cmc

cmc makes SSH ControlMaster sessions easy. SSH ControlMaster sessions have the following benefits:

• When using a SSH Bastion, you will only be prompted for (two-factor) authentication once.
  • Hosts behind the SSH Bastion can be accessed "directly" by proxying through the SSH Bastion (see workflow).
• Sessions to or through ControlMaster hosts do not need to create a new connection (SSH will be faster for most tasks)

Script Help

Usage:  cmc [ -c HOST | -o HOST | -x HOST ]
        cmc [ -L | -l | -O | -X ]
        cmc -h

ControlMaster Controller - Eases management of SSH ControlMaster connections

Options:
    -h      show this help message and exit
    -c HOST check HOST ControlMaster connection status (maybe specified more
            than once)
    -L      list ControlMasters defined in SSH_CONFIG
    -l      list ControlMaster connection sockets matching ControlPath and
            check their connection status
    -O      open all ControlMasters defined in SSH_CONFIG
    -o HOST open a ControlMaster session (maybe specified more than once)
    -x HOST exit ControlMaster session (maybe specified more than once)
    -X      exit all ControlMaster connections with sockets matching
            ControlPath

Notes:
    • Any unused sockets in ControlPath are removed with -l and -X
    • Only a single ControlPath should be specified

Install

1. Install Homebrew — The missing package manager for OS X

2. Add the cmc "tap" and install cmc:

   brew tap ClockworkNet/cmc
   brew install cmc
   

Alternatively, since cmc is a bash script without esoteric dependencies, you can simply download it and ensure it is in your PATH.

If this utility is helpful for you, please star this project so that it can eventually be included in Homebrew proper. Thank you!

Documentation

Workflow

See docs/workflow.rst.

Annotated SSH Configuration

See docs/annotated_config.rst.

Related

• mac-ssh-confirm: Protect against SSH Agent Hijacking on Mac OS X with the ability to confirm agent identities prior to each use
• gacli: Mac CLI Google Authenticator client (ex. for use with SSH Bastions that utilize Google Authenticator)

Requirements

• *nix Operating System with
  • core utilities (awk, find, grep, ps, and sed)
  • GNU Bourne-Again Shell 3.0 or later (bash)
  • OpenSSH 4.0 or later (ssh)

License

• LICENSE (MIT License)