Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #5295

Re: How to etablish an SSH2 tunnel with php ?

Show all headers | View raw

Am 31.03.2012 19:35, schrieb Mr. B-o-B:
> Une Bévue cried from the depths of the abyss...
> 
>> The purpose is to query a remote PostgreSQL database via an ssh tunnel.
>>
>> If i do the tunnel "by hand" from terminal using :
>> $ ssh -L 3333:localhost:5432 yt@iMac
>>
>> then, i can query a remote database :
>>  $host="localhost";
>>  $port=3333;
>>  $username='yt';
>>  $password='topsecret';
>>  $db = new PDO("pgsql:dbname=$dbname;host=$host;port=$port", $username, $password );
>>  $ret=$db->query('SELECT * FROM categories;');
>>  if($ret){
>>    while($row=$ret->fetch()){
>>        print_r($row);
>>    }
>>  }else{
>>    echo 'Error';
>>  }
>>
>> i've installes libssh2 for PHP on this computer, here is part of my info.php :
>>
>> SSH2 support    enabled
>> extension version    0.11.2
>> libssh2 version    1.2.6
>> banner    SSH-2.0-libssh2_1.2.6
>> remote forwarding    enabled
>> hostbased auth    enabled
>> polling support    enabled
>> publickey subsystem    enabled
>>
>> however, even if i can "connect", authentification fail, either using password or
>> keys...
>>
>> the code used :
>> function connect_to($machine)
>> {
>>  $connection=@ssh2_connect($machine, 22, array("hostkey"=>"ssh-dsa"));
>>  if(!$connection){
>>    echo "No connection.<br />\n";
>>    return false;
>>  } else {
>>    echo "Connection établie.<br />\n";
>>  }
>>
>>  $fingerprint=@ssh2_fingerprint($connection, SSH2_FINGERPRINT_MD5 |
>> SSH2_FINGERPRINT_HEX);
>>  echo "\$fingerprint = $fingerprint<br />\n";
>>
>>  /* Utilisation de public/private key */
>>  if(@ssh2_auth_pubkey_file($connection, "yt",
>>      '/home/yt/.ssh/id_dsa.pub', '/home/yt/.ssh/id_dsa',
>>      'my -valid- passphrase')){
>>    echo "Authentification réussie.<br />\n";
>>    return array($connection,$fingerprint);
>>  } else {
>>    echo "Échec de l'authentification.<br />\n";
>>    return false;
>>  }
>> }
>>
>> notice i get "Connection établie" and also the fingerprint.
>>
>> if after the print out of fingerprint i try a command i get nothing after an amout
>> of time but without error :
>> $stdout_stream=@ssh2_exec($connection, 'ls -al');
>>
> 
> I don't know the answer here, but I have several setups using remote db's & I use
> stunnel (SSL) instead of SSH.
> 
> http://www.stunnel.org
> 
> Assuming you have static IP's on both sides it works well.  End result is the same.
> 
> Good Luck!
> 
> Mr. B-o-b

stunnel is a good solution when it is difficult to setup SSL/TLS directly in/for a
service.

This is not the case with Postgresql, you get remote access and ssl capability by
giving it a certificate, and putting your IP into pg_hba.conf. Very easy to configure
IMO. I use it a lot, and the good thing is the client libraries support it out of the
box.

So I would question the need to use a ssh tunnel.

/Str.

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-03-31 18:40 +0200
  Re: How to etablish an SSH2 tunnel with php ? "Mr. B-o-B" <mr.chew.baka@gmail.com> - 2012-03-31 12:35 -0500
    Re: How to etablish an SSH2 tunnel with php ? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-01 00:56 +0200
    Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-01 06:51 +0200
  Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-03-31 15:18 -0400
    Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-01 07:03 +0200
      Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-01 10:00 -0400
        Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-01 16:42 +0200
          Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-01 21:19 -0400
            Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 08:26 +0200
              Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 12:01 +0200
              Re: How to etablish an SSH2 tunnel with php ? "Peter H. Coffin" <hellsop@ninehells.com> - 2012-04-02 07:15 -0500
              Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-02 09:04 -0400
      Re: How to etablish an SSH2 tunnel with php ? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-02 12:31 +0200
        Re: How to etablish an SSH2 tunnel with php ? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-02 12:54 +0200
          Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 13:14 +0200
            Re: How to etablish an SSH2 tunnel with php ? "Mr. B-o-B" <mr.chew.baka@gmail.com> - 2012-04-02 12:12 -0500
        Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 13:12 +0200
  Re: How to etablish an SSH2 tunnel with php ? Jason Playne <jason@jasonplayne.com> - 2012-04-04 01:36 -0700
    Re: How to etablish an SSH2 tunnel with php ? unbewusst.sein@fai.invalid (Une Bévue) - 2012-04-05 07:36 +0200
    Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-05 08:10 -0400

csiph-web