paramiko 启用openssh代理程序转发

yongsheng_2012

麻烦大家帮忙看个问题：
paramiko 有没有“启用openssh代理程序转发”这个功能，如果有的话，该怎么用



openssh代理程序转发也就是在man ssh中的-A选项
-A      Enables forwarding of the authentication agent connection.  This can also be specified on a per-host basis in a configuration file.

             Agent forwarding should be enabled with caution.  Users with the ability to bypass file permissions on the remote host (for the agent’s
             Unix-domain socket) can access the local agent through the forwarded connection.  An attacker cannot obtain key material from the
             agent, however they can perform operations on the keys that enable them to authenticate using the identities loaded into the agent.

谢谢

cnvbird

这个没有用过

yongsheng_2012

没有人用过吗？

或者是说没有这个选项

reyleon

你是想做什么呐?

jxing_ing

1. 
   
2. client = paramiko.SSHClient()
   
3. client.load_system_host_keys()
   
4. client.connect('127.0.0.1', port=22, allow_agent=True)
   

复制代码

试试？

jxing_ing

1. class MySSH(SSHClient):
   
2.     def __init__(self, *args, **kwargs):
   
3.         super(self.__class__, self).__init__(*args, **kwargs)
   
4.         self.load_system_host_keys()
   
5.         self.set_missing_host_key_policy(AutoAddPolicy())
   
6. 
   
7.     def connect(self, *args, **kwargs):
   
8.         super(self.__class__, self).connect(*args, **kwargs)
   
9. 
   
10.     def exec_command_chan(self, command, combine_stderr=True, timeout=None, get_pty=False):
    
11.         """执行命令， 并返回 channel"""
    
12.         chan = self._transport.open_session()
    
13.         if(get_pty):
    
14.             chan.get_pty()
    
15.         chan.request_forward_agent(agent.AgentClientProxy)
    
16.         #chan.set_combine_stderr(combine_stderr)
    
17.         chan.settimeout(timeout)
    
18.         chan.exec_command(command)
    
19.         return chan
    
20. 
    
21. if  __name__ == '__main__':
    
22.     ssh = MySSH()
    
23.     ssh.connect('127.0.0.1')
    
24.     chan = ssh.exec_command_chan('ssh -o StrictHostKeyChecking=no 127.0.0.1 \
    
25.         ssh -o StrictHostKeyChecking=no 127.0.0.1 "ip addr show ; echo stderr line >&2"')
    
26.     stdout = chan.makefile('rb', -1)
    
27.     stderr = chan.makefile_stderr('rb', -1)
    
28.     print '*** stdout'
    
29.     for line in stdout:
    
30.         print line,
    
31.     print '*** stderr'
    
32.     for line in stderr:
    
33.         print line,

复制代码

找到之前写过的一断测试代码， 不知楼主是不是要这个功能

reyleon

回复 6# jxing_ing


    学习,猜测楼主应该是要这个.

pitonas

没有用过这个？{:2_176:}