Re: [BackupPC-users] BackupPC with Netware/Alternate rsync method.

[Carl W. S. <ch...@re...>]

On 02/22 01:46 , Russ wrote:
> Netware cannot handle the public/private key authenticataion.  It 
> supports it, but gets permission for what your allowed to do from an 
> LDAP server, the only way it queries an LDAP server is if you type the 
> password.  The key method results in no query made to the LDAP server 
> giving no permission to access the console and execute commands.

that's convoluted. I see your problem tho.

> Security is not an issue because the backups will be running on an 
> isolated internal network with both campuses devoid of personel while 
> they are running.  And its just a buch of Primary and Highschool 
> students assignments.  Who really wants to steal that??

<paranoid>
You always have to assume your data is worth stealing. It may not be obvious
to you why it's worth stealing, but someone else may find a use for it. The
reasons that occur to me are:
- gaining personal information about someone (just think about the girls you
  obsessed about in high school; if you thought you could gain more
  information about them, wouldn't you look?).
- any information coming from a system has the potential to reveal the
  configuration and state of the system; which can provide leverage to crack
  it.

You also should assume your traffic can be sniffed. Even switches can
sometimes be convinced to copy traffic to places it shouldn't go. A very
small 'network grenade' computer could concievably be plugged into some
unobtrusive spot and go unnoticed.
</paranoid>

That said, I *am* being paranoid there. But that's what people pay me to do.
:)

-- 
Carl Soderstrom
Systems Administrator
Real-Time Enterprises
www.real-time.com