{"id":140537,"date":"2022-06-22T00:49:54","date_gmt":"2022-06-21T16:49:54","guid":{"rendered":"http:\/\/www.idc.net\/help\/140537\/"},"modified":"2022-06-22T00:49:54","modified_gmt":"2022-06-21T16:49:54","slug":"linux-ssh%e4%bf%ae%e6%94%b9%e5%af%86%e7%a0%81%e8%af%a6%e8%a7%a3-linux-ssh-%e6%9b%b4%e6%94%b9%e5%af%86%e7%a0%81","status":"publish","type":"post","link":"https:\/\/idc.net\/help\/140537\/","title":{"rendered":"Linux SSH\u4fee\u6539\u5bc6\u7801\u8be6\u89e3 (linux ssh \u66f4\u6539\u5bc6\u7801)"},"content":{"rendered":"<p>SSH\u662fSecure Shell\u7684\u7f29\u5199\uff0c\u662f\u4e00\u79cd\u52a0\u5bc6\u65b9\u5f0f\u3002\u5b83\u63d0\u4f9b\u4e86\u8fdc\u7a0b\u767b\u5f55\u548c\u7ba1\u7406Linux\u670d\u52a1\u5668\u7684\u5b89\u5168\u901a\u9053\u3002\u5f53\u6211\u4eec\u4f7f\u7528SSH\u5411\u8fdc\u7a0b\u670d\u52a1\u5668\u767b\u5f55\u65f6\uff0c\u9700\u8981\u8f93\u5165\u7528\u6237\u540d\u548c\u5bc6\u7801\u3002\u4f46\u662f\uff0c\u6709\u65f6\u5019\u6211\u4eec\u7684\u7528\u6237\u540d\u548c\u5bc6\u7801\u53ef\u80fd\u4f1a\u88ab\u6cc4\u9732\u6216\u8005\u5fd8\u8bb0\uff0c\u8fd9\u65f6\u5019\u6211\u4eec\u5c31\u9700\u8981\u4fee\u6539\u5bc6\u7801\u6765\u4fdd\u8bc1\u670d\u52a1\u5668\u7684\u5b89\u5168\u3002\u672c\u6587\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728Linux\u4e2d\u4fee\u6539SSH\u5bc6\u7801\u3002<\/p>\n<p>1. \u767b\u5f55\u8fdc\u7a0b\u670d\u52a1\u5668<\/p>\n<p>\u4e4b\u4e00\u6b65\uff0c\u6211\u4eec\u9700\u8981\u767b\u5f55\u6211\u4eec\u7684\u8fdc\u7a0b\u670d\u52a1\u5668\u3002\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528PUTTY\u6216\u5176\u4ed6SSH\u5ba2\u6237\u7aef\u8fdb\u884c\u767b\u5f55\u3002\u4ee5PUTTY\u4e3a\u4f8b\uff0c\u6211\u4eec\u6253\u5f00PUTTY\uff0c\u8f93\u5165\u8fdc\u7a0b\u670d\u52a1\u5668\u7684IP\u5730\u5740\u548c\u7aef\u53e3\u53f7\uff0c\u70b9\u51fbOpen\u3002<\/p>\n<p>\u5728\u6253\u5f00PUTTY\u4e4b\u540e\uff0c\u6211\u4eec\u9700\u8981\u8f93\u5165\u7528\u6237\u7684\u540d\u79f0\u548c\u5bc6\u7801\u8fdb\u884c\u767b\u5f55\uff0c\u5982\u679c\u6211\u4eec\u5df2\u7ecf\u767b\u5f55\uff0c\u6211\u4eec\u5c31\u53ef\u4ee5\u76f4\u63a5\u8f93\u5165\u547d\u4ee4\u6765\u64cd\u4f5c\u670d\u52a1\u5668\u3002<\/p>\n<p>2. \u4fee\u6539\u5bc6\u7801<\/p>\n<p>\u5728\u6211\u4eec\u6210\u529f\u767b\u5f55\u670d\u52a1\u5668\u4e4b\u540e\uff0c\u9700\u8981\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u6765\u4fee\u6539\u5bc6\u7801\uff1a<\/p>\n<p>\u201cpasswd\u201d\u547d\u4ee4\u3002\u8f93\u5165\u201cpasswd\u201d\u547d\u4ee4\u540e\uff0c\u6211\u4eec\u4f1a\u88ab\u63d0\u793a\u8f93\u5165\u5f53\u524d\u5bc6\u7801\u3002\u8f93\u5165\u5f53\u524d\u5bc6\u7801\u540e\uff0c\u6211\u4eec\u9700\u8981\u8f93\u5165\u65b0\u5bc6\u7801\u4e24\u6b21\u3002\u8fd9\u4e00\u8fc7\u7a0b\u4e2d\uff0c\u5bc6\u7801\u8f93\u5165\u662f\u4e0d\u4f1a\u663e\u793a\u7684\uff0c\u8fd9\u662f\u4e3a\u4e86\u9632\u6b62\u5bc6\u7801\u88ab\u4ed6\u4eba\u7aa5\u63a2\u3002<\/p>\n<p>\u4f8b\u5982\uff1a<\/p>\n<p>$ passwd<\/p>\n<p>Changing password for user xxx.