ssh->rsync->newbie

[peter lindsay]

Thanks Dave;

In the literature there are many references to running rsync and ssh
together. I need to use ssh because normal ftp is disabled on both my
servers. I need to use rsync because it is, by miles, the best way to copy
things across.

I did notice, though, when I ran ssh in debug mode, I got the message:

"Method 'publickey' disabled."

I suspect my problems are to do with this.

Thanks,

Pete


----- Original Message -----
From: "Dave Dykstra" <dwd at bell-labs.com>
To: "peter lindsay" <plindsay at dcs.st-and.ac.uk>
Cc: <rsync at lists.samba.org>
Sent: Wednesday, October 17, 2001 10:47 PM
Subject: Re: ssh->rsync->newbie


> On Wed, Oct 17, 2001 at 10:51:12AM +0100, peter lindsay wrote:
> > Hi,
> >
> > I have two linux/apache servers running rsync and ssh.
> > I can manually ( i.e. command line )  rsync between the servers with no
> > difficulty - other than being required to enter a password before the
rsync
> > initiates.
> >
> > I wanted to put the process in a script and run it through cron(tab),
but I
> > still get prompted for the password.
> >
> > I've followed literature on this ( there seems to be plenty ) but cannot
get
> > further. I've looked at password files and public/private key
generation. I
> > suspected that perhaps my ssh installation was incomplete, but I don't
know.
> >
> > Any suggestions gratefully received,
> >
> > Thanks,
> >
> > Pete Lindsay
>
>
> Again, before we go on, do you want to use ssh or do you want to use
> rsync --daemon?  There are ways in both cases to do transfers without
> a password, but the way you do it is very different so let us know which
> one you want.  Your original question showed you seemed to be trying both.
>
> With ssh, the easiest way is usually to do a ssh-keygen without a
passphrase
> and copy the public key into ~/.ssh/authorized_keys on the server.  With
> rsync --daemon, the default is no password but if that's a security
problem
> you can use a "secrets file" on the server side and use
the --password-file
> option on the client where the file is not world readable.
>
> - Dave Dykstra
>
>