Re: prelude-admin add command hangs indefinitely

Le vendredi 05 septembre 2008 à 15:13 -0400, [email protected] a
écrit :
> I'm setting up Prelude-IDS with Auditd on SuSE 10.2 s390x (linux guest 
> under z/VM) following the steps on the prelude site at 
> http://www.prelude-ids.com
> 
> During the step where I am Registering Auditd profile (per 
> instructions: 
> https://trac.prelude-ids.org/wiki/InstallingAgentThirdpartyAuditd ) the 
> system is hanging indefinitely.
> 
> I realize there's a warning stating "Generating 1024 bits RSA private 
> key... This might take a very long time." but this is taking a 
> gawd-awful long time. I left it for several hours and the progress bar 
> of "X"s didnt move at ALL.  Is that long enough, or am I being too 
> impatient?

[...]

> select(4, [3], NULL, NULL, {3, 0})      = 1 (in [3], left {2, 750000})
> read(3, "T\242o\372\7\336\'\301", 300)  = 8
> select(4, [3], NULL, NULL, {3, 0})      = 0 (Timeout)
> select(4, [3], NULL, NULL, {3, 0}
> last line repeats indefinitely.

This clearly demonstrate a lack of entropy, more advises on fixing this
Linux problem are available here: 

https://trac.prelude-ids.org/wiki/Misc/Entropy

Please let us know whether that help!


> In an attempt to find some way around the key generation step, I ran:
> 
> ssh-keygen -b 1024 -t rsa -f 
> /usr/local/etc/prelude/profile/prelude-manager/key
> 
> to mimic what prelude-admin seemed to be trying to do. That command 
> generated a key in less than a second:

[...]

> Is this adequate? or am I headed for trouble trying to get ssh-keygen 
> keys to work?

There should be no problem using an ssh-keygen generated RSA key for
Prelude agents communication.

The reason ssh-keygen is much faster is because it use /dev/urandom,
which is really fast but not as secure as /dev/random, which
GnuTLS/Gcrypt use.

I hope that in a near future, GnuTLS will provide an option to select
the random device, that would allow us to add a "--quick" option.

Hope it help,

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                  Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user