using pfSsh.php to set user authorized_keys

teridon

I'm trying to set the admin user's SSH authorized keys via pfSsh.php but I'm only having partial success. The following recorded session seems to partly work, in that after I run it, the web GUI then shows the new authorized_keys text. However, it doesn't update the actual /root/.ssh/authorized_keys file on the system.

$config['system']['user'][0]['authorizedkeys'] = "base64-encoded-string-here=";
write_config();

I noticed that based on what's in system_usermanager.php, I needed to make a call to local_user_set(), so I tried this as a test:

require_once("guiconfig.inc");
$userent=$config['system']['user'][0];
local_user_set($userent);

But that results in a "DNS Rebind attack detected" error.

Can someone please clue me in on how to get the system to update the system authorized_keys file from the command-line?

teridon

Rubber-duck wins again; I need to load auth.inc, not guiconfig.inc:

require_once("auth.inc");
$userent=$config['system']['user'][0];
$userent['authorizedkeys'] = "base-64-encoded-string-here";
write_config();
local_user_set($userent);

teridon

I just now realized that I need to do BOTH; the second one alone would leave the wrong information in the Web UI.

# update the text in the Web UI
$config['system']['user'][0]['authorizedkeys'] = "base64-encoded-string-here=";
write_config();

# update the authorized_keys file
require_once("auth.inc");
$userent=$config['system']['user'][0];
$userent['authorizedkeys'] = "base-64-encoded-string-here";
write_config();
local_user_set($userent);

teridon

24.11 changed something. New code:

$username = 'foobar';
$user_item_config = getUserEntry($username);
$usernum = $user_item_config['idx'];
$user = &$user_item_config['item'];
$user['authorizedkeys'] = "base-64-encoded-string-here";
config_set_path('system/user/'. $usernum . '/authorizedkeys', "base-64-encoded-string-here" );
write_config('edited SSH public key for user foobar via pfSsh.php');
local_user_set($user);