Bug in pdksh when trapping EXIT ERR

2007-07-10 Thread Clint Pachl
I wanted to know if others thought pdksh v5.2.14's behavior is incorrect when trapping the EXIT and ERR. I wrote four tests to demonstrate. TEST_1 fails in my opinion. I believe it should output the following: ERR EXIT # TEST_1 trap 'echo EXIT' EXIT trap 'echo ERR' ERR set -e cd /X

Re: mysql problem

2007-07-13 Thread Clint Pachl
Otto Moerbeek wrote: On Fri, 13 Jul 2007, Marcos Laufer wrote: I did read the archives, and it helped me to find out that restarting mysql fixes it for some time, and i increased the values several times but no luck. It starts working fine for a while but then again it fails . In the end i

Re: Segmentation fault in sh script using base utilities only

2007-08-05 Thread Clint Pachl
Andris wrote: On 8/5/07, Jacek Masiulaniec [EMAIL PROTECTED] wrote: On 4 Aug 2007, at 19:31, Andris wrote: Hi, I'm writing a set of small utilities as scripts, and I got a segmentation fault working on one of them. The script is suppoused to align text with spaces. Say you have this

Re: howto set global environment variable (e.g. PATH, JAVA_HOME)

2007-08-08 Thread Clint Pachl
pixotec wrote: I want to set the environment variables PATH=$PATH:/usr/local/jdk-1.5.0/bin JAVA_HOME=/usr/local/jdk-1.5.0 globally. for one user I can change therefor .profile like this: PATH=/usr/local/jdk-1.5.0/bin:/bin:... ... export PATH HOME TERM but I want it for all users: 1. could

Re: howto set global environment variable (e.g. PATH, JAVA_HOME)

2007-08-09 Thread Clint Pachl
Lars Hansson wrote: On 8/9/07, Clint Pachl [EMAIL PROTECTED] wrote: Or you could programatically change each user's .profile. Uhm, why? Markus is correct that both /etc/profile and $HOME/.profile are sourced when you log in so to set up global variables you set them in /etc/profile

Compiling Release Patches

2007-08-24 Thread Clint Pachl
Can one reliably compile 4.0 release patches on a 4.1 release system?

Re: Compiling Release Patches

2007-08-24 Thread Clint Pachl
djgoku wrote: On 8/24/07, Clint Pachl [EMAIL PROTECTED] wrote: Can one reliably compile 4.0 release patches on a 4.1 release system? Is there some patches that aren't in 4.1? If so that seem really weird why it wouldn't be. Can you give an example? In my network I have 4.0

Re: Compiling Release Patches

2007-08-25 Thread Clint Pachl
Joachim Schipper wrote: On Fri, Aug 24, 2007 at 10:31:32PM -0700, Clint Pachl wrote: djgoku wrote: On 8/24/07, Clint Pachl [EMAIL PROTECTED] wrote: Can one reliably compile 4.0 release patches on a 4.1 release system? Is there some patches that aren't in 4.1

Re: Compiling Release Patches

2007-08-25 Thread Clint Pachl
Darren Spruell wrote: On 8/25/07, Clint Pachl [EMAIL PROTECTED] wrote: The reason for this is that I can use a single build machine running the current release, and two source trees, current and previous. [1] Well, it usually does, but it can break in interesting ways

Re: sudo wheel group

2007-09-17 Thread Clint Pachl
Matthew Szudzik wrote: The fact that you need to provide normal users with these kind of privileges indicates a possible flaw in your overall scheme. You may find that, after careful reconsideration, there are precious few commands that you would actually have to allow the users to run with

Re: partition layout

2007-10-04 Thread Clint Pachl
Douglas A. Tutty wrote: Hello all, I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put in my P-II and it won't boot it so I've put in in the 486 along with a 1 GB drive. I'm on dialup and would like to avoid a bad partitioning decision requring a whole new install/download cycle

Download or Fetch Packages w/o Install?

2007-10-15 Thread Clint Pachl
Is it possible to download a package and its dependencies, to PKG_CACHE for instance, without installing anything?

Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Clint Pachl
What is the most efficient and secure way to keep the clocks of servers on a network in sync? Because OpenNTPD was designed with security in mind from the start, I was thinking about using ntpd only on all systems. One system would get time from the NTP pool and all other servers on the

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Clint Pachl
Darrin Chandler wrote: On Tue, Oct 23, 2007 at 11:49:57AM -0600, Chris Kuethe wrote: On 10/23/07, Boris Goldberg [EMAIL PROTECTED] wrote: The ntpd from OBSD is raw and lame yet. It takes days (!) to really synchronize, adjusting time and clock frequency back and forth (even if

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Clint Pachl
Theo de Raadt wrote: That is a very interesting anecdote. That has got to make Henning proud; hell I'm proud of him. The amazing thing is that the ntpd binary on my i386 is only 34.4K. The ntpd binary (non-OpenNTPD) on my i386 FreeBSD media center is 263K, not to mention all of the other ntp*

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Clint Pachl
Henning Brauer wrote: * Boris Goldberg [EMAIL PROTECTED] [2007-10-23 15:50]: CP One system would get time from the NTP pool and all other servers on CP the network would sync to the local server. You don't really need ntpd on all systems. One (timeserver) runs ntpd, and others use

Re: ADSL connection (PPPoE)

2005-06-14 Thread Clint Pachl
the connection and eliminate the modem all together? Regards, Clint Pachl

Re: Very slow raid performance with ami(4)

2007-03-30 Thread Clint Pachl
Marco Peereboom wrote: LSI megaraid cards will ALWAYS disable write cache whenever there is no battery backed up memory on the card. No exceptions. The only thing you can do is purchase a BBU and replace the current DIMM. People state disk throughput numbers, but how are these measured? I

Re: acpi is working but halt -p is now working, why?

2007-03-31 Thread Clint Pachl
Jay Jesus Amorin wrote: im running openbsd 4.1-current on my laptop, acpi is working but halt -p is not working, it will just reboot instead of halt, WHY? here's my additional info: # sysctl -aA | grep acpi kern.timecounter.hardware=acpitimer0 kern.timecounter.choice=i8254(0) acpihpet0(1000)

Recommend Technical Networking Book?

2007-04-16 Thread Clint Pachl
Hi all, Can anyone recommend a technical networking book (or links) regarding design, architecture, implementation, monitoring, and best practices? I just purchased a Dell 3248 managed switch, 10 IBM 1U servers, and 10 towers. I would like to practice setting things up on this hardware. I

Re: sk or em

2007-04-16 Thread Clint Pachl
Ronnie Garcia wrote: Chris C. a icrit : I'm in the need to replace my two 100mbit fxp nic's in my firewall with a 1000mbit one. The hardware is kinda old. (PIII) I'm looking for an inexpensive but not bad (so I think no realtek chips) nic. Have looked at sk and bge, but couldn't find any bge

8-Bit RISC Microcontroller Programming

2007-04-17 Thread Clint Pachl
What options are available for programming 8-bit microcontrollers? I found gputils for Microchip and avr for Amtel in the ports. What is the most supported option? gputils in ports is a three year old version; does it work well? Is anyone using Microchip's PICs; if so, what hardware

Layer 2 Fail-over w/ CARP?

2007-04-28 Thread Clint Pachl
I was working on a network design and was wondering if CARP can provide fail-over for a group of layer 2 firewalls? I was thinking one could just associate an interface using carpdev without specifying the IP address or netmask. Would that work? firewall 1 # ifconfig bridge0 create #

Re: another dumb vlan question

2007-05-03 Thread Clint Pachl
Axton wrote: On 5/2/07, Matiss Miglans [EMAIL PROTECTED] wrote: Hi Scenario 1 will be right. Don't mix there normal ethernet with vlan's. Jonathan Whiteman wrote: Lets say I'm setting up vlan devices so that 4 completely separate subnets' gateways can share same ethernet port on the router.

Decoding interface flags (ifconfig)

2007-05-04 Thread Clint Pachl
I'm curious if the flag bits, shown for each interface with ifconfig(8), can be decoded in order to reveal the characteristics of NICs, such as hardware RX/TX checksums and VLAN. So far I have searched: netintro(4) ifmedia(4) inet(4) sys/net/if.c sys/dev/pci/if_em.c But haven't found

Re: another dumb vlan question

2007-05-04 Thread Clint Pachl
Jason Dixon wrote: On Thu, 03 May 2007 23:18:38 -0700, Clint Pachl [EMAIL PROTECTED] wrote: Axton wrote: On 5/2/07, Matiss Miglans [EMAIL PROTECTED] wrote: Hi Scenario 1 will be right. Don't mix there normal ethernet with vlan's. Jonathan Whiteman wrote: Lets say I'm

Re: revenge of stupid vlan questions

2007-05-08 Thread Clint Pachl
Jon wrote: Greetings everybody, So I've set up what I thought should be a proper vlan configuration however something is clearly still not correct. Traffic passes fine to the vlan devices from the external side of the router (I can ping them) however traffic does not seem to pass bewteen the

Re: revenge of stupid vlan questions

2007-05-09 Thread Clint Pachl
Jon wrote: This was very informative. Thank you very much. After re-evaluating the vlan/tagging settings on the 3com switch ports we noticed that they were all set to hybrid mode (so some could be on multiple vlans) but the connection to the router was set to trunking mode instead of hybrid.

Re: Unfamiliar (to me only) ports behavior

2007-05-10 Thread Clint Pachl
John Nietzsche wrote: Dear gentleman/madam, i have just installed openbsd 4.1. I am very happy with it, but something i was not expecting is happening: As an ordinary user (belonging to the group wheel) i switched to the ports collection directory (/usr/ports/x11/openmotif) and issued i make

Re: Unfamiliar (to me only) ports behavior

2007-05-10 Thread Clint Pachl
. FYI2: Please don't top post, it feels unnatural replying to your message. Thanks in advance. On 5/10/07, Clint Pachl [EMAIL PROTECTED] wrote: John Nietzsche wrote: Dear gentleman/madam, i have just installed openbsd 4.1. I am very happy with it, but something i was not expecting

Re: OpenBSD serial terminal binary programs

2007-05-11 Thread Clint Pachl
Matthew Weigel wrote: Zach Keatts wrote: Fortunately this is a sparc machine, Then everything will work fine. It's specifically i386 that sucks so hard. Hey man, not all i386 suck so hard. I have some old IBM xSeries servers that don't even have PS/2 or VGA ports. The only way

Re: Instant Messenger client

2007-05-30 Thread Clint Pachl
stuart van Zee wrote: Does anyone know of a good, easy-to-use client for Yahoo instant messenger in the ports tree. Alternatively, you could use a web app. Meebo.com is a very cool web interface to ICQ, Jabber, AOL, Yahoo, Google, and Microsoft IMs. I've used Gtalk via meebo.com on

Single argument for mv cp

2007-06-16 Thread Clint Pachl
The other day on the Internet I found a shell tip that showed how to use cp or mv with only a single argument. I tried it in the default pdksh in OBSD and it worked. I thought to myself, I can't believe I have been using the shell for over 8 years and didn't know that. Now I can't remember how

Re: most secure graphical browser

2008-01-17 Thread Clint Pachl
Douglas A. Tutty wrote: I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off). There is no graphical browser in base. I don't need or want this browser to do javascript or flash (I have a different

Re: most secure graphical browser

2008-01-17 Thread Clint Pachl
Rico Secada wrote: On Thu, 17 Jan 2008 18:17:54 -0500 Douglas A. Tutty [EMAIL PROTECTED] wrote: On Thu, Jan 17, 2008 at 05:11:53PM -0500, STeve Andre' wrote: On Thursday 17 January 2008 03:42:38 pm Douglas A. Tutty wrote: I have a box that I want to keep as secure as I can but

Re: setting up a noiseless workstation

2008-02-02 Thread Clint Pachl
Zbigniew Baniewski wrote: On Fri, Feb 01, 2008 at 08:16:49PM +0200, Imre Oolberg wrote: As an operating system my first choice would OpenBSD and second is Linux. In fact at the moment i run such a kind of setup using Linux but i feel need to upgrade my hardware, i have old 700 MHz Celeron,

Re: photo/ image viewing software

2008-02-02 Thread Clint Pachl
Chris wrote: I am after a software that would allow me to view photos from my digital camera which I usually mount in /mnt/camera. I tried from the ports tree: digikam, gphoto, gtkam, kphotoalbum, wmphoto, kamera - none of them really work well in showing the pictures; some of them want to

Re: Using CVS to back up /etc

2008-02-19 Thread Clint Pachl
Richard Wilson wrote: Increasingly, I find that I have many servers, especially OpenBSD servers, where the only bit of the hard drive worth backing up is /etc. Good examples are routers or spamtrap boxes where everything is part of base. If a hard drive goes pop, all I need is to install the OS,

Re: More then 1 dhcrelay process on 1 router

2008-03-06 Thread Clint Pachl
Guido Tschakert wrote: Hello folks short: will 2 (or more) dhcrelay work on one router without problems long: I have a router connected to 3 networks: a.b.1.0/24 connected to if1, a.b.2.0/24 connceted to if2, a.b.3.0/24 connected to if3. Lets say I have a dhcpd on a.b.1.1 Is it possible to

