Re: bsd.rd path

2015-07-31 Thread Raf Czlonka
On Fri, Jul 31, 2015 at 10:15:22PM BST, li...@wrant.com wrote: > > > Updated to lattest shapshot from yesterday. The path pointed > > > to 5.8 directory, which did not exist. I changed it to correct > > > one, pub/OpenBSD/snapshots/amd64 and installed just fine. > > > > https://marc.info/?m=14255

Re: Report:snortsnarf 3.4

2015-07-31 Thread tuyosi
Hi all . i look at http://centossrv.com/snort.shtml pkg_add p5-Time-modules-2006.0814p0 download SnortSnarf-1.0.tar.gz and tar xvzf SnortSnarf-1.0.tar.gz no need make or so , simply ./snortsnarf.pl . but two errors appear . correct them by comment # . at last shell script

Re: newfs_ext2fs vs e2fsprogs package mke2fs

2015-07-31 Thread Alexander Hall
On 07/30/15 16:42, Joel Rees wrote: Which is preferred, newfs_ext2fs or mke2fs from the e2fsprogs package? I'd certainly go for what's in base unless there is some functionality missing from it. If there are bugs we want to know about them. /Alexander Joel Rees Computer memory is just fa

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Bill Buhler
If you are doing it right your CA private key is on a different machine without network connectivity. -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Giancarlo Razzolini Sent: Friday, July 31, 2015 9:34 AM To: Peter Hessler; li...@wrant.com Cc:

Re: dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread lists
> > > bios0: Supermicro X10SLM+-LN4F > > > > this might be interesting for some misc readers, but don't forget > > to send it to dmesg@ as well. > > Can you please try a recent snapshot and dmesg too? Maker: http://www.supermicro.com/products/motherboard/Xeon/C220/X10SLM_-LN4F.cfm Related:

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Hrvoje Popovski
On 31.7.2015. 19:42, Joe Crivello wrote: > Awesome! Thanks so much. > > So C22X gets detected as an Intel 8 series chipset then (which makes > sense). We are initially thinking about using a couple of Super Micro > 5018D-MR servers with Intel X520 cards as routers, so the lack of onboard > Etherne

Re: bsd.rd path

2015-07-31 Thread lists
> > Updated to lattest shapshot from yesterday. The path pointed > > to 5.8 directory, which did not exist. I changed it to correct > > one, pub/OpenBSD/snapshots/amd64 and installed just fine. > > https://marc.info/?m=142554965809503 Can be dealt with by PXE boot, by providing this in the MAC_ad

Re: Show us your /etc/profile

2015-07-31 Thread lists
> Hello everybody Hello, anonymous. > How do you customize your environment? Reading man pages mostly, and teraforming using (brain) farts. > What aliases or custom functions do you use? On the blog over 15 pages across several years, just kidding. > Here's my /etc/profile I think you can fin

Show us your /etc/profile

2015-07-31 Thread listas-it
Hello everybody How do you customize your environment? What aliases or custom functions do you use? Here's my /etc/profile I think you can find one or two interesting things in it. Show us yours! (in case wordwrapping breaks long lines: http://pastie.org/10322761)

Re: dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread lists
> > bios0: Supermicro X10SLM+-LN4F > > this might be interesting for some misc readers, but don't forget > to send it to dmesg@ as well. This is interesting indeed. Can you please try a recent snapshot and dmesg too? Thank you.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
> one more thing waiting to > bite you in the ass Correct, and resource wasteful maintainership is not that valuable to end users who stumble in their feet anyway. If trying to solve it, please show a solution that is not burning developer time, as it will get abandoned soon or later, there is no

Re: dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread Stuart Henderson
On 2015-07-31, Aaron Poffenberger wrote: > bios0: Supermicro X10SLM+-LN4F this might be interesting for some misc readers, but don't forget to send it to dmesg@ as well.

Re: rdomain with BGP dynamic route

2015-07-31 Thread XU, YANG (YANG)
The presentations were impressive, I wish I knew earlier and went there. Thanks again, -Yang -Original Message- From: Adam Thompson [mailto:athom...@athompso.net] Sent: Friday, July 31, 2015 2:09 PM To: XU, YANG (YANG) Cc: misc@openbsd.org Subject: Re: rdomain with BGP dynamic route T

Re: Intel Atom?

