I created a php script which essentially runs the following commands:
rsync all files from local server to remote server
dump two databases into separate sql files
secure copy those files to the server
input those sqls into the database
The problem I have is that I need to type in the same password about 6 times for this script because of the ssh calls and rsync. Is there a way that I can type it in once and it stores it for the rest of the calls? either through php or otherwise...
Linux passwords using rsync and ssh
Moderator: General Moderators
You're right, i'm not going to explain anything, i'm going to ask:Todd_Z wrote:he doesn't want to expose that vulnerability... don't explain how its a very secure method
- Why is it considered a vulnerability?
- Why is it considered more vulnerable than sending passwords over the wire?
- Why is it considered more vulnerable since you can allow certain keys from a set of given hosts.. where there is no such diversification for passwords?
Btw, since you're friend is anal about security, i hope he's got yourself some encrypted memory, since storing passwords in memory can be considered as unsafe too
Your demonstrating your deep understanding of these security mechanisms, which is impressive, but it doesn't really answer the question. I would think there would a way to have the script ask for the username and password once, then store it in variables for the rest of the commands that require them. That should be pretty easy right?timvw wrote:What can be done with a private key file if you don't have the passphrase for that key?
What can be done with a scriptfile if it contains the username and/or password?