Yadda zaka saita SSH Shiga ciki mara izinin shiga cikin Debian 10
SSH (Secure Shell) sanannen kayan aiki ne wanda aka yi amfani dashi don shiga nesa da kuma canja wurin fayil akan hanyoyin sadarwa marasa tsaro, wanda ke amfani da ɓoye don tabbatar da haɗin tsakanin abokin ciniki da sabar.
Ganin cewa yana yiwuwa a yi amfani da SSH tare da ID na mai amfani da kalmar sirri azaman takardun shaidarka, ya fi kyau kuma an ba da shawarar yin amfani da tushen tushe na asali (ko tabbatar maɓallin jama'a) don tabbatar da runduna ga juna kuma wannan ana kiranta da kalmar sirri ta SSH shiga.
- Sanya Debian 10 (Buster) Mafi qarancin Server
Don fahimtar wannan a sauƙaƙe, zan yi amfani da sabobin biyu:
- 192.168.56.100 - (tecmint) - Sabis na CentOS 7 wanda zan haɗu da Debian 10.
- 192.168.56.108 - (tecmint) - My Debian 10 tsarin tare da m-kasa kalmar shiga.
A cikin wannan labarin, za mu nuna muku yadda ake girka OpenSSH uwar garken saitin SSH-kasa shiga cikin Debian 10 Linux rarraba.
Shigar da OpenSSH Server akan Debian 10
Kafin ka iya saita kalmar shiga-rashin shiga ta SSH akan tsarin Debian 10, kana buƙatar girka da saita fakitin uwar garken OpenSSH akan tsarin ta amfani da dokokin da ke tafe.
$ sudo apt-get update $ sudo apt-get install openssh-server
Na gaba, fara sabis na sshd a yanzu, sannan a bincika idan ya tashi kuma yana aiki ta amfani da tsarin systemctl kamar haka.
$ sudo systemctl start sshd $ sudo systemctl status sshd
Sannan kunna sabis na sshd don farawa ta atomatik a tsarin boot, duk lokacin da tsarin ya sake zama kamar haka.
$ sudo systemctl start sshd
Tabbatar da sshd service, wanda ta hanyar tsoho yana sauraran tashar jiragen ruwa 22 ta amfani da umarnin ss kamar yadda aka nuna. Idan kana so zaka iya canza tashar SSH kamar yadda aka nuna: Yadda zaka Canza tashar SSH a cikin Linux.
$ sudo ss -tlpn
Kafa Maballin SSH akan CentOS 7 (192.168.56.100)
Da farko, kuna buƙatar ƙirƙirar maɓallan maɓallin SSH (maɓallin jama'a da maɓallin keɓaɓɓu) akan tsarin CentOS 7 daga inda zaku haɗa zuwa sabar Debian 10 ta amfani da ssh-keygen mai amfani kamar haka.
$ ssh-keygen
Sannan shigar da suna mai ma'ana ga fayil din ko barin wanda yake na asali (wannan ya zama cikakkiyar hanya kamar yadda aka nuna a cikin sikirin, in ba haka ba za a ƙirƙiri fayiloli a cikin kundin adireshi na yanzu). Lokacin da aka nemi wata kalmar wucewa, kawai latsa\"shiga" ka bar kalmar a fanko. Galibi ana adana fayilolin maɓallan a cikin adireshin ~/.ssh ta tsohuwa
Kwafar Maballin Jama'a zuwa Debian 10 Server (192.168.56.108)
Bayan ƙirƙirar maɓallan maɓalli, kuna buƙatar kwafin mabuɗin jama'a zuwa sabar Debian 10. Kuna iya amfani da ssh-copy-id mai amfani kamar yadda aka nuna (za a tambaye ku kalmar sirri don takamaiman mai amfani akan sabar).
$ ssh-copy-id -i ~/.ssh/debian10 [email
Umurnin da ke sama ya shiga cikin sabar Debian 10, kuma ya kwafe maɓallan zuwa sabar, kuma ya daidaita su don ba da dama ta ƙara su zuwa fayil ɗin izini.
Gwajin shiga ta kalmar sirri ta SSH daga 192.168.20.100
Yanzu da yake an kwafe mabuɗin zuwa uwar garken Debian 10, kuna buƙatar gwada idan shigarwar kalmar sirri ta SSH ba ta aiki ta hanyar aiwatar da umarnin SSH mai zuwa. Ya kamata shiga yanzu ya zama ba tare da neman kalmar sirri ba, amma idan kun ƙirƙiri wata kalma, kuna buƙatar shigar da ita kafin a ba da damar shiga.
$ ssh -i ~/.ssh/debian10 [email
A cikin wannan jagorar, mun nuna muku yadda ake girka sabar OpenSSH tare da kalmar shiga ta SSH-kasa Shiga ciki ko kuma tabbatar da maɓallin kewayawa (ko tabbatar da maɓallin jama'a) a cikin Debian 10. Idan kuna son yin kowace tambaya da ta shafi wannan batun ko raba kowane ra'ayi, yi amfani da fom din da ke kasa.