[SOLVED] How to rsync with sudo needed to a destination in LAN

I need to do a full backup as demonstrated here but the destination is another machine on my LAN, I already did many rsync operations without password needed over LAN but I never needed sudo rsync before. Now this full backup operation clearly requires root so I added my source root key into the destination's ~/.ssh/authorized_keys, as this method worked well when I needed to rsync without password from my user1@src to user2@dest. Now what appears when I use sudo rsync....
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
c1:bc:80:c2:1e:40:61:f0:4f:b2:70:68:6b:c5:de:04.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /root/.ssh/known_hosts:1
ECDSA host key for 192.168.1.2 has changed and you have requested strict checking.
Host key verification failed.
rsync: connection unexpectedly closed (0 bytes received so far) [sender]
rsync error: unexplained error (code 255) at io.c(226) [sender=3.1.1]
What should I do?
Last edited by miktore (2014-08-16 15:51:43)

miktore wrote:What should I do?
Well, I would assume that since you have a fingerprint listed (c1:bc:80:c2:1e:40:61:f0:4f:b2:70:68:6b:c5:de:04), you should check your key.

Similar Messages

[solved] How to install with old BIOS + 60GB SSD + 3TB HDD + fulldisk?

I'm new to archlinux and this will be my first install. I use Debian and Kubuntu, but I'm no expert. I've read many archlinux docs (and they *are good*, congatulations), but I couldn't find specifics to what I want to do.
My system is a desktop box (6GB RAM) that I use for video editing, compiling, browsing and many other unrelated things. What I plan to do is to organize things in the following way:
SSD (60GB): first disk (for a fast boot up time) with only one partition, ext4
/ and everything, except for /home and /var
HDD (3TB): second disk with only one partition, ext4
Mounted as /something
Symlinks (or bind mounts) to /var and /home
My reason to use only one partition for / and one for /home and /var is to not have to worry about balancing partition sizes among system files, user files, web server files, etc.
Could you please comment on the following:
1) It seems that I can't use a a regular partition larger than 2.2TB, so I will have to use GPT. Do I need (or is it recommended) to partition both disks with GPT? Does it work with non EFI BIOSes? Can I use a regular GRUB2 install?
2) What is the recommended way of installing arch using this set up? Do I install everything under the SSD and later move /var and /home to the HDD?
3) What is the best way to have the complete final root file system: using symlinks, bind mounts, or any other technique?
4) I deal with huge files and sometimes huge pictures and huge memory needs (Blender 3D, GIMP and Inkscape with huge files, radiosity rendering, etc). I've read that a swap partition is not needed nowadays. So I was thinking of creating just a swap file inside the HDD partition. Would it degrade too much the HDD performance or fragmentation? Could it be used for hibernation?
5) Can I use the regular arch install procedure to accomplish all that or do i have to prepare anything before/after?
6) Any other tips?
Thanks
Last edited by plenus (2012-04-21 02:49:47)

plenus wrote:1) It seems that I can't use a a regular partition larger than 2.2TB, so I will have to use GPT. Do I need (or is it recommended) to partition both disks with GPT? Does it work with non EFI BIOSes? Can I use a regular GRUB2 install?
According to wikipedia, linux has no problem booting from GPT on BIOS, and accordind to archwiki, GRUB2 provides the ability to boot from GPT in both BIOS and UEFI based systems.. I dont think that formating both disk with GPT is necessary, but I am not sure.
plenus wrote:2) What is the recommended way of installing arch using this set up? Do I install everything under the SSD and later move /var and /home to the HDD?
I would install with this approach.
plenus wrote:3) What is the best way to have the complete final root file system: using symlinks, bind mounts, or any other technique?
In this setup (/var and /home on one big partition), I would use symlinks.
plenus wrote:4) I deal with huge files and sometimes huge pictures and huge memory needs (Blender 3D, GIMP and Inkscape with huge files, radiosity rendering, etc). I've read that a swap partition is not needed nowadays. So I was thinking of creating just a swap file inside the HDD partition. Would it degrade too much the HDD performance or fragmentation? Could it be used for hibernation?
This says Google about swap file/partition performance. You could use hibernation. I allways go with swap partition, but nowadays it is just proforma, because I have enough memory to never use swap.
plenus wrote:5) Can I use the regular arch install procedure to accomplish all that or do i have to prepare anything before/after?
I think (but I'm not sure, though) parted is on installation media.

[SOLVED] How to get sudo and kdesu to honor my user password?

