Re: rsync -a doesnt keep owner and permissions

2014-08-20 Thread Markus Rosjat
Just a short heads up how I did it now and you guys might want to share your opinion on the security with this scenario. maschine A (from were I want to pull files): - root cant login over ssh - sync user can only connect with auth key and from host B - sync user is allowed to run rsync without

report(boot openbsd by puppy's grub4dos)

2014-08-20 Thread Tuyosi Takesima
i make little progress , so report it . I install openbsd first in HDD. then I install puppy linux . 1) use puppy' fdisk ,then # fdisk /dev/sda Device Boot Start End Blocks Id System /dev/sda1 *204810487807 5242880 83 Linux <-puppy /dev/sda2

Re: foomatic-rip 'f' exited =?US-ASCII?Q?(retcode=3D9)?=

2014-08-20 Thread Predrag Punosevac
On Tue, Aug 19, 2014 at 11:25 PM, Predrag Punosevac simple printcap file for printing using lpd and foomatic-rip for > about seven years now but since past release it stop working > > predrag@oko$ uname -a > OpenBSD oko.bagdala2.net 5.6 GENERIC.MP#333 amd64 > > lp|HP|HP Photosmart 5250:\ >

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Charles Musser
On Aug 20, 2014, at 2:25 PM, Ed Hynan wrote: > > Although this is a little more complex on gif than e.g. an ethernet interface, > alias is at least similar. On a more straightforward type interface, alias > is used adding additional addresses (BTW, not OpenBSD specific, the alias > keyword is si

Re: APU.1C

2014-08-20 Thread Stan Gammons
On 08/20/14 17:24, Stuart Henderson wrote: On 2014-08-19, Stan Gammons wrote: Anyway. Did you have to sign a NDA to get the datasheet? I see on the RealTek website where they say it supports jumbo frames to 9K. Wonder if RealTek would answer some questions about the register config for jumb

Re: [Bulk] Re: Access Point Section of the faq

2014-08-20 Thread Stuart Henderson
On 2014-08-19, Kevin Chadwick wrote: > So sthen unless you need 802.11n perhaps it's worth a look at OpenBSD > again. I know I am far happier with an OpenBSD access point than a > Linux one and the time to set it up is amasingly quick when it works > especially compared to a Linux Install rather t

Xrdp network times out

2014-08-20 Thread Predrag Punosevac
I am running snapshot from 8th of August (amd64 and i386 versions). I need to work on a remote location. The access to remote center is provided via combination of OpenVPN and Xrdp. 1. OpenVPN tunnel via tap interface. 2. Connecting to Xrdp server which appears to use VNC as a back end as it runs

Re: APU.1C

2014-08-20 Thread Stuart Henderson
On 2014-08-19, Stan Gammons wrote: > Anyway. Did you have to sign a NDA to get the datasheet? I see on the > RealTek website where they say it supports jumbo frames to 9K. Wonder if > RealTek would answer some questions about the register config for jumbo > frames? I just found it on google,

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Jason Tubnor
Forgot to reply-all yesterday (only sent to Charles) to keep the thread in-sync with the rest of the conversation (don't nuke me for stating the obvious + added the rtadvd/route6d) On 20 August 2014 13:40, Charles Musser wrote: > ifconfig gif0 tunnel 50.1.94.112 72.52.104.74 > ifconfig gif0 inet

Re: Strip private AS# from AS-PATH with OpenBGPd

2014-08-20 Thread Stuart Henderson
On 2014-08-20, Laurent CARON wrote: > While reviewing my BGP filters, i realized I don't filter private AS# in > the AS-PATH. > > According to OpenBGPd's man page, it is possible to use: > > deny from any AS { 64512 64513 65535 } > > It would however be quite unmaintainable and not really cl

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Ed Hynan
On Wed, 20 Aug 2014, Charles Musser wrote: On Aug 20, 2014, at 4:15 AM, Ed Hynan wrote: On Tue, 19 Aug 2014, Charles Musser wrote: - ::1 is the local address of the interface on the IPv6 network. No, *::2 is local. Ah, yes. Despite my best efforts at copyediting, I had the meanings of

Re: named does not start?

2014-08-20 Thread Christer Solskogen
On Wed, Aug 20, 2014 at 9:23 PM, Alan McKay wrote: > On Wed, Aug 20, 2014 at 3:08 PM, Christer Solskogen > wrote: >> named_flags= > > Try > > named_flags="" > > I had the same issue with httpd in 5.5. > > It seems that ntpd lets you have blank afer =, but not httpd > > Not running named on this s

Re: pkg_mgr error: "Fatal error: Ustar ... Eror while reading header"

2014-08-20 Thread Daniel Villarreal
Ville, I will do those corrections shortly. I really appreciate your help. FYI, the `installpath=http://ftp.openbsd.org/pub/OpenBSD/5.5/packages/amd64` part I got directly from the CD-set liner notes. I still need to listen to the songs on discs 1 and 2. kind regards, Daniel Villarreal .. [stuf

Re: named does not start?

