Re: "X -configure" segmentation fault

2013-09-12 Thread howard eisenberger
On Tue, Sep 10, 2013 at 10:18:43PM +, Heptas Torres wrote: > I am trying to generate a starting xorg.conf file by running "X > -configure" but get a segmentation fault error (output below). Any > ideas what could go wrong? Have tried this both in a VMware guest and > on real hardware but I get

Re: GCC 2.95 mention in intro(3)

2013-09-12 Thread Jason McIntyre
On Fri, Sep 13, 2013 at 01:03:01PM +1000, Brett Mahar wrote: > Hi misc, > > I think the GCC 2.95 line is no longer relevant. > > This time I remember to: > ok? > yes, ok ;) jmc > Brett. > > > Index: src/share/man/man3/intro.3 >

GCC 2.95 mention in intro(3)

2013-09-12 Thread Brett Mahar
Hi misc, I think the GCC 2.95 line is no longer relevant. This time I remember to: ok? Brett. Index: src/share/man/man3/intro.3 === RCS file: /usr/cvsync/src/share/man/man3/intro.3,v retrieving revision 1.57 diff -u -p -u -r1.57

PPPoA and access concentrator setting

2013-09-12 Thread Mark Fordham IT
Hello All, I'm trying to connect my OpenBSD box to my ISP who I must connect to using PPPoA as well as specify the access concentrator name in the settings. I can specify the access concentrator using PPPoE(4) and the pppoeac field but it seems PPPoE(4) won't talk PPPoA, correct? I believe PPPoE

Re: Bootparamd

2013-09-12 Thread hruodr
Miod Vallat wrote: Thanks for the good tips! > I think the bootparams swap file information will be used correctly (I > remember seeing a fix in this area some time ago). It doesn't hurt > anyway to mention it in /etc/fstab with the nfsmntpt option. OK, both, swap and rootfs, again in /etc/fsta

Re: sudo configuration !ttytickets?

2013-09-12 Thread Miod Vallat
> I can't say whether this is the thinking of the OpenBSD developers, > but I have seen some concerns over the years that tty_tickets gives > a false sense of security. Not to mention the annoyance. Miod

Re: Strange STARTTLS issue

2013-09-12 Thread Claus Assmann
On Thu, Sep 12, 2013, John Hynes wrote: > openssl s_client -starttls smtp -connect mail.dean.edu:25 > > ...from any of my OpenBSD 5.3 hosts, I get the same response: > CONNECTED(0003) > 12556912661392:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake > failure:/usr/src/lib/libssl/ssl/../

Re: Strange STARTTLS issue

2013-09-12 Thread John Hynes
After applying the patch, and recompiling with SSL_OP_NO_TLSv1_2, sendmail still gives the same error, although the -no-tls1_2 option gets the test to work. Are there other defines I need perhaps? -John On Thu, Sep 12, 2013 at 3:54 PM, Claus Assmann wrote: > On Thu, Sep 12, 2013, John Hynes w

Re: Strange STARTTLS issue

2013-09-12 Thread John Hynes
Nevermind - I mistype the define - it works. Thanks again, -John On Thu, Sep 12, 2013 at 5:10 PM, John Hynes wrote: > After applying the patch, and recompiling with SSL_OP_NO_TLSv1_2, sendmail > still gives the same error, although the -no-tls1_2 option gets the test to > work. > > Are there

Re: PPPoA and access concentrator setting

2013-09-12 Thread Stuart Henderson
On 2013-09-12, Mark Fordham IT wrote: > Hello All, > > I'm trying to connect my OpenBSD box to my ISP who I must connect to using > PPPoA as well as specify the access concentrator name in the settings. > > I can specify the access concentrator using PPPoE(4) and the pppoeac field > but it seems P

Re: Bootparamd

2013-09-12 Thread Miod Vallat
> Who uses bootparam? Only the Kernel? bootparam is used by network boot blocks on several machines, as well as by the kernel when booting with root on nfs. > Is Bootparamd a standard? FreeBSD has it with the same author, > there is also a Bootparamd in SunOS. I think this is important > to know

Re: sudo configuration !ttytickets?

