tags:

views:

179

answers:

2

I am working on a tool that reads an iptables configuration from a remote host over SSH2 using the PECL SSH2 extension. I am able to successfully make the connection to the host, authenticate, and execute commands. The trouble I am having is sometimes the stream doesn't contain any data.

 /**
  * Load the current firewall configuration
  * @return bool
  */
 public function loadRules() {
  $stream = ssh2_exec($this->connection,"~/iptsave;");
  stream_set_blocking($stream,true);
  $iptablesSave = stream_get_contents($stream);
  if(empty($iptablesSave)) {
   return false;
   }
  parent::restore($iptablesSave);
  return true;
  }

About 25% of the time, loadRules() returns false, even when connecting to locahost instead of the remote system. I was able to work around the problem by changing the ssh2_exec call to

$stream = ssh2_exec($this->connection,"~/iptsave; sleep .5");

but I am concerned that something is wrong.

A: 

I've got the same issue here. Somehow you need to set a delay for getting the result of the stream.

The way you've done it is possible, but you could also set a sleep(1) after the stream_set_block($stream, true) function. You could try the usleep() function. Haven't tried it yet

Robert Cabri
A: 

phpSecLib may be able to help:

According to this post, it always returns the output, unlike ssh2.so.

viewcopy