Michael DeHaan wrote:
Chris O'Regan wrote:
>> are transferred using scp/rsync. Usage of ssh-agent before
cobbler
>> replicate is therefore recommended unless you are using authorized_keys.
>>
> That's perfect; we use ssh for a number of tasks similar to this
> already. Is it possible to specify a key to use? We like to lock down a
> key to a specific command, host, etc.
>
ssh-add should take care of this. If you want to put that inside a shell
script that wraps cobbler replicate that might work for you.
Yes, you can restrict an ssh key to a specific command with some editing
in the authorized_keys file
good writeup here (search for restricting)
http://troy.jdmz.net/rsnapshot/
--
----------------------------------------------------------------------
Jim Wildman, CISSP, RHCE jim(a)rossberry.com
http://www.rossberry.com
"Society in every state is a blessing, but Government, even in its best
state, is a necessary evil; in its worst state, an intolerable one."
Thomas Paine