forked from jumpserver/koko
/
conn_ssh_su.go
125 lines (112 loc) · 2.5 KB
/
conn_ssh_su.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
package srvconn
import (
"errors"
"fmt"
"regexp"
"strings"
"time"
"github.com/meowgen/koko/pkg/logger"
)
func LoginToSu(sc *SSHConnection) error {
successPattern := createSuccessPattern(sc.options.sudoUsername)
steps := make([]stepItem, 0, 2)
steps = append(steps,
stepItem{
Input: sc.options.sudoCommand,
ExpectPattern: passwordMatchPattern,
FinishedPattern: successPattern,
IsCommand: true,
},
stepItem{
Input: sc.options.sudoPassword,
ExpectPattern: successPattern,
FinishedPattern: successPattern,
},
)
for i := 0; i < len(steps); i++ {
finished, err := executeStep(&steps[i], sc)
if err != nil {
return err
}
if finished {
break
}
}
return nil
}
func executeStep(step *stepItem, sc *SSHConnection) (bool, error) {
return step.Execute(sc)
}
const (
LinuxSuCommand = "su - %s; exit"
/*
\b: word boundary 即: 匹配某个单词边界
*/
passwordMatchPattern = "(?i)\\bpassword\\b|密码"
)
var ErrorTimeout = errors.New("time out")
type stepItem struct {
Input string
ExpectPattern string
IsCommand bool
FinishedPattern string
}
func (s *stepItem) Execute(sc *SSHConnection) (bool, error) {
resultChan := make(chan *ExecuteResult, 1)
matchReg, err := regexp.Compile(s.ExpectPattern)
if err != nil {
logger.Error(err)
}
successReg, err := regexp.Compile(s.FinishedPattern)
if err != nil {
logger.Error(err)
}
if s.IsCommand {
_ = sc.session.Start(s.Input)
} else {
_, _ = sc.Write([]byte(s.Input + "\r\n"))
}
go func() {
buf := make([]byte, 8192)
var recStr strings.Builder
for {
nr, err2 := sc.Read(buf)
if err2 != nil {
resultChan <- &ExecuteResult{Err: err2}
return
}
recStr.Write(buf[:nr])
result := strings.TrimSpace(recStr.String())
if successReg != nil && successReg.MatchString(result) {
resultChan <- &ExecuteResult{Finished: true}
return
}
if matchReg != nil && matchReg.MatchString(result) {
resultChan <- &ExecuteResult{}
return
}
}
}()
ticker := time.NewTicker(time.Second * 30)
defer ticker.Stop()
select {
case ret := <-resultChan:
return ret.Finished, ret.Err
case <-ticker.C:
}
return false, ErrorTimeout
}
type ExecuteResult struct {
Finished bool
Err error
}
func createSuccessPattern(username string) string {
pattern := fmt.Sprintf("%s@", username)
pattern = fmt.Sprintf("(?i)%s|%s|%s", pattern,
normalUserMark, superUserMark)
return pattern
}
const (
normalUserMark = "\\s*\\$"
superUserMark = "\\s*#"
)