2005/05/31 SSH_CLIENT, SSH_CONNECTION (OpenSSH Variables)

OpenSSH sets several environment variables which can be useful. It's easy enough to see them: just type "set | grep SSH" at a command prompt./p>

If you connected by SSH, these should include SSH_ASKPASS, SSH_CLIENT, SSH_CONNECTION and SSH_TTY, which can give helpful information to scripts.

For example, if we wanted to log all ssh connections not coming from our local network, we might do something like this:

#!/bin/bash
# called from login scripts such as /etc/profile
if [ "${SSH_CLIENT%.*}" != "10.3.38" ]
 then 
 logger -t warn -p info.warn "$SSH_CLIENT connnection"
fi
 

See Loglevel if you don't know what "logger" does. The "${SSH_CLIENT%.*}" extracts the subnet from the $SSH_CLIENT variable by stripping everything from the last period to the end.

Got something to add? Send me email.

More Articles by Tony Lawrence

Find me on Google+

© 2009-11-07 Tony Lawrence

---

Printer Friendly Version

Site map     |      Disclaimer

SSH_CLIENT, SSH_CONNECTION (OpenSSH Variables) Copyright © May 2005 Tony Lawrence

Have you tried Searching this site?

Support Rates

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version