SSH Saita a Ubuntu

SSH (amintaccen Shell) yana ba ku damar aiki cikin aminci cikin tsari ta hanyar haɗin amintacce. SSH yana haifar da rufaffen duk fayilolin da aka watsa, gami da kalmomin shiga, kuma suna watsa cikakken tsarin cibiyar sadarwa. Yin aiki daidai, dole ne a shigar da shi ba kawai ba, har ma an saita shi. Zai zama game da samfurin babban abin da muke so muyi magana a ƙarƙashin wannan labarin, wanda aka sanya sabon tsarin aikin Ubuntu don misali, wanda zai zama sabar.

Sanya SSH a Ubuntu

Idan baku kammala shigarwa zuwa uwar garken abokin ciniki ba da farko, ya kamata a yi shi da farko, fa'idar duka hanya mai sauƙi ne kuma ba zai ɗauki lokaci mai yawa ba. Tare da cikakken jagora kan wannan batun haduwa da wani labarin akan mahadar mai zuwa. Hakanan yana nuna tsarin don gyara fayil ɗin sanyi da gwaji SSH, don haka a yau za mu mayar da hankali a wasu ayyuka.

Kara karantawa: Sanya SSH-Server a Ubuntu

Ƙirƙirar maɓallan RSA

A cikin sabon shigar SSH, babu sauran maɓallan da aka ƙayyade don haɗawa daga sabar zuwa abokin ciniki da akasin haka. Duk waɗannan sigogin suna buƙatar saita da hannu nan da nan bayan ƙara duk abubuwan da aka gyara na ladabi. Maɓallan da ke aiki yana aiki ta amfani da Rsa Algorithm (ragewa daga sunayen Siffofin, Shamir da Admir da Admiran Masu Relivelopers). Godiya ga wannan cryptosystem, makullin ana rufaffen ta hanyar algorithms na musamman. Don ƙirƙirar maɓallin buɗe ido, kawai kuna buƙatar shigar da umarnin da ya dace a cikin na'ura wasan bidiyo kuma bi umarnin daya bayyana.

1. Je zuwa aiki tare da "tashar tashar" ta hanyar kowane irin yanayi, alal misali, ta buɗe ta ta menu ko maɓallin haɗin Ctrl + Alt + T.



2. Shigar da umarnin SSH-Keygen, sannan danna maɓallin Shigar.



3. Za a gabatar da fayil ɗin inda maɓallan za su sami ceto. Idan kana son ka bar su a cikin wurin da aka zaɓa ta tsohuwa, kawai danna Shigar.



4. Za'a iya kiyaye mabuɗin jama'a ta hanyar magana mai lamba. Idan kana son amfani da wannan zabin, rubuta kalmar wucewa a cikin kirtani da ya bayyana. Ba za a nuna haruffan Saukewa ba. A cikin sabon layin zai buƙaci maimaita shi.



5. Na gaba, zaku ga sanarwa cewa maɓallin an sami ceto, kuma kuna iya sanin kanku da hoton hoto na bazuwar.

Yanzu akwai ma'aurata abokin ciniki - sirrin da buɗe don amfani da su don kara haɗawa tsakanin kwamfutoci. Kawai kuna buƙatar sanya maɓallin zuwa uwar garken don tabbatar da SSH ta yi nasara.

Kwafi Buza Buza don Server

Akwai mahimman hanyoyin kwafin guda uku. Kowannensu zai fi kyau mafi kyau duka yanayi a lokacin da, alal misali, ɗayan hanyoyi ba ya aiki ko bai dace da takamaiman mai amfani ba. Muna ba da shawara don la'akari da duk zaɓuɓɓuka uku ta farawa daga mafi sauƙi.

Zabi 1: SSH-Kwafin-ID-ID-ID

An gina umarnin SSH-Kwamfin SSH cikin tsarin aiki, don haka baya buƙatar shigar da kowane ƙarin kayan haɗin don kisan ta. Lura da sittinx mai sauƙi don kwafa maɓallin. A cikin tashar, dole ne ka shigar da sunan mai amfani na SSH-ID @ Maraote_she, inda sunan mai amfani @ Mushote_she sunan kwamfuta.

