plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
We want to keep a backup or a mirror of your files in a server we don't fully trust. You can have an encrypted FS on a file, and copy the complete FS to the untrusted server, but it is inefficient, and you get no granularity at all. In our case, the remote server runs amanda, and we want to

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
Yet another thread on the matter http://groups.google.com/groups?hl=enlr=ie=UTF-8threadm=9q27k2%24rh%241%40FreeBSD.csie.NCTU.edu.twrnum=1prev=/groups%3Fq%3Drsync%2Bencrypt%26hl%3Den%26lr%3D%26ie%3DUTF-8%26selm%3D9q27k2%2524rh%25241%2540FreeBSD.csie.NCTU.edu.tw%26rnum%3D1 -- To unsubscribe or

Re: patch draft for extended attributes on linux

2003-06-26 Thread Carson Gaspar
--On Wednesday, June 25, 2003 10:01 PM -0700 jw schultz [EMAIL PROTECTED] wrote: I'd say that a security regimen that requires xattrs to tighten security is misguided. And you'd be wrong. Simple user/group security is not _nearly_ enough for all sorts of use cases. Simple use case: - Alice and

Re: patch draft for extended attributes on linux

2003-06-26 Thread jw schultz
On Thu, Jun 26, 2003 at 03:29:04AM -0400, Carson Gaspar wrote: --On Wednesday, June 25, 2003 10:01 PM -0700 jw schultz [EMAIL PROTECTED] wrote: I'd say that a security regimen that requires xattrs to tighten security is misguided. And you'd be wrong. Simple user/group security is not

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread addady
Hi, It seems that the --dest-filter patch of Kyle Jones can help you. Here is a link http://groups.google.com/groups?q=%22--dest-filter%22+group:mailing.unix.rsy nc+group:mailing.unix.rsynchl=enlr=ie=UTF-8group=mailing.unix.rsyncselm =b6f55s%24256q%241%40FreeBSD.csie.NCTU.edu.twrnum=1 Addady

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
[EMAIL PROTECTED] wrote: It seems that the --dest-filter patch of Kyle Jones can help you. Here is a link http://groups.google.com/groups?q=%22--dest-filter%22+group:mailing.unix.rsy nc+group:mailing.unix.rsynchl=enlr=ie=UTF-8group=mailing.unix.rsyncselm

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread addady
[EMAIL PROTECTED] wrote: It seems that the --dest-filter patch of Kyle Jones can help you. Here is a link http://groups.google.com/groups?q=%22--dest-filter%22+group:mailing.unix.rsy nc+group:mailing.unix.rsynchl=enlr=ie=UTF-8group=mailing.unix.rsyncselm

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
[EMAIL PROTECTED] wrote: The filter run on the client ! Are you sure? I just re-read the patch and it still seems to be at the server. Maybe I don't have the right idea of server/client in my head. Or I am just misreading the patch. How can I tell it's on the server? m -- To

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
jw schultz wrote: Stop thinking client and server. Once the session is initiated there is little difference. Think instead sender and receiver. Good advise. Have to rephrase myself, then ;) As I read the patch, it seems to be running an arbitrary command on the receiver. I am thinking of

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
I am thinking of running an arbitrary command on the server, when it is Of course, I meant s/server/sender/; m -- To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Re: patch draft for extended attributes on linux

2003-06-26 Thread Max Bowsher
Martin Pool wrote: On 25 Jun 2003, Wayne Davison [EMAIL PROTECTED] wrote: On Wed, Jun 25, 2003 at 10:34:38AM +1000, Martin Pool wrote: There is no mtime for xattrs, so they are transferred every time as part of the file list. One possibly better solution would be to create some kind of CRC

authentication

2003-06-26 Thread Julien VARLET
I have some problems while authentication. I created RSA keys and placed the public key on the remote host. With the user toto, I have the following command line : rsync --arvz --rsh=ssh Nouveaudossier [EMAIL PROTECTED]:/home/essai_ftp/test/ mailto:[EMAIL PROTECTED]:/home/essai_ftp/test/ but

