Re: isakmpd: rsa_sig_decode_hash: RSA_public_decrypt () failed

On 10 nov 2005, at 16.05, Heinrich Rebehn wrote: isakmpd keeps reporting: rsa_sig_decode_hash: RSA_public_decrypt () failed dropped message from 134.102.176.91 port 500 due to notification type INVALID_ID_INFORMATION The other clients are still working fine. I have been double checking the con

Re: Hardware RAID

On Friday, November 11, Karl Kopp wrote: > > We are in the process of setting up a production OBSD box to do some (a > lot!) of routing and I want to make sure I get as much redundancy as > possible. We have failover everything in the box, and we will use carp to > setup multiple boxes. If you us

Re: Hardware RAID

On Nov 10, 2005, at 9:56 PM, Karl Kopp wrote: Hi Jason, Like yr idea - LOTS :) We may still use a disk for some logs, but if that goes, no big deal! Any idea how to mount a CF as a boot device? Quick search on Google didn't bring much back of interest. Is their a faq / how- to? Also, what

Re: Strange behavior with carp and preemption

Jon Hart wrote: > On Thu, Nov 10, 2005 at 09:31:15PM -0500, Nick Holland wrote: >> I'd have prefered that a more experienced person answer this one, but >> they don't seem to have, so be forewarned: everything I say here might >> be wrong. However, through the glory of mail lists, if I say somethi

Re: Strange behavior with carp and preemption

* Nick <[EMAIL PROTECTED]> [2005-11-11 03:34]: > not really, if you understand the modular approach here. > > > My config: > ... > > > Can anybody reproduce it, and has a solution for this problem? > > Any help would be very nice! :-) > > Look at the pieces here: > * CARP gives you redunancy on

Re: Strange behavior with carp and preemption

On Thu, Nov 10, 2005 at 09:31:15PM -0500, Nick Holland wrote: > I'd have prefered that a more experienced person answer this one, but > they don't seem to have, so be forewarned: everything I say here might > be wrong. However, through the glory of mail lists, if I say something > wrong, fifty peo

Re: Hardware RAID

Hi Jason, Like yr idea - LOTS :) We may still use a disk for some logs, but if that goes, no big deal! Any idea how to mount a CF as a boot device? Quick search on Google didn't bring much back of interest. Is their a faq / how-to? Also, what kinds of CF adapters work - anything I should be lookin

Re: Instructions for tracking -CURRENT

Alari Kask wrote: ... [I *refuse* to post that link again] I was right, more damage than good. I *really* wish people would quit accomplishing one little thing, writing it up in "HOWTO" form, and patting themselves on the back and thinking they were doing the world some kind of favor by publishin

Re: Strange behavior with carp and preemption

I'd have prefered that a more experienced person answer this one, but they don't seem to have, so be forewarned: everything I say here might be wrong. However, through the glory of mail lists, if I say something wrong, fifty people will jump all over me, and Google will put it at the top of the li

Re: Hardware RAID

> Hi All, > > We are in the process of setting up a production OBSD box to do some (a > lot!) of routing and I want to make sure I get as much redundancy as > possible. We have failover everything in the box, and we will use carp to > setup multiple boxes. In each, I want to do hardware RAID. Initi

Re: OpenBSD Desktop Document

Roy Morris wrote: Thanks to all those that replied. I have made the changes suggestedand placed the document as {ps,pdf,txt} at www.openalternatives.com/OpenBSD/OpenBSD-Desktop.txt www.openalternatives.com/OpenBSD/OpenBSD-Desktop.ps www.openalternatives.com/OpenBSD/OpenBSD-Desktop.pdf Great wo

Re: pf weirdness with pfctl -f nonexistent.file

On Fri, 11 Nov 2005, Daniel Hartmeier wrote: > I'm pretty sure your theory is correct. You can query the list of > interfaces with pfctl -vsI, which prints '(skip)' on those that are > currently being skipped. ah, yes, thank you. i did check, and yes, it's the skip flag that gets cleared. >

Re: pf weirdness with pfctl -f nonexistent.file

I'm pretty sure your theory is correct. You can query the list of interfaces with pfctl -vsI, which prints '(skip)' on those that are currently being skipped. Reloading the ruleset does (and should) clear the 'set skip' set, as we agreed that there should be no (or as little as possible) state in

Re: Hardware RAID

--On 11 November 2005 11:44 +1100, Karl Kopp wrote: as possible. We have failover everything in the box, and we will use carp to setup multiple boxes. In each, I want to do hardware RAID. Initially I bought the 3ware SATA RAID card, but its not supported. I then moved to an Adaptec 1210SA, which

