005d rev 0xa3
pci2 at ppb1 bus 2
ppb2 at pci0 dev 12 function 0 vendor Nvidia, unknown product 0x005d rev 0xa3
pci3 at ppb2 bus 3
skc0 at pci3 dev 0 function 0 Marvell Yukon 8053 rev 0x15: irq 11
skc0: bad VPD resource id: expected 82 got 0
skc0: Marvell Yukon (Unknown) Gigabit Ethernet (0x1)
sk0 at skc0 port A: address 00:0c:76:4e:e6:68
skc0: unknown device type 182sk1 at skc0 port B: address 00:0c:76:4e:e6:68
skc0: unknown device type 182ppb3 at pci0 dev 13 function 0 vendor Nvidia, 
unknown product 0x005d rev 0xa3
pci4 at ppb3 bus 4
ppb4 at pci0 dev 14 function 0 vendor Nvidia, unknown product 0x005d rev 0xa3
pci5 at ppb4 bus 5
vga1 at pci5 dev 0 function 0 ATI Radeon X300 rev 0x00
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ATI Radeon X300 Sec rev 0x00 at pci5 dev 0 function 1 not configured
pchb0 at pci0 dev 24 function 0 AMD AMD64 HyperTransport rev 0x00
pchb1 at pci0 dev 24 function 1 AMD AMD64 Address Map rev 0x00
pchb2 at pci0 dev 24 function 2 AMD AMD64 DRAM Cfg rev 0x00
pchb3 at pci0 dev 24 function 3 AMD AMD64 Misc Cfg rev 0x00
isa0 at mainbus0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
lm0 at isa0 port 0x290/8: W83627THF
umass0 at uhub1 port 8 configuration 1 interface 0
umass0: USB2.0 External Mass Storage Device, rev 2.00/0.01, addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets
cd0 at scsibus0 targ 1 lun 0: LITE-ON, DVDRW LDW-851S, GS0C SCSI0 5/cdrom 
removable
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302