Re: md5 failed on snapshot files from ftp.openbsd.org

2006-08-16 Thread Mikolaj Kucharski
Sorry false alarm :/ After third time everything is ok. -- best regards q#

Re: OT hardware IDE RAID cards

2006-08-16 Thread L. V. Lammert
At 12:55 AM 8/17/2006 +0200, Ingo Schwarze wrote: > We are not stuck on SATA. The whole data directory has ~ 80GB of data > so PATA would work just as well. I fear you missed the point. This is hardly about SATA vs. PATA, but rather about ATA vs. SCSI. Au contraire - the argument is 'RAID',

md5 failed on snapshot files from ftp.openbsd.org

2006-08-16 Thread Mikolaj Kucharski
I didn't upgraded my -current system to latest -current because of errors below. I've downloaded today those files two times, with same result. `md5 -ci' and `cksum -c' have errors on the same files. `gzip -vt *.tgz' shows that archives are not damaged. $ md5 -c MD5 (MD5) INSTALL.i386:

Re: OT hardware IDE RAID cards

2006-08-16 Thread Greg Thomas
On 8/16/06, Ioan Nemes <[EMAIL PROTECTED]> wrote: >>> Jaye Mathisen <[EMAIL PROTECTED]> 08/17 9:25 am >>> > We switched from SCSI to SATA, and have seen no significant difference in > reliability You didn't looked hard enugh! > and a whole lot of savings in $'s. Not on the long term

Re: OT hardware IDE RAID cards

2006-08-16 Thread Jaye Mathisen
I'm not arguing that in the highest end usage SCSI is still the way to go. Still is, and will probably remain that way for another decade or so maybe longer. IIRC original question was appx 80GB of *tertiary* storage, not main storage for a zillion row database cluster spread out over a huge com

Re: OT hardware IDE RAID cards

2006-08-16 Thread Ioan Nemes
>>> Jaye Mathisen <[EMAIL PROTECTED]> 08/17 9:25 am >>> > We switched from SCSI to SATA, and have seen no significant difference in > reliability You didn't looked hard enugh! > and a whole lot of savings in $'s. Not on the long term, very bad purchasing decision! > But we don't buy

Re: Active Directory authentication

2006-08-16 Thread Lars Hansson
On Thursday 17 August 2006 00:39, Steve Shockley wrote: > Okay, in that case login_radius offers no benefit to me over login_ldap > (other than it's in base). Aside from the nsswitch patch posted on > tech@, is there any auth method that does *not* require adding entries > to /etc/passwd? Yes, NI

Re: OT hardware IDE RAID cards

2006-08-16 Thread Marco Peereboom
> Heck, you can get near petabyte storage arrays now from several top vendors, > and guess what? Most of them are using SATA. I believe Netapp is using > SATA drives in some of their systems, and anybody who knows Netapp knows they > don't release anything unless it's solid, and won't damage t

Re: OT hardware IDE RAID cards

2006-08-16 Thread Ingo Schwarze
> I was over ruled. Ok, it looks like your company has taken most of the decisions and all you still need to decide is the ATA RAID brand. > We'll probably go with the 3Ware I fail to remember hearing anything about that, either good or bad. I do remeber the first brand Marco praised was LSI ami

Re: OT hardware IDE RAID cards

2006-08-16 Thread Steve B
Greg - Thanks for that link! Ingo - We are leaning toward ATA since the unit is used for tertiary storage. Primary backup is to tape, stored off-site, and secondary backup is to a SCSI based system in a different bldg. So yes, its a budgetary issue. Though I do not understand why we need triple co

scan of /var/db/spamd failed

2006-08-16 Thread thiago
Hi all! My /var/log/messages is full of messages saying that spamd failed to scan his db file. It says: scan of /var/db/spamd failed Somebody got some erros like this? My spamdb has 63MB. Could it be the reason? I am using spamd in greylisting mode. Thanks, Thiago

binat in and out of same interface: possible?

2006-08-16 Thread Stephen Bosch
I have an OpenBSD 3.8 device, running on Soekris 4801 hardware, sitting on a private network. Its sole purpose is to NAT traffic before it goes through an IPsec tunnel. I am using binat and static routes to reach the Two interfaces are connected to the network. This is the pf.conf file: > # def

Re: OT hardware IDE RAID cards

2006-08-16 Thread Jaye Mathisen
There are several differences between now and then. Anybody using the software based raid cards, like the cheap promise/highpoint stuff is asking for trouble, no question. However, vendors have made 24x7 SATA drives available, they're just not the ones you see at the cheapest prices on pricewatch

