Yuav nruab nrab thiab configure SSH server rau Debian Linux?

Muab lo rau los ntawm

Installing thiab kuaj cov SSH Server

Koj yuav tsum tau root ua raws li cov nram qab no…

su

  1. Install SSH Server

    apt install openssh-server
     

  2. Ntsuam xyuas seb tus txheej txheem puas muaj tshwm sim. Qhov no qhia tus ntsia mus zoo.

    ps -A | grep sshd

    zis (zoo ib yam li): 1753 ? 00:00:00 sshd

     

  3. Install SSH Client mus xyuas cov SSH Server sib txuas

    apt install openssh-client

    Txuas nrog localhost mus kuaj qhov zoo sib xws

    ssh localhost

    Kuj login nrog lub interface IP chaw nyob

    Tau IP Chaw Nyob

    ip addr

    SSH rau qhov chaw nyob ip chaw nyob

    ssh {ipaddress here}
     

Ruaj ntseg lub SSH Server

Nws yog ib lub tswv yim zoo los ruaj ntseg lub SSH server los disallowing root rau login thiab configuring login xwb los ntawm pej xeem tseem ceeb i.e.. login siv passwords tsis pub

Xyuas kom tiav cov commands raws li koj cov neeg siv thiab tsis ua hauv paus hniav

  1. Navigate rau tus neeg siv tsev directory

    cd
     

  2. Xyuas seb puas muaj cov teeb uas twb muaj lawm

    ls -a
     

  3. Yog hais tias .ssh tsis nyob ua ib ke, tsim nws

    mkdir .ssh
     

  4. Muab tus folder tso cai rau 700

    chmod 700 .ssh
     

  5. Tsim lub authorized_keys ntaub ntawv

    touch ./.ssh/authorized_keys
     

  6. Hloov kev tso cai rau lub authorized_keys ua ntawv thov 600

    chmod 600 ./.ssh/authorized_keys
     

  7. Qhib authorized_keys

    nano ./.ssh/authorized_keys
     

  8. Paste koj cov pej xeem tseem ceeb rau hauv daim ntawv

    Koj yuav tau txais koj cov pej xeem tseem ceeb los ntawm SSH tus neeg tau txais kev pab. If the client is Windows 10 Ces nws yuav nyob rau hauv cov %USERPROFILE%/.ssh/id_rsa.pub Thov. If the client is Debian then the public key is ~/.ssh/id_rsa.pub.

    Yog koj cov pej xeem tseem ceeb tsis nyob ua ib ke, Ua kom nws muaj rau cov neeg tau tshuab

    ssh-keygen -t rsa -C "email@domain.com"
     

  9. Hloov cov hauv paus hniav

    su

  10. Configure koj SSH pab txais xwb pej xeem logins thiab tiv thaiv login rau hauv paus hniav

    nano /etc/ssh/sshd_config

    Uncomment thiab/los yog edit cov kab hauv qab no

    PermitRootLogin no
    StrictModes yes
    PubkeyAuthentication yes
    AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2
    PasswordAuthentication no
     

  11. Restart cov kev pab sshd

    service sshd restart
     

  12. Sim logging hauv lub hauv paus ntawm koj tus SSH neeg siv password

    ssh root@{ssh server ip address}

    zis: Permission denied (publickey).

     

  13. Sim logging li username ntawm koj tus neeg tau siv password

    ssh username@{ssh server ip address}

    zis: Permission denied (publickey).

     

  14. Sim logging hauv lub hauv paus ntawm koj SSH neeg siv pej xeem tseem ceeb

    ssh root@{ssh server ip address} -i .ssh/id_rsa

    zis: Permission denied (publickey).

     

  15. Log nyob rau hauv cov neeg siv los ntawm koj tus neeg tau txais kev pab SSH siv pej xeem tseem ceeb

    ssh username@{ssh server ip address} -i .ssh/id_rsa
     

Yog hais tias koj tus neeg tau txais kev pab SSH muaj ib qhov chaw nyob IP ces koj yuav xav txog koj qhov chaw nyob IP chaw nyob yuav login rau lub SSH pab.