sshd(8) should also log which account is trying a revoked key (was Re: sshd - also log account trying a revoked key)

]: Connection closed by authenticating user foo 198.51.100.95 port 55634 [preauth] So I would propose consideration of something approximately like the changes below. /Lars Index: usr.bin/ssh//auth.c === RCS file: /cvs/src/usr.bin/ssh/auth.c

Re: NTPd server using DVB-T as clocksource

a socket from ntpd. > > Chris > -- Lars Schotte Mudroňova 13 92101 Piešťany pgpJARncYPx91.pgp Description: OpenPGP digital signature

NTPd server using DVB-T as clocksource

where it puts the current date in and NTPd reads it from there. So I suppose one would need to open up some kind of socket and sending there DVB-T timestamps. No idea. What do you ppl say? -- Lars Schotte Mudroňova 13 92101 Piešťany pgpMC7om6Iihg.pgp Description: OpenPGP digital signature

sshd - also log account trying a revoked key

for cargo-culted code) /Lars Index: usr.bin/ssh//auth.c === RCS file: /cvs/src/usr.bin/ssh/auth.c,v retrieving revision 1.133 diff -u -p -u -r1.133 auth.c --- usr.bin/ssh//auth.c 12 Sep 2018 01:19:12 - 1.133 +++ usr.bin/ssh

Extraneous carriage return in usr.bin/ssh/log.c

I would propose removing what appears to be an unnecessary carriage return that interferes with debugging output. /Lars Index: src/usr.bin/ssh/log.c === RCS file: /cvs/src/usr.bin/ssh/log.c,v retrieving revision 1.50 diff -u -p -u

Re: manpage text width

ded as ideal." quoted from "The Line Length Misconception" https://www.viget.com/articles/the-line-length-misconception/ /Lars

Re: sshd(8) logging of client disconnect from ClientAliveInterval

timeout, check to see how many we have had */ > if (packet_inc_alive_timeouts() > options.client_alive_count_max) { > - logit("Timeout, client not responding."); > + sshpkt_fmt_connection_id(ssh, remote_id, sizeof(remote_id)); > + logit("Timeout, client not responding from %s", remote_id); > cleanup_exit(255); > } > > Yes, thanks. That provides the log information I am looking for when a client times out. /Lars

Re: sshd(8) logging of client disconnect from ClientAliveInterval

Here is a replacement patch. /Lars Index: serverloop.c === RCS file: /cvs/src/usr.bin/ssh/serverloop.c,v retrieving revision 1.198 diff -u -p -u -r1.198 serverloop.c --- serverloop.c12 Sep 2017 06:35:32 - 1.198

Re: sshd(8) logging of client disconnect from ClientAliveInterval

On 10/17/17, Darren Tucker wrote: [snip] > probably better to use fmt_connection_id() instead of hand-rolling the > format. Ok. I have added fmt_connection_id() to serverloop.c from packet.c /Lars Index: src/usr.bin/ssh/server

sshd(8) logging of client disconnect from ClientAliveInterval

: Oct 16 21:18:56 eee sshd[94170]: Timeout, client not responding. It would be very useful to have the connection information back again. Here is a cargo-culted modification that approximates the old style. /Lars Index: src/usr.bin/ssh/serverloop.c

SyslogFacility in ssh_config(5) could imply logging via syslog(3)

SyslogFacility is only useful in conjuction with the -y option. If setting SyslogFacility implies -y for ssh(1) then the whole thing can be set from ssh_config(5), keeping all the adjustments in one place. The following illustrates what I am trying to describe. /Lars Index: src/usr.bin/ssh/ssh.c

ExposeAuthInfo in sshd_config.5

I would propose the following change, or something similar, to sshd_config.5 It is then more clear which options are accepted and how the directive is used. /Lars Index: src/usr.bin/ssh/sshd_config.5 === RCS file: /cvs/src/usr.bin

sshd_config(5) : mention CIDR addressing for AllowUsers and DenyUsers

It looks like sshd(8) has permitted for a while both AllowUsers and DenyUsers in sshd_config(5) to use addresses in CIDR address/masklen format. If so, it would be useful to mention in the manual page. /Lars Index: sshd_config.5

Re: LibreSSL: GOST ciphers implementation

bvious that you have an agenda here (copyrighted by Theo :-)) I wish you luck writing your own OS as in 5 years you don't trust any other code besides your own (your words). *kopfschüttel* Lars

Re: restoring keyboard layout after suspend or hibernate

ging the keyboard loses the encoding still. [snip] > Is this the behaviour you would like to get? [snip] Yes, that is the descripion of pretty much what I was looking for in this context of use. I'll also look at hotplugd as was suggested. Regards, /Lars

Re: perlre(1) and substitution evaluations

On 11/30/2013 01:52 PM, Marc Espie wrote: > For this kind of thing, you're much better off talking to upstream > as this is totally openbsd-independent. Ok. Thanks. /Lars

perlre(1) and substitution evaluations

4th ed, pp 186, 254-255. Could something like the following be added? Regards, /Lars ? pod2htmd.tmp Index: perlre.pod === RCS file: /cvs/src/gnu/usr.bin/perl/pod/perlre.pod,v retrieving revision 1.16 diff -u -p -u -p -r1.16 perlr