Lokacin da ka fara haɗawa, zaku sami sanarwa tare da rubutu:

Da amincin rundunar '203.0.111.1 (203.0.113)' Ba za a iya kiyaye su ba.

EcdSA Key yatsa shine FD: FD: F9: 77: 8: 00: e1: 6D: 22: fe.

Shin kun tabbata kuna son ci gaba da haɗi (Ee / A'a)? I

Dole ne a saka zaɓi Ee don ci gaba da haɗin. Bayan haka, da amfani zai bincika mabuɗin a matsayin fayil ɗin ID_Rsa.r. A lokacin ganowa, za a nuna wannan sakamakon:

Usr / bin / ssh-copy-ID: Bayani: Yunkurin shiga tare da sabon Key (s), don tace duk wanda aka shigar dashi

/ Usr / bin / ssh-copy-ID: bayani 1 (s) ya kasance don shigar - idan an sa ku yanzu shi ne shigar da sabon makullin

Sunan mai [email protected]'S kalmar sirri:

Saka kalmar sirri daga mai watsa shiri domin mai amfani zai iya shigar da shi. Kayan aiki zai kwafin bayanai daga fayil ɗin Kulawa ~ / .Sh / id_rsa.rsa.rs.rsa.rs.rsa.rs.rsa.rs.rsa.rsa.rs.rsa.rsa.rsa.rsa.rsa.rs

Yawan maɓallin (s) ƙara: 1

Yanzu gwada shiga cikin injin, tare da: "SSH 'sunan mai amfani [email protected]"

Kuma duba don tabbatar da cewa kawai mabuɗin (s) wanda aka so an ƙara.

Bayyanar irin wannan rubutun na nufin cewa an sami nasarar sanya makullin a kan komputa mai nisa, kuma ba wasu matsaloli tare da haɗin zai tashi.

Zabi na 2: Kwafa Maɓallin Bude ta hanyar SSH

Idan ba za ku iya amfani da amfanin da ke sama ba, amma akwai kalmar sirri don shigar da maɓallin mai nisa, zaka iya loda ingantaccen tabbatacce lokacin da ya danganta. Ana amfani dashi don wannan umarnin cat wanda zai karanta bayanan daga fayil ɗin, sannan kuma za'a aika zuwa uwar garken. A cikin na'ura wasan bidiyo, kuna buƙatar shigar da kirtani.

Cat ~ / .Sh / id_rsa.i.uk.i SSH mai amfani da SSH @ menst "Mkdir -p ~ / .Sh && taba ~ /

Lokacin da sakon ya bayyana

Da amincin rundunar '203.0.111.1 (203.0.113)' Ba za a iya kiyaye su ba.

EcdSA Key yatsa shine FD: FD: F9: 77: 8: 00: e1: 6D: 22: fe.

Shin kun tabbata kuna son ci gaba da haɗi (Ee / A'a)? I

Ci gaba da haɗin kuma shigar da kalmar wucewa don shigar da sabar. Bayan haka, za a kwafa mabuɗin jama'a ta atomatik zuwa ƙarshen fayil ɗin sanyi na izini_Ka.

Zabi na 3: Bude Manual Buga Kafi

Idan babu damar zuwa komputa mai nisa ta hanyar sabar SSH, duk ayyukan da aka bayyana a sama ana aiwatar da hukuncin da hannu. Don yin wannan, da farko gano bayanai game da maɓalli akan PC ta uwar garken cat via cat ~ / .Shssh / id_rsa.ru.

Za'a nuna allon kamar irin wannan igiyar: Ssh-RSA + ta azaman saiti na haruffa == Demo @ gwaji. Bayan haka, je kuyi aiki akan na'urar nesa inda ka ƙirƙiri sabon jagorar ta Makkir -P ~ / .Sh. Bugu da ƙari yana ƙirƙirar fayil ɗin izini_Ka. Bayan haka, saka mabuɗin a wurin da ka koya a baya ta hanyar ECO + LOG na Maɓallin jama'a >> ~ / .Sh / Izini_Ka. Bayan haka, zaku iya ƙoƙarin aiwatar da gaskatawa tare da uwar garken ba tare da amfani da kalmomin shiga ba.

