Re: How sweet it is... :)

2005-11-20 Thread Uwe Dippel
On Sat, 19 Nov 2005 19:49:53 -0600, J Moore wrote:


> Nov 19 17:00:34 opie ntpd[6238]: clock error = +26.46s; adjusting...
> Nov 19 17:04:03 opie ntpd[6238]: clock error = +17.27s; adjusting...
> Nov 19 17:07:31 opie ntpd[6238]: clock error = +9.24s; adjusting...
> Nov 19 17:11:52 opie ntpd[6238]: clock error = -0.63s; adjusting...
> Nov 19 17:16:10 opie ntpd[6238]: clock error = -4.75s; adjusting...

I have no say in it; but I may have an opinion:
Yes; go for it. It is comprehensible from the start; and I rather see an
estimate of the error; so eventually I can still rdate when off by many
hours. It also shows the regulation pretty well, with a slight
overshot as to be expected.
Just this morning one of my boxes showed 

Nov 20 09:14:28 mybox ntpd[21036]: adjusting local clock by -459.160367s
Nov 20 09:15:31 mybox ntpd[21036]: adjusting local clock by -459.023878s
Nov 20 09:16:05 mybox ntpd[21036]: adjusting local clock by -457.982831s
Nov 20 09:20:20 mybox ntpd[21036]: adjusting local clock by -457.527840s

and I was asking myself: "What does this mean to me ?" after the earlier
long exchange stating that is does *not* mean "I adjust by 459... seconds
now". So what is it, practically: drift ? calculated compensation value ? 
clock error is much cleaner, IMHO.

Uwe



Re: CDP with OpenBSD

2005-11-20 Thread Pete Vickers

Hi,

On 19. nov. 2005, at 18.58, [EMAIL PROTECTED] wrote:


Hi All,

I am searching for a Tool with which I can
do the Cisco Discovery Protocol (CDP) requests on


no such things as CDP requests. A host can merely transmit  
(broadcast) CDP info packets (by default every 60secs), and/or listen  
for them.




a OpenBSD. I searched in the ports and
packets but did not find any.
Does anyone know one?


I've used this before:

http://sourceforge.net/projects/scdp/

you need to tweak a couple of trivial 'all the world is x86' bugs, if  
all your world is not

I'll make a port if there's any demand.



After a Google search I found only a pen test tool.
http://yersinia.sourceforge.net/
Looks interesting.
I tried to install it on a OpenBSD 3.7 Stable.
I got
Libpcap (at least 0.8.x) library is needed in order to compile  
Yersinia!!...

I downloaded the http://www.tcpdump.org/release/libpcap-0.9.4.tar.gz
but I was not sure to which directory I should it install.
Any hints how to upgrade the libpcap libraries and to which directory
without getting any problems?

Thanks,
Stefan




Re: How sweet it is... :)

2005-11-20 Thread Bernd Schoeller
On Sat, Nov 19, 2005 at 07:49:53PM -0600, J Moore wrote:
> Nov 19 16:56:21 opie ntpd[6238]: clock error = +29.92s; adjusting...

I would be careful using the word 'error'. I get very irritated
whenever I read error in a logfile.

Bernd



Re: How sweet it is... :)

2005-11-20 Thread Tobias Ulmer
On Sun, Nov 20, 2005 at 12:46:26PM +0100, Bernd Schoeller wrote:
> On Sat, Nov 19, 2005 at 07:49:53PM -0600, J Moore wrote:
> > Nov 19 16:56:21 opie ntpd[6238]: clock error = +29.92s; adjusting...
> 
> I would be careful using the word 'error'. I get very irritated
> whenever I read error in a logfile.
> 
> Bernd
> 
>

I agree with Bernd here.

How about: clock off by xx seconds, adjusting... 

What I in particular find funny here is that Mr. Moore replaced 
adjusting by "adjusting..." Great improvment *lol*

If we had a stirling maschine in this mailing list, I could forget to 
pay my power bill the next three months.

Tobias



KBD(8) mapping question should accept "L" as an alternative for "?"

2005-11-20 Thread Andrés Delfino
I use the es mapping, but when I install OpenBSD "?" key /doesn't
work/ (cause I don't mapped my keyboard yet), which is ok. I know why
this happens, I can configure the keyboard because I already know
where "?" is, but someone may try to search for it if he/she doesn't,
:P.

So, I suggest the following:

KBD(8) mapping? ('?' for list) [none]

should change to something like:

KBD(8) mapping? ('?' or 'L' for list) [none]

Hope you understood me, English is not my language, :P

Greetings from Argentina



apache doesn't interpret php

2005-11-20 Thread noob lenoobie
Hello.

I installed a Fresh OpenBSD 3.8 in order to make a
firewall/webserver.But I can't make apache interpret php.

I did run phpxs -s, I checked my httpd.conf (with Loadmodule and
AddType), I restarted apache with apacheclt stop && sleep 1 &&
apachectl start (apachectl restart fails).

I've read many maillinglists and newsgroups, but the answer is always
"run phpxs -s" ou "add the required lines to httpd.conf". So I really
don't know what to do next.

