[Web4lib] Off-site backups and scripted SCP/SFTP

[Hankinson, Andrew]

Unless I'm mistaken (which is quite possible) the whole point of using
SSH keys is so you don't have to store or input a password at any point
- having shared keys creates a trusted link between two machines.

Maybe you could give a little more information about your setup - what
OS are you running?

-----Original Message-----
From: web4lib-bounces at webjunction.org
[mailto:web4lib-bounces at webjunction.org] On Behalf Of Keith D. Engwall
Sent: July 25, 2006 8:36 AM
To: web4lib at webjunction.org
Subject: [Web4lib] Off-site backups and scripted SCP/SFTP

I'm curious as to whether anyone is using commercial off-site backups
and if so, what service they are using.
 
We've got about 5GB (mostly from our LIS), and would prefer to use SFTP
or SCP with keys (because of scripts).
 
Also,
I've found some information online about setting up SSH Keys for
scripts, but it seems like either
 
a) you have to not password protect the key
 
or
 
b) you have to manually enter the password after a reboot of the
computer (using ssh-agent or similar solution)
 
I'm trying to find a third, in between method... where the password is
stored somewhere obscure.  Obviously this is still a security risk, but
it's at least less of one than using cleartext ftp with the username and
password in the script.
 
Any ideas?
 
Thanks,
Keith
 
Keith Engwall
Head of Library Systems and Technology
Catawba College Library
kengwall at catawba.edu
http://www.lib.catawba.edu
 
_______________________________________________
Web4lib mailing list
Web4lib at webjunction.org
http://lists.webjunction.org/web4lib/