Choice of sis(4) versus vr(4) ?

2017-07-17 Thread Lars Noodén
I'm looking to refurbish an old device and will probably add a network card to it. Are there any reasons based on the current drivers or the hardware itself to choose sis(4) or vr(4) over one or the other on i386 -curren? Regards, Lars

Re: Choice of sis(4) versus vr(4) ?

2017-09-10 Thread Lars Noodén
On 7/18/17, Stuart Henderson wrote: > On 2017-07-17, Lars Noodén wrote: >> I'm looking to refurbish an old device and will probably add a network >> card to it. Are there any reasons based on the current drivers or the >> hardware itself to choose sis(4) or vr(4) over o

praxis for duplicating an existing function?

2017-10-17 Thread Lars Noodén
Is it acceptable style to copy a whole function over to one other file? I'm looking at the files in src/usr.bin/ssh/ and would like to re-use fmt_connection() in serverloop.c. It is used only in packet.c so far. Duplicating it in serverloop.c would mean that it then exists in two files. style(9)

Re: Viewport for man.openbsd.org -- readability on phones

2018-05-18 Thread Lars Noodén
1) For experimentation with CSS, many browsers have a web tool box that can be opened with ctrl-shift-i or similar shortcut and can change the CSS on-the-fly manually. That is a quick way test CSS rules such as the viewport [1] rule being discussed. This seems to be the CSS equivalent of the meta

Re: SSH extremely quickly dropped from T-Mobile phone hotspot

2018-09-15 Thread Lars Noodén
On 9/15/18, Dimitris Papastamos wrote: [snip] > Maybe worth lowering ServerAliveInterval in ssh_config and see if that > helps. ServerAliveInterval also needs to be set to non-zero because the default of zero is to not send the messages. Also in the event of a disconnection anyway, you can use w

Re: Include all Perl inside httpd chroot, use mtree and pull out unused for security

2018-09-20 Thread Lars Noodén
On 9/20/18, Chris Bennett wrote: > I started manually to include Perl files one at a time to learn how > things work at home on -current. Then I copied everything in. > But why risk security for unused Perl? httpd(8) supports fastcgi so you can run outside the chroot and communicate via a socket.

bsd.rd 6.6 for Octeon?

2020-02-11 Thread Lars Noodén
I've tried downloading bsd.rd for octeon for both 6.6 and snapshots. However, when I actually boot from it, I seem to get 6.5 instead of 6.6 for both the boot message and the sets it looks for over HTTP. The file verifies with signify using the SHA256.sig file using the 6.6 key. I've tried fe

sshd(8), sshd_config(5), and the LogLevel directive

2018-03-04 Thread Lars Noodén
I'm not able to get sshd(8) to use alternative loglevels, such as Debug3. When sshd(8) starts, it goes through the normal reporting regardless of which LogLevel is set in sshd_config(5). Here is an excerpt from /var/log/authlog showing the daemon starting and a first connection from outside: Ma

Re: sshd(8), sshd_config(5), and the LogLevel directive

2018-03-05 Thread Lars Noodén
On 2018-03-05, Stuart Henderson wrote: > On 2018-03-05, Lars Noodén wrote: >> I'm not able to get sshd(8) to use alternative loglevels, such as Debug3. >> >> When sshd(8) starts, it goes through the normal reporting regardless >> of which LogLevel is set in sshd

Re: blacklistd analogue

2021-03-25 Thread Lars Noodén
On 3/25/21 7:00 PM, Kapetanakis Giannis wrote: [snip]> I had plans on looking to bgp to distribute the IPs around but maybe > there is already a better way doing this. [snip] I read this one a while back: "Using OpenBGPD to distribute pf table updates to your servers" https://www.echothrust.com/b

Re: My home router, running OpenBSD 7.1, won't boot headlessly

2022-09-26 Thread Lars Noodén
On 9/26/22 00:21, Kastus Shchuka wrote: On Sun, Sep 25, 2022 at 08:12:51AM -0400, Z. Charles Dziura wrote: [snip] except for one glaring flaw: it won't boot up properly unless I have a monitor plugged into one of the display ports. Of course, this makes things a bit difficult to debug. [snip]

