Dave Howorth wrote:
> Frank Lüken wrote:
>> Hi!
>>
>> Can i config dirvish that way, that i can initialize the backup from
>> the client-pc?
>>
>> Still i use a Dirvish backup server which connect to some client pc's
>> and start the backup process. But in my network are notebooks too and
>> these notebooks have a dynamic ip and name. So i want to configure
>> dirvish at each notebook and than the users should be able to run the
>> backup by themselves. Can i do this and if yes, how must i configure
>> dirvish?
> 
> You can do it by writing a shell script that you invoke on the server
> from the client via ssh. The shell script should run dirvish on the
> appropriate vault. This means your client machines have login access to
> your server to invoke a root process. That can cause security problems
> unless done very carefully. I don't believe dirvish offers the facility
> directly, for that reason.

I guess the problem Frank has is that the server won't know the IP of 
the client it has to talk to as he said the hostnames and IPs are all 
dynamic.  There must be a way of passing this though but not sure how to 
get that into dirvish.

Putty's toolset will allow you to instigate the shell script as Dave 
describes using certificates.

To negate the problem of the users ostensibly having root access, you 
can use the 'forced commands only' option in sshd_config and then add 
use "command=blahblah" in the authorized_keys2 file on the server. 
Something like this:

command="rsync --server --sender -vlHogDtprxz --numeric-ids . 
/home",from="xxx.xxx.xxx.xxx",no-port-forwarding,no-X11-forwarding,no-agent-forwarding
 
ssh-rsa AAAA...

HTH
Cheers


_______________________________________________
Dirvish mailing list
[email protected]
http://www.dirvish.org/mailman/listinfo/dirvish

Reply via email to