Ukuseta i-Ssh kwi-Ubuntu

SSH technology (Shell Secure) kukuvumela ukuba uphathe ngokukhuselekileyo kude computer yakho usebenzisa i uqhagamshelo olukhuselekileyo. SSH uvelisa ngemfihlo iifayile zonke zesini, kuquka password, kwaye kananjalo sithumela ngokupheleleyo nayiphi Iprotocolo yomsebenzi womnatha. Ukuze isebenze kakuhle, kufuneka nje ukuba ifakwe, kodwa ihleliwe. Bekuya kuba malunga imveliso loqwalaselo ephambili ukuba ndingathanda ukuthetha phantsi kweli nqaku, ukuthatha inguqulelo ye-Ubuntu yokusebenza bamuva umzekelo, apho aya khona umncedisi.

Qwalasela SSH e Ubuntu

Ukuba akukabi zigqitywe ufakelo mncedisi engakhethwanga kwaye i umxhasi PC, oko kufuneka kwenziwe kuqala, inzuzo inkqubo yonke ilula kwaye ayiyi kuthabatha ixesha elininzi. Incwadi esisikhokelo eneenkcukacha kule sihloko Dibana elinye inqaku kule linki ilandelayo. Kwakhona ibonisa inkqubo ukuhlela uqwalaselo lwefayile nokuzivavanya Ssh, ngoko namhlanje siya kugxininisa kancinane kwezinye imisebenzi.

Funda ngakumbi: Ifakela ssh-Server Ubuntu

Ukudala pair indibaniselayezitshixo RSA

Xa Ssh ngokutsha ifakiwe, akukho izitshixo ngaphezulu ebalulwe ukudibanisa kwiseva ukuya client and vice versa. Zonke ezi parameters kufuneka abekwe ngesandla ngoko nangoko emva ngokongeza onke amacandelo protocol. Amahobe izitshixo abasebenza usebenzisa algorithm RSA (iphungulwe amagama Rivest, eShamire kunye Adleman abaphuhlisi). Ngenxa kule cryptosystem, loo maqhosha zombhalo ngokusebenzisa ubuchule ezizodwa. Ukudala iperi yezitshixo ezivulekileyo, wena kudingeka nje ukuba angene imiyalelo efanelekileyo kwi console kwaye ulandele imiyalelo evelayo.

1. Yiya emsebenzini kunye "yesiphelo" ngayo nayiphi na indlela elula, umzekelo, ngokuvula ngayo ngokusebenzisa menu okanye udityaniso-maqhosha Ctrl + Alt + T.



2. Ngenisa Ssh-Keygen umyalelo, kwaye ngoku nqakraza ENTER isitshixo.



3. Kuya kuqwalaselwa ukwenza i fayile apho izitshixo uya kusindiswa. Ukuba ufuna abasalise indawo ekhethiweyo kokungagqibekanga, nqakraza ngokulula ku ENTER.



4. Eyona nto ingundoqo karhulumente ukhuselwe ibinzana khowudi. Ukuba ufuna ukusebenzisa olu khetho, ubhale igama lokugqitha kumtya wabonakala. abalinganiswa nghenisiwa akazukuboniswa. Kule umgca omtsha kuza kufuneka ukuphinda kuyo.



5. Okulandelayo, uya kubona isaziso ukuba yesitshixo aligcinwanga, kwaye kwakhona yazi nge nomfanekiso walo random zomzobo ngokwakho.

Ngoku kukho isibini umthengi - ngasese kwaye sivulelekile ukuba kusetyenziswa kuxhulumano ngakumbi phakathi kweekhompyutha. Kufuneka nje ukuba abeke isitshixo umncedisi ukuze ububhali ssh iyaphumelela.

Khuphela iqhosha ukuvula kumncedisi

Kukho iindlela kukopa iqhosha ezintathu. Ngamnye kubo iya kuba eyiyo kakhulu kwiimeko ezahlukeneyo xa, umzekelo, enye yeendlela ayinayo umsebenzi okanye ayikho efanelekileyo ngumsebenzisi ethile. Siphakamisa ingqalelo zonke ezintathu ngokuqala kusukela elula nolusebenzayo.

Option 1: ssh-Copy-ID umyalelo

Umyalelo we Ssh-Copy-ID yakhiwe kwinkqubo yokusebenza, ngoko akuyomfuneko ukuba ukufaka nayiphi na amacandelo ezongezelelweyo ekubulaweni yayo. Qwalasela ngesivakalisi elula ukukhuphela isitshixo. Kwi-terminal, kufuneka ufake igama lomsebenzisi ssh-Copy-ID @ remote_host, apho lomsebenzisi @ remote_host ligama ikhomputha ekude.

