christianandClaude Opus 5.5
e873d1aa40
It now targets whoever is logged in at the console instead of the user the command runs as, and hands the .ssh folder back to them when run as root. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
6 lines
965 B
Bash
6 lines
965 B
Bash
# Paste this into Apple Remote Desktop: select the Macs -> Manage -> Send UNIX Command,
|
|
# "Run command as: User: root" (or "Current user"), then Send. It lets NA Ingest's
|
|
# status panel log in as whoever is logged in on that Mac, with its key (no password),
|
|
# and prints that account name for the config. Safe to run more than once.
|
|
U=$(stat -f%Su /dev/console); H=$(dscl . -read "/Users/$U" NFSHomeDirectory | awk '{print $2}'); mkdir -p "$H/.ssh" && touch "$H/.ssh/authorized_keys" && (grep -q 'status-panel@NA-Ingest' "$H/.ssh/authorized_keys" || echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHM2BPUpVpbMxKumLayVSutUsFWUXEfJ/4vxIJ0thbgY status-panel@NA-Ingest' >> "$H/.ssh/authorized_keys") && chmod 700 "$H/.ssh" && chmod 600 "$H/.ssh/authorized_keys" && { [ "$(id -u)" != 0 ] || chown -R "$U:staff" "$H/.ssh"; } && echo "OK user=$U mac=$(scutil --get ComputerName) ssh-group=$(dseditgroup -o checkmember -m "$U" com.apple.access_ssh 2>/dev/null | cut -d' ' -f1)"
|