Page 1 of 1

File copy to a windows server over VPN

Posted: 2018/02/24 13:30:48
by edlentz
I need to sync a directory on a Centos 6 mchine over the internet to a Windows server. I so far am thinking of using Openswan on the linux machine to connect to the Windows network, then possibly using Rsync to move/copy the files to the Windows machine. The files will be audio recordings of phone calls of bank transactions. So we need to make sure it is secure and positively copied over. Am i on the right track here? Is there a better way that I so far haven't thought of?

Thanks for any ideas

Re: File copy to a windows server over VPN

Posted: 2018/02/24 14:54:24
by tunk
Would e.g. winscp or filezilla (in SSH-mode) from your windows server be alternatives?
Or see if there's a windows sshfs client, mount it in read-only mode, and then use a robocopy script + Task Scheduler.

Re: File copy to a windows server over VPN

Posted: 2018/02/24 15:20:55
by edlentz
Thanks tunk

I need to be as low impact on the Windows machine as possible. Not my machine and managed by the bank. A share is about all I can get from them for many reasons

Re: File copy to a windows server over VPN

Posted: 2018/02/24 17:02:53
by TrevorH
The other alternative I can think of is just to serve them up via an https web site.

Re: File copy to a windows server over VPN

Posted: 2018/03/08 14:02:15
by edlentz
So I figured out alot of things since my last post. I have a Centos6 server in the office with Samba running and sharing an external drive. I found a way to run ssh connections without passwords using an rsa key AND using Rsync to move the files I need from the client to the server share. Voila! it works really nice. The down side is that no matter what I do I need to use the root account on the server to make the connection.
Looking at the audit log I see this:

type=USER_AUTH msg=audit(1520515062.649:884767): user pid=31205 uid=0 auid=0 ses=146011 msg='op=PAM:authentication acct="?" exe="/usr/sbin/sshd" hostname=x.x.x.x addr=x.x.x.x terminal=ssh res=failed'

The message I get when I try ssh [username]@myserver.com gets me the password prompt. Entering the password I get a connection closed.

I was getting :
reverse mapping checking getaddrinfo and POSSIBLE BREAK-IN ATTEMPT error messages via SSH
Until I changed UseDNS no and GSSAPIAuthentication no in the sshd_conf file But that is just masking that error right?

I would really rather not use the root account for this. Anyone have any ideas???

Thanks

Re: File copy to a windows server over VPN

Posted: 2018/03/08 14:10:16
by edlentz
I think I figured it out. Earlier I edited sshd_config, I looked into ssh_config and sure enough GSSAPIAuthentication was set to yes, changing it to no appears to allow me to use a more obscure user / password