multihost master.passwd sync

Michael Collette metrol at metrol.net
Tue May 27 12:39:17 PDT 2003


On Tuesday 27 May 2003 12:31 pm, Andy Harrison wrote:
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> On 27-May-2003, Eric Anderson wrote message "Re: multihost master.passwd
> sync" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> >> Because we don't allow root login remotely, mandated from above.
> >
> > so you scp the file to a directory owned by a user designated to only do
> > this function.. then have a cron job that fires up every so often that
> > snags that file and updates the running master.passwd file..
>
> Root can't scp a file from one host to another where remote root login is
> not allowed.

That's not what Eric was suggesting.  You use a non-root user account to do 
the xfer.  You then have a root owned cron job that puts the xfer'd file in 
place.

Root never moves anything across the network.

Later on,
-- 
"Always listen to experts.  They'll tell you what can't be done, and why.  
Then do it."
- Robert A. Heinlein



More information about the freebsd-security mailing list