Re: rsync: Re: using rsync to backup windows workstations

2001-11-15 Thread Thomas Lambert

ssh is version 2.9.  RedHat 7.1.  I try to keep the latest updates, but
sometimes I get behind.

- Original Message -
From: Dave Dykstra [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 5:02 PM
Subject: Re: rsync: Re: using rsync to backup windows workstations


 On Wed, Nov 14, 2001 at 04:23:32PM -0500, Thomas Lambert wrote:
  THAT WAS IT!!  I just had authorized_keys and not authorized_keys2.
I
  knew I had to be close.
 
  THANK YOU! THANK YOU! THANK YOU!

 Then your server just be older than openssh 3.0.  Right?

 - Dave Dykstra






Re: rsync: Re: using rsync to backup windows workstations

2001-11-14 Thread Bill Campbell

On Wed, Nov 14, 2001 at 10:15:59AM -0500, Thomas Lambert wrote:
I have about 12 NT servers that I want to backup 1 directory to my Linux
Server.  The problem I am having is trying to get it not to ask for the
user's password.  I am trying to use ssh.  I just installed the latest
cygwin on my NT server (1.3.4).  Rsync is 2.4.6.  What I have tried was on
the NT machine, I ran ssh-keygen (no passphrase) and then added the
identity.pub to the Linux box in the /home/thomas/.ssh/authorized_keys.

Instead of using ssh, why don't you use straight rsync, with rsync running
in server mode on the Linux box.  You should probably put separate entries
in /etc/rsyncd.conf for each Windows box something like the one below that
I use to backup our local hardware suffering from the Microsoft Virus, W2K.

[dumbo_backup]
uid = root
gid = root
path = /rd0/backups/dumbo
read only = false
use chroot = false
comment = Backup for Dumbo Win2K
hosts allow = 192.168.253.28 
hosts deny = *

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Breathe fire, slay dragons, and take chances. Failure is temporary, regret
is eternal.




Re: rsync: Re: using rsync to backup windows workstations

2001-11-14 Thread Thomas Lambert

I thought just a straight rsync daemon was unsecure.  I am sending data from
remote dial-up sites, through the internet to my server.  That is why I am
using ssh (well trying to use it).  If this was just for my internal
network, then YES, I would probably just use the daemon.  One other problem
is that they are dial-up, so each time they connect to the internet, they
get a new IP.

I tried just doing ssh linuxbox username -a and I was asked for a
password. So I changed PasswordAuthentication to no in my sshd_config file
on the server. Restarted sshd and now I am getting permission denied. I did
copy the contents of my identity.pub, rsa_id.pub, dsa_id.pub to
authorized_keys on the server.  I'm going to read some more on ssh, but if
anyone knows a quick fix, let me know.

- Original Message -
From: Bill Campbell [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 2:45 PM
Subject: Re: rsync: Re: using rsync to backup windows workstations


 On Wed, Nov 14, 2001 at 10:15:59AM -0500, Thomas Lambert wrote:
 I have about 12 NT servers that I want to backup 1 directory to my Linux
 Server.  The problem I am having is trying to get it not to ask for the
 user's password.  I am trying to use ssh.  I just installed the latest
 cygwin on my NT server (1.3.4).  Rsync is 2.4.6.  What I have tried was
on
 the NT machine, I ran ssh-keygen (no passphrase) and then added the
 identity.pub to the Linux box in the /home/thomas/.ssh/authorized_keys.

 Instead of using ssh, why don't you use straight rsync, with rsync running
 in server mode on the Linux box.  You should probably put separate entries
 in /etc/rsyncd.conf for each Windows box something like the one below that
 I use to backup our local hardware suffering from the Microsoft Virus,
W2K.

 [dumbo_backup]
 uid = root
 gid = root
 path = /rd0/backups/dumbo
 read only = false
 use chroot = false
 comment = Backup for Dumbo Win2K
 hosts allow = 192.168.253.28
 hosts deny = *

 Bill
 --
 INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
 UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
 FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206)
236-1676
 URL: http://www.celestial.com/

 Breathe fire, slay dragons, and take chances. Failure is temporary, regret
 is eternal.






Re: rsync: Re: using rsync to backup windows workstations

2001-11-14 Thread Ben Ricker

On Wed, 2001-11-14 at 14:35, Thomas Lambert wrote:
 I thought just a straight rsync daemon was unsecure.  I am sending data from
 remote dial-up sites, through the internet to my server.  That is why I am
 using ssh (well trying to use it).  If this was just for my internal
 network, then YES, I would probably just use the daemon.  One other problem
 is that they are dial-up, so each time they connect to the internet, they
 get a new IP.

You are right: Rsync as a daemon in your environment would be less
secure than ssh.

