Shell Programming and Scripting

People, I really have two problems in one. Basicly "option 2" is the one I wish to persue but "option 1" will do for now....

Option 1
I have an expect script. I would like it to read (open ) a crypted file with out creating a decrypted file from the source (crypted file) then open and read the flat file.... any ideas....?

Option 2
I can do this from with in a standard UNIX script - no problem
ie (eval `crypt key </tmp/filename`)

Question.....
How do I (or can I) execute "expect" commands from with in the shell script (Without running a third external expect scrpit) and pass the shell varibales required to the expect code from with in the shell script?

Back ground.
The crypted file format is thus....
userid="myid"
password="mypass"
commnet="This is a comment"

Thanks
Andrek

Assuming I got what your problem is:

Code:

#!/bin/ksh
echo "password to encrypted file:\c"
stty noecho
read pass
stty echo
value=`crypt "$pass" < passwordfile | pr`
user=`echo "$value" | grep 'username=' | awk -F= '{print $2}'`
userpasswd=`echo "$value" | grep 'password=' | awk -F= '{print $2}'`
#....... you now have the user's username & password

This way the password to decrypt the file is not in any script, nor does is it on the commandline to allow ps -ef to show it.

If you have to use expect, then create the expect script as a here document
with the password input varaible -- input the same as part of the code above. A priori, expect looks like a messier solution overall. But I dunno what your requirements are.

Hi, Thanks for the info. I can get the UserID and Password from the crypted file inside a unix sh (/usr/bin/ksh) because the crypted file format is....
Userid="xxx"
passwd="aaa"
comments="bbb ccc ddd"
etc

the eval 'crypt key <$cryptfile command will do that for me.

ie $Userid is created and set to xxx.

The problem is.

The old way of doing things is an expect script opens the $userfile and reads gets the password and userid etc etc. This leaves a normal file on the system with a userid and password available to been seen. (The file is deleted once all processing has been completed)

The new way is to have the $userfile crypted so that if the file is left behind on the system no one can view the userid and password details.

The system in question is on a secure (outside the DMZ) , thus direct login is strictly is limited and my task is to create a script that will allow 1st level UNIX staff to create secure ftp logins on that server with out logging.

It all works fine but we need to work with a crypted file. Therefor my expect skills are low and I need to complete this task very soon.

Anymore ideas?

Worked it out.....The answer was obvious....

#!/bin/usr/ksh
Do some shell stuff
eval `crypt $key <$cryptfilename`

/usr/bin/expect <<EOF
do expect stuff
send "$UserID" # Got this from ksh shell
send "$Passwd" # Got this from ksh shell

exit;
EOF

Do other shell stuff
Now we back in ksh script

I am closeing this thread
:-)