DSM-G600, DNS-3xx and NSA-220 Hack Forum

Unfortunately no one can be told what fun_plug is - you have to see it for yourself.

You are not logged in.

Announcement

#1 2008-02-16 02:28:35

ahors
Member
Registered: 2007-10-04
Posts: 22

rsync/ssh with DNS as client - with public key authorization

Hi - found few good (-; guides how to do it - including the dropbear readme

however my attempt at nightly automated backup still does not work
(as FORDEM rightly remained me:  http://dns323.kood.org/forum/t1667-White-drive%3F.html)

I want to do rsync to do backup from my DNS to a linux serwer

I have generated standard dropbear keys (using fun_plug 0.4 scripts)
than I used the following command to extract both (just to be sure) rsa and dsa public keys:

dropbearkey -y -f /mnt/HD_a2/fun_plug.d/etc/dropbear/dropbear_dsa_host_key >> iddDROP.pub
dropbearkey -y -f /mnt/HD_a2/fun_plug.d/etc/dropbear/dropbear_rsa_host_key >> idrDROP.pub

than I copied both pub files to my linux server (cut out extra lines)
and added the crucial lines:
ssh-rsa AAAAB3NzaC1yc (......) root@NAS
ssh-dss AAAAB3NzaC1kc3MAAA(....)R6fW3E53TG+nN4Tuc0E0= root@NAS
to my non-root user account (on linux server) file:
/home/ahors/.ssh/authorized_keys2

according to most quick guides like:
http://blogs.sun.com/jkini/entry/how_to_scp_scp_and
that should be it and command
ssh ahors@mylinuxserver
should now NOT ask for password

.... well it still is asking for one

I checked the permissions:
-bash-3.1$ ls -l authorized_keys2
-rw------- 1 ahors ahors 1485 Feb 16 00:54 authorized_keys2


and now, I am all out of ideas...

I would appreciate any suggestions


I am even happy to use plain text password
(but --password-file option for rsync seems to apply only to non-ssh connections....)

thanks

Offline

 

#2 2008-02-16 19:01:23

blbrown
Member
Registered: 2007-11-02
Posts: 88
Website

Re: rsync/ssh with DNS as client - with public key authorization

What I found with dropbear was that it didn't seem to work if I generated the key with dropbear and then converted it to openssh.  Instead, I used openssh (on some other machine than the DNS-323) to generate the key, then converted it to dropbear format.  Here's an instruction file that I created that covers some of the steps:
http://backupnetclone.sourceforge.net/B … bution.txt
You'll want to look at the sections [create SSH public/private key pair on a Windows PC since dropbear (the SSH server on the DNS-323) isn't very good at that] and [convert the SSH public/private key pair into something dropbear can use]

Offline

 

Board footer

Powered by PunBB
© Copyright 2002–2010 PunBB