Open-AudIT
https://www.open-audit.org/phpBB3/

Dual boot overwriting same record?
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=6430
Page 1 of 1

Author:  el_geto [ Fri Apr 10, 2015 2:38 am ]
Post subject:  Dual boot overwriting same record?

Folks,

My understanding of unique device records is something along computer name + UUID, if both are same, then the device info gets updated, but if one of those are different, then a new record gets created. Am I right?

Well, I have a case of Macs with 10.8/Win7 under Bootcamp, both Hostname and UUID are different, yet, the same OA record keeps on getting overwritten.

I see the name_match option under config, but it does not seem to have any effect. I don't know what are the match rules anymore and can't seem to find it in the documentation.

Edit: I have OA 1.5.2 on Win2003 and 1.5.3 on *nix and is the same result.

Author:  jpa [ Fri Apr 10, 2015 3:49 am ]
Post subject:  Re: Dual boot overwriting same record?

Mark has been tweaking this a lot recently. The system matching stuff is quite large and complicated now. If you want the details see the find_system function in m_system.php.

It looks like in 1.6.2 we have: system_key, mac_address, man_ip_address, serial, man_serial, hostname (option dependent).

Dual boot changes the system_key but not the mac_address so Open Audit thinks they're the same machine based on MAC.

Author:  Mark [ Fri Apr 10, 2015 9:03 am ]
Post subject:  Re: Dual boot overwriting same record?

Exactly what JPA said :-)

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/