2014-08-20 Thread Alan McKay
On Wed, Aug 20, 2014 at 3:08 PM, Christer Solskogen wrote: > named_flags= Try named_flags="" I had the same issue with httpd in 5.5. It seems that ntpd lets you have blank afer =, but not httpd Not running named on this system so dunno : ntpd_flags= # enabled during insta

named does not start?

2014-08-20 Thread Christer Solskogen
OpenBSD 5.6-current (GENERIC.MP) #336: Tue Aug 19 20:39:19 MDT 2014 starting network daemons: sshd dhcpd(failed) smtpd nginx ftpproxy tftpd sndiod. But in /etc/rc.conf.local I have: named_flags= A bug perhaps?

carp preempt

2014-08-20 Thread Stefan Olsson
Hi Misc, Now I seem to have issues with carp preemption. If I have net.inet.carp.preempt=1  and take down carp0 on the Master with "ifconfig carp0 down", isn't the idea  for carp7 on the same firewall to have carpdemote set to 128 or similar?  -According to tcpdump it doesn't change carpdemote at

Re: pkg_mgr error: "Fatal error: Ustar ... Eror while reading header"

2014-08-20 Thread Ville Valkonen
Hello Daniel, please see my answers inline. On 19 August 2014 04:08, Daniel Villarreal wrote: > Sorry. This happens for lots of different programs... just tried to use > pkg_mgr to install gif2png > > --- errors -- > Fatal error: Ustar > [ > http://ftp.openbsd.org/pub/OpenBSD

Re: OpenBSD 5.5-STABLE: Full Disk Encryption (bioctl) and Smard Cards

2014-08-20 Thread Ted Unangst
On Wed, Aug 20, 2014 at 18:11, Julien Meister wrote: > Hello everbody, > > I'm from FreeBSD and I wanted to give OpenBSD a (new) try. > > I would like to have a full disk encryption (as I've seen it's possible now > with OpenBSD 5.5) and use a smart card to decrypt the volumes at > boot, instead

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Charles Musser
On Aug 20, 2014, at 4:15 AM, Ed Hynan wrote: > On Tue, 19 Aug 2014, Charles Musser wrote: > >> >> - ::1 is the local address of the interface on the IPv6 >> network. > > No, *::2 is local. Ah, yes. Despite my best efforts at copyediting, I had the meanings of *::1 and *::2 reversed. > >> -

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Charles Musser
On Aug 20, 2014, at 7:43 AM, Adam Thompson wrote: > I know - I could tell by the addresses you provided :-). So much for *my* anonymity... ;-) > > Basically, yes. Although you have a "router" (does things with IP packets), > not a "bridge" (does things with Ethernet frames) - that's a huge dif

Re: acpi error running openbsd snapshot 20140820 (amd64)

2014-08-20 Thread Wesley MOUEDINE ASSABY
How can i get the acpidump if there 's no ddb prompt ? :) man acpidump Reading FAQ, there's no acpidump informations...the same for acpi(4) I will post the dump. Thank you very much. >What would your mechanic say if you took your car to the garage >and said >"My engine is making a strang

OpenBSD 5.5-STABLE: Full Disk Encryption (bioctl) and Smard Cards

2014-08-20 Thread Julien Meister
Hello everbody, I'm from FreeBSD and I wanted to give OpenBSD a (new) try. I would like to have a full disk encryption (as I've seen it's possible now with OpenBSD 5.5) and use a smart card to decrypt the volumes at boot, instead of having to type a password, which seems "less secure". I read a

Re: acpi error running openbsd snapshot 20140820 (amd64)

2014-08-20 Thread Mike Larkin
On Wed, Aug 20, 2014 at 07:47:57PM +0400, Wesley MOUEDINE ASSABY wrote: > On 20.08.2014 19:27, Mike Larkin wrote: > >On Wed, Aug 20, 2014 at 12:34:24PM +0400, Wesley MOUEDINE ASSABY > >wrote: > >>Hi, > >> > >>Running the install56.fs from an usb key give me the following > >>error : > >>http://pbrd

Re: acpi error running openbsd snapshot 20140820 (amd64)

2014-08-20 Thread Peter Hessler
On 2014 Aug 20 (Wed) at 19:47:57 +0400 (+0400), Wesley MOUEDINE ASSABY wrote: :On 20.08.2014 19:27, Mike Larkin wrote: :>On Wed, Aug 20, 2014 at 12:34:24PM +0400, Wesley MOUEDINE ASSABY wrote: :>>Hi, :>> :>>Running the install56.fs from an usb key give me the following error : :>>http://pbrd.co/1rW

Re: acpi error running openbsd snapshot 20140820 (amd64)

2014-08-20 Thread Wesley MOUEDINE ASSABY
On 20.08.2014 19:27, Mike Larkin wrote: On Wed, Aug 20, 2014 at 12:34:24PM +0400, Wesley MOUEDINE ASSABY wrote: Hi, Running the install56.fs from an usb key give me the following error : http://pbrd.co/1rWT1Us So i disabled acpi using UKC to be able to install : http://pbrd.co/1rWUqL0 OpenB

