System date reset to 1969 while attempting to run chrooted linux binary

2005-06-26 Thread Kareem Dana
Hello,

I am using OpenBSD 3.7 GENERIC on an i386 and installed the
redhat_base-8.0p4.tgz for linux compatibilty and was fooling around
with getting linux binaries to work within a chroot when I noticed
that my system clock had been reset to 1969. The only reference to
that happening that I found was another mailing list post back in
2003.

http://archives.neohapsis.com/archives/openbsd/2003-10/1508.html

It did not seem to come to any real conclusions. Here is what I have run:

grimace# sysctl -a |grep linux
kern.emul.linux=1
grimace# date
Sun Jun 26 01:39:40 CDT 2005
grimace# chroot /emul/linux /usr/bin/id
grimace# date
Wed Dec 31 18:00:01 CST 1969

My very limited understanding of compat_linux has me believe that
OpenBSD will look for linux libraries in /emul/linux/ and that is why
the chroot failed. Also now, linux libraries populate /lib and
/usr/lib instead of the expected OpenBSD ones. Is that confusing
OpenBSD? Is it a bug in OpenBSD to reset the date in that situation or
is it simply me giving OpenBSD a very stupid command to run? Also,
what exactly is causing the date to be reset? I'm obviously not going
to attempt this command on any production system but is the date reset
caused by any deeper problem than just the chroot?

Thanks,
Kareem Dana



"no network" on OBSD 3.7 snap with Lucent Orinoco (wi0)

2005-06-26 Thread Andreas Bihlmaier
Hello misc@,

I finally decided to send a mail here because I'm despairing with my
wireless network since I upgraded to the latest snapshot.

I simply try to connect to a 802.11b network using a Lucent Orinoco.

For testing purposes I even got over my paranoia for a couple of minutes
and tested without WEP ( and vpn), I even deactivated pf ( don't ask me what it
could have to do with the card not associating, just to make sure).

The router is a "SMC Barricade g Wireless Router 2.4GHz 54 Mbps Wireless
Cable/DSL"

As wireless Option I activated "Long Range Mixed 11b + 11g";

Just as a hint there is no problem to connect to it with the same
machine's "Atheros AR5212 (IBM MiniPCI)" via 802.11b

I have spent the last couple of hours reading this:
wi
wicontrol
ifconfig
hostname.if
route   ( not directly related )
arp

The first problem I experienced:

# ifconfig wi0 chan 10 
ifconfig: SIOCS80211CHANNEL: Invalid argument

Here is my hostname.wi0:

!/sbin/wicontrol \$if -f 10
inet 192.168.123.22 255.255.255.0 NONE nwid ahbnetz

Here is the output of "wicontrol wi0":  # Have a look at BSSID
--
NIC serial number:  [ 04UT40341211 ]
Station name:   [ WaveLAN/IEEE node ]
SSID for IBSS creation: [ IBSS ]
Current netname (SSID): [ IBSS ]
Desired netname (SSID): [ ahbnetz ]
Current BSSID:  [ 44:44:44:44:44:44 ]
Channel list:   [ 2047 ]
IBSS channel:   [ 10 ]
Current channel:[ 10 ]
Comms quality/signal/noise: [ 0 27 27 ]
Promiscuous mode:   [ Off ]
Process 802.11b Frame:  [ Off ]
Port type (1=BSS, 3=ad-hoc, 6=Host AP): [ 1 ]
MAC address:[ 00:02:2d:ab:53:18 ]
TX rate (selection):[ 3 ]
TX rate (actual speed): [ 11 ]
Maximum data length:[ 2304 ]
RTS/CTS handshake threshold:[ 2347 ]
Create IBSS:[ Off ]
Antenna diversity (0=auto,1=pri,2=aux): [ 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
< SNIP > ( all zeros )
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ]
Microwave oven robustness:  [ Off ]
Roaming mode(1=firm,3=disable): [ ]
Access point density:   [ 1 ]
Power Management:   [ Off ]
Max sleep time: [ 100 ]
Enhanced Security mode: [ ]
Intersil Prism2-based card: [ 0 ]
Card info:  [ Lucent WaveLAN/IEEE, Firmware
8.72 variant 1 ]
Encryption: [ Off ]
Encryption algorithm:   [ Firmware WEP ]
Authentication type 
(1=OpenSys, 2=Shared Key):  [ ]
TX encryption key:  [ 1 ]
Encryption keys:[  ][  ][  ][  ]


Here the output of "wicontrol wi0 -L":
--
AP Information
ap[0]:  netname (SSID): [ ahbnetz ]
BSSID:  [ 00:04:e2:d0:e4:c0 ]
Channel:[ 10 ]
Quality/Signal/Noise [signal]:  [ 24 / 77 / 53 ]
[dBm]:  [ 24 / -72 / -96 ]
Capinfo:[ ESS ]

The output of "ifconfig wi0":
-
wi0: flags=8843 mtu 1500
lladdr 00:02:2d:ab:53:18
media: IEEE802.11 autoselect (DS11)
status: no network
ieee80211: nwid ahbnetz -12dBm (auto) 
#   ^--- What the hell is this ?
inet6 fe80::202:2dff:feab:5318%wi0 prefixlen 64 scopeid 0x7

