viewvc.cgi/cricket/ssh_howto.txt

How to setup remote, non-interactive, logon with multiple command for
same remote username?


For the rest of this document, destination host will be called 'loophole', and
user which will run all sort of our evil stuff on loophole will be called 
'mole'.

Do this as a Cricket user:

$ ssh-keygen -t dsa -f ~/.ssh/uptime

Append ~/.ssh/uptime.put on destination host to ~mole/.ssh/authorized_keys2
and prepend following before ssh-dss:

command="uptime"

So, that line in ~mole/.ssh/authorized_keys2 looks like:

command="uptime" ssh-dss AAA...lSEV04= cricket@boo.boo

test if it works...

$ ssh -i ./uptime -q -l mole loophole
 15:42:10 up 42 days, 18:25,  6 users,  load average: 0.00, 0.00, 0.00

It does? Oh, good. You now know how to setup individual keys for each
command that you want to execute. Keep in mind that user mole must have
permissions on loophole to execute that particular command, but other
than that, you are winner!

1	How to setup remote, non-interactive, logon with multiple command for
2	same remote username?
3
4
5	For the rest of this document, destination host will be called 'loophole', and
6	user which will run all sort of our evil stuff on loophole will be called
7	'mole'.
8
9	Do this as a Cricket user:
10
11	$ ssh-keygen -t dsa -f ~/.ssh/uptime
12
13	Append ~/.ssh/uptime.put on destination host to ~mole/.ssh/authorized_keys2
14	and prepend following before ssh-dss:
15
16	command="uptime"
17
18	So, that line in ~mole/.ssh/authorized_keys2 looks like:
19
20	command="uptime" ssh-dss AAA...lSEV04= cricket@boo.boo
21
22	test if it works...
23
24	$ ssh -i ./uptime -q -l mole loophole
25	15:42:10 up 42 days, 18:25, 6 users, load average: 0.00, 0.00, 0.00
26
27	It does? Oh, good. You now know how to setup individual keys for each
28	command that you want to execute. Keep in mind that user mole must have
29	permissions on loophole to execute that particular command, but other
30	than that, you are winner!
31