<\/p>\n<p>(old password): <\/p>\n<p>Enter new UNIX password: <\/p>\n<p>Retype new UNIX password: <\/p>\n<p>passwd: password updated successfully<\/p>\n<p>3. \u9632\u6b62SSH\u66b4\u529b\u7834\u89e3<\/p>\n<p>\u4fee\u6539\u5bc6\u7801\u4e4b\u540e\uff0c\u6211\u4eec\u9700\u8981\u52a0\u5f3a\u6211\u4eec\u7684\u670d\u52a1\u5668\u5b89\u5168\u3002\u5176\u4e2d\uff0c\u9632\u6b62SSH\u66b4\u529b\u7834\u89e3\u662f\u6700\u91cd\u8981\u7684\u63aa\u65bd\u3002SSH\u66b4\u529b\u7834\u89e3\u6307\u7684\u662f\u653b\u51fb\u8005\u901a\u8fc7\u5927\u91cf\u731c\u6d4b\u7528\u6237\u540d\u548c\u5bc6\u7801\u7684\u65b9\u5f0f\u5f3a\u884c\u8fdb\u5165\u6211\u4eec\u7684\u670d\u52a1\u5668\u3002\u4e3a\u4e86\u9632\u6b62SSH\u66b4\u529b\u7834\u89e3\uff0c\u6211\u4eec\u53ef\u4ee5\u91c7\u53d6\u4ee5\u4e0b\u63aa\u65bd\uff1a<\/p>\n<p>3.1 \u7981\u6b62root\u7528\u6237\u767b\u5f55<\/p>\n<p>\u6211\u4eec\u53ef\u4ee5\u7981\u6b62root\u7528\u6237\u767b\u5f55\uff0c\u8fd9\u6837\u53ef\u4ee5\u9632\u6b62\u653b\u51fb\u8005\u4f7f\u7528root\u6743\u9650\u76f4\u63a5\u653b\u51fb\u6211\u4eec\u7684\u670d\u52a1\u5668\u3002\u6211\u4eec\u53ef\u4ee5\u7f16\u8f91ssh\u914d\u7f6e\u6587\u4ef6\u6765\u7981\u6b62root\u7528\u6237\u767b\u5f55\u3002\u5728\u7f16\u8f91\u4e4b\u524d\uff0c\u6211\u4eec\u9700\u8981\u4f7f\u7528\u4e0b\u8ff0\u547d\u4ee4\u521b\u5efassh\u5907\u4efd\u6587\u4ef6\uff1a<\/p>\n<p>$ sudo cp \/etc\/ssh\/sshd_config \/etc\/ssh\/sshd_config_backup<\/p>\n<p>\u7136\u540e\u4f7f\u7528\u4e0b\u8ff0\u547d\u4ee4\u6253\u5f00ssh\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n<p>$ sudo nano \/etc\/ssh\/sshd_config<\/p>\n<p>\u5728\u6587\u4ef6\u672b\u5c3e\u6dfb\u52a0\u4e0b\u9762\u4e00\u884c\uff1a<\/p>\n<p>PermitRootLogin no<\/p>\n<p>\u7136\u540e\u4fdd\u5b58\u5e76\u5173\u95ed\u7f16\u8f91\u5668\uff0c\u6700\u540e\u91cd\u542fssh\u670d\u52a1\uff1a<\/p>\n<p>$ sudo systemctl restart ssh<\/p>\n<p>3.2 \u4f7f\u7528\u5f3a\u5bc6\u7801<\/p>\n<p>\u6211\u4eec\u9700\u8981\u4f7f\u7528\u5f3a\u5bc6\u7801\u6765\u4fdd\u62a4\u6211\u4eec\u7684\u670d\u52a1\u5668\u3002\u4e0d\u8981\u4f7f\u7528\u5bb9\u6613\u88ab\u731c\u6d4b\u7684\u5bc6\u7801\uff0c\u5982\u751f\u65e5\u3001\u59d3\u540d\u7b49\u3002\u5bc6\u7801\u5e94\u8be5\u5305\u542b\u5927\u5c0f\u5199\u5b57\u6bcd\u3001\u6570\u5b57\u548c\u7279\u6b8a\u5b57\u7b26\u3002<\/p>\n<p>3.3 \u4f7f\u7528SSH\u5bc6\u94a5\u5bf9<\/p>\n<p>\u6211\u4eec\u8fd8\u53ef\u4ee5\u4f7f\u7528SSH\u5bc6\u94a5\u5bf9\u6765\u4fdd\u8bc1\u670d\u52a1\u5668\u7684\u5b89\u5168\u6027\u3002SSH\u5bc6\u94a5\u5bf9\u662f\u4e00\u79cd\u53cc\u91cd\u9a8c\u8bc1\u65b9\u5f0f\uff0c\u5ba2\u6237\u7aef\u9700\u8981\u63d0\u4f9b\u79c1\u94a5\u6765\u5b8c\u6210\u8eab\u4efd\u9a8c\u8bc1\uff0c\u540c\u65f6\u9700\u8981\u63d0\u4f9b\u516c\u94a5\u7ed9\u670d\u52a1\u5668\u3002\u5728\u4f7f\u7528SSH\u5bc6\u94a5\u5bf9\u524d\uff0c\u6211\u4eec\u9700\u8981\u4e3a\u8fdc\u7a0b\u670d\u52a1\u5668\u751f\u6210\u4e00\u5bf9\u516c\u94a5\u548c\u79c1\u94a5\u3002<\/p>\n<p>\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u6765\u751f\u6210SSH\u5bc6\u94a5\u5bf9\uff1a<\/p>\n<p>$ ssh-keygen -t rsa<\/p>\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5bc6\u94a5\u5bf9\u5c06\u751f\u6210\u5728\u7528\u6237\u5bb6\u76ee\u5f55\u7684\u9690\u85cf\u6587\u4ef6\u5939\u201c.ssh\u201d\u4e2d\u3002\u5728\u6211\u4eec\u5b89\u88c5ssh-keygen\u4e4b\u540e\uff0c\u6211\u4eec\u53ef\u4ee5\u5728\u57fa\u4e8eSSH\u7684\u7cfb\u7edf\u95f4\u4f7f\u7528\u5bc6\u94a5\u5bf9\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u3002\u5982\u679c\u60a8\u60f3\u4f7f\u7528Passphrase\u6765\u52a0\u5bc6SSH\u5bc6\u94a5\uff0c\u53ef\u4ee5\u5c06\u201c-t rsa\u201d\u66ff\u6362\u6210\u201c-t rsa -b 4096 -C \u201c\u60a8\u7684\u90ae\u7bb1\u5730\u5740\u201d\u201d\u3002<\/p>\n<p>4. <\/p>\n<p>\u4fee\u6539SSH\u5bc6\u7801\u7684\u8fc7\u7a0b\u975e\u5e38\u5bb9\u6613\u3002\u6211\u4eec\u53ea\u9700\u8981\u5728\u547d\u4ee4\u884c\u4e2d\u8f93\u5165\u201cpasswd\u201d\u547d\u4ee4\u5373\u53ef\u3002\u4e3a\u4e86\u52a0\u5f3a\u670d\u52a1\u5668\u5b89\u5168\u6027\uff0c\u6211\u4eec\u8fd8\u9700\u8981\u9632\u6b62SSH\u66b4\u529b\u7834\u89e3\u3002\u7981\u6b62root\u7528\u6237\u767b\u5f55\u3001\u4f7f\u7528\u5f3a\u5bc6\u7801\u3001\u4f7f\u7528SSH\u5bc6\u94a5\u5bf9\u90fd\u662f\u975e\u5e38\u6709\u6548\u7684\u65b9\u6cd5\u3002\u671f\u671b\u60a8\u80fd\u591f\u901a\u8fc7\u672c\u6587\u4e86\u89e3\u5230\u5982\u4f55\u5728Linux\u4e2d\u4fee\u6539SSH\u5bc6\u7801\uff0c\u5e76\u638c\u63e1\u4e00\u4e9b\u670d\u52a1\u5668\u5b89\u5168\u65b9\u9762\u7684\u6280\u5de7\u3002<\/p>\n<p><strong>\u76f8\u5173\u95ee\u9898\u62d3\u5c55\u9605\u8bfb\uff1a<\/strong><\/p>\n<ul>\n<li>\u3010Linux\u3011SSH \u4f7f\u7528\u5bc6\u7801\/\u516c\u94a5\u8fdc\u7a0b\u767b\u5f55\u603b\u7ed3<\/li>\n<li>Linux\u4e0b\u914d\u7f6eSSH\u670d\u52a1,\u4ee5\u7528\u6237\u540droot,\u5bc6\u7801123456\u80fd\u591f\u8fdc\u7a0b\u767b\u5f55\u5230\u4f60\u7684\u4e3b\u673a.