topic Re: identd in Operating System - HP-UX

identd

Petra Sandberg — Tue, 30 Nov 2004 07:24:34 GMT

Hi, I've got clients that sends syslog messages to a server via logger, in my syslog.log I've got the message syslog: identd: remote owner request failed.

Now to my question is't possible that this message in syslog can cause time delay on the sent logger message from the client to server server?

Regards Petra

Re: identd

Stf — Tue, 30 Nov 2004 07:32:40 GMT

Hello Petra,

you're suggestion on time delay is right, look at the patch PHNE_29473, I think it would resolve your problem.

http://www4.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.search|&patchid=PHNE_29473&context=hpux:800:11:00

Stf ;-)

Re: identd

Petra Sandberg — Tue, 30 Nov 2004 09:36:57 GMT

Is it also possible that identd is buffering syslog "logger" messages?
I've a check on a syslog.log "logger" message file so if messages arrived OK it's fine, but we've noticed a time difference in "touch" time and recived logger message time syslog.log file.

Petra :-)

Re: identd

Andrew Cowan — Wed, 01 Dec 2004 02:38:51 GMT

identd is described as an un-reliable service that it prone to denial of service attacks. Whilst it is possible to use it internally you should ensure that there are firewalls in place to prevent an accidental external exposure.

As for sending remote syslog messages there should be no delay other than the latency of your local network links. Are you sure that all the system clocks are in sync? I would suggest setting-up ntp.