BackupPC-users

Re: [BackupPC-users] security & web server questions

2013-06-30 13:26:10
Subject: Re: [BackupPC-users] security & web server questions
From: Grant <emailgrant AT gmail DOT com>
To: "General list for user discussion, questions and support" <backuppc-users AT lists.sourceforge DOT net>
Date: Sun, 30 Jun 2013 10:24:22 -0700
>> On Linux, how is communication between the clients and the backup
>> server achieved as far as security?  Does the backup server pull or do
>> the clients push and as which user?
>
> This depends on the transfer method:
>  - tar and rsync tunnel their data over ssh -> secure.

I would use this.

> And as reading the basic docs of backuppc tell you, the server pulls
> the changes from the clients automatically or when told via the
> web-interface.

Does that mean the server has root read access to the entire
filesystem of each of the clients via SSH keys?

>> Can the web server reside on a different system than the backup
>> server?
>
> Yes, but the web-interface has to have read-access to the
> backuppc-filesystem to show you the current state and select files for
> restore and stuff. If you really must, you can run the daemon and the
> web-interface on separate machines and nfs-mount /var/lib/backuppc from
> the daemons machine to the web-server.
> But there is no real advantage in that, the web-interface isn't used
> that heavily, its not slowing the daemon down if you run both on the
> same machine. And you save administration-nightmare when you just run
> both on the same machine.

Agreed!

- Grant

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/