So, SSH keys allows you to run a single command, for the commands that let you execute all in one line.
First, on a linux box:
ssh-keygen -b 1024 -t rsa
Answer the questions, don't use a password, and you'll have a id_rsa and id_rsa.pub file.
cat id_rsa.pub
Get on your IronPort CLI, and issue a "sshconfig" command, follow the prompts to enter the public key.
Now you can run a command like this in a single line:
ssh -i /path/to/private_key/id_rsa foobar@yourhost "mailconfig you@domain.tld yes"
This saves you from needing to use Expect scripting to enter your password. Ok, that's nice.
FEATURE REQUEST: make it so ALL commands can be executed without going through prompts. In particular: showconfig. It should print out the whole config, and not stop for "-Any key for more-".
I don't want to email the config to myself, I want to just grab it.
From this post, I see a method to save a config on the IronPort, get the filename it created, then SCP it back to my machine. That would work, except for one problem: The user I'm using to grab the config should be a Read Only Operator, b/c it's sitting on a box used by many administrators. That leads me to another problem: mailconfig doesn't work, unless you're an Operator. But, showconfig does. Minus the User and a few other sections. The RO Operator should be able to download the complete config file!!!! So should Operator. I realize there is a security conflict with this: Operators could try to crack the password hashes of administrators and escalate their priviledge. My counter to that is: admins should use strong passwords. And, the trade off of needing to store an Admin user/pass on a backup server, just to fetch a copy of the full configuration is a bigger security risk!
