SSH dongosolo mu Debian

Monga mukudziwa, lotseguka SSH umisiri inu chosonyeza kugwirizana kwa yeniyeni kompyuta ndi deta zimafalitsa mwa protocol anasankha kutetezedwa. Zimenezi zimathandiza kuti litsatira ndi kwathunthu kulamulira chipangizo anasankhidwa kuonetsetsa kuwombola abwino zofunika ndipo ngakhale mapasiwedi. Nthawi zina owerenga ndi kufunika kugwirizana kudzera SSH, koma kuwonjezera khazikitsa zofunikira yokha, m'pofunika zokolola ndi zoikamo zina. Tikufuna kulankhula za izo lero, kutenga Debian yogawa Mwachitsanzo.

Sinthani SSH mu Debian

Ife kugawanitsa ndondomeko ya kasinthidwe mu masitepe angapo, chifukwa aliyense ali ndi udindo kukhazikitsa mwai yeniyeni ndipo amangokhala kukhala zothandiza owerenga ena, potsata zofuna. Tiyeni tiyambe ndi mfundo yakuti onse adzapatsidwa ku kutonthoza ndi kutsimikiza ufulu wa superuser, kotero kukonzekera izi zisanachitike.

Khazikitsa SSH-Server ndi SSH-zikufuna

Ndi kusakhulupirika, SSH ali m'gulu muyezo DEBIAN opaleshoni dongosolo zofunikira akonzedwa Komabe, chifukwa mbali iliyonse, owona koyenera kungakhale chochititsa manyazi ndi chopusa kapena kungoti palibe, mwachitsanzo, pamene wosuta pamanja opangidwa uninstallation. Ngati mukufuna Pre-kukhazikitsa SSH-Server ndi SSH-zikufuna, kutsatira malangizo otsatirawa:

1. Tsegulani menyu Start ndi kuyamba Pokwelera kumeneko. Izi zikhoza kuchitika kudzera muyezo kiyi kuphatikiza Ctrl + alt + T.



2. Apa mukufuna mu Sudo oyenera kukhazikitsa lamulo OpenSSH-Server kuti ndi udindo khazikitsa Seva gawo. Uloweni ndi kumadula pa ENTER kuti yambitsa.



3. Monga mukudziwa kale, zimene anachita ndi mkangano Sudo adzafunika adamulowetsa ndi malangizo a superuser achinsinsi. Taonani kuti anthu analowa mu mzere uwu si anasonyeza.



4. Adzakutengerani analidziwitsa kuti phukusi akuwonjezeka kapena kusinthidwa. Ngati SSH-Server kale anaika mu Debian, uthenga akuonekera pamaso pa phukusi yake.



5. Kenako, muyenera kuwonjezera dongosolo ndi kasitomala gawo, ngati kompyuta imene kugwirizana adzakhala chikugwirizana m'tsogolo. Kuchita izi, ntchito zofanana Sudo oyenera-Pemphani Kwabasi Openssh-zikufuna lamulo.

Palibe zigawo zambiri zina kukhazikitsa zigawo zoonjezera, mukhoza tsopano bwinobwino kusinthana kwa eni Seva ndi owona kasinthidwe kulenga makiyi ndi kukonzekera zonse mopitilira kulumikiza kompyuta akumidzi.

Server Management ndi Kuona Ntchito Yake

Mwachidule tiyeni tione mmene makina anaika imayendetsedwa ndi cheke cha ntchito zake. Ziyenera kuchitika pamaso kusintha kwa dongosolo kuti atsimikize kuti lidzigwira ntchito zigawo zikuluzikulu anawonjezera cholondola.

1. Gwiritsani ntchito Sudo SystemCTL Yambitsani SSHD lamulo kuwonjezera Seva kuti autoload, ngati sizichitika basi. Ngati mukufuna adzafafaniza Launch ndi opaleshoni dongosolo, ntchito SystemCTL Letsani SSHD. Ndiye oyambitsa buku zidzafunika mwachindunji SystemCTL Start SSHD.



2. zochita zonsezi mwamtheradi ayenera anachita m'malo mwa superuser, kotero muyenera kulowa achinsinsi wake.



3. Lowani SSH Localhost lamulo kufufuza Seva kuchitila. Sinthanitsani Localhost ku adiresi m'dera kompyuta.



4. Panthawi yoyamba kulumikiza, mudzakhala analidziwitsa kuti gwero siwotsimikizika. Izi zimachitika chifukwa ife asanakhale zoikamo chitetezo. Tsopano basi kutsimikizira kupitiriza kugwirizana ndi kulowa Inde.

Kuwonjezera awiri RSA mafungulo

Kulumikiza ku makina kwa kasitomala ndi mosemphanitsa kudzera SSH ikuchitika ndi kulowa achinsinsi Komabe, Ndi bwino kuti akonze awiri makiyi kuti adzakhala anayamba mwa ma aligorivimu RSA. Mtundu wa kubisa zingakuthandizeni kulenga chitetezo mulingo woyenera, womwe kudzakhala kovuta kuzungulira tizilomboto pamene akuyesa kuthyolako. Kuwonjezera awiri makiyi maminiti pang'ono chabe, ndipo izo zikuwoneka ngati ndondomeko izi:

1. Tsegulani "Pokwelera" ndi kulowa SSH-keygen kumeneko.



2. Mukhoza paokha kusankha malo mukufuna kupulumutsa njira ya chifungulo. Ngati palibe wofuna kusintha izo, kungoti akanikizire ENTER kiyi.