Squid3 in intercept mode

2013-06-19 Thread Lars Noodén
I'm running into some difficulty with "access denied" in squid3 when I switch it to act as an intercepting proxy. It works as normal when I use it as a regular proxy but when turning on intercepting (formerly transparent proxying) the web browser shows this error: ...Access Denied.

key precedence in ssh

2013-10-01 Thread Lars Noodén
Is there a way in ssh(1) to get the identity specified by -i to take precedence over what is already in the agent? When six keys are added into ssh-agent(1), authentication is not possible with a seventh, or later, key even if that final key is pointed to by ssh(1) explicitly using -i. $ ssh

sshd internal-sftp umask

2013-10-23 Thread Lars Noodén
This is on OpenSSH_6.3 from current. If I interpret the man page for sftp-server(8) correctly, the option -u should set an explicit umask. What looks like is happening instead is that the umask is OR'ed with an established value. How do I set or override that initial umask? What's happening

Capturing kernel debugger output without serial console

2008-12-17 Thread Lars Noodén
What is a reasonable way to capture kernel debugger (ddb) output without a serial console? I'm able to consistently get ifconfig to crash on the latest snapshots. -Lars

environmental prerequisites for kernel development (was Re: Any Dev interested in SIS Ethernet/SATA driver development?)

2008-12-27 Thread Lars Noodén
bofh wrote: > I think Marco's point was that if there are crashes, lockups, etc, it > is a pain in the ass not to have console access, or to be able to > unplug the power and reboot into a working config/kernel, etc etc. > ... Access to a second box, for control, which has both serial and Ethernet

Re: ftp from script

2008-12-31 Thread Lars Noodén
Ed Ahlsen-Girard wrote: > Anybody have an idea of what I'm missing? How is $PATH set? Do the scripts work if you include the full path? i.e. /usr/bin/ftp Regards, -Lars

bfd.h error while building a release

2008-12-31 Thread Lars Noodén
I've been running into an error while trying to build 4.4 from source in preparation for building a release. Both the installation and the source are plain-vanilla from the CD set. I've been following the steps in release(8) http://www.openbsd.org/cgi-bin/man.cgi?query=release and the FAQ

Re: laptop choice

2009-01-02 Thread Lars Noodén
shr @dslextreme.com wrote: > ... The only drawback is that it doesn't have a built-in serial port. ... What is a reasonable work-around or solution for capturing the debugging data that would otherwise be only available via serial console? Regards, -Lars

FTDI support?

2009-01-07 Thread Lars Noodén
OpenBSD seems to have excellent support for the Prolific chipset for USB to serial. What about the FTDI chipset? I see the uftdi(4) manpage. What reasons would there be to choose one chipset over the other, if it makes a difference? Regards, -Lars

Re: Create a bootable usb key?

2009-01-09 Thread Lars Noodén
Guillaume Thouvenin wrote: > Is it possible to run the installer from the openbsd that is > on my usb key? The way I did it was to boot /bsd.rd and then do an installation to the USB key but installing a single set, "bsd.rd", and only that set. Then after booting back to the regular system mounte

relayd (formerly hoststated) for monitoring services

2009-01-16 Thread Lars Noodén
The main focus of relayd now seems to be for load balancing. Can it / should it be used at all for monitoring services? Or should I turn to Nagios or the late great Spong instead? Regards, -Lars

Re: relayd (formerly hoststated) for monitoring services

2009-01-16 Thread Lars Noodén
Gregory Edigarov wrote: > Well, what's your needs? Initially very simple needs. I need to be able to prove/disprove rudimentary availability. Basically like a layer 7 ping, checking that the port is responding with the correct protocol: ssh is answering yes/no. imap is answering yes/no. i

Re: now OT Re: Virtualization, OpenBSD as host

2009-01-17 Thread Lars Noodén
Diana Eichert wrote: >... but I also have FreeBSD, NetBSD, Linux .. I looked at a lot of systems when planning some projects, and when it came down to NetBSD or OpenBSD, the deciding factor for me was pfsync. Can I ask what tasks or activities you have been using NetBSD for? regards, -Lars

rdr and authpf

2009-01-17 Thread Lars Noodén
I'd like to be able to authorize certain groups of users to be able to log in via ssh from A to B below, but upon/after successful authentication be redirected to ssh on C,D,or E so as to log in and work there. +--E | AB--+--C | +--D What part of authpf can do