2015-07-31 Thread lists
looking forward to your dmesg then

dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread Aaron Poffenberger
OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar 8 11:04:17 MDT 2015 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 17121136640 (16327MB) avail mem = 16661458944 (15889MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7

Re: bsd.rd path

2015-07-31 Thread Raf Czlonka
On Fri, Jul 31, 2015 at 05:14:15PM BST, Zoran Kolic wrote: > Updated to lattest shapshot from yesterday. The path pointed > to 5.8 directory, which did not exist. I changed it to correct > one, pub/OpenBSD/snapshots/amd64 and installed just fine. > I need more time to see what makes me think that g

Re: rdomain with BGP dynamic route

2015-07-31 Thread Adam Thompson
Then you should have been at BSDCan last month! Olivier Cochard-Labbé of Orange(?) is deploying something like this but using FreeBSD (http://www.bsdcan.org/2015/schedule/events/555.en.html), and Peter Hessler talked at length about rdomains in OpenBSD (http://www.bsdcan.org/2015/schedule/even

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Joe Crivello
Awesome! Thanks so much. So C22X gets detected as an Intel 8 series chipset then (which makes sense). We are initially thinking about using a couple of Super Micro 5018D-MR servers with Intel X520 cards as routers, so the lack of onboard Ethernet support is not a problem for us. That said, if ther

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Christian Weisgerber
On 2015-07-31, Joe Crivello wrote: > Does anyone have any experience with running OpenBSD on the Intel C61X or > C22X series chipsets? My main amd64 box at home is a Dell PowerEdge T20 with a C226 chipset. > In particular I am also curious if the SATA ports would be > supported in AHCI mode. a

bsd.rd path

2015-07-31 Thread Zoran Kolic
Updated to lattest shapshot from yesterday. The path pointed to 5.8 directory, which did not exist. I changed it to correct one, pub/OpenBSD/snapshots/amd64 and installed just fine. I need more time to see what makes me think that graphics acts a bit different on this snapshot. Best regards all

Intel C61X / C22X Chipset Support

2015-07-31 Thread Joe Crivello
Does anyone have any experience with running OpenBSD on the Intel C61X or C22X series chipsets? These chipsets are used frequently by Super Micro in their newer line of very common and (relatively) affordable rack mountable servers. In particular I am also curious if the SATA ports would be support

Re: rdomain with BGP dynamic route

2015-07-31 Thread XU, YANG (YANG)
Adam, That's good suggestion, thanks and I will give it a try. I plan to use OpenBSD as a PE from a service provider point of view, I guess that's not a popular use case. Regards, -Yang -Original Message- From: Adam Thompson [mailto:athom...@athompso.net] Sent: Thursday, July 30, 20

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Giancarlo Razzolini
Em 31-07-2015 03:07, Peter Hessler escreveu: > this is a real problem for real people. Which was pretty much solved with PKP [0]. As I mentioned, custom CA's have their uses, but in the end, they are just one more thing waiting to bite you in the ass. You can pretend to have a decent OPSEC for a wh

Re: Intel Atom?

2015-07-31 Thread Mihai Popescu
> What's your useful idea to bring to other readers? Since the thread is already broken and dead, I would like to ask who the hell are you lists-wrant-com user? I use to read the threads on marc and most of them (maybe all) are interrupted by emails from this address. The answers are meaningless,

Re: Intel Atom?

