en:dpi:dpi_components:platform:subscriber_management:subsman_remote:subsman_remote_ssh [Документация VAS Experts]

This is an old revision of the document!


Remote execution of SSH commands

We advise to authenticate users by public keys to execute command on DPI server remotely by SSH with no need to enter password.

To use this method: on the control server:

  1. We create a pair of public and private keys:
    ssh-keygen -t rsa

    Default values should be selected in the dialogue. Passphrase should be left empty for convenience.

  2. We copy the public key to DPI server:
    ssh-copy-id dpi_user@dpi_host 
    or manually:
    cat ~/.ssh/id_rsa.pub | ssh dpi_user@dpi_host "mkdir -p ~/.ssh && cat >>  ~/.ssh/authorized_keys"

Then we check and fix the rights on file authorized_keys on DPI server:

chmod 700 ~dpi_user/.ssh/
chmod 600 ~dpi_user/.ssh/authorized_keys
restorecon -Rv ~dpi_user/.ssh/

Next, we check the operation of the remote execution of fdpi_ctrl from the control server:

ssh dpi_user@dpi_host "fdpi_ctrl load --service 6 --login test"

In case this instruction does not work, try to find some hints in the log file /var/log/secure on DPI server. One can also switch the diagnostic mode on SSH: ssh -v …