Re: [flexbackup-help] Newbie help please?

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Incoming from Lukasz Stelmach:
>  Byla godzina 10:06:53 w Tuesday 08 March, gdy do autobusu wsiadl kanar
>  i wrzasnal:"s. keeling!!! Bilecik do kontroli!!!" A on(a) na to:
> 
> [...]
> sk> Why did it complain about bbuser and not the other users' files?  The
> sk> permissions on his home dir are the same as everyone else's and the
> 
> This one is really hard to tell since you are the only one that
> can see all the details.

You're right.  In fact, I was wrong.  :-P  It's really failing on all
non-world readable file/dirs:

   find: ./lost+found: Permission denied
   find: ./usera: Permission denied
   find: ./userb: Permission denied
   find: ./userc: Permission denied

And this is after opening up sudo's perms for the remote fb user (see
below).

> sk> Why does the flexbackup command prompt me for the flexbackup user's
> sk> password?  How am I supposed to stuff this into a cron job when that's
> sk> going on?
> 
> Public key authentication.

   (0) local flexb_ ssh f.q.d.n
   Linux f.q.d.n 2.4.22-1.2115.nptlsmp #1 SMP Wed Oct 29 15:30:09 EST 2003 i686
   (0) f.q.d.n flexb_ 

The fb user on my backup machine can ssh without password to the
machine I want to backup.

> sk> I'm making the flexbackup user do the remote stuff via sudo.  What do
> sk> I need to allow in /etc/sudoers for flexbackup to work?
> 
> If I were you I would set all the things up the way that you backup
> user could log in to the server as root. There is quite an easy

Against my better judgement:

    flexb   ALL=(ALL)       NOPASSWD: ALL

I've also tried with:

    flexb  localhost=(ALL) NOPASSWD: /usr/bin/find, /bin/tar, /bin/dd

> and safe way to do it. With openssh you can specify a command a user
> can invoke if authenticated with a specific public key. Browse
> the ssh manual pages an look for 'command=' and 'authorized_keys'.

Thanks, I'll try banging my head on those.  

-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)               http://www.spots.ab.ca/~keeling 
- -