secure remote backups
Ben Escoto
bescoto@stanford.edu
Wed, 21 Nov 2001 13:26:13 -0800
--==_Exmh_-511287360P
Content-Type: text/plain; charset=us-ascii
>>>>> "MW" == mike wolman <mike@nux.co.uk>
>>>>> wrote the following on Wed, 21 Nov 2001 14:41:15 +0000 (GMT)
MW> Hi Ben, I have tried your suggestion however when i try to ssh
MW> and su i get the following problem from su: standard in must be
MW> a tty
MW> I have had a hunt for anybody else trying to run su from ssh but
MW> have not found a solution.
Hmm, I think something like the ssh-then-su method still could work,
but you would need some more complicated wrapper... Ok, how about
these suggestions instead:
1. Suid script that runs rdiff-backup --server. I think you would
have to create another user id, and make sure only that user has
access to the script.
2. Instead of running rdiff-backup on machine A and trying to get it
to log in to machine B which doesn't accept ssh root logins, run
rdiff-backup on machine B (after you 'su' normally) with machine A
being remote.
3. Reconfigure ssh on the remote machine to accept root logins. To
do this, make sure the line
PermitRootLogin yes
appears in your sshd configuration file, usually at
/etc/ssh/sshd_config.
Anything here look promising?
--
Ben Escoto
--==_Exmh_-511287360P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Exmh version 2.2 06/23/2000
iD8DBQE7/Bvy+owuOvknOnURAmLAAJ9z4NiGCuapr21C38DmfMPsTR9fDgCeIP/f
ZPS7ikKRNZTFR9L5ARoh0ls=
=ABsm
-----END PGP SIGNATURE-----
--==_Exmh_-511287360P--