2015-07-31 Thread Quartz
Off-the-shelf yes, home no, it's just a specialized setup with some odd requirements. We're fine with paying for good quality components but there's no need to overpay for something that offers a bunch of stuff we don't need, especially when we're going to be building several of these. I'm just tr

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Juan Francisco Cantero Hurtado
On Fri, Jul 31, 2015 at 03:52:32PM +0500, Артур Истомин wrote: > On Fri, Jul 31, 2015 at 10:51:38AM +0200, Juan Francisco Cantero Hurtado > wrote: > > On Fri, Jul 31, 2015 at 05:02:47AM +0500, Артур Истомин wrote: > > > Is it supported? I mean exactly USB-N10 NANO, not USB-N10 > > > > Yes. > > >

Re: doas.conf: omitting [as root] allows me to run a command as everybody? [resolved]

2015-07-31 Thread Hikari Boulders
On 07/28/2015 09:35 AM, Theo Buehler wrote: On Mon, Jul 27, 2015 at 10:44:00PM +0200, Alexander Hall wrote: On July 27, 2015 3:22:13 PM GMT+02:00, Theo Buehler wrote: On Mon, Jul 27, 2015 at 03:13:55PM +0200, Marc Espie wrote: On Mon, Jul 27, 2015 at 02:40:53PM +0200, Theo Buehler wrote:

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Артур Истомин
On Fri, Jul 31, 2015 at 10:51:38AM +0200, Juan Francisco Cantero Hurtado wrote: > On Fri, Jul 31, 2015 at 05:02:47AM +0500, Артур Истомин wrote: > > Is it supported? I mean exactly USB-N10 NANO, not USB-N10 > > Yes. > > https://wikidevi.com/wiki/ASUS_USB-N10_Nano > http://www.openbsd.org/cgi-bin/

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread Gregor Best
On Fri, Jul 31, 2015 at 11:53:31AM +0300, li...@wrant.com wrote: > [...] > there is still stutter on disk activity on mp amd64 which is mostly in > media players depending on gtk libs, it is embarrassing to say the > least. > [...] I've seen something similar when my cvsync cronjob kicks in. I can

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread Alexandre Ratchov
On Fri, Jul 31, 2015 at 11:53:31AM +0300, li...@wrant.com wrote: > > > Sorry for wasting yout time. > > there is still stutter on disk activity on mp amd64 which is mostly in > media players depending on gtk libs, it is embarrassing to say the > least. You mean that audio on a mostly idle box, wi

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread lists
> > Sorry for wasting yout time. there is still stutter on disk activity on mp amd64 which is mostly in media players depending on gtk libs, it is embarrassing to say the least.

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Juan Francisco Cantero Hurtado
On Fri, Jul 31, 2015 at 05:02:47AM +0500, Артур Истомин wrote: > Is it supported? I mean exactly USB-N10 NANO, not USB-N10 Yes. https://wikidevi.com/wiki/ASUS_USB-N10_Nano http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/urtwn.4 -- Juan Francisco Cantero Hurtado http://juanfra.info

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
> Perhaps cert.pem should just move to examples/ with no default in /etc/ssl. No. (I know you're ironic.)

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Stuart Henderson
On 2015-07-30, Vadim Zhukov wrote: > Well, I see four scenarios: > > 1. Using the defaults supplied with OpenBSD only. Typical for home/personal > use. > > 2. Use the defaults supplied with OpenBSD, and one or more additional > CAs. Typical for corporate use. > > 3. Use personal set of CAs. Usual

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread Alexandre Ratchov
On Fri, Jul 31, 2015 at 03:05:40AM +0200, Alexander Shendi wrote: > Hi, > > after rebooting the GENERIC.MP kernel supplied with the 5.8 snapshot I had > been using previously everything works fine. > > I don't actually know why -- I'll assume it was a hardware glitch. > > Sorry for wasting yout

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
> We have directories like this (but without removing locally-added > files). Finally some body addressed file management, meaning a template system or formalisation is about to be forming. > The single-file approach at least makes things simple for the majority > who don't edit the file though,

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Stuart Henderson
On 2015-07-31, Benny Lofgren wrote: > So I borrowed an idea from how the Courier MTA/IMAP/POP3 server manages > some of its configuration files: > > The system could check whether /etc/ssl/cert.pem (or whatever path any > particular application provides) is a regular file, in which case > business

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
> What threat models do we want to address The one addressing your maintenance of the certification infrastructure.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Joel Rees
2015/07/31 15:33 : > > everyone on the carousel? why not rework the trust model. Okay, I'll play. What threat models do we want to address uhm, at the library level?

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
> this is a real problem for real people. so, expecting a real solution, uhm yes, it's a potion of soluble metal.