Kerberos ~/.k5user file

2008-04-07 Thread Clint Pachl
Is the ~/.k5user file supported in OpenBSD's Heimdal implementation? I'm running OBSD 4.1. kadmin list * root pachl default root/root pachl/root pachl/admin kadmin/admin kadmin/hprop kadmin/changepw krbtgt/MOKAZ.COM changepw/kerberos host/htx.mokaz.com host/kerberos.mokaz.com

Privilege Seperation on HTTP Server in DMZ

2008-04-15 Thread Clint Pachl
I'm running nginx web server on my DMZ servers. It has the ability to run the master process as root and the workers as a non-root user. All logs, pid file, etc. are written by the master process. I was thinking of redirecting port 80 traffic to a non-privileged port via pf and running nginx

Re: aterm, rxvt -- memory usage

2008-04-21 Thread Clint Pachl
Jesus Sanchez wrote: Hi all, I'm using 4.2 without problem, and I'm trying to find one xterm to my personal use with only one thing in mind: low cpu and memory usage. I have been using mrxvt for years. It's also multi-tabbed. Currently, I'm running 10 terminals in a single mrxvt process and

Re: mrxvt and ksh issue

2008-04-23 Thread Clint Pachl
Jesus Sanchez wrote: Hi, I'm using 4.2. I'm using 4.1. I have installed from ports the program mrxvt it works well as people say but I have (I believe) found a buggy behaviour when using mrxvt and ksh (the OpenBSD one). I launch startx (with fvwm2 and mrxvt on my .xinitrc) as a regular

Encryption and Compression with ipsecctl?

2006-06-20 Thread Clint Pachl
Is IP compression/ipcomp flows implemented in ipsecctl(8)? I am trying to perform encryption (enc) and compression (ipcomp) between two OBSD3.9 hosts. ipcomp(4) states, Currently, IPCA can be created using the ipsecadm(8) tool, with no mention of ipsecctl. Here is my simple setup: sysctl

How to pass mount protocol traffic (mountd/NFS) using pf?

2006-06-21 Thread Clint Pachl
Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port and my fixed pf rules block the mount protocol and, consequently, my clients cannot mount

Re: How to pass mount protocol traffic (mountd/NFS) using pf?

2006-06-24 Thread Clint Pachl
Christian Rueger wrote: Am Mittwoch, den 21.06.2006, 14:03 -0700 schrieb Clint Pachl: Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port

Re: How to pass mount protocol traffic (mountd/NFS) using pf?

2006-06-24 Thread Clint Pachl
Ted Unangst wrote: On 6/21/06, Clint Pachl [EMAIL PROTECTED] wrote: Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port and my fixed pf

Re: ISAKMP and Public Key Infrastructure

2006-06-24 Thread Clint Pachl
Bharj, Gagan wrote: Hello Folks, I have got my VPN working with automatic key exchange and a hard-coded password. I would like to implement the VPN using public/private keys. Do you guys know of any site that has a good tutorial on how to set up such a system? BTW Would such a setup require

Re: How to pass mount protocol traffic (mountd/NFS) using pf?

2006-06-24 Thread Clint Pachl
Scott Francis wrote: On 6/23/06, Theo de Raadt [EMAIL PROTECTED] wrote: [snip] http://www.freebsd.org/cgi/man.cgi?query=mountd It's definitely possible (Free and Net both offer the -p option). I think that is completely ridiculous. Hardcoding RPC utilities to non-random ports to try

IPSec and X11: XIO: fatal IO error 60

2006-06-29 Thread Clint Pachl
My xdm server produces IO errors when trying to run through an IPSec tunnel setup with ipsecctl and isakmpd: XIO: fatal IO error 60 (Operation timed out) on X server sony:0.0 after 10 requests (7 known processed) with 0 events remaining. Setup: X11 server ---(wireless-ipsec)--- AP/router

PF SMP

2006-06-30 Thread Clint Pachl
Does PF utilize multiple processors? One of my router/firewalls is a dual Pentium Pro 200. It also runs ftp-proxy, but that's it. Would a PII 400MHz be equivalent, better, or worse? Just curious. From what I understand, the network stack is not threaded, thus multiple processors would not be

Re: routing through IPsec tunnel with NAT: add routes?

