Re: Question about RSSH

2009-02-12 Thread Derek Martin
On Thu, Feb 12, 2009 at 04:51:37PM -0600, Robert Dailey wrote: > On Thu, Feb 12, 2009 at 12:33 PM, jedd wrote: > > First, learn to edit your posts better. > > If you have nothing nice to say don't say anything at all. FWIW, this is a reasonable criticism, although it could perhaps have been ph

Re: Question about RSSH

2009-02-12 Thread jedd
On Thu Feb 12 2009, Robert Dailey wrote: > If you have nothing nice to say don't say anything at all. I'd suggest that the problem with netiquette is not mine. The rest of my email was not, either, as you suggest, trollish or rude. It's a shame you read it that way. > Yet you know nothing ab

Re: Question about RSSH

2009-02-12 Thread Robert Dailey
On Thu, Feb 12, 2009 at 12:33 PM, jedd wrote: > On Fri Feb 6 2009, Robert Dailey wrote: > > 80 lines snipped > > First, learn to edit your posts better. If you have nothing nice to say don't say anything at all. > > Thanks for taking the time to explain everything. I think the problem > > i

Re: Question about RSSH

2009-02-12 Thread jedd
On Fri Feb 6 2009, Robert Dailey wrote: > 80 lines snipped First, learn to edit your posts better. > Thanks for taking the time to explain everything. I think the problem > is that I want this to be simple. I want to allow a specific person > to use a portion of my hard drive for their personal

Re: Question about RSSH

2009-02-09 Thread Richard L. Holbert
appy Hacking! Rick - Original Message - From: "Robert Dailey" To: "Robert Dailey" , "rssh" Sent: Saturday, February 7, 2009 1:28:33 AM (GMT+0300) Auto-Detected Subject: Re: Question about RSSH On Fri, Feb 6, 2009 at 4:05 PM, Derek Martin wrote: > On

Re: Question about RSSH

2009-02-06 Thread Russ Allbery
Richard Edward Horner writes: > You can encrypt rsync with the -e 'ssh -ax' option but then they need > a system account. Can a user still encrypt an rsync transfer with -e > 'ssh -ax' if their shell is /bin/false or some such? That's not using the rsync server. That requires a system account a

Re: Question about RSSH

2009-02-06 Thread Richard Edward Horner
On Fri, Feb 6, 2009 at 6:54 PM, Russ Allbery wrote: > Robert Dailey writes: > >> Thanks for taking the time to explain everything. I think the problem is >> that I want this to be simple. I want to allow a specific person to use >> a portion of my hard drive for their personal backup, and SCP com

Re: Question about RSSH

2009-02-06 Thread Derek Martin
On Fri, Feb 06, 2009 at 03:54:40PM -0800, Russ Allbery wrote: > I would set up an rsync server to do this. An rsync server doesn't > require an account at all. You would instead create an entry in the rsync > server configuration file that specifies the host that's allowed to upload > and optiona

Re: Question about RSSH

2009-02-06 Thread Russ Allbery
Robert Dailey writes: > Thanks for taking the time to explain everything. I think the problem is > that I want this to be simple. I want to allow a specific person to use > a portion of my hard drive for their personal backup, and SCP comes to > mind as the first solution. They basically have a s

Re: Question about RSSH

2009-02-06 Thread Derek Martin
On Fri, Feb 06, 2009 at 05:49:13PM -0500, Richard Edward Horner wrote: > I've deployed scponly to accomplish what you're attempting to do on a > few servers without using RSSH. Just install scponly and then, as > root, do: > > chsh username Hmm... I'll admit it's been a while since I looked at sc

Re: Question about RSSH

2009-02-06 Thread Richard Edward Horner
On Fri, Feb 6, 2009 at 5:44 PM, Robert Dailey wrote: > > > On Fri, Feb 6, 2009 at 4:42 PM, Richard Edward Horner > wrote: >> >> Yeah, Robert, even before this whole exchange unfolded I felt >> motivated to say that you're jumping into the deep end with chrooting. >> Derek summed up the issues of