<\/li>\n<\/ul>\n<h3>\u3010Linux\u3011SSH \u4f7f\u7528\u5bc6\u7801\/\u516c\u94a5\u8fdc\u7a0b\u767b\u5f55\u603b\u7ed3<\/h3>\n<p>\u672c\u6587\u662f\u7b14\u8005\u67e5\u9605\u7f51\u4e0a\u8d44\u6599\u505a\u7684\u603b\u7ed3\uff0c\u5173\u4e8eSSH\u539f\u7406\uff0c\u4ec0\u4e48\u662f\u5bf9\u79f0\u52a0\u5bc6\u548c<\/p>\n<p>\u975e\u5bf9\u79f0\u52a0\u5bc6<\/p>\n<p>\uff0c\u672c\u6587\u4e0d\u8fc7\u591a\u4ecb\u7ecd\u3002\u8fd9\u91cc\u4ecb\u7ecd\u4e00\u4e0bSHH\u7684\u5de5\u4f5c\u8fc7\u7a0b\u3001\u914d\u5236\u65b9\u6cd5\uff0c\u53ef\u80fd\u51fa\u73b0\u7684\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6cd5\u3002<\/p>\n<\/p>\n<p> \u8bf4\u660e\uff1a\u672c\u6587\u4e2d\u6d89\u53ca\u7684\u4f8b\u5b50\uff0cSSH\u5ba2\u6237\u7aef\u4e3a\uff1a<\/p>\n<p>\u672c\u5730\u4e3b\u673a<\/p>\n<p>A\uff0cSSH\u670d\u52a1\u5668\u4e3a\uff1a\u670d\u52a1\u5668B<\/p>\n<p> SSH\u534f\u8bae\u91c7\u7528C-S\uff08\u5ba2\u6237\u7aef-\u670d\u52a1\u5668\u7aef\uff09\u67b6\u6784\u8fdb\u884c\u53cc\u65b9\u7684\u8eab\u4efd\u9a8c\u8bc1\u4ee5\u53ca\u6570\u636e\u7684\u52a0\u5bc6\u3002<\/p>\n<p> \u670d\u52a1\u5668\u7aef\u7ec4\u4ef6\u76d1\u542c\u6307\u5b9a\u7684\u7aef\u53e3\uff0c\u8d1f\u8d23\u5b89\u5168\u8fde\u63a5\u7684\u5efa\u7acb\u3001\u5bf9\u8fde\u63a5\u65b9\u7684\u8eab\u4efd\u8ba4\u8bc1\u3001\u4ee5\u53ca\u4e3a\u901a\u8fc7\u8eab\u4efd\u8ba4\u8bc1\u7684\u7528\u6237\u5efa\u7acb\u6b63\u786e\u7684\u73af\u5883\u3002<\/p>\n<p> \u5ba2\u6237\u7aef\u8d1f\u8d23\u53d1\u8d77\u6700\u521d\u7684TCP\u63e1\u624b\u3001\u5b89\u5168\u8fde\u63a5\u7684\u5efa\u7acb\u3001\u9a8c\u8bc1\u670d\u52a1\u5668\u7684\u8eab\u4efd\u4e0e\u4e4b\u524d\u8bb0\u5f55\u4e2d\u7684\u4e00\u81f4\u3001\u5e76\u5c06\u81ea\u5df1\u7684\u9a8c\u8bc1\u4fe1\u606f\u63d0\u4f9b\u7ed9\u670d\u52a1\u5668\u3002<\/p>\n<p> \u4e00\u4e2aSSH\u4f1a\u8bdd\u7684\u5efa\u7acb\u8fc7\u7a0b\u5206\u4e3a\u4e24\u4e2a\u9636\u6bb5\u3002\u4e4b\u4e00\u9636\u6bb5\uff0c\u53cc\u65b9\u6c9f\u901a\u5e76\u540c\u610f\u5efa\u7acb\u4e00\u4e2a\u52a0\u5bc6\u8fde\u63a5\u901a\u9053\u4ee5\u4f9b\u540e\u7eed\u4fe1\u606f\u4f20\u8f93\u7528\u3002\u7b2c\u4e8c\u9636\u6bb5\uff0c\u5bf9\u8bf7\u6c42\u63a5\u5165\u7684\u7528\u6237\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u4ee5\u786e\u5b9a\u670d\u52a1\u5668\u7aef\u662f\u5426\u8981\u7ed9\u8be5\u7528\u6237\u5f00\u653e\u8bbf\u95ee\u6743\u9650\u3002<\/p>\n<p> \u5f53\u5ba2\u6237\u7aef\u53d1\u8d77TCP\u8fde\u63a5\u65f6\uff0c\u670d\u52a1\u5668\u7aef\u8fd4\u56de\u4fe1\u606f\u8bf4\u660e\u81ea\u5df1\u652f\u6301\u7684\u534f\u8bae\u7248\u672c\uff0c\u5982\u679c\u5ba2\u6237\u7aef\u4e0a\u652f\u6301\u7684\u534f\u8bae\u4e0e\u4e4b\u5339\u914d\uff0c\u5219\u8fde\u63a5\u7ee7\u7eed\u3002\u670d\u52a1\u5668\u4f1a\u63d0\u4f9b\u81ea\u5df1\u7684\u516c\u5171\u4e3b\u673a\u5bc6\u94a5\uff08public