And finally my dmesg:
-

OpenBSD 3.7-current (GENERIC) #199: Sun Jun 19 11:39:36 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.40GHz ("GenuineIntel" 686-class) 599 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2
cpu0: Enhanced SpeedStep 600 MHz (988 mV): speeds: 1400, 1300, 1200, 1100, 
1000, 900, 800, 600 MHz
real mem  = 1063755776 (1038824K)
avail mem = 964091904 (941496K)
using 4278 buffers containing 53288960 bytes (52040K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(e2) BIOS, date 01/07/05, BIOS32 rev. 0 @ 0xfd740
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 56%
apm0: AC off, battery charge high, estimated 2:49 hours
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xfd6d0/0x930
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdeb0/256 (14 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB ISA" rev 0x00)
pcibios0: PCI bus #2 is the last bus
bios0: ROM list: 0xc/0xc800! 0xcc800/0x1000 0xcd800/0x1000 0xdc000/0x4000! 
0xe/0x1
cpu0 at mainbus0

wireless usb

2005-06-26 Thread Qv6
Folks,

I'm trying to set up a wireless system and looking to use a wireless usb 
adapter. If anyone has successfully configured a wirelesss usb on obsd, 
please email me the make and model.

TIA,

Qv6



Re: perl -MCPAN checksum mismatch on anything

2005-06-26 Thread Chet Langin

Same problem.

> I too have this same problem.
>
> Fresh install...no custom anything...just trying to add modules to
> perl, and anything tried fails 100% no matter which source I use
> (even perl.org).
>
> Whats going on? - anyone have any further insight on this?


--
Chet Langin



Re: PPP, PPPoE, and OpenBSD 3.7

2005-06-26 Thread Steffen Michalke
Hi Dave:

Have you created a new user and a new group "_ppp" as described in
http://www.openbsd.org/faq/upgrade-old.html#3.5.8 ?

Ciaoi
Steffen



PF-Question

2005-06-26 Thread sebastian . rother
I've a question related to PF.

SpamD provides a trap. If somebody sends e-Mail to a e.g. special
mailadress this host will be added to a list.

Is there any spamtrap-like Mechanism for the pf?
E.g. more skilled "badguys" don't use `nmap -sS &target`.
Such guys will limit their scans to just a few ports (3-6).

But if I know that I don't provide e.g. Telnet couldn't the Telnetport be
a "Trapport"? An attacker who connects to that port gets blocked like
SpamD does it with spammers.

The question I've after reading all the Documentation (realy everything):
Is there such a mechanism?
I ask because I didn't noticed anything about such a system.

Kind regards,
Sebastian



Re: wireless usb

2005-06-26 Thread Russell J. Wood
On Sun, Jun 26, 2005 at 04:46:30AM -0500, Qv6 wrote:
> Folks,
> 
> I'm trying to set up a wireless system and looking to use a wireless usb 
> adapter. If anyone has successfully configured a wirelesss usb on obsd, 
> please email me the make and model.

There are plenty of Wireless USB ethernet adapters supported:
  http://www.openbsd.org/i386.html#hardware (scroll down to Wireless 
  Ethernet Adapters)

- Russell



Re: perl -MCPAN checksum mismatch on anything

2005-06-26 Thread Todd C. Miller
In message <[EMAIL PROTECTED]>
so spake WR (gen2):

> "Checksum mismatch for distribution file. Please investigate.
> 
> I'd recommend removing
> /root/.cpan/sources/authors/id/R/RE/REATMON/Net-Jabber-2.0.tar.gz. Its MD5
> checksum is incorrect. Maybe you have configured your 'urllist' with
> a bad URL. Please check this array with 'o conf urllist', and
> retry."

The problem is that lynx is "helpful" and will automatically
uncompress files for you.  If you don't tell CPAN to use lynx it
should work fine.

 - todd



Re: PF-Question

2005-06-26 Thread Stuart Henderson

--On 26 June 2005 15:27 +0200, [EMAIL PROTECTED] wrote:


Is there any spamtrap-like Mechanism for the pf?
E.g. more skilled "badguys" don't use `nmap -sS &target`.
Such guys will limit their scans to just a few ports (3-6).


Since this type of scan typically won't complete a 3-way handshake, 
there's not really any chance to tell a spoofed source address from a 
real one...




Re: wireless usb

2005-06-26 Thread Jonathan Gray
On Sun, Jun 26, 2005 at 04:46:30AM -0500, Qv6 wrote:
> Folks,
> 
> I'm trying to set up a wireless system and looking to use a wireless usb 
> adapter. If anyone has successfully configured a wirelesss usb on obsd, 
> please email me the make and model.

http://www.openbsd.org/cgi-bin/man.cgi?query=ural&apropos=0&sektion=4&manpath=OpenBSD+Current&arch=i386&format=html



Re: PF-Question

2005-06-26 Thread sbr
On Sun, Jun 26, 2005 at 03:27:01PM +0200, [EMAIL PROTECTED] wrote:
> I've a question related to PF.
> 
> SpamD provides a trap. If somebody sends e-Mail to a e.g. special
> mailadress this host will be added to a list.
> 
> Is there any spamtrap-like Mechanism for the pf?
> E.g. more skilled "badguys" don't use `nmap -sS &target`.
> Such guys will limit their scans to just a few ports (3-6).
> 
> But if I know that I don't provide e.g. Telnet couldn't the Telnetport be
> a "Trapport"? An attacker who connects to that port gets blocked like
> SpamD does it with spammers.
> 
> The question I've after reading all the Documentation (realy everything):
> Is there such a mechanism?
> I ask because I didn't noticed anything about such a system.
> 
> Kind regards,
> Sebastian


this is just a little pet project ive been working on, but sadly have been busy 
with way too many other things to do what i want with it yet.

