On 03/01 05:18 , Khaled Hussain wrote:
> I really dont want to have to permit root login because if I do, then Ill
> have to do it for 10s of other servers - which doesn't make our network
> secure at all.

you set up a special user for backuppc to log in as (I use 'rsyncbakup',
myself); then set up your DSA key on the target machine to use the command=
option to describe what command  will be run (and only command which can be
run) when that user logs in.

The entry at the bottom of this page:
http://backuppc.sourceforge.net/faq/ssh.html
has a description of some of what I'm talking about (tho not the command=
option in the DSA key). I wrote a fairly detailed explanation of it, once
upon a time and posted it to the list, but I don't know where that might be
now. I'll see if I can find it and re-post it.

-- 
Carl Soderstrom
Systems Administrator
Real-Time Enterprises
www.real-time.com


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/

Reply via email to