You may want to see some commands :

#phpxs -s seems ok to me
phpxs -s
  [activating module php5 in /var/www/conf/httpd.conf]
  cp /usr/local/lib/php/libphp5.so /usr/lib/apache/modules/libphp5.so
  chmod 755 /usr/lib/apache/modules/libphp5.so
  cp /var/www/conf/httpd.conf /var/www/conf/httpd.conf.bak
  cp /var/www/conf/httpd.conf.new /var/www/conf/httpd.conf
  rm /var/www/conf/httpd.conf.new

  You should copy the sample configuration files from
  /usr/local/share/examples/php5 to /var/www/conf/php.ini

# LoadModule && AddType ok
grep php /var/www/conf/httpd.conf
  LoadModule php5_module/usr/lib/apache/modules/libphp5.so
  DirectoryIndex index.html index.php
  AddType application/x-httpd-php .php

# apache works perfectly
pgrep httpd
  1545
  24114
  31175
  2918
  4374
  8575
  2960
  17642

# php works fine
cat info.php
  
php info.php
  ok

pkg_info
  bash-3.0.16p1-static GNU Bourne Again Shell
  gettext-0.10.40p3   GNU gettext
  libiconv-1.9.2p1character set conversion library
  libxml-2.6.16p5 XML parsing library
  mysql-client-4.0.24 multithreaded SQL database (client)
  mysql-server-4.0.24p1 multithreaded SQL database (server)
  p5-DBD-mysql-3.0002 MySQL drivers for the Perl DBI
  p5-DBI-1.45p1   unified perl interface for database access
  p5-Net-Daemon-0.38  extension for portable daemons
  p5-PlRPC-0.2018 module for writing rpc servers and clients
  php5-core-5.0.4p0   server-side HTML-embedded scripting language
  php5-mbstring-5.0.4 multibyte characters extensions for php5
  php5-mysql-5.0.4mysql database access extensions for php5
  phpMyAdmin-2.6.3tool to handle the administration of MySQL
over the web
  vim-6.3.85p0-no_x11 vi clone, many additional features

Kind Regards,
Richard.



Re: apache doesn't interpret php

2005-11-20 Thread steven mestdagh
On Sun, Nov 20, 2005 at 06:22:15PM +0100, noob lenoobie wrote:
> Hello.
> 
> I installed a Fresh OpenBSD 3.8 in order to make a
> firewall/webserver.But I can't make apache interpret php.
> 
> I did run phpxs -s, I checked my httpd.conf (with Loadmodule and
> AddType), I restarted apache with apacheclt stop && sleep 1 &&
> apachectl start (apachectl restart fails).
> 
> I've read many maillinglists and newsgroups, but the answer is always
> "run phpxs -s" ou "add the required lines to httpd.conf". So I really
> don't know what to do next.
> 
> You may want to see some commands :
> 
> #phpxs -s seems ok to me
> phpxs -s
>   [activating module php5 in /var/www/conf/httpd.conf]
>   cp /usr/local/lib/php/libphp5.so /usr/lib/apache/modules/libphp5.so
>   chmod 755 /usr/lib/apache/modules/libphp5.so
>   cp /var/www/conf/httpd.conf /var/www/conf/httpd.conf.bak
>   cp /var/www/conf/httpd.conf.new /var/www/conf/httpd.conf
>   rm /var/www/conf/httpd.conf.new
> 
>   You should copy the sample configuration files from
>   /usr/local/share/examples/php5 to /var/www/conf/php.ini

you did perform this last step, right?

the next thing to look at is your httpd log file e.g.
/var/www/logs/error_log

p.s. this question belongs on @ports

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: apache doesn't interpret php

2005-11-20 Thread Jonathan Glaschke
On Sun, Nov 20, 2005 at 06:22:15PM +0100, noob lenoobie wrote:
> Hello.
> 
> I installed a Fresh OpenBSD 3.8 in order to make a
> firewall/webserver.But I can't make apache interpret php.
> 
> I did run phpxs -s, I checked my httpd.conf (with Loadmodule and
> AddType), I restarted apache with apacheclt stop && sleep 1 &&
> apachectl start (apachectl restart fails).
> 
> I've read many maillinglists and newsgroups, but the answer is always
> "run phpxs -s" ou "add the required lines to httpd.conf". So I really
> don't know what to do next.
> 
> You may want to see some commands :
> 
> #phpxs -s seems ok to me
> phpxs -s
>   [activating module php5 in /var/www/conf/httpd.conf]
>   cp /usr/local/lib/php/libphp5.so /usr/lib/apache/modules/libphp5.so
>   chmod 755 /usr/lib/apache/modules/libphp5.so
>   cp /var/www/conf/httpd.conf /var/www/conf/httpd.conf.bak
>   cp /var/www/conf/httpd.conf.new /var/www/conf/httpd.conf
>   rm /var/www/conf/httpd.conf.new
> 
>   You should copy the sample configuration files from
>   /usr/local/share/examples/php5 to /var/www/conf/php.ini
> 
> # LoadModule && AddType ok
> grep php /var/www/conf/httpd.conf
>   LoadModule php5_module/usr/lib/apache/modules/libphp5.so
>   DirectoryIndex index.html index.php
>   AddType application/x-httpd-php .php
> 
> # apache works perfectly
> pgrep httpd
>   1545
>   24114
>   31175
>   2918
>   4374
>   8575
>   2960
>   17642
> 
> # php works fine
> cat info.php
>   
> php info.php
>   ok
> 
> pkg_info
>   bash-3.0.16p1-static GNU Bourne Again Shell
>   gettext-0.10.40p3   GNU gettext
>   libiconv-1.9.2p1character set conversion library
>   libxml-2.6.16p5 XML parsing library
>   mysql-client-4.0.24 multithreaded SQL database (client)
>   mysql-server-4.0.24p1 multithreaded SQL database (server)
>   p5-DBD-mysql-3.0002 MySQL drivers for the Perl DBI
>   p5-DBI-1.45p1   unified perl interface for database access
>   p5-Net-Daemon-0.38  extension for portable daemons
>   p5-PlRPC-0.2018 module for writing rpc servers and clients
>   php5-core-5.0.4p0   server-side HTML-embedded scripting language
>   php5-mbstring-5.0.4 multibyte characters extensions for php5
>   php5-mysql-5.0.4mysql database access extensions for php5
>   phpMyAdmin-2.6.3tool to handle the administration of MySQL
> over the web
>   vim-6.3.85p0-no_x11 vi clone, many additional features
> 
> Kind Regards,
> Richard.
> 
Hello,

does it work without a chrooted enviroment?