Xa uqala uxhulumanisa, uya kufumana isaziso kunye netekisi:

Ukuchana somamkeli 203.0.113.1 (203.0.113.1) 'azinako ukusekwa.

ECDSA Fingerprints iyi lizuze: lizuze: D4: F9: 77: FE: 73: 84: E1: 55: 00: AD: D6: 6D: 22: FE.

Uqinisekile ukuba ufuna ukuqhubeka Idibanisa (EWE / HAYI)? Ewe

Kufuneka ukhankanye yes ukhetho ukuqhubeka udibaniso. Emva koko, lo eluncedo uya ngokuzimeleyo khangela iqhosha njengoko ifayile id_rsa.pub, leyo wadalwa ngaphambili. Ngexesha bangabonwa yimpumelelo, esi siphumo siya kuboniswa:

Usr / bin / ssh-IKOPI-ID: info: izama ukungena enesitshixo (s) ezintsha, ukuba coca ulwelo ngaphandle bonke Aready Uhlelo

/ Usr / bin / ssh-Copy-ID: info: 1 Key (s) Hlalani luzakufakwa - ukuba uza kuyalelwa ngoku ukufaka izitshixo ezintsha

iphasiwedi [email protected]'s:

Khankanya iphaswedi nginginya yobekelo ukuze eluncedo unako ukungena kuyo. Isixhobo iya kukotshwa data evela eluntwini iqhosha ifayile ~ / .ssh / id_rsa.pub, uze umyalezo izakuvela eskrinini:

Inani Of Key (S) Added: 1

Ngoku zama ukungena kumatshini, KUNYE: "ssh '[email protected]'"

Kwaye ukhangele ukuze uqinisekise ukuba kuphela I-Key (s) ufuna Ngaba Added.

Imbonakalo loo ekwisicatshulwa ithetha ukuba yesitshixo sele zilayishwe ngempumelelo kwi computer ekude, yaye kuya kuvela akusekho naziphi na iingxaki kunye xhulumaniso.

Option 2: Ukukopa i isitshixo evulekileyo ngenxa SSH

Ukuba awukwazi ukusebenzisa eliluncedo ngasentla, kodwa kukho lokugqitha ukuze ungene kumncedisi ssh ekude, ungalayisha isitshixo sakho lomsebenzisi ngesandla, ngaloo ndlela kubonelelwa oluzinzileyo ngakumbi ububhali xa iqhagamshele. Kuya kusetyenziswa le CAT umyalelo uya ukufunda data evela fayile, kwaye ke ziya kuthunyelwa kwiseva. Xa console, kuya kufuneka ukuba ufake umtya.

Cat ~ / .ssh / id_rsa.pub | Ssh lomsebenzisi @ Remote_Host "mkdir -p ~ / .ssh && touch ~ / .ssh / authorized_keys && fdopen -R ukuya = ~ / .ssh && Cat >> ~ / .ssh / authorized_keys."

Xa lo myalezo kubonakala

Ukuchana somamkeli 203.0.113.1 (203.0.113.1) 'azinako ukusekwa.

ECDSA Fingerprints iyi lizuze: lizuze: D4: F9: 77: FE: 73: 84: E1: 55: 00: AD: D6: 6D: 22: FE.

Uqinisekile ukuba ufuna ukuqhubeka Idibanisa (EWE / HAYI)? Ewe

Qhubeka nonxibelelwano kwaye ufake ipasigama ukufaka iseva. Emva koko, isitshixo sikawonke-wonke siya kukhutshelwa ngokuzenzekelayo ekupheleni kwefayile yolawulo egunyazisiweyo.

Inketho 3: Incwadana yemigaqo evulekileyo yokukhuphela

Ukungabikho kokufikelela kwikhompyuter ekude ngeseva ye-SH, zonke iintshukumo ezichazwe apha ngasentla zibulawa ngesandla. Ukwenza oku, okokuqala fumana ulwazi malunga nesitshixo kwi-PR PC ngekati ~ / .SH / ID_PA.PU.POYA.

Isikrini siya kubonakala malunga nomtya onjalo: i-ssh-000 jiza + isitshixo njengeseti yoonobumba == demo @ vavanyo. Emva koko, yiya emsebenzini kwisixhobo esikude apho wenza isikhombisi esitsha nge-MKDIR -p ~ / .SH. Ukongeza kudala ifayile ye -_kyelies. Okulandelayo, faka isitshixo apho ufunde kanye nge-echo + umqolo wesitshixo sikawonke-wonke >> /.SH /. Emva koko, unokuzama ukuqinisekiswa komncedisi ngaphandle kokusebenzisa iipasswords.