Re: Question about RSSH

2009-02-06 Thread Robert Dailey
On Fri, Feb 6, 2009 at 4:42 PM, Richard Edward Horner wrote: > Yeah, Robert, even before this whole exchange unfolded I felt > motivated to say that you're jumping into the deep end with chrooting. > Derek summed up the issues of security nicely. > > For what you're trying to accomplish, you might

Re: Question about RSSH

2009-02-06 Thread Richard Edward Horner
On Fri, Feb 6, 2009 at 5:28 PM, Robert Dailey wrote: > On Fri, Feb 6, 2009 at 4:05 PM, Derek Martin wrote: >> >> On Fri, Feb 06, 2009 at 03:03:25PM -0600, Robert Dailey wrote: >> > I've read the docs (man pages) for >> > rsshand >> > rssh.conf

Re: Question about RSSH

2009-02-06 Thread Robert Dailey
On Fri, Feb 6, 2009 at 4:05 PM, Derek Martin wrote: > On Fri, Feb 06, 2009 at 03:03:25PM -0600, Robert Dailey wrote: > > I've read the docs (man pages) for > > rsshand > > rssh.conf , however I am > at a > > st

Re: Question about RSSH

2009-02-06 Thread Derek Martin
On Fri, Feb 06, 2009 at 03:03:25PM -0600, Robert Dailey wrote: > I've read the docs (man pages) for > rsshand > rssh.conf , however I am at a > stopping point. I really don't know enough about linux, rssh, or ssh

Re: Question about RSSH

2009-02-06 Thread Robert Dailey
On Fri, Feb 6, 2009 at 12:43 PM, Derek Martin wrote: > On Fri, Feb 06, 2009 at 12:13:22PM -0600, Robert Dailey wrote: > > Match user kenny > > X11Forwarding no > > AllowTcpForwarding no > > ForceCommand internal-sftp > > ChrootDirectory /mnt/kenny > > > > When I try to connect to

Re: Question about RSSH

2009-02-06 Thread Derek Martin
On Fri, Feb 06, 2009 at 12:13:22PM -0600, Robert Dailey wrote: > Match user kenny > X11Forwarding no > AllowTcpForwarding no > ForceCommand internal-sftp > ChrootDirectory /mnt/kenny > > When I try to connect to the server using user 'kenny', it fails to allow me > to connect as if

Re: Question about RSSH

2009-02-06 Thread Robert Dailey
On Fri, Feb 6, 2009 at 11:11 AM, Derek Martin wrote: > On Fri, Feb 06, 2009 at 09:56:53AM -0600, Robert Dailey wrote: > > > > Can RSSH do this? > > > > > > Yes it does. > > > > Are there any articles online explaining how to set this up? I've looked > at > > the FAQ and did not see this discussed

Re: Question about RSSH

2009-02-06 Thread Derek Martin
On Fri, Feb 06, 2009 at 09:56:53AM -0600, Robert Dailey wrote: > > > Can RSSH do this? > > > > Yes it does. > > Are there any articles online explaining how to set this up? I've looked at > the FAQ and did not see this discussed. Yes, it's discussed in the man page and in the extra documentation

Re: Question about RSSH

2009-02-06 Thread Robert Dailey
On Fri, Feb 6, 2009 at 9:44 AM, Yves Martin wrote: > On Fri, 2009-02-06 at 09:20 -0600, Robert Dailey wrote: > > Hi, > > > > I need to be able to Chroot a user into a specific directory but I > > want them to have read & write access to that directory. The > > ChrootDirectory method in SSH only a

Question about RSSH

2009-02-06 Thread Robert Dailey
Hi, I need to be able to Chroot a user into a specific directory but I want them to have read & write access to that directory. The ChrootDirectory method in SSH only allows the user to read files from their home directory, so it doesn't work for me. Can RSSH do this?