On 26.06.2012 14:18, András Porjesz wrote:
> Hi all,
> I have an rsyncd installed on a host and I want to use it from a lot of
> clients. This rsync is not invoked directly but there is a shell script
> wrapper co set up parameters and environment.
> My problem is that I do not want to allow any
Hi Greg,
thanks, but actually they donwloaded an rsync from somewhere and started to use
it
Andras
From: greg@gmail.com [mailto:greg@gmail.com] On Behalf Of Greg Deback
(rsync)
Sent: Tuesday, June 26, 2012 14:44
To: András Porjesz
Cc: rsync@lists.sa
Okay, then you can do the following :
- create a dedicated group "rsync"
- chown/chmod /bin/rsync for that group only
- add a setgid to your script with that group
- use IP control in the rsyncd.conf to restrict users
Thus only allowed users can access the script, and only the script can
launch rsy
And you can also restrict users given their IPs :
Add at the top of the rsyncd.conf "hosts allow = 10.42.20.43/32"
Greg
On Tue, Jun 26, 2012 at 2:38 PM, Greg Deback (rsync) <
greg.deb+rs...@gmail.com> wrote:
> Hello,
> You could simply create a dedicated group, set up permissions to your
> script
Hi,
thanks, but actually the same users want to use rsync without the wrapper and
it will cause inproper transfer.
Andras
From: greg@gmail.com [mailto:greg@gmail.com] On Behalf Of Greg Deback
(rsync)
Sent: Tuesday, June 26, 2012 14:38
To: András Porjesz
Hello,
You could simply create a dedicated group, set up permissions to your
script, and add only the desired remote users to that group.
Greg
On Tue, Jun 26, 2012 at 2:18 PM, András Porjesz wrote:
> Hi all,
> I have an rsyncd installed on a host and I want to use it from a lot of
> clients. Thi
Hi all,
I have an rsyncd installed on a host and I want to use it from a lot of
clients. This rsync is not invoked directly but there is a shell script wrapper
co set up parameters and environment.
My problem is that I do not want to allow any other rsync to be able to connect
to the daemon. Is
https://bugzilla.samba.org/show_bug.cgi?id=8990
--- Comment #2 from Matt A 2012-06-26 08:07:39
UTC ---
(In reply to comment #1)
> Thus, it is assumed that if you are using --append (or --append-verify) that
> you have narrowed down your transfer list to just files that need to be
> appended and