7 Apr
2001
7 Apr
'01
3 p.m.
On Fri, 6 Apr 2001, Francett, Robert D (SAIC) wrote:
The form I use is: $ ndmpcopy filer1:/vol/volname/qtree filer2:/vol/volname/qtree -sa root:password -da root:password -dhost GbE_IP_address -level 0-9
This is the greatest failing of ndmpcopy... plaintext passwords to privileged accounts on the command line, in your shell history, up there in a "ps" for everyone to see, etc. It would be nice to have an "ndmp" user on the filer that can *only* initiate or receive NDMP sessions. Combine that with a new ability to read user/password information from a file in ndmpcopy, and you at least have some modicum of security. One of these days, I'll hack ndmpcopy to do that... unless someone else has done that already. ;-)
--
Brian Tao (BT300, taob@risc.org)
"Though this be madness, yet there is method in't"