http://shbl.openjunkies.org

its all explained there, i know other people are collecting this data in lots 
of different ways, with snort, or scanning auth logs, but ive played around 
with them and the guests list catches 99% of scans as guest:guest is such a 
classic mistake.

enjoy,

sbr



Re: PF-Question

2005-06-26 Thread sebastian . rother
> --On 26 June 2005 15:27 +0200, [EMAIL PROTECTED] wrote:
>
>> Is there any spamtrap-like Mechanism for the pf?
>> E.g. more skilled "badguys" don't use `nmap -sS &target`.
>> Such guys will limit their scans to just a few ports (3-6).
>
> Since this type of scan typically won't complete a 3-way handshake,
> there's not really any chance to tell a spoofed source address from a
> real one...

What's about 3-Way- handshake scans?
As I said such guys scan just a few ports to not getting noticed by an IDs
(and a IDS would "mostly" notice Syn-Scans but not full 3-way. Scans if
just 3 ports e.g. where scanned).

e.g.
nmap -sT -sV -P0 -sV -p21,22,80 would be such a case
or
nmap -sT -sV -P0 -sV -p21,22

So if I know that I don't run a FTPd the Src-IP would get blocked and the
scan for other ports would fail.

Kind regards,
Sebastian



nx server on OpenBSD

2005-06-26 Thread Bret Rilling
By Googling off and on for the last 6mo it seems there is no
port/package for NoMachine/Freenx remote desktop on OpenBSD???

I only found one a post by Philipp over on the dev forum at NoMachine
and a FreeBSD port by Dewey on www.freshports.com.

Is anyone aware of efforts to in this direction?

Thanks.



Re: System date reset to 1969 while attempting to run chrooted linux binary

2005-06-26 Thread Ted Unangst
On Sun, 26 Jun 2005, Kareem Dana wrote:

> I am using OpenBSD 3.7 GENERIC on an i386 and installed the
> redhat_base-8.0p4.tgz for linux compatibilty and was fooling around
> with getting linux binaries to work within a chroot when I noticed
> that my system clock had been reset to 1969. The only reference to
> that happening that I found was another mailing list post back in
> 2003.

if the linux binary is misidentified as a native binary, one of the first 
syscalls it makes happens to line up with settimeofday for a native 
program, but with wrong arguments so time goes to 0.  for some reason, ld 
is particularly problematic in this regard.


-- 
And that's why I'm not allowed at the zoo anymore.



openbsd as basis for something better?

2005-06-26 Thread el-sino
hey!

i'm curious about all these new operating systems,
that all claim to be the next generation.

there are many out there. plan9, hurd, eros, movitz. and many 
vaporware projects as well, such as lainos. but they all want to 
reinvent the wheel. i think this approach is wrong. instead, we 
should try to attach the wheel to its vehicle, and make sure its 
road is alright. not to mention; going the right way.

a project where real unix would meet real life, or where open 
source would meet open minds -- would have to make unix more human-
oriented rather than machine-oriented. and in addition to bringing 
order to the chaos that was laid as the foundation for all unix 
variants decades ago, it should also deal with new ways of 
interacting with unix visually. for instance, in ways more 
convenient than x, and its conventional graphical user interfaces 
(though these won't go away any time soon).

ofcourse we'd have to get out of the code-only rut, and try to 
incorporate more natural elements from the ground up. such as 
design, like that conceived through real life architecture etc. 
having style doesn't mean it's commercial.

i'm curious whether anybody would like to team up with me, to try 
and map out the ideas for how a real next generation unix would be. 
i'll soon have a pdf ready for those who are interested. in my 
humble opinion, this would be a great way for you to make bsd the 
way you've always wanted it.

i guess that's it;

-- siqo ambrosius




Concerned about your privacy? Follow this link to get
secure FREE email: http://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
http://www.hushmail.com/services-messenger?l=434

Promote security and make money with the Hushmail Affiliate Program: 
http://www.hushmail.com/about-affiliate?l=427



Re: openbsd as basis for something better?

2005-06-26 Thread Chris
[EMAIL PROTECTED] wrote:
> hey!
> 
> i'm curious about all these new operating systems,
> that all claim to be the next generation.
> 
> there are many out there. plan9, hurd, eros, movitz. and many 
> vaporware projects as well, such as lainos. but they all want to 
> reinvent the wheel. i think this approach is wrong. instead, we 
> should try to attach the wheel to its vehicle, and make sure its 
> road is alright. not to mention; going the right way.
> 
> a project where real unix would meet real life, or where open 
> source would meet open minds -- would have to make unix more human-
> oriented rather than machine-oriented. and in addition to bringing 
> order to the chaos that was laid as the foundation for all unix 
> variants decades ago, it should also deal with new ways of 
> interacting with unix visually. for instance, in ways more 
> convenient than x, and its conventional graphical user interfaces 
> (though these won't go away any time soon).
> 
> ofcourse we'd have to get out of the code-only rut, and try to 
> incorporate more natural elements from the ground up. such as 
> design, like that conceived through real life architecture etc. 
> having style doesn't mean it's commercial.
> 
> i'm curious whether anybody would like to team up with me, to try 
> and map out the ideas for how a real next generation unix would be. 
> i'll soon have a pdf ready for those who are interested. in my 
> humble opinion, this would be a great way for you to make bsd the 
> way you've always wanted it.
> 
> i guess that's it;
> 
> -- siqo ambrosius

Spam, Troll - whatever. This has been sent to the FreeBSD list as well


-- 
Best regards,
Chris

The man who has no more problems is out of the game.



