Re: Extended paging bug in Athlon affect FreeBSD?

2002-01-21 Thread Terry Lambert
Raman Ng wrote: > I don't know what mailing list this mail should be > posted to, sorry if it is posted to the wrong mailing > list. > > Recently I found Linux 2.4 kernel is affected by the > bug of extended paging in AMD Athlon through the > following link. I don't know if FreeBSD is also > aff

Re: __stderrp error

2002-01-21 Thread Ruslan Ermilov
On Sun, Jan 20, 2002 at 11:55:13PM -0800, Julian Elischer wrote: > > > On Mon, 21 Jan 2002, Emiel Kollof wrote: > > > > > Julian Elischer heeft op maandag 21 januari 2002 om 08:34 het volgende > > geschreven: > > > > > > > > Lots of my old programs get: > > > /usr/libexec/ld-elf.so.1: /usr/l

Questions about -current

2002-01-21 Thread jordan . breeding
Hello, I just upgraded to -current today to get a couple of features including devfs working. In the process I have run into a few questions (mainly things to do with the fact that up until a few days ago I was only using linux 2.4.x): 1) Will either the in kernel or oss sound driver for

Re: Questions about -current

2002-01-21 Thread Sean Kelly
First off, you sent this to the wrong list. Most of the questions you bring up in here should have been directed at -questions. On Mon, Jan 21, 2002 at 09:22:08AM +, [EMAIL PROTECTED] wrote: > I just upgraded to -current today to get a couple of > features including devfs working. In th

Re: Extended paging bug in Athlon affect FreeBSD?

2002-01-21 Thread Raman Ng
> I am well aware of this bug. > > It does not affect FreeBSD, which only uses 4M pages > for > the first 4M of the kernel itself. > > I've worked on code that enables 4M pages on other > memory > used in FreeBSD, that had this problem, but only if > you > were really stupid in your allocation m

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > Please explain two moments: > > 1) What is stack reaction on this option? Is it the same like PAM_AUTH_ERR > reaction or not? Yes. > 2) Can PAM_SYSTEM_ERR be returned by pam_authenticate() ? If yes. login.c > and ftpd.c must be fixed to add thi

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > 1) When OPIE turned on in the system, not neccessary all users are > OPIE-ed, only those who listed in /etc/opiekeys. It means that > pam_opieaccess() module must do something only for valid OPIE users > listed in /etc/opiekeys and do nothing fo

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Dag-Erling Smorgrav
Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > Umm, you can't use opiechallenge() for that. You're not supposed to > call opiechallenge() without also calling opieverify() (plus, I think > opiechallenge() "consumes" a challenge). Use opielookup() instead. Even better, opie_haskey() (which is

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 13:54:29 +0100, Dag-Erling Smorgrav wrote: > > Umm, you can't use opiechallenge() for that. You're not supposed to > call opiechallenge() without also calling opieverify() (plus, I think No, it is possible, when opieunlock() called afterwards (as I do). BTW, the same way

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Mark Murray
This is looking good! Please keep a close eye on style (there is at least one assignment in an if () statement that needs to move out. :-) M > --=-=-= > > Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > > Umm, you can't use opiechallenge() for that. You're not supposed to > > call opiechall

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 14:07:48 +0100, Dag-Erling Smorgrav wrote: > Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > > Umm, you can't use opiechallenge() for that. You're not supposed to > > call opiechallenge() without also calling opieverify() (plus, I think > > opiechallenge() "consumes" a c

Re: NEWCARD and Xircom (RBEM56G-100)

2002-01-21 Thread Tom Fischer
Hi Tom, No, I have this same card running on a Toshiba Tecra 8100, and it does indeed use the dc driver, and the ethernet part of it does indeed work (I'm running Current, last updated yesterday). The dc driver needs the miibus device configured in the kernel in order to work correctly, and it a

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Mark Murray
> On Mon, Jan 21, 2002 at 14:07:48 +0100, Dag-Erling Smorgrav wrote: > > Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > > > Umm, you can't use opiechallenge() for that. You're not supposed to > > > call opiechallenge() without also calling opieverify() (plus, I think > > > opiechallenge() "con

