Shell Programming and Scripting

You do realize that makes your password visible in plaintext to everyone and anything on the system while the command is running, yes? There's a reason they work so hard to discourage you from passing recoverable passwords around.

well thank you to worry about my password.

It won't be visible because i will type it as the script begin to run.
This script will connect more than 100 machines and i don't want to type it each time a ssh command will run.

This is a very important script for me and i'm sure there's a solution to enter the password with the "ssh -t"

Christian

Hi Nicol,

There is no parameter for you to input password to ssh command. There is only way to using ssh command without password, It's using public key authentication.

Please make sure that OpenSSH was installed on your system, follow below steps:


1. On the client run the following commands:

This should result in two files, $HOME/.ssh/id_dsa (private key) and $HOME/.ssh/id_dsa.pub (public key). Copy $HOME/.ssh/id_dsa.pub to the server.

2. On the server run the following commands:

Depending on the version of OpenSSH the following commands may also be required:

An alternative is to create a link from authorized_keys2 to authorized_keys:

3. On the client test the results by ssh'ing to the server:

Good luck to you !

thanks for all,

i've done all that and it works in all the cases except the case with the crontab command

With the keys installed i run with success without password :

Code:

ssh myuser@host1  "ls -al /home"

but the same with crontab :

Code:

ssh myuser@host1  "crontab -l"

display the myuser crontab this is normal

if i want to display the newuser crontab , i'm forced to use the following and to entrer the password

Code:

ssh -t myuser@host1  "sudo -u newuser crontab -l"

because

Code:

ssh myuser@host1  "sudo -u newuser crontab -l"

doesn't work !

christian

Why not login as newuser in the first place?

Or why not configure sudo to allow you to su - username without a password for that specific login?

---------- Post updated at 04:58 PM ---------- Previous update was at 04:57 PM ----------

It will be visible every time you run 'echo password' to feed it into something, because commandline arguments are visible to anyone on the system.

The bigger the hassle it is for you to do this right, the bigger the danger is when your password does get stolen. If someone gets that, they have the key to hundreds of your servers.

If you have setup your keys for ssh login, then to supply password for sudo, your original approach would work except that you need an extra "-t":

Code:

echo password | ssh -t -t myuser@host1  "sudo -u newuser crontab -l"

hi

==> because the security doesn't accept it , we are forced to log with names user

==> it is , the keys have been created without password , this is the "ssh -t" that force to type password.

i understand all what you are saying but i'm not root admin and i can't modify this policy.

then the following :

Code:

echo password | ssh -t -t myuser@host1  "sudo -u newuser crontab -l"

doesn't work , i have this message :

so....what can i do ?
christian