3. Tsopano fungulo lotsegula analengedwa. Iwo angatetezedwe ndi mawu code. Lowani mu chingwe anasonyeza kapena kusiya kanthu ngati simukufuna kuti yambitsa njirayi.



4. Pamene kulowa chinsinsi mawu adzayenera mwachindunji izo kachiwiri kuti atsimikizire.



5. A zidziwitso za chilengedwe cha kiyi anthu adzaoneka. Monga mukuonera, iye anapatsidwa ya zizindikiro mwachisawawa, ndi fano analengedwa pa ma aligorivimu mwachisawawa.

Chifukwa cha zomwe zachitika, kiyi yachinsinsi ndi yapagulu yapangidwa. Adzatenga nawo mbali kukalumikiza pakati pa zida. Tsopano muyenera kutengera kiyi ya anthu, ndipo mutha kuchita izi pogwiritsa ntchito njira zosiyanasiyana.

Koperani fungulo lotseguka ku seva

Mukutsika, pali zosankha zitatu zomwe mungakonzere fungulo la anthu kwa seva. Tikuganiza kuti nthawi yomweyo timadzidziwa nokha kuti musankhe zabwino mtsogolo. Izi ndizofunikira m'mikhalidwe imeneyi pomwe imodzi mwa njira sizikwanira kapena sizikukwaniritsa zosowa za wogwiritsa ntchito.

Njira 1: SS-Copy-ID

Tiyeni tiyambe ndi njira yosavuta kwambiri yomwe imatanthawuza kugwiritsa ntchito lamulo la SS-Copy-Copy. Mwachisawawa, izi zimapangidwa kale mu OS, sizikufunikira kukhazikitsa koyambirira. Syntax yake ndi yophweka kwambiri momwe angathere, ndipo udzafunika kuchita izi:

1. Mu coniole, lowetsani lamulo la SS-Copy-ID ku Username @ wakutali_Mipositi ndikuyambitsa. Sinthani dzina lolowera @ kutalidi ku adilesi ya kompyuta yomwe akutumiza kuti apulumutse bwino.



2. Mukayamba kuyesa kulumikizana, mudzawona uthengawo "wotsimikizika wa" 203.113.1 (203) "FD: F9: 77: Fe: 73: Fe: 73 : 84: E1: 55: 00: AD: D6: 6D: 22:. Fe Kodi mukutsimikiza kuti Pitirizani polumikiza (INDE / NO) EYA ". Sankhani yankho labwino kupitiriza kulumikizana.



3. Kenako, zofunikira adzakhala paokha ntchito kufufuza ndi kukopera kiyi. Zotsatira zake, ngati zonse zidayenda bwino, zidziwitso "/ USR / SHS / SHS-Copy-ID" ikuwoneka bwino: anaika / USR / nkhokwe / SSH-Koperani-ID: Dziwani: 1 Ofunika (s) Khalani ndi kuikidwa - ngati inu amafika tsopano ndi kukhazikitsa mafungulo latsopano [email protected]'s achinsinsi: ". Izi zikutanthauza kuti mutha kuyika mawu achinsinsi ndikusunthira kuwongolera mwachindunji desktop yakutali.

Kuphatikiza apo, nditchula kuti pambuyo poti dongosolo loyambirira lopambana mu Console, mkhalidwe wotsatira uoneke:

Chiwerengero cha kiyi (s) chowonjezera: 1

Tsopano yesani kulowa mu makinawo, ndi: "SHS '[email protected]'

Ndipo onani kuti muwonetsetse kuti ndi fungulo lomwe mukufuna.

Likuti fungulo lidapangidwa bwino pa kompyuta yakutali ndipo siyinanso mavuto aliwonse omwe mungayese mukamalumikiza.

Njira 2: Kiyi yakunja kudzera pa ssh

Monga mukudziwa, kunja kwa kiyi ya anthu kudzakupatsani mwayi wolumikizana ndi seva yomwe yatchulidwa popanda isanalowe. Tsopano, pomwe chinsinsi sichinafike pa kompyuta yandamale, mutha kulumikizana kudzera pa SSH polowa mawu achinsinsi kuti musunge fayilo yomwe mukufuna. Kuti muchite izi, mu kutonthoza muyenera kulowa amphaka a Harce ~ / .ssh / ID.pub | SHS Username @ kutali - Mkdir -p ~ / .sh && tents &&s-& .sss-~

Chidziwitso chikuyenera kuwonekera pazenera.

The kudalirika kwa khamu '203.0.113.1 (203.0.113.1) sangathe Kukhazikika.

ECDSA MUNGAGWIRITSE zala NDI FD: FD: D4: F9: 77: Fe: 73: 84: E1: 55: 00: AD: D6: 6D: 22: Fe.

