Re: rsyncssl

2013-02-04 Thread devzero
in rsync for long, but when i saw RsyncSSL, i think it could obsolete an rsync with compiled in ssl support. Nobdoy would have the idea to put ssh into rsync, rsync is just using that as a sub-process/pipe(and vice versa). So does RsyncSSL (with stunnel). On the server side, with rsync + ssh,

Re: rsyncssl

2013-02-03 Thread Jason Haar
Another good reason for a SSL-version of rsync: non-Unix clients... It's all well and good to talk about using vpns and ssh tunnels - but the fact is that a large percentage of rsync clients are non-Unix - like Windows - and getting them set up for ssh/etc is layering extra software on top of rsyn

Re: rsyncssl

2013-01-28 Thread Kevin Korb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In sshd_config: Match User username X11Forwarding no AllowTcpForwarding no ForceCommand /path/to/rrsync [-ro] /path/to/target Also, ssh public key authentication is not a pre-shared key that is what a password is. Public key authentication does

Re: Re: rsyncssl

2013-01-28 Thread Volker Kuhlmann
On Tue 29 Jan 2013 03:46:53 NZDT +1300, Karl O. Pinc wrote: > Put this at the beginning of the ~/.ssh/authorized_keys line, before > the key: > > no-pty,no-agent-forwarding,no-port-forwarding,no-user-rc,no-X11- > forwarding,command="rsync --server --daemon ." Good, thanks for posting that, yes

Re: Re: rsyncssl

2013-01-28 Thread Karl O. Pinc
On 01/28/2013 04:24:13 AM, devz...@web.de wrote: > >The only place that an SSL would make some sense, is if you are > going > to do it to/from an rsync daemon, > > yes, exactly. > > > >but then how would that be "better" than a ssh-only account with > keys/etc. only allowing the rsync to

Aw: Re: rsyncssl

2013-01-28 Thread devzero
where they need nothing but filetransfer into some dedicated subdir. regardsroland Gesendet: Montag, 28. Januar 2013 um 10:22 Uhr Von: "Hendrik Visage" An: devz...@web.de Cc: "rsync@lists.samba.org" Betreff: Re: rsyncssl

Re: rsyncssl

2013-01-28 Thread Hendrik Visage
On Sun, Jan 27, 2013 at 12:07 AM, wrote: > Hi, > > Isn`t RsyncSSL (wrap rsync with stunnel via stdin/out) the better solution > ? (as it is using a mature external program for the SSL stuff) > Why SSL when you already have a proper working SSH with certificates etc. that shoul

rsyncssl

2013-01-26 Thread devzero
Hi, i`m wondering - can't THIS one http://gitweb.samba.org/?p=rsync-patches.git;a=blob;f=openssl-support.diff be completely replaced with THIS one ? http://dozzie.jarowit.net/trac/wiki/RsyncSSL http://dozzie.jarowit.net/git?p=rsync-ssl.git;a=tree Isn`t RsyncSSL (wrap rsync with stunne