synchronization utility (! using ssh)
Gary Kline
kline at thought.org
Mon Oct 27 16:45:58 PST 2003
On Mon, Oct 27, 2003 at 08:07:22PM +0000, Matthew Seaman wrote:
> On Mon, Oct 27, 2003 at 10:56:25AM -0800, Gary Kline wrote:
>
> > Wasn't there/isn't there a remote sync utility that you
> > could use without ssh. You had, perhaps optionally, a list
> > of directories (andor files) and the utility copied
> > only changed files from machine A to :B? I use ssh,
> > and have a pretty good firewall set up on my DNS server.
> > Just wondering if some of this isn't overkill... and
> > trying to remember the utility. Was it rsync after all?
>
> rsync(1), rdist(1), even tar(1) all can be used with alternatives to
> ssh in order to copy files to a remote machine. The question is "why
> would you want to?"
>
> Basically, if you aren't using ssh(1), then you're using rsh(1) which
> is an archaic protocol; a security incident waiting to happen and
> something you don't admit to using in polite company. I could mention
> rexec here, but this is a family mailing list and inappropriate for
> the sort of invective I would feel obliged to heap upon it.
>
> ssh(1) is only overkill until you realise exactly what you are laying
> yourself open to by not using it. Even inside a protected network,
> get into the habit of using it: it doesn't take much to accidentally
> end up using an inferior, insecure alternative to external
> destinations. Plus ssh(1) has other advantages like correctly
> returning the exit status of remote commands, being able to use key
> based authentication, X11 display forwarding and ssh-agent forwarding.
>
It was rdist, thanks, Matthew; the name is somehow less
than adaquate, I think. At any rate, years ago I had rdist
neatly set up with an [easily] modifyable distfile and
backed up one system to another. This, along with a nightly
tape backup, meant that it would take a great deal of
bad-luck to lose myimportant files.
I do have my internal systems rigged with ssh. It would be
nice if rdist has a -f switch or could otherwise take imput
from a file. I need to man -t rdist and find a quiet corner... .
gary
--
Gary Kline kline at thought.org www.thought.org Public service Unix
More information about the freebsd-questions
mailing list