Script for SSH login

CyberEE · 05-31-2002, 07:34 AM

I am trying to write a script to login in to a SSH server and run a program. The problem I have is that it will not automatically enter the password, is there any way to do this?

sewer_monkey · 05-31-2002, 09:57 AM

You may want to look into using certificates instead of passwords with SSH... That way you may be able to bypass the password entry.

This is a stab in the dark, as I have no experience setting up SSH with certs.

CyberEE · 05-31-2002, 10:34 AM

I don't want to change anything, I just want same way of having the password in the script.

Noerr · 05-31-2002, 03:26 PM

but why don't you rather start script on remote machine, rather than login there?

CyberEE · 06-03-2002, 07:10 AM

The remote "computer" is more of a device.

acid_kewpie · 06-03-2002, 07:13 AM

you can't define a password for ssh within a script... that is, by definition, insecure. you will need to use RSA authorisation or similar to lo in that way.

MartBrooks · 06-03-2002, 07:13 AM

Just generate a DSA keypair on the client side and copy the public part to the other server and put it in the authorized_keys file.

Easy.

acid_kewpie · 06-03-2002, 07:53 AM

hmm, ok i've got openssh 3.1 on this machine and 2.5 on the other, and am trying to sort out 2 way ssh2 authentication... i've got it now going from this one (md82) to the server (rh71) on ssh1 and ssh2 (rsa and dsa) but coming back the other way i can only get it on ssh1 (identity.pub) the sshd_config files are virtually identical and the log in /var/log/secure doesn't really give me any decent information. everything is a similar as i can see, any obvious stumbling blocks you're aware of?

MartBrooks · 06-03-2002, 08:17 AM

On the server side type, kill the sshd then type:

sshd -v -v -v -d

On the client side type

ssh -v -v -v user@server2

And read the resulting streams of text. If you can't kill the sshd on the server (because you've no physical access to it, for example) add "-p 1022" to both of those lines. This will start another server on port 1022.

Regards

acid_kewpie · 06-03-2002, 08:43 AM

nah, says it tries each one, then just goes on to the next... doesn't say anything constructive as far as i can see. oh well.

MartBrooks · 06-03-2002, 08:59 AM

If it fails to connect it will give you a reason why.

Mail the traces to me: trace@clues.ltd.uk

This address will only be valid for the next hour or so.

Regards