python - 使用 Python 进行代理跳转
问题描述
我想实现类似ssh -J user@host1 user@host2
主机 1 和主机 2 都只接受通过键盘交互而不是公钥或常规密码身份验证的身份验证。两台主机的密码相同。这些是我无法更改的限制,因此请不要“使用 ssh 密钥”答案:)
我已经在 paramiko 中尝试过这样做(见下文),但是我愿意使用其他 python 模块来实现这一点。
import paramiko
...
client1 = paramiko.SSHClient()
client1.set_missing_host_key_policy(paramiko.AutoAddPolicy())
client1.connect(host1, 22, username, password=password)
transport = client1.get_transport()
dest_addr = (host2, 22)
local_addr = ('127.0.0.1', 22)
channel = transport.open_channel("direct-tcpip", dest_addr, local_addr)
client2 = paramiko.SSHClient()
client2.set_missing_host_key_policy(paramiko.AutoAddPolicy())
client2.connect(host2, username, password=password, sock=channel)
但我收到以下错误:
Traceback (most recent call last):
File "/usr/local/lib/python3.7/site-packages/paramiko/transport.py", line 1528, in auth_password
return self.auth_interactive(username, handler)
File "/usr/local/lib/python3.7/site-packages/paramiko/transport.py", line 1633, in auth_interactive
return self.auth_handler.wait_for_response(my_event)
File "/usr/local/lib/python3.7/site-packages/paramiko/auth_handler.py", line 250, in wait_for_response
raise e
paramiko.ssh_exception.AuthenticationException: Authentication failed.
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File “./myscript”, line 50, in <module>
client2(host2, username, password=password, sock=channel)
File "/usr/local/lib/python3.7/site-packages/paramiko/client.py", line 446, in connect
passphrase,
File "/usr/local/lib/python3.7/site-packages/paramiko/client.py", line 764, in _auth
raise saved_exception
File "/usr/local/lib/python3.7/site-packages/paramiko/client.py", line 751, in _auth
self._transport.auth_password(username, password)
File "/usr/local/lib/python3.7/site-packages/paramiko/transport.py", line 1531, in auth_password
raise e
File "/usr/local/lib/python3.7/site-packages/paramiko/transport.py", line 1509, in auth_password
return self.auth_handler.wait_for_response(my_event)
File "/usr/local/lib/python3.7/site-packages/paramiko/auth_handler.py", line 250, in wait_for_response
raise e
paramiko.ssh_exception.BadAuthenticationType: Bad authentication type; allowed types: ['publickey', 'keyboard-interactive']
当 host1 和 host2 都使用 publickey 身份验证时,整个事情都可以正常工作,但是在这个特定的示例中,我需要使用键盘交互。
编辑:
连接host2失败,paramiko日志文件内容如下:
INF [20200907-20:39:41.318] thr=1 paramiko.transport: Connected (version 2.0, client X)
INF [20200907-20:39:41.803] thr=1 paramiko.transport: Authentication (publickey) failed.
INF [20200907-20:39:41.960] thr=1 paramiko.transport: Authentication (publickey) failed.
INF [20200907-20:39:42.685] thr=1 paramiko.transport: Authentication (keyboard-interactive) successful!
INF [20200907-20:39:42.877] thr=2 paramiko.transport: Connected (version 2.0, client X)
INF [20200907-20:39:43.283] thr=2 paramiko.transport: Authentication (publickey) failed.
INF [20200907-20:39:43.444] thr=2 paramiko.transport: Authentication (publickey) failed.
INF [20200907-20:39:43.795] thr=2 paramiko.transport: Authentication (keyboard-interactive) failed.
解决方案
没关系,原来我的第二条连接线是错误的:
client2.connect(host2, username, password=password, sock=channel)
我没有指定第二个参数是什么:
client2.connect(host2, username=username, password=password, sock=channel)
或者
client2.connect(host2, 22, username, password=password, sock=channel)
两者都按预期工作。
推荐阅读
- makefile - 跨目标的评估是否同时安全?
- full-text-search - MariaDB“自然语言模式”的语法是什么?
- ruby-on-rails - 如何在 FacebookAds::AdSet 对象上设置嵌套属性值
- html - 如何设置悬停后过渡的持续时间
- macos - 颤振医生:错误:无法连接到lockdownd,错误代码-21
- java - 当数据库结构与我们在使用 hibernate 的对象关系映射中指定的不匹配时对系统性能的影响
- node.js - ExpressJS:请求已被 CORS 策略阻止:请求的资源上不存在“Access-Control-Allow-Origin”标头
- bash - 在 unix 脚本中执行命令并计算时间
- python - AWS Lambda python 描述异常
- docker - 我如何在 Parse 独立容器中运行命令/打开终端