1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
#! /bin/bash
# Copyright (c) 2007 Andrés J. Díaz <ajdiaz@connectical.net>
#
# Permission is hereby granted, free of charge, to any person
# obtaining a copy of this software and associated documentation
# files (the "Software"), to deal in the Software without restriction,
# including without limitation the rights to use, copy, modify, merge,
# publish, distribute, sublicense, and/or sell copies of the Software,
# and to permit persons to whom the Software is furnished to do so,
# subject to the following conditions:
#
# The above copyright notice and this permission notice shall be
# included in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
#
# Downloaded from https://launchpad.net/ssh-keysend
ssh_keysend_db_keys=( ~/.ssh/*.pub )
ssh_keysend_db_host=( ~/.ssh/known_hosts )
log_level=0
fatal () { echo "fatal: $@" >&2 ; ${E:+exit $E}; }
require () { type -p "$1" 2>&1 >/dev/null; }
debug () { :; }
list () { :; }
help ()
{
echo "$0 [options] <user[@host]> <remotehost>..."
echo
echo "ssh-keysend send a number of public ssh keys to a different"
echo "machines over a network. user@host is the user in the hostname"
echo "host who ssh-keysend will authorize in a list of remotehosts."
echo
echo "Options:"
echo " -h display this help screen"
echo " -v increase verbosity"
echo " -p pretend. Do not do really"
echo " -K file use file as key database"
echo " -H file use file as host database"
echo
echo "Andrés J. Díaz <ajdiaz@connectical.net>"
}
verbose () {
debug () { echo "debug::$@" >&2; }
list () {
for item in "$@"; do
if [ "${item%% *}" != "${item## *}" ]
then
debug " [${item%% *}] ${item##* } "
else
debug " ${item}"
fi
done;
}
}
# Parse options in command line using getopts.
while getopts "hvpK:H:" option "$@"; do
case $option in
v) verbose ;;
h) help && exit 0 ;;
p) pretend=true ;;
K) ssh_keysend_db_keys="$OPTARG" ;;
H) ssh_keysend_db_host="$OPTARG" ;;
esac
done ; shift $((OPTIND -1))
# Check if pattern search argument exists, if not then exit with error code
# one. If @ is not present in pattern search, add wildcard automatically.
[ "$1" ] || E=1 fatal $"user@host not specified."
user="$1"; shift
[ "${user%@*}" = "${user}" ] && set -- "${user:-.*}@.*" "$@"
debug "Found pattern keys is: $1"
debug "Found pattern host is: ${2:-.*}"
# Getting the keys which matching with pattern search into ssh-keysend
# public keys database.
keys="$(
awk "/[ ]$1$/ { printf \"'%s'\n\",\$0 }" "${ssh_keysend_db_keys[@]}"
)"
eval keys=( $keys )
debug $"Found ${#keys[@]} key(s) for specified pattern matching."
list "${keys[@]}"
# Getting the hosts which we will send the specified keys via ssh-keysend.
host="$(
awk "/^${2:-.*}/ { gsub(\",.*\",\"\"); printf \"'%s'\n\",\$1 }" \
"${ssh_keysend_db_host[@]}"
)"
eval host=( $host )
debug $"Affected ${#host[@]} host(s) for current action."
list "${host[@]}"
# The keys() function return a short list of keys to be exported, including
# the user@host and key type.
keys ()
{
oldIFS="$IFS" ; export IFS=$'\n'
keys="${keys[*]}"; export IFS="$oldIFS"
echo "${keys}"
}
# If running in pretend mode, then it's a good moment to exit.
${pretend:-false} && exit 0
# For each host try to put ssh key in respective authorized_keys file.
for host in "${host[@]}" ; do
[ "${host##*@}" = "${host}" ] && host="$user@$host"
debug "Sending keys to $host..."
keys | ssh "$host" "mkdir -p ~/.ssh && cat >> ~/.ssh/authorized_keys"
done
# vim:foldmethod=syntax:foldenable:
|