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Jacques A. Vidrine
On Sun, Jan 20, 2002 at 11:43:28PM -0800, Terry Lambert wrote: > Once you guys have this all hammered out, are you going to > integrate PAM and Kerberos? 8-) 8-) 8-). In what way do you mean? -- Jacques A. Vidrine <[EMAIL PROTECTED]> http://www.nectar.cc/ NTT/Verio SME

pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
Does anybody mind if I change the pam_opie(8) prompt from "Password:" to "Response:"? I think users might be slightly confused when they enter an incorrect or empty response twice and get a new "Password:" prompt and don't realize it's the pam_unix(8) prompt. DES -- Dag-Erling Smorgrav - [EMAIL

Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
This fixes reflects pam_opieaccess addition. Few comments: ftpd: fallback was a hack and not needed now with new pam_opieaccess login: I believe that there is no authtok change service provided by pam_opie module, so remove #password sufficient pam_opie.so no_warn line --- ft

Re: pam_opie(8) prompt

2002-01-21 Thread Ruslan Ermilov
On Mon, Jan 21, 2002 at 03:18:32PM +0100, Dag-Erling Smorgrav wrote: > Does anybody mind if I change the pam_opie(8) prompt from "Password:" > to "Response:"? I think users might be slightly confused when they > enter an incorrect or empty response twice and get a new "Password:" > prompt and don

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 15:18:32 +0100, Dag-Erling Smorgrav wrote: > Does anybody mind if I change the pam_opie(8) prompt from "Password:" > to "Response:"? I think users might be slightly confused when they > enter an incorrect or empty response twice and get a new "Password:" > prompt and don't

Re: pam_opie(8) prompt

2002-01-21 Thread Mark Murray
> Does anybody mind if I change the pam_opie(8) prompt from "Password:" > to "Response:"? I think users might be slightly confused when they > enter an incorrect or empty response twice and get a new "Password:" > prompt and don't realize it's the pam_unix(8) prompt. Nope - that sounds good! M

Re: __stderrp error

2002-01-21 Thread Alexander Kabaev
> and I've "made world" a lot of times like that. > and if I do it by hand as sugested, it doesn;t make any difference > either. Just a guess - have you removed existing old libraries from /usr/lib? To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of t

Re: __stderrp error

2002-01-21 Thread M. Warner Losh
Some -current binaries can have this, but recompiling usually fixes it. Also, I have some older 3.x binaries that I had to install COMPAT3 to get working. Warner To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 17:29:01 +0300, Andrey A. Chernov wrote: > > enter an incorrect or empty response twice and get a new "Password:" > > prompt and don't realize it's the pam_unix(8) prompt. > > Wait... First of all, there (I mean original OPIE) must be 2 prompts in > worst case, not 3 pro

Re: pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > On Mon, Jan 21, 2002 at 15:18:32 +0100, Dag-Erling Smorgrav wrote: > > Does anybody mind if I change the pam_opie(8) prompt from "Password:" > > to "Response:"? I think users might be slightly confused when they > > enter an incorrect or empty res

Re: pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > I can't reproduce your 3 prompts situation (or may I misread what you try > to say?) I got only 2 prompts in login and su. des@des ~% login des otp-md5 496 de6973 ext Password: otp-md5 496 de6973 ext Password [echo on]: Password: Last login: Mo

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > This fixes reflects pam_opieaccess addition. Augh, I just spent about an hour doing just that (and fixing some other stuff too). Thanks anyway, I'll compare your patches to mine to see if we disagree anywhere. DES -- Dag-Erling Smorgrav - [EMA

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 16:13:54 +0100, Dag-Erling Smorgrav wrote: > "Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > > I can't reproduce your 3 prompts situation (or may I misread what you try > > to say?) I got only 2 prompts in login and su. > > des@des ~% login des > otp-md5 496 de6973 ext >

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 16:11:47 +0100, Dag-Erling Smorgrav wrote: > > > Back to your subj.: It breaks, at least, M$ Windows OPIE/Skey generators > > which do auto-paste when keyword (Password) is found. > > Good point. "OPIE Password" might be more appropriate, then. We don't know, what exac

