blocks|key|1804537|text|将sshpass与锁定的凭据文件相结合，实际上，它就像任何东西一样安全-如果您已经让root用户读取凭据文件，那么所有的赌注都是无效的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1804538|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Combine sshpass with a locked-down credentials file and, in practice, it's as secure as anything - if you've got root on the box to read the credentials file, all bets are off anyway.

blocks|key|1804624|text|EXPECT是一个很好用的程序。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1804625|在Ubuntu上，使用以下命令安装：|1804626|sudo+apt-get+install+expect|code-block|syntax|javascript|1804627|在CentOS计算机上，使用以下命令进行安装：|1804628|yum+install+expect|1804629|假设您想要与sftp服务器建立连接，然后将本地文件从本地计算机上传到远程sftp服务器。|1804630|#!/usr/bin/expect

spawn+sftp+username@hostname.com
expect+"password:"
send+"yourpasswordhere\n"
expect+"sftp>"
send+"cd+logdirectory\n"
expect+"sftp>"
send+"put+/var/log/file.log\n"
expect+"sftp>"
send+"exit\n"
interact|1804631|这将使用您的密码打开到服务器的sftp连接。|1804632|然后转到您想要上传文件的目录，在本例中为"logdirectory“|1804633|这会将位于/var/+file.log+/的本地目录中的日志文件上载到远程服务器上的"logdirectory“中|1804634|entityMap^0|0|6|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|15|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|16|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|17|8|@]|D|@]|E|$]]|$1|O|3|P|5|J|7|18|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|19|8|@]|D|@]|E|$]]|$1|S|3|T|5|J|7|1A|8|@]|D|@]|E|$K|L]]|$1|U|3|V|5|6|7|1B|8|@]|D|@]|E|$]]|$1|W|3|X|5|6|7|1C|8|@]|D|@]|E|$]]|$1|Y|3|Z|5|6|7|1D|8|@]|D|@]|E|$]]|$1|10|3|-4|5|6|7|1E|8|@]|D|@]|E|$]]]|11|$]]

<code>EXPECT</code> is a great program to use.
On Ubuntu install it with:
<pre><code>sudo apt-get install expect
</code></pre>
On a CentOS Machine install it with:
<pre><code>yum install expect
</code></pre>
Lets say you want to make a connection to a sftp server and then upload a local file from your local machine to the remote sftp server
<pre><code>#!/usr/bin/expect

spawn sftp username@hostname.com
expect &quot;password:&quot;
send &quot;yourpasswordhere\n&quot;
expect &quot;sftp&gt;&quot;
send &quot;cd logdirectory\n&quot;
expect &quot;sftp&gt;&quot;
send &quot;put /var/log/file.log\n&quot;
expect &quot;sftp&gt;&quot;
send &quot;exit\n&quot;
interact
</code></pre>
This opens a sftp connection with your password to the server.
Then it goes to the directory where you want to upload your file, in this case &quot;logdirectory&quot;
This uploads a log file from the local directory found at /var/log/ with the files name being file.log to the &quot;logdirectory&quot; on the remote server

blocks|key|1804736|text|最近我被要求从ftp切换到sftp，以确保服务器之间的文件传输安全。我们使用Tectia包，它有一个选项--password来在命令行上传递密码。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1804737|示例：sftp+--password="password"+"userid"@"servername"|1804738|批处理示例：|1804739|(
++echo+"
++ascii
++cd+pub
++lcd+dir_name
++put+filename
++close
++quit
++++"
)+%7C+sftp+--password="password"+"userid"@"servername"|code-block|syntax|javascript|1804740|在运行帮助命令(sftp+-h)之前，我想我应该分享这些信息，因为我正在查看各种网站，我很惊讶地看到了密码选项。|1804741|entityMap^0|1G|A|0|3|1C|0|0|0|8|7|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|Y|8|@]|D|@]|E|$]]|$1|J|3|K|5|L|7|Z|8|@]|D|@]|E|$M|N]]|$1|O|3|P|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@]|E|$]]|$1|Q|3|-4|5|6|7|13|8|@]|D|@]|E|$]]]|R|$]]

I was recently asked to switch over from ftp to sftp, in order to secure the file transmission between servers. We are using Tectia SSH package, which has an option <code>--password</code> to pass the password on the command line.

example : <code>sftp --password="password" "userid"@"servername"</code>

Batch example : 