Try "httpd -u".

Greetings
Jonathan

-- 
 | /"\   ASCII Ribbon   | Jonathan Glaschke - Lorenz-Goertz-Stra_e 71,
 | \ / Campaign Against | 41238 Moenchengladbach, Germany;
 |  XHTML In Mail   | jabber: [EMAIL PROTECTED]
 | / \ And News | http://jonathan-glaschke.de/



Re: OpenBSD 3.8 & Bugzilla - does anyone have this running ok?

2005-11-20 Thread Trystan Negus
Hi. This is just an update to the thread I started re running  
Bugzilla on OpenBSD 3.8: Possibly not directly OpenBSD related, but  
it might help anyone searching the archives of this list for the same  
problem.


(as posted to  netscape.public.mozilla.webtools)
"An update on this problem that I had - posted here in case anyone has
the same problem and finds this thread. (Recap: OpenBSD 3.8 + MySQL +
Bugzilla 2.20 or 2.18 - Premature end of server headers error every so
often (not reliably reproduced) with no other error information
anywhere at all)

I traced through the bugzilla code with syslog calls until I hit the
offending line of code that caused everything to fail -
Bugzilla/Auth/Login/WWW/CGI/Cookie.pm:$dbh->do("UPDATE
logincookies SET lastused=NOW() WHERE cookie=?" (etc.)

MySQL didn't complain about the statement - I set all the appropriate
error and tracing flags - but it still silently barfed, so I tried
switching the backend to Postgresql, and everything now works."

Why? No idea - it works now so I'm going to the pub. Hope this helps  
someone.


Cheers,

Trystan

##
Re:
List:   openbsd-misc
Subject:Re: OpenBSD 3.8 & Bugzilla - does anyone have this  
running ok?

From:   Trystan Negus 
Date:   2005-11-16 15:56:49
Message-ID: 437B56C1.7080106 () pellenys ! org ! uk
[Download message RAW]

Thanks - that page looks like a good place to start. It'll be useful
stuff to know about anyway - I'll start reading.

Much appreciated

Trystan

Alexander Farber wrote:
> IMHO when you get situations like this:
>
> On 11/16/05, Trystan Negus <[EMAIL PROTECTED]> wrote:
>
>> Symptom: Using a browser, configuration pages occasionally (1 in 5
>> refreshes, more or less) return an error 500 page, coupled with
>> 'Premature end of script headers' error in Apache's error log. No  
errors
>> in /var/log/messages. Refresh the page, and all works  
fineuntil a

>> number of refreshes (or config page links) later.
>>
>
> then you have to ensure that you have just 1 Apache child running
> (httpd -X) before you start further debugging/troubleshooting:
> http://perl.apache.org/docs/1.0/guide/debug.html



pxeboot arps for its own ip address

2005-11-20 Thread Paul de Weerd
Hi all,

I'm trying to install an older Dell system, an Optiplex GX-1. This is
a 600 MHz P3 with the latest BIOS (A10) from H^HDell. It has an
onboard xl(4) that supports PXE booting so I decided (after several
broken floppies) to take the pxeboot-route.

The system will come up and start DHCP'ing for an IP address. When it
gets a lease it downloads the pxeboot bootloader from my tftp server
and executes it. This looks like :

3Com PXE, version 0.99n.02
Copyright (C) 1997,1998  Intel Corporation.  All rights reserved.

(C) Copyright 1999,2000 Lanworks Technologies Co.
a subsidiary of 3Com Corporation

DHCP MAC ADDR: 00 B0 D0 18 26 4F
CLIENT IP: 192.168.94.46  MASK: 255.255.255.192  DHCP IP: 192.168.94.60
probing: pc0 com0 com1 apm pxe+[0.99] mem[640K 383M a20=on]
disk: fd0 hd0+*
net: mac 00:00:00:00:01:00, ip 0.0.0.0, server 0.0.0.0
>> OpenBSD/i386 PXEBOOT 1.06

After this, it tries to arp for its own IP address :

19:01:52.566774 0:b0:d0:18:26:4f ff:ff:ff:ff:ff:ff 0806 60: arp who-has 
192.168.94.46 tell 192.168.94.46

After three such attempts, I get a 'PXE-E11: ARP timeout.' error and
the system tries again. After four of these errors the machine crashes
with a double fault trap (warning : typed in by hand) :

trap: 13(43747): double fault
cn_tab=0x4c660
eax e0b ecx 4d734 edx   4e894 ebx   4e89c
esp fd68 ebpfd88 esi4e0a0 edi   4e880
eip 8 eflags4e894 cs246 ss  10
ds  10 es   10 fs   10 gs   10
Code dump [0x8]:
f000e2c3 3ef000e2 b23ef000 b23ef0 f000b23e 3ef000b2 b23ef000 b23ef0
Memory dump [0x1a000]:
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
Stack trace [0xfd68]:
d 7400 3474 4347400 43474 8000434 80004 800
8 4600 246 24600 246 9402 e894 4e89400
4e894 9c0004e8 e89c0004 4e89c00 4e89c a4e8 e0a4 4e0a000
fe0a0 64e0 d764 80d76000 4380d760 a84380d7 fda84380 fda843
fda8 6fd 1e06 41e0600 41e06 a41e e0a4 4e0a000
4e0a0 9c0004ea e89c0004 4e89c00 4e89c d0004e8 20d0004 20d00

[this output looks quite similar when produced several times, although
many values differ, lots of stuff is the same]

I also tried with a published ARP entry for this IP address on my
DHCP/TFTP server :

$ sudo arp -s 192.168.94.46 0:b0:d0:18:26:4f permanent pub

This crashes the machine with a similar double fault trap immediately
after sending out the 'is-at' reply in response to the first ARP
who-has request.

