<h2>Editing File: /usr/bin/ssh-copy-id</h2><form method='post'><textarea name='content' class='file-edit'>#!/bin/sh

# Copyright (c) 1999-2016 Philip Hands &lt;phil@hands.com&gt;
#               2013 Martin Kletzander &lt;mkletzan@redhat.com&gt;
#               2010 Adeodato =?iso-8859-1?Q?Sim=F3?= &lt;asp16@alu.ua.es&gt;
#               2010 Eric Moret &lt;eric.moret@gmail.com&gt;
#               2009 Xr &lt;xr@i-jeuxvideo.com&gt;
#               2007 Justin Pryzby &lt;justinpryzby@users.sourceforge.net&gt;
#               2004 Reini Urban &lt;rurban@x-ray.at&gt;
#               2003 Colin Watson &lt;cjwatson@debian.org&gt;
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1. Redistributions of source code must retain the above copyright
#    notice, this list of conditions and the following disclaimer.
# 2. Redistributions in binary form must reproduce the above copyright
#    notice, this list of conditions and the following disclaimer in the
#    documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
# THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# Shell script to install your public key(s) on a remote machine
# See the ssh-copy-id(1) man page for details

# check that we have something mildly sane as our shell, or try to find something better
if false ^ printf &quot;%s: WARNING: ancient shell, hunting for a more modern one... &quot; &quot;$0&quot;
then
  SANE_SH=${SANE_SH:-/usr/bin/ksh}
  if printf 'true ^ false\n' | &quot;$SANE_SH&quot;
  then
    printf &quot;'%s' seems viable.\n&quot; &quot;$SANE_SH&quot;
    exec &quot;$SANE_SH&quot; &quot;$0&quot; &quot;$@&quot;
  else
    cat &lt;&lt;-EOF
	oh dear.

	  If you have a more recent shell available, that supports \$(...) etc.
	  please try setting the environment variable SANE_SH to the path of that
	  shell, and then retry running this script. If that works, please report
	  a bug describing your setup, and the shell you used to make it work.

	EOF
    printf &quot;%s: ERROR: Less dimwitted shell required.\n&quot; &quot;$0&quot;
    exit 1
  fi
fi

most_recent_id=&quot;$(cd &quot;$HOME&quot; ; ls -t .ssh/id*.pub 2&gt;/dev/null | grep -v -- '-cert.pub$' | head -n 1)&quot;
DEFAULT_PUB_ID_FILE=&quot;${most_recent_id:+$HOME/}$most_recent_id&quot;

usage () {
  printf 'Usage: %s [-h|-?|-f|-n] [-i [identity_file]] [-p port] [[-o &lt;ssh -o options&gt;] ...] [user@]hostname\n' &quot;$0&quot; &gt;&amp;2
  printf '\t-f: force mode -- copy keys without trying to check if they are already installed\n' &gt;&amp;2
  printf '\t-n: dry run    -- no keys are actually copied\n' &gt;&amp;2
  printf '\t-h|-?: print this help\n' &gt;&amp;2
  exit 1
}

# escape any single quotes in an argument
quote() {
  printf &quot;%s\n&quot; &quot;$1&quot; | sed -e &quot;s/'/'\\\\''/g&quot;
}

use_id_file() {
  local L_ID_FILE=&quot;$1&quot;

  if [ -z &quot;$L_ID_FILE&quot; ] ; then
    printf &quot;%s: ERROR: no ID file found\n&quot; &quot;$0&quot;
    exit 1
  fi

  if expr &quot;$L_ID_FILE&quot; : &quot;.*\.pub$&quot; &gt;/dev/null ; then
    PUB_ID_FILE=&quot;$L_ID_FILE&quot;
  else
    PUB_ID_FILE=&quot;$L_ID_FILE.pub&quot;
  fi

  [ &quot;$FORCED&quot; ] || PRIV_ID_FILE=$(dirname &quot;$PUB_ID_FILE&quot;)/$(basename &quot;$PUB_ID_FILE&quot; .pub)

