That is done by using a passprhaseless key. It's been a common topic of
discussion. ssh won't take plain stdin for the password, I think.
Somebody on the list had another agent that could handle it. Maybe he'll
speak up. Of course, if you have something on your system that can give
the passphrase to the key, and you're relying on unix permissions to keep
people out of it, you can rely on unix permissions to keep them off your
identity file, as well, so I recommend that you just use a passphraseless
key, and be careful about how it's accessible. Insisting on a passphrase
is false security, at an administrative level, though it makes sense to
demand it of regular users.
Tim Conway
[EMAIL PROTECTED]
303.682.4917 office, 303.921.0301 cell
Philips Semiconductor - Longmont TC
1880 Industrial Circle, Suite D
Longmont, CO 80501
Available via SameTime Connect within Philips, caesupport2 on AIM
"There are some who call me.... Tim?"
"Michael Carter" <[EMAIL PROTECTED]>
09/06/2002 09:57 AM
Please respond to mikec
To: Tim Conway/LMT/SC/PHILIPS@AMEC
cc:
Subject: RE: Error on Solaris 9 (2.5.5)
Classification:
Thanks, Tim. I assumed that ssh was using my bash profile info. D'oh!
Have you set up an rsync command to execute through ssh using cron? If
so, how did you pass the user's password to ssh from the script?
Thanks again!
#mikec
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 06, 2002 7:37 AM
To: Michael Carter
Cc: RSync list
Subject: Re: Error on Solaris 9 (2.5.5)
Try this commandline:
ssh vortac which rsync
You'll get "no rsync in /bin /usr/bin", probably.
Link it into something in the minimal path, or use "--rsync-path=" to
specify where to invoke it from.
Tim Conway
[EMAIL PROTECTED]
303.682.4917 office, 303.921.0301 cell
Philips Semiconductor - Longmont TC
1880 Industrial Circle, Suite D
Longmont, CO 80501
Available via SameTime Connect within Philips, caesupport2 on AIM
"There are some who call me.... Tim?"
Michael Carter <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
09/05/2002 10:23 PM
To: RSync list <[EMAIL PROTECTED]>
cc: (bcc: Tim Conway/LMT/SC/PHILIPS)
Subject: Error on Solaris 9 (2.5.5)
Classification:
I'm running into some errors I can't figure out.
Situation:
I have a Sparc IPX (2.6 Solaris), a Mac OS X box and an Ultra Sparc 1
running Solaris 9.
I am trying to rsync a web site between the IPX and Ultra 1.
All boxes are running 2.5.5 rsync built from source.
Problem:
Can't get a a sync between the IPX -> Ultra.
IPX = kashmir
Ultra = vortac
Mac = archer
Assumptions:
a). directories are owned by me or are writeable by my group.
b). SSH must be used as Ultra is not behind a firewall and RSHELL (and
telnet) is disabled in /etc/inetd.conf.
c). no rysnc is running as daemon.
d). kashmir and archer are on the same local segment behind a firewall
which has all outbound ports open.
Examples:
This is the error I get. I get this error for *any* rsync operation I
try from kashmir to vortac:
kashmir:~> rsync -avz -e ssh /web/aviate/53sf vortac:/usr1
mikec@vortac's password:
rsync: connection unexpectedly closed (0 bytes read so far)
rsync error: error in rsync protocol data stream (code 12) at io.c(150)
kashmir:~> ssh vortac ls -ld /usr1
mikec@vortac's password:
drwxrwxrwx 3 root root 512 Aug 23 15:23 /usr1
kashmir:~> ping vortac
vortac.aviate.org is alive
So it doesn't work from kashmir->vortac, which is the direction I want
to go. It does, however, work in the other dir:
vortac:~> rsync -avz -e ssh public_html
aviate.org:/export/home/mikec/temp/tmp
[EMAIL PROTECTED]'s password:
building file list ... done
public_html/
public_html/index.html
wrote 383 bytes read 36 bytes 25.39 bytes/sec
total size is 335 speedup is 0.80
I thought at first it was kashmir that was the problem, but I am able to
initiate a sync from kashmir to my Mac:
kashmir:~> rsync -avz -e ssh myca archer:/Users/mikec/tmp
mikec@archer's password:
building file list ... done
myca/
myca/CA.pl
myca/demoCA/
[...]
myca/mail.aviate.org.pem
myca/newreq.pem
wrote 7454 bytes read 148 bytes 50.51 bytes/sec
total size is 11967 speedup is 1.57
kashmir:~>
Archer -> Kashmir also works fine:
[archer:~/Pictures] mikec% rsync -avz -e ssh ~/Pictures
kashmir:/export/home/mikec/temp/tmp
rsync: open connection using ssh kashmir rsync --server -vlogDtprz .
/export/home/mikec/temp/tmp
mikec@kashmir's password:
rsync: building file list...
rsync: 4218 files to consider.
Pictures/
Pictures/.DS_Store
Pictures/.FBCIndex
Pictures/.FBCLockFolder/
Pictures/.FBCLockFolder/.FBCSemaphoreFile
Pictures/Apple day out/
Pictures/Apple day out/Apple Day Out-01
Here's a very verbose second attemp from kashmir->vortac:
kashmir:~> rsync -avvvvvvvvvz -e ssh /web/aviate/53sf
vortac:/export/home/mikec
/webbackup
cmd=ssh machine=vortac user= path=/export/home/mikec/webbackup
cmd=ssh vortac rsync --server -vvvvvvvvvlogDtprz .
/export/home/mikec/webbackup
opening connection using ssh vortac rsync --server -vvvvvvvvvlogDtprz .
/export/home/mikec/webbackup
mikec@vortac's password:
rsync: connection unexpectedly closed (0 bytes read so far)
_exit_cleanup(code=12, file=io.c, line=150): entered
rsync error: error in rsync protocol data stream (code 12) at io.c(150)
_exit_cleanup(code=12, file=io.c, line=150): about to call exit(12)
kashmir:~>
Anyone have an idea what I should look for next?
--
Mike Carter
Pilot/Programmer
[EMAIL PROTECTED]
--
To unsubscribe or change options:
http://lists.samba.org/mailman/listinfo/rsync
Before posting, read:
http://www.tuxedo.org/~esr/faqs/smart-questions.html
--
To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.tuxedo.org/~esr/faqs/smart-questions.html