So there's a couple of strange things (in my opinion) :

o pxeboot shows MAC and IP with lots of 0's
o the system tries to ARP for its own IP

My question is, does the PXE implementation of the xl(4) card suck or
is there some bug in pxeboot(8) ? It manages to download pxeboot
correctly, but I'm not sure if that makes it an otherwise good PXE
implementation. Has anyone seen this sort of behaviour before ?

I should note that I used the latest pxeboot from my local mirror,
although there seems to be little change between this version and 3.8

$ md5 /tftpboot/pxeboot
MD5 (/tftpboot/pxeboot) = 4d0956341ea53b9f74326b273ef9aff0

If anyone wants, I can provide tcpdump logs of the process.

Thanks,

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



japanese input method (日本語入力)

2005-11-20 Thread tuyosi
Hi all ,my name is takesima .

this is about "3.8 japanese" .

i read the excellent  http://www.ne.jp/asahi/diver/hrk/openbsd/s-anthy.html ,
and i only ***follow*** it ,
and i can use anthy  on emacs on konsole .


bash-3.00$ tail -10 /etc/rc.local
#fi
echo '.'
# Netatalk stuff
#if [ -f /etc/netatalk/rc.atalk ]; then
#   . /etc/netatalk/rc.atalk
#fi
#/usr/local/bin/jserver<-- attention please


bash-3.00$ cat .xinitrc
#!/bin/bash
export LANG=ja_JP.eucJP
#export XMODIFIERS="@im=kinput2"<-- attention please
#kinput2 -wnn &   <-- attention please
startkde


bash-3.00$ cat .emacs
(load-library "anthy")
(setq default-input-method 'japanese-anthy)
(setq anthy-wide-space " ")


-bash-3.00# ps -ax | grep wnn
29987 p4  I+  0:00.01 grep wnn
--
-bash-3.00# ps -ax | grep jserver
--
-bash-3.00# ps -ax | grep anthy
21462 p1  Is+ 0:00.07 /usr/local/bin/anthy-agent


i paste japanese on emacs to kontact (=kmail) .
thus i can put japanese on kmail the followings

日本語できます

mail:  [EMAIL PROTECTED]



Re: How sweet it is... :)

2005-11-20 Thread J Moore
On Sun, Nov 20, 2005 at 03:15:30PM +0100, the unit calling itself Tobias Ulmer 
wrote:
> On Sun, Nov 20, 2005 at 12:46:26PM +0100, Bernd Schoeller wrote:

> > > Nov 19 16:56:21 opie ntpd[6238]: clock error = +29.92s; adjusting...
> > 
> > I would be careful using the word 'error'. I get very irritated
> > whenever I read error in a logfile.
> > 
> > Bernd
> > 
> 
> I agree with Bernd here.
> 
> How about: clock off by xx seconds, adjusting... 
> 
> What I in particular find funny here is that Mr. Moore replaced 
> adjusting by "adjusting..." Great improvment *lol*
> 
> If we had a stirling maschine in this mailing list, I could forget to 
> pay my power bill the next three months.

With all due respect, gentlemen, I think you need to warm up to the idea 
that clocks do have errors, and those errors do need to be corrected. 
The log entries simply give you a bit of information wrt what your 
system is doing to correct those errors.

And I guess you would need to read that "other thread" on the subject of 
timekeeping before you could understand this one (ref: timekeeping on 
Soekris net4801 w/ ntpd. 3.8.) 

And finally, the irony: I can now empathize with Herr Brauer - how dare 
you suggest my log entries are unclear!  :D

Seriously though - if the words "error" or "adjusting..." don't suit 
your notion of a proper log entry, the OP gives you everything you need 
to tailor it to your own liking.

V/R,
Jay 



Re: Motherboard recommendations? Pentium IV, 2GB+ RAM?

2005-11-20 Thread dontek
I've got OpenBSD (3.7 and 3.8) running on both these boards with no
problems what-so-ever:

P4 (66Mhz PCI-X)
http://www.tyan.com/products/html/tomcati7210.html
Intel onboard gigabit, 1 CSA, 1 PCI.
Intel ICH5 SATA and Sil3114 SATA, 6 ports total

Dual Opteron (2 PCI-X buses, one 100Mhz, one 133Mhz, 2 slots each)
http://www.tyan.com/products/html/thunderk8w.html
broadcom on-board gigabit (I added a gigabit Intel dual-port PCI-X controller)
Sil3114 SATA

Depending on how processor intensive your particular use will be, and
how much money you want to spend, I might stick with the P4 setup if
you're more cost-driven.  Intel chipests are most always very stable
performers and you almost always get dual gigabit intel ethernet on
board with the P4 server boards.

Obviously the Opteron(s) are going to perform the pants off the P4,
but the cost will be significantly higher and you're much more likely
to get stuck with ill-working or unsupported onboard ethernet/SATA and
end up spending even more money on good gigabit ethernet controllers.

>From your description of your use setup, it sounds to me a single of
either processor will be more than sufficient.  (I run Celeron Ds in
my two P4 boxes on that P4 Tyan board with Apache, OpenLDAP, Postfix,
Courier-IMAP, Samba, PHP, etc... hosting several domains and processor
speed has never been a problem)

my 2 cents
don..

