Maitiro ekubatanidza kune Linux server kuburikidza neSSH

Nzira yekutanga yekubatanidza kune Linux server ndeye kuburikidza SSH protocol. Iyi mhando yekubatanidza yakachengeteka, nekuti yese data inotamiswa kuburikidza nayo yakavharidzirwa. Kuti uzo to gadzira SSH yekubatanidza iwe unofanirwa kuigadzirisa pane iri kure server yaunoda kubatanidza nayo, uye mutengi kudivi remushandisi. Iko kune toni yesoftware yeSSH yekubatanidza. Kana iri Linux, OpenSSH package ndiyo inonyanya kufarirwa uye yeWindows vanhu vari kunyanya kushandisa PuTTY.

Ngatitarisei zvakanyanya kugadziridzwa kweseva uchishandisa Ubuntu Server 18.04 semuenzaniso, uye toedza kubatana neserver kubva kuLinux neWindows.

Zvese zvatinoita zvichabva kune akajairwa mushandisi account. Muchiitiko ichi, takagadzira mushandisi "mihail", Uye"mudzi”akaundi yakavharwa nekusingaperi.

Server side setup

Gadzirisa pasuru ine murairo uyu:

sudo apt install openssh-server

Mushure mekuiswa kwapera, ita shuwa kuti sevhisi iri kushanda. Shandisa murairo uyu:

systemctl status sshd

Status "Active (kumhanya)” zvinoreva kuti sevhisi yakagoneswa uye inoshanda seyakajairika.

Kuti udzivise kuvharira kwekupinda kwekubatanidza nefirewall, ita shuwa kuti unoidzima, nekuti hatisi kuzogadzirisa network firewall mune ino chinyorwa.

Shandisa murairo uyu:

sudo ufw disable

Panguva ino iwe unogona kutobatanidza kune server. Iine default zvigadziriso sevha inobvumira kubatana kune yakajairwa chiteshi 22 ine password-based authentication.

SSH yekubatanidza kubva kuLinux

Semutemo, mutengi weOpenSSH akaiswa paLinux nekukasira uye haidi mamwe manyorero ekugadzirisa. Kubatanidza kunogona kusimbiswa kubva kune terminal nerubatsiro rwe ssh command. Paramita mune iyi kesi ingave zita rekushandisa uye IP kero yeiri kure server. Pa test server yedu yatiri kushandisa semuenzaniso pane account imwe chete "mihail", saka tichashandisa izvi.

ssh [email protected]

Pakubatana kwekutanga iwe uchafanirwa kusimbisa kuwedzera kwesevha yeruzhinji kiyi kune database, saka pindura "ehe”. Mushure meizvozvo unogona kuisa password.Kana kubatana kukagadzirwa zvakanaka, uchaona tsamba inogamuchirwa yemirairo yeserver.Iye zvino mirairo yese ichaitwa pane irimoti server.

SSH kubva kuWindows

Vhura Putty uye isa ma paramita ekubatanidza. Ita shuwa kuti switch "Kubatanidza mhando” inoshandurwa kuti SSH. Isa iyo IP kero mu "Host Zita” munda, default value 22 kupinda "poti”Uye tinya kuti“Open".

Pakubatana kwekutanga Putty ichakukumbira kuti usimbise kuti unovimba neserver iyi, saka tinya "Ehe"

Mushure mekupinda mukati uye password, iwe uchaona mutsara wekuraira weiyo kure server.

Kusimbisa nekiyi. Kuwedzera mwero wekuchengeteka

Kana mutengi ari kuyedza kumisikidza kubatana kwakachengeteka kune sevha kuburikidza neSSH, usati wabvumidza kubatana kunodiwa nevhavha kuratidza (simbisa) mutengi. Sezvambotaurwa, password-based authentication inowanzo shandiswa nekukasira. Izvo hazvipi kuchengetedzeka kwakasimba, nekuti panogara paine nzira yekuimanikidza. Kunze kwezvo, kuvimbiswa kwepassword hakushandi kune SSH kubatana nekushandiswa kwezvinyorwa.