SSH and ProxyCommand (was Re: rdr and authpf)

2009-01-18 Thread Lars Noodén
Juan Miscaro wrote: > 2009/1/17 Lars NoodC)n : [snip] >>+--E >>| >> AB--+--C >>| >>+--D [snip] > > This is standard SSH duty. > > Configure A to pass through B to get to E, C, D. Research the > 'ProxyCommand' setting. Thanks. There are not words for how trem

Re: SSH and ProxyCommand (was Re: rdr and authpf)

2009-01-18 Thread Lars Noodén
Lars NoodC)n wrote: >+--E >| > AB--+--C >| >+--D Ok. To record my own answer one solution, it was to use HostKeyAlias, to specify which host key to record. Host sound Protocol 2 HostKeyAlias 192.168.124.25 HostName 192.168

Re: SSH and ProxyCommand (was Re: rdr and authpf)

2009-01-23 Thread Lars Noodén
Lars Nooden wrote: > >> +--E > >> | > >> AB--+--C > >> | > >> +--D Juan Miscaro wrote: > Host B > HostName host-B > User user-B > IdentityFile key-B > > Host C > HostName host-C > User user-C > IdentityFile key-C > ProxyCommand ssh B nc %h %p Ye

OT: Re: If you don't understand how to do it properly...

2009-01-27 Thread Lars Noodén
bofh wrote: > http://www.theregister.co.uk/2009/01/27/blowfish_poisoning/ Actually, they knew what the deal was since only an unlicensed chef/restaurant would serve organ meat. Even nicking the organs can be trouble, especially since there is seasonal and individual variation in the strength. A

Assigning group or effective group to processes

2009-01-28 Thread Lars Noodén
I have a bunch of processes that I wish to kill, but which have the same name and owner as process I wish to leave running. ps, pgrep and pkill can select based on a process' gid or egid. How can gid or egid be set when starting a process from shell? Regards, -Lars

Re: Assigning group or effective group to processes

2009-01-29 Thread Lars Noodén
Philip Guenther wrote: > On Wed, Jan 28, 2009 at 2:44 AM, Lars Noodin >> How can gid or egid be set when starting a process from shell? > > The command you're looking for is 'newgrp'...which OpenBSD doesn't > currently have. sudo is probably the most direct workaround for now. Ok. Thanks, I wa

Re: Survey on the usage of IPv6

2009-01-30 Thread Lars Noodén
Registration is a barrier. What do you want to know? -Lars

Re: Backup strategies

2009-01-31 Thread Lars Noodén
Predrag Punosevac wrote: > ...It is of paramount importance for me that my files are in sync on all > 5 computers... Can you give more info about the nature of files you wish to keep in sync? System configuration, text processing, databases, executables, etc? Are the files all text i.e. xml / s

Re: ssh VisualHostKey

2009-02-04 Thread Lars Noodén
Peter N. M. Hansteen wrote: > ...One practical example - if you're used to seeing > > Host key fingerprint is 67:88:39:bd:7f:3c:df:a5:47:87:de:bd:9b:5e:7b:55 > > and one morning when you've had way too little coffee you may not > notice anything different if the machine greets you with I'd

Re: Segfault under MS Virtual Server 2005 R2 SP1 Enterprise Edition

2009-02-07 Thread Lars Noodén
Based on what I've seen from other peoples ongoing attempts at using virtualization from the company you mentioned, it's not going to lead to anything of practical value. Instead, try Qemu or kqemu or virtualbox. These are designed to function and will at least give you a fighting chance of runni

Re: Segfault under MS Virtual Server 2005 R2 SP1 Enterprise Edition

2009-02-07 Thread Lars Noodén
Alexey Suslikov wrote: > larsnoo...@openoffice.org wrote: > >> Based on what I've seen from other peoples ongoing attempts at using >> virtualization from the company you mentioned, it's not going to lead to >> anything of practical value. > > What exactly wrong with Microsoft's (oh, gosh, I said

Re: Segfault under MS Virtual Server 2005 R2 SP1 Enterprise Edition

2009-02-07 Thread Lars Noodén
Steve Shockley wrote: > Come on, if you're going to attack someone, at least have some facts. Check for yourself: The licensing information is not readily available on the VMware site. Take 2 minutes and check. Regarding the nature of VMware, take 2 minutes and use a search engine: http://www.th

Re: Nvidia bug

2009-02-15 Thread Lars Noodén
Matthieu Herrb wrote: > Multi-card multi-head setups are indeed broken in the X server since > it switched to libpciaccess. There is some work going on to try to fix > it, but without success so far. > > Complaining on X.Org lists (x...@lists.freedesktop.org, or > bugzilla.freedesktop.org/Xorg pro

Re: A trojan road map for GNOME and KDE?