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > This fixes reflects pam_opieaccess addition. OK, comments: 1) there's no reason to have pam_opie commented out now, it won't do anything unless OPIE is enabled for the target user. With my patch, any user can use OPIE by simply running op

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 16:33:57 +0100, Dag-Erling Smorgrav wrote: > > 1) there's no reason to have pam_opie commented out now, it won't do One reason still exist: all users (i.e. non-OPIE too) will see OTP responses when pam_opie will be uncommented. It may leads to confusion or wrong automated

Re: pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > Yes, I see it too now. It is definitely some bug here. When I say "in > login" I mean I test it through: The bug is quite simply that pam_opie(8) never sets the AUTHTOK item, so pam_unix(8) doesn't know that the user already entered a password.

Re: pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > The bug is quite simply that pam_opie(8) never sets the AUTHTOK item, > so pam_unix(8) doesn't know that the user already entered a password. > > I believe pam_get_pass() should set PAM_AUTHTOK. Any objections? OK, now I'm really off my rocker;

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 16:33:57 +0100, Dag-Erling Smorgrav wrote: > > Patch attached. I already comment "always turning opie on" in previous message, besides that I don't understand one thing in your patch: why you not enable pam_opie for "su" and not add pam_opieaccess there? It is enough usef

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > One reason still exist: all users (i.e. non-OPIE too) will see OTP > responses when pam_opie will be uncommented. It may leads to confusion or > wrong automated scripts processing. Ah, I thought pam_opie(8) ignored users that didn't have OPIE set

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > I already comment "always turning opie on" in previous message, besides > that I don't understand one thing in your patch: why you not enable > pam_opie for "su" and not add pam_opieaccess there? It is enough useful > for sysadmin logging in as use

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Mark Murray
> On Mon, Jan 21, 2002 at 16:33:57 +0100, Dag-Erling Smorgrav wrote: > > > > 1) there's no reason to have pam_opie commented out now, it won't do > > One reason still exist: all users (i.e. non-OPIE too) will see OTP > responses when pam_opie will be uncommented. It may leads to confusion or > w

Re: pam_opie(8) prompt

2002-01-21 Thread Mark Murray
> "Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > > Yes, I see it too now. It is definitely some bug here. When I say "in > > login" I mean I test it through: > > The bug is quite simply that pam_opie(8) never sets the AUTHTOK item, > so pam_unix(8) doesn't know that the user already entered a

Re: __stderrp error

2002-01-21 Thread Ruslan Ermilov
On Mon, Jan 21, 2002 at 09:45:21AM -0500, Alexander Kabaev wrote: > > and I've "made world" a lot of times like that. > > and if I do it by hand as sugested, it doesn;t make any difference > > either. > Just a guess - have you removed existing old libraries from /usr/lib? > lib/compact/Makefile.i

Re: pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > OK, now I'm really off my rocker; pam_conv_pass() (called by > pam_get_pass()) does set PAM_AUTHTOK. I still don't understand why > it's NULL by the time pam_unix(8) calls pam_get_pass(). I'll > investigate further. I found the bug: login(1) onl

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 16:54:56 +0100, Dag-Erling Smorgrav wrote: > Ah, I thought pam_opie(8) ignored users that didn't have OPIE set up. In fact, there is no consensus about that among standalone OPIE applications, some acts with fake prompts, some - without. One (among others) argument _for

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 16:45:41 +0100, Dag-Erling Smorgrav wrote: > The bug is quite simply that pam_opie(8) never sets the AUTHTOK item, > so pam_unix(8) doesn't know that the user already entered a password. > > I believe pam_get_pass() should set PAM_AUTHTOK. Any objections? No objections.