Hardware RAID

Hi All, We are in the process of setting up a production OBSD box to do some (a lot!) of routing and I want to make sure I get as much redundancy as possible. We have failover everything in the box, and we will use carp to setup multiple boxes. In each, I want to do hardware RAID. Initially I boug

Re: radius on openbsd

> man Chan wrote: >> Hello, >> >> I would like t know where can I get the authentication >> users using LDAP via Radius as it seems unavailable at >> the openbsd journel. Any pointers ? Thanks. >> >> >> > Not sure about the ones in the ports tree, but freeradius works well > > http://www.f

OT: system administration utilities

Hey folks, i am writing some utilities and i am in need to test. I seeking sysadmin to test them in real condition environment. I am running OBSD 3.7 (in home) but i don't have a production environment where i could test them. The test should let the tester know about : Portability, Performance a

Re: radius on openbsd

man Chan wrote: Hello, I would like t know where can I get the authentication users using LDAP via Radius as it seems unavailable at the openbsd journel. Any pointers ? Thanks. Not sure about the ones in the ports tree, but freeradius works well http://www.freeradius.org/

pf weirdness with pfctl -f nonexistent.file

hi, i just observed a strange phenomenon, which, if it's intended behavior, i could not really find it documented anywhere (or failed to understand the doc, if it is). in its simplest form, it is as follows. given is a machine with a de0, part of a simple lan. the following configuration is load

radius on openbsd

Hello, I would like t know where can I get the authentication users using LDAP via Radius as it seems unavailable at the openbsd journel. Any pointers ? Thanks. Clarence ___ 7Q'Y.I&,(l7s email 3q*>!H $U8| Yahoo! Messenger http://messenger.yahoo.com.hk

Re: ath troubles w/ 3.8

Okay, boneheaded mistake on my end. While the AP *used to* be open, my partner placed MAC access filters on it. Once my MAC was in there it all worked. Thanks for the replies! -- Darrin Chandler [EMAIL PROTECTED] http://www.stilyagin.com/

Re: Bug bounty for pciide/atapiscsi

Oh, ok. How can I do this without being dropped into the debugger then? Is wdc likely to do better? From reading man pages I understood that I had to use atapiscsi with pciide. Stephen Stuart Henderson wrote: --On 10 November 2005 14:29 +1300, Stephen Nelson wrote: I tried your suggestion

Re: Bug bounty for pciide/atapiscsi

Thanks for your help. I would appreciate your suggestions on how to spin this as an interesting problem worthy of an OpenShaman. I've found a workaround by using usb flash media, but I'd still like to get this problem fixed. Stephen, you have made a gross miscalculation. If you had take

Re: ath troubles w/ 3.8

Daniel Hamlin wrote: Try ifconfig ath0 media autoselect mode 11b Dan Hamlin Darrin Chandler wrote: I've been trying to get my Atheros-based wifi working and not having any luck at all. I've read ath(4) and ifconfig(8), and I've searched the archives. I'm trying to connect to an open (no W

Re: ath0: bogus xmit rate 0x0

Hi again, Well, in doubt, I got the latest kernel and the latest userland, in case there would have been corrections (Thanks Fred) compiled everything and I still have the ath0: bogus xmit rate 0x0 Maybe it's due to my card version (AR5213 and not AR5212 as I saw in the archives), as dmesg

ath troubles w/ 3.8

I've been trying to get my Atheros-based wifi working and not having any luck at all. I've read ath(4) and ifconfig(8), and I've searched the archives. I'm trying to connect to an open (no WEP, no MAC filter) 11b network on channel 6, and no matter what I try I end up with "Status: no network"

Thnx

I'm still a OpenBSD newbie but it's already a great experience. A month ago I installed OpenBSD on a - AMD64 - AlphaStation255 - VIA Eden-N without having any problems. Right now, those machines are running 3.8 and do it pretty smooth. They provide webservers, mailers and databases of different ki

Re: 3c985b and optiplex gx520

I disconnected all the interfaces and after connected only one. I'm sure that the cables are working. I tried with these options in the hostname.ti0, each time I configured with one of these and reboot the computer: media 1000baseSX media 1000baseSX mediaopt full-duplex media autoselect And my

Re: Cannot boot version 3.8 on HP pavilion 422

--On 10 November 2005 19:11 +0100, Lionel Vidal wrote: Rogier Krieger <[EMAIL PROTECTED]> writes: Try attaching a serial console. See the FAQ [1] for more details. You will want to add a dmesg output to your report; it will make it easier for others to help you. Unfortunately, I have none. Bu

pf - pass log all

Building a basic bridge for logging. Putting only "pass log all" in /etc/pf.conf seems to work, but is there a better way to do this? The log (all) option doesn't seem to apply to my situation, but I wanted to make sure.

