Openbsd

Solve unbound error about root.key

       103 words, 1 minutes

I wrote about running unbound and nsd on OpenBSD 5.6 here . The other day, the VM that runs those went to DDB. On reboot, I got the following error message : unbound: [16897:0] error: ldns error while converting string to RR at15: Syntax error, could not parse the RR's type: spamd: \\[priv\\] unbound: [16897:0] error: failed to load trust anchor from /db/root.key at line 1, skipping unbound: [16897:0] error: failed to read /db/root.key unbound: [16897:0] error: error reading auto-trust-anchor-file: /var/unbound/db/root.key This means “root.key” went broken. To rebuild it, simple run those:

Continue reading...


OpenSMTPD and Dovecot on OpenBSD 5.7

       768 words, 4 minutes

Those are my notes about configuring OpenSMTPD 5.4.4 and Dovecot 2.2.15 on OpenBSD 5.7. I’ve setup virtual domains and users. In this simple configuration, the virtual users are matched with local users for mail delivery. SMTP submission is authenticated and passwords for all mail services are stored in usual system files. Of course, mail reception is protected by spamd. Here are the directions.

Continue reading...


From Bind to nsd and unbound on OpenBSD 5.6

       652 words, 4 minutes

I’ve been using Bind as a primary, slave or cache name server for all my IT life. But it seems Bind is being kicked out of OpenBSD. So far so good, I’m gonna use what’s provided by my favorite OS to do the job. Here’s how to use nsd and unbound daemons to serve as an internal authoritative DNS nameserver and DNS resolver. Both will be running on the same machine.

Continue reading...


YAQR, iRedMail 0.8.1 on OpenBSD 5.1

       1354 words, 7 minutes

There was a “The ultimate OpenBSD email server” thread on misc@ those days. After “Mailserv”, another response was “iRedMail”. Still interested in the subject, here’s Yet Another Quick Review of the iRedMail 0.8.1 on OpenBSD 5.1. Quoting its website : iRedMail is a ZERO COST, full-featured, Open Source Email Server Solution released under GPLv2. Woaw… You saw that great fireworks and garland lights… Just kidding. Now, let’s see what you get.

Continue reading...


Monitoring OpenBSD’s LDAP daemon

       979 words, 5 minutes

OpenBSD ships with an LDAP daemon since 4.8. I have an all-in-one server from which the LDAP service has to be shipped out. I’m going to replace that OpenLDAP daemon with the LDAP daemon from OpenBSD 5.1. I already wrote about how to enable LDAP on OpenBSD 4.8 . Those will be updated notes for OpenBSD 5.1 and additional directions to allow monitoring the LDAP activity using SNMP and Xymon server.

Continue reading...


24 / 34