 I tried just doing ssh linuxbox username -a and I was asked for a
 password. So I changed PasswordAuthentication to no in my sshd_config file
 on the server. Restarted sshd and now I am getting permission denied. I did
 copy the contents of my identity.pub, rsa_id.pub, dsa_id.pub to
 authorized_keys on the server.  I'm going to read some more on ssh, but if
 anyone knows a quick fix, let me know.

There are two: make sure the dsa_id.pub is in authorized_keys2 if you
just use '-e ssh' as an option for rsync, this automagically uses ssh
version 2, so you need the '2' you keys file. 'authorized_keys' is for
ssh 1. You can change the -e option to -e 'ssh 1' to use
auhtorized_keys (I believe that is the command line; I got ssh 1 doing
authentication but I switched to 2 because it is much more secure).

Ben Ricker
System Administrator
Wellinx.com





Re: rsync: Re: using rsync to backup windows workstations

2001-11-14 Thread Thomas Lambert

THAT WAS IT!!  I just had authorized_keys and not authorized_keys2.  I
knew I had to be close.

THANK YOU! THANK YOU! THANK YOU!

- Original Message -
From: Ben Ricker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 3:47 PM
Subject: Re: rsync: Re: using rsync to backup windows workstations


 On Wed, 2001-11-14 at 14:35, Thomas Lambert wrote:
  I thought just a straight rsync daemon was unsecure.  I am sending data
from
  remote dial-up sites, through the internet to my server.  That is why I
am
  using ssh (well trying to use it).  If this was just for my internal
  network, then YES, I would probably just use the daemon.  One other
problem
  is that they are dial-up, so each time they connect to the internet,
they
  get a new IP.

 You are right: Rsync as a daemon in your environment would be less
 secure than ssh.

  I tried just doing ssh linuxbox username -a and I was asked for a
  password. So I changed PasswordAuthentication to no in my sshd_config
file
  on the server. Restarted sshd and now I am getting permission denied. I
did
  copy the contents of my identity.pub, rsa_id.pub, dsa_id.pub to
  authorized_keys on the server.  I'm going to read some more on ssh, but
if
  anyone knows a quick fix, let me know.

 There are two: make sure the dsa_id.pub is in authorized_keys2 if you
 just use '-e ssh' as an option for rsync, this automagically uses ssh
 version 2, so you need the '2' you keys file. 'authorized_keys' is for
 ssh 1. You can change the -e option to -e 'ssh 1' to use
 auhtorized_keys (I believe that is the command line; I got ssh 1 doing
 authentication but I switched to 2 because it is much more secure).

 Ben Ricker
 System Administrator
 Wellinx.com







Re: rsync: Re: using rsync to backup windows workstations

2001-11-14 Thread Dave Dykstra

On Wed, Nov 14, 2001 at 02:47:42PM -0600, Ben Ricker wrote:
 On Wed, 2001-11-14 at 14:35, Thomas Lambert wrote:
  I thought just a straight rsync daemon was unsecure.  I am sending data from
  remote dial-up sites, through the internet to my server.  That is why I am
  using ssh (well trying to use it).  If this was just for my internal
  network, then YES, I would probably just use the daemon.  One other problem
  is that they are dial-up, so each time they connect to the internet, they
  get a new IP.
 
 You are right: Rsync as a daemon in your environment would be less
 secure than ssh.

Agreed.


  I tried just doing ssh linuxbox username -a and I was asked for a
  password. So I changed PasswordAuthentication to no in my sshd_config file
  on the server. Restarted sshd and now I am getting permission denied. I did
  copy the contents of my identity.pub, rsa_id.pub, dsa_id.pub to
  authorized_keys on the server.  I'm going to read some more on ssh, but if
  anyone knows a quick fix, let me know.
 
 There are two: make sure the dsa_id.pub is in authorized_keys2 if you
 just use '-e ssh' as an option for rsync, this automagically uses ssh
 version 2, so you need the '2' you keys file. 'authorized_keys' is for
 ssh 1. You can change the -e option to -e 'ssh 1' to use
 auhtorized_keys (I believe that is the command line; I got ssh 1 doing
 authentication but I switched to 2 because it is much more secure).

Not anymore in OpenSSH 3.0p1: the regular known_hosts and authorized_keys
files hold both kinds of keys, and the *2 files are deprecated.  He's using
cygwin 1.3.4 which includes OpenSSH 3.0p1.

- Dave Dykstra




Re: rsync: Re: using rsync to backup windows workstations

2001-11-14 Thread Dave Dykstra

On Wed, Nov 14, 2001 at 04:23:32PM -0500, Thomas Lambert wrote:
 THAT WAS IT!!  I just had authorized_keys and not authorized_keys2.  I
 knew I had to be close.
 
 THANK YOU! THANK YOU! THANK YOU!

Then your server just be older than openssh 3.0.  Right?

- Dave Dykstra