From: "Ara.T.Howard" <ahoward@...>
Date: 2004-04-15T23:54:12+09:00
Subject: Re: File locking, portably?

On Thu, 15 Apr 2004, Hugh Sasse Staff Elec Eng wrote:

> On Thu, 15 Apr 2004, John Platte wrote:
> 
> > On 2004 Apr 15, at 1:49, Ara.T.Howard wrote:
> >
> > >> something like drb...
> > >
> > > that's a good idea... i've thought of it myself, but our sysads are
> > > nazis
> > > about opening any ports...
> >
> > SSH tunneling?
> 
> This is getting somewhat less portable..... :-)

for me it's o.k. - we are all linux.  see my other thread about pty/expect and
you'll see where i'm headed there ;-)  something like:

  * nfs mounted home dir for all processing node's user

  * systems starts and generates a random passhprase
  * feeds passphrase into ssh-keygen/ssh-agent/ssh-add
  * copies id_rsa.pub to authorized_keys (remember nfs home dir)
  * now all nodes can tunnel drb through ssh

why generate the passphrase?  because these machine routinues go down/come up
in the middle of the night and ssh-add would hang, waiting for a passphrase so
i could either

  a) embed the passphrase in the source
  b) randomly generate on startup so it is know only to the program

i realize this is terrible but what else can i do when you won't open up ports
and can't see to keep lockd running?

-a
-- 
===============================================================================
| EMAIL   :: Ara [dot] T [dot] Howard [at] noaa [dot] gov
| PHONE   :: 303.497.6469
| ADDRESS :: E/GC2 325 Broadway, Boulder, CO 80305-3328
| URL     :: http://www.ngdc.noaa.gov/stp/
| TRY     :: for l in ruby perl;do $l -e "print \"\x3a\x2d\x29\x0a\"";done 
===============================================================================