2006-06-30 Thread Clint Pachl
Stephen Bosch wrote: Hi, everybody: Okay -- the good news is that we've got the SA up between these two sites, the bad news is that traffic isn't passing. The situation is complicated by some NAT that I need through the encryption interface. We have the following: HostA_private_IP

Re: News From HiFn

2006-07-01 Thread Clint Pachl
Breen Ouellette wrote: Theo de Raadt wrote: I will ask this honestly: Why should we bleed our little hearts over a company who acted like assholes towards us for years, and only changed their policy due to public pressure? Don't; just drop it and act like a man. No, Theo needs an apology

Re: Patent jeopardizes IETF syslog standard

2006-07-03 Thread Clint Pachl
J.C. Roberts wrote: Don't misunderstand me, CARP is an amazingly innovative and extremely useful implementation of a redundancy protocol. It's technically better than HSRP or any of the versions of VRRP but the problems till stands that it is not an official protocol, which simply means adoption

Re: IPSec unspec transport

2006-07-03 Thread Clint Pachl
Massimo Lusetti wrote: I got a VPN network which works quite well, i mean works very well thanks to OpenBSD and its implementation but i got one end point over the 6 running which causing me troubles. The configuration is done with ipsec.conf and is identical to others which works well. Here

Re: IPSec unspec transport

2006-07-03 Thread Clint Pachl
Massimo Lusetti wrote: On Mon, 2006-07-03 at 00:51 -0700, Clint Pachl wrote: Are both end points trying to negotiate? Try using the passive keyword on one endpoint: ike passive esp ... Yes both active. Does that should cause problems? Here is what I have noticed while watching tcpdump

Re: set skip on interface rule doesn't show up in pfctl -sr

2006-07-03 Thread Clint Pachl
Henning Brauer wrote: * Daniel Ouellet [EMAIL PROTECTED] [2006-07-03 21:44]: Is there a special reason why we couldn't see the set skip on interface in the display of the rules in pf with the regular: pfctl -sr it is not a rule. It is an option. Would it be beneficial to add an Options

Re: HTTP Load balancer

2006-07-06 Thread Clint Pachl
Richard Wilson wrote: Hulloo list, Can anyone recommend a load balancer for http/https for OpenBSD? Currently I'm using Pound, from http://www.apsis.ch/pound/ which runs under OpenBSD, and supports connection tracking via IP, cookie and request ID (eg PHPSESSID) and seems to do everything I

Re: wireless network

2006-07-14 Thread Clint Pachl
On Friday 14 July 2006 15:09, pk.ra wrote: Does OpenBSD support registering to a safe wireless network using certificates? Use IPSec: ipsecctl isakmpd RSA pubkeys. 1. Setup flows and SAs in ipsec.conf on both ends 2. Copy public RSA keys to each endpoint in /etc/isakmpd/pubkeys/... 3.

Multi-tabbed Terminal

2006-08-04 Thread Clint Pachl
Can anyone recommend a light-weight multi-tabbed terminal for OBSD 3.9? I looked through the i386 packages, but didn't notice any. I'm using FVWM2. I have used mrxvt, materm.sourceforge.net, on FreeBSD in the past and really liked it; minimal dependencies and small memory foot print. I just

Re: Multi-tabbed Terminal

2006-08-04 Thread Clint Pachl
Michael Hernandez wrote: On Aug 4, 2006, at 1:37 PM, Maxim Bourmistrov wrote: It compiles and works here. Just comment out The ugly hack for OpenBSD: /* # ifdef OS_OPENBSD typedef unsigned int_our_wint_t; typedef struct { int __count; union { _our_wint_t

Re: SMS from OpenBSD

2006-08-18 Thread Clint Pachl
Tomas wrote: Hi list, I was wondering is there any way to send SMS messages from OpenBSD OS? May be there is any program to do such task? You could use Google's online SMS service. It's not directly from your OBSD box, but it can get the job done. Here are a couple of scripts I wrote a

Re: MegaRAID 320-2x battery tests

2006-08-29 Thread Clint Pachl
Jeff Ross wrote: I followed with great interest the recent thread on misc@ http://marc.theaimsgroup.com/?l=openbsd-miscm=115620585301672w=2 aboout bad write performance with the MegaRAID 320-2 card, since I was also experiencing what I perceived to be slow write performance with the same

Re: sshd idle session

2006-11-21 Thread Clint Pachl
atstake atstake wrote: I am using ssh (OpenSSH_4.4, OpenSSL 0.9.7j) on OpenBSD4.0. I want idle user sessions to timeout after a certain period. I tried ClientAliveInterval 15 and ClientAliveCountMax 3 in /etc/ssh/sshd_config restarted sshd which, according to sshd_config(5) should end the idle

Re: Symbolic link insecure?

