shell加LDAP實現跳板機

使用跳板機的目的：我們的服務器都是雲主機，使用的都是aws比較多，而且aws是以私鑰去連接公鑰，連接的方式都是以root權限連接，這樣子的話，開發人員要連接上服務器的話，不可能給root權限直接連吧，否則會對服務器造成很大的威脅.

跳板機實現的思路：使用shell去編寫，賬戶這塊使用LDAP做集中式管理+認證,權限這塊使用sudo集中式控制管理.

LDAP：部署可以使用yum，安裝簡單，不過安裝的目錄和結構都不同於一個位置.

也可以使用編譯安裝，編譯安裝的話，需要一定的時間，期間也會遇到很多錯誤，好處就是可以把編譯的環境統一管理在相同目錄中.

兩者安裝LDAP，遷移的時候，也非常容易.

（1）跳板機實現的過程：LDAP安裝+部署.我管理的LDAP是通過WEB管理工具來管理.

(2)編寫shell菜單

（3）創建普通用戶的私鑰+公鑰，並把公鑰上傳到對端的服務器的目錄底下.

實現的截圖：

腳本如下：

[root@localhost jc]# cat tiaoban_deploy.sh 
     
#!/bin/bash 
     
ip=`/sbin/ifconfig eth0|grep "inet addr"|awk -F ":" '{print $2}'|awk '{print $1}'` 
     
current_date=`date +%Y-%m-%d-%H:%M:%S` 
     
dis_manumenu="<ip:${ip}-server>"
     
     
     
user=`echo $USER` 
     
# Source function library. 
     
. /etc/rc.d/init.d/functions 
     
     
     
new_echo () { 
     
     
     
if [ -z "$2" ] 
     
then 
     
    COLOR=33 
     
elif [ $2 == red ] 
     
then 
     
    COLOR=31 
     
elif [ $2 == green ] 
     
then 
     
    COLOR=32 
     
elif [ $2 == blue ] 
     
then 
     
    COLOR=36 
     
elif [ $2 == purple ] 
     
then 
     
    COLOR=35 
     
elif [ $2 == white ] 
     
then 
     
    COLOR=39 
     
else
     
    echo new_echo function use error 
     
    exit 
     
fi 
     
     
     
if [ -z "$4" ] 
     
then 
     
    COLOR1=33 
     
elif [ $4 == red ] 
     
then 
     
    COLOR1=31 
     
elif [ $4 == green ] 
     
then 
     
    COLOR1=32 
     
elif [ $4 == blue ] 
     
then 
     
    COLOR1=36 
     
elif [ $4 == purple ] 
     
then 
     
    COLOR1=35 
     
elif [ $4 == white ] 
     
then 
     
    COLOR1=39 
     
else
     
    echo new_echo function use error 
     
    exit 
     
     
     
fi 
     
if [ -z "$3" ] 
     
then 
     
     
     
    echo -en "\\033[1;${COLOR}m""\033[3m$1 \033[0m\n"
     
else
     
    echo -en "\\033[1;${COLOR}m""\033[3m$1 \033[0m\033[70G\\033[1;${COLOR1}m\033[3m $3 \033[0m\n"
     
fi 
     
} 
     
     
     
for signal in `seq 1 1000` 
     
do
     
        trap ':' INT  EXIT TSTP TERM HUP $signal &> /dev/null
     
done 
     
     
     
clear 
     
     
     
for signal in `name` 
     
do
     
        trap trap ':' INT  EXIT TSTP TERM HUP $signal &> /dev/null
     
done 
     
     
     
clear 
     
     
     
     
     
function getchar() 
     
{ 
     
stty cbreak -echo  
     
        dd if=/dev/tty bs=1 count=1 2>/dev/null
     
        stty -cbreak echo  
     
}  
     
     
     
############################################################################### 
     
#while : 
     
