Date: Tue, 27 May 2003 12:38:27 -0700 From: Michael Collette <metrol@metrol.net> To: FreeBSD Security <FreeBSD-Security@FreeBSD.org> Subject: Re: multihost master.passwd sync Message-ID: <200305271238.27152.metrol@metrol.net> In-Reply-To: <XFMail.20030527153139.ah60@httpsite.com> References: <XFMail.20030527153139.ah60@httpsite.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 27 May 2003 12:31 pm, Andy Harrison wrote: > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > On 27-May-2003, Eric Anderson wrote message "Re: multihost master.passwd > sync" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > >> Because we don't allow root login remotely, mandated from above. > > > > so you scp the file to a directory owned by a user designated to only do > > this function.. then have a cron job that fires up every so often that > > snags that file and updates the running master.passwd file.. > > Root can't scp a file from one host to another where remote root login is > not allowed. That's not what Eric was suggesting. You use a non-root user account to do the xfer. You then have a root owned cron job that puts the xfer'd file in place. Root never moves anything across the network. Later on, -- "Always listen to experts. They'll tell you what can't be done, and why. Then do it." - Robert A. Heinlein
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200305271238.27152.metrol>