On 2008/02/08 20:48, Matt wrote: > Alexander Hall schreef: >> Marti Martinez wrote: >>> Do the rsync over SSH -- unless you don't allow root ssh access? >> >> I think that was the "solution" Matt tried to avoid. I suppose he does >> not seem confident with (automated) root access/logins from other boxes. >> > I'd like to avoid root access as OpenBSD disables it by default for a > good reason.
some OS do that, but not OpenBSD: # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value. #PermitRootLogin yes > But so far it seems the most maintainable solution. an alternative would be to push changes to live and backup servers from an admin box. this also gives you a sensible place to put the files under revision control (CVS or similar). the admin box needs root ssh access to both servers, but the servers don't need access to each other.
