Am 04.01.2011 19:13, schrieb Kristoffer Moegle:
>
> Another idea would be something like a "use fallbacks on invalid
> configuration and get me running" mode which is disabled by default
> but could be enabled by the end user.
I heavily vote against this! On the programming side, this will lead to
ugly code. But even worse: on the usage side this will lead to
unpredictable behaviour and untraceable errors. This is a horror for
every system administrator.

Regarding "getting the system running again fast": Clear error messages
are the best way for this. Because one sees what went wrong. If the
system makes assumptions, this may lead to wrong interpretation,
inherited errors, more interpretation and chaos. This may destruct
(monitoring) data and lead to wrong alerts.

A small leak will sink a great ship.

-- 
Schönen Gruß - Regards
Hartmut Goebel
Dipl.-Informatiker (univ.), CISSP, CSSLP

Goebel Consult 
Spezialist für IT-Sicherheit in komplexen Umgebungen
http://www.goebel-consult.de

Monatliche Kolumne: http://www.cissp-gefluester.de/
Goebel Consult mit Mitglied bei http://www.7-it.de

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Shinken-devel mailing list
Shinken-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Reply via email to