|
From: Les M. <les...@gm...> - 2009-12-03 21:05:22
|
Jose Torres wrote:
> I have ssh password access on, but removed the root password. So I can
> login but root requires the key.
If you are internet-exposed and running on port 22 you'll be hit by a
lot of brute-force password guessing - not too likely to succeed if you
have good user passwords, but still a possibility.
> But anyway I would like to do the "...connect as a different user and add a
> sudo layer to run the backup."
> (I could create a key for backuppc, remove the password and make it sudoer
> on the remote server)
>
> How would I do the sudo layer?
I thought it was on the wiki but I can't find it now and don't have an
example myself. It's pretty straighforward, though. Just configure
sudo to permit the command you want to run as root by the user in
question on the target machine without password entry, then configure
backuppc to send the command including the sudo via ssh.
--
Les Mikesell
les...@gm...
|