[Csync2] csync -k

Clifford Wolf clifford at clifford.at
Mon Dec 12 12:31:04 CET 2005


Hi,

On Fri, Dec 09, 2005 at 09:49:55AM -0800, Discussion Lists wrote:
> Wanted to find out what I am doing wrong.  When I type "csync -k
> keyfile" it just hangs forever.  Any ideas on how to resolve this?

type some stuff on the keybord or otherwise fill the kernel entropy pool.

The device file /dev/random (which is used by 'csync -k') provides 'real'
random nomber (using pseudo random numbers would be dangerous for security
relevant applications such as generating pre shared secrets).

If no new random numbers are available, /dev/random block until there are
new numbers in the kernel entropy pool. It is a well known problem that
e.g. on diskless boxes the kernel entropy pool tends to get empty and so
block stuff such as 'csync2 -k'.

One solution would be to replace /dev/random with a symlink to /dev/urandom
on such machines. But this should only be considered if security is not an
issue...

yours,
 - clifford

-- 
 ____   ___   ____ _  __  _     _ www.rocklinux.org
|  _ \ / _ \ / ___| |/ / | |   (_)_ __  _   ___  __
| |_) | | | | |   | ' /  | |   | | '_ \| | | \ \/ /
|  _ <| |_| | |___| . \  | |___| | | | | |_| |>  <
|_| \_\\___/ \____|_|\_\ |_____|_|_| |_|\__,_/_/\_\
 
Dihydrogen Monoxide (DHMO) Kills: http://www.dhmo.org/
 


More information about the Csync2 mailing list