WRAP board and Atheros card

2005-06-26 Thread Alexander Frolkin
Hello,

I've just upgraded my WRAP board to OpenBSD 3.7.  The board has a
Wistron CM9 mini-PCI card, which has an AR5213 chipset, and is supported
by the ath(4) driver as an AR5212.  Everything seems to work fine until
a few minutes after booting, at which point the WRAP board crashes.  All
I can see on the (serial) console is ``fatal page fault''.

I have seen one other email to the OpenBSD lists about this problem, but
that got no replies.  I was wondering whether this is a known problem,
and whether a fix exists.


Thanks in advance,

Alex

(Please Cc me on replies.)

-- 
  ---< Alexander Frolkin >---
  -< [EMAIL PROTECTED] >-< http://www.eldamar.org.uk/ >-
  ``Is there something that sticks out that makes you an exceptional
pole-vaulter?'' -- Adrian Chiles



Re: difference between newfs and newfs -m 1 on a 250G hd?

2005-06-26 Thread Otto Moerbeek
On Sun, 26 Jun 2005, Ted Unangst wrote:

> On Sat, 25 Jun 2005, bofh wrote:
> 
> > I tried a newfs -m 1 /dev/wd3a. After newfs is over, wd3a is not mountable.
> > fsck can't find any usable superblock. However, when I did a "newfs
> > /dev/wd3a", the resulting partition checks out fine (fsck is ok with it) and
> > mounts without problems. Any idea why?
> 
> you changed a default and found a bug.  less than 1% of users ever use -m.  
> there's really no good reason to use -m 1, and several reasons not to (not 
> least of which is it apparently doesn't work).  leave it alone and use the 
> default; you will be happier.

Sound advice.

But in addition to that, I noticed you have disk offsets starting at
zero.  On various patforms this is a problem, because you did not run
fdisk.  Check http://www.openbsd.org/faq/faq4.html#blankfdisk. Please
include platform info (dmesg) next time. 

-Otto



human-time limit.

2005-06-26 Thread David Pluoe
Are you gonna add anytime soon a resource limit for human-time, so it would be 
easier to keep dead locks and any other same kind of type processes in control?
httpd would really benefit from it when providing service for many newbie users 
out there.

Regards,

David

-
This e-mail was sent using a CentralPets.com WebMail account
Get yours at: http://mail.centralpets.com



Re: kernel pppoe addon

2005-06-26 Thread Simon Dassow
On Sat, Jun 25, 2005 at 11:34:51PM +0200, Peter Philipp wrote:
> Please forgive me if I missed something about the kernel pppoe but my initial
> tests with the program were positive. However I noticed that when my ISP 
> disconnects the connection, it reauthenticates with a new IP and the default
> route has to be set anew for the outgoing IP's to change.  One can write a
> few dirty scripts to do this with crontab or you can try out my new program
> that I wrote just for this purpose.
[snip]

Or you can add the link1 flag to your hostname.pppoe0... my (working) config
for kernel pppoe:
pppoedev qe1
!/sbin/ifconfig qe1 up
!/usr/sbin/spppcontrol \$if myauthproto=chap myauthname=*** myauthkey=***
!/sbin/ifconfig \$if inet 0.0.0.0 0.0.0.1 netmask 0x
!/sbin/route add default 0.0.0.1
link1 up

That's all i need... reconnection is done by the kernel and the (magic)
default route gets updated as required.
AFAIK this link1-thing isn't required on -current.

Regards,
Simon



Re: difference between newfs and newfs -m 1 on a 250G hd?

2005-06-26 Thread eric
On Sun, 2005-06-26 at 02:19:19 -0400, Ted Unangst proclaimed...

> you changed a default and found a bug.  less than 1% of users ever use -m.  
> there's really no good reason to use -m 1, and several reasons not to (not 
> least of which is it apparently doesn't work).  leave it alone and use the 
> default; you will be happier.

Uh, ok. No offense, but if something is there as a knob to use, it shouldn't
have a bug.

now don't go off bitching at me yet. My point is this:


# newfs -m 1 /dev/wd1h
# mount /dev/wd1h /home/users
# df -k
/dev/wd1h257268116  92122160 15228255238%/home

Five percent of /home would be a LOT of space that could be used for users.
Naturally, good system adminstration would want to use that space and have
the proper quotas/monitoring in place to alert when things get too close to
being full. 5% of even 10GB, IMHO, is wasted space.

But hey, that's my opinion and I will gladly stfu.



Re: difference between newfs and newfs -m 1 on a 250G hd?