host key\uff09\u4ee5\u8ba9\u5ba2\u6237\u7aef\u786e\u8ba4\u81ea\u5df1\u8bbf\u95ee\u7684\u662f\u6b63\u786e\u7684\u673a\u5668\u3002<\/p>\n<p> \u7136\u540e\uff0c\u53cc\u65b9\u91c7\u7528\u4e00\u79cdDiffie-Hellman\u7b97\u6cd5\u5171\u540c\u4e3a\u8be5\u4f1a\u8bdd\u5efa\u7acb\u5bc6\u94a5\u3002\u6bcf\u4e00\u65b9\u7684\u4e00\u90e8\u5206\u79c1\u6709\u6570\u636e\uff0c\u52a0\u4e0a\u6765\u81ea\u5bf9\u65b9\u7684\u4e00\u90e8\u5206\u516c\u5171\u6570\u636e\uff0c\u901a\u8fc7\u8fd9\u79cd\u7b97\u6cd5\u8ba1\u7b97\uff0c\u80fd\u591f\u5f97\u51fa\u5b8c\u5168\u76f8\u540c\u7684\u5bc6\u94a5\u7528\u4e8e\u672c\u6b21\u4f1a\u8bdd\u3002<\/p>\n<p> \u6574\u4e2a\u4f1a\u8bdd\u7684\u901a\u8baf\u5185\u5bb9\u90fd\u4f7f\u7528\u8be5\u5bc6\u94a5\u8fdb\u884c\u52a0\u5bc6\u3002\u8fd9\u4e2a\u9636\u6bb5\u4f7f\u7528\u7684<\/p>\n<p>\u516c\u94a5<\/p>\n<p>\/\u79c1\u94a5\u5bf9\u4e0e\u7528\u6237\u9a8c\u8bc1\u8eab\u4efd\u7528\u7684SSH\u5bc6\u94a5\u662f\u5b8c\u5168\u65e0\u5173\u7684\u3002<\/p>\n<p> \u7ecf\u5178Diffie-Hellman\u7b97\u6cd5\u7684\u8ba1\u7b97\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<p> \u8fd9\u4e2a\u5171\u4eab\u5bc6\u94a5\u7684\u52a0\u5bc6\u65b9\u5f0f\u88ab\u79f0\u4e3a<\/p>\n<p>\u4e8c\u8fdb\u5236<\/p>\n<p>\u6570\u636e\u5305\u534f\u8bae\uff08binary packet protocol\uff09\u3002\u8be5\u8fc7\u7a0b\u80fd\u591f\u8ba9\u53cc\u65b9\u5e73\u7b49\u7684\u53c2\u4e0e\u5bc6\u94a5\u751f\u6210\u7684\u8fc7\u7a0b\uff0c\u800c\u4e0d\u662f\u7531\u5355\u65b9\u638c\u63e1\u3002\u8fd9\u79cd\u5171\u4eab\u5bc6\u94a5\u751f\u6210\u7684\u8fc7\u7a0b\u662f\u5b89\u5168\u7684\uff0c\u53cc\u65b9\u6ca1\u6709\u4ea4\u6362\u8fc7\u4efb\u4f55\u672a\u7ecf\u52a0\u5bc6\u7684\u4fe1\u606f\u3002<\/p>\n<p> \u751f\u6210\u7684\u5bc6\u94a5\u662f\u5bf9\u79f0\u5f0f\u5bc6\u94a5\uff0c\u4e00\u65b9\u7528\u4e8e\u52a0\u5bc6\u4fe1\u606f\u7684\u5bc6\u94a5\u7b49\u540c\u4e8e\u53e6\u4e00\u65b9\u7528\u4e8e\u89e3\u5bc6\u4fe1\u606f\u7684\u5bc6\u94a5\uff0c\u800c\u4efb\u4f55\u7b2c\u4e09\u65b9\u7531\u4e8e\u4e0d\u6301\u6709\u8be5\u5bc6\u94a5\uff0c\u662f\u65e0\u6cd5\u89e3\u5bc6\u53cc\u65b9\u4f20\u9012\u7684\u5185\u5bb9\u7684\u3002<\/p>\n<p> \u4f1a\u8bdd\u52a0\u5bc6\u901a\u9053\u5efa\u7acb\u540e\uff0cSSH\u5f00\u59cb\u8fdb\u5165\u7528\u6237\u8ba4\u8bc1\u9636\u6bb5\u3002<\/p>\n<p> \u4e0b\u4e00\u6b65\uff0c\u670d\u52a1\u5668\u9a8c\u8bc1\u7528\u6237\u8eab\u4efd\u4ee5\u51b3\u5b9a\u662f\u5426\u51c6\u8bb8\u5176\u8bbf\u95ee\u3002\u9a8c\u8bc1\u6709\u4e0d\u540c\u7684\u65b9\u5f0f\uff0c\u9009\u62e9\u7684\u9a8c\u8bc1\u65