#do 
     
name=`cat /opt/username` 
     
        clear 
     
        read -p "請輸入登陸跳板機驗證標識:" name 
     
     
     
repa=`cat /opt/username` 
     
         if [ "$name" ==  "$repa" ];then 
     
             action "認證標識正確,歡迎登陸跳板機。。。。。。。。。。。。。。。。。。。" /bin/true
     
     
     
else
     
         action "對不起,您輸入的認證標識有錯誤,無法登陸跳板機,已退出............" /bin/false
     
         exit  
     
         exit  
     
fi  
     
#        realuser=$(awk '{print $1}' $name)  
     
#        realpass=$(awk '{print $1}' $pass)  
     
#        if [ "$pass" == "$realpass" ]; then 
     
#          echo "歡迎登陸跳板機。。。。。。。。。。。" 
     
#else 
     
#          echo "對不起,您的輸入有錯誤..............." 
     
#fi 
     
#done  
     
     
     
     
     
cat <<EOF 
     
              當前系統時間:$current_date                      
     
              ============================================================================= 
     
              $dis_manumenu 當前使用跳板機用戶:$USER    版本:Versin1.0                          
     
              =============================================================================  
     
              ---------------------------跳板機幫助手冊-------------------------------- 
     
              (1)菜單0選項，是退出整個跳板機. 
     
              (2)菜單1-11選項是服務器列表,這裡只有11台服務器提供選擇. 
     
              (3)跳板機上面服務器包含：郵件系統，redmine,開發應用服務. 
     
              ----------------------------------------------------------------------------- 
     
     
     
              **0)(exit)                                                           
     
              -->[--------------------公司跳板機菜單---------------------]:<--      
     
              **1)redmine-server(8)                    
     
              **2)數據分析打點測試服(18)                                             
     
              **3)測試服(11)                                          
     
              **4)日志測試服I(13)                                   
     
              **5)日志測試服II(22)                                     
     
              **6)測試服I(12)                                     
     
              **7)測試服II(16)                                     
     
              **8)內網SSO服務器(192)                                     
     
              **9)用戶中心開發服(15)                                    
     
              **10)用戶中心QA測試服(23)                                    
     
              **11)用戶中心本地測試服(24)                                  
     
              **12)用戶中心本地測試服(24)                                  
     
              ############################################################################## 
     
              ============================================================================== 
     
EOF 
     
     
     
read -p "請選擇: " num 
     
     
     
     
     
case $num in
     
0) 
     
action "-------------------------exit----------------------------" /bin/true
     
exit 
     
     
     
;; 
     
1) 
     
ip="192.168.3.8"
     
public=/home/$USER 
     
     
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
    new_echo "----------------------------------------------------------------------------------" green 
     
    new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
    new_echo "`date +'%x %X'`                                         " white 
     
    new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
    action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
    ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
sleep 2 
     
      
     
     
     
fi 
     
     
     
;; 
     
2) 
     
     
     
      
     
ip="192.168.3.18"
     
public=/home/$USER 
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip  
     
     
     
fi 
     
;; 
     
     
     
3) 
     
      
     
ip="192.168.3.11"
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
4) 
     
      
     
ip="192.168.3.13"
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
5) 
     
      
     
ip="192.168.3.22"
     
public=/home/$USER 
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
6) 
     
      
     
ip="192.168.3.12"
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
7) 
     
      
     
ip=192.168.3.16 
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
8) 
     
      
     
ip=192.168.3.92 
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等.............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
;; 
     
     
     
9) 
     
      
     
ip=192.168.3.15 
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
10) 
     
      
     
ip=192.168.3.23 
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
11) 
     
      
     
ip=192.168.3.24 
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
     
     
;; 
     
      
     
12) 
     
      
     
ip=192.168.3.25 
     
public=/home/$USER 
     
     
     
if [ -z $CHECK ] 
     
then 
     
    clear 
     
new_echo "----------------------------------------------------------------------------------" green 
     
new_echo "Connection '$ip'($USER)          " purple "[ SUCCESS ]" green 
     
new_echo "`date +'%x %X'`                                         " white 
     
new_echo "--------------------------------- use ${SECONDS}s -----------------------------------------" green 
     
action 用戶:$user-"現在開始登陸，請稍等..............................." /bin/true
     
ssh -i "/home/$USER/.ssh/id_rsa" $user@$ip 
     
fi 
     
;; 
     
      
     
      
     
*) 
     
clear 
     
action 賬戶:$USER-"您的輸入有誤,已退出,請重新登錄,謝謝................" /bin/true
     
exit 
     
      
     
     
     
;; 
     
esac

作者署名：51cto博客 IMySQL