|
To accomplish this task, we will have to set up a trust between the two servers (192.168.1.1 & 192.168.1.2 which we will refer to as remote and tapeserv) so a remote login without a password can be used to run the backup job. This is done through the use of SSH keys to increase the trust between the two servers.
So for example we would setup an SSH login with the user root on machine 192.168.1.1 by generating a pair or public keys using the command:
ssh-keygen -t rsa
You will then be asked a series of options which you can press enter to accept the defaults. Once this key is generated, on to the next step.
Login to tapeserv using SSH as root and create the .ssh directory under /home/root by using the command:
ssh root@192.168.1.2 mkdir -p .ssh
At this point, you'll see the following:
The authenticity of host '192.168.1.2 (192.168.1.2)' can't be established.
RSA key fingerprint is d6:53:94:43:b3:cf:d7:e2:b0:0d:50:7b:17:32:29:2a.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.2' (RSA) to the list of known hosts.
root@192.168.1.2's password [Enter Your Password Here]
Enter the root password for tapeserv at the prompt.
Next upload the Generated Public Keys to 192.168.1.2 (tapeserv).
Use SSH from 192.168.1.1 and upload the newly generated public key (id_root.pub) with the command:
cat .ssh/id_root.pub | ssh root@192.168.1.2 'cat >> .ssh/authorized_keys
Again, you'll be prompted for the root password from 192.168.1.2. Enter it to continue.
At this point, you will need to set permissions on tapeserv. The .ssh directory and authorized_keys file using the command:
ssh root@192.168.1.2 "chmod 700 .ssh; chmod 640 .ssh/authorized_keys"
Again you will be asked to enter the root password for tapeserv.
|