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > On Mon, Jan 21, 2002 at 16:54:56 +0100, Dag-Erling Smorgrav wrote: > One (among others) argument _for_ "no fake prompts" is that standalone > application once compiled with OPIE support can't dynamically turn off > fake prompts using some configura

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 17:14:24 +0100, Dag-Erling Smorgrav wrote: > Dag-Erling Smorgrav <[EMAIL PROTECTED]> writes: > > OK, now I'm really off my rocker; pam_conv_pass() (called by > > pam_get_pass()) does set PAM_AUTHTOK. I still don't understand why > > it's NULL by the time pam_unix(8) calls

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 17:24:28 +0100, Dag-Erling Smorgrav wrote: > - enable OPIE by default, with the no_fake_prompts option, leaving it >up to the admin to enable fake prompts if he so wishes I vote for this one. > Please, I'm getting paid to do this :) Make yourself a cup of tea or > s

Re: sudo redu

2002-01-21 Thread Storms of Perfection
The problem(s) with sudo have been fixed in the latest sudo CVS release. This works for me on -CURRENT as of December 16th, 2001 and RELENG_4 --- /tmp/sudo-1.6.5p1/auth/pam.c Mon Dec 31 12:18:12 2001 +++ /home/ancient/test/sudo/auth/pam.c Mon Jan 21 06:54:37 2002 @@ -66,7 +66,7 @@ #i

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > On Mon, Jan 21, 2002 at 17:24:28 +0100, Dag-Erling Smorgrav wrote: > > - enable OPIE by default, with the no_fake_prompts option, leaving it > >up to the admin to enable fake prompts if he so wishes > I vote for this one. I agree, for the rea

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 18:01:45 +0100, Dag-Erling Smorgrav wrote: > 3) in pam_opie(8), return PAM_AUTH_ERR if no_fake_prompts was > specified and the user hasn't set up OPIE. We can speed up pam_opie by saving one opielookup() call in this way: /* * Don't call the OPIE a

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 18:01:45 +0100, Dag-Erling Smorgrav wrote: > > 1) if pam_get_pass(), if the current token is non-null but empty, > ignore it. This allows a user to just press enter at an OPIE > prompt and still get a Unix prompt. I am not sure I understand this fully, could you

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > We can speed up pam_opie by saving one opielookup() call in this way: True, except you forgot to call opieunlock() :) DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-curren

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 18:33:22 +0100, Dag-Erling Smorgrav wrote: > "Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > > We can speed up pam_opie by saving one opielookup() call in this way: > > True, except you forgot to call opieunlock() :) No, when opiechallenge() return != 0, no opieunlock()

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > I am not sure I understand this fully, could you please send two > typescripts (in the manner you do for login testing) with and without this > change? Assuming no ~des/.opiealways, - without the change: des@des ~% login des otp-md5 496 de6973

Re: "Current & Etherboot"

2002-01-21 Thread Joerg Wunsch
Robert Watson <[EMAIL PROTECTED]> wrote: > Most people I know of that netboot boxes on Intel platforms now use > PXE. But well, there are only two NICs that support PXE, aren't there? In particular, there's nothing cheap (i. e. <= USD 10) you could use in conjunction with an old junk ISA NIC pe

i4b driver broken for -current?

2002-01-21 Thread Marc Ernst Eddy van Woerkom
Hello, anyone running a recent -current successfuly with the i4b ISDN drivers? I built -current around christmas, and had to applay a patch posted here in October to make a kernel with i4b drivers. However I don't manage to establish a kernel ppp connection to my provider since then. Regards,

Re: NEWCARD and Xircom (RBEM56G-100)

2002-01-21 Thread M. Warner Losh
In message: <[EMAIL PROTECTED]> Tom Fischer <[EMAIL PROTECTED]> writes: : Warner, do you have any clues on how to get the modem half of this : card working again? You'd have to a) fix the pci attachment or b) wait until the puc driver hits the tree. Chances are fixing the pci attachm

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > No, when opiechallenge() return != 0, no opieunlock() needed because > nothing is locked. Look at opiechallenge() sources, it not makes > lock on error. Oh, you're right. I wasn't thinking. Here are the (hopefully) final patches. Any final ob

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 18:46:37 +0100, Dag-Erling Smorgrav wrote: > > Assuming no ~des/.opiealways, > > - without the change: > > des@des ~% login des > otp-md5 496 de6973 ext > Password: > otp-md5 496 de6973 ext > Password [echo on]: > Login incorrect > login: It looks like right varian

