[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: multiple isakmpd's.



> How about just having your crontab job start by checking if 
> PID `cat /var/run/isakmpd.pid` still exists? Simple enough.
> 
> I don't recall the rationale behind isakmpd 'hanging around' (especially
> since there does not currently seem to be a way to "reinitialize" those
> parts... although a SIGHUP will, for example, reread the configuration
> file), but I'll see what I can find.

I have gotten lots of replies about this.
I just want to clarify a bit.

I don't want to parse "ps" output, since sometime in the
really really remote future, one might want to have two
isakmpd's running with different configs running on 
different ports. I also don't want to monitor a pid-file,
since it might not be removed if it segv's, right?

As of now, both ps-watching and pid-file checks would work for
me, yes, and I can build scripts to do just that (thanks to all
who volunteered ;-) but I was wondering if this was the desired
behaviour at all, for isakmpd. And no, I can't reliably crash
it, it just sometimes isn't there after I haven't used it for
some 5+ days.

BTW, I have had more luck with the 30-day eval of PGPnet
(6.5.4 I think?) than the commercial version 7 when doing
insecure-net-behind-secure-gateway. Anyone else tried v7 ?

-- 
Allt är under kontroll, och Caps lock är bredvid. 





Visit your host, monkey.org