2013-09-12 Thread Todd C. Miller
On Wed, 11 Sep 2013 20:59:08 -0400, "Michael W. Lucas" wrote: > I've noticed that the sudo on OpenBSD seems to have !ttytickets set by > default. In other words, I authenticate sudo once on, say, ttyp4, and > all of my login sessions on all my other ttyp* have authenticated to > sudo. > > This, w

Re: Strange STARTTLS issue

2013-09-12 Thread John Hynes
Thanks Claus - the option did work, so I'll go with the patch. -John On Thu, Sep 12, 2013 at 3:54 PM, Claus Assmann wrote: > On Thu, Sep 12, 2013, John Hynes wrote: > > > openssl s_client -starttls smtp -connect mail.dean.edu:25 > > > > ...from any of my OpenBSD 5.3 hosts, I get the same respo

Re: sudo configuration !ttytickets?

2013-09-12 Thread Michael W. Lucas
On Wed, Sep 11, 2013 at 10:50:19PM -0600, Andy Bradford wrote: > Thus said "Michael W. Lucas" on Wed, 11 Sep 2013 20:59:08 -0400: > > > This, well, kind of surprised me. I'm sure you folks have thought this > > through in much more detail than I have, but I can't find anything on > > the rational

Strange STARTTLS issue

2013-09-12 Thread John Hynes
Hi All, Issue: There is one host to whom I can't send mail from either of my relays (both OpenBSD 5.3, sendmail). It always fails the TLS handshake. If I attempt to debug it by hand by running: openssl s_client -starttls smtp -connect mail.dean.edu:25 ...from any of my OpenBSD 5.3 hosts, I get

Re: Creating Mobile Apps ..

2013-09-12 Thread opendaddy
On 12. september 2013 at 12:04 PM, "Peter N. M. Hansteen" wrote: > >I assume you paid somebody for a list that includes addresses >likely to produce negative reactions. I'll give you this much better list >for free, with a total of 25083 adresses: >http://www.bsdly.net/~peter/sortlist > >Plea

SHA256 missing for some archtectures' package snapshots

2013-09-12 Thread Bryce Chidester
Hello! I've noticed that the SHA256 files have gone missing for the macppc, alpha, and m68k package snapshots. This doesn't seem to be an individual mirror issue as the files are not present on ftp.openbsd.org itself. I first noticed that they were missing some time in early August, but I assumed t

Re: Help troubleshooting ehci_idone hang.

2013-09-12 Thread RD Thrush
On 09/12/13 10:34, Martin Pieuchot wrote: > On 12/09/13(Thu) 08:16, RD Thrush wrote: >> On 09/12/13 05:15, Martin Pieuchot wrote: >>> [...] >>> >>> Could you try the diff below on the v1 machine and tell me if it helps? >> >> Thanks, I don't think it helped... > > By looking at your new log, I bel

Re: sudo configuration !ttytickets?

2013-09-12 Thread Ted Unangst
On Thu, Sep 12, 2013 at 10:27, Matthew Weigel wrote: > On 2013-09-11 19:59, Michael W. Lucas wrote: > >> This, well, kind of surprised me. I'm sure you folks have thought this >> through in much more detail than I have, but I can't find anything on >> the rationale behind it. >> >> It seems insecu

Re: sudo configuration !ttytickets?

2013-09-12 Thread Matthew Weigel
On 2013-09-11 19:59, Michael W. Lucas wrote: This, well, kind of surprised me. I'm sure you folks have thought this through in much more detail than I have, but I can't find anything on the rationale behind it. It seems insecure. Can anyone enlighten me as to the thinking here? I can't say wh

Re: Help troubleshooting ehci_idone hang.

2013-09-12 Thread Martin Pieuchot
On 12/09/13(Thu) 08:16, RD Thrush wrote: > On 09/12/13 05:15, Martin Pieuchot wrote: > > [...] > > > > Could you try the diff below on the v1 machine and tell me if it helps? > > Thanks, I don't think it helped... By looking at your new log, I believe it did ;) > After booting the new kernel, u

Bootparamd

2013-09-12 Thread hruodr
Dear Sirs! I managed to boot OpenBSD 5.3 in a Fujitsu Siemens Futro A220 (AMD Geode LX800) thin client from a Celeron Machine running OpenBSD 4.8. I followed what I read in DISKLESS(8) and PXEBOOT(8) almost blindly, without understandig very much. Perhaps the pages could be more understandable.

carp and bgp question

2013-09-12 Thread Marko Cupać
I have two CARPed boxes that connect to upstream providers, and do BGP routing with them. CARP is configured in active/passive setup. Network between me and each provider is /29. Setup is described in detail here (although in Serbian, but schema in sidebar and conf files are universal): https://ww

Re: Help troubleshooting ehci_idone hang.