Hi folks,
Well, I must be missing something. I think I've tried everything listed here https://bbs.archlinux.org/viewtopic.php?id=143487 and in the referenced links, but I still have the problem of my system rejecting my password for some uses of sudo and kdesu but not others. I've included my /etc/sudoers file below.
My problem may be due to screwing around with users: I started out using bruce (1000), then switched to bbraley (1001), then deleted bruce in kusers, then changed bbraley to 1000. When that created more problems without solving the original one, I switched back to 1001. I've played with adding and removing my user from groups, including creating a sudo group, making sure I am a member of wheel group, etc.
What seemed to be everyone's magic fix,
pacman -S pambase
didn't work when I tried it successfully with my bbraley password, then later, when that began failing, using the root password. pambase reinstalls, but there is no resulting change in the behavior of sudo.
Side question: Most of my experience is with kubuntu in which I never created a root user and never had any trouble having my user password work with sudo or kdesu. Is there a reason Archwiki beginners guide suggests assigning a separate root account and password?
Can anyone help?
Here's the output of
groups
root adm disk wheel log locate network video audio optical storage scanner power users nm-openconnect systemd-network bbraley sudo sddm
Here's the output of
cat /etc/group |grep `id -un`
root:x:0:bbraley
adm:x:4:root,daemon,bbraley
disk:x:6:root,bbraley
wheel:x:10:root,bbraley
log:x:19:root,bbraley
locate:x:21:bbraley
network:x:90:bbraley
video:x:91:bbraley
audio:x:92:bbraley
optical:x:93:bbraley
storage:x:95:bbraley
scanner:x:96:bbraley
power:x:98:bbraley
users:x:100:bbraley
systemd-network:x:193:bbraley
nm-openconnect:x:104:bbraley
sddm:x:619:bbraley
bbraley:x:500:
sudo:*:501:bbraley
Here's what
ls -l /etc/sudoer
yields:
-r--r----- 1 root root 2948 Mar 22 07:25 /etc/sudoers
And here's my sudoers file:
## Defaults specification
## You may wish to keep some of the following environment variables
## when running commands via sudo.
## Locale settings
# Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
## Run X applications through sudo; HOME is used to find the
## .Xauthority file. Note that other programs use HOME to find
## configuration files and this may lead to privilege escalation!
# Defaults env_keep += "HOME"
## X11 resource path settings
# Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
## Desktop path settings
# Defaults env_keep += "QTDIR KDEDIR"
## Allow sudo-run commands to inherit the callers' ConsoleKit session
# Defaults env_keep += "XDG_SESSION_COOKIE"
## Uncomment to enable special input methods. Care should be taken as
## this may allow users to subvert the command being run via sudo.
# Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
## Uncomment to enable logging of a command's output, except for
## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
# Defaults log_output
# Defaults!/usr/bin/sudoreplay !log_output
# Defaults!/usr/local/bin/sudoreplay !log_output
# Defaults!REBOOT !log_output
## Runas alias specification
## User privilege specification
root ALL=(ALL) ALL
## Uncomment to allow members of group wheel to execute any command
##%wheel ALL=(ALL) ALL
## Same thing without a password
%wheel ALL=(ALL) NOPASSWD: ALL
## Uncomment to allow members of group sudo to execute any command
%sudo ALL=(ALL) ALL
bbraley ALL=(ALL) ALL
## Uncomment to allow any user to run sudo if they know the password
## of the user they are running the command as (root by default).
Defaults targetpw # Ask for the password of the target user
ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw'
## Read drop-in files from /etc/sudoers.d
## (the '#' here does not indicate a comment)
#includedir /etc/sudoers.d
Last edited by Bruce1956 (2015-03-28 05:16:03)

Trilby wrote:I've never used the targetpw setting, but I wouldn't be surprised if that was the problem. With that setting, if you want to run something as root (the default use of sudo) then you'd need the root password, not the user password. Comment out that setting, and the next line.
I had never used it, either, but I misread some reference and thought it might help. Since you say it causes the behaviour I'm trying to eliminate, I will get rid of it, as suggested. However, the behavior preceded my addition of this line in the file, so I don't think this will correct the problem. Edit: Removing it kept the root password from being universally required (I can now edit /etc/sudoers using my user password) and returned it to requiring it sometimes (I still need the root password to use kdesu).
As for some other distro not having a root account, that is simply impossible. There was a root account. If you didn't have the password for it, then that installation was severely crippled.
Sorry, you're right. I should have said that kubuntu does not expect users to assign a password to the root account and instead expects primary users to access that account's privileges via su, sudo, or kdesu only.
https://help.ubuntu.com/community/RootSudo
By default, the root account password is locked in Ubuntu. This means that you cannot login as root directly or use the su command to become the root user. However, since the root account physically exists it is still possible to run programs with root-level privileges. This is where sudo comes in - it allows authorized users (normally "Administrative" users; for further information please refer to AddUsersHowto) to run certain programs as root without having to know the root password.
Thanks for responding to my request for help. Any other ideas?
Edit: Here's what I keep getting that only accepts the root password, not my user password
http://s15.postimg.org/4z0o86oln/Runasroot_KDEsu.png
-- mod edit: read the Forum Etiquette and only post thumbnails http://wiki.archlinux.org/index.php/For … s_and_Code [jwr] --
Last edited by Bruce1956 (2015-03-23 04:41:06)