Re: OT hardware IDE RAID cards

2006-08-16 Thread Ingo Schwarze
> We are not stuck on SATA. The whole data directory has ~ 80GB of data > so PATA would work just as well. I fear you missed the point. This is hardly about SATA vs. PATA, but rather about ATA vs. SCSI. If you do really need reliability, you should seriously consider SCSI RAID. Yes, it definit

Re: mirroring packages without much bandwidth overhead

2006-08-16 Thread Arnaud Bergeron
On 8/15/06, Marc Espie <[EMAIL PROTECTED]> wrote: On Tue, Aug 15, 2006 at 11:40:18AM -0400, Arnaud Bergeron wrote: > On 8/14/06, Stuart Henderson <[EMAIL PROTECTED]> wrote: > >On 2006/08/14 17:59, Arnaud Bergeron wrote: > >> In which case, the patchlevel needs to be bumped (eg. foo-1.0.tgz -> > >

Re: OT hardware IDE RAID cards

2006-08-16 Thread Greg Thomas
On 8/16/06, Steve B <[EMAIL PROTECTED]> wrote: We are not stuck on SATA. The whole data directory has ~ 80GB of data so PATA would work just as well. I did not see any docs on the LSI site for the 150-2. A Google search on it had produced a couple of listings that indicated it was not hardware RA

MP -current and networking problems...

2006-08-16 Thread Jeff Ross
I'm putting a couple of MP servers on-line and am having some networking problems with the GENERIC.MP -current kernel. (dmesgs below) When booting from the MP kernel, I have no networking--no pings in or out (other than localhost) no ssh, nothing. In this specific machine, I have three nics,

Re: OT hardware IDE RAID cards

2006-08-16 Thread Steve B
We are not stuck on SATA. The whole data directory has ~ 80GB of data so PATA would work just as well. I did not see any docs on the LSI site for the 150-2. A Google search on it had produced a couple of listings that indicated it was not hardware RAID. I'll try and dig around some more on the LSI

Re: Zen of Chroot Apache + Perl

2006-08-16 Thread Jack J. Woehr
On Aug 16, 2006, at 2:14 PM, Darrin Chandler wrote: > On Wed, Aug 16, 2006 at 01:35:10PM -0600, Jack J. Woehr wrote: > > I know that syweb has a script using ldd to do this. > http://www.xs4all.nl/~wpd/symon/ Thanks, Darrin. --- Jack J. Woehr Director of Development Absolute Performance, Inc. [E

Re: OT hardware IDE RAID cards

2006-08-16 Thread Greg Thomas
On 8/16/06, Greg Thomas <[EMAIL PROTECTED]> wrote: On 8/15/06, Damien Miller <[EMAIL PROTECTED]> wrote: > On Tue, 15 Aug 2006, Steve B wrote: > > > Our company has a small OpenBSD box colocated with a local ISP that we use > > for tertiary stoage of some data. I'd like to setup RAID-1 to provide

Re: Zen of Chroot Apache + Perl

2006-08-16 Thread Darrin Chandler
On Wed, Aug 16, 2006 at 01:35:10PM -0600, Jack J. Woehr wrote: > I've got this running just fine by copying a few files. > > Also, ports packages unwrap nicely into the chroot tree. > > But aside from that, I'm still curious if I am doing by hand > something that's already been automated. I know

Re: Sun Ultra 25

2006-08-16 Thread Matthew R. Dempsky
On Wed, Aug 16, 2006 at 09:27:35AM -0700, Darrin Chandler wrote: > On Thu, Aug 17, 2006 at 01:30:43AM +1000, John Tate wrote: > > -- > > /(bb|[^b]{2})/ that is the Question: > > I believe the question is 0x2b|~0x2b, and the answer is 0xff. This is > tautalogical and not restricted to 0x2b. Which

Re: Zen of Chroot Apache + Perl

2006-08-16 Thread Jack J. Woehr
I've got this running just fine by copying a few files. Also, ports packages unwrap nicely into the chroot tree. But aside from that, I'm still curious if I am doing by hand something that's already been automated. On Aug 16, 2006, at 1:03 PM, Jack J. Woehr wrote: > I think I understand but wan

Zen of Chroot Apache + Perl

2006-08-16 Thread Jack J. Woehr
I think I understand but want to check before I do something silly. I have OBSD 3.9 + chrooted apache + mod_perl after apxs. Now, to actually run perl cgi's I have to copy /usr/bin/perl and all relevant libs over to /var/www? Is there an automated tool for this? --- Jack J. Woehr Director of

Re: NFS high availability

2006-08-16 Thread Barry, Christopher
snip... > > throwing "stale nfs file handle" errors. My assumption is > that these are the > > result of ESTALE being returned by the server and that the > system doesn't > > understand how to handle this gracefully and reopen the files. > > What you need to do is mount the nfs state directory f