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 18:53:34 +0100, Dag-Erling Smorgrav wrote: > > Here are the (hopefully) final patches. Any final objections before I > commit the lot? Excepting get_pass() thing cause 3 prompts again, all looks right. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 21:13:19 +0300, Andrey A. Chernov wrote: > On Mon, Jan 21, 2002 at 18:46:37 +0100, Dag-Erling Smorgrav wrote: > > > > Assuming no ~des/.opiealways, > > > > - without the change: > > > > des@des ~% login des > > otp-md5 496 de6973 ext > > Password: > > otp-md5 496 de697

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Mark Murray
> Here are the (hopefully) final patches. Any final objections before I > commit the lot? According to EyeBall Mk1, this is fine! :-) I haven't extensively tested the code, but the methods used and the design are very sound, I believe. M -- o Mark Murray \_ FreeBSD Services Limited

Re: __stderrp error

2002-01-21 Thread Julian Elischer
this machine has never been 3.x. the binaries worked fine up until about 5 months ago. On Mon, 21 Jan 2002, M. Warner Losh wrote: > Some -current binaries can have this, but recompiling usually fixes > it. Also, I have some older 3.x binaries that I had to install > COMPAT3 to get working. >

Re: __stderrp error

2002-01-21 Thread Julian Elischer
no, should I? On Mon, 21 Jan 2002, Alexander Kabaev wrote: > > and I've "made world" a lot of times like that. > > and if I do it by hand as sugested, it doesn;t make any difference > > either. > Just a guess - have you removed existing old libraries from /usr/lib? > > To Unsubscribe: send mai

Re: __stderrp error

2002-01-21 Thread Alexander Kabaev
> no, should I? Only if you have older libraries with the same names as as ones installed in /usr/lib/compat. As Ruslan pointed out, existing Makefiles in lib/compat should take care of that automatically. The change was added in last September. To Unsubscribe: send mail to [EMAIL PROTECTED] with

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 21:24:25 +0300, Andrey A. Chernov wrote: > > > - without the change: > > > > > > des@des ~% login des > > > otp-md5 496 de6973 ext > > > Password: > > > otp-md5 496 de6973 ext > > > Password [echo on]: > > > Login incorrect > > > login: > > If OPIE is configured to al

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > It looks like right variant. _By_default_ OPIE user is unable to enter > Unix password. You need to add > permit 255.255.255.255 > line to /etc/opieaccess to _allow_ Unix passwords on your machine. Which I do... # grep '^[^#]' /etc/opieaccess p

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 19:40:40 +0100, Dag-Erling Smorgrav wrote: > > Which I do... > > # grep '^[^#]' /etc/opieaccess > permit 127.0.0.1 255.255.255.255 > permit 10.0.0.1 255.255.255.0 Really there must be only address resolved from gethostname() call, what f.e. "su" sets for PAM_RHOST on loc

Re: Step6, corresponding /etc/pam.d/* fixes for review

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > On Mon, Jan 21, 2002 at 19:40:40 +0100, Dag-Erling Smorgrav wrote: > > # grep '^[^#]' /etc/opieaccess > > permit 127.0.0.1 255.255.255.255 > > permit 10.0.0.1 255.255.255.0 > Really there must be only address resolved from gethostname() call, > wha

Re: i4b driver broken for -current?

2002-01-21 Thread Joerg Wunsch
Marc Ernst Eddy van Woerkom <[EMAIL PROTECTED]> wrote: > However I don't manage to establish > a kernel ppp connection to my provider > since then. You're using the correct version of sppp? We recently abandoned the private sys/i4b/driver/i4b_ispppsubr.c (finally), and have i4b use sys/net/if_s

Re: i4b driver broken for -current?

