-
Marc Mengel [EMAIL PROTECTED]
On Wed, 5 Feb 2003 [EMAIL PROTECTED] wrote:
I think the easiest way would be to use an SSH tunnel. Would this be easy
to implement ? Any examples maybe or pointers on how to acheive that ?
ssh won't do it by itself; it won't tunnel UDP. I think it
There is support for kerberos, which does two things
authenticates the request from the server to the client
encrypts the backup stream
The first step is actually quite important. Without it, someone else
can run a backup and get your bits sent to them, even if they are
protected from
Amanda is a backup manager, not a security manager. There are no steps taken
to ensure the security of the backups. Several solutions are available,
though:
- Use the Kerberos support built in to Amanda. I've never played with this.
- Use tar with a wrapper script on the client that encrypts
Marc
This is what VPN's are for.
Amanda has little concept of security and relies on DNS lookups/usernames
for any sort of authentication. You can augment this with
tcp-wrapper/xinet type security, but the traffic will
still travel over the public internet in the clear (or at best
compressed!).
On Wed, Feb 05, 2003 at 03:49:32PM +0100, [EMAIL PROTECTED] wrote:
Hello,
Let's take the scenario where I have got an AMANDA server located at one
central site and have a few other servers located at various places around
the globe which of course all need to be backed up by the centraon
On Wed, Feb 05, 2003 at 03:49:32PM +0100, [EMAIL PROTECTED] wrote:
Hello,
Let's take the scenario where I have got an AMANDA server located at one
central site and have a few other servers located at various places around
the globe which of course all need to be backed up by the centraon
As many already sudgested: VPN is your best choice. Sometimes VPN is not
an option though, the second best option is:
http://cns.utoronto.ca/~pkern/stuff/
There is a patch which will allow the SSL encryption of the amanda dump
images. It is pretty good, since you can specify in a dumptype if you
PROTECTED] cc:
om Subject: RE: Running AMANDA over the
Internet
Sent
],
[EMAIL PROTECTED]
[EMAIL PROTECTED] cc:
om Subject:
RE: Running AMANDA over the Internet