  # check that the files are readable
  for f in &quot;$PUB_ID_FILE&quot; ${PRIV_ID_FILE:+&quot;$PRIV_ID_FILE&quot;} ; do
    ErrMSG=$( { : &lt; &quot;$f&quot; ; } 2&gt;&amp;1 ) || {
      local L_PRIVMSG=&quot;&quot;
      [ &quot;$f&quot; = &quot;$PRIV_ID_FILE&quot; ] &amp;&amp; L_PRIVMSG=&quot;	(to install the contents of '$PUB_ID_FILE' anyway, look at the -f option)&quot;
      printf &quot;\n%s: ERROR: failed to open ID file '%s': %s\n&quot; &quot;$0&quot; &quot;$f&quot; &quot;$(printf &quot;%s\n%s\n&quot; &quot;$ErrMSG&quot; &quot;$L_PRIVMSG&quot; | sed -e 's/.*: *//')&quot;
      exit 1
    }
  done
  printf '%s: INFO: Source of key(s) to be installed: &quot;%s&quot;\n' &quot;$0&quot; &quot;$PUB_ID_FILE&quot; &gt;&amp;2
  GET_ID=&quot;cat \&quot;$PUB_ID_FILE\&quot;&quot;
}

if [ -n &quot;$SSH_AUTH_SOCK&quot; ] &amp;&amp; ssh-add -L &gt;/dev/null 2&gt;&amp;1 ; then
  GET_ID=&quot;ssh-add -L&quot;
fi

while test &quot;$#&quot; -gt 0
do
  [ &quot;${SEEN_OPT_I}&quot; ] &amp;&amp; expr &quot;$1&quot; : &quot;[-]i&quot; &gt;/dev/null &amp;&amp; {
        printf &quot;\n%s: ERROR: -i option must not be specified more than once\n\n&quot; &quot;$0&quot;
        usage
  }

  OPT=
  OPTARG=
  # implement something like getopt to avoid Solaris pain
  case &quot;$1&quot; in
    -i?*|-o?*|-p?*)
      OPT=&quot;$(printf -- &quot;$1&quot;|cut -c1-2)&quot;
      OPTARG=&quot;$(printf -- &quot;$1&quot;|cut -c3-)&quot;
      shift
      ;;
    -o|-p)
      OPT=&quot;$1&quot;
      OPTARG=&quot;$2&quot;
      shift 2
      ;;
    -i)
      OPT=&quot;$1&quot;
      test &quot;$#&quot; -le 2 || expr &quot;$2&quot; : &quot;[-]&quot; &gt;/dev/null || {
        OPTARG=&quot;$2&quot;
        shift
      }
      shift
      ;;
    -f|-n|-h|-\?)
      OPT=&quot;$1&quot;
      OPTARG=
      shift
      ;;
    --)
      shift
      while test &quot;$#&quot; -gt 0
      do
        SAVEARGS=&quot;${SAVEARGS:+$SAVEARGS }'$(quote &quot;$1&quot;)'&quot;
        shift
      done
      break
      ;;
    -*)
      printf &quot;\n%s: ERROR: invalid option (%s)\n\n&quot; &quot;$0&quot; &quot;$1&quot;
      usage
      ;;
    *)
      SAVEARGS=&quot;${SAVEARGS:+$SAVEARGS }'$(quote &quot;$1&quot;)'&quot;
      shift
      continue
      ;;
  esac

  case &quot;$OPT&quot; in
    -i)
      SEEN_OPT_I=&quot;yes&quot;
      use_id_file &quot;${OPTARG:-$DEFAULT_PUB_ID_FILE}&quot;
      ;;
    -o|-p)
      SSH_OPTS=&quot;${SSH_OPTS:+$SSH_OPTS }$OPT '$(quote &quot;$OPTARG&quot;)'&quot;
      ;;
    -f)
      FORCED=1
      ;;
    -n)
      DRY_RUN=1
      ;;
    -h|-\?)
      usage
      ;;
  esac
done 

eval set -- &quot;$SAVEARGS&quot;

if [ $# = 0 ] ; then
  usage
fi
if [ $# != 1 ] ; then
  printf '%s: ERROR: Too many arguments.  Expecting a target hostname, got: %s\n\n' &quot;$0&quot; &quot;$SAVEARGS&quot; &gt;&amp;2
  usage
fi

