自动SSH登录windows下

Question

I want to be able to execute openssh with some custom arguments and then be able to automatically login to the server. I want that my script will enter the password if needed and inject 'yes' if I'm prompted to add the fingerprint to the known hosts.

I've found SharpSsh for C# that do that, but I also need to use -D parameter and use ProxyCommand that I define in SSH, and the library is quite lacking for that usage.

Another thing that I've found was pexcept for Python that should do the trick but I couldn't find where to download it, on the offical page I'm being redirectred from sourceforge to some broken link.

Any help would be appreciated,

Bill.

Answer 1

If you use OpenSSH and then have a script to inject password in clear (meaning, you have stored the password unencrypted) it is defeating the purpose of secure shell.

Please strongly consider using public key mechanisms which can be easily and securely automated.

Answer 2

I'll second the recommendation to use public key authentication. Rather than hack around with expect, you might want to consider Paramiko - it's a native SSH client for Python which would greatly simplify the communications process, particularly if you ever need to interact with the remote server and it has support for things like SFTP built-in.

Answer 3

i use pexpect for similar purpose and download also work? http://sourceforge.net/project/downloading.php?group_id=59762&filename=pexpect-2.3.tar.gz

here is a portion fro my ssh automate script, you can customize it for you usage it may not run out of the box

import os
import getpass
import pexpect
import glob
import logging
import shutil
import time

class UpdateError(Exception): pass

g_password = None

def runSshCommand(cmd):
    global g_password

    ssh_newkey = 'Are you sure you want to continue connecting'
    # my ssh command line
    p=pexpect.spawn(cmd)

    i=p.expect([ssh_newkey,'password:',pexpect.EOF])
    if i==0:
        print "Saying yes to connection.."
        p.sendline('yes')
        i=p.expect([ssh_newkey,'password:',pexpect.EOF])

    if i==1:
        while True:
            if g_password is None:
                g_password = getpass.getpass("password:")
            p.sendline(g_password)
            i = p.expect(['password:',pexpect.EOF])
            if i==0:
                g_password = None
                print "Wrong password"
            else:
                break
    elif i==2:
        raise UpdateError("Got key or connection timeout")

    return p.before

Answer 4

There is some excellent documentation on using Putty with generated SSH key authentication. This is an easy and secure way to accomplish your goals. Putty has a great set of features, for a windows SSH app. Even better when you consider that you canget it on the free .

Answer 5

pexpect can't import on Windows. So, I use plink.exe with a Python subprocess to connect to the ssh server.

Answer 6

Another way is to to use openssh and establish a trusted key; if both client and the user account on the server have this key, then openssh does not request a password.

I have a script that automates setup of this - it works under cygwin,

http://mosermichael.github.io/cstuff/all/projects/2011/07/14/ssh-friends.html

Answer 7

I hope Net::SSH::Expect Perl module will be of help to you.