[Solved] Running Thunar with sudo/su Causes GVFS Errors?

Hi, I switched from Xubuntu to Arch a few days ago, and am loving it so far, but I'm running into an issue when running Thunar with sudo or su. As a result, trash as root doesn't work. I'm not sure if this is related to GVFS, but drives also do not appear when running Thunar as root. Not too major, since it's just a slight inconvenience, and I only need root privileges with Thunar occasionally. Though it'd be awesome if someone knows how to fix this, since my searching has come up with nothing for a problem like this. When logging in as root itself, the problem doesn't occur, it only happens when running it as my regular account through the sudo or su command.
Here's the terminal output with the errors:
[dark@YiffingInHell ~]$ su
Password:
[root@YiffingInHell dark]# thunar
(thunar:29855): GVFS-RemoteVolumeMonitor-WARNING **: cannot connect to the session bus: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
(thunar:29855): GVFS-RemoteVolumeMonitor-WARNING **: cannot connect to the session bus: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
(thunar:29855): GVFS-RemoteVolumeMonitor-WARNING **: cannot connect to the session bus: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
Last edited by DarkSniper (2011-04-06 02:43:46)

@janek: It's not good practice to necrobump threads that were posted nearly a year ago.
I have long since devised a better solution than my initial quick fix. I have created a small script that wraps sudo and fetches root's dbus variables, then sticks them before the command I want to run, so that they're run on root's session instead of mine. It's not the most elegant way, but it remains secure and has pretty much no overhead. I also prefer sudo over pkexec, having an agent popup when I enter the command is undesirable, since it's simpler and easier to just enter the password on the command line.
For searcher's sake, this is my little wrapper if anyone's interested in using it.
A small wrapper to go in your path, to be aliased to sudo in your bashrc
!#/bin/bash
#Fetch Root's Dbus Variables and Run The Command
/usr/bin/sudo $(/usr/bin/sudo sed '6q;d' /root/.dbus/session-bus/af16543424391ebcfb5f0c1000000ce2-0) \
$(/usr/bin/sudo sed '7q;d' /root/.dbus/session-bus/af16543424391ebcfb5f0c1000000ce2-0) \
$(/usr/bin/sudo sed '8q;d' /root/.dbus/session-bus/af16543424391ebcfb5f0c1000000ce2-0) "$@"
Then add this to a script that is run as root on boot. [This starts a session for root that allows the wrapper to connect]
Examples include /etc/rc.local; /etc/lxdm/LoginReady; or a systemd unit
dbus-launch --autolaunch af16543424391ebcfb5f0c1000000ce2
NOTE: The "af16543424391ebcfb5f0c1000000ce2" part is different for every system, you can find out what it is for your system by checking the name of the file in /root/.dbus/session-bus.

I cant remember my password to logon to my mac, how can i change it with out needing the old one?

i cant remember my password to logon to my mac, how can i change it with out needing the old one?

http://support.apple.com/kb/HT1274

How many problems do you need to have with a mac book pro to get it replaced i have had 6 problems and they say they have fixed everything and somthing new happends

how many problems do you need to have with a mac book pro to get it replaced i have had 6 problems and they say they have fixed everything and somthing new happends
I have had thehad the:
ram replaced
Battery
Audio
Trackpad
os operating system
fans
And they still won't replace the laptop for me worst buy ever but i have had a imac for 2 months and nothing at all wrong .