2002-01-21 Thread Alexander Leidinger
On 21 Jan, Marc Ernst Eddy van Woerkom wrote: > anyone running a recent -current > successfuly with the i4b ISDN drivers? Yes. > I built -current around christmas, > and had to applay a patch posted here > in October to make a kernel with i4b > drivers. I think it was my patch. Something with

Re: pam_opie(8) prompt

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 18:32:43 +0300, Andrey A. Chernov wrote: > On Mon, Jan 21, 2002 at 16:11:47 +0100, Dag-Erling Smorgrav wrote: > > > > > Back to your subj.: It breaks, at least, M$ Windows OPIE/Skey generators > > > which do auto-paste when keyword (Password) is found. > > > > Good point

Re: pam_opie(8) prompt

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > it gives impression that no normal Unix password can be typed at this > point. ...which I initially thought was the case, but it's not. DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubsc

Step7, Conclusion

2002-01-21 Thread Andrey A. Chernov
Well, now almost all things work as they expected to be, only one thing left is promised by Mark srandomdev() fix. Thanks to all, especially to Dag-Erling. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of t

Re: __stderrp error

2002-01-21 Thread M. Warner Losh
In message: <[EMAIL PROTECTED]> Julian Elischer <[EMAIL PROTECTED]> writes: : this machine has never been 3.x. : the binaries worked fine up until about 5 months ago. All bets are off if it ran -current. You need to rebuild everything. Warner To Unsubscribe: send mail to [EMAIL PRO

Re: __stderrp error

2002-01-21 Thread David W. Chapman Jr.
On Mon, Jan 21, 2002 at 12:54:38PM -0700, M. Warner Losh wrote: > In message: <[EMAIL PROTECTED]> > Julian Elischer <[EMAIL PROTECTED]> writes: > : this machine has never been 3.x. > : the binaries worked fine up until about 5 months ago. > > All bets are off if it ran -current. You

Re: __stderrp error

2002-01-21 Thread M. Warner Losh
In message: <[EMAIL PROTECTED]> "David W. Chapman Jr." <[EMAIL PROTECTED]> writes: : On Mon, Jan 21, 2002 at 12:54:38PM -0700, M. Warner Losh wrote: : > In message: <[EMAIL PROTECTED]> : > Julian Elischer <[EMAIL PROTECTED]> writes: : > : this machine has never been 3.x. :

We forget STATIC_MODULES, patch included

2002-01-21 Thread Andrey A. Chernov
--- libpam/Makefile.old Thu Dec 13 12:26:56 2001 +++ libpam/Makefile Mon Jan 21 23:09:16 2002 @@ -80,6 +80,7 @@ .endif STATIC_MODULES+= ${MODOBJDIR}/pam_nologin/libpam_nologin.a STATIC_MODULES+= ${MODOBJDIR}/pam_opie/libpam_opie.a +STATIC_MODULES+= ${MODOBJDIR}/pam_opieaccess/libpam_opieacc

Re: Step7, Conclusion

2002-01-21 Thread Dag-Erling Smorgrav
"Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > Thanks to all, especially to Dag-Erling. Thanks to *you* for pointing out and explaining the issues, submitting patches, and reviewing and testing mine. I'm sorry we got off on such a bad foot this weekend; I feel that the exchanges we've had yes

Re: i4b driver broken for -current?

2002-01-21 Thread Joerg Wunsch
Alexander Leidinger <[EMAIL PROTECTED]> wrote: > You have to use rev. 1.60 of /sys/netinet/in.c ("cd > /sys/netinet; No, you're wrong. This bug has been fixed as one of the first of my series of committs that brought the i4b version of sppp back into the mainstream version. Otherwise i could n

Re: __stderrp error

2002-01-21 Thread Julian Elischer
I reinstalled the 4.x compat libs but it didn't make any difference.:-( On Mon, 21 Jan 2002, M. Warner Losh wrote: > In message: <[EMAIL PROTECTED]> > "David W. Chapman Jr." <[EMAIL PROTECTED]> writes: > : On Mon, Jan 21, 2002 at 12:54:38PM -0700, M. Warner Losh wrote: > : > In mess

Re: We forget STATIC_MODULES, patch included

2002-01-21 Thread Dag-Erling Smorgrav
Thanks, I'll commit that right away. DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message

Re: Step7, Conclusion

2002-01-21 Thread Wilko Bulte
On Mon, Jan 21, 2002 at 09:19:50PM +0100, Dag-Erling Smorgrav wrote: > "Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > > Thanks to all, especially to Dag-Erling. > > Thanks to *you* for pointing out and explaining the issues, submitting > patches, and reviewing and testing mine. I'm sorry we g