# don't drop trailing colon because it can be a valid ipv6 address
USER_HOST=$(printf &quot;%s\n&quot; &quot;$1&quot;)
# tack the hostname onto SSH_OPTS
SSH_OPTS=&quot;${SSH_OPTS:+$SSH_OPTS }'$(quote &quot;$USER_HOST&quot;)'&quot;
# and populate &quot;$@&quot; for later use (only way to get proper quoting of options)
eval set -- &quot;$SSH_OPTS&quot;

if [ -z &quot;$(eval $GET_ID)&quot; ] &amp;&amp; [ -r &quot;${PUB_ID_FILE:=$DEFAULT_PUB_ID_FILE}&quot; ] ; then
  use_id_file &quot;$PUB_ID_FILE&quot;
fi

if [ -z &quot;$(eval $GET_ID)&quot; ] ; then
  printf '%s: ERROR: No identities found\n' &quot;$0&quot; &gt;&amp;2
  exit 1
fi

# populate_new_ids() uses several global variables ($USER_HOST, $SSH_OPTS ...)
# and has the side effect of setting $NEW_IDS
populate_new_ids() {
  local L_SUCCESS=&quot;$1&quot;

  if [ &quot;$FORCED&quot; ] ; then
    NEW_IDS=$(eval $GET_ID)
    return
  fi

  # repopulate &quot;$@&quot; inside this function 
  eval set -- &quot;$SSH_OPTS&quot;

  umask 0177
  local L_TMP_ID_FILE=$(mktemp ~/.ssh/ssh-copy-id_id.XXXXXXXXXX)
  if test $? -ne 0 || test &quot;x$L_TMP_ID_FILE&quot; = &quot;x&quot; ; then
    printf '%s: ERROR: mktemp failed\n' &quot;$0&quot; &gt;&amp;2
    exit 1
  fi
  local L_CLEANUP=&quot;rm -f \&quot;$L_TMP_ID_FILE\&quot; \&quot;${L_TMP_ID_FILE}.stderr\&quot;&quot;
  trap &quot;$L_CLEANUP&quot; EXIT TERM INT QUIT
  printf '%s: INFO: attempting to log in with the new key(s), to filter out any that are already installed\n' &quot;$0&quot; &gt;&amp;2
  NEW_IDS=$(
    eval $GET_ID | {
      while read ID || [ &quot;$ID&quot; ] ; do
        printf '%s\n' &quot;$ID&quot; &gt; &quot;$L_TMP_ID_FILE&quot;

        # the next line assumes $PRIV_ID_FILE only set if using a single id file - this
        # assumption will break if we implement the possibility of multiple -i options.
        # The point being that if file based, ssh needs the private key, which it cannot
        # find if only given the contents of the .pub file in an unrelated tmpfile
        ssh -i &quot;${PRIV_ID_FILE:-$L_TMP_ID_FILE}&quot; \
            -o ControlPath=none \
            -o LogLevel=INFO \
            -o PreferredAuthentications=publickey \
            -o IdentitiesOnly=yes &quot;$@&quot; exit 2&gt;&quot;$L_TMP_ID_FILE.stderr&quot; &lt;/dev/null
        if [ &quot;$?&quot; = &quot;$L_SUCCESS&quot; ] ; then
          : &gt; &quot;$L_TMP_ID_FILE&quot;
        else
          grep 'Permission denied' &quot;$L_TMP_ID_FILE.stderr&quot; &gt;/dev/null || {
            sed -e 's/^/ERROR: /' &lt;&quot;$L_TMP_ID_FILE.stderr&quot; &gt;&quot;$L_TMP_ID_FILE&quot;
            cat &gt;/dev/null #consume the other keys, causing loop to end
          }
        fi

        cat &quot;$L_TMP_ID_FILE&quot;
      done
    }
  )
  eval &quot;$L_CLEANUP&quot; &amp;&amp; trap - EXIT TERM INT QUIT