2006-12-01 Thread Clint Pachl
Alexander Hall wrote: Alexander Hall wrote: Tasmanian Devil wrote: Sorry, I was too fast, I just saw that symbolic links don't have modes. I don't now then, sorry! I'd say they do have modes, but they are not very useful: $ umask 777; ln -s a b $ umask 000; ln -s a c $ ls -lF total 0

Re: ral(4) hostap plea

2008-05-08 Thread Clint Pachl
James Turner wrote: I've been trying to get my new ral(4) card to work like I would expect it to. I've read through most if not all the talk on misc@ about running these cards in hostap mode. I would really like to replace my wi(4), which works really well, with my new ral(4) and enjoy 11g and

Re: All memory not recognized (4GB) - AMD64 Snapshot, Macbook 3,1

2008-05-15 Thread Clint Pachl
alemao wrote: Hi, I installed OpenBSD/amd64 snapshot on a Macbook 3,1 (Late 2007). It recognizes both processors but not all memory (3GB instead of 4). There's something i can do? No. Read the archives or Google it.

Re: Multicasting on OpenBSD

2008-05-18 Thread Clint Pachl
Insan Praja SW wrote: Hi Misc@, Just wondering around, is there any multicasting technology (PIM-SM, PIM-SSM etc) currently developed or implemented in OpenBSD?. Since working with this unbelievable OS (especially with routing/filtering/forwarding) I wish to know more about it. Right now I

Re: svnd questions (encrypting all of a partition or disk)

2008-07-23 Thread Clint Pachl
Ted Unangst wrote: On 7/19/08, Chris Kuethe [EMAIL PROTECTED] wrote: - svnd backed by a whole slice on disk I know some people have done this, but the code doesn't like it. I'd stick with normal files. I have done file, partition, and whole disk; each one gets progressively

Does anyone use sup(1)?

2008-08-09 Thread Clint Pachl
It seems the other BSDs have removed it from the base. Is anyone using it on OpenBSD? I thought it might be useful tool to update some configs on my network, but I can't seem to get it working. I'm getting errors like: SUP: SCM GOAWAY Can't read list file sup/junk/list [t22.mokaz.com] I've

Re: Changing password in kerberized environment is not working.

2008-08-30 Thread Clint Pachl
John Nietzsche wrote: Hi folks, i have configured my openbsd kerberos server. It is serving two other computer in my home network. One of this client is running openbsd the other is Windows XP. I am able to login into any of these 2 client and authentication goes through kerberos 100%

Re: openbsd 4.0 ralink problem low operation range

2006-12-12 Thread Clint Pachl
Sam Fourman Jr. wrote: I have a Linksys card that uses ral and I can confirm this Sam Fourman Jr. On 12/9/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi List, i've tried today openbsd 4.0 with several cards: rt2561t - PC-620C rt2560f - WMIR-103G rt2560f - GN-WIKG with all cards i got

How to kill processes that have been revoked?

2006-12-12 Thread Clint Pachl
I need to kill all the processes that cannot reach their controlling terminal (according to `man ps`: they have been revoked). Or, how could I get them back or place then into new terminals? This machine is a diskless X client. The problem occurred when I plugged another machine into the switch,

Re: revision control system for system administration

2006-12-19 Thread Clint Pachl
atstake atstake wrote: Not directly OpenBSD related but I thought I'd ask. I'd like to use a revision control system to manage files on 25-30 servers but I'm not sure whether I'd use a centralized repository or have a separate revision control system on each box. It would also be good to know

Re: revision control system for system administration

2006-12-19 Thread Clint Pachl
Francois Visconte wrote: Hello To the OP, I would keep everything centralized and in a repository. Then dedicate a test machine, or two, that you will use to deploy your updates and test the integrity of your automation system. If all goes well with the test, push the tested updates over

Re: revision control system for system administration

2006-12-19 Thread Clint Pachl
Will Maier wrote: On Tue, Dec 19, 2006 at 03:00:04AM -0700, Clint Pachl wrote: I would use a dedicated, highly secure and always backed-up box to store/manage a central repository (CVS/SVN). This repos will hold all the necessary bytes (binaries, config files, ports, etc.) to re-image any

Re: revision control system for system administration

2006-12-19 Thread Clint Pachl
Francois Visconte wrote: Hello To the OP, I would keep everything centralized and in a repository. Then dedicate a test machine, or two, that you will use to deploy your updates and test the integrity of your automation system. If all goes well with the test, push the tested updates over

Re: Max memory in OpenBSD (4.0)

2006-12-22 Thread Clint Pachl
Cristiano Deana wrote: i can't find any reference about max memory in openbsd, only some questions about it (from me and others). i tried with 4.0 i386 and amd64 and it seems i have no luck to see all my memory (4G). i also tried the patch who someone post the link but it doesn't work. so,

Re: MD5 sum of /bsd on freshly installed system/?

