Re: multihost master.passwd sync

From: Eric Anderson (anderson_at_centtech.com)
Date: 05/27/03

  • Next message: Mike Hoskins: "Re: multihost master.passwd sync" 
    Date: Tue, 27 May 2003 14:33:53 -0500
To: Andy Harrison <ah60@httpsite.com>

    Andy Harrison wrote:
    >>>Because we don't allow root login remotely, mandated from above.
    >>
    >>so you scp the file to a directory owned by a user designated to only do
    >>this function.. then have a cron job that fires up every so often that
    >>snags that file and updates the running master.passwd file..
    >
    >
    > Root can't scp a file from one host to another where remote root login is not
    > allowed.

    as root on localbox:
    % scp /etc/master.passwd genericuser@remotebox:
    works fine.. you just need to set the keys correctly..

    Eric 

    -- 
------------------------------------------------------------------
Eric Anderson	   Systems Administrator      Centaur Technology
Attitudes are contagious, is yours worth catching?
------------------------------------------------------------------
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Mike Hoskins: "Re: multihost master.passwd sync"

    Relevant Pages

    • Re: [Full-Disclosure] Re: Re: Any update on SSH brute force attempts?
      ... automated use of 'scp' etc. ... > places that require root access. ... Allowing root ssh access but setting policy on its use seems a better option ...
      (Full-Disclosure)
    • Re: scp as root, but not ssh?
      ... Is it possible to allow scp between machines as root ... # Use this to prevent accounts from doing anything other than scp ... # only within their own HOME directory. ...
      (comp.unix.solaris)
    • Re: ssh remote command problem;
      ... I did the fix as a normal user. ... (we have many other users so I prefer not to mess with my root ... But it seems to get invked on outgoing scp calls as well. ...
      (comp.security.ssh)
    • Re: ssh remote command problem;
      ... (we have many other users so I prefer not to mess with my root ... You can do what the scp code itself does: ... I had made another easy hack so that the post-processor was ... i.e. post-processing only on incoming scp's. ...
      (comp.security.ssh)
    • Re: multihost master.passwd sync
      ... On Tuesday 27 May 2003 12:31 pm, Andy Harrison wrote: ... >> so you scp the file to a directory owned by a user designated to only do ... > Root can't scp a file from one host to another where remote root login is ...
      (FreeBSD-Security)