Re: rsync // su

2003-09-04 Thread Martin Pool
On 4 Sep 2003 Carson Gaspar <[EMAIL PROTECTED]> wrote: > --On Friday, September 05, 2003 12:45 PM +1000 Martin Pool > <[EMAIL PROTECTED]> wrote: > > > On 4 Sep 2003 Atom 'Smasher' <[EMAIL PROTECTED]> wrote: > > > >> obviously, allowing root logins through ssh (or any protocol, > >really)> is b

Re: rsync // su

2003-09-04 Thread Carson Gaspar
--On Thursday, September 04, 2003 8:52 PM -0700 jw schultz <[EMAIL PROTECTED]> wrote: On Thu, Sep 04, 2003 at 11:36:31PM -0400, Carson Gaspar wrote: ... I don't, however, think that the rsync protocol is the right place to fix it(speaking about normal rsync +rsh/ssh/whatever, not the rsync dae

Re: rsync // su

2003-09-04 Thread jw schultz
On Thu, Sep 04, 2003 at 11:36:31PM -0400, Carson Gaspar wrote: > > > --On Friday, September 05, 2003 12:45 PM +1000 Martin Pool > <[EMAIL PROTECTED]> wrote: > > >On 4 Sep 2003 Atom 'Smasher' <[EMAIL PROTECTED]> wrote: > > > >>obviously, allowing root logins through ssh (or any protocol, really

Re: rsync // su

2003-09-04 Thread Carson Gaspar
--On Friday, September 05, 2003 12:45 PM +1000 Martin Pool <[EMAIL PROTECTED]> wrote: On 4 Sep 2003 Atom 'Smasher' <[EMAIL PROTECTED]> wrote: obviously, allowing root logins through ssh (or any protocol, really) is best avoided. Can you explain why you hold that opinion? Speaking as a securit

Re: rsync // su

2003-09-04 Thread Martin Pool
Hi, Please send questions to the list, not to me. On 4 Sep 2003 Atom 'Smasher' <[EMAIL PROTECTED]> wrote: > i've been trying to find a good answer for this, but pretty much all > i've found is disagreement on what level of insecurity is > acceptable > > the problem arises when trying to us

Re: using rsync with ssh to distribute to multiple hosts

2003-09-04 Thread Jim Kleckner
Good suggestions. Also, if you are uncomfortable with an empty passphrase and can tolerate entering it once per session, you can use ssh-agent to hold the credential in memory. The keychain script is also useful to locate an ssh-agent to be used from unrelated non-child shells. Jim Eric Whiting

Re: using rsync with ssh to distribute to multiple hosts

2003-09-04 Thread Eric Whiting
2 things to do that will fix things... 1. Read man ssh and create public/private ssh keys with an empty passphrase. This will let the rsync run without a password -- you can cron it and it will just work... You can also use .rhosts and sync over rsh, but ssh with the keys is a better solution. 2.

using rsync with ssh to distribute to multiple hosts

2003-09-04 Thread Jim Stafki
Hello, I have tried to look this up in the archives before posting but I can not connect to the news server at gmane. I hope you can help, or perhaps point me to documentation somewhere... I have a filesystem on an aix box that must be pushed periodically to several unix boxes (over 100) and the