On 11/19/05, C. Bensend <[EMAIL PROTECTED]> wrote:
> > Supermicro P4SCi (S478) - really designed for Supermicro chassis though.
> >
> > PCI-X 64bit (only 66MHz I'm afraid) and PC3200 capable.
>
> Hey, thanks, Paul.  It is very much appreciated.  I don't know
> why my searches haven't turned up this one, but it has almost
> everything I want, and a reasonable price.
>
> Benny
>
>
> --
> "Young lady, I yelled at you because that paperwork looked like it
> had been done by a drunk four-year-old." -- Dr. Bob Kelso, "Scrubs"



Motherboard brands

2005-11-20 Thread Tim
Hello
  
  I read in an earlier thread some criticism of a brand I thought was 
reliable/quality with OpenBSD and in general: ASUS.
  
  So what motherboard brand can you rely on for a desktop then?



apsfilter and laserjets

2005-11-20 Thread Bachman Kharazmi
I'm trying to get my HP laserjet 1020(usb) working with apsfilter running obsd.
I've installed the hpijs pkg and apsfilter.

As default no laserjets are available in the printerlist when running
apsfilter's setup.
>From what I can read at
http://www.apsfilter.org/docs/apsfilter-handbook-stable.html#setup_tips
 apsfilterrc need to be modified, this is where I'am unsure what I
need to add to get my laserjet properly listed when running the setup.

The reason why I'm asking this obsd unspecific question here is that I
droped a mail to apsfilters ML but it looks like it has been dead
since 2003.
/bkw
--
##
BKW - Bachman Kharazmi
bahkha AT gmail DOT com
uin: #24089491
SWEDEN
##



Re: Motherboard recommendations? Pentium IV, 2GB+ RAM?

2005-11-20 Thread C. Bensend
> I've got OpenBSD (3.7 and 3.8) running on both these boards with no
> problems what-so-ever:
>
> P4 (66Mhz PCI-X)
> http://www.tyan.com/products/html/tomcati7210.html
> Intel onboard gigabit, 1 CSA, 1 PCI.
> Intel ICH5 SATA and Sil3114 SATA, 6 ports total
>
> Dual Opteron (2 PCI-X buses, one 100Mhz, one 133Mhz, 2 slots each)
> http://www.tyan.com/products/html/thunderk8w.html
> broadcom on-board gigabit (I added a gigabit Intel dual-port PCI-X
> controller)
> Sil3114 SATA

Excellent suggestions, they are much appreciated.  Thanks, Don!

Benny


-- 
"Young lady, I yelled at you because that paperwork looked like it
had been done by a drunk four-year-old." -- Dr. Bob Kelso, "Scrubs"



pf and interface groups in 3.8

2005-11-20 Thread Peter Fraser
I was trying out the interface groups of pf 3.8,  I was surprised to
get a syntax error with:

pass out quick proto { tcp udp } 
 from egress to any port domain  flags S/SA keep state

you do not get an error message for

pass out quick proto { tcp udp } 
  from (egress) to any port domain flags S/SA keep state

Also as a result of this experimentation. I discover that syntactically
you
can say:

antispoof $dbg quick for self

or

pass out quick on self proto { tcp udp } 
 from (egress) to any port domain flags S/SA keep state

which seems to use "self" in these case as an undefined interface
group, I would have expected that "self" would have been implemented
a interface group of all the interfaces on the computer. 

pf is very unhappy if you use:

set loginterface egress

After this statement I could not get pf to work again unless I rebooted.

also it is not obvious to me what happens when you use:

antispoof quick for Inside

where "Inside" is an interface group containing several interfaces.  I
expect
that antispoof only works as a group, rather than on each interface
individually



Re: pxeboot arps for its own ip address

2005-11-20 Thread Nick Holland
Paul de Weerd wrote:
> Hi all,
> 
> I'm trying to install an older Dell system, an Optiplex GX-1. This is
> a 600 MHz P3 with the latest BIOS (A10) from H^HDell. It has an
> onboard xl(4) that supports PXE booting so I decided (after several
> broken floppies) to take the pxeboot-route.
> 
> The system will come up and start DHCP'ing for an IP address. When it
> gets a lease it downloads the pxeboot bootloader from my tftp server
> and executes it. This looks like :
> 
> 3Com PXE, version 0.99n.02

Version numbers less than 1 are scary on commercial products.
They are annoying on free products.

Doesn't anyone FINISH anything anymore?

