Thanks for the tip


From: "Rudner, Björn" <brudner@baulogis.com>
Sent: Tuesday, October 31, 2006 3:30 AM
To: devil-linux-discuss@lists.sourceforge.net
Subject: Re: [Devil-Linux-discuss] More on heartbeat


Hello,
I'm also using heartbeat and there is a solution to work around the generation (replay attack) problem.

I have inserted this comman to the ha.cf:
hbgenmethod time

Then the generation is not "counting up" but a timestamp is used.
Since I also had some problems with false time from the hardware (old system, dead battery) I also changed the init.script to require the xntpd daemon to be startet before heartbeat is startet. Never since had any problems with false generation.


Mit freundlichen Grüssen / Kind Regards

Björn Rudner

____________________________________________
Björn Rudner
Systemadministrator

baulogis GmbH
Zamdorfer Strasse 100
81677 München

Telefon +49 (89) 930 839-16
Telefax +49 1805 456 987-200 16
Mobil +49 151 12 16 23 71
E-Mail brudner@baulogis.com
http://www.baulogis.com/

-----Ursprüngliche Nachricht-----
Von: devil-linux-discuss-bounces@lists.sourceforge.net [mailto:devil-linux-discuss-bounces@lists.sourceforge.net] Im Auftrag von cdmiller
Gesendet: Montag, 30. Oktober 2006 22:01
An: gsilber@isyoursolution.com; devil-linux-discuss@lists.sourceforge.net
Betreff: Re: [Devil-Linux-discuss] More on heartbeat

Greg Silber wrote:
> More on the continuing saga of me and heartbeat. So far I have
> downloaded the latest testing version to get the repositioned ping,
> submitted a patch to link ip from the iproute2 program into /sbin and
> everything is cool. One more thing that is causing a problem is the
> order of initialization of the scripts in the rc. directories. If you
> are not using dhcp, then heartbeat and snort try to load prior to the
> network loading (and fail). I fixed this on my config floppies so I
> don't need a rebuild myself, but I thought I would put it out there in
> case you want to patch this. Anyway, I now know way too much about
> heartbeat, devil, etc. so send questions if you got em.
>
> -Greg Silber

Hi Greg,

We use Heartbeat here on our current Devil setup (1.2.9). Have you done anything to get around the /var/lib/heartbeat/hb_generation file getting destroyed between reboots?

Thanks,

- cameron

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Devil-linux-discuss mailing list
Devil-linux-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

____________________________________________________________________________

Der Inhalt dieser E-Mail ist vertraulich und ausschließlich für den bezeichneten Adressaten (devil-linux-discuss@lists.sourceforge.net) bestimmt.
Wenn Sie nicht der vorgesehene Adressat dieser E-Mail oder dessen Vertreter sein sollten,
so beachten Sie bitte, dass jede Form der Kenntnisnahme, Veröffentlichung,
Vervielfältigung oder Wiedergabe des Inhalts dieser E-Mail unzulässig ist.
Bitte setzen Sie sich in diesem Fall mit dem Absender der E-Mail in Verbindung (brudner@baulogis.com).


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Devil-linux-discuss mailing list
Devil-linux-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss