sshd(8) should also log which account is trying a revoked key (was Re: sshd - also log account trying a revoked key)

2018-12-07 Thread Lars Noodén
]: Connection closed by authenticating user foo 198.51.100.95 port 55634 [preauth] So I would propose consideration of something approximately like the changes below. /Lars Index: usr.bin/ssh//auth.c === RCS file: /cvs/src/usr.bin/ssh/auth.c

Re: NTPd server using DVB-T as clocksource

2018-10-28 Thread Lars Schotte
a socket from ntpd. > > Chris > -- Lars Schotte Mudroňova 13 92101 Piešťany pgpJARncYPx91.pgp Description: OpenPGP digital signature

NTPd server using DVB-T as clocksource

2018-10-28 Thread Lars Schotte
he current date in and NTPd reads it from there. So I suppose one would need to open up some kind of socket and sending there DVB-T timestamps. No idea. What do you ppl say? -- Lars Schotte Mudroňova 13 92101 Piešťany pgpMC7om6Iihg.pgp Description: OpenPGP digital signature

sshd - also log account trying a revoked key

2018-10-21 Thread Lars Noodén
for cargo-culted code) /Lars Index: usr.bin/ssh//auth.c === RCS file: /cvs/src/usr.bin/ssh/auth.c,v retrieving revision 1.133 diff -u -p -u -r1.133 auth.c --- usr.bin/ssh//auth.c 12 Sep 2018 01:19:12 - 1.133 +++ usr.bin/ssh

Extraneous carriage return in usr.bin/ssh/log.c

2018-04-02 Thread Lars Noodén
I would propose removing what appears to be an unnecessary carriage return that interferes with debugging output. /Lars Index: src/usr.bin/ssh/log.c === RCS file: /cvs/src/usr.bin/ssh/log.c,v retrieving revision 1.50 diff -u -p -u

Re: manpage text width

2018-03-31 Thread Lars Noodén
uoted from "The Line Length Misconception" https://www.viget.com/articles/the-line-length-misconception/ /Lars

Re: sshd(8) logging of client disconnect from ClientAliveInterval

2017-12-09 Thread Lars Nooden
heck to see how many we have had */ > if (packet_inc_alive_timeouts() > options.client_alive_count_max) { > - logit("Timeout, client not responding."); > + sshpkt_fmt_connection_id(ssh, remote_id, sizeof(remote_id)); > + logit("Timeout, client not responding from %s", remote_id); > cleanup_exit(255); > } > > Yes, thanks. That provides the log information I am looking for when a client times out. /Lars

Re: sshd(8) logging of client disconnect from ClientAliveInterval

2017-10-17 Thread Lars Noodén
Here is a replacement patch. /Lars Index: serverloop.c === RCS file: /cvs/src/usr.bin/ssh/serverloop.c,v retrieving revision 1.198 diff -u -p -u -r1.198 serverloop.c --- serverloop.c12 Sep 2017 06:35:32 - 1.198

Re: sshd(8) logging of client disconnect from ClientAliveInterval

2017-10-17 Thread Lars Noodén
On 10/17/17, Darren Tucker <dtuc...@zip.com.au> wrote: [snip] > probably better to use fmt_connection_id() instead of hand-rolling the > format. Ok. I have added fmt_connection_id() to serverloop.c from packet.c /Lars Index: src/usr.bin/ssh/

sshd(8) logging of client disconnect from ClientAliveInterval

2017-10-16 Thread Lars Noodén
this: Oct 16 21:18:56 eee sshd[94170]: Timeout, client not responding. It would be very useful to have the connection information back again. Here is a cargo-culted modification that approximates the old style. /Lars Index: src/usr.bin/ssh/serverloop.c

SyslogFacility in ssh_config(5) could imply logging via syslog(3)

2017-09-25 Thread Lars Noodén
SyslogFacility is only useful in conjuction with the -y option. If setting SyslogFacility implies -y for ssh(1) then the whole thing can be set from ssh_config(5), keeping all the adjustments in one place. The following illustrates what I am trying to describe. /Lars Index: src/usr.bin/ssh/ssh.c

