Perl Net :: SSH2 pubkey身份验证问题

Question

我正在尝试使用Net :: SSH2连接到远程SSH服务器.命令行ssh工作正常.但我似乎无法弄清楚正确的auth_hostbased参数

这是我的代码:

use Net::SSH2;

my $ssh = Net::SSH2->new();
$ssh->debug(1);
$ssh->trace(-1);
$ssh->connect('remotehost.remotedomain.tld') or die;
$ssh->auth_hostbased('username',
    'ssh-rsa  AAAAB3Nz[..]C0JoaFF9 root@myhost',
    '-----BEGIN RSA PRIVATE KEY-----
    Proc-Type: 4,ENCRYPTED
    DEK-Info: AES-128-CBC,FA97214E87562096A7E480C82DAE5EB4

    XIMKnj9k[..]kpRo5V
    -----END RSA PRIVATE KEY-----',
    'myhost.mydomain.tld',
    'username',
    'keypassword') or die;

该片段仅使用'Net :: SSH2 :: DESTROY对象0xe17de0'来消息@ $ ssh-> auth_hostbased.设置跟踪似乎并不重要.用$ ssh-> die_with_error替换die会抛出'die_with_error不是有效的Net :: SSH2宏'.下载当前0.53版本的Net:SSH2不起作用,因为脚本不再编译:'Net :: SSH2对象版本0.44与bootstrap参数0.53不匹配'

任何有关正确参数格式或替代模块的帮助都表示赞赏.

Answer 1

为什么不使用 Net::OpenSSH ？这是一个简单的 ssh 包装脚本，我前段时间写的：

#!/usr/bin/perl

#Simple SSH Remote Executor  using Net::OpenSSH Library

use warnings;
use strict;
use Net::OpenSSH;
# see http://search.cpan.org/~salva/Net-OpenSSH-0.62/lib/Net/OpenSSH.pm#DEBUGGING
$Net::OpenSSH::debug = undef;
use Getopt::Long;


my $timeout = 10;
my ($username,$identity,$hostname,$command) = undef;
my $uid=getpwuid($<);
my $ctl_dir=qq{/tmp/.libnet-puppet-$uid};
my $ctl_mode=0700;

if ( ! -d $ctl_dir ) { mkdir( $ctl_dir,$ctl_mode ) };

open my $stderr_fh, '>>', '/dev/null' or die $!;


sub print_help{
    print qq{\nusage: $0 [options] -h Hostname

        -u username

        -i identity

        -c command

        long options are supported !

  };
        exit (1);
}



GetOptions ("hostname=s" => \$hostname, # string
                "username=s" => \$username, # string
                "identity=s" => \$identity, # string
                "command=s" => \$command) # string
or print_help;

if ( not defined $username or not defined $identity or not defined $hostname or not defined $command ) { print_help };

my $port = q{22};
my $user = $username;
my $ssh;

my $cmd = qq{$command};

my $options = {
    host => $hostname,
           user => $user,
           port => $port,
           default_stderr_fh => $stderr_fh,
       ctl_dir => $ctl_dir,
       master_opts => [
                   -o => "UserKnownHostsFile=/dev/null",
                   -o => "StrictHostKeyChecking=no",
                   -o => qq{IdentityFile=$identity},
               ],
    timeout => $timeout };

#ALARM Timer timeout handling
$SIG{ALRM} = sub {
  printf( "%s\n", qq{invalid-timeout-connecting-to-node-$hostname});
  exit(1);
};

#init alarm timer ;-)
alarm( $timeout );

$ssh = Net::OpenSSH->new( %{$options} )
           or $ssh->error and die "Couldn't establish SSH connection: ". $ssh->error;

my (@out, $err) = $ssh->capture2({ timeout => 10 }, $cmd);

die("Error: %s\n", $err) if defined $err;

if ( (scalar(@out)) eq 0 ) {
  printf( "%s\n", qq{invalid-empty-string-received-by-node-$hostname});
  exit(1);
}

foreach my $line ( @out ) {
    $line =~ s/^\s{1,}//;
       printf ("%s",$line);
}

使用 cpanm (cpanm Net::OpenSSH) 或 debian 软件包“libnet-openssh-perl”安装它。
请参阅“man ssh_config”以获取可用的主选项。
我认为该脚本会有很大帮助。
参考值。弗兰茨