[project @ Arch-1:robey@lag.net--2003-public%secsh--dev--1.0--patch-119]

reformat README
reformatted the README to a slightly smaller margin, just because.
This commit is contained in:
Robey Pointer 2004-12-10 07:55:33 +00:00
parent ad87909720
commit fb54934726
1 changed files with 78 additions and 67 deletions

145
README
View File

@ -8,20 +8,21 @@ http://www.lag.net/~robey/paramiko/
*** WHAT *** WHAT
"paramiko" is a combination of the esperanto words for "paranoid" and "friend". "paramiko" is a combination of the esperanto words for "paranoid" and
it's a module for python 2.2+ that implements the SSH2 protocol for secure "friend". it's a module for python 2.2+ that implements the SSH2 protocol
(encrypted and authenticated) connections to remote machines. unlike SSL (aka for secure (encrypted and authenticated) connections to remote machines.
TLS), SSH2 protocol does not require heirarchical certificates signed by a unlike SSL (aka TLS), SSH2 protocol does not require heirarchical
powerful central authority. you may know SSH2 as the protocol that replaced certificates signed by a powerful central authority. you may know SSH2 as
telnet and rsh for secure access to remote shells, but the protocol also the protocol that replaced telnet and rsh for secure access to remote
includes the ability to open arbitrary channels to remote services across the shells, but the protocol also includes the ability to open arbitrary
encrypted tunnel (this is how sftp works, for example). channels to remote services across the encrypted tunnel (this is how sftp
works, for example).
it is written entirely in python (no C or platform-dependent code) and is it is written entirely in python (no C or platform-dependent code) and is
released under the GNU LGPL (lesser GPL). released under the GNU LGPL (lesser GPL).
the package and its API is fairly well documented in the "doc/" folder that the package and its API is fairly well documented in the "doc/" folder
should have come with this archive. that should have come with this archive.
*** REQUIREMENTS *** REQUIREMENTS
@ -41,43 +42,47 @@ line (thanks to Roger Binns for the info):
*** PORTABILITY *** PORTABILITY
i code and test this library on Linux and MacOS X. for that reason, i'm i code and test this library on Linux and MacOS X. for that reason, i'm
pretty sure that it works for all posix platforms, including MacOS. i also pretty sure that it works for all posix platforms, including MacOS. i
think it will work on Windows, though i've never tested it there. if you also think it will work on Windows, though i've never tested it there. if
run into Windows problems, send me a patch: portability is important to me. you run into Windows problems, send me a patch: portability is important
to me.
the Channel object supports a "fileno()" call so that it can be passed into the Channel object supports a "fileno()" call so that it can be passed
select or poll, for polling on posix. once you call "fileno()" on a Channel, into select or poll, for polling on posix. once you call "fileno()" on a
it changes behavior in some fundamental ways, and these ways require posix. Channel, it changes behavior in some fundamental ways, and these ways
so don't call "fileno()" on a Channel on Windows. this is detailed in the require posix. so don't call "fileno()" on a Channel on Windows. this is
documentation for the "fileno" method. detailed in the documentation for the "fileno" method.
python 2.2 may work, thanks to some patches from Roger Binns. things to watch python 2.2 may work, thanks to some patches from Roger Binns. things to
out for: watch out for:
* sockets in 2.2 don't support timeouts, so the 'select' module is imported * sockets in 2.2 don't support timeouts, so the 'select' module is
to do polling. this may not work on windows. (works fine on osx.) imported to do polling. this may not work on windows. (works fine on
* logging is mostly stubbed out. it works just enough to let paramiko create osx.)
log files for debugging, if you want them. to get real logging, you can * logging is mostly stubbed out. it works just enough to let paramiko
backport python 2.3's logging package. Roger has done that already: create log files for debugging, if you want them. to get real logging,
you can backport python 2.3's logging package. Roger has done that
already:
http://sourceforge.net/project/showfiles.php?group_id=75211&package_id=113804 http://sourceforge.net/project/showfiles.php?group_id=75211&package_id=113804
you really should upgrade to python 2.3. laziness is no excuse! :) you really should upgrade to python 2.3. laziness is no excuse! :)
some python distributions don't include the utf-8 string encodings, for reasons some python distributions don't include the utf-8 string encodings, for
of space (misdirected as that is). if your distribution is missing encodings, reasons of space (misdirected as that is). if your distribution is
you'll see an error like this: missing encodings, you'll see an error like this:
LookupError: no codec search functions registered: can't find encoding LookupError: no codec search functions registered: can't find encoding
this means you need to copy string encodings over from a working system. this means you need to copy string encodings over from a working system.