Tabbatarwa akan sabar ta hanyar da aka kirkiro

A cikin sashin da ya gabata, kun koya game da hanyoyi guda uku don kwafin maɓallin komputa mai nisa zuwa uwar garken. Irin waɗannan ayyukan zai ba ku damar haɗa ba tare da kalmar sirri ba. Ana yin wannan hanyar ta hanyar da umarni ta hanyar shigar da sunan mai amfani @ Mushote_host, inda sunan mai amfani @ Mushote_host shine sunan mai amfani. Lokacin da kuka haɗu da farko, za a sanar da ku na haɗin da ba a sani ba kuma zaku iya ci gaba ta zaɓi zaɓin Ee.

Haɗin zai faru ta atomatik idan ba a tantance kalmar wucewa ba yayin ƙirƙirar maɓallan biyu. In ba haka ba, da farko zaku gabatar da shi don ci gaba da aiki tare da SSH.

Kashe kalmar sirri

Anyi la'akari da kafa Kafa Mulki a cikin wannan yanayin lokacin da zaku shiga uwar garken ba tare da amfani da kalmar sirri ba. Koyaya, ikon tabbatar da maharan don amfani da kayan aiki don zaɓin kalmar sirri da fasa haɗin haɗin da aka kare. Musta ji da kanka daga irin waɗannan halaye zai ba da damar shigar da shigarwar kalmar sirri ta cikakken bayani a cikin fayil ɗin SSH. Wannan zai buƙaci:

1. A cikin tashar, buɗe fayil ɗin sanyi ta hanyar edita ta amfani da SSO Gegdit / sauransu / ssh / sshd_config.



2. Nemo layin kalmar sirri kuma cire alamar # a farkon don rass sifa.
3. Canza darajar zuwa babu kuma adana tsarin yanzu.



4. Rufe editan kuma sake kunna tsarin sudo tsarin sake kunna uwar garke SSH.

Tabbatarwar kalmar sirri zai kashe, kuma shigar da sabar za a iya amfani da ita ta amfani da maɓallan musamman wanda aka kirkira don wannan tare da Rsa Algorithm.

Kafa daidaitaccen Firewall

A Ubuntu, tsoffin gidan wuta shine rashin wutar lantarki (UFW) Firewall. Yana ba ku damar warware hanyoyin haɗin yanar gizo. Kowane aikace-aikacen yana ƙirƙirar bayanin martaba a cikin wannan kayan aiki, da UFW yana sarrafa su, ba da izinin haɗin. Saita bayanin martaba na SSH ta hanyar ƙara shi zuwa jerin ana aiwatar da shi kamar haka:

1. Bude bayanan bayanan Firewall ta cikin jerin abubuwan da Ufw Ufw.



2. Shigar da kalmar wucewa daga asusun don nuna bayani.



3. Za ka ga takardar shirye-shiryen aikace, dole ne a bude su a cikinsu.



4. Yanzu ya kamata ku warware ta hanyar SSH. Don yin wannan, ƙara shi zuwa jerin karɓaɓɓun bayanai ta amfani da Surdo UfW UFW ya ba OpenSSH.



5. Juya wutar wuta ta hanyar sabunta dokokin, sudo UFW.



6. Don imani shine cewa ana yarda da haɗin haɗi, ya kamata a wajabta matsayin haɗin gwiwar, Supem ufw, bayan wanda zaku ga matsayin hanyar sadarwa.

A kan wannan, umarnin tsarin SSH mu a Ubuntu an kammala. Ogatearin cigaba don fayil ɗin sanyi da sauran sigogi ana aiwatar da su da kowane mai amfani a ƙarƙashin buƙatunsa. Kuna iya samun ƙarin aikin duk abubuwan da aka haɗa na SSH a cikin bayanan hukuma na yarjejeniya.