Re: django-ldap-auth authentication lasts several minutes on OpenBSD

2021-12-06 Thread Michael Hekeler
> The only machine using another DNS server from my router is the Linux Mint > development machine > which holds the copy of my code and also runs django development > server on 127.0.0.1:8080 and from where everything works without delays. ^^

Re: Running redmine on OpenBSD

2021-12-06 Thread Stuart Henderson
On 2021-12-06, Radek wrote: > If I change perm /etc/ssl/private/redmine.MY.DOMAIN.COM.key to 555 website > loads on FF correctly (no errors on puma) but I still got an error on curl: > $ curl https://redmine.MY.DOMAIN.COM > curl: (35) error:1404B418:SSL routines:ST_CONNECT:tlsv1 alert unknown ca

Re: django-ldap-auth authentication lasts several minutes on OpenBSD

2021-12-06 Thread Maksim Rodin
Thank you very much. It really seems to be a DNS issue. On Пн 06 дек 2021 09:04:15, Michael Hekeler wrote: > > The only machine using another DNS server from my router is the Linux Mint > > development machine > > which holds the copy of my code and also runs django development > > server on 127.

any BFD user ?

2021-12-06 Thread Denis Fondras
The subject says it all. Is there any active BFD (Bidirectionnal Forwarding Detection) user ? Denis

Unwind does not seem to query forwarders it is pointed to

2021-12-06 Thread Maksim Rodin
Hello I have the following unwind.conf: ``` cat /etc/unwind.conf fwd1=192.168.1.150 fwd2=192.168.1.1 forwarder { $fwd1 $fwd2 } preference forwarder ``` and an automatically generated resolv.conf: ``` cat /etc/resolv.conf nameserver 127.0.0.1 # resolvd: unwind lookup file bind ``` I may not understa

Re: any BFD user ?

2021-12-06 Thread Gregory Edigarov
On Mon, 6 Dec 2021 12:15:40 +0100 Denis Fondras wrote: > The subject says it all. > > Is there any active BFD (Bidirectionnal Forwarding Detection) user ? > > Denis I think it will get more use if will be enabled in GENERIC kernels. Tested, and found it working.

Re: Raspberry Pi 4B performance compared to APU / wireless networking?

2021-12-06 Thread Mark Kettenis
> The APU itself doesn't have wlan so that depends on what card you use > of course. bwfm(4) does work well though the antenna is a resonant cavity > etched on the PCB and there's no way to move it outside of the case. > If you want to run a high performance AP you'll still want a separate > device

Re: Running redmine on OpenBSD

2021-12-06 Thread Werner Boninsegna
Hi, I have Redmine running in OpenBSD with HTTP and HTTPS using all default configurations. 1) Running puma in localhost at port 3000 2) Using relayd to forward requests to port 3000 redminedomain="redmine.myserver" redmineport="3000" httpsredirect="8080" table { 127.0.0.1 } http protocol re

Re: Unwind does not seem to query forwarders it is pointed to

2021-12-06 Thread Florian Obser
On 2021-12-06 13:49 +03, Maksim Rodin wrote: > Hello > I have the following unwind.conf: > ``` > cat /etc/unwind.conf > fwd1=192.168.1.150 > fwd2=192.168.1.1 > forwarder { $fwd1 $fwd2 } > preference forwarder > ``` > and an automatically generated resolv.conf: > ``` > cat /etc/resolv.conf > namese

Re: Memory protection and the push instruction (amd64)

2021-12-06 Thread Theo de Raadt
Otto Moerbeek wrote: > On Mon, Dec 06, 2021 at 05:59:41AM +, slembcke wrote: > > > So this is a fairly esoteric question, and I expect the answer might > > be just as esoteric. > > > > I have a little toy fiber/stackless coroutine library that I made a > > few years ago and have been using

Re: Running redmine on OpenBSD

2021-12-06 Thread Michael Hekeler
> (...) > I run the redmine app as a normal user so puma can't read the > /etc/ssl/private/redmine.MY.DOMAIN.COM.key (default perm 400). Does your environment require keys in /etc/ssl/private? maybe some corporate policies or such... If not you can simply configure acme-client(1) to place cert an

Re: Memory protection and the push instruction (amd64)

2021-12-06 Thread Theo de Raadt
Theo de Raadt wrote: > Upon every system call entry, both the PC and SP are range-checked > against the object they point to, vaguely providing an addition kind of > MMU flag bit. This check hinders a variety of ROP pivot methods. I want to add one more comment. I believe the benefit described

Re: Missing action list in lesskey man page

2021-12-06 Thread Ingo Schwarze
Hi Jason and Richard, Jason McIntyre wrote on Sat, Dec 04, 2021 at 09:18:56PM +: > On Sat, Dec 04, 2021 at 07:11:01PM +0100, Richard Ulmer wrote: >> jmc@ wrote: >>> the actions do indeed match those in the command list. whether there are >>> any undocumented ones, i don;t know. i suppose you'

Re: Missing action list in lesskey man page

2021-12-06 Thread Theo de Raadt
Ingo Schwarze wrote: > >> I'd much prefer to have > >> the actions explained in the lesskey(1) man page. > > No way. Copying half of the less(1) manual to the lesskey(1) manual > would result in a maintenance nightmare. I agree. This is not the first time one has to read two related pages to