dan <[EMAIL PROTECTED]> writes: Hi
> i would really consider NOT addowing root login on ssh without a > password. HUGE security hole. instead, use a shared key so that you > can get no-password logins for machines you provide a key for. much > much safer! I guess that you lost the point here, the meaning of "without-password" in this case is not what you are thinking. >From sshd_config manual: ,---- | If this option is set to ``without-password'', password authenti- | cation is disabled for root. `---- The main idea is to provide root access through ssh only when the shared key method is in use. No interactive login for root. This is another way to prevent from brute force attacks. Rodrigo > > On Nov 14, 2007 5:13 AM, Rodrigo Real <[EMAIL PROTECTED]> wrote: >> >> Hello >> >> I've been using backuppc to backup several hosts in a lan. Most of >> them are backep up with rsync+ssh using root access. Now I am backing >> up a host which is also connected to the Internet, and which does not >> accept direct root access through ssh. >> >> I looked at some alternatives and ended up with changing sshd_config >> to PermitRootLogin directive to: >> >> PermitRootLogin without-password >> >> I think that this issue would be a good one for a Topic somewhere on >> the wiki, maybe inside de FAQ. >> >> I am sure that there are lots of different solutions on this topic. >> >> Best regards, >> Rodrigo >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/ >> _______________________________________________ >> BackupPC-users mailing list >> BackupPC-users@lists.sourceforge.net >> List: https://lists.sourceforge.net/lists/listinfo/backuppc-users >> Wiki: http://backuppc.wiki.sourceforge.net >> Project: http://backuppc.sourceforge.net/ >> ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List: https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki: http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