ExposeAuthInfo in sshd_config.5

2017-09-25 Thread Lars Noodén
I would propose the following change, or something similar, to sshd_config.5 It is then more clear which options are accepted and how the directive is used. /Lars Index: src/usr.bin/ssh/sshd_config.5 === RCS file: /cvs/src/usr.bin

sshd_config(5) : mention CIDR addressing for AllowUsers and DenyUsers

2016-03-12 Thread Lars Noodén
It looks like sshd(8) has permitted for a while both AllowUsers and DenyUsers in sshd_config(5) to use addresses in CIDR address/masklen format. If so, it would be useful to mention in the manual page. /Lars Index: sshd_config.5

Re: LibreSSL: GOST ciphers implementation

2014-11-05 Thread Lars
have an agenda here (copyrighted by Theo :-)) I wish you luck writing your own OS as in 5 years you don't trust any other code besides your own (your words). *kopfschüttel* Lars

Re: restoring keyboard layout after suspend or hibernate

2014-01-24 Thread Lars Nooden
still. [snip] Is this the behaviour you would like to get? [snip] Yes, that is the descripion of pretty much what I was looking for in this context of use. I'll also look at hotplugd as was suggested. Regards, /Lars

perlre(1) and substitution evaluations

2013-11-30 Thread Lars Nooden
-255. Could something like the following be added? Regards, /Lars ? pod2htmd.tmp Index: perlre.pod === RCS file: /cvs/src/gnu/usr.bin/perl/pod/perlre.pod,v retrieving revision 1.16 diff -u -p -u -p -r1.16 perlre.pod --- perlre.pod 25

Re: perlre(1) and substitution evaluations

2013-11-30 Thread Lars Noodén
On 11/30/2013 01:52 PM, Marc Espie wrote: For this kind of thing, you're much better off talking to upstream as this is totally openbsd-independent. Ok. Thanks. /Lars

Re: upstream vendors and why they can be really harmful

2012-11-06 Thread Lars von den Driesch
to gain traction you will need to reduce some standards... just my 2 ct Lars

Re: upstream vendors and why they can be really harmful

2012-11-06 Thread Lars von den Driesch
On Tue, Nov 6, 2012 at 5:10 PM, Peter Hessler phess...@theapt.org wrote: On 2012 Nov 06 (Tue) at 16:45:17 +0100 (+0100), Lars von den Driesch wrote: This is exactly what happened in Linux-land, and brought us to this place in the first point. I know :-) And I understand

Re: upstream vendors and why they can be really harmful

2012-11-06 Thread Lars von den Driesch
not that knowledgable as you and coming from outside it might leave a different impression. Again, I am just saying... ;-) Lars

undefined values in pkg_add

2010-03-28 Thread Lars Nooden
Undefined values crash pkg_add. e.g. pkg_add -z tidy Index: usr.sbin/pkg_add/OpenBSD/PackageRepositoryList.pm === RCS file: /cvs/src/usr.sbin/pkg_add/OpenBSD/PackageRepositoryList.pm,v retrieving revision 1.21 diff -u -p -r1.21

Re: suggested patch to httpd.conf in base

2010-03-13 Thread Lars Nooden
what the material published, don't go to the effort of publishing it. /Lars [1] pubB7lish (pubb2lisL8h), transitive verb 1. to make publicly known; announce, proclaim, divulge, or promulgate ... http://www.yourdictionary.com/publish [2] Robots and the META element

Re: su.1

2010-03-09 Thread Lars Nooden
On 2010/03/08 22:05, Lars Nooden wrote: That the option '-' is depreciated in favor of '-l' could be emphasized more. On 2010-3-8 11:44 PM, Stuart Henderson wrote: it's 'deprecate', not 'depreciate', they have different meanings. Ok. I withdraw the suggestion due to the typo and other

su.1

2010-03-08 Thread Lars Nooden
That the option '-' is depreciated in favor of '-l' could be emphasized more. Index: su.1 === RCS file: /cvs/src/usr.bin/su/su.1,v retrieving revision 1.24 diff -u -p -r1.24 su.1 --- su.131 May 2007 19:20:17 - 1.24

