Maitiro ekubatanidza kune Linux server kuburikidza neSSH

Nzira huru yekubatanidza neLinux server ndeyekushandisa SSH protocol . Rudzi urwu rwekubatanidza rwakachengeteka, nekuti data rese rinotumirwa naro rakavharidzirwa. Kuti ugadzire SSH connection unofanira kuigadzirisa pane remote server yaunoda kubatanidza nayo, uye kune client iri kudivi remushandisi. Kune software yakawanda yekubatanidza SSH. Kana iri Linux, OpenSSH package ndiyo inonyanya kufarirwa uye kune vanhu veWindows vanoshandisa PuTTY zvakanyanya.

Ngatitarisei zvakanyanya kugadziridzwa kweseva uchishandisa Ubuntu Server 18.04 semuenzaniso, uye toedza kubatana neserver kubva kuLinux neWindows.

Zvese zvatinoita zvinobva muakaundi yemushandisiwo zvake. Muchiitiko ichi, takagadzira " mihail " yemushandisi, uye account ye " root " inodzimwa zvachose.

Server side setup

Gadzirisa pasuru ine murairo uyu:

sudo apt install openssh-server

Mushure mekuiswa kwapera, ita shuwa kuti sevhisi iri kushanda. Shandisa murairo uyu:

systemctl status sshd

Chimiro " Kushanda (kumhanya) " zvinoreva kuti sevhisi yacho yavhurwa uye inoshanda zvakanaka.

Kuti udzivise kuvharira kwekupinda kwekubatanidza nefirewall, ita shuwa kuti unoidzima, nekuti hatisi kuzogadzirisa network firewall mune ino chinyorwa.

Shandisa murairo uyu:

sudo ufw disable

Panguva ino iwe unogona kutobatanidza kune server. Iine default zvigadziriso sevha inobvumira kubatana kune yakajairwa chiteshi 22 ine password-based authentication.

SSH yekubatanidza kubva kuLinux

Semutemo, mutengi weOpenSSH akaiswa paLinux nekukasira uye haidi mamwe manyorero ekugadzirisa. Kubatanidza kunogona kusimbiswa kubva kune terminal nerubatsiro rwe ssh command. Paramita mune iyi kesi ingave zita rekushandisa uye IP kero yeiri kure server. Pa test server yedu yatiri kushandisa semuenzaniso pane account imwe chete "mihail", saka tichashandisa izvi.

ssh [email protected]

Pakutanga kwekubatanidza, unofanira kusimbisa kuwedzerwa kwekiyi yeruzhinji yeseva kudhatabhesi, saka pindura " hongu ". Mushure meizvozvo unogona kuisa password. Kana kubatana kwacho kwabudirira, uchaona rugwaro rwekugamuchira kubva kumutsara wemirairo yeseva. Iye zvino mirairo yese ichaitwa zvakananga paserver iri kure.

SSH kubva kuWindows

Vhura Putty woisa ma connection parameters. Ita shuwa kuti switch inonzi " Connection type " yashandurwa kuita SSH . Isa IP address mu " Host Name ", default value 22 mu " Port " wobva wadzvanya " Vhura ".

Pakutanga, Putty ichakukumbira kuti usimbise kuti unovimba neseva iyi, saka tinya " Hongu ".

Mushure mekupinda mukati uye password, iwe uchaona mutsara wekuraira weiyo kure server.

Kusimbisa nekiyi. Kuwedzera mwero wekuchengeteka

Kana mutengi ari kuyedza kumisikidza kubatana kwakachengeteka kune sevha kuburikidza neSSH, usati wabvumidza kubatana kunodiwa nevhavha kuratidza (simbisa) mutengi. Sezvambotaurwa, password-based authentication inowanzo shandiswa nekukasira. Izvo hazvipi kuchengetedzeka kwakasimba, nekuti panogara paine nzira yekuimanikidza. Kunze kwezvo, kuvimbiswa kwepassword hakushandi kune SSH kubatana nekushandiswa kwezvinyorwa.

