Sstrhsrtj

I have a large number of systems that I need to connect to (hosts.txt) and update permissions of the authorized key file prior to pushing keys out to the systems.

I inherited the files that can push the keys, check sub-nets for hosts that respond to 22 with a set of usernames/passwords and check if ssh can connect with our key. Most of these are written in expect.

I now need to take the list and push the permissions (0700 or 0600?) if needed to the hosts that responded in the sub-net scan so we can push keys out to systems en masse.

I can figure out the do/while read hosts.txt part. The part I'm stuck with is the programming of the ssh to the target system (use sshpass or expect for password automation) with execute of the chmod 0700 ~/.ssh/authorized_key file.

I'd really like to see some return codes when failures happen (the old sysadmins sometimes make root the owner of the ~/.ssh directory or even the ~ directory for the standard user we are adjusting.

I can manually do ssh user@host. The user (and password) will stay the same just the host changes according to the hosts.txt file we will be loading. I'm just trying to avoid doing this hundreds of times manually. Once this is done I'll be able to use the pushkey.exp to automatically (do/while) update all the corrected systems.

Here is what I've got up to this point:

#!/bin/bash

# Permissions fix authorized_keys, using bash

#

# Usage: ./manage_host.sh

# -----------------------------------------------------------------------------

file="/home/user1/bin/hosts.txt"

while IFS= read -r host

do



        expect -f

                spawn ssh remoteuser@$host

                expect "assword:"

                send "ourpasswordherer"

        if [ ! -d "~/.ssh"]; then mkdir -p ~/.ssh fi



        if [ ! -f "~/.ssh/authorized_keys."]; then touch ~/.ssh/authorized_keys. fi



        chown -R remoteuser:remoteuser ~/.ssh

        # store exit status of chown

        status=$?



        # Error checking subroutine to post failures on manager server

        if [ $status -ne 0 ]; then echo "'$host' ownership could not be set to svcsis." >> results.txt; fi



        chmod 600 ~/.ssh/authorized_keys



        exit



        ./push_key.exp remoteuser@$host



        ./keycheck.sh $host >>response.txt

done