Re: assistance request for IKEv2 VPN setup with iked

2021-10-21 Thread Crystal Kolipe
On Thu, Oct 21, 2021 at 10:23:51AM +0200, Johann Belau wrote: > Dear all, > > I am in desperate need of assistance for setting up an IKEv2 VPN tunnel to a > remote LAN with OpenBSD as my VPN gateway. > > A short outline of what I'm trying to achieve: > > 1. I have a remote private LAN with

Re: How does bsd.upgrade work?

2021-10-21 Thread Theo de Raadt
tetrahe...@danwin1210.me wrote: > On Mon, Oct 18, 2021 at 07:41:57PM -, Stuart Henderson wrote: > >> I resolved the problem. The solution was to run `sysupgrade -n` to > >> download all the upgrade files, and leave the `bsd.upgrade` kernel in > >> place, next to the `bsd` kernel I usually

Re: Base httpd authentication against RADIUS server?

2021-10-21 Thread Sebastian Benoit
Federico Giannici(giann...@neomedia.it) on 2021.10.20 08:09:54 +0200: > From the man page It seems that httpd in base can authenticate only > against a standard passwd file. Is there no way (apart from modifying > source and recompiling) to authenticate with something else, like a > RADIUS

Re: How does bsd.upgrade work?

2021-10-21 Thread Theo de Raadt
tetrahe...@danwin1210.me wrote: > On Mon, Oct 18, 2021 at 05:41:26PM +0200, Florian Obser wrote: > >I wouldn't call this "resolved". You are missing the point that > >bsd.upgrade should run automatically. *shrug* > > My setup is not standard, so it's normal that bsd.upgrade not run >

assistance request for IKEv2 VPN setup with iked

2021-10-21 Thread Johann Belau
Dear all, I am in desperate need of assistance for setting up an IKEv2 VPN tunnel to a remote LAN with OpenBSD as my VPN gateway. A short outline of what I'm trying to achieve: 1. I have a remote private LAN with Windows Servers and one OpenBSD gateway (gateway has a public IP, the rest of

Re: How BSD Authentication Works

2021-10-21 Thread Theo de Raadt
Dante Catalfamo wrote: > Hello friends, > > I just published a blog post about the BSD Authentication framework > and I'm very excited to share it with you! > > I'm not an OpenBSD developer but I tried my best to understand the > system and how it works. Please let me know if I got anything

Re: Ifconfig error - SIOCSETPFLOW

2021-10-21 Thread Theo de Raadt
It is 'working for you' until we remove dhclient in a future release. ... Antonino Sidoti wrote: > HI, > > I added ‘!dhclient \$if’ to the /etc/hostname.em0 and removed ‘dhcp’. It is > working now with no errors on startup and the interface ‘pflow0’ now working > properly. > > pf enabled >

Re: Exit status of pkg_add

2021-10-21 Thread Marc Espie
On Tue, Oct 19, 2021 at 10:42:04AM +0900, Yuichiro NAITO wrote: > Following patch changes pkg_add to return a error code, > if a package name is wrong. > > diff --git a/usr.sbin/pkg_add/OpenBSD/AddDelete.pm > b/usr.sbin/pkg_add/OpenBSD/AddDelete.pm > index 7a968cbf05d..39bee874ff1 100644 > ---

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Sebastian Benoit
J. K.(openbsd.l...@krottmayer.com) on 2021.10.21 14:10:16 +0200: > Another question, to httpd(8). Tried the following query. > Used an invalid HTTP Version number (typo). > > $ telnet 10.42.42.183 80 > [Shortened] > GET / HTTP/1.2 > [content] > > httpd provide here the site. Without checking the

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Claudio Jeker
On Thu, Oct 21, 2021 at 01:21:33PM +0200, Sebastian Benoit wrote: > J. K.(openbsd.l...@krottmayer.com) on 2021.10.21 11:55:47 +0200: > > Hi, > > > > I don't know if this is a real issue from OpenBSD's httpd(8). > > Tried some requests to httpd(8) for the purpose of education. > > > > Simple

Re: How does bsd.upgrade work?