You could try calling Apple and ask for Customer Relations.
From Readers Digest-February, 2005
How to Complain
You call customer service to complain about a product, and you hang up angrier than when you started. That’s customer rage, a feeling experienced by millions of people with a major complaint, says Scott Broetzmann, president an American firm that tells companies how to offer the best customer service. His secrets to getting good service:
Have a goal
If you want your product repaired, say so. Want an apology? Speak up.
Keep it short
Focus on one problem, and be succinct.
Stick with it
You have to invest the time it takes. Don’t get what you want? Ask for a supervisor.
Skip ultimatums
Don’t threaten not to do business with them again. Why should they help you if you won’t buy from them in the future?
Plead your case
Many companies have information such as how much money you’ve spent with them and how often you complain. If you’re a good customer, they may be more willing to help.
Be nice
You’re unlikely to get what you want if you’re rude.
Good luck.

I need to know how to connect with my Black Berry

Hi good morning, A few days ago I bought a 3rd generation ipad with wifi and I need to know how to connect with my Black Berry, as if this were the modem. Regards and thanks

The BB has to be set up as a wifi hotspot. After you do that just connect the iPad to the wifi network created on the BB the same way you connect to any other wifi network.

How can i find a grant to help a child with special needs non verbel get an ipad for free, how can i find a grant to help a child with special needs non verbel get an ipad for free

Hello I have a question and hope maybe someone can help I am look for a grant or some type of information on how I can get my non verbal Autistic son a IPad . I heard so much on how it help with school and other behavioral issue. We a very low income family and to purchase a IPad is way out of our budget since we don't have any extra funds for it ..I do good to get him what he needs and take him to doctors appointments. So please listen to a single mom pleas I just want him to thrive and be all he can be. Thanks from the bottom of my heart

I agree with the people who posted above.
I have questions for you --
How old is your son?
Does he attend a school program?
What country, state, and city do you live in? (Your name above indicates you might be in NY.(?)
Has your child been diagnosed with autism so that he deals with a specialist? The doctor/medical facility you are connected with should be able to help you.
I did a quick google search and many groups came up. You can also get connected with many groups, such as your board of education, autismspeaks.org, hollyrod.org, nationalautismassociation.org, ...the list goes on.
If you google 'autism support groups' and 'autism support groups in (your city)' you might get to some groups that will steer you in the right direction.
Hope this helps.

I am using 4K Footages for editing in Premiere pro CC 2014, but its getting crash in between at every 15 to 20 mins. Kindly suggest how can it be solved, does any plugins or settings needed to edit 4K footages? Also would like to mention that footages fra

I am using 4K Footages for editing in Premiere pro CC 2014, but its getting crash in between at every 15 to 20 mins. Kindly suggest how can it be solved, does any plugins or settings needed to edit 4K footages? Also would like to mention that footages frame rates are 29.97 and i have set timeline to 25 FPS is requirement by client. kindly revert. Thanks

Thanks Richarad ..It has solved the problem but still crashes some times .As the programme has the break (bumper)after every five minutes ,i hope it will not compress bumper time too after export.

[SOLVED] Don't have permission to turn off bluetooth, even with sudo!

I never use bluetooth on my laptop, but every time I boot arch the radio and light are both on. I tried unloading the bluetooth module, using bluez and other tools to shut off bluetooth, etc., but that radio just stays on. After searching the web for a while, I finally found the solution: cut off power to the device. I can do that with this command:
echo "0" > /sys/devices/platform/sony-laptop/bluetoothpower
And turn it back on by changing "0" to "255". The only problem is, I can't run this as a normal user, and I can't even run it with sudo! Here is the output:
$ echo "0" > /sys/devices/platform/sony-laptop/bluetoothpower
zsh: permission denied: /sys/devices/platform/sony-laptop/bluetoothpower
$ sudo echo "0" > /sys/devices/platform/sony-laptop/bluetoothpower
zsh: permission denied: /sys/devices/platform/sony-laptop/bluetoothpower
(I'm using zsh but this also happens with bash)
However, I can su to root and run this command successfully
$ su
Password:
# echo "0" > /sys/devices/platform/sony-laptop/bluetoothpower
And off goes the light. I would like to somehow turn off bluetooth at boot, but I don't know how to have Arch run a command as the root user at boot after loading the modules (to ensure the bluetooth radio is not started up again). It seems that bluetoothpower is created at each boot, because I tried changing the permissions to read & write for all, then adding the command to my .xinitrc. This worked, but only during that session. After rebooting I had the same problem.
Help?
Last edited by Allamgir (2009-07-29 13:44:40)

Yes! Yet again the wiki has saved me! I followed this part: http://wiki.archlinux.org/index.php/Pm- … _own_hooks
I just set it to turn off bluetooth upon resume, and it works! yay!
Thanks everyone!

Can't watch video on CNN with IPAD after installation IOS 6 any tip to solve how to solve this issue.

