-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Debian etch, VERSION="Amanda-2.5.1p1"
One of the two clients on the DMZ has stopped responding to the server
on the LAN -- both amcheck and amdump.
diff says .amandahosts is identical on the 2 DMZ machines, and stat
shows amcheck causing the file's access time to change on the working
host, but not on the other;
user backup (.deb install) can read .amandahosts;
tcpdump shows udp:10080 packets from the server getting to both of them
and responses from the working host but not the other;
amcheck says "log.slsware.dmz: selfcheck request failed: timeout waiting
for ACK";
the backup reports say the results from that machine are missing.
The line in inetd is "amanda dgram udp wait backup /usr/sbin/tcpd
/usr/lib/amanda/amandad" (the same on both hosts). I think inetd is
working because it runs TFTP, and both the router and the PIX can write
their configs to the net. (I don't know how to fire off a UDP server by
remote control, but the access time of /usr/lib/amanda/amandad changes
when I run amcheck).
Other services on that machine work (DNS, TFTP, syslog, SSH, NTP, etc.).
Nagios says all is well there (it doesn't check amandad).
The PIX is between the LAN and the DMZ, but there's nothing in the PIX'
log about blocking anything having to do with this. The ACL says the
server can access anything, and allowing any host on the LAN to access
anything makes no difference.
The iptables packet filter shows nothing blocked, besides, disabling it
makes no difference.
selfcheck, sendsize, and sendbackup files stopped appearing in
/var/log/amanda/client/sls/ directory on the dead machine.
And I've reinstalled the client software.
Somebody please point out the obvious thing I'm overlooking -- this has
been making me crazy for 3 days now...
- --
Glenn English
ghe AT slsware DOT com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGuPSa04yQfZbbTLYRAmLvAJwKpAqW5ux+NlCeOKjuh5DNTjnS3ACgtdsO
qs7+gWhNKhzeXOt14G+h1lg=
=BHQ4
-----END PGP SIGNATURE-----
|