<pre><code>(
 echo "
 ascii
 cd pub
 lcd dir_name
 put filename
 close
 quit
 "
) | sftp --password="password" "userid"@"servername"
</code></pre>

I thought I should share this information, since I was looking at various websites, before running the help command (<code>sftp -h</code>), and was i surprised to see the password option.

blocks|key|1804838|text|另一种方法是使用lftp：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1804839|lftp+sftp://user:password@host++-e+"put+local-file.name;+bye"|code-block|syntax|javascript|1804840|这种方法的缺点是，计算机上的其他用户可以从ps等工具读取密码，并且密码可能成为您的shell历史记录的一部分。|offset|length|style|CODE|1804841|从lftp4.5.0开始提供的一种更安全的替代方法是使用--env-password设置LFTP_PASSWORD环境变量并执行LFTP。下面是一个完整的示例：|1804842|LFTP_PASSWORD="just_an_example"
lftp+--env-password+sftp://user@host++-e+"put+local-file.name;+bye"|1804843|LFTP还包括一个很酷的镜像功能(可以包括在确认传输--Remove-source-files后删除)：|1804844|lftp+-e+'mirror+-R+/local/log/path/+/remote/path/'+--env-password+-u+user+sftp.foo.com|1804845|entityMap^0|0|0|L|2|0|S|E|18|D|0|0|Q|L|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@$I|Z|J|10|K|L]]|9|@]|A|$]]|$1|M|3|N|5|6|7|11|8|@$I|12|J|13|K|L]|$I|14|J|15|K|L]]|9|@]|A|$]]|$1|O|3|P|5|D|7|16|8|@]|9|@]|A|$E|F]]|$1|Q|3|R|5|6|7|17|8|@$I|18|J|19|K|L]]|9|@]|A|$]]|$1|S|3|T|5|D|7|1A|8|@]|9|@]|A|$E|F]]|$1|U|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|V|$]]

Another way would be to use lftp:

<pre><code>lftp sftp://user:password@host -e "put local-file.name; bye"
</code></pre>

The disadvantage of this method is that other users on the computer can read the password from tools like <code>ps</code> and that the password can become part of your shell history. 

A more secure alternative which is available since LFTP 4.5.0 is setting the <code>LFTP_PASSWORD</code>environment variable and executing lftp with <code>--env-password</code>. Here's a full example:

<pre><code>LFTP_PASSWORD="just_an_example"
lftp --env-password sftp://user@host -e "put local-file.name; bye"
</code></pre>

LFTP also includes a cool mirroring feature (can include delete after confirmed transfer <code>--Remove-source-files</code>):

<pre><code>lftp -e 'mirror -R /local/log/path/ /remote/path/' --env-password -u user sftp.foo.com
</code></pre>

blocks|key|1804936|text|您可以在shell脚本中以交互方式使用lftp，这样密码就不会保存在.bash_history或类似的文件中，方法如下：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1804937|vi+test_script.sh|code-block|syntax|javascript|1804938|将以下内容添加到文件中：|1804939|#!/bin/sh
HOST=<yourhostname>
USER=<someusername>
PASSWD=<yourpasswd>

cd+<base+directory+for+your+put+file>

lftp<<END_SCRIPT
open+sftp://$HOST
user+$USER+$PASSWD
put+local-file.name
bye
END_SCRIPT|1804940|在编辑put文件的主机、用户、路径和目录后，编写/退出vi编辑器，键入:wq+.Then+make+your+script+executable+chmod+%2Bx+test_script.sh并执行它./test_script.sh。|offset|length|style|CODE|1804941|entityMap^0|0|0|0|0|Z|3|21|N|2S|G|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|W|8|@$M|X|N|Y|O|P]|$M|Z|N|10|O|P]|$M|11|N|12|O|P]]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|R|$]]

You can use lftp interactively in a shell script so the password not saved in .bash_history or similar by doing the following:

<pre><code>vi test_script.sh
</code></pre>

Add the following to your file:

<pre><code>#!/bin/sh
HOST=&lt;yourhostname&gt;
USER=&lt;someusername&gt;
PASSWD=&lt;yourpasswd&gt;

cd &lt;base directory for your put file&gt;

lftp&lt;&lt;END_SCRIPT
open sftp://$HOST
user $USER $PASSWD
put local-file.name
bye
END_SCRIPT
</code></pre>