2009-02-19 Thread Lars Noodén
KammyDoe wrote: > Shagbag OpenBSD wrote: >> Did anyone else read the article >> http://www.geekzone.co.nz/foobar/6229#compact ? It's a trojan not a virus. Designing the filesystem layout with W^X in mind should mitigate or stop the trojan. >> P.S. have I posted this in the right list (I'm still

Re: A virus road map for GNOME and KDE?

2009-02-19 Thread Lars Noodén
KammyDoe wrote: > You've already said what needs to be said, don't save-and-open email > attachments... Actually there are a lot of milters that can remove all the attachments for you automatically. Complex ones like procmail can even autorespond to dipshits who are dumb enough or rude enough to

Re: A virus road map for GNOME and KDE?

2009-02-19 Thread Lars Noodén
Pau wrote: > I agree that e-mail should be to exclusively used to write plain text, > full stop. Nobody sends VHS cassettes or DVDs "attached" to post > letters. But I would be making a lot of people upset by calling them > dumb automatically any time I get > 1MB file e-mail file from them... Whic

Re: A virus road map for GNOME and KDE?

2009-02-20 Thread Lars Noodén
Navan Carson wrote: > ... The best way to accomplish what you seem to want, is to deny the > message during the SMTP dialog. That way you don't create another > tool for the Spammers. Of course that's best, but it also presumes a competent mail administrator. Rare as hen's teeth these days, comp

Re: A virus road map for GNOME and KDE?

2009-02-20 Thread Lars Noodén
(private) HKS wrote: > Block spam at the dialog level if possible. If it gets through, either > dump it to /dev/null or report it to Spamcop and then dump it to > /dev/null. Which is fine for spam. For mail from real accounts that have owners stupid enough to send a binary attachment, there are

Re: .zip files

2009-02-20 Thread Lars Noodén
Peter Fraser wrote: > I need to examine the contents of a ... .zip file. > I was slightly surprised that compress could not read them. You shouldn't have been. Compress files usually have .Z at the end of the name. What were your results with unzip? http://www.openbsd.org/4.4_packages/i386/unzi

Re: A virus road map for GNOME and KDE?

2009-02-21 Thread Lars Noodén
Paul de Weerd wrote: > ... ((SMTP != NFS) && (HTTP == NFS)) ? This: ( SMTP != ( NFS || AFS || SMB || DAVFS ) ) > E-mail may not be an acceptable surrogate for a networked filesystem, > but you sure can easily transfer files with it. It's a kludge that has started to become permanent as people s

Re: A virus road map for GNOME and KDE?

2009-02-21 Thread Lars Noodén
Matthias Kilian wrote: > To add to this: there were times when no internet existed, and yet > people did exchange files via ... FTP, UUCP, and Usenet (albeit inefficiently) In early 1995, WWW traffic passed ftp-data in regards to both packet count and byte count. I suppose sometime soon, if we

Re: user-friendliness and netbsd

2009-02-23 Thread Lars Noodén
Dave Wilson wrote: > ... I find OpenBSD remarkably user-friendly. Almost everything I want > is already in base, most things are set up with intelligent and safe > defaults... +1 Also, there is *really* good documentation. Concise at times, but not deficient. -Lars

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Lars Noodén
David Vasek wrote: > What would be firewire good for? Data transfer such as for full backups or cloning or audio/video. Haven't tested it yet on OpenBSD, I still have USB-only / ethernet-base storage for those systems. Subjectively, I find FW to be much faster than USB2 on my hardware using OS X

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Lars Noodén
David Vasek wrote: > 1) Firewire controller in your machine is a realiable path to have it > cracked/crashed at any time (on most of the platforms). Sources please, regarding cracking. As far as stability goes, I find the USB connections somewhat unreliable. > 2) Firewire is not supported on Ope

