[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[LDM #DUO-485818]: HIYA and ACCEPT

Brice,

I'm glad the non-listening server feature is useful to you.

To use the ACCEPT feature, the downstream LDM will need an ACCEPT entry in its 
configuration-file and the upstream site will need a program that sends 
unrequested data-products (like the ldmsend(1) program) to a specific host. 
(The rtstats(1) program also uses this feature, but can't send arbitrary 
data-products.)

The ldmsend(1) program has a manual-page ("man ldmsend").

Note that using the ldmsend(1) program with a corresponding ACCEPT entry to 
transmit data-products isn't as reliable as one LDM requesting data from 
another.

> Steve,
> 
> I was looking at the release notes for the current release and noticed two
> things, one of which might save us some additional headaches with security
> in some cases.
> 
> First, I noticed that the new release has a provision for running a second
> LDM instance without listening for external connections.  This will
> probably prove very useful at our installation because we have some data
> that is proprietary and we shouldn’t have it exposed to some of our
> external customers.  This provision will allow us to set up a private
> processing queue.  Thanks!
> 
> The second one involves the ldmd configuration for ACCEPT which I have
> always seen in the ldmd.conf file as just a ‘old’ thing we didn’t use.
> However, in some circumstances it would be ‘better’ security-wise for us to
> ‘push’ data to some external customers, as opposed to letting them in as
> clients, and, if I understand this correctly, the ACCEPT configuration
> might allow us to do that.  Can you point me to some additional
> documentation on how to make that work?  What I’ve seen so far indicates
> that the HIYA does part of it, but it’s unclear if an LDMSEND is used or
> what that would get that data to go to the ‘acceptor’ given that there
> would not be an active request to process.
> 
> Thanks, don’t want to take too much of your time (I *know* you’re busy),
> 
> Brice
> 
> Brice Biggerstaff, CISSP
> JSC Weather Decision Support System
> Software Engineering Support Lead
> 281-853-3011 (w)
> 713-764-2601 (p)
> address@hidden (alpha text pager)
> address@hidden
> 
> Res Confacti Erimus
> *‘We get things done.’*

Regards,
Steve Emmerson

Ticket Details
===================
Ticket ID: DUO-485818
Department: Support LDM
Priority: Normal
Status: Closed