b9\u5f0f\u53d6\u51b3\u4e8e\u670d\u52a1\u5668\u7684\u652f\u6301\u3002<\/p>\n<p> \u6700\u7b80\u5355\u7684\u9a8c\u8bc1\u662f\u5bc6\u7801\u9a8c\u8bc1\uff1a\u670d\u52a1\u5668\u8981\u6c42\u5ba2\u6237\u7aef\u8f93\u5165\u5bc6\u7801\uff0c\u5ba2\u6237\u7aef\u8f93\u5165\u7684\u5bc6\u7801\u7ecf\u8fc7\u4e0a\u8ff0\u7684\u901a\u9053\u52a0\u5bc6\u4f20\u8f93\u7ed9\u670d\u52a1\u5668\u3002<\/p>\n<p> \u867d\u7136\u5bc6\u7801\u662f\u52a0\u5bc6\u8fc7\u7684\uff0c\u7136\u800c\u8be5\u65b9\u6cd5\u4ecd\u7136\u4e0d\u88ab\u63a8\u8350\uff0c\u56e0\u4e3a\u7528\u6237\u7ecf\u5e38\u4e3a\u4e86\u7701\u4e8b\u800c\u4f7f\u7528\u8fc7\u4e8e\u7b80\u5355\u7684\u5bc6\u7801\uff0c\u800c\u8fd9\u7c7b\u5bc6\u7801\u5f88\u5bb9\u6613\u5c31\u80fd\u591f\u88ab\u81ea\u52a8\u5316\u811a\u672c\u7834\u89e3\u3002<\/p>\n<p> \u66f4\u6d41\u884c\u7684\u9a8c\u8bc1\u65b9\u5f0f\u662fSSH\u5bc6\u94a5\u5bf9\uff0c\u8fd9\u4e5f\u662f\u5f53\u524d\u6700\u63a8\u8350\u7684\u65b9\u5f0f\u3002SSH\u5bc6\u94a5\u5bf9\u662f\u975e\u5bf9\u79f0\u5bc6\u94a5\uff0c\u79c1\u94a5\u548c\u516c\u94a5\u5206\u522b\u7528\u4e8e\u4e0d\u540c\u7684\u529f\u80fd\u3002<\/p>\n<p> \u516c\u94a5\u7528\u4e8e\u52a0\u5bc6\uff0c\u800c\u79c1\u94a5\u7528\u4e8e\u89e3\u5bc6\u3002\u516c\u94a5\u53ef\u4ee5\u968f\u610f\u4e0a\u4f20\u3001\u5171\u4eab\uff0c\u56e0\u4e3a\u516c\u94a5\u7684\u6d41\u901a\u5e76\u4e0d\u4f1a\u5371\u53ca\u5230\u79c1\u94a5\u7684\u4fdd\u5bc6\u6027\u3002<\/p>\n<p> SSH\u5bc6\u94a5\u5bf9\u7684\u9a8c\u8bc1\u8fc7\u7a0b\u8d77\u59cb\u4e8e\u4e0a\u4e00\u90e8\u5206\u52a0\u5bc6\u901a\u9053\u5efa\u7acb\u4e4b\u540e\uff0c\u5176\u5177\u4f53\u6267\u884c\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<p> \u7b80\u5355\u6765\u8bf4\uff0c\u670d\u52a1\u5668\u7aef\u7528\u516c\u94a5\u52a0\u5bc6\u4fe1\u606f\uff0c\u5ba2\u6237\u7aef\u7528\u79c1\u94a5\u89e3\u5bc6\u4fe1\u606f\u4ee5\u8bc1\u660e\u81ea\u5df1\u6301\u6709\u79c1\u94a5\u3002\u8be5\u8fc7\u7a0b\u540c\u65f6\u4f7f\u7528\u4e86\u5bf9\u79f0\u52a0\u5bc6\u548c\u975e\u5bf9\u79f0\u52a0\u5bc6\uff0c\u4e24\u79cd\u65b9\u5f0f\u5404\u6709\u81ea\u5df1\u7684\u529f\u7528\u3002<\/p>\n<p> \u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n<p>\u7528\u6237\u540d<\/p>\n<p>\uff1a\u4e3a\u8981\u767b\u5f55\u7684\u670d\u52a1\u5668B\u4e2d\u5df2\u5b58\u5728\u7684\u7528\u6237\u8d26\u6237\u540d<\/p>\n<\/p>\n<p>IP\u5730\u5740<\/p>\n<p>\uff1a\u4e3a\u670d\u52a1\u5668B\u7684IP\u5730\u5740<\/p>\n<p> -p <\/p>\n<p>\u7aef\u53e3\u53f7<\/p>\n<p>\uff1a\u7528\u6765\u6307\u5b9a\u7aef\u53e3\u53f7\uff0c\u9ed8\u8ba4\u4e3a22<\/p>\n<p> \u4e4b\u4e00\u6b21\u767b\u5f55\u65f6\uff0c\u4f1a\u63d0\u793a\u5982\u4e0b\u63d0\u793a\uff1a<\/p>\n<p> \u5927\u6982\u610f\u601d\u662f\u8bf4\uff0c\u4f60\u6b63\u5728\u8bbf\u95ee\u7684\u4e3b\u673a\u4e0d\u80fd\u9a8c\u8bc1\u5b83\u7684\u771f\u5b9e\u6027\uff0c\u5b83\u7684RSA