SSH capable version of dump
Hi list, we are using dump to do remote backups in our local network. root of the dumping host uses a user account on another machine that is connected to a tape device. In the last months we did close a lot of network services and advice our users to switch to SSH and SCP for obvious reasons. We would be very happy to close the traditional r-services completely too. However dump uses rmt which relies on rexec or rcmd which again need rshd or rexecd running. I looked for a way to make dump use SHH but found none. I know tar offers the --rsh-command option but I would prefer to stay with dump and use our hand-tailored scripts around it. So there are two questions: - Does anybody know about a version of dump that is able to cooperate with SSH? - Another solution would be to keep r-services open and restrict them to local hosts via /etc/hosts.deny, /etc/hosts.allow and the tcpd. Are there any security implications with this solution that I missed? Thanks, Thomas -- |--------------------------------------------------------------------------| | Thomas Forbriger email: Thomas.Forbriger@geophys.uni-stuttgart.de | | Universitaet Stuttgart - Institut fuer Geophysik | | Richard-Wagner-Str. 44 D-70184 Stuttgart Germany | | Tel ++49 (711) 121-3593 or 3422 or 3424 or 3590 | Fax ++49 (711) 2361218 | | http://www.geophys.uni-stuttgart.de/thof | | "... there's nothing more bizarre than reality..." (M. Kindermann) |
On Thu, Aug 10, 2000 at 21:09 +0200, Thomas Forbriger wrote:
- Does anybody know about a version of dump that is able to cooperate with SSH?
Every ssh and dump version can do, as long as you can dump to and
restore from stdout.
You might want to read the threads with the
------------------------------------------------------------
Date: 10 Feb 2000 17:35:38 +0100
From: naddy@mips.rhein-neckar.de (Christian Weisgerber)
To: freebsd-stable@freebsd.org
Subject: Re: dump(8) and SSH
------------------------------------------------------------
as well as
------------------------------------------------------------
Date: Thu, 03 Aug 2000 13:22:26 +0930 (CST)
From: "Daniel O'Connor"
So there are two questions:
- Does anybody know about a version of dump that is able to cooperate with SSH?
.From the dump manpage: ENVIRONMENT [...] RSH Dump uses the contents of this variable to determine the name of the remote shell command to use when doing remote backups (rsh, ssh etc.). If this variable is not set, rcmd(3) will be used, but only root will be able to do remote backups.
- Another solution would be to keep r-services open and restrict them to local hosts via /etc/hosts.deny, /etc/hosts.allow and the tcpd. Are there any security implications with this solution that I missed?
Hmmm. Running the daemons may be considered a security problem in the first place. Once you switched to ssh, you might not need the r-services any more. The only drawback I can see is performance with filetransfers.
Thanks, Thomas
Regards,
Roman.
--
- -
| Roman Drahtmüller
On Fri, 11 Aug 2000, Roman Drahtmueller wrote:
So there are two questions:
- Does anybody know about a version of dump that is able to cooperate with SSH?
.From the dump manpage:
ENVIRONMENT [...]
RSH Dump uses the contents of this variable to determine the name of the remote shell command to use when doing remote backups (rsh, ssh etc.). If this variable is not set, rcmd(3) will be used, but only root will be able to do remote backups.
A kind of summary: This feature is supported since dump version 0.4b8 which was released November 3, 1999. SuSE-distributions provide: SuSE-6.1: dump version 0.3 SuSE-6.4: dump version 0.4b15 For anybody else who would like to upgrade: Roman warned me not to install the SuSE-6.4 dump.rpm as it was linked against glibc-2.1 (SuSE-6.1 has glibc-2.0). But the source package from SuSE-6.4 compiles well after compiling also ext2fs.spm from SuSE-6.4. Finally we will get rid of these r-services... ;-) Cheers, Thomas |--------------------------------------------------------------------------| | Thomas Forbriger email: Thomas.Forbriger@geophys.uni-stuttgart.de | | Universitaet Stuttgart - Institut fuer Geophysik | | Richard-Wagner-Str. 44 D-70184 Stuttgart Germany | | Tel ++49 (711) 121-3593 or 3422 or 3424 or 3590 | Fax ++49 (711) 2361218 | | http://www.geophys.uni-stuttgart.de/thof | | "... there's nothing more bizarre than reality..." (M. Kindermann) |
participants (3)
-
Gerhard Sittig -
Roman Drahtmueller -
Thomas Forbriger