2013-09-12 Thread RD Thrush
On 09/12/13 05:15, Martin Pieuchot wrote: > On 11/09/13(Wed) 11:03, RD Thrush wrote: >> On 09/10/13 07:56, Martin Pieuchot wrote: >>> On 10/09/13(Tue) 07:15, RD Thrush wrote: On 09/10/13 04:42, Martin Pieuchot wrote: > [...] > > Thanks for this detailed bug report. > > You'

Re: Creating Mobile Apps ..

2013-09-12 Thread Peter N. M. Hansteen
"Pallavi" writes: > Note: We are not spammers and are against spamming of any kind. If you are > not interested then you can reply with a simple \"NO\",We will never contact > you again. I assume you paid somebody for a list that includes addresses likely to produce negative reactions. I'll give

Creating Mobile Apps ..

2013-09-12 Thread Pallavi
Hi, I am Pallavi - Marketing Executive (iPhone & Android Apps) we are a web development company specializing in development of iPhone and Android applications. We have more than 3 year of experience in developing custom mobile applications. Each application is reviewe

Re: No sound on Intel-iMac w/ NVIDIA MCP79

2013-09-12 Thread Alexey E. Suslikov
Jonathan Gray jsg.id.au> writes: > Most/all? of the apple machines seem to have audio wired up strangely > and require various quirks. Try this https://launchpadlibrarian.net/122794756/linux-imac91-sound.patch https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1033233

Re: fvwm in base [was: "X -configure" segmentation fault]

2013-09-12 Thread Thomas Adam
On 12 September 2013 06:10, Carson Chittom wrote: > Zoran Kolic writes: > >> In fact, fvwm is in base part. > > A while ago, there was a message to misc from the fvwm developer about > relicensing fvwm to allow a more recent version into base. I wonder if > there is any status update? That is I

Re: daily insecurity output: Login operator is off but still....

2013-09-12 Thread Craig R. Skinner
On 2013-09-11 Wed 11:47 AM |, Rogier Krieger wrote: > >On Wed, Sep 11, 2013 at 11:37 AM, Craig R. Skinner ><[1]skin...@britvault.co.uk> wrote: > > Do I need to change operator's password to be 13 *'s? > >No, you need to change the value in the password field to 13 asterisks. >

Re: Quick question on PFS in ipsec

2013-09-12 Thread Stuart Henderson
On 2013-09-12, Andy wrote: > In addition to using isakmpd debug 'isakmpd -D A=99 -d' > > You also need to configure the policies in ipsec.conf to use 'dynamic' > and not any of the other manual modes (man ipsec.conf) "The dynamic mode >will additionally enable Dead Peer Detection (DPD

Re: Quick question on PFS in ipsec

2013-09-12 Thread Stuart Henderson
On 2013-09-12, Jeff Simmons wrote: > The man page for ipsec.conf states, in regards to crypto 'suites': > > "Perfect Forward Security (PFS) is enabled unless group none is specified." > > So is PFS required if a group is specified or is it optional for the remote > party? And is there a way to de

Re: Help troubleshooting ehci_idone hang.

2013-09-12 Thread Martin Pieuchot
On 11/09/13(Wed) 11:03, RD Thrush wrote: > On 09/10/13 07:56, Martin Pieuchot wrote: > > On 10/09/13(Tue) 07:15, RD Thrush wrote: > >> On 09/10/13 04:42, Martin Pieuchot wrote: > >>> [...] > >>> > >>> Thanks for this detailed bug report. > >>> > >>> You're saying that you have 2 amd64 systems with

Re: Quick question on PFS in ipsec

2013-09-12 Thread Andy
In addition to using isakmpd debug 'isakmpd -D A=99 -d' You also need to configure the policies in ipsec.conf to use 'dynamic' and not any of the other manual modes (man ipsec.conf) "The dynamic mode will additionally enable Dead Peer Detection (DPD) and use the local hostna

Re: fvwm in base [was: "X -configure" segmentation fault]

2013-09-12 Thread James Griffin
On Thu, Sep 12, 2013 at 12:10:36AM -0500, Carson Chittom wrote: > Zoran Kolic writes: > > > In fact, fvwm is in base part. > > A while ago, there was a message to misc from the fvwm developer about > relicensing fvwm to allow a more recent version into base. I wonder if > there is any status

Re: Quick question on PFS in ipsec

2013-09-12 Thread Janne Johansson
You are going to see (if you debug the negotiations done by isakmpd) if both sides say they can use FPS, IIRC. 2013/9/12 Jeff Simmons > The man page for ipsec.conf states, in regards to crypto 'suites': > > "Perfect Forward Security (PFS) is enabled unless group none is specified." > > So is P