diff options
author | Damien Miller <djm@mindrot.org> | 2012-12-03 10:12:13 +1100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2012-12-03 10:12:13 +1100 |
commit | 771c43cee6343f757884030ff92f1156b2ef399f (patch) | |
tree | 89552a23852b3f75aaf31398bf05900504563266 /regress/keys-command.sh | |
parent | 6618e92509bc0362352de1386ee0d70e785a9bb5 (diff) |
- djm@cvs.openbsd.org 2012/11/22 22:49:30
[regress/Makefile regress/keys-command.sh]
regress for AuthorizedKeysCommand; hints from markus@
Diffstat (limited to 'regress/keys-command.sh')
-rw-r--r-- | regress/keys-command.sh | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/regress/keys-command.sh b/regress/keys-command.sh new file mode 100644 index 000000000..09f4db4b7 --- /dev/null +++ b/regress/keys-command.sh | |||
@@ -0,0 +1,33 @@ | |||
1 | # $OpenBSD: keys-command.sh,v 1.1 2012/11/22 22:49:30 djm Exp $ | ||
2 | # Placed in the Public Domain. | ||
3 | |||
4 | tid="authorized keys from command" | ||
5 | |||
6 | if test -z "$SUDO" ; then | ||
7 | echo "skipped (SUDO not set)" | ||
8 | echo "need SUDO to create file in /var/run, test won't work without" | ||
9 | exit 0 | ||
10 | fi | ||
11 | |||
12 | # Establish a AuthorizedKeysCommand in /var/run where it will have | ||
13 | # acceptable directory permissions. | ||
14 | KEY_COMMAND="/var/run/keycommand_${LOGNAME}" | ||
15 | cat << _EOF | $SUDO sh -c "cat > '$KEY_COMMAND'" | ||
16 | #!/bin/sh | ||
17 | test "x\$1" -ne "x${LOGNAME}" && exit 1 | ||
18 | exec cat "$OBJ/authorized_keys_${LOGNAME}" | ||
19 | _EOF | ||
20 | $SUDO chmod 0755 "$KEY_COMMAND" | ||
21 | |||
22 | cp $OBJ/sshd_proxy $OBJ/sshd_proxy.bak | ||
23 | ( | ||
24 | grep -vi AuthorizedKeysFile $OBJ/sshd_proxy.bak | ||
25 | echo AuthorizedKeysFile none | ||
26 | echo AuthorizedKeysCommand $KEY_COMMAND | ||
27 | echo AuthorizedKeysCommandUser ${LOGNAME} | ||
28 | ) > $OBJ/sshd_proxy | ||
29 | |||
30 | ${SSH} -F $OBJ/ssh_proxy somehost true | ||
31 | if [ $? -ne 0 ]; then | ||
32 | fail "connect failed" | ||
33 | fi | ||