[sork] Fwd: Re: Passwd support for expect/ssh

Steve Vickroy Steve at vickroy.info
Thu Jul 21 15:16:41 PDT 2005



  I was able to remove the DISPLAY environment variable through the
envvars file of apache. I also added the -x parameter to ssh.
However, things are basically the same without the 10.1.  I also
disabled X11 forwarding on sshd.  There is X11 running on 0.0.  I
could try that in envvars.

  In other words it says "cannot open display" instead of "cannot
open display :10.0"

----- Forwarded message from eric.rostetter at physics.utexas.edu -----
    Date: Thu, 21 Jul 2005 11:21:00 -0500
    From: Eric Rostetter <eric.rostetter at physics.utexas.edu>
Reply-To: Eric Rostetter <eric.rostetter at physics.utexas.edu>
Subject: Re: [sork] Passwd support for expect/ssh
      To: sork at lists.horde.org

Quoting Steve Vickroy <Steve at vickroy.info>:

>   I have opted to use the ssh/expect option for changing passwords.

> I don't know much about expect.  I turned on debugging and am
having
> trouble with ssh-askpass.  I am not sure how or why it is called
but
> this is the error message I can't get past:

You don't want it calling ssh-askpass.  Check if you set your DISPLAY
and/or SSH_ASKPASS environment variables for the account this is
running
under, and if so remove/unset them.

>   expect: does "Error: Can't open display: localhost:10.0\r\n"

You might try disabling X11 Forwarding on the ssh command by
specifying
the "-x" switch to ssh.

> (spawn_id exp33) match regular expression "The authenticity of
host.*
> can't be established.*\nRSA key fingerprint is.*\nAre you sure you
> want to continue connecting.*"? no^M
> "(P|p)assword.*"? no

You will probably need to login manually from the account it is
running
under to setup the proper keys and answer the questions like above.
Once that is done, the script should run fine.

You could also disable strict key checking and so on in SSH, but that
is
much less secure then, so I don't recommend it.

-- 
Eric Rostetter
The Department of Physics
The University of Texas at Austin

Why get even? Get odd!
-- 
Sork mailing list - Join the hunt: http://horde.org/bounties/#sork[1]
Frequently Asked Questions: http://horde.org/faq/[2]
To unsubscribe, mail: sork-unsubscribe at lists.horde.org

----- End forwarded message -----

Links:
------
[1]
/horde/services/go.php?url=http%3A%2F%2Fhorde.org%2Fbounties%2F%23sork
[2] /horde/services/go.php?url=http%3A%2F%2Fhorde.org%2Ffaq%2F


More information about the sork mailing list