Kodi mukutsimikiza kuti Pitirizani polumikiza (INDE / NO) ?.

Tsimikizani kupitiriza kugwirizana. kiyi anthu adzakhala basi anakopera ku mapeto a Authorized_keys file kasinthidwe. Pa njirayi katundu, n'zotheka pompo.

Njira 3: Buku Koperani Ofunika

Njira lidzayenere ogwiritsa anthu amene alibe mphamvu kulenga kugwirizana akutali chandamale kompyuta, koma pali mwayi thupi izo. Pankhaniyi, chinsinsi ziyenera anasamutsa paokha. Choyamba, kudziwa zokhudza pa PC Seva kudzera Cat ~ / .ssh / id_rsa.pub.

The kutonthoza ayenera kuonekera kwa SSH-RSA chingwe + fungulo ya zilembo == pachiwonetsero @ mayeso. Tsopano inu mukhoza kupita kwa kompyuta wina, komwe muyenera kulenga Directory watsopano mwa kulowa mkdir -p ~ / .ssh. Komanso anati file lemba otchedwa Authorized_keys. Patsalanso yekha amaika pali kale kiyi ena kudzera mzere Echo + wa kiyi anthu >> ~ / .ssh / authorized_keys. Pambuyo pake, kutsimikizika lidzakhala lilipo popanda kulowa isanafike achinsinsi. Izi zimachitika ndi SSH Lolowera @ Remote_Host lamulo, kumene lolowera @ remote_host ziyenera kulowa mmalo mwa dzina la asilikali chofunika.

Akuti basi njira analola kusamutsa chinsinsi anthu chipangizo watsopano pofuna kulumikiza popanda kulowa achinsinsi, koma tsopano mawonekedwe pa kulowa ukadali anasonyeza. Chotero malo a zinthu amalola nkhondo ndi kulumikiza kompyuta kutali chabe passwording. Kenako timapereka kuonetsetsa chitetezo ndi kuchita zoikamo ena.

kutsimikizika kuletsa achinsinsi

Monga tanena kale, n'zotheka kutsimikizika achinsinsi akhoza kukhala ulalo ofooka mu chitetezo cha kulumikiza kutali, chifukwa pali njira misracting makiyi amenewa. Mpofunika wolemala njirayi ngati mukufuna kuteteza pazipita Seva wanu. Mukhoza kuchita izi monga chonchi:

1. Tsegulani / etc / ssh / sshd_config kasinthidwe file kudzera lemba aliyense mkonzi yabwino, kungakhale Mwachitsanzo, gedit kapena nano.



2. Mu mndandanda kuti angatsegule kupeza "passwordauthentication" chingwe ndi kuchotsa # chizindikiro kuti lamulo limeneli yogwira. Kusintha mtengo wa INDE ku NO kuletsa mwayi.



3. Akamaliza, atolankhani Ctrl + O kupulumutsa kusintha.



4. Sasintha dzina la wapamwamba, koma dinani Enter kuti ntchito khwekhwe.



5. Mukhoza kusiya mkonzi malemba mwa kuwonekera pa Ctrl + X.



6. kusintha onse zotsatira pokhapokha restarting utumiki SSH, kotero nthawi yomweyo kudzera Sudo SystemCTL kuyambitsanso SSH.

Chifukwa cha zochita, n'zotheka kutsimikizika achinsinsi adzakhala wolemala, ndipo athandizira lidzakhala lilipo pambuyo angapo RSA makiyi. Taganizirani izi pamene kasinthidwe ofanana.

Configuring ndi chizindikiro makhoma oteteza

Kumapeto kwa zinthu masiku ano, ife tikufuna kuti tikuuzeni za kasinthidwe wa makhoma oteteza, amene adzakhala ntchito zilolezo kapena prohibitations wa mankhwala. Ife ndidzadutsa yekha ndi mfundo zazikulu, kutenga wopepuka makhoma oteteza (UFW).

1. Choyamba, tiyeni tifufuze mndandanda wa mbiri alipo. Lowani Sudo UFW App List ndi kumadula pa ENTER.



2. Tsimikizani zomwe zachitika pofotokoza mawu achinsinsi.



3. Lay SSH mu mndandanda. Ngati mzere uwu alipo uko, zikutanthauza kuti ntchito zonse molondola.



4. Lolani kugwirizana kudzera zofunikira limeneli polemba Sudo UFW Amalola OpenSSh.



5. Kuyatsa makhoma oteteza kuti kusintha malamulo. Izi zimachitika sudo ndi ufw athe lamulo.



6. Inu angaletse udindo panopa makhoma oteteza nthawi iliyonse mwa kulowa Sudo UFW Momwe.

Pa ndondomeko imeneyi, SSH kasinthidwe mu Debian chokwanira. Monga mukuonera, pali zambiri zina zabwino osiyana ndi malamulo amene ayenera anati. Kumene, mu chimango cha nkhani ina, sikutheka kuti agwirizane mwamtheradi onse zambiri, kotero ife anakhudza mfundo zofunika. Ngati mukufuna kupeza zambiri mozama deta za zofunikira izi, ife ndikulangizeni inu choti mutidziwe bwino zolembedwa zake boma.