Re: Inexpensive, low power, "wall wart" computer

2009-02-25 Thread Lars Noodén
Rod Whitworth wrote: > And you are aware of how insecure firewire is, I hope? Yeah, somewhat. > With physical access admittedly Pretty much anything is possible with physical access and some time. > ... but it does DMA transfers without talking to the OS etc. It appears that could be turned

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Lars Noodén
Falk Brockerhoff - smartTERRA GmbH wrote: > But I don't know how to get all the information about pf, states, etc. It's probably simplest to start with pftop. Or do you want visualization? http://www.openbsd.org/4.4_packages/i386/pfstat-2.3p0.tgz-long.html Regards -Lars

energy data in ksh prompts

2009-03-07 Thread Lars Noodén
Here are two variations of the standard ksh shell prompt that I myself find useful on several of my devices, in particular the portables. The first prompt shows the temperature on cpu0, the second the amount of battery claimed to remain: export PS1='`( /sbin/sysctl hw.sensors.cpu0.temp0 |

Re: energy data in ksh prompts

2009-03-07 Thread Lars Noodén
Denis Doroshenko wrote: > er, there is a \D{format} for that, see ksh(1) Yes, there's a lot there. date(1) was just the first, short way of testing that the output changes, much nicer than tail -n 1 /var/something... > backslashed special char for sensors, like \S{name} would be neat > thing, t

"device not configured" in SSH chroot

2009-03-09 Thread Lars Noodén
I've set up a chroot account using ssh's ChrootDirectory[1] keyword on OpenBSD 4.4 on a Soekris (i386) net4801. It works nicely, except that I get some device errors in the chroot, but not the regular accounts. Upon connecting with SSH with the chrooted account, there is an error about tty:

Resolved - Re: "device not configured" in SSH chroot

2009-03-09 Thread Lars Noodén
Moving the chroot to a new CF with a different partitioning scheme meant that it ended up on one mounted 'nodev', changing the mount options fixed the problem. -Lars

rack mounted intro server lab

2009-03-09 Thread Lars Noodén
I've run an intial pilot of a Soekris net4801 with OpenBSD 4.4, using gpioctl to turn on and off other machines and netboot them for console installs. The notes below are a mess and there just to record until they can be arranged to make sense: http://www-personal.umich.edu/~lars/DES/des.

Re: openbsd - microsoft vpn interoperability

2009-03-11 Thread Lars Noodén
Juan Miscaro wrote: > ... I'm here asking for comments > on what people are actually doing and hopefully with pros and cons > included. So which solution? OpenVPN or native IPSEC (isakmpd)? ... MS products are not really designed for interoperability, rather the opposite. So you may wish to re

Re: openbsd - microsoft vpn interoperability

2009-03-11 Thread Lars Noodén
Juan Miscaro wrote: > Thanks. Yeah, I am going to push to have an OpenBSD portal installed > on the remote end. Thing is, how am I going to get it installed? http://openvpn.net/index.php/downloads.html http://openvpn.net/howto.html#startup http://www.openbsd.org/4.4_packages/i386/openvpn-2.1rc7

Re: openbsd - microsoft vpn interoperability

2009-03-12 Thread Lars Noodén
Are you connecting two LANs over a distance or connecting clients to a LAN? --Lars

Re: openbsd in virtualization

2009-03-18 Thread Lars Noodén
sonjaya wrote: > So obsd become guest OS ? I've used it nicely in qemu, but now run it only natively. I also know people who use Virtualbox, but that seems to be a bit trickier. Regards -Lars

Re: might be slightly OT: `probability in PF'

2009-03-21 Thread Lars Noodén
Henning Brauer wrote: > * jmc [2009-03-11 15:05]: >> so anyway, how are _you_ using probability? > > it's high on my list of useless features in pf I'd rather remove. > if anybody is actually using it, I'd like to hear about it. PF is one of the main factors for me to use OpenBSD, but since I do

Re: SOEKRIS - How to install MTR to a Flashdist image

2009-03-21 Thread Lars Noodén
Frothingdog.ca wrote: > I have the image mounted to /mnt/... If you are running the same version, then one way is to chroot to the new image: chroot /mnt /bin/ksh then install the packages you wish. +Lars