2007-01-15 Thread Clint Pachl
Gregory Edigarov wrote: It would be greatly appreciated if somebody can make an md5 checksum of the generic kernel. Need to check that as my OpenBSD 4.0 install hangs while booting at the very early stage. # this is for i386 because you said old PC MD5 (bsd) =

Re: Merchandise idea: OpenBSD mug

2007-01-15 Thread Clint Pachl
Tom Beard wrote: Samurai Chef wrote: I'll do it. I'll order some and announce here. I'll set up a ebay store for the merchandise. contact me with requests. I'd take a few if you got them done. Me too. Is that eBay store setup? Like someone all ready mentioned, it would be

Re: NFS with pf on OpenBSD

2007-02-09 Thread Clint Pachl
Rodney Hopkins wrote: I want to run a NFS server on OpenBSD with pf enabled and configured only allow the required inbound ports needed to allow NFS mounts to work. The thing is, the only way I've successfully been able to do this is to exclude ports 1024 from being blocked inbound by pf.

Filesystem Backwards Compatibility

2007-02-12 Thread Clint Pachl
Have the file systems from one OS version to the next always been compatible? Will they continue to be? My concern is that a 3+ year old dump may not restore correctly on current version of OBSD. Can I be assured that I can store data reliably for 3 - 5 years on a FFS? -pachl

Re: bsd cpu use

2007-02-12 Thread Clint Pachl
James Mackinnon wrote: Hi All Hate to ask something that might be a simple answer but I am trying to find how it is best / easiest to get the CPU usage of a BSD 4.0 box. I only need the result and not a bunch of other data as I want to store the result in a mysql db. Basically i'm just

Re: Most secure Operating-System?

2011-09-07 Thread Clint Pachl
Alec Taylor wrote: What's the most secure operating system? /me is thinking OpenBSD SELinux by far. I just listened to an interview with one of the devs on the project (http://twit.tv/show/floss-weekly/156). Wow! With SELinux, you basically just flip a switch and boom, you're secure.

Kerberos: Server not found in database: krbtgt/ualberta...@realm

2010-10-04 Thread Clint Pachl
In the KDC log file, I get the following errors: 2010-10-04T02:40:11 TGS-REQ pa...@mokaz.com from IPv4:10.0.9.15 for afs/ualberta...@mokaz.com 2010-10-04T02:40:11 Server not found in database: afs/ualberta...@mokaz.com: No such entry in the database 2010-10-04T02:40:11 TGS-REQ pa...@mokaz.com

BIOCTL Rebuild: invalid argument

2010-10-04 Thread Clint Pachl
I tried to rebuild a single disk in a 4 disk raid-10 array using the following command: # bioctl -R 0:3 sd0 bioctl: BIOCSETSTATE: invalid argument What does this mean exactly? I did rebuild the array via the MegaRAID BIOS utility. Are we able to rebuild arrays via bioctl? # bioctl sd0

Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Clint Pachl
I've been using an IBM Thinkpad T22 (P3 900MHz) laptop for quite some time and I want to upgrade. I am looking for some expert advice on what to upgrade to in the Thinkpad T-Series. Two main considerations: 1. Core Duo 32-bit (T60) or Core 2 Duo 64-bit (T61)? I've only used i386, should I

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Clint Pachl
Ted Unangst wrote: On Fri, Oct 22, 2010 at 9:04 PM, Clint Pachlpa...@ecentryx.com wrote: 1. Core Duo 32-bit (T60) or Core 2 Duo 64-bit (T61)? I've only used i386, should I think about amd64? Are you sure about that? I didn't think they made any T60s with plain Core chips, though I

Re: Need Advice: Thinkpad T60 or T61?

2010-10-22 Thread Clint Pachl
Neal Hogan wrote: On Fri, Oct 22, 2010 at 8:04 PM, Clint Pachlpa...@ecentryx.com wrote: I've been using an IBM Thinkpad T22 (P3 900MHz) laptop for quite some time and I want to upgrade. I am looking for some expert advice on what to upgrade to in the Thinkpad T-Series. Two main

Re: Need Advice: Thinkpad T60 or T61?

