adding password to .ssh/config [closed]
I'm using ubuntu 12.04. I'm using ssh for connecting to many servers daily, so I put their parameters in .ssh/config file; like this :
Host server1
User tux
Port 2202
HostName xxx.x.xx.x
I know we should use key-pair ensure security, however sometimes we can't add public key into the remote machine (e.g. a public SSH server which accepting password and execute a specific command, or an user without a home directory).
So, is there a way to put passwords in this file, for each connection? So when the server asks for a password, the terminal puts its pass and send it to the server, so I need not type the password each time.
No, There is no method to specify or provide on the command line the password in a non-interactive manner for ssh authentication using a openssh built-in mechanism. At least not one what I know of. You could hardcode your password into expect script but it is not a good solution either.
You definitely would want to use keypairs for passwordless authentication as Michael stated, in the end private key is pretty much a big password in the file.
To avoid the string of comments: Yes, this is insecure (not even arguably insecure). I would strongly recommend you only do it in a lab situation on an isolated network or a similiar situation that does not involve production servers or potentientially production server without a full reset/format.
I wanted to set this up as I don't think my 2950 switch supports private/public keys and I hope at some point to get that knowledge, but I am not there yet.
Using an alias and sshpass this can be accomplished.
- Install sshpass
- Alter your .ssh/config file to include the username as listed in the question
- Add an alias to your terminal (I used .bashrc and would recommend against gloabl settings)
- Use alias to log into the target
My example alias is:
alias ssc='sshpass -pcisco ssh'
Where "cisco" is the password. Note there is no space between the -p and the password.
Usage is (referencing the question):
ssc server1
Note: This answers the question in title only for those using search engines. If you are using servers like the question example, private/public key pairs and not this answer should be used