key\uff08\u5f53\u524d\u8bbf\u95ee\u4e3b\u673a\u7684\u516c\u94a5\uff09\u6307\u7eb9\u662f\u600e\u6837\u7684\uff0c\u4f60\u786e\u5b9a\u8981\u7ee7\u7eed\u8fde\u63a5\u5417\uff1f<\/p>\n<p> \u8f93\u5165yes\u7ee7\u7eed\uff0c\u4f1a\u63d0\u793a\uff0c\u5df2\u6c38\u4e45\u628a\u5f53\u524d\u8bbf\u95ee\u4e3b\u673a\u7684RSA key\u6dfb\u52a0\u5230\u4e86\u5df2\u77e5\u4e3b\u673a\u6587\u4ef6\uff08\u7528\u6237\u76ee\u5f55\u4e0b\uff0c.ssh <\/p>\n<p>\u6587\u4ef6\u5939<\/p>\n<p>\u4e2d\u7684knwon_hosts\u6587\u4ef6\uff09\u4e2d\u3002\u4e4b\u540e\u518d\u6b21 SSH \u767b\u5f55\u5c31\u4e0d\u518d\u6709\u8be5\u63d0\u793a\u4e86\u3002<\/p>\n<p> \u63a5\u7740\uff0c\u8f93\u5165\u767b\u5f55\u8d26\u6237\u7684\u5bc6\u7801\u5373\u53ef\u3002<\/p>\n<p> SSH \u5bc6\u7801\u767b\u5f55\uff0c\u9700\u8981\u670d\u52a1\u5668\u5f00\u542f\u5bc6\u7801\u9a8c\u8bc1\u6743\u9650\uff0c\u7f16\u8f91\u670d\u52a1\u5668SSH\u914d\u7f6e\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n<p> \u5728 sshd_config \u6587\u4ef6\u4e2d\uff0cProtocol 2 \u4e0b\u9762 #PasswordAuthentication yes\uff0c\u5c06\u524d\u9762\u7684#\u53f7\u53bb\u6389\uff0c\u4fdd\u5b58\u9000\u51fa\u3002<\/p>\n<p> \u516c\u94a5\u767b\u5f55\uff0c\u5373\u514d\u5bc6\u7801\u767b\u5f55\u3002\u907f\u514d\u7684\u6bcf\u6b21\u767b\u5f55\u90fd\u8981\u8f93\u5165\u7684\u9ebb\u70e6\uff0c\u4e5f\u9632\u6b62\u4e86<\/p>\n<p>\u4e2d\u95f4\u4eba\u653b\u51fb<\/p>\n<p>\u3002\u662fSSH\u8fdc\u7a0b\u767b\u5f55\u6700\u5e38\u7528\u7684\u767b\u5f55\u65b9\u5f0f\u3002<\/p>\n<p> \u63d0\u793a\u8f93\u5165\u5bc6\u94a5\u5bf9\u540d\u79f0\uff0c\u76f4\u63a5\u56de\u8f66\uff0c\u4f7f\u7528\u9ed8\u8ba4\u540d\u79f0\u5373\u53ef\uff1b<\/p>\n<p> \u63d0\u793a\u8f93\u5165\u5bc6\u7801\uff08\u4f7f\u7528\u79c1\u94a5\u65f6\uff0c\u8981\u8f93\u5165\u5bc6\u7801\uff09\uff0c\u76f4\u63a5\u56de\u8f66\uff0c\u4e0d\u4f7f\u7528\u5bc6\u7801\u5373\u53ef\u3002<\/p>\n<p> \u9996\u5148\uff0c\u767b\u5f55\u670d\u52a1\u5668B\uff0c\u5728\u8fdb\u884c\u4e0b\u9762\u7684\u64cd\u4f5c\u3002<\/p>\n<p> \u627e\u5230 #PubkeyAuthentication yes\uff0c\u5220\u9664 #\u53f7\uff0c\u4fdd\u5b58\u9000\u51fa\u3002<\/p>\n<p> \u91cd\u542f ssh \u670d\u52a1<\/p>\n<p> \u4e5f\u53ef\u6307\u5b9a\u9a8c\u8bc1\u79c1\u94a5\uff1a<\/p>\n<p> \u672c\u5730\u4e3b\u673aA\uff0c\u751f\u6210\u5bc6\u94a5\u5bf9\u540e\uff1a<\/p>\n<p> sudo vim \/etc\/selinux\/config<\/p>\n<h3>Linux\u4e0b\u914d\u7f6eSSH\u670d\u52a1,\u4ee5\u7528\u6237\u540droot,\u5bc6\u7801123456\u80fd\u591f\u8fdc\u7a0b\u767b\u5f55\u5230\u4f60\u7684\u4e3b\u673a.