Re: Step7, Conclusion

2002-01-21 Thread Alfred Perlstein
* Dag-Erling Smorgrav <[EMAIL PROTECTED]> [020121 12:20] wrote: > "Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > > Thanks to all, especially to Dag-Erling. > > Thanks to *you* for pointing out and explaining the issues, submitting > patches, and reviewing and testing mine. I'm sorry we got of

Re: Step7, Conclusion

2002-01-21 Thread Julian Elischer
step 8 a summary for the rest of us? I got lost there in the middle soemwhere. On 21 Jan 2002, Dag-Erling Smorgrav wrote: > "Andrey A. Chernov" <[EMAIL PROTECTED]> writes: > > Thanks to all, especially to Dag-Erling. > > Thanks to *you* for pointing out and explaining the issues, submitting >

Re: Step7, Conclusion

2002-01-21 Thread Dag-Erling Smorgrav
Julian Elischer <[EMAIL PROTECTED]> writes: > step 8 > a summary for the rest of us? > I got lost there in the middle soemwhere. http://people.freebsd.org/~des/diary/2002.html#2002-01-21 DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubs

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Terry Lambert
"Jacques A. Vidrine" wrote: > > On Sun, Jan 20, 2002 at 11:43:28PM -0800, Terry Lambert wrote: > > Once you guys have this all hammered out, are you going to > > integrate PAM and Kerberos? 8-) 8-) 8-). > > In what way do you mean? In the way that the author of the PAM architecture from Sun sp

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Jacques A. Vidrine
On Mon, Jan 21, 2002 at 12:48:39PM -0800, Terry Lambert wrote: > "Jacques A. Vidrine" wrote: > > > > On Sun, Jan 20, 2002 at 11:43:28PM -0800, Terry Lambert wrote: > > > Once you guys have this all hammered out, are you going to > > > integrate PAM and Kerberos? 8-) 8-) 8-). > > > > In what way

Re: Step7, Conclusion

2002-01-21 Thread Andrey A. Chernov
On Mon, Jan 21, 2002 at 12:24:44 -0800, Julian Elischer wrote: > step 8 > a summary for the rest of us? > I got lost there in the middle soemwhere. Most shortest one, I think: 1) OPIE auth now works as required. 2) OPIE is turned on by default. Both cases affects only users registered in OPIE

Re: pam_opie(8) prompt

2002-01-21 Thread Terry Lambert
Dag-Erling Smorgrav wrote: > Does anybody mind if I change the pam_opie(8) prompt from "Password:" > to "Response:"? I think users might be slightly confused when they > enter an incorrect or empty response twice and get a new "Password:" > prompt and don't realize it's the pam_unix(8) prompt. S

Re: pam_opie(8) prompt

2002-01-21 Thread Terry Lambert
Ruslan Ermilov wrote: > On Mon, Jan 21, 2002 at 03:18:32PM +0100, Dag-Erling Smorgrav wrote: > > Does anybody mind if I change the pam_opie(8) prompt from "Password:" > > to "Response:"? I think users might be slightly confused when they > > enter an incorrect or empty response twice and get a ne

Re: Step5, pam_opie OPIE auth fix for review

2002-01-21 Thread Terry Lambert
"Jacques A. Vidrine" wrote: > > In the way that the author of the PAM architecture from Sun > > spoke at the Silicon Valley BSD User's Group meeting, > > Do you have a reference, or do we have to guess what you are talking > about? :-) I have my memory of the talk he gave, which included the ide

OPIE little speedup patch for review

2002-01-21 Thread Andrey A. Chernov
memset() in opiechallenge() really is not needed because it is the very first thing opielookup() does being entered, i.e. look at this: int opielookup FUNCTION((opie, principal), struct opie *opie AND char *principal) { int i; memset(opie, 0, sizeof(struct opie)); ... And then the patch inc

Re: Questions about -current

2002-01-21 Thread Giorgos Keramidas
On 2002-01-21 09:22:08, [EMAIL PROTECTED] wrote: > 5) In -current would it be possible to have a few command line > switches added to certain userland utilities? I noticed -h made it > into `ls` now, but `cp` still doesn't have -a or -x which I used to > use all the time in Linux. I know -a isn'

48bit ATA addressing problems / Promise TX2 ata133 problem?

