Sstrhsrtj

I have the following task:

• the command has to be run as root on server remotely in bash script over ssh and the command output has to be fetched in variable.


• logging over ssh as root is disabled.


• sudo on server is disabled, so I have to use su.


• EDIT: since I want to make it as automated as possible in bash, the password has to be stored inside command

I have Googled for days, but it seems that I cannot find a solution for this.

Solution proposed here: ssh to server and switch user and change a directory

    ssh -t username@hostname "sudo su - otheruser -c "cd /path/to/directory && command""

does not work because sudo is disabled on server:

Does anyone have a solution to this?

Perhaps somewhat off topic but this could be achieved with Python and the paramiko module:

#!/usr/bin/python2



import paramiko



ssh = paramiko.SSHClient()

ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())

ssh.connect('127.0.0.1', port=22, username='user', password='pass')



stdin, stdout, stderr = ssh.exec_command('su')

stdin.write('root_password_goes_heren')



[ add extra code here to execute a command ]



stdin.flush()

print (stdout.readlines())

ssh.close()

It should be noted that storing passwords in script generally is a bad idea from a security perspective. Make sure you have proper permissions set to the script (e.g. chmod 740)

Login via SSH (as unprivileged user), then run the command su without any arguments to change to the root user. You will need the root password to do this. Then run whatever commands you want to run.
EDIT: If you want to do it in one line, you can use the following:
ssh username@hostname "su -c "code_here""

If this doesn't work, make sure the root password is enabled by running passwd as root. This will ask you for a new root password.
Extra: To run a command as another user besides root (Please note that this requires the target user's password):
ssh username@hostname "su - username_of_target -c "code_here""

So, after 4 hours of additional web crawling, I finally made it! Big thanks for @jeroen-it-nerdbox for giving me insights on this:

Task was to take data from smartctl (which requires root credentials), from server with disabled ssh-root and disabled sudo.
This will of course also work with sudo instead of su.

here is the full workable code in Python with Paramiko implementation.

#!/usr/bin/python2



import paramiko



ssh = paramiko.SSHClient()

ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())

ssh.connect('rootserver.domain.com', port=22, username='admin', password='adminpass')



stdin, stdout, stderr = ssh.exec_command('/bin/su root -c "smartctl -a /dev/sda > /tmp/smartctl_output"', get_pty=True)

stdin.write('rootpassn')



stdin.flush()

print (stdout.readlines())

ssh.close()

You can also used paramiko invoke shell command for interactive session.
https://www.youtube.com/watch?v=lLKdxIu3-A4

enter code here



import paramiko

from paramiko.channel import Channel

import time

ssh = paramiko.SSHClient()

ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())

ssh.connect('ip', port=22, username='non-root', password='non-root-password')



channel:Channel = ssh.invoke_shell()

print(type(channel))

channel_data = str()



while True:

   if channel.recv_ready():

       time.sleep(2)

       channel_data += str(channel.recv(999))

   else:

       continue



   channel.send("whoamin")

   time.sleep(2)

   channel_data += str(channel.recv(999))



   channel.send("sun")

   time.sleep(5)

   channel_data += str(channel.recv(999))



   # if "Password" in channel_data:

   channel.send("rootpaaswordn")

   time.sleep(2)

   channel_data += str(channel.recv(999))



   channel.send("whoamin")

   time.sleep(2)

   channel_data += str(channel.recv(999))



   # channel_data += str(channel.recv(999))

   break

print(channel_data)