* ud-replicate: use the host key to sync stuff from the db server,

  that is, call ssh with ii /etc/ssh/ssh_host_rsa_key.
* ud-replicate: Call ssh with -o PreferredAuthentications=publickey
  so that it does not even try password authentication.

diff --git a/debian/changelog b/debian/changelog
index 8716d70..4d936b8 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+userdir-ldap (0.3.21) unstable; urgency=low
+
+  * ud-replicate: use the host key to sync stuff from the db server,
+    that is, call ssh with ii /etc/ssh/ssh_host_rsa_key.
+  * ud-replicate: Call ssh with -o PreferredAuthentications=publickey
+    so that it does not even try password authentication.
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 13 May 2008 22:06:23 +0200
+
 userdir-ldap (0.3.20) unstable; urgency=low
 
   * Teach ud-mailgate about ipv6 addresses (RT#193).

diff --git a/ud-replicate b/ud-replicate
index e0f8fe7..655b263 100755 (executable)
--- a/ud-replicate
+++ b/ud-replicate
@@ -49,7 +49,7 @@ $LOCALSYNCON)
     ;;
 esac
 
-rsync ${verbose} -e ssh -rp "${udhost}/var/cache/userdir-ldap/hosts/$HOST" .
+rsync ${verbose} -e 'ssh -i /etc/ssh/ssh_host_rsa_key -o PreferredAuthentications=publickey' -rp "${udhost}/var/cache/userdir-ldap/hosts/$HOST" .
 
 makedb "$HOST/passwd.tdb" -o passwd.db.t
 if [ -s "$HOST/shadow.tdb" ]