2002-01-21 Thread Mike Brancato
I'm running -current and have a Maxtor 160GB hdd hooked to the promise ata133 card that came with it it will flake out for no apparent reason. any clues? maybe bad hardware? anyone else getting these? ad4: READ command timeout tag=0 serv=0 - resetting ata2: resetting devices .. done ad4:

Re: __stderrp error

2002-01-21 Thread Robert Watson
On Sun, 20 Jan 2002, Julian Elischer wrote: > has NO effect whatsoever. > > The only thign I can do is recompile any package that has thos problem. > but sometimes it's hard finding which package needs to be recomiled. > > thoughts? You might also need compat3. I was quite surprised at the

Re: __stderrp error

2002-01-21 Thread M. Warner Losh
In message: <[EMAIL PROTECTED]> Julian Elischer <[EMAIL PROTECTED]> writes: : I reinstalled the 4.x compat libs but it didn't make any difference.:-( Then you must have -current binaries that are too old. You will have to rebuild them. Warner To Unsubscribe: send mail to [EMAIL PRO

making a large RAMdisk?

2002-01-21 Thread Kenneth D. Merry
I've got a machine with 4G of RAM, and I'm trying to test all the RAM out to make sure it's okay. I've tried doing buildworlds, but never end up using more than 1G of RAM on cache, etc. I've got -current and -stable on it, and I've tried making an MFS filesystem under -stable. I can't seem to

Re: making a large RAMdisk?

2002-01-21 Thread Samuel J . Greear
On Monday 21 January 2002 10:20 pm, Kenneth D. Merry wrote: > I've got a machine with 4G of RAM, and I'm trying to test all the RAM out > to make sure it's okay. > > I've tried doing buildworlds, but never end up using more than 1G of RAM on > cache, etc. > > I've got -current and -stable on it, a

Re: making a large RAMdisk?

2002-01-21 Thread Kenneth D. Merry
On Tue, Jan 22, 2002 at 22:18:51 -0700, Samuel J.Greear wrote: > On Monday 21 January 2002 10:20 pm, Kenneth D. Merry wrote: > > I've got a machine with 4G of RAM, and I'm trying to test all the RAM out > > to make sure it's okay. > > > > I've tried doing buildworlds, but never end up using more t

Re: 48bit ATA addressing problems / Promise TX2 ata133 problem?

2002-01-21 Thread Søren Schmidt
It seems Mike Brancato wrote: > I'm running -current and have a Maxtor 160GB hdd hooked to the promise > ata133 card that came with it it will flake out for no apparent > reason. any clues? maybe bad hardware? anyone else getting these? > > ad4: READ command timeout tag=0 serv=0 - resetti

Re: Questions about -current

2002-01-21 Thread Jordan Breeding
Giorgos Keramidas wrote: > On 2002-01-21 09:22:08, [EMAIL PROTECTED] wrote: > >>5) In -current would it be possible to have a few command line >>switches added to certain userland utilities? I noticed -h made it >>into `ls` now, but `cp` still doesn't have -a or -x which I used to >>use al

Re: making a large RAMdisk?

2002-01-21 Thread Poul-Henning Kamp
In message <[EMAIL PROTECTED]>, "Kenneth D. Merry" writes: >Is there a way, under -current or -stable, to make a true RAMdisk that is >around 2GB in size? Possibly. If you take the detour around a preloaded image for the md(4) driver it should be possible. -- Poul-Henning Kamp | UNIX si

Re: Questions about -current (Linuxism's)

2002-01-21 Thread Leif Neland
While I realize you can't emulate the switches on any command on any os, I found a few "linuxism's" missing. Eg: I find it illogical, that "route" can change, and also display the route to a single host, but route can not display the entire route table. In linux it is simply "route", in windows i

  1   2   >