Re: [BackupPC-users] rsyncd via ssh-redirected port

[Guido S. <gs...@sc...>]

Matthias Meyer schrieb:
> Guido Schmidt wrote:
> 
>> Matthias Meyer wrote:
>>> Guido Schmidt wrote:
>>>> What works? The opening and closing of the tunnel.
>>>> What does not? The connection to it. Nothing in the rsyncd-logs on
>>>> host.example.com.
>>>>
>>>> If I leave DumpPostUserCmd empty the tunnel stays open and I can use it
>>>> with rsync as user backuppc on a shell providing the password by hand:
>>>>
>>>>   rsync -av --list-only --port=32323 backuppc@localhost::Alles
>>>>   /home/backuppc/test/
>>>>
>>> Do you provide the password during your script?
>> The ssh-connection works (authenticated via public key). The password I
>> refered to is for connecting to rsyncd and that is stored in
>> $Conf{RsyncdPasswd}.
>>
>> It seems that backuppc does not reach the point where it actually tries
>> to connect to rsync daemon. There are no entries in the rsyncd-log
>> (there are when I use the rsync-command above). How can I find out more
>> what happens and what not?
>>
> I don't really know what the problem :-(
> You can increase the loglevel with $Conf{XferLogLevel}.

I already increased it to 6, but that didn't give any more details.

> What happens if you start your tunnel interactive and leave DumpPreUser as well
> as CmdDumpPostUserCmd empty.

Okay, we're getting closer. That way the backup worked.
So I either get BackupPC to open the tunnel or to do the backup. That's odd.

> Why do you need the identification by rsync? I would believe you can trust your
> ssh-tunnel and dont't need an additional authentication.

There a users with shell-access to that host. Not protecting the port
would give them read-access to the whole file-system.

Guido

-- 
Schalloch Musikhandel GmbH
  Percussionsabteilung
  Firmensitz: Karolinenstraße 4-5, 20357 Hamburg
  Registergericht: Amtsgericht Hamburg, HRB 22770
  Geschäftsführer: Christoph Scheffler
  Tel 040-43 84 94
  Fax 040-430 29 47

Öffnungszeiten:
  Mo-Mi 10-19 Uhr
  Do+Fr 10-20 Uhr
  Sa    10-16 Uhr

Sie erreichen mich:
  Mo          13-19 Uhr
  Di          10-19 Uhr
  Do          11-20 Uhr
  Jeden 2. Sa 10-16 Uhr