2005-06-26 Thread Ted Unangst
On Sun, 26 Jun 2005, eric wrote:

> > you changed a default and found a bug.  less than 1% of users ever use -m.  
> > there's really no good reason to use -m 1, and several reasons not to (not 
> > least of which is it apparently doesn't work).  leave it alone and use the 
> > default; you will be happier.
> 
> Uh, ok. No offense, but if something is there as a knob to use, it shouldn't
> have a bug.

perhaps not, but not every knob is meant to cranked to the extremes.  
there are more important things to be worked on than find out why newfs -m 
1 doesn't work.

> Five percent of /home would be a LOT of space that could be used for users.
> Naturally, good system adminstration would want to use that space and have
> the proper quotas/monitoring in place to alert when things get too close to
> being full. 5% of even 10GB, IMHO, is wasted space.

without that 5 percent performance goes downhill.  fast.

-- 
And that's why I had to kill them all.



Re: difference between newfs and newfs -m 1 on a 250G hd?

2005-06-26 Thread eric
On Sun, 2005-06-26 at 15:48:58 -0400, Ted Unangst proclaimed...

> perhaps not, but not every knob is meant to cranked to the extremes.  
> there are more important things to be worked on than find out why newfs -m 
> 1 doesn't work.

Definitely, and if I ever bumped into the bug and could figure out what was
wrong, I'd submit a bugreport. But I've never bumped into the bug (wonder
why).

> without that 5 percent performance goes downhill.  fast.

Sure does, but I could care less about /home/users :) /home/staff is where
all the cool people are :)



Re: difference between newfs and newfs -m 1 on a 250G hd?

2005-06-26 Thread Daniel Ouellet

eric wrote:

# newfs -m 1 /dev/wd1h
# mount /dev/wd1h /home/users
# df -k
/dev/wd1h257268116  92122160 15228255238%/home

Five percent of /home would be a LOT of space that could be used for users.
Naturally, good system adminstration would want to use that space and have
the proper quotas/monitoring in place to alert when things get too close to
being full. 5% of even 10GB, IMHO, is wasted space.


I never used it, but looking at the man page, doesn't it say to use

 tunefs to set this properly instead?

Also from man 8 tunefs for the -m switch I see:

 -m minfree
   This value specifies the percentage of space held back from nor-
   mal users; the minimum free space threshold.  The default value
   used is 5%.  This value can be set to zero; however, a factor of
   up to three in throughput will be lost over the performance ob-
   tained at a 5% threshold.  Note that if the value is raised above
   the current usage level, users will be unable to allocate files
   until enough files have been deleted to get under the higher
   threshold.

Specially the "a factor of up to three in throughput..." would tell me 
not to play with it.


Don't get me wrong, I really don't know and never try to change the 
setting, but may be you may be able to do what you want by using the 
tunefs -m instead. Worth the try I think, but might be interesting to 
also do tests in performance to see if the saving of space is worth the 
degradation in performance the man page indicate it might have.


Hope this help some anyway...

Best regards,

Daniel



openntpd and access

2005-06-26 Thread J.D. Bronson

I am using obsd 3.7 with a update to 3.7-stable.
I am using the stock ntpd..

I have several Cisco boxes that need to sync off of this obsd box for NTP
and they are seeing connection refused.

I enabled time (udp/tcp) in inetd.conf and gave it a HUP.

Still cisco sees 'connection refused'.

So then I tried installing NTPD and running that instead. This time, 
it works...so..I know something is not happy with OpenNTPD...


What do I need to do to permit OpenNTPD to allow the cisco to use it?

my ntpd.conf file is generic and I dont have any ACLs setup.

Thanks in advance guys





--
J.D. Bronson
Information Services - Telecom
Aurora Health Care - Milwaukee, Wisconsin
Office: 414.978.8282 // Fax: 414.314.8787



Re: openntpd and access

2005-06-26 Thread Jason Crawford
By default, OpenNTPd doesn't listen on any port, it just acts as a
client for the local machine only. In order for it to serve time to
other machines on your network, you must uncomment the listen * line
in /etc/ntpd.conf, then send a SIGHUP to ntpd, or restart it, in order
for it to listen on port 123. time in inetd.conf refers to the UNIX
time protocol on port 37, which doesn't really have anything to do
with ntp. Uncomment the listen * line in /etc/ntpd.conf and then it'll
allow any box to sync time with it.

Jason

On 6/26/05, J.D. Bronson <[EMAIL PROTECTED]> wrote:
> I am using obsd 3.7 with a update to 3.7-stable.
> I am using the stock ntpd..
> 
> I have several Cisco boxes that need to sync off of this obsd box for NTP
> and they are seeing connection refused.
> 
> I enabled time (udp/tcp) in inetd.conf and gave it a HUP.
> 
> Still cisco sees 'connection refused'.
> 
> So then I tried installing NTPD and running that instead. This time,
> it works...so..I know something is not happy with OpenNTPD...
> 
> What do I need to do to permit OpenNTPD to allow the cisco to use it?
> 
> my ntpd.conf file is generic and I dont have any ACLs setup.
> 
> Thanks in advance guys
> 
> 
> 
> 
> 
> --
> J.D. Bronson
> Information Services - Telecom
> Aurora Health Care - Milwaukee, Wisconsin
> Office: 414.978.8282 // Fax: 414.314.8787



Re: openntpd and access

2005-06-26 Thread J.D. Bronson

At 04:29 PM 6/26/2005, Jason Crawford wrote:

By default, OpenNTPd doesn't listen on any port, it just acts as a
client for the local machine only. In order for it to serve time to
other machines on your network, you must uncomment the listen * line
in /etc/ntpd.conf, then send a SIGHUP to ntpd, or restart it, in order
for it to listen on port 123. time in inetd.conf refers to the UNIX
time protocol on port 37, which doesn't really have anything to do
with ntp. Uncomment the listen * line in /etc/ntpd.conf and then it'll
allow any box to sync time with it.

