User Tools

Site Tools


backup:amanda:client_installation_debian6

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Last revisionBoth sides next revision
backup:amanda:client_installation_debian6 [2013/06/19 09:29] – [Prepare amrecover] aorthbackup:amanda:client_installation_debian6 [2013/07/10 07:16] – [SSH keys for backup] aorth
Line 26: Line 26:
 The Amanda server will connect to the client as the user ''amandabackup'' using SSH.  To make this process as seamless as possible, we need to configure password-less authentication using SSH keys.  See the [[http://wiki.zmanda.com/index.php/How_To:Set_up_transport_encryption_with_SSH|Amanda wiki on SSH auth]] for more details. The Amanda server will connect to the client as the user ''amandabackup'' using SSH.  To make this process as seamless as possible, we need to configure password-less authentication using SSH keys.  See the [[http://wiki.zmanda.com/index.php/How_To:Set_up_transport_encryption_with_SSH|Amanda wiki on SSH auth]] for more details.
  
-In a nutshell, you need to put the server's amdump SSH public key into the client's ''authorized_keys'' file.  Grab it from HPC at //~amandabackup/.ssh/id_rsa_amdump.pub// and then paste it into the client's //~amandabackup/.ssh/authorized_keys// file:+In a nutshell, you need to put the server's amdump SSH public key into the client's ''authorized_keys'' file.  Grab it from the backup server at //~amandabackup/.ssh/id_rsa_amdump.pub// and then paste it into the client's //~amandabackup/.ssh/authorized_keys// file:
  
 <code>sudo su - amandabackup <code>sudo su - amandabackup
Line 34: Line 34:
  
 For more security, prepend the key entry in //~amandabackup/.ssh/authorized_keys// with: For more security, prepend the key entry in //~amandabackup/.ssh/authorized_keys// with:
-<code>from="192.168.5.3",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,command="/usr/libexec/amanda/amandad -auth=ssh amdump" </code>+<code>from="192.168.5.25",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,command="/usr/libexec/amanda/amandad -auth=ssh amdump" </code>
  
-This limits the use of this key to HPC's IP, as well as the amdump command.+This limits the use of this key to the backup server's IP, as well as the amdump command.
  
 ==== amanda-client.conf ==== ==== amanda-client.conf ====
backup/amanda/client_installation_debian6.txt · Last modified: 2013/07/10 09:19 by aorth