From: Nathan B. <na...@sl...> - 2006-08-16 14:04:46
|
Carl Wilhelm Soderstrom wrote: > On 08/15 02:33 , Nathan Barham wrote: > >>I'm trying to set up BackupPC on Debian Sarge, using rsync over ssh to >>backup another Linux box. I don't want an empty passphrase on >>backuppc's ssh key, so I have done these things ... > > > looks like you're doing ssh as root. > what I did instead, was set up an account specifically for backups, which > used a passwordless key, and would only run one command (the command= option > in the dsa public key). the command used sudo to get the necessary > privileges to do backups. > > If you'd like, I wrote up a fairly good document describing how to do this. > Thanks for the reply. If I understand what you're saying it means a passwordless key on the server, a creation of another user on each client, and some sudo setup on each client. That's a bit more configuration of the clients than I was hoping for (this first box is gong to be one of many). Still, I'm interested in your doc for my own education if nothing else. But just for the record, using a passphrase on the server key, and using the init.d script to automatically start the BackupPC daemon are mutually exclusive? |