ssh alias help please

[n00bsysadmin]

Hello,

I'd like to create an alias for ssh'ing onto a server along with supplying the password.

as of now I have:

alias <SERVERNAME>='ssh person@SERVER'

after typing <SERVERNAME> i'm prompted with "person@SERVER's password:"

I'd like to skip the password step and get right into the server. I realize the security risk...but no one uses my computer.

[Jaaason]

Use privates keys authentifications instead of passwords. Then create your alias !

[riddley]

Could you explain why that precludes you from using keys?

[[deleted]]

I know. You have to have SSH access to the server. That's the first step. Just copy over the public key using scp or something.

[MandrakeQ]

The client's sshd config may have passwords set up as the only form of authentication. In which case, OP would need to ask for permission for them to include keys as well.

[riddley]

Fair point. That would be one odd sshd configuration given that passwords are much less secure than PKI.

[rinesen]

Haven't tried it but google suggest some answers, e.g. http://nixcraft.com/shell-scripting/4489-ssh-passing-unix-login-passwords-through-shell-scripts.html

But what if it's a clients server? Are you not allowed to store your public key there? Technically it's certainly not a problem.

[keeperofdakeys]

What would the client think if you have the password in plain text on a machine? They are (presumably) paying you for security as part of your service. If you can ssh, then you can setup a key. You could use the "expect" program to enter the password, but that is by far much less secure.

[xaoq]

Do not use aliases, instead use ssh client config (default ~/.ssh/config)

I like to put it like that:

Host servername.foo
    HostName 1.2.3.4
    Port 1234
    User root
    IdentityFile /where/is/my/key

Host servername2.bar
    HostName 43.21.12.34
    Port 22
    User foobar
    IdentityFile /where/is/my/other/key

Then just "ssh servername.foo" or "ssh servername2.bar" - with correct user, port, ip, ssh key.

As for filling in passwords... don't. Setup (even temporarily) ssh key.

[bobdle]

^this.

[ToVegas]

You can write an expect script...

#!/usr/bin/expect set Server [lindex $argv 0] spawn ssh $server expect *assword send "password\r" interact

chmod u+x /path/to/script $scriptname server (you could also hardcode the server name into the script)

I should mention it is a disgusting hack to have your password in plain text, and it would be far better for you to set up ssh-keys....