Allow use of Unix ssh-copy-id script [#1514994]

When setting up my new account at Omega8 I had to manually upload my public key to ~/.ssh/authorized_keys and deal with the file perms in the right order - a minor pain in the neck.

With other server arrangements, I just use the available Unix script, "ssh-copy-id" which takes care of the whole thing automagically.

It apparently doesn't work on Octopus because "ssh-copy-id over SSH is not added to the list of commands
allowed over SSH by default", according to support@omega8, meaning I presume, that some of the script's commands fail.

About the script: http://linux.die.net/man/1/ssh-copy-id

I just did this: ssh-copy-id username.ftp@username.v130a.sin.host8.biz and got the error.

Omega8 suggested I create a feature request to allow this script to work, so here it is.

Comments

Comment #1

omega8cc CreditAttribution: omega8cc commented 4 April 2012 at 22:52

Status:

Active

» Fixed

Fixed in commits:

http://drupalcode.org/project/octopus.git/commit/3b17207
http://drupalcode.org/project/octopus.git/commit/0a90698

Thanks!

Comment #2

18 April 2012 at 23:01

Status:

Fixed

» Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

Comment #3

druplicate CreditAttribution: druplicate commented 25 June 2012 at 08:50

Status:

Closed (fixed)

» Active

I had another opportunity to try this but it failed:

ssh-copy-id -i .ssh/id_rsa.pub v4674974926.ftp@v4674974926.v133d.sin.host8.biz
v4674974926.ftp@v4674974926.v133d.sin.host8.biz's password:

*** forbidden char/command over SSH: "umask 077; test -d ~/.ssh | mkdir ~/.ssh ; cat >> ~/.ssh/authorized_keys"

Did this commit not make it into the latest BOA?

Comment #4

omega8cc CreditAttribution: omega8cc commented 13 July 2012 at 23:29

Hmm, I'm afraid we didn't really test this enough and if this script runs these chained commands, we can't allow this for security reasons. I think we should mark this as won't fix, sorry.