en:subsman_remote_ssh [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

en:subsman_remote_ssh [2015/04/05 16:29] – created translator1en:subsman_remote_ssh [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1
Line 1: Line 1:
-We advise to authenticate users by public keys to execute command on DPI server remotely by SSH with no need to enter password. 
  
-To use this method: on the control server: 
-  - We create a pair of public and private keys:<code>ssh-keygen -t rsa</code>We select default values in a dialogue. We keep the secret phrase empty to simplify further usage((Alternatively, one can use the functionality of ssh-agent to store passwords.)) 
-  - Next, we copy the public key to DPI server:<code>ssh-copy-id dpi_user@dpi_host  
-or manually: 
-cat ~/.ssh/id_rsa.pub | ssh dpi_user@dpi_host "mkdir -p ~/.ssh && cat >>  ~/.ssh/authorized_keys"</code> 
- 
-Then we check and fix the rights on file authorized_keys on DPI server:<code>chmod 700 ~dpi_user/.ssh/ 
-chmod 600 ~dpi_user/.ssh/authorized_keys 
-restorecon -Rv ~dpi_user/.ssh/</code> 
- 
-Next, we check the operation of the remote execution of fdpi_ctrl from the control server: 
-<code> 
-ssh dpi_user@dpi_host "fdpi_ctrl load --service 6 --login test" 
-</code> 
-In case this instruction does not work, try to find some hints in the log file /var/log/secure on DPI server. One can also switch the diagnostic mode on SSH: ssh -v … 
- 
-