Re: ports out-of-date question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Today Andy Wingate contributed the following: In message <[EMAIL PROTECTED]> Denny White <[EMAIL PROTECTED]> wrote: [More ports@ than [EMAIL PROTECTED] Just trying to find out if the output from running ./out-of-date for installed packag

Re: Cannot boot version 3.8 on HP pavilion 422

Rogier Krieger <[EMAIL PROTECTED]> writes: > Try attaching a serial console. See the FAQ [1] for more details. You > will want to add a dmesg output to your report; it will make it easier > for others to help you. Unfortunately, I have none. But I miss the keyboard feel of my old Digital VT220...

Re: ports out-of-date question

In message <[EMAIL PROTECTED]> Denny White <[EMAIL PROTECTED]> wrote: [More ports@ than [EMAIL PROTECTED] > Just trying to find out if the output from running > ./out-of-date for installed packages is because I've > cvsup'd current and rebuilt everything numerous times > which, I'm pret

Re: Anyone tried a sun fire X2100 server yet?

On 2005-11-09 22:24:41 -0500, Mike wrote: > cpu0: AMD Opteron(tm) Processor 148, 1005.28 MHz 1Ghz? So slow? :-) Best Martin -- http://www.tm.oneiros.de

Re: Anyone tried a sun fire X2100 server yet?

>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Hartmeier >Sent: Thursday, November 10, 2005 4:55 AM >To: Daniel Ouellet >Cc: misc@openbsd.org >Subject: Re: Anyone tried a sun fire X2100 server yet? > >We ordered this very box for undeadly. It also

Re: Instructions for tracking -CURRENT

On Nov 9, 2005, at 10:30 PM, Han Boetes wrote: Alari Kask wrote: Hello everybody, i put together some instructions for tracking -CURRENT, it's just for getting things done faster, than reading the cvs instructions on the homepage of openbsd. I bet you can't make it faster than this. ;-) ht

Re: su on 3.8 soekris

On Thu, 2005-11-10 at 14:19 +0100, Joachim Schipper wrote: > Is /dev/tty00 marked as 'secure' in /dev/ttys? ttys ---snip--- tty00 "/usr/libexec/getty std.19200" vt100 on secure ---snip--- Passwort ist 100% correct!! Andreas > > Are you really, really sure you use the correct password? C

isakmpd: rsa_sig_decode_hash: RSA_public_decrypt () failed

Hi all, We have a VPN Gateway to allow "road warriors" to securely access our network from anywhere (home,wlan). It runs OpenBSD 3.7 and the "clients" are WinXPSP2 machines using the built-in IPSec. Authentication is done with X.509 certificates which are distributed as PKCS#12 files. This has be

Re: Cannot boot version 3.8 on HP pavilion 422

On 11/10/05, Lionel Vidal <[EMAIL PROTECTED]> wrote: > Sorry to not give the whole log of messages, but I cannot copy them > except by writing them fast on paper. I could get some specific part > if required though. Try attaching a serial console. See the FAQ [1] for more details. You will want to

Re: Cannot boot version 3.8 on HP pavilion 422

Try: boot -c disable fdc Lionel Vidal wrote: I tried to boot the new 3.8 version on a (rather old) PC, a HP pavilion 422.fr. I tried both to boot from cdrom38.fs and floppy38.fs and the result is the same : OpenBSD i386 BOOT 2.10 boot> booting fd0a:/bsd: 3263620 Entry point at 0x100120 L

Re: OpenBSD Desktop Document

Johan P. Lindstrvm wrote: Great work, though you may want to have a peek at rotating your pdf, it's in landscape format. // Johan Hmmm, It opened and printed in protrait for me. d

Re: acpi

On Thu, Nov 10, 2005 at 08:24:35AM -0600, Justin Krejci wrote: > It did not core dump on me. Same here.

borrowing in 3.8

Hi All, It's been a long time since I'm trying to do borrowing with pf and altq from OpenBSD and seams that it's not working for me. Here is what I do: altq on pcn0 cbq bandwidth 10Mb queue { std, ftp } queue std bandwidth 1024Kb cbq(default) queue ftp bandwidth 1Mb cbq { low, big } queue big ba

Cannot boot version 3.8 on HP pavilion 422

I tried to boot the new 3.8 version on a (rather old) PC, a HP pavilion 422.fr. I tried both to boot from cdrom38.fs and floppy38.fs and the result is the same : OpenBSD i386 BOOT 2.10 boot> booting fd0a:/bsd: 3263620 Entry point at 0x100120 Lots of blue-background infos CD-Rom, D

Re: Telnet daemon retired in 3.8 ?

