Secure file distribution?

[Michael Gretton]

Is there a way other than NFS (and obviously Rdist) and ftp to send files to other machines. I really like rdist but my security people are always hammering me (although they claim we have a great firewall). Any suggestions. I love the ease of rdist....

Mike

[Ravi_8]

Hi michael
u can use rcp

[Vincenzo Restuccia]

Try http://hpux.cs.utah.edu/hppd/hpux/Networking/WWW/curl-7.5.1/

[Vikas Khator]

Hi ,

You can use scp that comes with Openssh .

[Michael Gretton]

the scp option sounds exciting but requires password input...anyway around it?

[Ralf Hildebrandt]

The best solution is to use scp (from the OpenSSH package) or rsync (which offers incremental, compressed filetransfer over rsh/ssh).

scp doesn't require a password or passphrase if you use RSA authentication.

[Shannon Petry]

Another thing that may impress the Security folks is using rcp with kerberos authentication. If you have a solaris box handy, it's pretty quick to convert to a realm authority, and then distribute off of that auth. Of course it does not encrypt or make anything more secure except for the handshaking and authentication process.

Then again, to Windoze folks they think of Kerberos as some kind of MS magic which makes the world safe!

Regards,
Shannon

[Michael Langas]

This thread is old. I'm wondering if anyone knows of any tools that have come out since these original posts. From what I've found HPs version of rdist still does not support ssh :-(

I would prefer to stick with HP delivered solutions so I don't have to worry packaging etc...

Any Ideas?

[Mel Burslan]

we are currently using

HP-UX Secure Shell: sshd.c,v A.03.61.002 2003/09/18

and with the right set of known hosts and RSA keys, we are bypassing all password checks while using scp to copy files beck and forth among the servers.

[Michael Langas]

I have ssh in place and can use scp just fine. I guess there still isn't a way to easily do a rdist sort of file compare yet.

[Patrick Wallek]

I am using the latest version of rsync and it does support SSH. It is not an HP port, but I had absolutely no trouble compiling the latest rsync and getting it working.

It works very well with SSH.

http://samba.anu.edu.au/rsync/

[Michael Langas]

I was going to use the one from the HP-UX porting and archive centre but it is well out of date. The one they have posted has serveral security warnings posted against it.

I'll try the compile. I'm sure that won't be a problem. I just hope I can remember how to package the software into a depot. It has been a while. ;-)

Thanks for the advice.