I'm probably venturing off topic a bit here, but for an
example of how to pull logs using ssh from cron, read on...
In the last day or two, Minh wrote:
MD> To get to your log files, you will need the sftp.lrp
MD > module.
And Patrick replied:
> Ok, sounds good... I'm guessing this goes along with the ssh.lrp
> package (which I've already set up) & I'm guessing sftp also comes
> in the ssh package in most distros? Now all I need is a newbie
> help file on setting up a cron job... any suggestions? :)
On Wed, 27 Nov 2002 13:43:52 PST Minh wrote:
> Sftp uses ssh protocols. It should be found with all
> the optional Bering lrp modules.
>
> I might be wrong about sftp, though. I read up some
> more, and it appears that sftp cannot pass the
> password through batch (non-interactive) mode. This
> is probably a security risk.
The best way to use ssh, scp or sftp--all three can be used
to copy files--in an unattended fashion is with keys. The
technique I would use (there are other variations that would
work) is to create a key pair to be used only for pulling
logs. Save the private key without a passphrase on a trusted
computer. Then use .ssh/authorized_keys on the firewall to
limit that key to only running one command.
Below is an example that is partially untested. I know the
technique works, but I may have made typos or slight syntax
errors.
On the firewall in ~/.ssh/authorized_keys either in the root
account or another account that has access to the log files:
command="tar c /var/log/*.0 | gzip -c -",no-pty,no-port-forwarding,\
no-X11-forwarding,no-agent-forwarding ssh-dss [the key here]
>From the trusted computer run:
ssh -i key_for_pulling_logs user@thefirewall \
> log_archive-`date -d yesterday +%Y%m%d`.tar.gz
manually or via cron.
It takes a bit of reading and practice to get familiar with
ssh and public key authentication, but if you do much *nix
system administration, it's *definitely* worth knowing.
--Brad
-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T
handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