> Copyright (C) 1997,1998  Intel Corporation.  All rights reserved.
> 
> (C) Copyright 1999,2000 Lanworks Technologies Co.
> a subsidiary of 3Com Corporation
> 
> DHCP MAC ADDR: 00 B0 D0 18 26 4F
> CLIENT IP: 192.168.94.46  MASK: 255.255.255.192  DHCP IP: 192.168.94.60
> probing: pc0 com0 com1 apm pxe+[0.99] mem[640K 383M a20=on]
> disk: fd0 hd0+*
> net: mac 00:00:00:00:01:00, ip 0.0.0.0, server 0.0.0.0
>>> OpenBSD/i386 PXEBOOT 1.06
> 
> After this, it tries to arp for its own IP address :
> 
> 19:01:52.566774 0:b0:d0:18:26:4f ff:ff:ff:ff:ff:ff 0806 60: arp who-has 
> 192.168.94.46 tell 192.168.94.46
> 
> After three such attempts, I get a 'PXE-E11: ARP timeout.' error and
> the system tries again. After four of these errors the machine crashes
> with a double fault trap (warning : typed in by hand) :
> 
> trap: 13(43747): double fault
> cn_tab=0x4c660
> eax e0b ecx 4d734 edx   4e894 ebx   4e89c
> esp fd68 ebpfd88 esi4e0a0 edi   4e880
> eip 8 eflags4e894 cs246 ss  10
> ds  10 es   10 fs   10 gs   10
> Code dump [0x8]:
> f000e2c3 3ef000e2 b23ef000 b23ef0 f000b23e 3ef000b2 b23ef000 b23ef0
> Memory dump [0x1a000]:
> 0 0 0 0 0 0 0 0
> 0 0 0 0 0 0 0 0
> 0 0 0 0 0 0 0 0
> 0 0 0 0 0 0 0 0
> 0 0 0 0 0 0 0 0
> 0 0 0 0 0 0 0 0
> Stack trace [0xfd68]:
> d 7400 3474 4347400 43474 8000434 80004 800
> 8 4600 246 24600 246 9402 e894 4e89400
> 4e894 9c0004e8 e89c0004 4e89c00 4e89c a4e8 e0a4 4e0a000
> fe0a0 64e0 d764 80d76000 4380d760 a84380d7 fda84380 fda843
> fda8 6fd 1e06 41e0600 41e06 a41e e0a4 4e0a000
> 4e0a0 9c0004ea e89c0004 4e89c00 4e89c d0004e8 20d0004 20d00
> 
> [this output looks quite similar when produced several times, although
> many values differ, lots of stuff is the same]
> 
> I also tried with a published ARP entry for this IP address on my
> DHCP/TFTP server :
> 
>   $ sudo arp -s 192.168.94.46 0:b0:d0:18:26:4f permanent pub
> 
> This crashes the machine with a similar double fault trap immediately
> after sending out the 'is-at' reply in response to the first ARP
> who-has request.
> 
> So there's a couple of strange things (in my opinion) :
> 
>   o pxeboot shows MAC and IP with lots of 0's
>   o the system tries to ARP for its own IP
> 
> My question is, does the PXE implementation of the xl(4) card suck or
> is there some bug in pxeboot(8) ? It manages to download pxeboot
> correctly, but I'm not sure if that makes it an otherwise good PXE
> implementation. Has anyone seen this sort of behaviour before ?

yes, unfortunately.
Looks like we get junk at the same places, Dell GX1, G1 and GX100
systems are where I saw this problem as well. :)

I've seen similar problems on fxp cards, however most of those are flash
upgradable, whereas 3Com cards don't seem to be.  The PXE ROMs of that
vintage didn't seem very good...  Our PXE boot process seems to work
better on newer-vintage ROMs than it does on these first-generation
products.

I have placed some of these cards in the Right Person's hands to see if
it can be improved, but that person has been pretty busy lately...

The good news is, 3Com has a PXE boot floppy that works for almost all
their Ethernet cards (inc. ISA products), free for the download.  All
things considered, /for my uses/, the floppy (or burning it to a
bootable CD) is more useful than the boot ROMs.

Nick.



Re: pxeboot arps for its own ip address

2005-11-20 Thread Paul de Weerd
Hi Nick,

Thanks for your reply.

On Sun, Nov 20, 2005 at 03:29:13PM -0500, Nick Holland wrote:
| > 3Com PXE, version 0.99n.02
| 
| Version numbers less than 1 are scary on commercial products.
| They are annoying on free products.
| 
| Doesn't anyone FINISH anything anymore?

Great minds...

| The good news is, 3Com has a PXE boot floppy that works for almost all
| their Ethernet cards (inc. ISA products), free for the download.  All
| things considered, /for my uses/, the floppy (or burning it to a
| bootable CD) is more useful than the boot ROMs.

A reasonable (and interesting) point, but my main interest in booting
this system via PXE was lack of a CD-ROM drive and *#&@(*&$@(* failing
floppies. It's been forever since I last bought new floppies .. in
fact I just yesterday threw out some 5.25" 360KB ones I found while
cleaning up some old mess. I was hoping the floppy-days were over.

Nonetheless, thanks for your answer. I'll find some other means to
install this box and another box to play PXE games with ;)

Cheers,

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: pxeboot arps for its own ip address

2005-11-20 Thread Josh Webb

Paul de Weerd wrote:

So there's a couple of strange things (in my opinion) :

o pxeboot shows MAC and IP with lots of 0's
o the system tries to ARP for its own IP


I don't know about that first one, but it is normal for a host to ARP 
for its own IP. That is what's known as a "gratuitous" ARP. If there is 
a reply, the system knows there is an address conflict. Also, it serves 
to update the ARP cache on other systems if a different NIC takes over 
for an IP address (like if the system or NIC were replaced).




Re: Motherboard brands

2005-11-20 Thread J Moore
On Sun, Nov 20, 2005 at 08:19:18PM +0100, the unit calling itself Tim wrote:
> Hello
>   
>   I read in an earlier thread some criticism of a brand I thought was 
> reliable/quality with OpenBSD and in general: ASUS.
>   
>   So what motherboard brand can you rely on for a desktop then?
> 

I've had good luck with Tyan. 

I've always heard Asus built good mobos, but have never tried one.

My favorite (but never run OBSD on it) is a microATX board built by 
Biostar - M7NCG 400 (< $65 @ pricegrabber). It's got sound, graphics & 
networking built-in, and uses an Athlon processor. I put mine in an 
Antec 'Aria' case which has a nifty little CF slot on the front panel. 
It's not a server-class mobo, but I think it makes a great low-cost, 
lightweight desktop.

Jay



Re: pxeboot arps for its own ip address

2005-11-20 Thread Paul de Weerd
On Sun, Nov 20, 2005 at 02:53:04PM -0600, Josh Webb wrote:
| Paul de Weerd wrote:
| >So there's a couple of strange things (in my opinion) :
| >
| > o pxeboot shows MAC and IP with lots of 0's
| > o the system tries to ARP for its own IP
| 
| I don't know about that first one, but it is normal for a host to ARP 
| for its own IP. That is what's known as a "gratuitous" ARP. If there is 
| a reply, the system knows there is an address conflict. Also, it serves 
| to update the ARP cache on other systems if a different NIC takes over 
| for an IP address (like if the system or NIC were replaced).

