Tambayoyi da Amsoshi 10 Masu Amfani SSH (Secure Shell) Tambayoyi da Amsoshi


SSH yana nufin Secure Shell ƙa'idar ce ta hanyar sadarwa, ana amfani da ita don samun damar na'ura mai nisa don aiwatar da ayyukan cibiyar sadarwar umarni da sauran umarni akan hanyar sadarwa. An san SSH don babban tsaro, halayen sirri kuma mafi yawan masu amfani da Network Admins suna amfani da shi don sarrafa sabar gidan yanar gizo mai nisa da farko.

Anan a cikin wannan labarin jerin Tambayoyin Tambayoyi, muna gabatar da wasu tambayoyi 10 SSH (Secure Shell) masu amfani da Amsoshi.

Za mu iya duba lambar tashar jiragen ruwa na SSH ta hanyar gudanar da rubutun layi ɗaya na ƙasa, kai tsaye a kan tasha.

# grep Port /etc/ssh/sshd_config		[On Red Hat based systems]

# grep Port /etc/ssh/ssh_config		        [On Debian based systems]

Don canza tashar jiragen ruwa na SSH, muna buƙatar canza fayil ɗin sanyi na SSH wanda yake a ''/etc/ssh/sshd_config'ko'/etc/ssh/ssh_config'.

# nano /etc/ssh/sshd_config	[On Red Hat based systems]

# nano /etc/ssh/ssh_config		[On Debian based systems]

Nemo Layin.

Port 22

Kuma maye gurbin '22' da kowane lambar tashar jiragen ruwa da Majalisar Dinkin Duniya ke aiki da ita ce '1080'. Ajiye fayil ɗin kuma sake kunna sabis na SSH don ɗaukar canje-canjen suyi tasiri.

# service sshd restart					[On Red Hat based systems]

# service ssh restart					[On Debian based systems]

Don kashe tushen shigar SSH, buɗe fayil ɗin sanyi wanda yake a '/etc/ssh/sshd_config'ko'/etc/ssh/ssh_config'.

# nano /etc/ssh/sshd_config			[On Red Hat based systems]

# nano Port /etc/ssh/ssh_config			[On Debian based systems]

Canja siga 'PermitRootLogin'zuwa'a'a'kuma sake kunna sabis na SSH kamar yadda aka nuna a sama.

Ƙirƙiri ssh-keygen ta amfani da umarnin da ke ƙasa.

$ ssh-keygen

Kwafi maɓallan jama'a zuwa mai watsa shiri mai nisa ta amfani da umarnin da ke ƙasa.

$ ssh-copy-id -i /home/USER/.ssh/id_rsa.pub REMOTE-SERVER

Lura: Sauya USER da sunan mai amfani da REMOTE-SERVER ta adireshin uwar garken nesa.

Lokaci na gaba da muka yi ƙoƙarin shiga uwar garken SSH, zai ba da damar shiga ba tare da tambayar kalmar sirri ba, ta amfani da maɓalli. Don ƙarin cikakkun bayanai, karanta yadda ake shiga uwar garken SSH mai nisa ba tare da kalmar sirri ba.

Anan kuma muna buƙatar gyara fayil ɗin sanyi na sabis na SSH. Bude fayil ɗin sanyi kuma ƙara masu amfani da ƙungiyoyi a ƙasa kamar yadda aka nuna a ƙasa sannan, sake kunna sabis ɗin.

AllowUsers Tecmint Tecmint1 Tecmint2
AllowGroups group_1 group_2 group_3
# nano /etc/issue

Kuma ƙara saƙon ku na al'ada a cikin wannan fayil ɗin. Duba, a ƙasa hoton allo wanda ke nuna saƙon al'ada da zaran mai amfani ya shiga uwar garken.

Bugu da ƙari, muna buƙatar buɗe fayil ɗin sanyi na SSH kuma ƙara/gyara layin kamar yadda aka nuna a ƙasa.

# protocol 2,1

to

Protocol 2

Ajiye fayil ɗin sanyi kuma sake kunna sabis ɗin.

# cat /var/log/secure | grep “Failed password for”

Lura: Ana iya canza umarnin grep ta kowace hanya don samar da sakamako iri ɗaya.

Ana siffanta umarnin SCP mai ban mamaki a ƙasa:

$ scp text_file_to_be_copied [email _Host_server:/Path/To/Remote/Directory

Don ƙarin misalai masu amfani kan yadda ake kwafin fayiloli/ manyan fayiloli ta amfani da umarnin scp, karanta Dokokin SCP guda 10 don Kwafi Fayiloli/Jaka a cikin Linux.

# ssh [email  < local_file.txt

SSH batu ne mai zafi sosai daga wurin hira, na kowane lokaci. Tambayoyin da ke sama da tabbas sun kara maka iliminka.

Shi ke nan a yanzu. Zan kasance a nan tare da wani labarin mai ban sha'awa. Har sai Kayi Sauraro kuma ka haɗa zuwa Tecment. Kar ku manta da samar mana da ra'ayoyinku masu mahimmanci a cikin sashin sharhinmu.