Kune rudzi urwu rwemabasa kune yakakosha nzira yekusimbisa nekiyi. Iyo poindi ndeyekuti mutengi anogadzira zvakavanzika uye zveveruzhinji makiyi uye ipapo kiyi yeruzhinji inotumirwa kune server. Mushure meizvozvo haudi password kuti ubatanidze kune sevha, nekuti kuvimbiswa kunoitwa zvichibva paruzhinji uye zvakavanzika zvevatengi makiyi. Kupa yakanaka mwero wechengetedzo, kupinda kune yakavanzika kiyi kunofanirwa kuganhurirwa. Nekuda kwekuti kiyi yakavanzika inochengetwa parutivi rwemutengi uye haina kutamiswa kuburikidza netiweki, iyi nzira inofungidzirwa kuti yakachengeteka zvakanyanya.

Kusimbiswa nekiyi paLinux

Ngatigadzire makiyi eruzhinji uye akavanzika pamutengi nerubatsiro rwe ssh-keygen utility software. Chishandiso chinozopa zano kushandura nzira kuenda kune yakavanzika kiyi uye isa passphrase yekuwedzera chengetedzo. Siya ese ma parameter nekukasira nekudzvanya Enter pane zvese zvikumbiro.

Nekuda kweizvozvo, mudhairekitori repamba mu .ssh folda unowana maviri mafaera akagadzirwa: id_rsa uye id_rsa.pub zvine makiyi epachivande neeruzhinji zvinoenderana.

Mushure meizvozvo, iwe unozofanirwa kutumira iyo yeruzhinji kiyi kune server. Kuti uite izvozvo, tevedzera zviri mu "id_rsa.pub"faira mu"~/.ssh/authorized_keys” faira paserver.Handei nzira iri nyore tichibatsirwa ne“ssh-kopi-id” chishandiso. Isa login uye IP kero yeserver, sezvakangoita kana uine yakajairika. Kana waisa password, kiyi yeruzhinji yemutengi inokopwa yega kuseva. Mhanya uyu murairo:

ssh-copy-id [email protected]

Mushure mekuita zvese izvo, sevha haichazoda kuisa password zvakare.

Kusimbiswa nekiyi paWindows

Open PUTTYGEN uye chengeta "tanga”. Kuti ugadzire makiyi, unongoda kufambisa mbeva yako pamusoro pescreen uye chishandiso chinozogadzira makiyi zvisina tsarukano.

Kana makiyi agadzirwa, tinya "Sevha kiyi yakavanzika” woichengeta kufaira rine kiyi yepachivande padisiki rako.Unogona kuseta chero nzira yaunoda, asi pave paya unozoda kuitsanangura muPutty.Wobva wakopa kiyi yeruzhinji kubva kumusoro kwehwindo.

Ngatitumirei kiyi yeruzhinji nekungoikopa kune terminal. Vhura Putty uye batanidza kune server semazuva ese. Zvino ngatigadzirirei".ssh/authorized_keys” uye kurambidza vamwe vashandisi kuwana faira, saka rinongowanikwa kumugadziri.

mkdir .ssh
touch .ssh/authorized_keys
chmod 700 .ssh
chmod 600 .ssh/authorized_keys

Mushure mekugadzira iyo faira, isa kiyi yeruzhinji yemutengi mairi. Panhanho yapfuura takakopa kiyi yeruzhinji kune clipboard. Kurekodha zviri muclipboard kune faira shandisa katsi command uye inobuda redirection.

cat > .ssh/authorized_keys

Mushure mekuisa murairo, tinya bhatani rekurudyi muhwindo rekupedzisira uye unamate zviri mu clipboard. Kuti usimbise kuisirwa, tinya "Ctrl + D” nzira yekudimbudzira uye bvisa kubva kuseva.

Zvino ngatitaurei nzira inoenda kune yakavanzika kiyi muPutty uye batanidza kune server zvakare.

Kubva zvino zvichienda mberi, kuti ubatanidze kune server iwe unongoda kuisa username. Kana iwe uri kuyedza kubatanidza kune sevha kubva kune chimwe chishandiso chisina kiyi yakavanzika chaiyo, sevha inokumbira password. Mushure mekiyi-yakavakirwa kuvimbiswa kwamiswa, unogona kuramba kupinda nepassword.