2021-10-21 Thread Raul Miller
A couple minutes of looking things up suggest https://marc.info/?l=openbsd-tech=141807224826859 as a plausible starting point for that kind of inquiry. Take care, -- Raul On Thu, Oct 21, 2021 at 8:15 AM wrote: > > On Tue, Oct 19, 2021 at 09:32:21PM +0100, Stuart Henderson wrote: > >> That's

Re: http(8) - PHP 8.0.11 - excecute shell command return code 127 (not found)

2021-10-21 Thread J. K.
Hi Stuart! Sorry, for my late response. On 19.10.21 13:35, Stuart Henderson wrote: > > You need to provide $CHROOT/bin/sh as well for php's exec() function to work. > Thank you. Solved the issue. Didn't know that. Best regards, J.K.

Re: drmfreeze

2021-10-21 Thread Emiel Kollof
On Tue, 2021-10-19 at 18:51 +1300, Avon Robertson wrote: > > Avon Robertson [avo...@xtra.co.nz] wrote Also happens to me on amdgpu/navi10 (even after downgrading the firmware to the 6.8 ones): Oct 18 01:26:36 polaris /bsd: drm:pid0:smu_v11_0_check_fw_version *WARNING* SMU driver if version not

Re: Issue on RPi4 upgrade to 7.0

2021-10-21 Thread Nenhum_de_Nos
Hi, I gave it a thought and tried to find any options on sysupgrade to roll back, but I couldn't find no option foe this on its help page. Should I reinstall 6.9 from scratch and config it again? Thanks, Matheus On October 20, 2021 7:44:40 PM GMT-03:00, Noth wrote: >You're better off

Re: traceroute losses

2021-10-21 Thread Michael Hekeler
Am 13.10.21 09:58 schrieb Peter J. Philipp: > On Wed, Oct 13, 2021 at 08:02:35AM +0200, Michael Hekeler wrote: > > Hello list, > > > > I have question regarding network/routing. However it is not directly > > openbsd related (I can see the same even on windows machines) I decided > > to ask here

httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread J. K.
Hi, I don't know if this is a real issue from OpenBSD's httpd(8). Tried some requests to httpd(8) for the purpose of education. Simple tried the following request: $ telnet 10.42.42.183 80 Trying 10.42.42.183... Connected to 10.42.42.183. Escape character is '^]'. GET / HTTP/1.1 fasfsdfsfd

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Stuart Henderson
On 2021-10-21, J. K. wrote: > A request from me (for this list): > I'm still having troubles with the OpenBSD mailing list. My DKIM key > will always be removed. Don't know why. My DMARC setting is restrict. > No issues with Google as example. > > Don't want to break or spam the list. > > Can

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Sebastian Benoit
J. K.(openbsd.l...@krottmayer.com) on 2021.10.21 11:55:47 +0200: > Hi, > > I don't know if this is a real issue from OpenBSD's httpd(8). > Tried some requests to httpd(8) for the purpose of education. > > Simple tried the following request: > > $ telnet 10.42.42.183 80 > Trying 10.42.42.183...

Re: How does bsd.upgrade work?

2021-10-21 Thread Janne Johansson
https://marc.info/?l=openbsd-tech=138829898720574=2 and https://marc.info/?l=openbsd-tech=139013674405106=2 might help. Den tors 21 okt. 2021 kl 14:26 skrev Raul Miller : > > A couple minutes of looking things up suggest > https://marc.info/?l=openbsd-tech=141807224826859 as a plausible >

Re: traceroute losses

2021-10-21 Thread Stuart Henderson
On 2021-10-21, Michael Hekeler wrote: > According to the DB hoster the loss showing at traceroute's output on > hop 4 and 5 of 9 would provide reliable proof that the connection is the > culprit. > Now I understand that this conclusion is not automatically true. > Hops 6,7,8,9 showed no more than

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Claudio Jeker
On Thu, Oct 21, 2021 at 04:38:43PM +0200, Sebastian Benoit wrote: > J. K.(openbsd.l...@krottmayer.com) on 2021.10.21 14:10:16 +0200: > > Another question, to httpd(8). Tried the following query. > > Used an invalid HTTP Version number (typo). > > > > $ telnet 10.42.42.183 80 > > [Shortened] > >

Successfully upgraded RPIv4 to 7.0

2021-10-21 Thread Peter J. Philipp
Hi, I just wanted to say that I successfully upgraded my RPIv4 to OpenBSD 7.0. I want to share my experience: 1. Wasn't sure if I should hold off or not and after seeing so many FAIL reports I learned off them. Thank you to all those who failed and all those who

Re: How does bsd.upgrade work?

