从ac程序在远程主机上执行命令

Question

I am trying to automate a process of logging on the firewall server, exporting some logs , scp the logs to local host then delete it from the remote server (firewall server)

I also enabled host based authentication so that both machines would communicate without entering the password of either machine during ssh-ing and transfering.

I started by using system calls thinking it would work but it does not seem that it works as anticipated. What I did was something like this

system(ssh user@firewallserver)
system(cd /directory)
system(fwm logexport)
system(scp log user@localhost:/home)
system(rm log)

people who tried this in the past will know that this does not work, but I do not know a solution or maybe a different way of accomplishing the task.

Thanks!

Answer 1

Each system command opens new process so that your ssh session is gone in second call. Try to do it in one command if you really want to use system :

ssh server <some commands on server side>

scp <path on server> <local path>

Edit: Try

ssh server 'cd /directory && touch test123'

on the command line. This should create the file test123 on the remote server in directory /directory . Then put this command in your system(...) call. In this way you can execute commands on the remote host. For every new system call you must do again ssh server <commands> ...

If you don't need it in a C program you can put these commands directly in a bash script:

#!/bin/bash
ssh server 'cd /directory && touch test123'
scp server:/directory/test123 /home/me/log123

Answer 2

Bash is definitely the way to go! You can just stick these commands straight into a script and it should work if you've set up your authentication properly.

The script would look something like this:

#!/bin/bash
ssh user@firewallserver
cd /directory
fwm logexport
scp log user@localhost:/home #Possible mistake
rm log

Now I've looked through your code there could be a misunderstanding. I take it that you're supposed to move log back to the original machine that you ssh -ed into firewallserver from.

If that's the case you can't use localhost in your scp call, because that's the firewallserver . You need to scp log user@<your local IP> to get the log back to the machine you logged in from.

Perhaps I've misunderstood, if that's the case then the script I posted above should work. However, if I'm correct then just swap the scp line and that should work.

Answer 3

This is how this could be done effectively, in a bash script do the following

#!/bin/bash
ssh user@host 'bash -l' < ~/dowork.sh

the "dowork.sh" script is what you want to execute on the remote machine, you have to break those up to two scripts and redirect the dowork.sh to the ssh when executing the command

to verify that you got a shell into the correct machine do this in "dowork.sh"

#!/bin/bash
echo $PATH

and this will give you the path variable from the remote machine.