Re: European orders

2009-03-27 Thread Lars Noodén
I've purchased hardware from Wim multiple times over the last two or three years and found him to be fast, reliable and helpful in every order. In each, he's provided far superior service than any other vendors I've dealt with in the last decade, though some of those have been good, too. Regardin

Re: European orders

2009-03-27 Thread Lars Noodén
Theo de Raadt wrote: > As for USB sticks, sorry, but there isn't much room on a USB stick for > a 8-cartoon plot with fish as characters. Yes, I've been thinking about that, too. It's one of the perks of owning the CDs and the install notes are good for starters. If we turn around how we look at

Re: Dual-head OpenBSD 4.5 and NVIDIA GeForce 7300 GT

2009-03-27 Thread Lars Noodén
Neal Hogan wrote: > ... I'm still practicing moving around in such an environment, but it works > and, > given this is my first dual head set-up/configuration, it was quite > painless. If anyone goes further and sets up multi-seat, it would be interesting to read about. Regards -Lars

Re: OpenBSD mta with postfix

2009-03-28 Thread Lars Noodén
(private) HKS wrote: > Why sacrifice usability for no additional security? I run into it a lot. My guess is that it's to distract from the "IT" team having selected software which doesn't work reliably. So if they make enough extra problems, no one will take the time to get to the real cause: MS

Re: European orders

2009-03-31 Thread Lars Noodén
Theo de Raadt wrote: > Any distributor can buy them in >=20CDs at a 40% discount. Some > larger distributors got a bit more of a discount, but typically > not much. And there the debugging process can start. In North America there seems to be a fortunate constellation of services and practices

Re: European orders

2009-04-01 Thread Lars Noodén
ropers wrote: > Read up on IBAN/BIC payments and/or on SEPA payments. >... Been there, done that. At the bank(s) I have right now, things go well -- for now. I've seen all kinds of crap in the past so I'm not sure how many more years must pass before I consider such transactions reliable, though

Re: Donations (was, sadly, European orders)

2009-04-02 Thread Lars Noodén
Theo de Raadt wrote: > When you buy a CD from the Computer shop, 100% ends up in the Computer > Shop accounts. Which is an option likely to make most everyone all around happy, but maybe not so practical for outside of North America. Setting up a branch inside the Euro zone might be worth conside

Unresponsive httpd(8) on armv7

2017-01-26 Thread Lars Noodén
As far as I can tell httpd(8) on armv7 is running but unresponsive since applying yesterday's snapshot. The access logs show it was responding normally up to applying the snapshot. Since the snapshot, httpd does not respond on any of its listening ports, even with pf deactivated. httpd is set to

OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
Looking at a recent snapshot, see dmesg at the bottom, I have two questions about OpenSSH logging. 1) The entry in sshd_config(5) for MaxAuthTries states the following about log entries: ... Once the number of failures reaches half this value, additional failures are lo

Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
>> 2) The client gets disconnected before MaxAuthTries is reached. If I >> have it set to 6, I get 5 only tries: > > Your log level isn't high enough to see it, but I suspect you have a > failed pubkey attempt before the password attempts. You should be > able to see it if you add "-vvv" to the c

Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
Sorry. That previous message got mangled. > $ ssh-add -l > The agent has no identities. On the server it looks like it says the client is asking for 'keyboard-interactive' first of all things: > debug1: userauth-request for user fred service ssh-connection method > none [preauth] > debug1: atte

Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
On 3/20/17, Darren Tucker : > On Sun, Mar 19, 2017 at 11:47 PM, Lars Noodén wrote: >> Looking at a recent snapshot, see dmesg at the bottom, I have two >> questions about OpenSSH logging. >> >> 1) The entry in sshd_config(5) for MaxAuthTries states the fol

Re: SSH public key auth vs OTP auth

2013-03-05 Thread Lars Noodén
On 03/05/2013 10:29 PM, Peter Bisroev wrote: [snip] > 100% agree. Having unencrypted private keys was one of the reasons > that I have started looking into OTP/TOTP. At this point, I think it > is probably better to force "untrusted" users (those who cannot be > trusted to keep their private keys e