2010-10-24 Thread Clint Pachl
Henning Brauer wrote: intagp0 at vga1 agp0 at intagp0: aperture at 0xe000, size 0x1000 inteldrm0 at vga1: apic 1 int 16 (irq 10) drm0 at inteldrm0 Intel GM965 Video rev 0x0c at pci0 dev 2 function 1 not configured Does this mean you don't get hardware graphics acceleration?

Re: Need Advice: Thinkpad T60 or T61?

2010-10-24 Thread Clint Pachl
Henning Brauer wrote: 2. I would like graphics hardware acceleration. I know I need to stay away from nVidia. The T60 comes with ATI Radeon and the T61 is the integrated Intel 965GM. Is there anything else I need to be concerned with regarding OpenBSD on the T-Series? What would you

Re: Need Advice: Thinkpad T60 or T61?

2010-10-24 Thread Clint Pachl
Henning Brauer wrote: * Clint Pachlpa...@ecentryx.com [2010-10-24 22:33]: Henning Brauer wrote: intagp0 at vga1 agp0 at intagp0: aperture at 0xe000, size 0x1000 inteldrm0 at vga1: apic 1 int 16 (irq 10) drm0 at inteldrm0 Intel GM965 Video rev 0x0c at pci0 dev 2 function 1

Re: Need Advice: Thinkpad T60 or T61?

2010-10-24 Thread Clint Pachl
Paolo Aglialoro wrote: Just a small hint after the 60 series all thinkpads rock... but I wouldn't go to T series unless you'll be moving quite seldom. My advice is a whooping X61, ultraportable yet powerful and really silent. I thought about the X61. However, my laptop will rarely

Re: Need Advice: Thinkpad T60 or T61?

2010-10-24 Thread Clint Pachl
Henning Brauer wrote: Well, I have this on a Dell Precision 220 and graphics acceleration doesn't work in X. pchb0 at pci0 dev 0 function 0 vendor Intel, unknown product 0x2500 rev 0x03 agp at pchb0 not configured radeondrm0 at vga1: apic 2 int 16 (irq 9) drm0 at radeondrm0

Re: Need Advice: Thinkpad T60 or T61?

2010-10-24 Thread Clint Pachl
Henning Brauer wrote: 1. Core Duo 32-bit (T60) or Core 2 Duo 64-bit (T61)? I've only used i386, should I think about amd64? shouldn't make a difference. personally, I run i386 anyway. Any interesting reason you run i386 on 64-bit hardware? Stability? Performance?

Re: Need Advice: Thinkpad T60 or T61?

2010-10-26 Thread Clint Pachl
David Vasek wrote: On Sun, 24 Oct 2010, Clint Pachl wrote: If I really need portability (flying, camping) and I'm just going to be writing code in vim, then I use my trusty Sony Vaio SR17, weighing in at less than 3 pounds (~1.3KG). I paid about 2400USD for it new in 2000; works like a charm

OpenCVS in Base?

2010-11-20 Thread Clint Pachl
I am starting a new project that needs version control and I was thinking about using OpenCVS. However, I'm not sure if it is in the base (I'm running -current). My old 4.4 firewall has /usr/bin/opencvs. Is /usr/bin/cvs actually opencvs? I noticed http://www.openbsd.org/plus48.html states

How to open PDF that requires Adobe 9

2010-12-04 Thread Clint Pachl
UPS is so annoying. The UPS developer's guide is in a 9MB PDF file. When I open it with xpdf(1) I get a (1) page PDF that states I need to download the the latest Adobe crapware to view it. How can I get around this? Why does xpdf even abide? I tried the following gs(1) command hoping it

Re: How to open PDF that requires Adobe 9

2010-12-04 Thread Clint Pachl
Brynet wrote: Hi, Why are you using xpdf? it's so old and crummy :-). print/epdfview, which uses the poppler library. textproc/mupdf, independent renderer, pretty good. -Bryan. All I can say is that I use cwm and don't like interfaces, GTK, gnome, or KDE. I highly agree with Patrick.

Re: How to open PDF that requires Adobe 9

2010-12-06 Thread Clint Pachl
Joachim Schipper wrote: On Sat, Dec 04, 2010 at 06:28:04PM -0700, Clint Pachl wrote: When I open [the UPS developer's guide] with xpdf(1) I get a [message] to download the the latest Adobe crapware to view it. This is cheating, but have you tried throwing it into Google docs

  1   2   >