Michael DeHaan wrote:
Chris O'Regan wrote:
are transferred using scp/rsync. Usage of ssh-agent before cobbler replicate is therefore recommended unless you are using authorized_keys.
That's perfect; we use ssh for a number of tasks similar to this already. Is it possible to specify a key to use? We like to lock down a key to a specific command, host, etc.
ssh-add should take care of this. If you want to put that inside a shell script that wraps cobbler replicate that might work for you.
Yes, you can restrict an ssh key to a specific command with some editing in the authorized_keys file
good writeup here (search for restricting) http://troy.jdmz.net/rsnapshot/