And write/quit the vi editor after you edit the host, user, pass, and directory for your put file typing <code>:wq</code> .Then make your script executable <code>chmod +x test_script.sh</code> and execute it <code>./test_script.sh</code>.

blocks|key|1590469|text|您可以通过启用无密码身份验证来覆盖。但是你应该在开始之前安装密钥(pub，priv)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1590470|在本地服务器上执行以下命令。|1590471|Local+$>+ssh-keygen+-t+rsa+|code-block|syntax|javascript|1590472|对提示的所有选项按ENTER键。不需要键入任何值。|1590473|Local+$>+cd+.ssh
Local+$>+scp+.ssh/id_rsa.pub+user@targetmachine:
Prompts+for+pwd$>++ENTERPASSWORD|1590474|使用以下命令连接到远程服务器|1590475|Local+$>+ssh+user@targetmachine
Prompts+for+pwd$>+ENTERPASSWORD|1590476|在远程服务器上执行以下命令|1590477|Remote+$>+mkdir+.ssh
Remote+$>+chmod+700+.ssh
Remote+$>+cat+id_rsa.pub+>>+.ssh/authorized_keys
Remote+$>+chmod+600+.ssh/authorized_keys
Remote+$>+exit|1590478|在本地服务器执行以下命令，测试无密码认证。应该在没有密码的情况下连接。|1590479|$>+ssh+user@targetmachine|1590480|entityMap^0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|12|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|13|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|14|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|15|8|@]|9|@]|A|$]]|$1|O|3|P|5|F|7|16|8|@]|9|@]|A|$G|H]]|$1|Q|3|R|5|6|7|17|8|@]|9|@]|A|$]]|$1|S|3|T|5|F|7|18|8|@]|9|@]|A|$G|H]]|$1|U|3|V|5|6|7|19|8|@]|9|@]|A|$]]|$1|W|3|X|5|F|7|1A|8|@]|9|@]|A|$G|H]]|$1|Y|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|Z|$]]

You can override by enabling Password less authentication. But you should install keys (pub, priv) before going for that. 

Execute the following commands at local server.

<pre><code>Local $&gt; ssh-keygen -t rsa 
</code></pre>

Press ENTER for all options prompted. No values need to be typed.

<pre><code>Local $&gt; cd .ssh
Local $&gt; scp .ssh/id_rsa.pub user@targetmachine:
Prompts for pwd$&gt; ENTERPASSWORD
</code></pre>

Connect to remote server using the following command

<pre><code>Local $&gt; ssh user@targetmachine
Prompts for pwd$&gt; ENTERPASSWORD
</code></pre>

Execute the following commands at remote server

<pre><code>Remote $&gt; mkdir .ssh
Remote $&gt; chmod 700 .ssh
Remote $&gt; cat id_rsa.pub &gt;&gt; .ssh/authorized_keys
Remote $&gt; chmod 600 .ssh/authorized_keys
Remote $&gt; exit
</code></pre>

Execute the following command at local server to test password-less authentication.
It should be connected without password.

<pre><code>$&gt; ssh user@targetmachine
</code></pre>

I need to transfer a log file to a remote host using <a href="http://en.wikipedia.org/wiki/Secure_file_transfer_program" rel="noreferrer">sftp</a> from a Linux host. I have been provided credentials for the same from my operations group. However, since I don't have control over other host, I cannot generate and share RSA keys with the other host. 

So is there a way to run the <code>sftp</code> command (with the username/password provided) from inside the Bash script through a <a href="http://en.wikipedia.org/wiki/Cron" rel="noreferrer">cron</a> job?

I found a similar Stack Overflow question, <a href="https://stackoverflow.com/questions/5268865">Specify password to sftp in a Bash script</a>, but there was no satisfactory answer to my problem.

How to run the sftp command with a password from Bash script?

身份验证

日志文件

服务器

CentOS

Ubuntu

Linux

我需要从Linux主机使用将日志文件传输到远程主机。我的运营组已经为我提供了相同的凭证。但是，由于我无法控制其他主机，因此无法生成RSA密钥并与其他主机共享。那么，有没有办法通过作业从sftp脚本内部运行Bash命令(提供用户名/密码)呢？我发现了一个类似的堆栈溢出问题，，但我的问题没有令人满意的答案。

问如何在Bash脚本中使用密码运行sftp命令？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Bash脚本中使用密码运行sftp命令？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Bash脚本中使用密码运行sftp命令？
EN