Active Topics

 


Reply
Thread Tools
jukey's Avatar
jukey is offline jukey
2009-11-30 , 15:13
Posts: 246 | Thanked: 204 times | Joined on Jun 2007 @ Potsdam (Germany)
#1
Hi,

I made a little rsync backup script which syncs the content of a folder on the n900 to a server. This works without a password using public key authentication via ssh.

My question now is: How can I make this little script running once a day? Or maybe once a hour? Is there a recommended solution for this?

Thanks, jukey
__________________
-> Join the SailfishOS Meetup Berlin - every first Monday a month <-

Me on twitter
 
jaark is offline jaark
2009-11-30 , 15:16
Posts: 316 | Thanked: 150 times | Joined on May 2006
#2
Isn't cron available on the device?
 
hopbeat's Avatar
hopbeat is offline hopbeat
2009-11-30 , 15:20
Posts: 516 | Thanked: 643 times | Joined on Oct 2009 @ Denmark/Poland
#3
Take a look at this
__________________
Hi! I'm a Maemo Greeter!
Witaj na talk.maemo.org!

Useful links for newcomers:
Użyteczne linki:
Nowi użyktownicy mówią cześć | New members say hello , Tu zaczynają nowi użytkownicy | New users start here, Podforum społeczności | Community subforum, Wiki dla początkujących | Beginners' wiki page, Maemo5 101, Często zadawane pytania | Frequently Asked Questions (FAQ), Google

Jeżeli mogę w czymś pomóc, pytaj!
If I can help with anything else, just ask!

Bored? Follow me
 

The Following User Says Thank You to hopbeat For This Useful Post:
Shanezlar's Avatar
Shanezlar is offline Shanezlar
2009-11-30 , 15:23
Posts: 38 | Thanked: 67 times | Joined on Oct 2009 @ Allemagne
#4
For your scenario, you might also want to take a look at Shepherd. But I think it's not quite ready yet.
 

The Following User Says Thank You to Shanezlar For This Useful Post:
jukey's Avatar
jukey is offline jukey
2009-11-30 , 15:24
Posts: 246 | Thanked: 204 times | Joined on Jun 2007 @ Potsdam (Germany)
#5
Originally Posted by hopbeat View Post
Take a look at this
I'm not really a developer but I'll see if I can get som information out of it.

Thank you!

@jaark: There is a folder /etc/cron.daily but I can't run the command: cron as user or as root.
__________________
-> Join the SailfishOS Meetup Berlin - every first Monday a month <-

Me on twitter
 
CrashandDie is offline CrashandDie
2009-12-01 , 01:15
Posts: 336 | Thanked: 610 times | Joined on Apr 2008 @ France
#6
Originally Posted by jukey View Post
Hi,

I made a little rsync backup script which syncs the content of a folder on the n900 to a server. This works without a password using public key authentication via ssh.

My question now is: How can I make this little script running once a day? Or maybe once a hour? Is there a recommended solution for this?

Thanks, jukey
Bit off-topic, but still.

You're using PKI auth without a password? Does the server check the validity of the certificate against a specific authority? If not, how will you be able to blacklist the certificate in case your device is stolen or lost?
 
ewan's Avatar
ewan is offline ewan
2009-12-01 , 01:42
Posts: 445 | Thanked: 572 times | Joined on Oct 2009 @ Oxford
#7
Originally Posted by CrashandDie View Post
Does the server check the validity of the certificate against a specific authority? If not, how will you be able to blacklist the certificate in case your device is stolen or lost?
That's not really how SSH keys work. It doesn't use CAs and automatically trust anything signed by them, a server will trust a list of particular individual keys. If the device holding the private key is compromised you simply remove that particular key from the authorized keys list.
 
CrashandDie is offline CrashandDie
2009-12-01 , 01:47
Posts: 336 | Thanked: 610 times | Joined on Apr 2008 @ France
#8
Originally Posted by ewan View Post
That's not really how SSH keys work. It doesn't use CAs and automatically trust anything signed by them, a server will trust a list of particular individual keys. If the device holding the private key is compromised you simply remove that particular key from the authorized keys list.
I do realise that, but then you can really only use the key for one specific usage, as having to blacklist the key in several different servers is a security risk (simply put: you might forget one). On the other hand, if you use a different key for each usage, you are at risk of exposing a specific service, because that specific key wasn't blacklisted.

Hence my question, are there any server-side systems that allow to verify an SSH key against an authority (not specifically a CA, rather a key repo?)
 
SubCore's Avatar
SubCore is offline SubCore
2009-12-01 , 13:50
Posts: 850 | Thanked: 626 times | Joined on Sep 2009 @ Vienna, Austria
#9
SSH supports Kerberos authentication, is this what you need?
http://docstore.mik.ua/orelly/networ...sh/ch11_04.htm
 
Reply

« Previous Thread | Next Thread »

 
Forum Jump


All times are GMT. The time now is 23:07.

Contact Us - Home - Archive - Top