Gadzira SSH yekuwana password

SSH, kana Yakachengeteka Shell, igobvu rakachengeteka iro rinoshandiswa iyo kure kuwana kubva kumarudzi ese emidziyo kuenda kumaseva, kuburikidza netannel tunnel uye inodzivirirwa nekunyorera, iyo inoipa chengetedzo iyo inodzivirira, kana kuti zvirinani zvinyanye kuomesa zvakanyanya, kuti mapato echitatu anogona kutora zita rekushandisa kana password. Muchiitiko che * Nix, isu tine iyi protocol inowanikwa kuburikidza neOpenSSH, seti yevatengi-server mhinduro dzinowanikwa mune ese Linux kugovera uye mapuratifomu ane hukama senge * BSD.

Zvino, kana SSH ikatipa yakanakisa nhanho yekuchengeteka, nei isu tichizoda kuishandisa pasina chikonzero chekuisa password? Panogona kuve nezvikonzero zvakati wandei, asi chimwe chinowanzoonekera sejenareta ndiko kudiwa kuti upinde uri kure kuburikidza nemanyorerwo nekuita superuser mabasa, uye ndezvekuti sekuziva kwedu hazvikurudzirwe kuisa iyo data mune chero script. Kugadzirisa dambudziko iri isu tichaona maitiro ekugadzira maSSH kiyi ekugona kupinda mukati uri kure pasina kudikanwa kwepassword.

Izvi zvinoda isu gadzira kiyi yeruzhinji nekiyi yakavanzika: yekutanga inozochengeterwa kuseva kwatinenge tichienda uye sezita rayo zvarinoratidza tinokwanisa kutumira kana kugovana, uye rechipiri richachengetwa pachishandiswa (komputa, smartphone, piritsi) kubva kwatiri kuenda access yakati server, uye inofanirwa kunge iri yakachengetwa zvakanyatsonaka uye chete inoshandiswa nesu kana nevanhu vatinovimba.

Nekuda kwezvakataurwa mundima yapfuura, zvakakosha kuti utaure kuti iyi mhando yemhinduro inoda basa rakakura kwazvo mukutarisira zvishandiso zvatichazopinda server, uye ndizvozvo kuti chero munhu anokwanisa kuwana ivo vanozokwanisa kuipinza pasina chikonzero chekuziva password, inova njodzi huru kwazvo yekuchengetedza. Mushure mekujekesa izvi, ngatione kuti tingatanga sei, uye kune izvi chinhu chekutanga kuita kuti daemon yeSSH iiswe pane server:

# apt-tora kuisa kuvhura-server

Zvino isu tinofanirwa kugadzira iyo .ssh dhairekitori mudhairekitori remushandisi:

# mkdir -p $ HOME / .ssh

# chmod 0700 $ HOME / .ssh

# bata $ HOME / .ssh / mvumo_keys

Isu tinogadzirisa iyo faira / etc / ssh / sshd_config uye isu tinoona kuti inotevera mitsara iri sezvazviri:

Kusimbiswa kwePubkey hongu

AuthorizedKeysFile% h / .ssh /uthorized_keys

Iye zvino tinoenda kumutengi uye toteedzera:

ssh-keygen -t rsa

Tichaudzwa kuti kiyi iri kugadzirwa, uye isu tichazokumbirwa kuisa iyo faira iyo iyo inochengetwa (nekumisikidza ichave iri mumba medu, mune dhairekita inonzi /.ssh/id_rsa). Tinogona kudzvanya Enter sezvo nzvimbo iyoyo inotishandira zvakakwana, uye tobva tadzvanya pinda zvakare nguva mbiri dzatinokumbirwa pinda chirevo sezvo, rangarira, tiri kuzopinda kure tisina kuisa chero dhata saka hatidi chero mutsara.

Zvino zvatava nekiyi yeruzhinji, isu tinofanirwa kuigovana neaya makomputa atinozobatanidza. Kufunga kuti sevha yatiri kutaura nezvayo ine kero 192.168.1.100, izvo zvaunofanirwa kuita ndezvi:

ssh-kopi-id -i $ HOME / .ssh / id_rsa.pub (email yakatumirwa) 192.168.1.100

Mushure mekuteedzera, tinokokwa ku ita kure kure login kuyedza makiyi, uye inofanirwa kutariswa kuti mune iyi kesi mudzi Ndiyo account yatinozowana sevha nayo, saka kana tichizoda kuzviita nemumwe mushandisi isu tinofanirwa kushandura midzi yeakaundi account yatinozoita nayo kuwana kuburikidza neSSH.

Iye zvino isu tinongofanirwa kutangazve iyo SSH server kuti itore iyo nyowani yekumisikidza:

# /etc/init.d/ssh kutanga

Kubva ikozvino zvichienda mberi, kana tichida kuwana yechipiri server uye tichidaro tisina kuisa password, isu tinongofanirwa kuitumira iyo yeruzhinji kiyi, yatinongodzokorora nhanho yekupedzisira, tichichinja mushandisi uye IP kero pazvinenge zvichidikanwa:

ssh-kopi-id -i $ HOME / .ssh / id_rsa.pub admin@192.168.1.228