cwrsync and user authentification

3 posts / 0 new
Last post
rog
Offline
Last seen: 14 years 10 months ago
Joined: 01.05.2008 - 21:33
cwrsync and user authentification

hi all
i could get to work on the both sides rsync between my win2K box and my sarge box

the command from my sarge box is

sudo -S /usr/bin/rsync -aurv 192.168.0.50::master_profile /home/master/

the module is well registered on the win box and i have featured host allow to 192.168.0.77 (sarge box)

the stuff is about a possible vulnerability :
fxscanner could get the modules name from the win box
so if i switch off the sarge box and put a laptop giving the sarge's ip 192.168.0.77
so i can synchronize the win box to my laptop

is there a way to avoid this ?
like force user identification from remote rsync user

i have downloaded setupssh381-20040709.zip to test how i can secure my stuff

thanks for your help

best regard

rog

itefix
Offline
Last seen: 18 min 51 sec ago
Joined: 01.05.2008 - 21:33
Re: cwrsync and user authentification

You can use rsync secrets file to introduce authorization at rsync level. Check documentation about rsync daemon configuration file for more info.
You can install openssh server component of cwRsync server for ssh-based communication. You don't need to install a separate ssh package for that.

rog
Offline
Last seen: 14 years 10 months ago
Joined: 01.05.2008 - 21:33
Re: cwrsync and user authentification

thanks tev
i could get your ssh module to work fine
it really accepts the authorized_keys

when i get the stuff working fine, i'll post all i did

cheers

rog

Release news