Very true, but this machine waits for an answer (which should not (and
does not) come after a gratuitous arp. And it will complain with an
"arp timeout" error message. That is rather strange if you'd ask me,
timeouts on gratuitous arps.

Cheers,

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: Motherboard brands

2005-11-20 Thread Steve B
I used an Asus XP55T2P4 for many years with no troubles. My current board is
an Asus P2B which has been running smoothly since I bought it used a month
ago. Only reason I upgraded was because the seller threw in a nice 4U
rackmount server case for free! The XP55T2P ran OBSD from v2.7 through v3.7.
Speaking strictly for myself I have always found them to be reliable.

Steve



Re: Motherboard brands

2005-11-20 Thread Nick Holland
Tim wrote:
> Hello
> 
> I read in an earlier thread some criticism of a brand I thought was
> reliable/quality with OpenBSD and in general: ASUS.
> 
> So what motherboard brand can you rely on for a desktop then?

Life isn't that simple.

I suspect almost every manufacturer of almost every product has had
good, if not wonderful products, and real stinkers.  One of my favorite
examples goes back 20 years in the hard disk world: one of the worst
disks I remember seeing was the Seagate ST225 (20M, whoo!).  One of the
best was...the Seagate ST225.  The difference?  The early ones were
cutting edge, and it showed.  The final ones were trailing edge and it
showed.  All the bugs were worked out of their manufacturing process,
and they just worked (and they would probably still be working today, if
20M wasn't such a joke anymore...)

There may be some "Never buy" brands out there, but there are unlikely
to be any "always safe".

In the computer industry, by the time you can say with certainty that a
particular product is good and reliable...it has been discontinued for
six months (or if you are worried about reliability, more like two
years).  You need longer to verify this than the life cycle of the
product will give you.

Just to add insult to confusion, one little driver change could make the
difference between a nearly useless board (on say, OpenBSD 3.7) and a
very solid board (on 3.8 or -current).  Take the frustrated word of
someone about the old release, you may be cheating yourself out of a
good thing.  This certainly isn't an OpenBSD issue -- I'm sure a lot of
people remember the i810 headaches with Win(crash!)do(crash!)ws
9(Crash!)8, but Windows 2000 ran for months at a time on such a system...

(insert statistics lesson about how one experience with a sample of one
is not always portable to an entire class of products here)

Get used to it, that's just the way it is.  You will have to spend some
money, hope for the best, and roll with it if it doesn't work out.
Either that, or accept very non-cutting edge stuff you find in the
surplus bins of the world, and hope it was well-treated in those surplus
bins (it wasn't).

Nick.



Re: Issues getting Xorg running

2005-11-20 Thread Fletch

Lars Hansson wrote:

On Sat, 2005-11-19 at 08:50 +1300, Fletch wrote:

I run xorgcfg, and my screen blinks and it fails with Caught signal 11. 
 Server aborting.  So I run xorgconfig instead to set everything up in 
text mode.  Setup all the values as per many times before (under linux), 
and then run startx.



Tried just running X and let the autoconfig do the job?
You could also try "Xorg -configure" to create a basic configuration.

---
Lars Hansson




Re: Issues getting Xorg running

2005-11-20 Thread Fletch

Fletch wrote:

Lars Hansson wrote:


On Sat, 2005-11-19 at 08:50 +1300, Fletch wrote:

I run xorgcfg, and my screen blinks and it fails with Caught signal 
11.  Server aborting.  So I run xorgconfig instead to set everything 
up in text mode.  Setup all the values as per many times before 
(under linux), and then run startx.




Tried just running X and let the autoconfig do the job?
You could also try "Xorg -configure" to create a basic configuration.

---
Lars Hansson


hmm ... guess I'm awake today, there was no actual reply in the last 
one.  heh



Yep, tried that too.  Used the default config file it generates and its 
just the same.  I figure thats what xorgcfg does to get its basic values 
when starting (in GUI mode anyways).  About the only difference is when 
I do it that way, it doesn't exit with signal 11, but rather, cannot 
connect to xserv, and something about the xserv is already runnning, but 
its not.  Not in the ps output anyways.


Thanks

F



Re: Sharity-light under OpenBSD 3.8

2005-11-20 Thread Jon Krom
>  Date: Fri, 18 Nov 2005 13:23:10 -0500
>  From: Frank Bax <[EMAIL PROTECTED]>
>  
>  At 08:44 AM 11/16/05, Jon Krom wrote:
>  >   # shlight //storage/PUBLIC /mnt -n
>  >   error connecting to server: [23] Too many open files in system
>  
>  
>  Shouldn't that be
>   # shlight //storage/PUBLIC /mnt/Something -n

I wouldn't know why, normally one can mount on any directory.

>  Although making the same typo on my 3.6 & 3.7 systems still works
>  properly (connect to Win98 & Linux).  Sorry, I don't have 3.8 yet.
>  Maybe you actually have a lot of files open?

Not that I know.  There are hardly any tasks running on this computer.
There are some 80 files in //storage/PUBLIC, so I don't expect shlight
to open much more than that.  The kern.maxfiles option is set to 1770
or so and the per-process limit is set to 1023.

So I'm at a loss, what to try next.
What do I do wrong ??

Jon



Re: How sweet it is... :)

2005-11-20 Thread Henning Brauer
* Tobias Ulmer <[EMAIL PROTECTED]> [2005-11-20 15:18]:
> How about: clock off by xx seconds, adjusting... 

