For internal stuff, there is a hosts allow/deny feature built right into
the rsync configuration file to allow rsync storageplaces access to only
from a particular IP address.
For general Internet stuff, I too did not want interactive logins, thus
preventing the ssh key method of using ssh to e
enting it being better...
thanks! Andy.
- Original Message -
From: "Matt McCutchen" <[EMAIL PROTECTED]>
To: "Andy Smith" <[EMAIL PROTECTED]>
Cc:
Sent: Monday, March 17, 2008 7:05 PM
Subject: Re: Incremental file updates over a network, NFS?
On Mon, 2008-03-
On Mon, 2008-03-17 at 18:33 +0100, Andy Smith wrote:
> Once last point, does it make any difference if I push or pull from the
> server side? Im thinking
> the only important thing is if you pull you can set the server side
> read-only which is better for
> security, that about right??
Yes, that
CTED]>
To: "Andy Smith" <[EMAIL PROTECTED]>
Cc:
Sent: Monday, March 17, 2008 5:54 PM
Subject: Re: Incremental file updates over a network, NFS?
On Mon, 2008-03-17 at 17:48 +0100, Andy Smith wrote:
I've tried implementing this but Im getting a nasty issue, rsync is core
d
On Mon, 2008-03-17 at 17:48 +0100, Andy Smith wrote:
> I've tried implementing this but Im getting a nasty issue, rsync is core
> dumping on the recieving server (the daemon
> side).
Alas, there's a bug in rsync 3.0.0: a daemon crashes unless it is given
an explicit --config=FILE option. Either
Ok thanks for that!
I've tried implementing this but Im getting a nasty issue, rsync is core
dumping on the recieving server (the daemon
side).
Im running this command:
/usr/local/bin/rsync -vv -r -e "ssh -vv -l rsync -i
/usr/home/rsync/.ssh/id_dsa" /usr/home/rsync/rra/ bkupsrv::confidential
On Mon, 2008-03-17 at 12:24 +0100, Andy Smith wrote:
> ok so basically that would (invoke with SETUID) be to invoke rsync daemon
> as root for example? More
> or less I have to run the daemon as root to be able to update files for all
> users dont I? For example if I want
> to rsync the homedirs
Hi,
ok so basically that would (invoke with SETUID) be to invoke rsync daemon
as root for example? More
or less I have to run the daemon as root to be able to update files for all
users dont I? For example if I want
to rsync the homedirs area, I have to run the deamon as root or run a
seperat
On Sat, 2008-03-15 at 19:32 +0100, Andy Smith wrote:
> > If you don't want to touch the server user's authorized_keys file, you
> > could have a separate user accept the ssh logins and either invoke the
> > daemon via setuid/sudo or connect to a background daemon on the same
> > machine (which work
Hey Matt,
thanks a lot for your detailed and very helpful responces! I must admit
Ive never come across the ssh force command option
before and with this suddenly I feel much more comfortable with the
solution! Probably that will work well for me, tho I'd like
to understand the other part of
On Fri, 2008-03-14 at 15:00 +0100, Andy Smith wrote:
> Ok, thanks for the info. That seems to open up the issue of network
> security (yes NFS security normally isnt great, but...)
>
> rsyncd native: is this bug free and secure (based on
> hosts_allow/hosts_deny?), perhaps a good solution with tc
On Fri, 2008-03-14 at 12:46 +0100, Andy Smith wrote:
> can anyone point me at some consise info on when rsync is capable of
> performing incremental updates
> of binary files? I need to rsync over a network, and currently I have
> this over an NFS share but I suppose
> that even if binary updates
You gave you the answer.
I'm not a security specialist, but by my modest knowledge, rsync
protocol isn't secure at all as all information can be sniffed by
somebody on the network. So the "classic" solution for those who need
encryption is to use ssh wrapper.
On the links of this page: htt
Ok, thanks for the info. That seems to open up the issue of network security
(yes NFS security normally isnt great, but...)
rsyncd native: is this bug free and secure (based on hosts_allow/hosts_deny?),
perhaps a good solution with tcpwrappers?
rsh: no thanks
ssh: dont really want to have to put
Rsync works on a client/server system. So it's recommended to install
rsync on both machines (your and the server), so you bypass NFS and
connect to the server via rsync protocol. That's the way to use the
delta incremental algorithm.
Le 14 mars 08 à 12:46, Andy Smith a écrit :
Hi list,
Hi list,
can anyone point me at some consise info on when rsync is capable of
performing incremental updates
of binary files? I need to rsync over a network, and currently I have this over
an NFS share but I suppose
that even if binary updates are possible there not going to do much good as
r
16 matches
Mail list logo
