[Csync2] Re: csync2 & ssl problems

[Clifford Wolf]

Hi,

On Fri, Nov 25, 2005 at 03:45:51PM +0100, Lenaerts Jan wrote:
> While syncing file %homevar%/jan/lkzae:
> ERROR from peer node0: Identification failed!
> Finished with 5 errors.
> node2:~# ping node0
> PING localhost.localdomain (127.0.0.1) 56(84) bytes of data.
> 64 bytes from localhost.localdomain (127.0.0.1): icmp_seq=1 ttl=64
                                       ^^^^^^^^^

this doesn't look right. If node0 really has the 127.0.0.1 IP you won't
need csync2 to keep node2 and node0 in sync..  ;-)

all jokes aside: when host 'foo' connects to host 'bar' it needs to
authenticate and indentify itself. Identification is working the following
way: Host 'foo' is telling host 'bar' that its local hostname is 'foo'.
Then host 'bar' is looking up 'foo' using gethostbyname() (i.e. using the
/etc/hosts file and DNS in the usual configurations). 'bar' then compares
the ip address it got for the name 'foo' with the IP address the connection
is from. If the IP address differs, 'bar' assumes that the peer is lying
about its identity and rejects the connection with the "Identification
failed" error message.

Since the DNS name for 'node0' resolves to the localhost ip address on your
'node2', it is clear why it doesn't working. This looks like you have some
bigger problems with your name resolving configuration. The fact that
csync2 is not working is pretty sure not the only symptom of this
misconfiguration.

yours,
 - clifford

-- 
bash -c "gcc -o mysdldemo -Wall -O2 -lSDL -lm -pthread -x c <( echo -e '
#include <SDL/SDL.h>\n#include <complex.h>\nint main(){SDL_Surface*s;SDL_Event
e;int x,y,n;SDL_Init(SDL_INIT_VIDEO);s=SDL_SetVideoMode(640,480,32,0);for(x=0;
x<640;x++)for(y=0;y<480;y++){float _Complex z=0, c=((x-400)/200.0) + ((y-240)/
200.0)*1.0fi;for(n=1;n<64;n++){z=z*z+c;if(cabsf(z)>2){((Uint32*)s->pixels)[x+y
*640]=n<<3;n=99;}}}SDL_UpdateRect(s,0,0,s->w,s->h);do SDL_WaitEvent(&e); while
(e.type!=SDL_QUIT&&e.type!=SDL_KEYDOWN);SDL_Quit();return 0;}' ); ./mysdldemo"
 
[..] If it still doesn't work, re-write it in assembler. This won't fix the
bug, but it will make sure no one else finds it and makes you look bad.