Theo de Raadt wrote: >>It in not the question of sshd works or, not! In large environments, >>where you have a large number of legacy hardware >> Well, if you have lots of legacy hardware, maybe you could just run some well patched legacy openbsd 3.7 that still has what you need. Brandon >What

Re: OpenBSD Desktop Document

On 11/9/05, Roy Morris <[EMAIL PROTECTED]> wrote: > > Roy Morris wrote: > > >>>I have been working on a document for newbies that helps > >>>them put together a basic/functional desktop under OpenBSD. > >>>If anyone has time, I'd like feed back. > >>> > >>>www.openalternatives.com/OpenBSD/OpenBSD-D

Re: ALTQ-Bandwidth management is not working as expected

Hi everyone, Closing Problem: Bandwidth management is not working as expected; instead of streaming data inbound with 237 Kb/sec without bandwidth management, it drops to 29 Kb/sec (tendency falling) with enabled bandwidth management. Fault: It's a shame, but "Kb" means "Kilobit" and not "Kilobyt

Re: Telnet daemon retired in 3.8 ?

> It in not the question of sshd works or, not! In large environments, > where you have a large number of legacy hardware (like Apollo 700, > HP 3000, HP 7000, Solaris 2.5.1 etc., etc.), and the purpose of a UNIX > box is other than to run a firewall, a webserver, mail-server, or > MySQL, > plus y

OPENBSD will implement TC tecnology?

new anti privacy hard developed by yea microsoft and intel and others look this http://www.cl.cam.ac.uk/~rja14/tcpa-faq.htmlenglish http://linuca.org/body.phtml?nIdNoticia=207 the same but in all other lenguages PD: Sorry for the OT

Re: OpenBSD Desktop Document

Great document! Are there any suggested partition sizes for the desktop environment? I'll try this out on a dell laptop once its finished with some work it's doing. roland

Re: acpi

On Wednesday 09 November 2005 10:52 pm, Jordan Hargrave wrote: > Thanks for all the ACPI dumps everyone! I think I have enough of a sample > set now, no more, please! :) > Hmm.. the acpiscan should not be core dumping; there maybe an invalid > address in the ACPI table? > > --jordan hargrave >

Re: OpenBSD Desktop Document

I think your doing a great job. It's a good start. Here's my 2 cents on what I would suggest doing. 1. Add page numbering (i.e. 1 of 2) 2. Add author/contact info. 3. Add version of document and revision # or date. Also I noticed you updated the document since the first post. This is great howeve

Re: su on 3.8 soekris

On Thu, Nov 10, 2005 at 11:22:21AM +0100, Andreas M|rdter wrote: > I use the root password. > This password is correct. > > > I think, I miss anything file or lib. > > output groups: > ---snip--- > # groups admin > users wheel > > ---snip--- > > Andreas > > > On Thu, 2005-11-10 at 10:04 +010

Re: ISAKMPD errors n. 8 and n. 118

man 3 errno On Thu, Nov 10, 2005 at 01:53:27PM +0100, [EMAIL PROTECTED] wrote: > Hello! > >Thanks for your reply, first of all. > > > > Hi, > > > > the errno shown be ipsecadm can be ignored, nothing to worry about > > (and this was fixed post 3.7-stable). Besides this message the vpn > >

Re: ISAKMPD errors n. 8 and n. 118

Hello! Thanks for your reply, first of all. > Hi, > > the errno shown be ipsecadm can be ignored, nothing to worry about > (and this was fixed post 3.7-stable). Besides this message the vpn > is working as expected? Yes, as I said the VPN appears to be working just fine. So, *both* er

Re: ISAKMPD errors n. 8 and n. 118

On Thu, Nov 10, 2005 at 11:30:58AM +0100, [EMAIL PROTECTED] wrote: > -bash-3.00# ipsecadm show > sadb_dump: satype esp vers 2 len 38 seq 0 pid 0 > errno 8: Exec format error > sa: spi 0x1c5551f1 auth hmac-sha1 enc aes that's a bug in ipsecadm show.