Jason



Thats what I had thoughtso here is what I did with ntpd.conf:

# Addresses to listen on (ntpd does not listen by default)
listen on 192.168.10.1

...then rebooted (what the heck) and still it wont permit any time sync.
the clients still get connection refused.

Its ok though, I got it working via NTPD, but just didnt understand 
why openntpd has this issue. :-(


thanks for the reply.







--
J.D. Bronson
Information Services - Telecom
Aurora Health Care - Milwaukee, Wisconsin
Office: 414.978.8282 // Fax: 414.314.8787



Re: openntpd and access

2005-06-26 Thread Jason Crawford
What about trying listen on *? And are you mabye running pf with
block-policy return? There are a bunch of reasons why connections
might be reset. If listen on * still doesn't work, maybe think about
filing some sort of bug report, or posting more to the list to get the
problem solved, because OpenNTPd should work just fine, does for me.
My entire network (including my XP machines) sync against OpenNTPd
running on current just fine.

Jason

On 6/26/05, J.D. Bronson <[EMAIL PROTECTED]> wrote:
> At 04:29 PM 6/26/2005, Jason Crawford wrote:
> >By default, OpenNTPd doesn't listen on any port, it just acts as a
> >client for the local machine only. In order for it to serve time to
> >other machines on your network, you must uncomment the listen * line
> >in /etc/ntpd.conf, then send a SIGHUP to ntpd, or restart it, in order
> >for it to listen on port 123. time in inetd.conf refers to the UNIX
> >time protocol on port 37, which doesn't really have anything to do
> >with ntp. Uncomment the listen * line in /etc/ntpd.conf and then it'll
> >allow any box to sync time with it.
> >
> >Jason
> 
> 
> Thats what I had thoughtso here is what I did with ntpd.conf:
> 
> # Addresses to listen on (ntpd does not listen by default)
> listen on 192.168.10.1
> 
> ...then rebooted (what the heck) and still it wont permit any time sync.
> the clients still get connection refused.
> 
> Its ok though, I got it working via NTPD, but just didnt understand
> why openntpd has this issue. :-(
> 
> thanks for the reply.
> 
> 
> 
> 
> 
> 
> 
> --
> J.D. Bronson
> Information Services - Telecom
> Aurora Health Care - Milwaukee, Wisconsin
> Office: 414.978.8282 // Fax: 414.314.8787



Re: openntpd and access

2005-06-26 Thread J.D. Bronson

At 04:40 PM 6/26/2005, Jason Crawford wrote:

What about trying listen on *? And are you mabye running pf with
block-policy return? There are a bunch of reasons why connections
might be reset. If listen on * still doesn't work, maybe think about
filing some sort of bug report, or posting more to the list to get the
problem solved, because OpenNTPd should work just fine, does for me.
My entire network (including my XP machines) sync against OpenNTPd
running on current just fine.

Jason


that seemed to do it. I set the listen to "*" and now things are good.
Odd perhaps, but thanks alot for the tip...






--
J.D. Bronson
Information Services - Telecom
Aurora Health Care - Milwaukee, Wisconsin
Office: 414.978.8282 // Fax: 414.314.8787



Re: openntpd and access

2005-06-26 Thread Jason Crawford
On 6/26/05, J.D. Bronson <[EMAIL PROTECTED]> wrote:
> At 04:40 PM 6/26/2005, Jason Crawford wrote:
> >What about trying listen on *? And are you mabye running pf with
> >block-policy return? There are a bunch of reasons why connections
> >might be reset. If listen on * still doesn't work, maybe think about
> >filing some sort of bug report, or posting more to the list to get the
> >problem solved, because OpenNTPd should work just fine, does for me.
> >My entire network (including my XP machines) sync against OpenNTPd
> >running on current just fine.
> >
> >Jason
> 
> that seemed to do it. I set the listen to "*" and now things are good.
> Odd perhaps, but thanks alot for the tip...
> 

That is odd, that it only worked with *. It should work properly if
you specify an individual address. If I get enough free time at some
point this week, I might try to reproduce this, but sunday nights are
not ment for such things.

Jason

> 
> 
> 
> 
> 
> --
> J.D. Bronson
> Information Services - Telecom
> Aurora Health Care - Milwaukee, Wisconsin
> Office: 414.978.8282 // Fax: 414.314.8787



Re: wireless usb

2005-06-26 Thread Qv6
On Sunday 26 June 2005 09:48 am, Jonathan Gray wrote:
> On Sun, Jun 26, 2005 at 04:46:30AM -0500, Qv6 wrote:
>  
>
> http://www.openbsd.org/cgi-bin/man.cgi?query=ural&apropos=0&sektion=4
>&manpath=OpenBSD+Current&arch=i386&format=html

I am familiar with that link and I bought one, a Belkin F5D7050 which is 
in the list of supported, that the system did not recognize. 

I just don't want to buy another one and not have it work.

So if anyone has used any specific model that worked - with/without 
tweaking, I'd appreciate hearing about it.