Kune rudzi urwu rwemabasa kune yakakosha nzira yekusimbisa nekiyi. Iyo poindi ndeyekuti mutengi anogadzira zvakavanzika uye zveveruzhinji makiyi uye ipapo kiyi yeruzhinji inotumirwa kune server. Mushure meizvozvo haudi password kuti ubatanidze kune sevha, nekuti kuvimbiswa kunoitwa zvichibva paruzhinji uye zvakavanzika zvevatengi makiyi. Kupa yakanaka mwero wechengetedzo, kupinda kune yakavanzika kiyi kunofanirwa kuganhurirwa. Nekuda kwekuti kiyi yakavanzika inochengetwa parutivi rwemutengi uye haina kutamiswa kuburikidza netiweki, iyi nzira inofungidzirwa kuti yakachengeteka zvakanyanya.

Kusimbiswa nekiyi paLinux

Ngatigadzire makiyi eruzhinji uye akavanzika pamutengi nerubatsiro rwe ssh-keygen utility software. Chishandiso chinozopa zano kushandura nzira kuenda kune yakavanzika kiyi uye isa passphrase yekuwedzera chengetedzo. Siya ese ma parameter nekukasira nekudzvanya Enter pane zvese zvikumbiro.

Nekuda kweizvozvo, mudhairekitori repamba mufolda ye .ssh muchawana mafaira maviri akagadzirwa: id_rsa uye id_rsa.pub ane makiyi epachivande neeparuzhinji zvinoenderana.

Mushure meizvozvo, uchafanirwa kutumira kiyi yeruzhinji kuseva. Kuti uite izvozvo, kopira zviri mufaira re " id_rsa.pub " mufaira re " ~/.ssh/authorized_keys " riri paseva. Ngatiendei nenzira iri nyore nerubatsiro rwechishandiso che " ssh-copy-id ". Isa kero yekupinda neIP yeseva, sezvinoitwa nekubatanidza kwakajairika. Mushure mekuisa password, kiyi yeruzhinji yemutengi ichakopwa otomatiki kuseva. Mhanya murairo uyu:

ssh-copy-id [email protected]

Mushure mekuita zvese izvo, sevha haichazoda kuisa password zvakare.

Kusimbiswa nekiyi paWindows

Vhura PUTTYGEN wodzvanya " Gadzira ". Kuti ugadzire makiyi, unongoda kufambisa mbeva yako pamusoro pechidzitiro uye chishandiso chinozogadzira makiyi acho zvisina tsarukano.

Kana makiyi agadzirwa, tinya " Sevha kiyi yakavanzika " woichengeta mufaira nekiyi yakavanzika padhisiki yako. Unogona kuseta chero nzira yaunoda, asi gare gare uchafanira kuitsanangura muPutty. Wobva wakopa kiyi yeruzhinji kubva kumusoro kwehwindo.

Ngatitumirei kiyi yeruzhinji nekungoikopa kuterminal. Vhurai Putty mobatanidza neserver sezvatinogara tichiita. Iye zvino ngatigadzirei “ .ssh/authorized_keys ” uye todzivisa vamwe vashandisi kupinda mufaira, saka rinowanikwa chete kumugadziri.

mkdir .ssh
touch .ssh/authorized_keys
chmod 700 .ssh
chmod 600 .ssh/authorized_keys

Mushure mekugadzira iyo faira, isa kiyi yeruzhinji yemutengi mairi. Panhanho yapfuura takakopa kiyi yeruzhinji kune clipboard. Kurekodha zviri muclipboard kune faira shandisa katsi command uye inobuda redirection.

cat > .ssh/authorized_keys

Kana wangoisa murairo, tinya bhatani rekurudyi regonzo muhwindo reterminal wobva wanama zviri mu clipboard. Kuti usimbise kupinda kwacho, tinya nzira pfupi ye " Ctrl+D " wobva wabvisa server.

Zvino ngatitaurei nzira inoenda kune yakavanzika kiyi muPutty uye batanidza kune server zvakare.

Kubva zvino zvichienda mberi, kuti ubatanidze kune server iwe unongoda kuisa username. Kana iwe uri kuyedza kubatanidza kune sevha kubva kune chimwe chishandiso chisina kiyi yakavanzika chaiyo, sevha inokumbira password. Mushure mekiyi-yakavakirwa kuvimbiswa kwamiswa, unogona kuramba kupinda nepassword.