1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] SSH PAM configuration
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20SSH%20PAM%20configuration&In-Reply-To=%3C502A6721.3030408%40kde.org%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="018146.html">
<LINK REL="Next" HREF="018176.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] SSH PAM configuration</H1>
<B>Anne Wilson</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20SSH%20PAM%20configuration&In-Reply-To=%3C502A6721.3030408%40kde.org%3E"
TITLE="[Mageia-dev] SSH PAM configuration">annew at kde.org
</A><BR>
<I>Tue Aug 14 16:56:33 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="018146.html">[Mageia-dev] SSH PAM configuration
</A></li>
<LI>Next message: <A HREF="018176.html">[Mageia-dev] SSH PAM configuration
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#18167">[ date ]</a>
<a href="thread.html#18167">[ thread ]</a>
<a href="subject.html#18167">[ subject ]</a>
<a href="author.html#18167">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 14/08/12 10:01, Colin Guthrie wrote:
><i> 'Twas brillig, and Anne Wilson at 13/08/12 18:06 did gyre and
</I>><i> gimble:
</I>>><i> On 13/08/12 11:04, Olav Vitters wrote:
</I>>>><i> On Mon, Aug 13, 2012 at 09:39:07AM +0100, Anne Wilson wrote:
</I>>>>><i> Why would anyone need root login over ssh? I don't allow it
</I>>>>><i> on my server and it has never caused me any problems. Su to
</I>>>>><i> root works perfectly well and avoids the security risk, so I
</I>>>>><i> don't understand this thread.
</I>>><i>
</I>>>><i> Remote backups. Quite easy to setup an SSH key which only runs
</I>>>><i> rsync.
</I>>><i>
</I>>><i> I use rsync on the server for local backups, and I use SSH with
</I>>><i> keys to access the server from laptops for maintenance tasks, but
</I>>><i> I have never managed to make rsync over ssh with keys work.
</I>>><i> People tell me to just use ssh without keys, but I'm reluctant to
</I>>><i> do that. Maybe one day I'll find something that steps me through
</I>>><i> it, so that I can find the missing link.
</I>><i>
</I>><i> In this case if you want a special key that can *only* run rsync
</I>><i> you need to configure your authorized_keys correctly with
</I>><i> appropriate command= definition.
</I>><i>
</I>><i> But even without specific setup if you can ssh between hosts
</I>><i> happily, just do "rsync -e ssh" on the client side and just use
</I>><i> <A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">foo at remote</A>:/path/to/files syntax. Job done :)
</I>><i>
</I>Sure, but knowing how prone we all are to forget, my intention was to
do it by cron :-) As I said, I can manually do anything I need to,
but I want scheduled checks for changed files. Annoyingly, I have to
say that the only part I have working for that is the Windows 7 backup
of my embroidery project files. When I'm working there, changes are
backed up four times a day.
I'm guessing that Windows is using my local mount of the appropriate
drive on the server, and I tried doing that in Linux, thinking it
would solve it, but no matter what I do, I still get "denied". It has
to be something about the way the keys are passed to the server when
using cron, as I can use the local mount to move things around in
Dolphin with no problems whatsoever. If I ssh from konsole it is
clear that my keys are being passed. I don't think cron is doing that.
Anne
- --
Need KDE help? Try
<A HREF="http://userbase.kde.org">http://userbase.kde.org</A> or
<A HREF="http://forum.kde.org">http://forum.kde.org</A>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - <A HREF="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</A>
iEYEARECAAYFAlAqZx8ACgkQj93fyh4cnBdnowCgillA7xTkrC2YvQg5Et1gxT2k
wNMAn0a8hRmIkOWYd+iBJ75X6Xn1BgWN
=K4Z6
-----END PGP SIGNATURE-----
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="018146.html">[Mageia-dev] SSH PAM configuration
</A></li>
<LI>Next message: <A HREF="018176.html">[Mageia-dev] SSH PAM configuration
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#18167">[ date ]</a>
<a href="thread.html#18167">[ thread ]</a>
<a href="subject.html#18167">[ subject ]</a>
<a href="author.html#18167">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
