求一个脚本 - Chinaunix - Powered by Discuz!

#!/bin/sh
####################################
#OS:RHEL 6.0
#Packages needed:expect;openssh,openssh-clients,openssh-server
#Some warnings:
#(1)rsa type is chosen,which,howerer,can be changed by modifying the script or by providing some available options in future improvements
#(2)No ever .ssh direcotry should exist, or the previous key pairs will be destroyed
#(3)selinux should be set permissively,and the reason still needs investigation
#(4)The script doesn't have to be executed in one of the internal node, but also functions well in external host
#####################################
#arguments processing
usage()
{
cat<<EOF
Usage: $0 -f hostListFile
$0 -h
EOF
exit 1
}
if [ $# -eq 0 ]
then
usage
fi
while getopts :f:h option
do
case "$option" in
h)
uage
;;
f)
hostFile=$OPTARG;
;;
*)
echo "invalid option"
usage
;;
esac
done
if [ -z $hostFile ]
then
usage
fi
echo "script starts to execute..."
echo "gererating keys and some preparation..."
mkdir keys
while read IP user _ hostname
do
ssh-keygen -t rsa -P "" -f keys/$IP
sed -i "s/ [^ ]\+$/ ${user}@$hostname/" keys/${IP}.pub
cat keys/${IP}.pub>>keys/commonKeys
echo $IP>>IPs #IPs is temporary file for storing IP lists to be used by
#ssh-keyscan
done< $hostFile >/dev/null 2>&1
#using environment variables simply for feeding shell variable to expect
export commonKeys=`cat keys/commonKeys`
export knownHosts=`ssh-keyscan -t rsa -f IPs 2>/dev/null` #``only capture the stard output
echo -e "gererating keys and all preparation completed successfully!\n"
while read f1 f2 f3 _
do
echo "authenticating for host $f1..."
export IP="$f1"
export user="$f2"
export pass="$f3"
export public=`cat keys/${IP}.pub`
export private=`cat keys/$IP`
expect -c '
log_file expect.log
log_user 0
set prompt "(%|#|\\$) $"
set IP $env(IP)
set user $env(user)
set pass $env(pass)
spawn -noecho ssh $user@$IP
expect {
"(yes/no)\?" { send "yes\r";exp_continue;}
"password:" {send "$pass\r"}
}
#manully build the ~/.ssh directory
expect -re "$prompt" {
send "if \[ ! -e ~/.ssh \];then mkdir ~/.ssh;fi;echo \"$env(public)\">~/.ssh/id_rsa.pub;echo \"$env(private)\">~/.ssh/id_rsa;echo \"$env(commonKeys)\">~/.ssh/authorized_keys\r"
}
expect -re "$prompt" {
send "ssh-keyscan -t rsa localhost>~/.ssh/known_hosts;echo \"$env(knownHosts)\">>~/.ssh/known_hosts;chmod 600 ~/.ssh/*\r"
}
expect -re "$prompt" exit
'
echo "authentication for host $IP completed successfully!";
done<$hostFile
#trace cleaning
rm -rf keys
rm -f IPs
unset IP
unset user
unset pass
unset public
unset private
unset knownHosts
unset commonKeys

复制代码