使用augtool修改ssh_config

Question

这是默认的/ etc / ssh / ssh_config ，其中包含#ForwardX11 no ，我想更改它，所以我这样做

augtool set "/files/etc/ssh/ssh_config/ForwardX11" yes

失败，但这会在Host *之后添加ForwardX11 yes

augtool set "/files/etc/ssh/ssh_config/Host/ForwardX11" yes

题

• augtool为什么不取消注释#ForwardX11 no ？
• 为什么必须指定.../Host/... ？
• 为什么下面的输出中缺少GSSAPIAuthentication yes和ForwardX11Trusted yes ？

[root@localhost ~]# augtool ls "/files/etc/ssh/ssh_config"
#comment[1] = $OpenBSD: ssh_config,v 1.27 2013/05/16 02:00:34 dtucker Exp $
#comment[2] = This is the ssh client system-wide configuration file.  See
#comment[3] = ssh_config(5) for more information.  This file provides defaults for
#comment[4] = users, and the values can be changed in per-user configuration files
#comment[5] = or on the command line.
#comment[6] = Configuration data is parsed as follows:
#comment[7] = 1. command line options
#comment[8] = 2. user-specific file
#comment[9] = 3. system-wide file
#comment[10] = Any configuration value is only changed the first time it is set.
#comment[11] = Thus, host-specific definitions should be at the beginning of the
#comment[12] = configuration file, and defaults at the end.
#comment[13] = Site-wide defaults for some commonly used options.  For a comprehensive
#comment[14] = list of available options, their meanings and defaults, please see the
#comment[15] = ssh_config(5) man page.
#comment[16] = Host *
#comment[17] = ForwardAgent no
#comment[18] = ForwardX11 no
#comment[19] = RhostsRSAAuthentication no
#comment[20] = RSAAuthentication yes
#comment[21] = PasswordAuthentication yes
#comment[22] = HostbasedAuthentication no
#comment[23] = GSSAPIAuthentication no
#comment[24] = GSSAPIDelegateCredentials no
#comment[25] = GSSAPIKeyExchange no
#comment[26] = GSSAPITrustDNS no
#comment[27] = BatchMode no
#comment[28] = CheckHostIP yes
#comment[29] = AddressFamily any
#comment[30] = ConnectTimeout 0
#comment[31] = StrictHostKeyChecking ask
#comment[32] = IdentityFile ~/.ssh/identity
#comment[33] = IdentityFile ~/.ssh/id_rsa
#comment[34] = IdentityFile ~/.ssh/id_dsa
#comment[35] = Port 22
#comment[36] = Protocol 2,1
#comment[37] = Cipher 3des
#comment[38] = Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
#comment[39] = MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160
#comment[40] = EscapeChar ~
#comment[41] = Tunnel no
#comment[42] = TunnelDevice any:any
#comment[43] = PermitLocalCommand no
#comment[44] = VisualHostKey no
#comment[45] = ProxyCommand ssh -q -W %h:%p gateway.example.com
#comment[46] = RekeyLimit 1G 1h
Host/ = *

Answer 1

Augeas没有（un）注释的概念。 它仅允许您使用映射它们的树来管理文件中的条目。 您可以通过在评论之后（或之前）插入新条目并删除评论来模拟取消评论条目，但是Augeas不会自动这样做。

当Augeas设置一个值时，它会更改现有节点（如果可以找到一个节点）的值，否则将创建一个新节点（在树的末尾）。 但是，树中节点的顺序很重要，并且在“ Host节点无效后为全局设置创建一个条目。 因此，您需要在第一个Host条目之前插入新节点：

ins ForwardX11 before Host[1]
set ForwardX11 yes

您也可以根据需要在Host条目中进行设置，尽管这并不完全等效（请参见man ssh_config ）：

set Host[.='*'] *    # Ensure the Host entry exists
set Host[.='*']/ForwardX11 yes

至于缺少的两个条目，它们不会出现在您的输出中，因为ls不是递归命令。 如果要递归查看树，请使用print 。