Re: ISAKMPD errors n. 8 and n. 118

Hi, the errno shown be ipsecadm can be ignored, nothing to worry about (and this was fixed post 3.7-stable). Besides this message the vpn is working as expected? HJ. On Thu, Nov 10, 2005 at 11:30:58AM +0100, [EMAIL PROTECTED] wrote: > Hello! > >I set up a tunnel between two machines (conne

ISAKMPD errors n. 8 and n. 118

Hello! I set up a tunnel between two machines (connected through the Internet) running OpenBSD 3.6 and everything was fine. Then I had to upgrade one of the two machines to 3.7 (disk crash!). Rewrote the config file and restarted the tunnel. The tunnel is fine and the traffic gets encrypted

Strange behavior with carp and preemption

Dear list, I set up two OpenBSD 3.7 -stable firewalls using carp. Everything works except preemption. When only one interface on the master side fails (pull the Cable) the regarding carp0 interface on the backup side becomes master. But not carp1. I waited some minutes, but carp1 keeps being bac

Re: su on 3.8 soekris

I use the root password. This password is correct. I think, I miss anything file or lib. output groups: ---snip--- # groups admin users wheel ---snip--- Andreas On Thu, 2005-11-10 at 10:04 +0100, Guido Tschakert wrote: > Andreas M|rdter wrote: > > command groups does not exist on the soekris

Re: Anyone tried a sun fire X2100 server yet?

We ordered this very box for undeadly. It also took a while to arrive, but here's a preliminary dmesg (thanks to Kurt Seifried), further tests to follow (on-board RAID probably not working except for JBOD, second NIC not seen yet). Daniel OpenBSD 3.8-current (GENERIC) #319: Tue Nov 1 13:55:52 M

Re: Mplayer & DVD problem

On Wed, Nov 09, 2005 at 07:44:29PM -0500, Roy Morris wrote: > >libdvdread: Could not open /dev/rcd0c with libdvd. > >libdvdread: Can't open /dev/rcd0c for reading > >ERROR[ogle_nav]: faild to open/read the DVD > >callbacks.on_opendvd_activate(): DVDSetDVDRoot: Root not set > > > >WHat am I supposed

Re: ath0: bogus xmit rate 0x0

Alexandre wrote: Hi all, I have an atheros based card on my OpenBSD 3.8. When I activate it, I have this error message ath0: bogus xmit rate 0x0 coming regurlaly when I try and ping another machine. Here is an extract of my dmesg : ath0 at pci0 dev 9 function 0 "Atheros AR5212" rev 0x01: irq

Re: Bug bounty for pciide/atapiscsi

--On 10 November 2005 14:29 +1300, Stephen Nelson wrote: I tried your suggestion and got the same result as SamuraiChef, which is what I would expect - I want to use pciide, not disable it. If pciide is disabled then surely I can't read from the cdrom. pciide(4) isn't the only driver that talk

Re: su on 3.8 soekris

Andreas M|rdter wrote: command groups does not exist on the soekris-box. but id. this is the output after reboot. ---snip--- $ id admin uid=1000(admin) gid=10(users) groups=10(users), 0(wheel) $ su Password: Nov 9 16:23:26 sample su: BAD SU admin to root on /dev/tty00 Sorry Nov 9 16:23:26

Re: Anyone tried a sun fire X2100 server yet?

On Wed, 09 Nov 2005 22:28:26 -0500 JD Harrington <[EMAIL PROTECTED]> wrote: > Mike wrote: > > I don't know how similar the Ultra20 and X2100 are, but here's dmesg > > > > output from an Ultra20: > > This is completely off-topic, but how do you like the Ultra 20 > overall? I need a new workstati

Re: ath0: bogus xmit rate 0x0

> On Wed, 09 Nov 2005 20:17:14 +0100 > Alexandre <[EMAIL PROTECTED]> wrote: > >> Hi all, >> > [...] >> >> uname -a gives >> OpenBOpenBSD hades.olympe.div 3.8 GENERIC#4 i386 > Are you sure your uname -a output is correct? Well, hum, I had a typo. I meant that I am under 3.8-current. Thanks.

Re: su on 3.8 soekris

command groups does not exist on the soekris-box. but id. this is the output after reboot. ---snip--- $ id admin uid=1000(admin) gid=10(users) groups=10(users), 0(wheel) $ su Password: Nov 9 16:23:26 sample su: BAD SU admin to root on /dev/tty00 Sorry Nov 9 16:23:26 sample su: BAD SU admin

Re: acpi

Alright we have enough dumps for now so please stop eating all my bandwidth :-) On Tue, Nov 08, 2005 at 10:54:47PM -0600, Marco Peereboom wrote: > Jordan Hargrave (your friendly IPMI developer) has been plugging away at ACPI. > He has written an ASL parser and an AML interpreter. Jordan also wrot