Hi all (again), I've discovered that I can use the option --rsh-command and specify /usr/bin/ssh and then, if you generate a key pair and set it up properly then you're not prompted for a password, the authentication happens and then the tarring happens over a secure channel.
So this basically solves my problem, but does anyone have any comments on the security of this for backing up a server to another server: two servers, one is internet facing, the other serves as a database server and has a tape drive. A 100TX connection connects the two. Is the above considered secure enough to backup the internet facing machine via a 2nd NIC to the backup device on the database server? Your comments are much appreciated. Matthew On Thu, Jun 21, 2001 at 11:22:02AM +0100, wrote: > Hi all, > > I wish to set up a client to backup to a standard tape > drive (/dev/st0) on the server. Using tar. I really don't > want to have to resort to using a commercial product or > something like amanda for simplicity reasons. > > Now, as I understand it, tar when used in this situation > writes directly to the tape device - the tape is not > 'mounted' as such as it has no filesystem. So does that > mean I need to export the entire server /dev/ via NFS to > allow the tar process on the client to write to the device? > I would rather not as that would seem a little in secure. > Can I copy the device node from dev to another directory > and simply export that? Will the node still function? > > I notice that from the tar man page the -f option will > write to a device on a remote system: > > -f, --file [HOSTNAME:]F > use archive file or device F (default "-", meaning > stdin/stdout) > > but how do you set the remote system up (in this case the > server) to allow the tar process access to the device? > > Many thanks for your help, > > Matthew > > -- > > Matthew Sackman > Nottingham, > ENGLAND > > Using Debian/GNU Linux > Enjoying computing > > It said 'Required Windows XP or better.' > So I installed Linux. -- Matthew Sackman Nottingham, ENGLAND Using Debian/GNU Linux Enjoying computing It said 'Required Windows XP or better.' So I installed Linux.
pgp9Rz9IKiuwQ.pgp
Description: PGP signature