Uqinisekiso kwiseva ngeqhosha le-DED

Kwicandelo elidlulileyo, ufunda ngeendlela ezintathu zokukopa iqhosha lekhompyuter ekude kwiseva. Izenzo ezinjalo ziya kukuvumela ukuba uqhagamshele ngaphandle kwegama eligqithisiweyo. Le nkqubo yenziwa ngelayini yomyalelo ngokufaka igama lomsebenzisi weShg Ssh @okude_honze, apho igama lomsebenzisi @ I-Dise_host ligama lomsebenzisi kunye negama lekhompyuter. Xa uqala qhagamshela, uya kwaziswa ngoqhagamshelo olungaqhelekanga kwaye ungaqhubeka nokukhetha ukhetho lwe-Ewe.

Umdibaniso uya kwenzeka ngokuzenzekelayo ukuba ibinzana iqhosha (ibinzana logqitho) waye ingakhankanywanga ngexesha nokudalwa ngeembadada indibaniselayezitshixo. Ngaphandle koko, kuya kufuneka kuqala kufuneka uyizise ukuba uqhubeke ukusebenza nge-SSS.

Khubaza ukuqinisekiswa kwephasiwedi

isicwangciso eyimpumelelo kukopa iqhosha kuthathwa kuloo meko xa ungakwazi ukungena umncedisi ngaphandle usebenzisa iphasiwedi. Nangona kunjalo, ukukwazi ukungqinisisa ngokuvumela abahlaseli ukuba basebenzise izixhobo zokukhetha iphasiwedi kunye nokuqhekeza unxibelelwano olukhuselekileyo. Ibala lezinto ezinjalo liya kuvumela igalelo le-password epheleleyo kwifayile yoqwalaselo lweSsh. Oku kuyakufuna:

1. Kwi-terminal, vula yoqwalaselo ifayile nge umhleli usebenzisa Sudo GEGDIT / etc / ssh / SSHD_CONFIG umyalelo.



2. Fumana i-passwordagnageace quid kwaye ususe i-# Sayina ungene ekuqaleni ukuze udubula iparameter.
3. Guqula ixabiso ku-hayi kwaye lugcine ubumbeko lwangoku.



4. Vala umhleli kwaye uqale Sudo SystemCTL Qalisa kwakhona SSH server.

Ukungqinisisa kwephasiwedi kuya kucima, kwaye faka iseva inokusetyenziswa kuphela usebenzisa izitshixo ezenzelwe oku nge-RSA algorithm.

Ukuseta i-firewall esemgangathweni

Ngo-Ubuntu, kungagqibekanga firewall ayinzima Firewall (UFW) firewall. It ikuvumela ukuba ukusombulula unxibelelwano ngeenkonzo ekhethiweyo. Isicelo ngasinye kudala iprofayile walo kule sixhobo, kwaye UFW ilawula bona, avumele okanye endibulala udibaniso. Icwangcisa profile ssh ngokudibanisa kwi uluhlu wenziwe ngolu hlobo:

1. Vula uluhlu iprofayile Firewall ngokusebenzisa Sudo UFW App List umyalelo.



2. Ngenisa igama lokugqitha kwingxelo ulwazi ukubonisa.



3. Uya kubona noxwebhu izicelo ezikhoyo, kufuneka kubekho OpenSSH phakathi kwabo.



4. Ngoku kufuneka ukusombulula unxulumano nge SSH. Ukuze wenze oku, yidibanise kuluhlu kweeprofayili ukuba usebenzisa Sudo UFW Vumela OpenSSH.



5. Vula kwi Firewall ngokuhlaziya imithetho, sudo ufw amandla.



6. Kuba neenkolelo ukuba unxulumano zivumelekile, Sudo UFW Status kufuneka imiselwe, emva koko uya kubona ukuba nesimo senethiwekhi.

Kule, zigqityiwe ssh uqwalaselo imiyalelo yethu Ubuntu. izicwangciso ezingaphezulu yoqwalaselo lwefayile kunye nezinye iparameters ngabanye olwenziwe umsebenzisi ngamnye phantsi izicelo zawo. Unako simazi isenzo onke amacandelo SSH kwi usebenziso lwamaxwebhu esemthethweni Protocol.