X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: by onstor-exch02.onstor.net 
	id <01C894E0.3227DB70@onstor-exch02.onstor.net>; Wed, 2 Apr 2008 09:40:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-class: urn:content-classes:message
Subject: RE: FTI
Date: Wed, 2 Apr 2008 09:40:01 -0700
Message-ID: <BB375AF679D4A34E9CA8DFA650E2B04E0346B17D@onstor-exch02.onstor.net>
In-Reply-To: <BB375AF679D4A34E9CA8DFA650E2B04E09321AB7@onstor-exch02.onstor.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: FTI
Thread-Index: AciUTdpL1+wcVPnvSrGQIa0WsS9T4wAAA1IgAB/cM+AAAmagJQAAFlMgAAI0zLA=
From: "John Rogers" <john.rogers@onstor.com>
To: "John Keiffer" <john.keiffer@onstor.com>,
	"Chris Vandever" <chris.vandever@onstor.com>
Cc: "Andy Sharp" <andy.sharp@onstor.com>

Ok now that's a good catch. I;ve found that dhcpd was running on 10.2.02
and now its been disabled.

-----Original Message-----
From: John Keiffer=20
Sent: Wednesday, April 02, 2008 8:36 AM
To: John Rogers; Chris Vandever
Cc: Andy Sharp
Subject: RE: FTI


I just mentioned 10.2.0.2 because when the system boots up it recognizes
it.

But maybe the second line adds meaning...

DHCPOFFER from 10.2.0.2
DHCPOFFER isn't satisfactory.

-----Original Message-----
From: John Rogers=20
Sent: Wednesday, April 02, 2008 8:34 AM
To: John Keiffer; Chris Vandever
Cc: Andy Sharp
Subject: Re: FTI

Just to be clear ther is only one dhcp server.=20

-----Original Message-----
From: John Keiffer
To: Chris Vandever
CC: Andy Sharp; John Rogers
Sent: Wed Apr 02 07:32:37 2008
Subject: RE: FTI

I think I know what was happening yesterday and it is probably a lot
less nefarious than we thought. I believe that there are some entries on
possibly 2 different DHCP servers, and that these entries are being
picked up. That is likely the cause of getting default values in the FTI
menus etc. I have asked John R to send me a copy of the DHCP entries for
these systems from both 10.2.0.4 and 10.2.0.2 to see what's there, and I
suspect that this is were the info is coming from (including the host
keys?). I'll also ask him to turn them off, so I can try this again.
(heck, I'll just copy him on this email while I'm at it)

=20

I'll get back to you with an update.

=20

Here is the section at boot up that we may have just overlooked...

=20

starting network

writing to routing socket: File exists

duplicate IP address 0.0.0.0 sent from ethernet address
00:04:02:ec:05:90

duplicate IP address 0.0.0.0 sent from ethernet address
00:04:02:ec:04:7f

duplicate IP address 0.0.0.0 sent from ethernet address
00:07:34:01:08:00

Listening on BPF/sc1/00:07:34:01:b8:00/unattached

Sending on   BPF/sc1/00:07:34:01:b8:00/unattached

Sending on   Socket/fallback/fallback-net

DHCPDISCOVER on sc1 to 255.255.255.255 port 67 interval 21

DHCPOFFER from 10.2.0.4

DHCPOFFER from 10.2.0.2

DHCPOFFER isn't satisfactory.

DHCPREQUEST on sc1 to 255.255.255.255 port 67

DHCPACK from 10.2.0.4

New Network Number: 10.2.0.0

New Broadcast Address: 10.2.255.255

bound to 10.2.1.21 -- renewal in 172800 seconds.

ps: warning: /var/run/dev.db: No such file or directory

Listening on BPF/sc2/00:07:34:01:b8:01/unattached

Sending on   BPF/sc2/00:07:34:01:b8:01/unattached

Sending on   Socket/fallback/fallback-net

DHCPDISCOVER on sc2 to 255.255.255.255 port 67 interval 20

send_discover/send_packet: Network is down

DHCPDISCOVER on sc2 to 255.255.255.255 port 67 interval 1

send_discover/send_packet: Network is down

No DHCPOFFERS received.

No working leases in persistent database - sleeping.

=20

ps: warning: /var/run/dev.db: No such file or directory

starting system logger

starting rpc daemons: portmap ypserv ypbind.

sendto: Network is down

savecore: no core dump

building ps databases: kvm dev.

clearing /tmp

starting pre-securelevel daemons:.

setting kernel security level: kern.securelevel: 0 -> 1

ssh-keygen: generating new DSA host key... done.

ssh-keygen: generating new RSA host key... done.

ssh_keygen: generating new RSA1 host key...done.

=20

Thanks,

John

=20

________________________________

From: Chris Vandever=20
Sent: Tuesday, April 01, 2008 4:14 PM
To: John Keiffer
Cc: Andy Sharp
Subject: RE: FTI

=20

No, that's fine, John.  Thank you.  And, 6:45AM will be WELL before I
get in.  J

=20

ChrisV

=20

________________________________

From: John Keiffer=20
Sent: Tuesday, April 01, 2008 4:12 PM
To: Chris Vandever
Cc: Andy Sharp
Subject: FTI

=20

I have to leave to pick up my daughter from school. I will try and get
on tonight. Otherwise, I will have script files saved with the output
you need by the time you come in tomorrow morning (I'm usually here by
6:45pm).

=20

Please let me know if you need this info sooner.=20

=20

Thank you,

John Keiffer

=20

=20