Re: upstream vendors and why they can be really harmful

out it. For me that is a reason to have a look on alternatives. But in linux-land it is becoming difficult. For my personal taste there are only Crux, Slackware and Gentoo left. Lars

Re: upstream vendors and why they can be really harmful

- for people probably not that knowledgable as you and coming from outside it might leave a different impression. Again, I am just saying... ;-) Lars

Re: upstream vendors and why they can be really harmful

On Tue, Nov 6, 2012 at 5:10 PM, Peter Hessler wrote: > On 2012 Nov 06 (Tue) at 16:45:17 +0100 (+0100), Lars von den Driesch wrote: > > This is exactly what happened in Linux-land, and brought us to this > place in the first point. I know :-) And I understand this - but in this

Re: upstream vendors and why they can be really harmful

nt people to gain traction you will need to reduce some standards... just my 2 ct Lars

sshd_config RevokedKeys ?

The sshd_config directive 'RevokeKeys' is like 'AuthorizedKeysFile' in that both point to files. Index: servconf.c === RCS file: /cvs/src/usr.bin/ssh/servconf.c,v retrieving revision 1.208 diff -u -p -r1.208 servconf.c --- servconf.

pagsh.1

I guess at two cross references, expansion of PAG, and expansion of the -c argument. Index: pagsh.1 === RCS file: /cvs/src/kerberosV/src/appl/afsutil/pagsh.1,v retrieving revision 1.1.1.1 diff -u -p -r1.1.1.1 pagsh.1 --- pagsh.1

undefined values in pkg_add

Undefined values crash pkg_add. e.g. pkg_add -z tidy Index: usr.sbin/pkg_add/OpenBSD/PackageRepositoryList.pm === RCS file: /cvs/src/usr.sbin/pkg_add/OpenBSD/PackageRepositoryList.pm,v retrieving revision 1.21 diff -u -p -r1.21 Pac

Re: suggested patch to httpd.conf in base

e material published, don't go to the effort of publishing it. /Lars [1] pubB7lish (pubb2lisL8h), transitive verb "1. to make publicly known; announce, proclaim, divulge, or promulgate ..." http://www.yourdictionary.com/publish [2] "Robots and t

Re: su.1

> On 2010/03/08 22:05, Lars Nooden wrote: >> That the option '-' is depreciated in favor of '-l' could be >> emphasized more. On 2010-3-8 11:44 PM, Stuart Henderson wrote: > it's 'deprecate', not 'depreciate', they have different mean

su.1

That the option '-' is depreciated in favor of '-l' could be emphasized more. Index: su.1 === RCS file: /cvs/src/usr.bin/su/su.1,v retrieving revision 1.24 diff -u -p -r1.24 su.1 --- su.131 May 2007 19:20:17 - 1.24

Add rEFIt bootloader to FAQ4

rEFIt can be used with OpenBSD, especially when dual booting OS X, or when triple booting OS X and Linux. Index: faq4.html === RCS file: /cvs/www/faq/faq4.html,v retrieving revision 1.294 diff -u -p -r1.294 faq4.html --- faq4.html

httpd mime.types OpenDocument Format

Adding the IANA mime types for the OpenDocument Format, with file name extensions. The previous diff was missing the extensiosn. For references regarding this open standard, see a) ISO/IEC 26300, The OpenDocument Format b) 'Appendix C: MIME Types and File Names (Non-normative)' from the OASIS

mime types

Index: conf/mime.types === This adds the OpenDocument Format's MIME types to the web server's list. The full list is at http://www.iana.org/assignments/media-types/ /Lars RCS file: /cvs/src/usr.sbin/httpd/conf/mi

/etc/weekly

e. Using at to schedule the maintenance could help -- at jobs get run later if the machine was off. But a method, not quite provided here, is needed to keep all the backlogged jobs from running the minute the machine is turned on again. /Lars

Re: games/fortune/strfile/strfile.8

Ingo Schwarze wrote: > Note that strfile(8) is not installed by default, neither the utility > nor the manual. It's only used by the build process. Noted. Thanks. I missed a second change. /Lars Index: strfile.8 =

games/fortune/strfile/strfile.8

The output made by strfile currently gets the suffix '.dat' by default. /Lars Index: strfile.8 === RCS file: /cvs/src/games/fortune/strfile/strfile.8,v retrieving revision 1.13 diff -u -p -u -p -r1.13 strfile.8 --- strf

Re: ddb.log in sysctl.conf

a subset of those available. I'll leave subsequent tries to those that won't be guessing... /Lars Index: sysctl.conf === RCS file: /cvs/src/etc/sysctl.conf,v retrieving revision 1.47 diff -u -p -r1.47 sysctl.conf --- sysctl