(it probably only happens on embedded systems, not normal python installls.) (it probably only happens on embedded systems, not normal python
installls.)
Valeriy Pogrebitskiy says the best place to look is Valeriy Pogrebitskiy says the best place to look is
'.../lib/python*/encodings/__init__.py'. '.../lib/python*/encodings/__init__.py'.
*** DEMO *** DEMO
several demo scripts come with paramiko to demonstrate how to use it. probably several demo scripts come with paramiko to demonstrate how to use it.
the simplest demo of all is this: probably the simplest demo of all is this:
import paramiko, base64 import paramiko, base64
key = paramiko.RSAKey(data=base64.decodestring('AAA...')) key = paramiko.RSAKey(data=base64.decodestring('AAA...'))
@ -90,44 +95,48 @@ the simplest demo of all is this:
chan.close() chan.close()
t.close() t.close()
...which prints out the results of executing 'ls' on a remote server. (the ...which prints out the results of executing 'ls' on a remote server.
host key 'AAA...' should of course be replaced by the actual base64 encoding (the host key 'AAA...' should of course be replaced by the actual base64
of the host key. if you skip host key verification, the connection is not encoding of the host key. if you skip host key verification, the
secure!) connection is not secure!)
the following example scripts get progressively more detailed: the following example scripts get progressively more detailed:
demo_windows.py demo_windows.py
executes 'ls' on any remote server, loading the host key from your openssh executes 'ls' on any remote server, loading the host key from your
key file. (this script works on windows because it avoids using terminal openssh key file. (this script works on windows because it avoids
i/o or the 'select' module.) it also creates a logfile 'demo_windows.log'. using terminal i/o or the 'select' module.) it also creates a logfile
'demo_windows.log'.
demo_simple.py demo_simple.py
calls invoke_shell() and emulates a terminal/tty through which you can calls invoke_shell() and emulates a terminal/tty through which you can
execute commands interactively on a remote server. think of it as a poor execute commands interactively on a remote server. think of it as a
man's ssh command-line client. (works only on posix [unix or macosx].) poor man's ssh command-line client. (works only on posix [unix or
macosx].)
demo.py demo.py
same as demo_simple.py, but allows you to authenticiate using a private same as demo_simple.py, but allows you to authenticiate using a
key, and uses the long form of some of the API calls. (posix only.) private key, and uses the long form of some of the API calls. (posix
only.)
forward.py forward.py
command-line script to set up port-forwarding across an ssh transport. command-line script to set up port-forwarding across an ssh transport.
(requires python 2.3 and posix.) (requires python 2.3 and posix.)
demo_server.py demo_server.py
an ssh server that listens on port 2200 and accepts a login for 'robey' an ssh server that listens on port 2200 and accepts a login for
(password 'foo'), and pretends to be a BBS. meant to be a very simple 'robey' (password 'foo'), and pretends to be a BBS. meant to be a
demo of writing an ssh server. (should work on all platforms.) very simple demo of writing an ssh server. (should work on all
platforms.)