GPIO for P8 Expansion Header on Beaglebone Black

2016-08-10 Thread Lars Noodén
I've been walking through the GPIO pins for expansion header P8 on a Beaglebone Black, checking actual pin output with the hardware [1] [2] information. Pins 3 through 46 on P8 are listed in the hardware information as available for GPIO. Indeed, I can set any of them but I notice that on pins 25

urtw0 no network on yeeloong

2014-11-02 Thread Lars Noodén
I've not been able to establish a wireless connection lately on urtw0 on a yeeloong. ifconfig keeps showing a status of 'no network' on urtw0 both for the local wireless network here and another wifi network I've tried that used to work. The indicator light for the wireless device is on and 'ifc

Re: Fanless amd64 sytem recommendations

2022-07-21 Thread Lars Noodén
On 7/11/22 12:25, Denis Fondras wrote: [snip] I use Protectli devices : https://eu.protectli.com/ Are all the network interfaces available? What was the installation process like and where there any special obstacles to be aware of? /Lars

ssh tunnel tun device forwarding without root

2009-04-11 Thread Lars Noodén
The -w option for ssh creates a tun device on the local and remote systems, but seems to require remote root login as well as local root. What way is there to use sudo on both the local and the remote machine instead? Or some other work around to avoid granting root, at least on the remote machin

Re: ssh tunnel tun device forwarding without root

2009-04-11 Thread Lars Noodén
Lars NoodC)n wrote: > What way is there to use sudo on both the local and the remote machine > instead? ... Ok. (so that this goes in the archives) One work-around is to change the group for the relevant tun device on the remote machine. Then give the group rw privileges to the device. e.g.

Re: ssh tunnel tun device forwarding without root

2009-04-12 Thread Lars Noodén
Alexander Hall wrote: > Lars NoodC)n wrote: >> $ ls -l /dev/tun? >> crw--- 1 root wheel40, 0 Apr 11 14:50 /dev/tun0 >> crw-rw 1 root dialer 40, 1 Apr 11 20:23 /dev/tun1 > > I've been wondering about this too. Although I have not tested this yet... It works to

grub2 chainloading openbsd

2009-04-13 Thread Lars Noodén
I see that the configuration for grub2 is now a convoluted nightmare of shell scripts. While I'm a fan of shellscripting, I'm more a fan of K.I.S.S. and the new grub2 is preventing direct manipulation configuration by overwritting the grub.cfg file. I am now looking for any ready-made scripts

Re: Security considerations for login with an SSH host key

2009-04-14 Thread Lars Noodén
> I'm currently setting up a remote backup solution > based on rdiff-backup. Basically, each computer > to be backed up regularly connects to the centralized > backup server, and sends the modifications. This is > done in a crontab. Are you also using sshd_config's ForceCommand and a specific cu

Re: Fosdem 2008

2007-10-20 Thread Lars Noodén
nicodache wrote: > Website is up, date are announced. Excellent. There appear to be some flyers ready as well: http://www.fosdem.org/2008/support/promote > The Free and Opensource Sofware Developer's European Meeting will, as > usual, take place at the Universiti Libre de Bruxelles, Camp

Re: Fosdem 2008

2007-10-20 Thread Lars Noodén
Lars NoodC)n wrote: ... > Excellent. There appear to be some flyers ready as well: > http://www.fosdem.org/2008/support/promote Except that my eyes must have crossed when posting. The fliers linked to on the 2008 page are one promoting the 2007 conference. -Lars

Re: About Xen: maybe a reiterative question but ..

2007-10-23 Thread Lars Noodén
Per-Erik Persson wrote: > ... not being able to run inside a > virtualized environment is not an option in the future. Virtualization is available already. See the package qemu. http://www.openbsd.org/4.1_packages/ Or are you aiming for Xen specifically? Keep in mind that the most signi

Re: About Xen: maybe a reiterative question but ..

2007-10-23 Thread Lars Noodén
Per-Erik Persson wrote: > To get the best performance out of qemu you need to run linux. I'm no expert in virtualization, but may I ask if you are remembering to use kqemu ? There is also virtual box. http://www.virtualbox.org/ It may or may not run on an OpenBSD host, but does run OpenBS

Non-x86 (was: About Xen: maybe a reiterative question but ..)

