|
|
| Line 1: |
Line 1: |
| − | (View in Edit mode)<--- UPDATE
| |
| − | # A sample rsyncd.conf file usable with BackupPC. This file does not
| |
| − | # completely document all of the settings for rsyncd.conf - see the
| |
| − | # man page that comes with the rsync ditribution for a comprehensive
| |
| − | # overview off all available settings.
| |
| | # | | # |
| − | | + | # The format of this file is user:password. You can have as many entries |
| | + | # as you wish. These accounts are sepecifc to the rsync daemon and share |
| | + | # no relation to Windows local/domain accounts, nor Cywin entries in the |
| | + | # passwd file. |
| | # | | # |
| − | # Allow rsync to change the root directory to the module location | + | # SECURITY WARNING: Don't use these defaults of UUU for the user name |
| − | # upon connection of a client. This is disabled for Win32 as we do | + | # and PPP for the password! Change them!! |
| − | # not provide a full Cygwin environment.
| + | |
| | # | | # |
| − | # Warning: with a setting of "false", absolute symlinks will be | + | # Also: make sure this file ends in a newline. Otherwise the last |
| − | # stripped of their leading "/". See "use chroot" in the rsyncd.conf
| + | # username/password pair will be ignored. |
| − | # man page. This is relevant for machines that support symlinks | + | |
| − | # (WinXX machines do not).
| + | |
| | # | | # |
| − | use chroot = false
| + | GLM-dhosh:letmeinnow |
| − | | + | |
| − | #
| + | |
| − | # Limit the simultaneous rsync connections to 4. Changing
| + | |
| − | # this to '1' should be sufficient for BackupPC.
| + | |
| − | #
| + | |
| − | max connections = 1
| + | |
| − | | + | |
| − | #
| + | |
| − | # Uncomment this line and change the path if
| + | |
| − | # you would like to log rsync messages.
| + | |
| − | #
| + | |
| − | log file = c:/rsyncd/rsyncd.log
| + | |
| − | | + | |
| − | #
| + | |
| − | # The location of the rsync process ID file
| + | |
| − | #
| + | |
| − | pid file = c:/rsyncd/rsyncd.pid
| + | |
| − | | + | |
| − | #
| + | |
| − | # The locations of the rsync lock file
| + | |
| − | #
| + | |
| − | lock file = c:/rsyncd/rsyncd.lock
| + | |
| − | | + | |
| − | #
| + | |
| − | # This is where we define the rsyncd modules. Add as many directories or
| + | |
| − | # files are you wish. To backup this module using BackupPC, set
| + | |
| − | # $Conf{RsyncShareName} to "docs" in this client's config.pl.
| + | |
| − | #
| + | |
| − | [RouterConfigs] <--- UPDATE SHARE NAME
| + | |
| − | #
| + | |
| − | # Exact DOS style path to the file or directory to be rsync accessible
| + | |
| − | #
| + | |
| − | path = c:/RouterConfigs
| + | |
| − | | + | |
| − | #
| + | |
| − | # A short description of the module. This is what is printed when
| + | |
| − | # using rsync to "browse" the server for what modules are available.
| + | |
| − | #
| + | |
| − | comment = Router Configs directory
| + | |
| − | | + | |
| − | #
| + | |
| − | # Does rsyncd ensure that the secrets file is read only by the
| + | |
| − | # user running the process? If this is false then no check is
| + | |
| − | # performed (useful for Win32 systems). However, you can change
| + | |
| − | # this to "true" and make the secrets file READ ONLY by the user
| + | |
| − | # running the rysncd process. If running from the command line
| + | |
| − | # or upon login, this should be the user who is logged in. If
| + | |
| − | # running as a Win32 service, then the SYSTEM account should be
| + | |
| − | # the only account that can read the secrets file.
| + | |
| − | #
| + | |
| − | strict modes = false
| + | |
| − | | + | |
| − | #
| + | |
| − | # What user(s) have access to this module. The user(s) must be
| + | |
| − | # defined in the secrets file. A comma or space separated list.
| + | |
| − | #
| + | |
| − | # Example:
| + | |
| − | # auth users = backup, root, larry
| + | |
| − | # auth users = backup root larry
| + | |
| − | #
| + | |
| − | auth users = GLM-dhosh <--- UPDATE USERNAME
| + | |
| − | | + | |
| − | #
| + | |
| − | # The location of the secrets file. Permissions must be READ ONLY
| + | |
| − | # for the account running the rsyncd process unless
| + | |
| − | # strict modes = false is set above.
| + | |
| − | #
| + | |
| − | secrets file = c:/rsyncd/rsyncd.secrets <--- UPDATE PASSWORD
| + | |
| − | | + | |
| − | #
| + | |
| − | # What hosts are allowed access to this module? By default, all
| + | |
| − | # hosts are allowed access. If you wish to further strengthen
| + | |
| − | # the security of your setup, uncomment and replace with the IP
| + | |
| − | # address your BackupPC server. This is a flexible setting and
| + | |
| − | # can be one of:
| + | |
| − | #
| + | |
| − | # a dotted decimal IP address: 172.16.0.17
| + | |
| − | # a address/mask in the form a.b.c.d/n: 172.16.0.0/24
| + | |
| − | # an address/mask in the form ipaddr/maskaddr: 172.16.0.0/255.255.255.0
| + | |
| − | # a hostname: backupserver
| + | |
| − | # a hostname pattern using wildcards: backup*
| + | |
| − | #
| + | |
| − | hosts allow = 192.168.99.214 # cvs2 <--- Only on our LAN
| + | |
| − | hosts allow = 66.129.32.58 # bs0
| + | |
| − | | + | |
| − | #
| + | |
| − | # Only allow clients to READ from the server. This prevents uploads
| + | |
| − | # from remote machines. If you wish to allow uploads, change this too
| + | |
| − | # "true".
| + | |
| − | #
| + | |
| − | # WARNING: Setting this to true means that BackupPC restores via
| + | |
| − | # rsyncd will fail. You most likely want to set this to "false".
| + | |
| − | #
| + | |
| − | read only = false
| + | |
| − | | + | |
| − | #
| + | |
| − | # Don't list this module if a client asks (provides another modest
| + | |
| − | # layer of security since an attacker also has to guess the module
| + | |
| − | # name - you could make it obscure if you want - but remember the
| + | |
| − | # module name is sent in plain text so it can be sniffed).
| + | |
| − | #
| + | |
| − | list = false
| + | |
| − | | + | |
| − | #
| + | |
| − | # Example of how to share the entire C: drive. For BackupPC "cDrive"
| + | |
| − | # is the share name (ie: the value of $Conf{RsyncShareName}).
| + | |
| − | #
| + | |
| − | [downloads] <---- UPDATE SHARE NAME
| + | |
| − | path = c:/RouterConfigs
| + | |
| − | comment = Router Configuration Directory backup
| + | |
| − | auth users = GLM-dhosh
| + | |
| − | secrets file = c:/rsyncd/rsyncd.secrets
| + | |
| − | hosts allow = 192.168.99.214 # CVS2 <------ only on our LAN
| + | |
| − | hosts allow = 66.129.32.58 # BS0
| + | |
| − | strict modes = false
| + | |
| − | read only = true
| + | |
| − | list = false
| + | |
| − | </nowiki>
| + | |
