Currently Being Moderated

auto_gateway

Posted by Jack Coates on Mar 6, 2009 7:39:54 PM

Alright, I'm sick of visual basic. Expect a compiled Perl auto_gateway.exe to do this right in the near future...

 

Ping the core.

If you see it

     put remote control into direct mode

     set the "on ipaddress change inventory scan rule" in localscheduler to use miniscan.exe

else

     put remote control into gateway mode

     set the "on ipaddress change inventory scan rule" in localscheduler to use ldiscn32.exe

     send an inventory scan since miniscan just failed or is about to fail

 

That is all.

2256863196_f619492bf1.jpg



Mar 10, 2009 9:14 AM Jack Coates Jack Coates    says:

Wrote the code last night, still untested. "It compiles, let's ship!" Well, no... I'll see how it acts on my own systems for a while, then post it. Here's some tidbits:

  • ZMan pointed out that in his network (and many others, I'm sure), network services like ICMP and DNS are questionable. So I made two command line options -- use /ping to make it ping the core, use /file to make it use UNC to access a small file (ldlogon/ldiscn.vroot) from the core. You can't use both together, and you can't specify the file, and you can't use HTTP... if any of those are a problem, sing out.
  • I set up an in-memory change semaphore... If I had to make changes, that's a good indication that inventory needs to be refreshed at the core. If we're coming from direct to gateway, miniscan won't work and a regular scan should be sent. If we're coming from gateway to direct, a miniscan would work, but a a regular scan will probably initiate the out-of-sync process (which I might as well start now). Why am I assuming that inventory scans from gateway devices are out of sync? Because I'm assuming at least some amount of "open the lid for 1 or 2 minutes and then re-suspend the laptop" activity. So, if there was a change, I'm going to initiate a regular inventory scan.
  • Logging is non-existent unless you use the /debug flag... this script could potentially run often, and is intended to be transparent and fast. Again, sing out if that's an issue.
Mar 12, 2009 9:42 AM rhyous rhyous    says in response to Jack Coates:

To bad you had to create this.  We need this in our Gateway agents by default starting last year.

 

Thanks!

Mar 12, 2009 9:53 AM rhyous rhyous    says in response to rhyous:

By the way, do you have an installer that you can run on the Core Server and have it automatically add the Mergeini registry key, a .ini file.

 

Joe Nunes (on my support team) created an installer with NSIS that can does something like this, I will have him send you the sample NSIS file.  I think you use NSIS for your installers, right?

 

By using Mergeini your stuff won't get deleted on upgrades or service packs and will automatically be there.

Mar 12, 2009 10:48 AM Jack Coates Jack Coates    says in response to rhyous:

I don't do advanced editing of agents, I think it's bad practice to have hidden stuff. IMHO, this should be deployed as a policy to machines with laptop chassis types. But if Joe wants to post an installer, that's fine -- he just needs to create an account on droppedpackets and he can add it to the host folder.

Mar 13, 2009 1:20 PM Jack Coates Jack Coates    says:

It's tested and working on several systems, so I'm opening the doors and calling it released. http://www.droppedpackets.org/management-gateway-and-remote-control/ldms_auto_gateway

 

Installation is through a custom vulnerability at this time, as that's the easiest way to inject and/or modify a local scheduler task. The program checks at run time that the agent it's on is configured to use a gateway and exits if there's no certificate.

Mar 25, 2009 7:26 PM Jack Coates Jack Coates    says in response to Jack Coates:

Just posted version 1.0.4 with some nice changes. Among other things, it's a smaller binary. http://www.droppedpackets.org/management-gateway-and-remote-control/ldms_auto_gateway

LANDesk Community powered by Jive Software's Clearspace ® Subscribe| Legal Notices| Investor Relations| Avocent| Privacy Policy © 2009 LANDesk Software