Thread: RSA ssh keys

im in situation administrate multiple servers (in hundreds) , have created script, allow servers download specific files @ central server. how can ensure rsa keys people cant go script (vim it) , see server script using.

example of command use download different files.
scp -r server1:/files .

use ssh execute commands on central server build files should be
downloaded. since done user input (variables)

ssh -f server1 "command"

here users read server server1 , rsa works on ssh can connect , make trouble.

way mask server1 ip? script string on hidden place on local system normal users cant figure out or can do?

hopes makes sense.
if docent, please don't hesitate so.

on advance.
kind regards.

you can make keys single purpose. when have them in authorized_keys add command="" beginning of key , put command between quotes.

so

code:

ssh-rsa aaaab3nzac1yc2eaaaadaqabaaabaqcpt+hq9p364aurmigrdauovu0tou4fu50bqtkewkvisvy/vl5unw7dlxxep+lr26rtax81n10farumzrwiipfnwa8s7ujgaqxtnqlarux1ahsdnmrrzumcrsqenbdomd/q2aiu8wljcqexwddwrihepe9nut0zfi2fazo16zbt1xff3uhkkxykweh9aksyq7sljb+q2jw2rnygvnrf0xjctoni4ybsp/pscocprsrhhkxnbzj5ip+orno0uffyjldmsaimtq6ng0vg06pc1a4i3b8eqegoiv22i5fmli0wveqqzkwndve1rvd4mf5l4t/9ypzlbrctt7tkzufbej/l

becomes

code:

command="/usr/local/bin/somescript" ssh-rsa aaaab3nzac1yc2eaaaadaqabaaabaqcpt+hq9p364aurmigrdauovu0tou4fu50bqtkewkvisvy/vl5unw7dlxxep+lr26rtax81n10farumzrwiipfnwa8s7ujgaqxtnqlarux1ahsdnmrrzumcrsqenbdomd/q2aiu8wljcqexwddwrihepe9nut0zfi2fazo16zbt1xff3uhkkxykweh9aksyq7sljb+q2jw2rnygvnrf0xjctoni4ybsp/pscocprsrhhkxnbzj5ip+orno0uffyjldmsaimtq6ng0vg06pc1a4i3b8eqegoiv22i5fmli0wveqqzkwndve1rvd4mf5l4t/9ypzlbrctt7tkzufbej/l

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] RSA ssh keys

Ubuntu