TIA,

--
Qv6



Re: wireless usb

2005-06-26 Thread Jonathan Gray
On Sun, Jun 26, 2005 at 05:26:21PM -0500, Qv6 wrote:
> On Sunday 26 June 2005 09:48 am, Jonathan Gray wrote:
> > On Sun, Jun 26, 2005 at 04:46:30AM -0500, Qv6 wrote:
> >  
> >
> > http://www.openbsd.org/cgi-bin/man.cgi?query=ural&apropos=0&sektion=4
> >&manpath=OpenBSD+Current&arch=i386&format=html
> 
> I am familiar with that link and I bought one, a Belkin F5D7050 which is 
> in the list of supported, that the system did not recognize. 
> 
> I just don't want to buy another one and not have it work.
> 
> So if anyone has used any specific model that worked - with/without 
> tweaking, I'd appreciate hearing about it.

ASUS WL-167g works well here, a know of a few people using the Linksys
one as well.



SH programming

2005-06-26 Thread Peter Bako
Ok, so this is not really an OpenBSD question but I am doing this on an
OpenBSD system and I am about to lose my mind...

I have done some basic shell scripting before but I've not had to deal with
actual integer math before and now it is killing me.  The script takes a
parameter in (year number) and is supposed to subtract 1900 from it and then
multiply the result by 365.  (This is part of a larger script that deal with
converting dates to a single numeric value, but this one problem is an
example of the problems I am having with this entire script.)  So, this is
what I have:

#!/bin/sh
month=$1 
day=$2
year=$3

dayscount=$(expr ($year - 1900) * 365)
echo $dayscount
exit

This will generate a "syntax error: `$year' unexpected" error.  I have tried
all sorts of variations and I am not getting it!!!  HELP!!!

BTW, obviously I need a good book on SH programming.  Any suggestions?

Thanks,
Peter



Re: SH programming

2005-06-26 Thread Michael Erdely
On 6/26/05, Peter Bako <[EMAIL PROTECTED]> wrote:
> dayscount=$(expr ($year - 1900) * 365)

Try:
dayscount=$((($year - 1900) * 365))

-- 
http://erdelynet.com/

Support OpenBSD! http://www.openbsd.org/orders.html



Re: SH programming

2005-06-26 Thread Ted Unangst
On Sun, 26 Jun 2005, Peter Bako wrote:

> #!/bin/sh
> month=$1 
> day=$2
> year=$3
> 
> dayscount=$(expr ($year - 1900) * 365)
> echo $dayscount
> exit
> 
> This will generate a "syntax error: `$year' unexpected" error.  I have tried
> all sorts of variations and I am not getting it!!!  HELP!!!

man sh says arithmetic expressions take double parens:

dayscount=$((($year - 1900) * 365))

don't forget about leap years.

-- 
And that's why we need security.



Re: advice

2005-06-26 Thread sebastian . rother
> Hello,
> I've installed OpenBSD recently and wanted to install few extra
> applications. Due to that I have some questions. First of all i will
> introduce what i would like to accomplish so maybe it would be easier to
> answer. My goal is to install www, ftp and ssh server based on stable
> software. Without any bugs and vulnerabilities (any known). For that i
> chose
> OpenBSD. Its default apache is only 1.3.29 version. I know there's been
> 1.3.33 released. And I actually do not know If 1.3.29 is patched and
> secure,

Not even Henning can tell you something about that.
I "hop2 they didn#t missed anything... but apache (wich ships with
openBSD) should be secure enought.

> beacause there's newer version...(i think it's very secure, but could you
> convince me?) Next thing is mod_bandwidth which is not included in OpenBSD
> ports. So here's my ports-about question. Is that possible to use
> FreeBSD's-5 stable ports in OpenBSD 3.7 ? I assume they will work but Is
> that OK?

The port wont work.
I don#t know the mod but if you wanna limit the bandwith you could maybe
also use pf.

> I do fancy FreeBSD's apache 1.3.33+ipv6 support but i don't know
> If
> i can install it on my OpenBSD server. Considering all i have a feeling i
> should come back to FreeBSD.

fBSD supports binary only drivers and sucks for sure because that...

> Can you give me a piece of advice ?
> I repeat - stable, secure www+ftp+ssh (default installation)

OpenBSD + CVS-Update of the Src
Rebuild the kernel (GENERIC)
Rebuild the world (make build)
And easy ftpD is includ OpenBSD but it miss a LOT of things you maybe
wanna use. So try PureFTPD from the Ports.
WWW? -> apachectl start ,)
ssh? Is already included...

Theo is "member" in both projects so I guess OpenBSD gets always the
latest stable ssh before it's relaesed at OpenSSH.org ;)

> I would really appreciate your reliable answer.
> Thanks in advice.

Np...
Ayn questions: Just ask

> K.S

Kind regards,
Sebastian



Re: openntpd and access

2005-06-26 Thread Lars Hansson
On Sun, 26 Jun 2005 16:16:43 -0500
"J.D. Bronson" <[EMAIL PROTECTED]> wrote:

> I have several Cisco boxes that need to sync off of this obsd box for NTP
> and they are seeing connection refused.

Cisco works with ntpd.

> I enabled time (udp/tcp) in inetd.conf and gave it a HUP.

This is not how you enable ntpd. You enable ntpd in rc.conf.local.
inetd's time service has nothing to do with ntp.