Can't watch video on CNN with IPAD after installation IOS 6 any tip to solve how to solve this issue.
Thanks for your support in advance

I have a few TV type Apps that are doing the same think since the IOS6 update . I figure the problem is at there end and there will be an update from them soon.

How to solve the problem related with inputing of the text into Wordpress from Firefox 9 and 9.0.1. The problem is that after inputing the formatting gets lost. Taking in account high popularity of Wordpress I suppose the problem is quite serious.

How to solve the problem related with inputing of the text into Wordpress from Firefox 9 and 9.0.1.
The problem is that after inputing the formatting gets lost.
Taking in account high popularity of Wordpress I suppose the problem is quite serious.

Perform the suggestions mentioned in the following articles:
* [https://support.mozilla.com/en-US/kb/Template:clearCookiesCache/ Clear Cookies & Cache]
* [[Troubleshooting extensions and themes]]
* Clipboard not working -> [http://kb.mozillazine.org/Clipboard_not_working]
* Rich Text Editing -> [http://kb.mozillazine.org/Rich_text_editing]
* Update All your Firefox Plugins -> [https://www.mozilla.org/en-US/plugincheck/]
Check and tell if its working.
Might not be related to your problem but some of your Plugins are out-dated
* Update All your Firefox Plugins -> [https://www.mozilla.org/en-US/plugincheck/]
* '''When Downloading Plugins Update setup files, Remove Checkmark from Downloading other Optional Softwares with your Plugins (e.g. Toolbars, McAfee, Google Chrome, etc.)'''

CSS with SSL module - how many certs do we need

Hello,
currently moving from server-based certs to CSS/SSL based.
We have two sites, two CSS/SSL on each in ASR mode.
There are two real servers behind each SSL rule for load balancing.
The question becomes how many certificates do we need
for such design ?
For sure we need one per site, then on each site we have Active/Standby CSS's.
Do we need separate certificate for each CSS?
I dont think so, cause only one is active at the time.
I tested it with same certificate on both CSS's on one site, no problem.
The question is will it be ok for production ?
So total number would be 2 cert for such design (one per VIP) if we have one SSL rule per site, and 4 if we have 2 SSL rule per site - is it ok ?
Thank you,
Alex

the certificate is linked to a host name ie: www.mycompany.com.
So, if you have 4 css, all handling traffic for www.mycompany.com, then they can all share the same certificate.
Even if you have the 4 CSS split over 2 sites, using different vip, as long as they handle the same hostname, then they can share the certificate.
Actually, the CSS itself does not care about hostname/certificate mapping.
The CSS will use whatever certificate you configure it to use.
However, browsers make a check url <-> certificate and if there is a mismatch, they pop up an error message.
Regards,
Gilles.

How to solve Windows 7 issues with Acobat X?

Hello
I hope someone can advise how to deal with the following errors:
i. In Windows 7 Explorer, I somtimes have context menu options for 'Convert to Adobe PDF' and 'Convert to Adobe PDF and email'. Both these options give ask me to select a target file name and then give message concerning missing PDFMaker. Should I have PDFMaker or not by virtue of having Acrobat X? If not can I remove these menu options?
ii. In Windows 7 Explorer, I also have context menu option 'Combine supported files in Acrobat'. But again, with Office 2010 this fails because 'Windows cannot find Acrobat.exe'. Why is this if Acrobat X is installed?
iii. Also, in Office 2010 itself, there is an Adobe tag on the ribbon which fails. Presumably it is related to the above. Should this work or can I disable it?
I'm using Office 2010 Pro on Windows 7 Pro. I have Acrobat 10 installed and also CS4.
Thanks
Martin O'Shea.

I tried repairing the Acrobat X installation but to no avail so any other advice is welcome.
I have disabled the add in in Office 2010 though.

[SOLVED] Cannot open x apps with sudo

Hi all,
I just did a fresh install of kde in Arch, and I cannot open any x server apps, like kwrite, using "sudo kwrite". I tried xhost +localhost and my user name, but that didn't work. Then I tried tweaking the $DISPLAY... I couldn't get anything to happen either. Can anyone give me a few helpful pointers? Thanks!
Last edited by sunnieside-up (2011-09-20 05:56:56)

try with "sudo -E gedit"
from sudo manual:
-E The -E (preserve environment) option indicates to the
security policy that the user wishes to preserve their
existing environment variables. The security policy may
return an error if the -E option is specified and the user
does not have permission to preserve the environment.

[SOLVED] How to rsync with sudo needed to a destination in LAN

Similar Messages

Maybe you are looking for