scp with sshpass Post: 302856293

Sponsored Content

Top Forums Shell Programming and Scripting scp with sshpass Post 302856293 by Corona688 on Monday 23rd of September 2013 02:45:40 PM

09-23-2013

Registered User

Quote:

Originally Posted by mathbalaji

Oh! I didn't know about that! So, if my script runs for say 1 minute, will the password be visible for that one minute in

Code:

ps aux

or for the entire session?

Try it and see?

It's possible that sshpass makes some effort to conceal the password once its passed. It could exec() again with different parameters and blank it. But even so, there'd be an unavoidable eyeblink when the password was exposed. Anyone could extract the password with obsessive logging.

These weaknesses are well-known, so sshpass has many safer options fortunately. sshpass can read a file, according to its manpage, so you could do this:

Code:

OLDMASK=$(umask)
umask 077 # Force rw------- permissions on /tmp/$$
exec 5>/tmp/$$ #Create temp file /tmp/$$ and write with FD 5
exec 6</tmp/$$ # Read from temp file /tmp/$$ with FD 6
rm /tmp/$$ # DELETE tempfile /tmp/$$ so nothing else can get it
umask $OLDMASK # Restore umask

cat <<EOF >&5 # Finish writing to /tmp/$$
$PASSWORD
EOF

exec 5>&- # Close FD 5

sshpass -d6 ...

exec 6<&- # Close FD 6

Which should protect the password much better. The temp file won't even be listed in /tmp/ while sshpass is running.

Last edited by Corona688; 09-23-2013 at 03:54 PM..

This User Gave Thanks to Corona688 For This Post:

Corona688

View Public Profile for Corona688

Visit Corona688's homepage!

Find all posts by Corona688

7 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Scp

I am trying to transfer a 10g files using scp, but I am getting timeout errors is there anywhere that I can modify a config file or something to increase the time.

2. UNIX for Advanced & Expert Users

help with scp

hi all in my script i was using the "scp" command to copy 2 files from a certain directory on server A to the same directory on another server B, but for some reason its only copying the first file in the directory. This is the frst time that i used the scp command,any ideas appreciated. thnks

3. Shell Programming and Scripting

problem with sshpass

Hello i am using sshpass to pass remote password into script but phase some problems when try to execute some commands remotely which means that the remote env not passed through sshpass for example sshpass -p 'XXX' ssh -o StrictHostKeyChecking=no -l myserver myserver visu_fis_pnes ...

4. Solaris

How to install SSHPASS on Solaris ???

Could you please let me know the steps: how to install sshpass command tool in solaris any version greater than 8.

5. Shell Programming and Scripting

Cannot sshpass router

Hi, I am trying to use sshpass to login to my router and then execute a reboot command. But the command never executes, can someone please help me. This doesnt work.... sshpass -p 'password' ssh 192.168.1.1 -l root -o StrictHostKeyChecking=no "sys reboot" However if I try following then it...

6. Shell Programming and Scripting

Put a command into router through sshpass bash script

hello, i am facing some issue. I am using a simple bash script that via sshpass put a command into router. Now, problem is that i have a file and commands into it. sshpass -p $pass ssh -o $log -n $user@$h /ip address set address=10.0.0.1/24 so if I have that command ip address set ...

7. UNIX for Advanced & Expert Users

How to pass password as a variable for sshpass authentication?

Using below below command i'm able to connect or authenticate server, In below command password contains special characters sshpass -v -p 'ASJBA%hs76)#' ssh -q -o ConnectTimeout=5 hostname But If I pass password as a variable I'm not able to connect or authenticate server, can you please help...

LEARN ABOUT OSF1

dxchpwd

dxchpwd(1X)															       dxchpwd(1X)

NAME

       dxchpwd - Create or change password program

SYNOPSIS

       dxchpwd

       dxchpwd -r  | -l

       dxchpwd [-r  | -l] -q

       dxchpwd [-r  | -l] -u  username

OPTIONS

       If dxchpwd is invoked without any options, it is assumed that the current user's password is to be changed.  The following options are also
       accepted: Tells dxchpwd that the password change is to be done for a Local user. This can be combined with the -u and  -q  options.   Tells
       dxchpwd	that the password change is to be done for a NIS user. This can only be done from a NIS master and can be combined with the -u and
       -q options.  Tells dxchpwd to query the user for the user name of the account whose password is to be changed.	Tells  dxchpwd	to  change
       this user's password.

DESCRIPTION

       The  dxchpwd  command lets you change your password.  When you invoke the dxchpwd command, the program prompts you for the old password and
       then for the new password.  Next, the program asks you for the new password again, to verify that you have typed it correctly.	Note  that
       the passwords are not displayed on the screen.

       Your new password must meet the length requirements specified by the authorization database for the user whose password is being changed.

       If  your system is running with enhanced security, you may have to choose a password from a list of randomly generated passwords or you may
       be prohibited from changing your password until its minimum lifetime has expired, as specified in the authorization database.

EXAMPLES

       The following example requests that the password be changed for user smith: dxchpwd -u smith

FILES

       Password file Protected Password Database dxchpwd executable

SEE ALSO

       X(1X), xdm(1X), passwd(1)

																       dxchpwd(1X)

7 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Scp

Discussion started by: rbizzell