From owner-freebsd-questions@FreeBSD.ORG  Fri May 30 10:03:36 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B3752106566B
	for <freebsd-questions@freebsd.org>;
	Fri, 30 May 2008 10:03:36 +0000 (UTC)
	(envelope-from yuri.pankov@gmail.com)
Received: from mail.irbisnet.ru (mail.irbisnet.ru [194.186.18.2])
	by mx1.freebsd.org (Postfix) with ESMTP id 63DAF8FC12
	for <freebsd-questions@freebsd.org>;
	Fri, 30 May 2008 10:03:35 +0000 (UTC)
	(envelope-from yuri.pankov@gmail.com)
Received: from [192.168.0.23] (igw.irbisnet.ru [194.186.18.4])
	(authenticated bits=0)
	by mail.irbisnet.ru (8.14.2/8.14.2) with ESMTP id m4U9quOA087156
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Fri, 30 May 2008 13:52:57 +0400 (MSD)
	(envelope-from yuri.pankov@gmail.com)
Message-ID: <483FCE83.2010107@gmail.com>
Date: Fri, 30 May 2008 13:53:07 +0400
From: Yuri Pankov <yuri.pankov@gmail.com>
User-Agent: Thunderbird 2.0.0.14 (Windows/20080421)
MIME-Version: 1.0
To: z.szalbot@lc-words.com
References: <483FC2E5.5040706@lc-words.com>
In-Reply-To: <483FC2E5.5040706@lc-words.com>
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: disallow remote root / allow remote root by key
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 May 2008 10:03:36 -0000

Zbigniew Szalbot wrote:
> Hello,
> 
> I wonder if it is possible and if so how to go about the following.
> 
> Server - Remote root login is disallowed but I need to fetch snaphosts 
> produced by rsnapshot and for this I need remote root access.
> Backup machine on a dynamic IP - connects to server using key-based 

As user, I guess?

> authentication. Can this machine (and only this machine) log in remotely 

Check sshd_config(5) for PermitRootLogin "without-password" keyword (I 
hope I understood you correctly).

> as root?
> 
> Is there a better way of handling this?
> 
> Thanks!
> 


HTH,
Yuri