[osiris] Re: Automatic acceptance of session keys?
Nels Lindquist
nlindq at maei.ca
Wed Jun 7 12:44:33 EDT 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Nels Lindquist wrote:
> Hi there.
>
> My apologies if this is covered in the documentation; the website is
> still down.
>
> I've noticed that when a monitored system regenerates a session key (due
> to a reboot, etc.) that subsequent scans fail until an explicit
> connection is made from the management console to that host ("host
> [hostname]" is sufficient).
>
> Is there no way to automate this process? I have "lost session key"
> notification turned on, so I always receive a "lost session key" e-mail
> prior to the "scan failed" e-mails.
>
> In an environment with many monitored hosts it would seem that having to
> manually re-connect every time a session key is lost (which can be
> pretty frequent for Windows hosts) is a stumbling block.
>
> Am I missing something? Thanks very much.
Just to add a little more info; the management console is 4.2.0 running
on Linux (CentOS 3, which is a RHEL 3 rebuild) and the scan agents are
4.2.0 running on Linux and Windows.
I receive the following notice from the scan failure:
> The scheduler produced the following error message:
>
> session key negotiation with remote host failed.
- ----
Nels Lindquist <*>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQB1AwUBRIcCbxP/WUEM2uY9AQKQQAMAm6VYFppNYC4Ednfy7nWtX5hBdTwdxrmF
AG9mIEQ9i5tiE9YCYRpvlq43r0JkJ3Wt8PoKFGp7P/CSlrKKBAnCZzBjxFusNUhJ
F1RPspgNyg/zt3T5qGN7XCzxNuwRn1sO
=B7sY
-----END PGP SIGNATURE-----
More information about the osiris
mailing list