Re: ddb.log in sysctl.conf

Federico G. Schwindt wrote: > On Thu, Jan 14, 2010 at 06:43:58PM +0200, Lars Nooden wrote: >> ddb.log was missing from sysctl.conf >> Here is a guess at a description and a value. > > not all the options are in sysctl.conf, i would say only the most > popular ones (i

ddb.log in sysctl.conf

ddb.log was missing from sysctl.conf Here is a guess at a description and a value. /Lars Index: sysctl.conf === RCS file: /cvs/src/etc/sysctl.conf,v retrieving revision 1.47 diff -u -p -r1.47 sysctl.conf --- sysctl.conf 9 Jun 2009

maximum segment size in pf.conf.5

The acronym MSS can be expanded in the manual page for pf.conf for improved clarity. /Lars Index: pf.conf.5 === RCS file: /cvs/src/share/man/man5/pf.conf.5,v retrieving revision 1.443 diff -u -p -r1.443 pf.conf.5 --- pf.conf.5

Random Early Detection vs Random Early Drop

pf.conf(5) refers to 'Random Early Detection' sshd_config(5) refers to 'Random Early Drop' Should the same wording be used in both man pages? /Lars cvs diff -Nup sshd_config.5 Index: sshd_config.5 === RCS fi

Re: s{cp|sh|ftp} -l -u

Stuart Henderson wrote: > On 2009/11/30 12:35, Lars Nooden wrote: >> ssh has used -l for a long time to desginate username. > > oh, there's a lot more history than that. it's a mostly drop-in > replacement for rsh, which also uses -l. Yes, so changing that woul

s{cp|sh|ftp} -l -u

the changeover. /Lars

BPF in dhcpd.8, dhclient.8

The idea here is to clarify how dhcpd and dhclient's use of BPF affects the packet filter as per Claudio's explanation: http://marc.info/?l=openbsd-misc&m=125907553011821&w=2 Those setting up dhcpd for the first (or subsequent) time(s) might need the explicit ex

Re: phrase 'log rotation' in newsyslog.8

was using that as the search term via apropos in my hunt for newsyslog.conf(8) Due to the simplicity of apropos the words to index the man page on must be in the title whether trim, rotate or both at the same time. I propose the new title because that is the word I was searching for. /Lars

Re: phrase 'log rotation' in newsyslog.8

Thanks. The change can be smaller then. /Lars On Mon, 23 Nov 2009, Stuart Henderson wrote: ...apropos(1) only searches titles ... $ cvs diff -uNp newsyslog.8 Index: newsyslog.8 === RCS file: /cvs/src/usr.bin/newsyslog

phrase 'log rotation' in newsyslog.8

on', 'rotate log', or 'rotate logs' are used. /Lars Index: newsyslog.8 === RCS file: /cvs/src/usr.bin/newsyslog/newsyslog.8,v retrieving revision 1.44 diff -u -p -r1.44 newsyslog.8 --- newsyslog.8 31 May 20

Re: sftp -l user host

Damien Miller wrote: > On Tue, 17 Nov 2009, lars wrote: > >> Adding the -l argument to assign user name on sftp is done on ssh and makes >> the two more similar to use. The diff below is an illustraion of what might >> be done. > > No, -l is reserved for bandwidth

Re: sftp -l user host

ody of the code, but missing from the options and case statement. /Lars Index: sftp.c === RCS file: /cvs/src/usr.bin/ssh/sftp.c,v retrieving revision 1.111 diff -u -p -r1.111 sftp.c --- sftp.c 18 Aug 2009 18:36:21 - 1

Re: sftp -l user host

Hint: run $ cvs diff -uNp [file ...] Thanks. Here's a second try. /Lars cvs diff -uNp sftp.c Index: sftp.c === RCS file: /cvs/src/usr.bin/ssh/sftp.c,v retrieving revision 1.111 diff -u -p -r1.111 sftp.c --- sftp.c 1

Re: sftp -l user host

Here's the corresponding man page change to go with the proposal. Line 1770 of sftp.c already looked for the -l argument. /Lars # diff sftp.1 sftp.1.old 41d40 < .Op Fl l Ar login_name 161,164d159 < .It Fl l Ar login_name < Specifies the user to log in as on the remote machine.

sftp -l user host

Adding the -l argument to assign user name on sftp is done on ssh and makes the two more similar to use. The diff below is an illustraion of what might be done. /Lars diff sftp.c sftp.c.old 1665c1665 < "1246hqrvCc:D:i:o:s:S:b:B:F:P:R:l:&

Re: Ogg media types in Apache

Federico G. Schwindt wrote: > On Thu, Aug 20, 2009 at 02:48:52PM +0300, Lars Nood??n wrote: >> Below is a diff to add the Ogg media types described in RFC 5334 to >> -current's Apache's mime-types >> >> http://tools.ietf.org/html/rfc5334#section-10 > &

Ogg media types in Apache

Below is a diff to add the Ogg media types described in RFC 5334 to -current's Apache's mime-types http://tools.ietf.org/html/rfc5334#section-10 Regards, -Lars # diff /var/www/conf/mime.types /var/www/conf/mime.types.orig 56c56 < application/ogg ogx --- >

auxilliary video

; Exec exec xrandr | grep -q "VGA connected (" && xrandr --output VGA --auto || xrandr --output VGA --off -Lars