*** USE *** USE
the demo scripts are probably the best example of how to use this package. the demo scripts are probably the best example of how to use this package.
there is also a lot of documentation, generated with epydoc, in the doc/ there is also a lot of documentation, generated with epydoc, in the doc/
folder. point your browser there. seriously, do it. mad props to epydoc, folder. point your browser there. seriously, do it. mad props to
which actually motivated me to write more documentation than i ever would have epydoc, which actually motivated me to write more documentation than i
before. ever would have before.
there are also unit tests here: there are also unit tests here:
$ python ./test.py $ python ./test.py
@ -142,33 +151,34 @@ highlights of what's new in each release:
v1.0 JIGGLYPUFF v1.0 JIGGLYPUFF
* fixed bug that broke server-mode authentication by private key * fixed bug that broke server-mode authentication by private key
* fixed bug where closing a Channel could end up killing the entire Transport * fixed bug where closing a Channel could end up killing the entire
Transport
* actually include demo_windows.py this time (oops!) * actually include demo_windows.py this time (oops!)
* fixed recently-introduced bug in group-exchange key negotiation that would * fixed recently-introduced bug in group-exchange key negotiation that
generate the wrong hash (and therefore fail the initial handshake) would generate the wrong hash (and therefore fail the initial handshake)
* server-mode subsystem handler is a bit more flexible * server-mode subsystem handler is a bit more flexible
v0.9 IVYSAUR v0.9 IVYSAUR
* new ServerInterface class for implementing server policy, so it's no longer * new ServerInterface class for implementing server policy, so it's no
necessary to subclass Transport or Channel -- server code will need to be longer necessary to subclass Transport or Channel -- server code will
updated to follow this new API! (see demo_server.py) need to be updated to follow this new API! (see demo_server.py)
* some bugfixes for re-keying an active session * some bugfixes for re-keying an active session
* Transport.get_security_options() allows fine-tuned control over the crypto * Transport.get_security_options() allows fine-tuned control over the
negotiation on a new session crypto negotiation on a new session
* Transport.connect() takes a single hostkey object now instead of two string * Transport.connect() takes a single hostkey object now instead of two
parameters string parameters
* the Channel request methods (like 'exec_command') now return True on success * the Channel request methods (like 'exec_command') now return True on
or False on failure success or False on failure
* added a mechanism for providing subsystems in server mode (and a new class * added a mechanism for providing subsystems in server mode (and a new
to be subclassed: SubsystemHandler) class to be subclassed: SubsystemHandler)
* renamed SFTP -> SFTPClient (but left an alias for existing code) * renamed SFTP -> SFTPClient (but left an alias for existing code)
* added SFTPClient.normalize() to resolve paths on the server * added SFTPClient.normalize() to resolve paths on the server
* fleshed out the API a bit more for SFTPClient and private keys * fleshed out the API a bit more for SFTPClient and private keys
* a bunch of new unit tests! * a bunch of new unit tests!
v0.9 HORSEA v0.9 HORSEA
* fixed a lockup that could happen if the channel was closed while the send * fixed a lockup that could happen if the channel was closed while the
window was full send window was full
* better checking of maximum packet sizes * better checking of maximum packet sizes
* better line buffering for file objects * better line buffering for file objects
* now chops sftp requests into smaller packets for some older servers * now chops sftp requests into smaller packets for some older servers
@ -188,12 +198,13 @@ v0.9 FEAROW
* RSAKey/DSSKey added from_private_key_file() as a factory constructor; * RSAKey/DSSKey added from_private_key_file() as a factory constructor;
write_private_key_file() & generate() to create and save ssh2 keys; write_private_key_file() & generate() to create and save ssh2 keys;
get_base64() to retrieve the exported public key get_base64() to retrieve the exported public key
* Transport added global_request() [client] and check_global_request() [server] * Transport added global_request() [client] and check_global_request()
[server]
* Transport.get_remove_server_key() now returns a PKey object instead of a * Transport.get_remove_server_key() now returns a PKey object instead of a
tuple of strings tuple of strings
* Transport.get_username() -- return the username you auth'd as [client] * Transport.get_username() -- return the username you auth'd as [client]
* Transport.set_keepalive() -- makes paramiko send periodic junk packets to the * Transport.set_keepalive() -- makes paramiko send periodic junk packets
remote host, to keep the session active to the remote host, to keep the session active
* python 2.2 support (thanks to Roger Binns) * python 2.2 support (thanks to Roger Binns)
* misc. bug fixes * misc. bug fixes