---
Lars Hansson



Re: SH programming

2005-06-26 Thread Peter Bako
Hum, I get a "syntax error: '*' unexpected"

-Original Message-
From: Michael Erdely [mailto:[EMAIL PROTECTED] 
Sent: Sunday, June 26, 2005 6:20 PM
To: Peter Bako
Cc: misc@openbsd.org
Subject: Re: SH programming


On 6/26/05, Peter Bako <[EMAIL PROTECTED]> wrote:
> dayscount=$(expr ($year - 1900) * 365)

Try:
dayscount=$((($year - 1900) * 365))

-- 
http://erdelynet.com/

Support OpenBSD! http://www.openbsd.org/orders.html



Re: difference between newfs and newfs -m 1 on a 250G hd?

2005-06-26 Thread bofh
On 6/26/05, Otto Moerbeek <[EMAIL PROTECTED]> wrote:
>
>
> On Sun, 26 Jun 2005, Ted Unangst wrote:
>
> > you changed a default and found a bug. less than 1% of users ever use
> -m.
> > there's really no good reason to use -m 1, and several reasons not to
> (not
> > least of which is it apparently doesn't work). leave it alone and use
> the
> > default; you will be happier.


Umm, I know for the kernel, we're supposed to use GENERIC if we want to
report a bug, but I did not realize that this carries through to the
userspace as well.

The only reason I reported it is because I it was a bug I've never seen
before, and I figured you guys might be interested.

Sound advice.
>
> But in addition to that, I noticed you have disk offsets starting at
> zero. On various patforms this is a problem, because you did not run
> fdisk. Check http://www.openbsd.org/faq/faq4.html#blankfdisk. Please
> include platform info (dmesg) next time.


Ah, it's ok, I'm not booting from it. Would have posted dmesg, but I figured
it wasn't necessary. If this is not a known bug, and if there's any interest
in a dmesg at all, I'll post it. Thanx.

-Tai



Re: SH programming

2005-06-26 Thread Stephen Marley
On Sun, Jun 26, 2005 at 09:32:36PM -0400, Ted Unangst wrote:
> On Sun, 26 Jun 2005, Peter Bako wrote:
> 
> > #!/bin/sh
> > month=$1 
> > day=$2
> > year=$3
> > 
> > dayscount=$(expr ($year - 1900) * 365)
> > echo $dayscount
> > exit
> > 
> > This will generate a "syntax error: `$year' unexpected" error.  I have tried
> > all sorts of variations and I am not getting it!!!  HELP!!!
> 
> man sh says arithmetic expressions take double parens:
> 
> dayscount=$((($year - 1900) * 365))
> 
> don't forget about leap years.

Traditional Bourne shell doesn't have arithmetic substitutions so it
would be done with expr like this:

dayscount=$(expr $(expr $year - 1900) \* 365)

or even:

dayscount=`expr  \`expr $year - 1900\` \* 365`

This only matters if your script needs to be portable.

-- 
stephen



Re: SH programming

2005-06-26 Thread Rod.. Whitworth
On Sun, 26 Jun 2005 20:51:07 -0700, Peter Bako wrote:

>Hum, I get a "syntax error: '*' unexpected"
>
IJWFM using sh or ksh on 3.7 i386 entering year and the calc line at
the prompt and echoing $daycount at the prompt.


>-Original Message-
>From: Michael Erdely [mailto:[EMAIL PROTECTED] 
>Sent: Sunday, June 26, 2005 6:20 PM
>To: Peter Bako
>Cc: misc@openbsd.org
>Subject: Re: SH programming
>
>
>On 6/26/05, Peter Bako <[EMAIL PROTECTED]> wrote:
>> dayscount=$(expr ($year - 1900) * 365)
>
>Try:
>dayscount=$((($year - 1900) * 365))
>
>-- 
>http://erdelynet.com/
>
>Support OpenBSD! http://www.openbsd.org/orders.html
>
>

>From the land "down under": Australia.
Do we look  from up over?

Do NOT CC me - I am subscribed to the list.
Replies to the sender address will fail except from the list-server.



Does openbsd support LVM?

2005-06-26 Thread vudghkzm

Hello, everyone.

I am wondering that openbsd supports LVM(Logical Volume Manager).
Does openbsd support LVM?



Re: wireless usb

2005-06-26 Thread jmc
On Sun, Jun 26, 2005 at 05:26:21PM -0500, Qv6 wrote:
> On Sunday 26 June 2005 09:48 am, Jonathan Gray wrote:
> > On Sun, Jun 26, 2005 at 04:46:30AM -0500, Qv6 wrote:
> >  
> >
> > http://www.openbsd.org/cgi-bin/man.cgi?query=ural&apropos=0&sektion=4
> >&manpath=OpenBSD+Current&arch=i386&format=html
> 
> I am familiar with that link and I bought one, a Belkin F5D7050 which is 
> in the list of supported, that the system did not recognize. 
> 
> I just don't want to buy another one and not have it work.
> 

the ids for this device were added only a few weeks ago, so you have to
run -current for it to work. otherwise it will just attach at ugen:

ural0 at uhub0 port 1
ural0: Belkin Belkin 54g USB Network Adapter, rev 2.00/0.01, addr 2
ural0: MAC/BBP RT2570 (rev 0x03), RF RT2526, address 00:11:50:4c:46:59

jmc