Re: acpi error running openbsd snapshot 20140820 (amd64)

2014-08-20 Thread Mike Larkin
On Wed, Aug 20, 2014 at 12:34:24PM +0400, Wesley MOUEDINE ASSABY wrote: > Hi, > > Running the install56.fs from an usb key give me the following error : > http://pbrd.co/1rWT1Us > > So i disabled acpi using UKC to be able to install : > http://pbrd.co/1rWUqL0 > > OpenBSD is installed now, but ru

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Adam Thompson
On 14-08-20 09:12 AM, Charles Musser wrote: Thanks for the info. As it happens, I am also using a tunnel provided by HE. I know - I could tell by the addresses you provided :-). My current thinking on how to do this is (in admittedly vague and incomplete terms) is: use a machine connected t

Re: pkg_mgr error: "Fatal error: Ustar ... Eror while reading header"

2014-08-20 Thread Daniel Villarreal
I shall wait, i"ll keep trying different things I have defined PKG_CACHE in my regular user home dir, I'll try unsetting that and other things, and let you know if I get different results ... thanks. Daniel On Wed, Aug 20, 2014 at 2:14 AM, Philip Guenther wrote: > On Mon, Aug 18, 2014 at 6:08

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Charles Musser
On Aug 19, 2014, at 9:38 PM, Adam Thompson wrote: > > IIRC from my experimentation, you've got it exactly right. > Some tunnel brokers give you subnet masks that certain versions of OpenBSD > don't like - that turns out to not actually matter, just use whatever > ifconfig(8) want. Point in cas

Re: troubleshooting carp [solved]

2014-08-20 Thread Alan McKay
This is very interesting. I have the "faulty" config in 5.5 but it seems to work. But we have it all on 1 line if that matters and we also specify "carpdev" ---snip--- This doesn't work so well: # cat /etc/hostname.carp0 inet 192.168.16.1/24 vhid 100 pass blahblah advbase 5 advskew 0 This w

iked troubles, SA not installed

2014-08-20 Thread Vincent Gross
Hi folks, I am trying to set up an IPSec VPN between my OpenBSD-current laptop and my OpenBSD-current gateway at home. The gateway is connected with plain old ADSL + PPPoE, and the laptop uses my smartphone tethering functions. laptop has a vether(4) with 192.168.55.220/24 configured and up, and

Re: openbgpd ipv6 nexthop

2014-08-20 Thread Mickael Torres
On 2014-08-20 11:21, David Dahlberg wrote: Am Mittwoch, den 20.08.2014, 08:25 +0200 schrieb Henning Brauer: > trying to do the same for IPv6, the set nexthop statement in the bgpd.conf > has no effect. The cisco receives the prefixes with the non-carp IP of each > firewall as nexthop. that sme

Re: ifconfig command for IPv6 tunnel

2014-08-20 Thread Ed Hynan
On Tue, 19 Aug 2014, Charles Musser wrote: Hi, I'm experimenting with using IPv6 via a tunnel broker provided by an ISP. The tunnel works, but I want to confirm my understanding of the commands they gave me to set it up. These are the commands: ifconfig gif0 tunnel 50.1.94.112 72.52.104.74 ifc

Re: troubleshooting carp [solved]

2014-08-20 Thread Peter Hessler
the reason why the second one works, is because the order does matter. you need to configure the device's interesting bits, before you start assigning an IP address to it. On 2014 Aug 19 (Tue) at 19:31:36 -0400 (-0400), Stefan Olsson wrote: :I've pinpointed the issue with my carp setup. Finally! :

Strip private AS# from AS-PATH with OpenBGPd

2014-08-20 Thread Laurent CARON
Hi, While reviewing my BGP filters, i realized I don't filter private AS# in the AS-PATH. According to OpenBGPd's man page, it is possible to use: deny from any AS { 64512 64513 65535 } It would however be quite unmaintainable and not really clean. Would it be possible to please implem

Re: openbgpd ipv6 nexthop

2014-08-20 Thread David Dahlberg
Am Mittwoch, den 20.08.2014, 08:25 +0200 schrieb Henning Brauer: > > trying to do the same for IPv6, the set nexthop statement in the bgpd.conf > > has no effect. The cisco receives the prefixes with the non-carp IP of each > > firewall as nexthop. > > that smells like a bug. I can confirm that

acpi error running openbsd snapshot 20140820 (amd64)

2014-08-20 Thread Wesley MOUEDINE ASSABY
Hi, Running the install56.fs from an usb key give me the following error : http://pbrd.co/1rWT1Us So i disabled acpi using UKC to be able to install : http://pbrd.co/1rWUqL0 OpenBSD is installed now, but running it with acpi support give me a kernel panic : http://pbrd.co/1rWTCFX trace : htt