Re: [rdiff-backup-users] Security problem with rdiff over ssh?

[martin f krafft]

also sprach address@hidden <address@hidden> [2010.05.28.0236 +0200]:
> set root login to without-password and this should solve your
> problem -- the keys should work, but passwords will not.

even better, set it to “forced-commands-only” and specify the
command rdiff-backup needs on the server in the authorized_keys
file. In addition, specify all the no-* options, e.g. no-pty etc.

-- 
martin | http://madduck.net/ | http://two.sentenc.es/
 
"i feel sorry for people who don't drink. when they wake up in the
 morning, that's as good as they're going to feel all day."
                                                    -- frank sinatra
 
spamtraps: address@hidden

digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)