How about getting over it. I made clear the log message will not be 
changed.
period.



Re: tcpdump and libpcap versions...

2005-11-20 Thread Damien Miller

On Sat, 19 Nov 2005, poncenby smythe wrote:


Dear list,

Does anyone why the versions of tcpdump and libpcap in 3.8 GENERIC (3.2(i 
think) and 0.5 respectively) are quite a way off from the current stable 
releases (0.9.4).


Exactly what do you want from the tcpdump.org version?

-d



Re: How sweet it is... :)

2005-11-20 Thread J Moore
On Mon, Nov 21, 2005 at 12:11:52AM +0100, the unit calling itself Henning 
Brauer wrote:
> * Tobias Ulmer <[EMAIL PROTECTED]> [2005-11-20 15:18]:
> > How about: clock off by xx seconds, adjusting... 
> 
> How about getting over it. I made clear the log message will not be 
> changed.
> period.

The patch was offered for those who wish to change the message to suit 
their tastes. It may be applied as a 'local' patch. I'm not sure anyone 
was asking you to change your log message.

Jay



Unsubscription Confirmation

2005-11-20 Thread Subscriber Services
You have been successfully removed and will not receive any more messages.



Re: Motherboard brands

2005-11-20 Thread Simon Morgan
Tim  yahoo.se> writes:
> Hello
> 
> I read in an earlier thread some criticism of a brand I thought was
> reliable/quality with OpenBSD and in general: ASUS.
> 
>   So what motherboard brand can you rely on for a desktop then?

Asus have a good track record and generally build good stuff. It seems
that guy just had a bad experience.



bridge and Spanning Tree, WAS Re: Help with bridging firewall failover w/ CARP, OpenBSD 3.7

2005-11-20 Thread Ramsey Tantawi
All,

I set up failover of two redundant bridging firewalls using the
Spanning Tree Protocol options in bridge, and it worked great.

However, when testing failover, it takes between 45 seconds to more
than 3 minutes for traffic to start flowing again.  The interfaces
themselves change state in the expected timeframe, though.  The entire
network is unmanged switches, and my guess is that the delay is due to
waiting for all the ARP caches to clear.  Does this sound reasonable?

To help, I set the bridge cache to flush every 20 seconds instead of
the default 240.  It seems to help somewhat.  I'm concerned though--is
this too frequent?

This is the /etc/bridgename.bridge0 file of the master:

add fxp0
add rl0
blocknonip fxp0
stp fxp0
stp rl0
maxage 5
hellotime 2
priority 100
ifcost fxp0 100
ifcost rl0 55
timeout 20
fwddelay 7
up

Thanks,

Ramsey



Re: How sweet it is... :)

2005-11-20 Thread Jonathan Glaschke
On Sun, Nov 20, 2005 at 05:59:31PM -0600, J Moore wrote:
> On Mon, Nov 21, 2005 at 12:11:52AM +0100, the unit calling itself Henning
Brauer wrote:
> > * Tobias Ulmer <[EMAIL PROTECTED]> [2005-11-20 15:18]:
> > > How about: clock off by xx seconds, adjusting...
> >
> > How about getting over it. I made clear the log message will not be
> > changed.
> > period.
>
> The patch was offered for those who wish to change the message to suit
> their tastes. It may be applied as a 'local' patch. I'm not sure anyone
> was asking you to change your log message.
>
> Jay

Applied. Thanks in advance. ;)

Greetings
Jonathan

--
 | /"\   ASCII Ribbon   | Jonathan Glaschke - Lorenz-Goertz-Stra_e 71,
 | \ / Campaign Against | 41238 Moenchengladbach, Germany;
 |  XHTML In Mail   | jabber: [EMAIL PROTECTED]
 | / \ And News | http://jonathan-glaschke.de/

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: remote su root: SORRY

2005-11-20 Thread Paul Yiu

Hi Guys,

Hope you guys can help on this ssh issue has been posted in 2004. Thank 
you in advance.


I hit the same ssh problem with openbsd 3.7. I got serial console set 
up, I got a user which assigned in a wheel group, when I log in using 
ssh as a user and try to su. System said sorry and I check 
/var/log/authlog it said BAD SU pyiu to root on /dev/ttyp0. I can ssh in 
as root, but not su as root. Please find following lines from config file.


/etc/passwd
pyiu:*:1002:10:P Yiu:/home/pyiu:/usr/local/bin/bash

/etc/group
wheel:*:0:root,pyiu

/etc/ttys
ttyp0   nonenetwork

/var/log/authlog
su: BAD SU pyiu to root on /dev/ttyp0

--
Regards,
Paul Yiu
Senior Systems & Network Administrator

Max eCommerce Pty Ltd.
http: www.maxecommerce.com
Ph: +61 02 9651 3422   Fax: +61 02 9651 4622
Email: [EMAIL PROTECTED]


This email and any attachments are confidential and may be subject to 
copyright, legal or some other professional privilege. They are intended solely 
for the attention and use of the named addressee(s).
They may only be copied, distributed or disclosed with the consent of the 
copyright owner. If you have received this email by mistake or by breach of the 
confidentiality clause, please notify the sender immediately by return email 
and delete or destroy all copies of the email. Any confidentiality, privilege 
or copyright is not waived or lost because this email has been sent to you by 
mistake.



Re: remote su root: SORRY

2005-11-20 Thread Lars Hansson
On Mon, 21 Nov 2005 14:02:17 +1100
Paul Yiu <[EMAIL PROTECTED]> wrote:
> /etc/passwd
> pyiu:*:1002:10:P Yiu:/home/pyiu:/usr/local/bin/bash
> 
> /etc/group
> wheel:*:0:root,pyiu

10 != 0

---
Lars Hansson