<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
On 04/06/2012 07:20 AM, <a class="moz-txt-link-abbreviated" href="mailto:chris@ccburton.com">chris@ccburton.com</a> wrote:
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<tt><font size="2">"Paul E. Virgo" <a class="moz-txt-link-rfc2396E" href="mailto:Paul.E.Virgo@nasa.gov"><Paul.E.Virgo@nasa.gov></a>
wrote on 05/04/2012 16:07:18:<br>
<br>
> Chris,<br>
> <br>
> That suggestion worked. I also added in a longer 'sleep'
because of
<br>
> the time it takes a user to type in their PIN, then look
at the <br>
> SecurID RSA token.<br>
</font></tt>
<br>
<tt><font size="2">Isn't the Token entered before you click
connect on</font></tt>
<br>
<tt><font size="2">the nxclient ??</font></tt>
<br>
<br>
</blockquote>
Yes, it is...but for testing purposes with nxnode--login, I set it
for longer, because it takes time to a.) type in the PIN then b.)
grap the RSA token generator and read the numbers, ensuring the
countdown timer isn't near the end before the next generated number
appears.<br>
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<tt><font size="2">FYI ICIH</font></tt>
<br>
<br>
<tt><font size="2">The sleep 0.3 is to tell expect to wait a
quarter</font></tt>
<br>
<tt><font size="2">second, before sending the password TO SSH</font></tt>
<br>
</blockquote>
I've reset it back to a quarter. I'd taken it to a half a second for
my command line testing purposes.<br>
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<br>
<tt><font size="2">Often, password "reads" clear their buffers
after</font></tt>
<br>
<tt><font size="2">out-putting the prompt, so as not to try
logging-in</font></tt>
<br>
<tt><font size="2">with "stray" keypresses, so a delay to allow
this</font></tt>
<br>
<tt><font size="2">to complete is helpful.</font></tt>
<br>
<br>
<br>
<tt><font size="2">If you want to test nxnode-login as it is
deployed</font></tt>
<br>
<tt><font size="2">from nxserver, you need to try : -</font></tt>
<br>
<br>
<br>
<tt><font size="2"> sudo su -l -s
/bin/bash nx</font></tt>
<br>
<br>
<tt><font size="2"># then at the (nx user) prompt ( and all on one
line
if it wrapped )</font></tt>
<br>
<br>
<tt><font size="2"> echo my-password|/usr/bin/nxnode-login
ssh my-username 22 /usr/bin/nxnode --check</font></tt>
<br>
</blockquote>
Yeah, I can try that next time.<br>
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<br>
<tt><font size="2">You can see than the password is already there,
before</font></tt>
<br>
<tt><font size="2">the launch of nxlogin-helper by nxserver</font></tt>
<br>
<br>
<tt><font size="2">and the </font></tt>
<br>
<br>
<tt><font size="2"> expect_user -re
"(.*)\n"</font></tt>
<br>
<tt><font size="2"> set password $expect_out(1,string)</font></tt>
<br>
<br>
<tt><font size="2">which reads from stdin,</font></tt>
<br>
<tt><font size="2">where</font></tt>
<br>
<tt><font size="2">you got that error first time</font></tt>
<br>
<tt><font size="2">is</font></tt>
<br>
<tt><font size="2">the script reading the password</font></tt>
<br>
<tt><font size="2">not</font></tt>
<br>
<tt><font size="2">ssh which isn't spawned till later.</font></tt>
<br>
</blockquote>
That's what I thought. I knew the SSH connection had already
properly completed, and when I saw the expect output, I began to
wonder if there was some sort of special string that needed to be
added for expect to look for. Your reply yesterday pretty much
confirmed it.<br>
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<br>
<tt><font size="2">> Thanks, again, for the suggestion.<br>
> <br>
> PEV</font></tt>
<br>
<br>
<tt><font size="2">I don't know how long it takes a user to work
one
of</font></tt>
<br>
<tt><font size="2">those ID things (2 mins?? (pin? pin? oh!what
was it??))</font></tt>
<br>
<tt><font size="2">but</font></tt>
<br>
<tt><font size="2">if you set that sleep to too long</font></tt>
<br>
<tt><font size="2">thinking to</font></tt>
<br>
<tt><font size="2">"allow" one of your slow-coach seniors to
work it out,</font></tt>
<br>
<tt><font size="2">you may well</font></tt>
<br>
<tt><font size="2">start getting timeouts "further down the line",</font></tt>
<br>
<tt><font size="2">so</font></tt>
<br>
<tt><font size="2">if I was you I'd leave it as 0.3</font></tt> <br>
</blockquote>
Yeah, I've set it back to 0.3 since the successful test. <br>
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<br>
<tt><font size="2">> Paul E Virgo</font></tt>
<br>
<tt><font size="2">> Sr. System Administrator</font></tt>
<br>
<tt><font size="2">> Code 610</font></tt>
<br>
<tt><font size="2">> SESDA II - DAAC/DISC</font></tt>
<br>
<tt><font size="2">> Goddard Space Flight Ctr</font></tt>
<br>
<br>
<tt><font size="2">Nice place to work.</font></tt>
<br>
</blockquote>
It is. Seems everybody gets excited about me working there but me. I
enjoy the atmosphere. Maybe I don't truly appreciate the things we
do around here.<br>
<blockquote
cite="mid:OF7B910893.FBCD68F6-ON802579D8.003380FE-802579D8.003E4901@ccburton.com"
type="cite">
<br>
<tt><font size="2">Who's heard of Goddard these days ??</font></tt>
<br>
<tt><font size="2">but I notice von Braun knew all</font></tt>
<br>
<tt><font size="2">about him.</font></tt>
<br>
<br>
<tt><font size="2">Shame he died and missed out on doing</font></tt>
<br>
<tt><font size="2">Saturn 5 etc.</font></tt>
<br>
<br>
<tt><font size="2">> Greenbelt, MD 20771</font></tt>
<br>
<tt><font size="2">> (301) 614-5751</font></tt>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Paul E Virgo
Sr. System Administrator
Code 610
SESDA II - DAAC/DISC
Goddard Space Flight Ctr
Greenbelt, MD 20771
(301) 614-5751
</pre>
</body>
</html>