[K12OSN] automating rsync

[R. Scott Belford]

Brian Chivers wrote:
> Doug Simpson wrote:
> 
>> Is it possible to automate rsync so you can transfer files between
>> servers automatically? and have it auto-supply a password for the
>> remote end?
>>
>> Thanks
>>
>>
> I do this for backing up our various servers. I have one machine that is
> running Rsync as a daemon and the linux box's PUSH there updates to it.
> I then use autofs to mount shares on various windows machine and rsync
> these to the server, sort of pulling. Seems to work fine.
> 
> To do the passwordless bit have a look at this page as a start
> 
> http://www.hantslug.org.uk/cgi-bin/wiki.pl?LinuxHints/SSHwithoutPasswords
> 
> But this page was what I used
> 
> http://dsg.port.ac.uk/~rjb/misc/howto/ssh/index.php
> 
> 
> Basically this is what you have to do
> 
> generate sshkeys on the machine you wish to rsync FROM
> 
>       ssh-keygen -t dsa -b 4096
> 
>       (just hit enter for all the questions)
> 
>       chmod 0644 ~/.ssh/id_dsa.pub
> 
>       copy ~/.ssh/id_dsa.pub to rsync server into /root/.ssh
> 
>       cat id_dsa.pub >> authorized_keys
> 
> Brian

Daniel Robbins wrote what I have always considered the definitive
article on this

http://www-128.ibm.com/developerworks/library/l-keyc.html

Part 2 touches on keychain.

Going back to my retail POS days, rsync + ssh + cron + keychain made for
a stable server farm.  It is CRITICAL that you understand that if you
don't password protect your private key, you are creating a serious
security hole.  Take the time, learn about keychain, and manage your
security.

--scott