Net::SSH::AuthorizedKeysFile - Read and modify ssh's authorized_keys files
use Net::SSH::AuthorizedKeysFile;
# Reads $HOME/.ssh/authorized_keys by default
my $akf = Net::SSH::AuthorizedKeysFile->new();
$akf->read("authorized_keys");
# Iterate over entries
for my $key ($akf->keys()) {
print $key->as_string(), "\n";
}
# Modify entries:
for my $key ($akf->keys()) {
$key->option("from", 'quack@quack.com');
$key->keylen(1025);
}
# Save changes back to $HOME/.ssh/authorized_keys
$akf->save() or die "Cannot save";
Net::SSH::AuthorizedKeysFile reads and modifies
"authorized_keys" files.
"authorized_keys" files contain public keys
and meta information to be used by "ssh" on
the remote host to let users in without having to type their password.
- "new"
- Creates a new Net::SSH::AuthorizedKeysFile object and reads in the
authorized_keys file. The filename defaults to
"$HOME/.ssh/authorized_keys" unless
overridden with
Net::SSH::AuthorizedKeysFile->new( file => "/path/other_authkeys_file" );
Normally, the "read" method
described below will just silently ignore faulty lines and only gobble
up keys that either one of the two parsers accepts. If you want it to be
stricter, set
Net::SSH::AuthorizedKeysFile->new( file => "authkeys_file",
abort_on_error => 1 );
and read will immediately abort after the first faulty line.
Also, the key parsers are fairly lenient in default mode. Adding
strict => 1
adds sanity checks before a key is accepted.
- "read"
- Reads in the file defined by new(). By default, strict mode is off
and read() will silently ignore faulty lines. If it's on (see
new() above), read() will immediately abort after the first
faulty line. A textual description of the last error will be available via
error().
- "content"
- Contains the original file content, read by
"read()" earlier. Can be used to set
arbitrary content:
$keysfile->content( "some\nrandom\nlines\n" );
and have "parse()" operate
on a string instead of an actual file this way.
- "keys"
- Returns a list of Net::SSH::AuthorizedKey objects. Methods are described
in Net::SSH::AuthorizedKey.
- "as_string"
- String representation of all keys, ultimately the content that gets
written out when calling the "save()"
method. Note that comments from the original file are lost.
- "save"
- Write changes back to the authorized_keys file using the
as_string() method described above. Note that comments from the
original file are lost. Optionally takes a file name parameter, so calling
"$akf->save("foo.txt")"
will save the data in the file "foo.txt" instead of the file the
data was read from originally. Returns 1 if successful, and undef on
error. In case of an error, error() contains a textual error
description.
- "sanity_check"
- Run a sanity check on the currently selected authorized_keys file. If it
contains insanely long lines, then parsing with read() (and
potential crashes because of out-of-memory errors) should be avoided.
- "ssh_dir( [$user] )"
- Locate the .ssh dir of a given user. If no user name is given, ssh_dir
will look up the .ssh dir of the effective user. Typically returns
something like "/home/gonzo/.ssh".
- "path_locate( [$user] )"
- Locate the authorized_keys file of a given user. Typically returns
something like "/home/gonzo/.ssh/authorized_keys". See
"ssh_dir()" for how the containing
directory is located with and without a given user name.
- "error"
- Description of last error that occurred.
Copyright 2005-2009 by Mike Schilli, all rights reserved. This program is free
software, you can redistribute it and/or modify it under the same terms as
Perl itself.
2005, Mike Schilli <m@perlmeister.com>