Re: [Duplicity-talk] duplicity scp vs. sftp

[Heiko Baumann]

On Tue, 24 Nov 2009 07:35:10 -0600, Kenneth Loafman <address@hidden>
wrote:
> Michael Terry wrote:
>> 2009/11/18 Heiko Baumann <address@hidden>:
>>> /tmp/duplicity-scp-9882.sh is a wrapper shell script which limits
>>> bandwidth
>>> depending on up/download speeds. with duplicity 0.5.18 this works
great.
>>> but with version 0.6.05 it does not work anymore. and i havent found a
>>> way
>>> to limit bandwidth with sftp backend......
>> 
>> I believe there is an --sftp-command argument just like there is an
>> --scp-command argument.  So you could use a similar wrapper script, I
>> assume.
>> 
>> Seems like the --scp-command arg is not very useful anymore.
> 
> I made the change to sftp-only as a security enhancement.  With OpenSSH
> you can chroot sftp, but not scp (have a look in previous list emails).
>  I thought it was worth it to just drop scp since it could not be used
> in a chrooted environment.
> 
> For rate-limiting, look into tcp-wrappers.
> 
> ...Ken

is scponly (http://www.sublimation.org/scponly/wiki/index.php/Main_Page)
not the a possible solution to the scp/chroot problem? for me it seems a
little bit "hard" to force everyone to use sftp!? is there any reason why
we cannot make it an optional feature via command line option? i really
would appreciate it :)

do you have an example of a good tcp-wrapper for rate-limiting with sftp,
in case there is no way back to scp?

heiko