package sshrpc import ( "fmt" "log" "net" "net/rpc" "golang.org/x/crypto/ssh" ) // DefaultRPCChannel is the Channel Name that will be used to carry the RPC traffic, can be changed in Serverr and Client const DefaultRPCChannel = "RPCChannel" // RPCSubsystem is the subsystem that will be used to trigger RPC endpoint creation const RPCSubsystem = "RPCSubsystem" // Server represents an SSH Server that spins up RPC servers when requested. type Server struct { *rpc.Server Config *ssh.ServerConfig ChannelName string } // NewServer returns a new Server to handle incoming SSH and RPC requests. func NewServer() *Server { c := &ssh.ServerConfig{ PasswordCallback: func(c ssh.ConnMetadata, pass []byte) (*ssh.Permissions, error) { if c.User() == "sshrpc" && string(pass) == "sshrpc" { return nil, nil } return nil, fmt.Errorf("password rejected for %q", c.User()) }, } return &Server{rpc.NewServer(), c, DefaultRPCChannel} } // StartServer starts the server listening for requests func (s *Server) StartServer(address string) { // Once a ServerConfig has been configured, connections can be accepted. listener, err := net.Listen("tcp", address) if err != nil { log.Fatal("failed to listen on ", address) } // Accept all connections log.Print("listening on ", address) for { tcpConn, err := listener.Accept() if err != nil { log.Printf("failed to accept incoming connection (%s)", err) continue } // Before use, a handshake must be performed on the incoming net.Conn. sshConn, chans, reqs, err := ssh.NewServerConn(tcpConn, s.Config) if err != nil { log.Printf("failed to handshake (%s)", err) continue } log.Printf("new ssh connection from %s (%s)", sshConn.RemoteAddr(), sshConn.ClientVersion()) // Print incoming out-of-band Requests go s.handleRequests(reqs) // Accept all channels go s.handleChannels(chans) } } // handleRequests handles global out-of-band SSH Requests func (s *Server) handleRequests(reqs <-chan *ssh.Request) { for req := range reqs { log.Printf("recieved out-of-band request: %+v", req) } } // handleChannels handels SSH Channel requests and their local out-of-band SSH Requests func (s *Server) handleChannels(chans <-chan ssh.NewChannel) { // Service the incoming Channel channel. for newChannel := range chans { log.Printf("Received channel: %v", newChannel.ChannelType()) // Check the type of channel if t := newChannel.ChannelType(); t != s.ChannelName { newChannel.Reject(ssh.UnknownChannelType, fmt.Sprintf("unknown channel type: %s", t)) continue } channel, requests, err := newChannel.Accept() if err != nil { log.Printf("could not accept channel (%s)", err) continue } log.Printf("Accepted channel") // Channels can have out-of-band requests go func(in <-chan *ssh.Request) { for req := range in { ok := false switch req.Type { case "subsystem": ok = true log.Printf("subsystem '%s'", req.Payload) switch string(req.Payload[4:]) { //RPCSubsystem Request made indicates client desires RPC Server access case RPCSubsystem: go s.ServeConn(channel) log.Printf("Started SSH RPC") default: log.Printf("Unknown subsystem: %s", req.Payload) } } if !ok { log.Printf("declining %s request...", req.Type) } req.Reply(ok, nil) } }(requests) } }