2021-10-21 Thread tetrahedra
On Tue, Oct 19, 2021 at 09:32:21PM +0100, Stuart Henderson wrote: That's intentional. OK. Since you didn't realise this breaks sysupgrade you might also not realise it weakens RNG initialisation, it is not recommended Where can I read more about this?

Re: drmfreeze

2021-10-21 Thread Chris Cappuccio
Emiel Kollof [em...@kollof.nl] wrote: > > Also happens to me on amdgpu/navi10 (even after downgrading the > firmware to the 6.8 ones): > This appears to be a totally different failure than found by Avon. It's also on a different class of hardware. My suggestion to try an older firmware was

xlock doesn't unlock any more

2021-10-21 Thread Ed Ahlsen-Girard
After a reinstall and restore of data and /usr/local (not the rest of /usr, that is from a fresh snapshot) xlock no longer unlocks. I added the +allowroot option: same behavior. Running cwm. .xsession, .cwmrc, and dmesg below. -- Edward Ahlsen-Girard Ft Walton Beach, FL #!/bin/sh # $Xorg:

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread J. K.
Hi, On 21.10.21 13:31, Claudio Jeker wrote: >> >> Hi, >> >> yes. The server should probably answer with a "Bad Request" instead. >> >> Fix below. ok? > > OK claudio@ > Thanks for the quick fix! Another question, to httpd(8). Tried the following query. Used an invalid HTTP Version number

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Sebastian Benoit
Claudio Jeker(cje...@diehard.n-r-g.com) on 2021.10.21 17:19:02 +0200: > > + version = http_version_num(desc->http_version); > > I woud prefer if this code would store the version not in > desc->http_version until after the strdup(). The way these strdup work is > just wonky.

Re: xlock doesn't unlock any more

2021-10-21 Thread Stuart Henderson
On 2021-10-21, Ed Ahlsen-Girard wrote: > After a reinstall and restore of data and /usr/local (not the rest of > /usr, that is from a fresh snapshot) xlock no longer unlocks. I added > the +allowroot option: same behavior. Running cwm. .xsession, .cwmrc, > and dmesg below. Did xlock lose the

Re: drmfreeze

2021-10-21 Thread Avon Robertson
Hello Emiel, Please read my inline and other comments. On Thu, Oct 21, 2021 at 09:55:46AM +0200, Emiel Kollof wrote: > Avon Robertson schreef op 2021-10-20 20:31: > > >As suggested above by Chris? > >1. Downloaded radeondrm-firmware-20181218.tgz to ~/download/. > >2. # rm -fr

Re: drmfreeze

2021-10-21 Thread Chris Cappuccio
Emiel Kollof [em...@kollof.nl] wrote: > Chris Cappuccio schreef op do 21-10-2021 om 07:56 [-0700]: > > > This appears to be a totally different failure than found by Avon. > > It's also on a different class of hardware. > > Is it? The errors seem very similar. Also, Avon's dmesg suggests he's >

Re: drmfreeze

2021-10-21 Thread Emiel Kollof
Chris Cappuccio schreef op do 21-10-2021 om 07:56 [-0700]: > This appears to be a totally different failure than found by Avon. > It's also on a different class of hardware. Is it? The errors seem very similar. Also, Avon's dmesg suggests he's using amdgpu as well. I wonder why he deletes all

Re: drmfreeze

2021-10-21 Thread Avon Robertson
On Thu, Oct 21, 2021 at 03:12:33PM -0700, Chris Cappuccio wrote: > Emiel Kollof [em...@kollof.nl] wrote: > > Chris Cappuccio schreef op do 21-10-2021 om 07:56 [-0700]: > > > > > This appears to be a totally different failure than found by Avon. > > > It's also on a different class of hardware. >