Re: Sun Ultra 25

2006-08-16 Thread John Tate
It wasn't original but I get and love it. On 8/17/06, Darrin Chandler <[EMAIL PROTECTED]> wrote: > > On Thu, Aug 17, 2006 at 01:30:43AM +1000, John Tate wrote: > > -- > > /(bb|[^b]{2})/ that is the Question: > > I believe the question is 0x2b|~0x2b, and the answer is 0xff. This is > tautalogical a

Re: Sun Ultra 25

2006-08-16 Thread John Tate
Your reply is awesome though. On 8/17/06, Darrin Chandler <[EMAIL PROTECTED]> wrote: > > On Thu, Aug 17, 2006 at 01:30:43AM +1000, John Tate wrote: > > -- > > /(bb|[^b]{2})/ that is the Question: > > I believe the question is 0x2b|~0x2b, and the answer is 0xff. This is > tautalogical and not restr

Re: Sun Ultra 25

2006-08-16 Thread Darrin Chandler
On Thu, Aug 17, 2006 at 01:30:43AM +1000, John Tate wrote: > -- > /(bb|[^b]{2})/ that is the Question: I believe the question is 0x2b|~0x2b, and the answer is 0xff. This is tautalogical and not restricted to 0x2b. -- Darrin Chandler| Phoenix BSD Users Group [EMAIL PROTECTED] | h

Re: Active Directory authentication

2006-08-16 Thread Steve Shockley
Prabhu Gurumurthy wrote: Yes, it will require adding entries on /etc/passwd Okay, in that case login_radius offers no benefit to me over login_ldap (other than it's in base). Aside from the nsswitch patch posted on tech@, is there any auth method that does *not* require adding entries to /e

Re: Active Directory authentication

2006-08-16 Thread Prabhu Gurumurthy
Steve Shockley wrote: Prabhu Gurumurthy wrote: How about using login_radius feature by modifying login.conf to add a new radius profile and authenticate against a RADIUS server. You can compile freeradius and have rad_ldap plugin on the RADIUS server to authenticate against AD. Will that sti

Re: OT hardware IDE RAID cards

2006-08-16 Thread Gaby Vanhegan
On 16 Aug 2006, at 15:58, Bernd Schoeller wrote: >>> If you are stuck on SATA, the Areca stuff is a few weeks away from >>> totally rocking. And it is cheap. >> >> I can see that these guys also freely provide API documentation and >> code: >> >> http://www.areca.com.tw/support/index/dc1120.

Re: Sun Ultra 25

2006-08-16 Thread John Tate
Post it to me I need a project :p. I'd almost pay but I'm too poor haha. I have a Sun Blade 100 running it. On 8/16/06, stan <[EMAIL PROTECTED]> wrote: > > Does OpenBSD work well on a Sun Ultra 25? > > -- > Unix is very simple, but it takes a genius to understand the simplicity. > (Dennis Ritchie)

Re: OT hardware IDE RAID cards

2006-08-16 Thread Gaby Vanhegan
On 16 Aug 2006, at 15:58, Bernd Schoeller wrote: >>> If you are stuck on SATA, the Areca stuff is a few weeks away from >>> totally rocking. And it is cheap. >> >> Does this mean that it will be supported by bioctl soon? > > Is there any other way to understand Theo's comment? ;-) Huzzah for ope

Re: OT hardware IDE RAID cards

2006-08-16 Thread Bernd Schoeller
On Wed, Aug 16, 2006 at 10:12:45AM +0100, Gaby Vanhegan wrote: > On 16 Aug 2006, at 06:24, Theo de Raadt wrote: > > > If you are stuck on SATA, the Areca stuff is a few weeks away from > > totally rocking. And it is cheap. > > I can see that these guys also freely provide API documentation and

Re: ipsec.conf syntax error

2006-08-16 Thread Hans-Joerg Hoexer
Hi, On Wed, Aug 16, 2006 at 09:46:18AM -0400, Stefan wrote: > Hans-Joerg Hoexer wrote: > > this is on -current? > > Sorry, I should have mentioned it. It's 3.9 release. setting the group was added post 3.9.