2007-10-23 Thread Lars Noodén
Theo de Raadt wrote: > x86 virtualization is about basically placing another nearly full > kernel, full of new bugs, on top of a nasty x86 architecture which > barely has correct page protection. He probably meant psychological security, or job security. > ... Then running your operating > syste

Wake on LAN, tcpdump weirdness with two ethernet interfaces

2007-10-24 Thread Lars Noodén
I'm noticing some strangeness in conjunction with WOL(*), which seems not to be working and am not sure where the problem lies(**). The machine launching the packets has two interfaces, re0 and em0, with the receiving machine connected to re0. The machine does not wake up either using port 9 or p

Re: About Xen: maybe a reiterative question but ..

2007-10-24 Thread Lars Noodén
Kevin Stam wrote: > ... failed to satisfactorily explain why running a specific application > in a VM is more secure then running it in a standard OS. It's nonsense that > you think it's more secure that way. It saves a lot of money, yes -- you > don't necessarily want a separate box just to run an

Re: About Xen: maybe a reiterative question but ..

2007-10-25 Thread Lars Noodén
Richard Toohey wrote: > My analogies usually go to custard, but I'll try this one. >.. > 1. One car per ambassador. ... With all four cars loaded onto a single car-carrier truck. -Lars

Re: Wake on LAN, tcpdump weirdness with two ethernet interfaces

2007-10-25 Thread Lars Noodén
Stijn wrote: > What I would do to test this: > > -Connect another box with crossover cable to re0. > -Run tcpdump on both systems (as root) > -(optional: Play with fixed speed/duplex settings) > -Launch a wol and see if it reaches the other system (you do specify the > network to send it to?) Yep

Re: Wake on LAN, tcpdump weirdness with two ethernet interfaces

2007-10-25 Thread Lars Noodén
Maxim Bourmistrov wrote: > > Some odd chipset, like SiS900 (sis0), do not wake up until your computer > is in hibernated mode. > This can be read from linux-driver. > > FYI: > I have been playing with experimental WOL-patches for freebsd (partially > ported them to openbsd) for 3COM-cards. > Thos

Re: max number of groups

2007-10-25 Thread Lars Noodén
If your are just concerned about files, then (IIRC) OpenAFS can give you more groups (prob. 20) and if you use PTS then more can be worked out. However, that would be directory level access and not for individual files. -Lars

Re: Non-x86

2007-10-26 Thread Lars Noodén
ropers wrote: > On 24/10/2007, Lars NoodC)n <[EMAIL PROTECTED]> wrote: >> Seriously, what (affordable) non-x86 hardware options are available, >> especially those without AMT or AMT-like backdoors? >> >> http://softwarecommunity.intel.com/articles/eng/1148.htm >> http://www.intel.co

Re: Non-x86

2007-10-26 Thread Lars Noodén
Ted Unangst wrote: > On 10/26/07, Lars NoodC)n <[EMAIL PROTECTED]> wrote: >> In the specific context of CALEA, the AMT wikipedia page as of Fri Oct >> 26 07:45:59 GMT 2007, does not contain any references to CALEA, but do >> contain the links I provided above. The CALEA page points to links >> eas

Re: max number of groups

2007-10-27 Thread Lars Noodén
Douglas A. Tutty wrote: > There has to be _some_ solution but it doesn't have to revolve around > groups. Surely we don't need a separate box for every 16 projects ... Again, are these groups only affecting files? Then you may look into other file systems, such as OpenAFS. In OpenAFS you can us

Re: What is the "nice" process state?

2007-10-27 Thread Lars Noodén
Karel Kulhavy wrote: > ... > What is the "nice" state? I know what userspace, system, interrupt handler > and idle task is, but nice? ... It's an adjustment to scheduling priority: http://www.openbsd.org/cgi-bin/man.cgi?query=nice You can use nice to give a process a higher or lower prio

Re: Non-x86

2007-10-29 Thread Lars Noodén
Martin SchrC6der wrote: > 2007/10/26, Lars Noodin <[EMAIL PROTECTED]>: >> Where are the choices for non-x86? > > The only remaining alternative is Sparc. Everything else is either old > (macppc) or expensive & unsupported (IA64). It's too bad that Apple discontinued their PPC. It was an acceptab

Re: Remembering Jun-ichiro Hagino

2007-11-01 Thread Lars Noodén
ropers wrote: > Id didn't know him personally, but I do know that he was a man of many > talents: > People here remember him as a fellow OpenBSD developer. However, > possibly his most lasting legacy will be his tireless work (for over > ten years) on IPv6. Same here. I've been following IPv6 fo

  1   2   3   4   >