Add rEFIt bootloader to FAQ4

2010-03-05 Thread Lars Nooden
rEFIt can be used with OpenBSD, especially when dual booting OS X, or when triple booting OS X and Linux. Index: faq4.html === RCS file: /cvs/www/faq/faq4.html,v retrieving revision 1.294 diff -u -p -r1.294 faq4.html --- faq4.html

httpd mime.types OpenDocument Format

2010-02-23 Thread Lars Nooden
Adding the IANA mime types for the OpenDocument Format, with file name extensions. The previous diff was missing the extensiosn. For references regarding this open standard, see a) ISO/IEC 26300, The OpenDocument Format b) 'Appendix C: MIME Types and File Names (Non-normative)' from the OASIS

games/fortune/strfile/strfile.8

2010-01-17 Thread Lars Nooden
The output made by strfile currently gets the suffix '.dat' by default. /Lars Index: strfile.8 === RCS file: /cvs/src/games/fortune/strfile/strfile.8,v retrieving revision 1.13 diff -u -p -u -p -r1.13 strfile.8 --- strfile.8 31

Re: games/fortune/strfile/strfile.8

2010-01-17 Thread Lars Nooden
Ingo Schwarze wrote: Note that strfile(8) is not installed by default, neither the utility nor the manual. It's only used by the build process. Noted. Thanks. I missed a second change. /Lars Index: strfile.8 === RCS file

ddb.log in sysctl.conf

2010-01-14 Thread Lars Nooden
ddb.log was missing from sysctl.conf Here is a guess at a description and a value. /Lars Index: sysctl.conf === RCS file: /cvs/src/etc/sysctl.conf,v retrieving revision 1.47 diff -u -p -r1.47 sysctl.conf --- sysctl.conf 9 Jun 2009

Re: ddb.log in sysctl.conf

2010-01-14 Thread Lars Nooden
Federico G. Schwindt wrote: On Thu, Jan 14, 2010 at 06:43:58PM +0200, Lars Nooden wrote: ddb.log was missing from sysctl.conf Here is a guess at a description and a value. not all the options are in sysctl.conf, i would say only the most popular ones (i.e. people are likely to want

Re: ddb.log in sysctl.conf

2010-01-14 Thread Lars Nooden
of those available. I'll leave subsequent tries to those that won't be guessing... /Lars Index: sysctl.conf === RCS file: /cvs/src/etc/sysctl.conf,v retrieving revision 1.47 diff -u -p -r1.47 sysctl.conf --- sysctl.conf 9 Jun 2009 11:52

maximum segment size in pf.conf.5

2010-01-12 Thread Lars Nooden
The acronym MSS can be expanded in the manual page for pf.conf for improved clarity. /Lars Index: pf.conf.5 === RCS file: /cvs/src/share/man/man5/pf.conf.5,v retrieving revision 1.443 diff -u -p -r1.443 pf.conf.5 --- pf.conf.5

Random Early Detection vs Random Early Drop

2009-12-13 Thread Lars Nooden
pf.conf(5) refers to 'Random Early Detection' sshd_config(5) refers to 'Random Early Drop' Should the same wording be used in both man pages? /Lars cvs diff -Nup sshd_config.5 Index: sshd_config.5 === RCS file: /cvs/src/usr.bin

s{cp|sh|ftp} -l -u

2009-11-30 Thread Lars Nooden
of the changeover. /Lars

Re: s{cp|sh|ftp} -l -u

2009-11-30 Thread Lars Nooden
Stuart Henderson wrote: On 2009/11/30 12:35, Lars Nooden wrote: ssh has used -l for a long time to desginate username. oh, there's a lot more history than that. it's a mostly drop-in replacement for rsh, which also uses -l. Yes, so changing that would be a big deal. During the transition

phrase 'log rotation' in newsyslog.8

2009-11-23 Thread lars
. /Lars Index: newsyslog.8 === RCS file: /cvs/src/usr.bin/newsyslog/newsyslog.8,v retrieving revision 1.44 diff -u -p -r1.44 newsyslog.8 --- newsyslog.8 31 May 2007 19:20:13 - 1.44 +++ newsyslog.8 23 Nov 2009 11:02:05 -

Re: phrase 'log rotation' in newsyslog.8

2009-11-23 Thread Lars Nooden
apropos in my hunt for newsyslog.conf(8) Due to the simplicity of apropos the words to index the man page on must be in the title whether trim, rotate or both at the same time. I propose the new title because that is the word I was searching for. /Lars

Re: sftp -l user host

2009-11-22 Thread Lars Nooden
Damien Miller wrote: On Tue, 17 Nov 2009, lars wrote: Adding the -l argument to assign user name on sftp is done on ssh and makes the two more similar to use. The diff below is an illustraion of what might be done. No, -l is reserved for bandwidth limiting like scp's -l option