Kernel panic

2006-08-16 Thread Charles Farinella
We have a G3 mac here running mail/dns and this morning it died. I had to reboot it, so I wasn't able to run trace or ps. Any clues as to what may have happened? I don't see anything in my logs. from dmesg: === kern dsi on addr 3c200068 iar 304430 panic: trap type 300 at 304430 (uvm_unmap_remov

Re: ipsec.conf syntax error

2006-08-16 Thread Stefan
Hans-Joerg Hoexer wrote: > this is on -current? Sorry, I should have mentioned it. It's 3.9 release. -Stefan On Tue, Aug 15, 2006 at 10:46:37PM -0400, Stefan wrote: > Can someone explain why this is giving a syntax error? > > > ike esp from 10.0.0.0/24 to 1

Re: Active Directory authentication

2006-08-16 Thread Steve Shockley
Prabhu Gurumurthy wrote: How about using login_radius feature by modifying login.conf to add a new radius profile and authenticate against a RADIUS server. You can compile freeradius and have rad_ldap plugin on the RADIUS server to authenticate against AD. Will that still require creating ent

Flash Media Server by Adobe/Macromedia

2006-08-16 Thread Alexander Farber
Hello, I wonder if anyone has been successful with running Adobe's FMS on OpenBSD. I've got FMS_2_0_2_r51_linux installed on -current the following way: 0) Installed redhat_base-8.0p8 package and set kern.emul.linux=1 in /etc/sysctl.conf 1) Downloaded these 4 rpms: http://download.fedoraleg

Re: Thunderbird stability/usability?

2006-08-16 Thread Gabriel George POPA
Hello, I'm using Mozilla Suite 1.7.12 on OpenBSD 3.8-GENERIC. Yes, indeed, from time to time it just closes. It happens with both the browser and the mail reader. Indeed, no core, no crash, it's the same problem. I've heard a lot of people having this problem with different versio

Re: Thunderbird stability/usability?

2006-08-16 Thread belenus
I had the same problem with 3.9, now I am running 4.0-beta with the latest thunderbird package and I don't have that problem anymore. But it still hangs (folder don't get refreshed anymore) from time to time when running for several hours.

Re: Porting firewall/routing script to OpenBSD from linux?

2006-08-16 Thread Guido Tschakert
Paul de Weerd schrieb: > On Tue, Aug 15, 2006 at 02:20:05PM -0500, Matthew R. Dempsky wrote: > | On Sun, Aug 13, 2006 at 01:19:31PM -0400, Nick Guenther wrote: > | > I think you're looking for ifconfig(8). Wait, doesn't linux have > | > ifconfig? What's ip for? > | > | ip is from the iproute2 pack

Thunderbird stability/usability?

2006-08-16 Thread Xavier Mertens
hi *, A few days ago, my notebook disk died... Good opportunity to reinstall a fresh 3.9-GENERIC. My X environment is running fine (xfce4) but Thunderbird gives me some headaches... (mozilla-thunderbird-1.5.0.4.tgz) >From time to time, when reading RSS feeds or HTML mails (Grrr), it just closes!

Re: pxeboot

2006-08-16 Thread Tom Cosgrove
>>> Jeff Quast 16-Aug-06 02:29 >>> > > if you had used tcpdump -Xs 99 you would have seen in the first few > packets of the negotiation, the wrap netboot client sent a request for > changing the packet length. This was silently ignored by the OpenBSD > tftpd, because it is not supported. When the w

Re: OT hardware IDE RAID cards

2006-08-16 Thread Gaby Vanhegan
On 16 Aug 2006, at 06:24, Theo de Raadt wrote: > If you are stuck on SATA, the Areca stuff is a few weeks away from > totally rocking. And it is cheap. I can see that these guys also freely provide API documentation and code: http://www.areca.com.tw/support/index/dc1120.htm Does this

Re: nagios plugin: isakmpd

2006-08-16 Thread Cristiano Deana
2006/8/15, Jacob Yocom-Piatt <[EMAIL PROTECTED]>: does anyone on list have a nagios plugin that will check the status of isakmpd on an openbsd machine? Hi, I used ike-scan (http://www.nta-monitor.com/tools/ike-scan/) to check if a vpn is up. Then a shell script exiting with 0,1 or 2 status if

Re: Porting firewall/routing script to OpenBSD from linux?

2006-08-16 Thread Marian Hettwer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthew R. Dempsky wrote: > On Sun, Aug 13, 2006 at 01:19:31PM -0400, Nick Guenther wrote: > > ip is from the iproute2 package. From the lartc.org manual, ``Why > iproute2?''[1]: > > Most Linux distributions, and most UNIX's, currently use t

Re: ipsec.conf syntax error

2006-08-16 Thread Hans-Joerg Hoexer
this is on -current? On Tue, Aug 15, 2006 at 10:46:37PM -0400, Stefan wrote: > Can someone explain why this is giving a syntax error? > > > ike esp from 10.0.0.0/24 to 10.1.0.0/24 peer (remote IP CIDR) \ > main auth hmac-md5 enc 3des group modp1024 \