Yadda zaka saita ingantattun matakai biyu a cikin SSH ta amfani da Google Authenticator

google authenticator

Amfani da Tantancewar mataki biyu yana ƙaruwa yayin da lokaci ya wuce, kuma shine seguridad a fili ya zama wani lamari mai matukar mahimmanci a cikin kwamfutocin mu tunda yawan bayanan da muke ajiyewa akansu yana karuwa wata-wata, wanda hakan yayi daidai da lokacin da muke kashewa a dukkan na'urorinmu. Kuma kodayake mutane da yawa suna tunanin cewa kyakkyawar kalmar sirri ce ke tseratar da su daga matsala, wannan rabin gaskiya ne, tunda a fuskar shigarwar da masu fashin kwamfuta ke yawan yi a wurare da yawa, kaɗan kuma ba za a iya yin komai ba idan an sami maɓallin shigar da mu.

Bari mu gani to, yadda za a kara takaddun kafa biyu a cikin SSH, wani abu da zai ba mu damar bayar da amintaccen damar isa ga sabobinmu, duka gare mu da waɗanda suke samun damar asusun su, don tabbatar da daidaitaccen matakin tsaro. Ga wadanda ba su da wannan hanyar sosai, a ce sun kunshi yi amfani da kalmar sirri sannan lambar da aka aiko ta wata hanyar daban (misali, zuwa wayarmu ta hannu) don haka daga baya zamu shigar dashi kuma a ƙarshe zamu iya samun damar asusunmu.

Hanya mai sauƙi mai sauƙi don ƙara takaddun kafa biyu shine ta hanyar Google Athenticator, kayan aikin da kamfanin Mountain View ya ƙaddamar da waɗannan dalilai kuma hakan ya dogara ne da ƙididdigar buɗewa kamar HMAP kuma ana samunsa a kan dandamali daban-daban, Linux tsakanin su. Amma kuma, tunda akwai matakan PAM na wannan kayan aikin, zamu iya haɗa shi cikin wasu hanyoyin magance tsaro irin su OpenSSH, don haka wannan shine ainihin abin da za mu gani na gaba.

Ba lallai ba ne a faɗi, za mu buƙaci kwamfuta tare da Linux da OpenSSH an riga an shigar da su, wani abu da muke yi a Ubuntu kamar haka:

sudo dace-samu kafa Openssh-sabar

Bayan haka, don mafita ta wayar hannu zamu dogara ne akan Android don haka tabbas muna buƙatar kwamfutar hannu ko wayo tare da tsarin aiki na Google, wanda zamu shigar da kayan aikin Google kamar yadda zamu gani anan gaba. Yanzu, muna shirye don fara aikin.

Da farko dai, dole ne mu girka Google Authenticator, wani abu wanda a yanayin Ubuntu ya kasance mai sauƙi kamar gudanar da mai zuwa a cikin na'ura mai kwakwalwa:

sudo apt-samun shigar libpam-google-ingantacce

Idan an nuna mana kuskure inda aka mana gargaɗi game da ɓataccen fayil tsaro / pam_appl.h, zamu iya warware ta ta hanyar shigar da kunshin libpam0g-dev:

sudo apt-samun shigar libpam0g-dev

Yanzu muna da Authenticator na Google yana aiki, zamu iya samar da maɓallin tabbatarwa ta hanyar aiwatarwa:

google-authenticator

Bayan yin haka zamu ga a QR code kuma mabuɗin tsaro a ƙasa da shi (kusa da rubutun 'Sabon mabuɗin sirrinku shine: xxxx', da kuma maɓallin tabbatarwa da lambobin gaggawa, waɗanda zasu taimaka mana idan ba mu da Na'urar Android. Muna amsa tambayoyin da aka tambaya game da daidaitawar sabar, kuma idan ba mu da tabbaci sosai za mu iya amsa eh ga dukkan su tunda daidaitaccen yanayin yana da aminci.

Yanzu ya zo lokaci kafa Google Authenticator akan Android, wanda muke zazzage aikin daga Play Store. Lokacin aiwatar da shi, mun ga cewa an ba mu izinin zaɓi tsakanin shigar da lambar ko shigar da maɓalli, wanda zamu iya amfani da lambar QR ɗin da muke gani yayin daidaita wannan kayan aikin akan sabar, ko shigar da maɓallin harafin. Don na ƙarshe mun zaɓi zaɓi 'amincin ssh' sannan zamu rubuta lambar.

Sannan zamu ga allon tabbatarwa, inda aka bayyana mana cewa aikin yayi nasara kuma daga wannan lokacin zamu iya samun lambobin shiga a cikin wannan aikace-aikacen, don haka yanzu zamu ga mataki na ƙarshe, wanda shine kunna Authenticator Google akan sabar SSH. Muna aiwatarwa:

sudo gedit /etc/pam.d/sshd

kuma mun ƙara layi mai zuwa:

auth da ake bukata pam_google_authenticator.so

Yanzu:

sudo gedit / sauransu / ssh / sshd_config

Muna neman zaɓi KalubaleRewayawaTarewa kuma mun canza darajarta zuwa 'eh'.

A ƙarshe zamu sake farawa da sabar SSH:

sudo service ssh sake farawa

A shirye muke, kuma daga yanzu zamu iya shiga zuwa sabar SSH tare da ingantattun matakai guda biyu, wanda muke aiwatar da aikin da aka saba amma zamu ga cewa kafin shigar da kalmar sirrinmu ana tambayarmu lambar tabbatarwa; Bayan haka muna gudanar da aikace-aikacen a kan Android kuma idan muka ga lambar tsaro sai mu shigar da ita a cikin kwamfutar (muna da sakan 30 don wannan, bayan haka ana samar da sabon maɓalli ta atomatik) sannan ana tambayar mu mu shiga mabuɗin SSH ɗinmu duka rayuwa.


Kasance na farko don yin sharhi

Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.