-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In sshd_config:
Match User username
  X11Forwarding no
  AllowTcpForwarding no
  ForceCommand /path/to/rrsync [-ro] /path/to/target

Also, ssh public key authentication is not a pre-shared key that is
what a password is.  Public key authentication does not require the
server to know the user's private key.


On 01/28/13 16:31, Volker Kuhlmann wrote:
> On Tue 29 Jan 2013 03:46:53 NZDT +1300, Karl O. Pinc wrote:
> 
>> Put this at the beginning of the ~/.ssh/authorized_keys line,
>> before the key:
>> 
>> no-pty,no-agent-forwarding,no-port-forwarding,no-user-rc,no-X11- 
>> forwarding,command="rsync --server --daemon ."
> 
> Good, thanks for posting that, yes the *ix way is modular but with 
> configuration users are frequently left hanging a bit dry.
> 
> How can this be achieved using password authentication instead of
> with pre-shared keys from ~/.ssh/authorized_keys ?
> 
> TIA,
> 
> Volker
> 

- -- 
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
        Kevin Korb                      Phone:    (407) 252-6853
        Systems Administrator           Internet:
        FutureQuest, Inc.               ke...@futurequest.net  (work)
        Orlando, Florida                k...@sanitarium.net (personal)
        Web page:                       http://www.sanitarium.net/
        PGP public key available on web site.
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlEG8vsACgkQVKC1jlbQAQd3IwCcCjGbxZcesJ98Jq5aUpGQOdWY
jOcAnR+0hXjW2kYiXf3rlSPIUq675wVy
=T9eL
-----END PGP SIGNATURE-----
-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to