Re: patch draft for extended attributes on linux

2003-06-26 Thread Hardy Merrill
Martin Pool [EMAIL PROTECTED] wrote: On 25 Jun 2003, Hardy Merrill [EMAIL PROTECTED] wrote: Martin Pool [EMAIL PROTECTED] wrote: Nevertheless i do think it worth having something in patches. Yes, if I can get this working I think the best place for it to end up is as an

Re: authentication

2003-06-26 Thread jw schultz
On Thu, Jun 26, 2003 at 03:03:46PM +0200, Julien VARLET wrote: I have some problems while authentication. I created RSA keys and placed the public key on the remote host. With the user toto, I have the following command line : rsync --arvz --rsh=ssh Nouveaudossier [EMAIL

Re: plain source - encrypted destination: rsync + gpg(--dest-filter patch)

2003-06-26 Thread addady
If i recall correctly (i've not gone back to review that patch) that patch required whole-file transfers two avoid doing the operation twice per file. If the filter is deterministic and particularly if changes have minimal cascade effect you may be able to still take advantage of the rsync

securisation

2003-06-26 Thread Julien VARLET
Is it possible to use a rsync server with ssl crypting ? -- To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Re: securisation

2003-06-26 Thread David Lambert
Look at stunnel :- www.stunnel.org Julien VARLET wrote: Is it possible to use a rsync server with ssl crypting ? -- To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Re: plain source - encrypted destination: rsync + gpg(--dest-filter patch)

2003-06-26 Thread jw schultz
On Thu, Jun 26, 2003 at 04:31:29PM +0200, [EMAIL PROTECTED] wrote: If i recall correctly (i've not gone back to review that patch) that patch required whole-file transfers two avoid s/two/to/ #ick doing the operation twice per file. If the filter is deterministic and particularly if

Re: plain source - encrypted destination: rsync +gpg(--dest-filter patch)

2003-06-26 Thread addady
If i recall correctly (i've not gone back to review that patch) that patch required whole-file transfers two avoid s/two/to/ #ick doing the operation twice per file. If the filter is deterministic and particularly if changes have minimal cascade effect you may be able to still

Re: plain source - encrypted destination: rsync +gpg(--dest-filter patch)

2003-06-26 Thread jw schultz
On Thu, Jun 26, 2003 at 05:45:55PM +0200, [EMAIL PROTECTED] wrote: [Lots of missing attribution maybe correctly reinserted] [please don't remove attributions of quoted content] jw wrote: [EMAIL PROTECTED] wrote: [snip] The idea of this patch seem to me very useful. I'm plan to use it with

Re: patch draft for extended attributes on linux

2003-06-26 Thread Carson Gaspar
--On Thursday, June 26, 2003 1:16 AM -0700 jw schultz [EMAIL PROTECTED] wrote: Impossible with simple user/group permissions. Not impossible. I've done that sort of thing many times. -rwxr-x---1 charlie cdab 3658 Jan 20 17:35 . -rw-rw-r--1 charlie david3658 Jan 20

Cygwin Rsync 2.5.6 over SSH hangs on Win2k-Win2k

2003-06-26 Thread Tillman, James
When using Cygwin Rsync 2.5.6/OpenSSH 3.6.1 for copying files from Win2k-Win2k, I get 2 or 3 hung processes on the receiving-side out of about every 50 runs. These hung processes cause the system to be unable to reboot(?!), requiring a hard reset. Killing the processes allows a graceful reboot

dealing with renamed files

2003-06-26 Thread Tom Goulet
Hello, If I rename a directory full of files, or a bunch of files, and I use Rsync to update the directory tree, Rsync will upload all these files again and delete the old ones. This is suboptimal since all the data is already there. Rsync should be able to check for renamed files by scanning

