Could not create directory ssh solution....?

bianchi77 · 04-29-2010, 11:14 PM

Friends,

Can you help with this :
.....
I try to run in php script..
================
shell_exec("ssh admin@192.168.1.13 reboot");
===============
in php....I have put the key on server...

i can ssh server without a password..

i got "Could not create directory ssh... " error message from that php script...

if i did "ssh admin@192.168.15 reboot" from shell it works ok....

Anyone ever experience this ? can you share ?

Any helps will be very appreciated..

Tx

bathory · 04-30-2010, 03:56 AM

Why not

Code:

exec("ssh admin@192.168.1.13 reboot");

If you want to run it from a webserver you need the key of the user that the webserver runs as

Regards

bianchi77 · 05-01-2010, 10:56 AM

Quote:

Originally Posted by bathory

Why not

Code:

exec("ssh admin@192.168.1.13 reboot");

If you want to run it from a webserver you need the key of the user that the webserver runs as

Regards

can you explain how ?

thx

bathory · 05-01-2010, 12:31 PM

What how?
You should tell us what you want to do and we'll see how we can help.

But, if you want to use a webserver to run system commands, and you're absolutely sure about this (as it's a security risk), it's better to setup sudo for the user that runs the webserver. This way you can limit that user to run specific commands only.

Regards

bianchi77 · 05-01-2010, 11:24 PM

Quote:

Originally Posted by bathory

What how?
You should tell us what you want to do and we'll see how we can help.

But, if you want to use a webserver to run system commands, and you're absolutely sure about this (as it's a security risk), it's better to setup sudo for the user that runs the webserver. This way you can limit that user to run specific commands only.

Regards

i want to run :

exec("ssh admin@192.168.1.13 reboot");
from my php script...but confuse with user problem ..
should i change the user at httpd.conf, the same with user i login ??

tx

bathory · 05-02-2010, 01:48 PM

Yes, it's more easier to change the user that runs apache (I guess you run apache since you mentioned httpd.conf) and make it be admin. Of course this has to be a non-privileged user for security reasons.

Or you can create a public key for the current apache user and add it to ~/authorized.keys for admin at 192.168.1.13

Regards