;0) btw what I had suggested didn't require an extra user, at least not while running bacula on debian. The deb packages of bacula automatically create a user bacula, and the bacula daemons run as that user. In the case of full system backups the bacula user needs to have read permissions on all of the files you want to backup anyway, so the permissions don't even need to be adjusted. Limiting the bacula user to running one command when logging in via ssh simply mitigates potential security issues, consider that under normal circumstances system users have a login script of /bin/false.
But of course all of this rambling is meaningless as, like you had said, a simpler solution was already mentioned. Cheers, Silas =0) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Arno Lehmann Sent: Friday, April 21, 2006 1:00 PM To: bacula-users@lists.sourceforge.net Subject: Re: [Bacula-users] RunBeforeJob && Hosts (Was: <job> is waiting for its start time) Hi, On 4/21/2006 9:43 PM, Bennett, Silas (GE Indust, Security) wrote: > Or that could work to. > > I am feeling a bit sheepish now... ;-) I was just about to suggest that you don't need an extra user account for what you want to achieve - using a ssh key which allows only one command to be run would be enough. To limit permissions you could use a limited access account existing on the system, or you do it in your script. But, since we're talking about backing up things, I assume that Turbo would want his script to have lots of rights anyway. And only after I thought about this it occured to me that the original question already had a simpler answer... :-) Arno > > =0) > Silas > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Turbo > Fredriksson > Sent: Friday, April 21, 2006 6:05 AM > To: bacula-users@lists.sourceforge.net > Subject: Re: [Bacula-users] RunBeforeJob && Hosts (Was: <job> is waiting > for its start time) > > > >>>>>>"Arno" == Arno Lehmann <[EMAIL PROTECTED]> writes: > > > >> That is, I'd like a script be executed on the _client_ prior > >> to start feeding data to the FD... > > Arno> Use Client Run Before Job... > > Thanx! > > > ------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Bacula-users mailing list > Bacula-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bacula-users > > > ------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=k&kid0709&bid&3057&dat1642 > _______________________________________________ > Bacula-users mailing list > Bacula-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bacula-users > -- IT-Service Lehmann [EMAIL PROTECTED] Arno Lehmann http://www.its-lehmann.de ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid0709&bid&3057&dat1642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