RE: Cygwin Rsync 2.5.6 over SSH hangs on Win2k-Win2k

2003-06-26 Thread Tillman, James
-Original Message- From: Tillman, James Sent: Thursday, June 26, 2003 12:18 PM To: '[EMAIL PROTECTED]' Subject: Cygwin Rsync 2.5.6 over SSH hangs on Win2k-Win2k When using Cygwin Rsync 2.5.6/OpenSSH 3.6.1 for copying files from Win2k-Win2k, I get 2 or 3 hung processes on the

Re: Request for option for use on an unreliable connection

2003-06-26 Thread David Lambert
jw schultz wrote: On Wed, Jun 25, 2003 at 01:28:32PM -0500, David Lambert wrote: I have been using rsync for the last year or so. Generally I am very pleased with the performance and features, but I am forced to use a rather unreliable link to one of my mirrors. Consequentially rsync often

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Kyle Jones
[EMAIL PROTECTED] writes: If i recall correctly (i've not gone back to review that patch) that patch required whole-file transfers two avoid doing the operation twice per file. If the filter is deterministic and particularly if changes have minimal cascade effect you may be able to

Using include/exclude options

2003-06-26 Thread Jason Williams
Hello everyone. I have a question about using the include/exclude function for rsync. What I am trying to do is backup specific directories and their corresponding data, while at the same time, excluding other directories. Specifically, I have a backup server with the follow setup:

Re: --exclude-from works but exclude from in rsyncd.conf doesn't ?

2003-06-26 Thread Wayne Davison
I'm finally getting back to finishing up the testing for my patch of the exclude from handling. The main thing I had on my list was checking that --delete-excluded worked right, prompted by your comments: On Sat, May 10, 2003 at 05:22:45PM -0700, jw schultz wrote: As your patch stands now

Re: plain source - encrypted destination: rsync + gpg

2003-06-26 Thread Martin Langhoff
Kyle Jones wrote: Right. I was willing to give up the checksumming for my application. It seems that you could code a --source-filter patch that would - compare the source and destination modtimes - if they differ, then apply the filter to the source file storing the output in a temp file.

Re: Using include/exclude options

2003-06-26 Thread Wayne Davison
On Thu, Jun 26, 2003 at 12:07:42PM -0700, Jason Williams wrote: rsync -avn --include-file=/home/rsyncfile /backupstorage/D/ /home/rsyncbak The most common failing is people not specifying the excludes relative to the root of the transfer (it's not relative to the root of the file system). Thus,

Re: Using include/exclude options

2003-06-26 Thread Max Bowsher
Jason Williams wrote: Hello everyone. I have a question about using the include/exclude function for rsync. What I am trying to do is backup specific directories and their corresponding data, while at the same time, excluding other directories. Specifically, I have a backup server with the

Re: --exclude-from works but exclude from in rsyncd.conf doesn't ?

2003-06-26 Thread jw schultz
On Thu, Jun 26, 2003 at 12:51:03PM -0700, Wayne Davison wrote: I'm finally getting back to finishing up the testing for my patch of the exclude from handling. The main thing I had on my list was checking that --delete-excluded worked right, prompted by your comments: [snip] Sounds good. I've

Re: Cygwin Rsync 2.5.6 over SSH hangs on Win2k-Win2k

2003-06-26 Thread cbarratt
When using Cygwin Rsync 2.5.6/OpenSSH 3.6.1 for copying files from Win2k-Win2k, I get 2 or 3 hung processes on the receiving-side out of about every 50 runs. These hung processes cause the system to be unable to reboot(?!), requiring a hard reset. Killing the processes allows a graceful

Re: patch draft for extended attributes on linux

2003-06-26 Thread jw schultz
On Thu, Jun 26, 2003 at 11:43:40AM -0400, Carson Gaspar wrote: --On Thursday, June 26, 2003 1:16 AM -0700 jw schultz [EMAIL PROTECTED] wrote: Impossible with simple user/group permissions. Not impossible. I've done that sort of thing many times. -rwxr-x---1 charlie cdab