-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 15/02/12 20:22, J. Bakshi wrote: > I also like the ssh+rsync combination for the same. How can I harden the public key, so that only the required commands will be executed and nothing else ? Asking for the rsyncd because it is free from sharing public keys, hence free from the risk involved in sharing pub keys. It is not possible to log into the client pc using the keys. As suggested, read the man page for authorized_users (start from man ssh) or search from google. This subject is much better covered in other places than when can be reproduced here.
As for sharing keys, you need to share something between the backuppc system and the client. Whether that is a public key, or a username/password, it doesn't make a lot of difference, it is a string which needs to be shared. In my opinion, and evidently in a lot of other people's opinion who know a lot more about this stuff, a key pair is a lot more secure than a username/password (ie, that is my understanding from a brute force point of view). As such, I'm a lot more happy with SSH + rsync using shared keys. In reference to the question of requiring an SSH server, the response is yes, you need an SSH server, but this is usually active by default, required for other administrative tasks anyway, as opposed to rsyncd which is an optional extra (yes, this presumes some form of unix as opposed to windows). Regards, Adam - -- Adam Goryachev Website Managers www.websitemanagers.com.au -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk87fTAACgkQGyoxogrTyiVL0wCgkR5j8R0Sk8v7mLNZXpWDBD/+ PCYAoK9/cRJLFnPiUIpkpQJpoEfCcOfc =rl1Z -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List: https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki: http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/