Thank you, Les!

That was my total problem.  My backups are scheduled to begin at 01:00
and I just had time to get there, logon as backuppc and issue the
ssh-copy-id archiver.  Immediately the tar backup began!

What I can't figure out now is why it was working some of the time
without the public key on file in authorized_keys.

I'll update my notes for the next time I have to setup a system!

Again, thanks for your help and putting up with a barely literate Linux
user.  -- ken



On Mon, 2012-01-23 at 23:42 -0600, Les Mikesell wrote:
> On Mon, Jan 23, 2012 at 11:22 PM, Kenneth L. Owen
> <tx836519 AT bellsouth DOT net> wrote:
> >
> >
> > I am not wanting to generate a new private key on the archiver for
> > backuppc user for just the reason you gave -- the clients are in sync
> > with this key.
> 
> 
> And you don't need a new key, you just need the public key that
> matches your existing private key  added to the appropriate
> authorized_keys file.
> 
> > backuppc ssh connects to the client as backuppc where he has an account.
> > The clients sudoers file gives backuppc root privilege for the commands
> > needed to perform backup and no others.  If I need to do a restore, I
> > must revise the sodoers file to to switch to the commands for restore so
> > backuppc can write the files.  Then when the restore is complete it is
> > changed back so that only the backup function is allowed.
> >
> > On the archiver, backuppc has a logon ID.  The sudoers file gives
> > backuppc root authority on archiver system, but only for the commands
> > needed to perform a tar backup of /home.
> >
> > So, to switch to rsync, I revise sudoers to give backuppc root privilege
> > for the commands to perform rsync backup of /home.  Then BackupPC
> > application will ssh connect to localhost as user backuppc on localhost.
> >
> > Am I missing something here?
> 
> That is more complicated than just ssh'ing as root (where sshd has
> approximately equivalent facilities to sudo to control what can be
> executed) but if that is working correctly elsewhere it should work
> the same with localhost as the target.
> 



------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/