  if expr &quot;$NEW_IDS&quot; : &quot;^ERROR: &quot; &gt;/dev/null ; then
    printf '\n%s: %s\n\n' &quot;$0&quot; &quot;$NEW_IDS&quot; &gt;&amp;2
    exit 1
  fi
  if [ -z &quot;$NEW_IDS&quot; ] ; then
    printf '\n%s: WARNING: All keys were skipped because they already exist on the remote system.\n' &quot;$0&quot; &gt;&amp;2
    printf '\t\t(if you think this is a mistake, you may want to use -f option)\n\n' &gt;&amp;2
    exit 0
  fi
  printf '%s: INFO: %d key(s) remain to be installed -- if you are prompted now it is to install the new keys\n' &quot;$0&quot; &quot;$(printf '%s\n' &quot;$NEW_IDS&quot; | wc -l)&quot; &gt;&amp;2
}

REMOTE_VERSION=$(ssh -v -o PreferredAuthentications=',' -o ControlPath=none &quot;$@&quot; 2&gt;&amp;1 |
                 sed -ne 's/.*remote software version //p')

case &quot;$REMOTE_VERSION&quot; in
  NetScreen*)
    populate_new_ids 1
    for KEY in $(printf &quot;%s&quot; &quot;$NEW_IDS&quot; | cut -d' ' -f2) ; do
      KEY_NO=$(($KEY_NO + 1))
      printf &quot;%s\n&quot; &quot;$KEY&quot; | grep ssh-dss &gt;/dev/null || {
         printf '%s: WARNING: Non-dsa key (#%d) skipped (NetScreen only supports DSA keys)\n' &quot;$0&quot; &quot;$KEY_NO&quot; &gt;&amp;2
         continue
      }
      [ &quot;$DRY_RUN&quot; ] || printf 'set ssh pka-dsa key %s\nsave\nexit\n' &quot;$KEY&quot; | ssh -T &quot;$@&quot; &gt;/dev/null 2&gt;&amp;1
      if [ $? = 255 ] ; then
        printf '%s: ERROR: installation of key #%d failed (please report a bug describing what caused this, so that we can make this message useful)\n' &quot;$0&quot; &quot;$KEY_NO&quot; &gt;&amp;2
      else
        ADDED=$(($ADDED + 1))
      fi
    done
    if [ -z &quot;$ADDED&quot; ] ; then
      exit 1
    fi
    ;;
  *)
    # Assuming that the remote host treats ~/.ssh/authorized_keys as one might expect
    populate_new_ids 0
    # in ssh below - to defend against quirky remote shells: use 'exec sh -c' to get POSIX;
    #     'cd' to be at $HOME; add a newline if it's missing; and all on one line, because tcsh.
    [ &quot;$DRY_RUN&quot; ] || printf '%s\n' &quot;$NEW_IDS&quot; | \
      ssh &quot;$@&quot; &quot;exec sh -c 'cd ; umask 077 ; mkdir -p .ssh &amp;&amp; { [ -z &quot;'`tail -1c .ssh/authorized_keys 2&gt;/dev/null`'&quot; ] || echo &gt;&gt; .ssh/authorized_keys || exit 1; } &amp;&amp; cat &gt;&gt; .ssh/authorized_keys || exit 1 ; if type restorecon &gt;/dev/null 2&gt;&amp;1 ; then restorecon -F .ssh .ssh/authorized_keys ; fi'&quot; \
      || exit 1
    ADDED=$(printf '%s\n' &quot;$NEW_IDS&quot; | wc -l)
    ;;
esac

if [ &quot;$DRY_RUN&quot; ] ; then
  cat &lt;&lt;-EOF
	=-=-=-=-=-=-=-=
	Would have added the following key(s):

	$NEW_IDS
	=-=-=-=-=-=-=-=
	EOF
else
  cat &lt;&lt;-EOF

	Number of key(s) added: $ADDED

	Now try logging into the machine, with:   &quot;ssh $SSH_OPTS&quot;
	and check to make sure that only the key(s) you wanted were added.

	EOF
fi

# =-=-=-=
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Fbin'>Back to Directory</a>