<\/h3>\n<p>\u4fee\u6539\u4f60\u7684ssh\u914d\u7f6e\u6587\u4ef6\uff0c\u5c06\u5176\u4e2d\u7684PermitRootLogin\u7684\u53c2\u6570\u8bbe\u7f6e\u4e3ayes<\/p>\n<p>\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u5982:\/etc\/ssh\/sshd_config<\/p>\n<p>\u91cd\u542fssh\u670d\u52a1\uff0c\u547d\u4ee4\u5982\u4e0b:<\/p>\n<p>\/etc\/init.d\/sshd<\/p>\n<p>restart<\/p>\n<p>\u6216<\/p>\n<p>\/etc\/init.d\/ssh<\/p>\n<p>restart<\/p>\n<p>\u7136\u540e\u4fee\u6539root\u7684\u5bc6\u7801\uff0c\u5c06\u5bc6\u7801\u4fee\u6539\u4e3a123456.<\/p>\n<p>linux ssh \u66f4\u6539\u5bc6\u7801\u7684\u4ecb\u7ecd\u5c31\u804a\u5230\u8fd9\u91cc\u5427\uff0c\u611f\u8c22\u4f60\u82b1\u65f6\u95f4\u9605\u8bfb\u672c\u7ad9\u5185\u5bb9\uff0c\u66f4\u591a\u5173\u4e8elinux ssh \u66f4\u6539\u5bc6\u7801,Linux SSH\u4fee\u6539\u5bc6\u7801\u8be6\u89e3,\u3010Linux\u3011SSH \u4f7f\u7528\u5bc6\u7801\/\u516c\u94a5\u8fdc\u7a0b\u767b\u5f55\u603b\u7ed3,Linux\u4e0b\u914d\u7f6eSSH\u670d\u52a1,\u4ee5\u7528\u6237\u540droot,\u5bc6\u7801123456\u80fd\u591f\u8fdc\u7a0b\u767b\u5f55\u5230\u4f60\u7684\u4e3b\u673a.\u7684\u4fe1\u606f\u522b\u5fd8\u4e86\u5728\u672c\u7ad9\u8fdb\u884c\u67e5\u627e\u5594\u3002<\/p>\n<p><a href=\"http:https:\/\/idc.net\/\">\u9999\u6e2f\u670d\u52a1\u5668<\/a>\u9996\u9009\u540e\u6d6a\u4e91\uff0c2H2G\u9996\u670810\u5143\u5f00\u901a\u3002<br \/>\u540e\u6d6a\u4e91\uff08www.IDC.Net\uff09\u63d0\u4f9b\u7b80\u5355\u597d\u7528\uff0c\u4ef7\u683c\u539a\u9053\u7684\u9999\u6e2f\/\u7f8e\u56fd\u4e91\u670d\u52a1\u5668\u548c\u72ec\u7acb\u670d\u52a1\u5668\u3002IDC+ISP+ICP\u8d44\u8d28\u3002ARIN\u548cAPNIC\u4f1a\u5458\u3002\u6210\u719f\u6280\u672f\u56e2\u961f15\u5e74\u884c\u4e1a\u7ecf\u9a8c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SSH\u662fSecure Shell\u7684\u7f29\u5199\uff0c\u662f\u4e00\u79cd\u52a0\u5bc6\u65b9\u5f0f\u3002\u5b83\u63d0\u4f9b\u4e86\u8fdc\u7a0b\u767b\u5f55\u548c\u7ba1\u7406Linux\u670d\u52a1\u5668\u7684\u5b89\u5168\u901a\u9053\u3002\u5f53\u6211 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-140537","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/posts\/140537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/comments?post=140537"}],"version-history":[{"count":0,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/posts\/140537\/revisions"}],"wp:attachment":[{"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/media?parent=140537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/categories?post=140537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/idc.net\/help\/wp-json\/wp\/v2\/tags?post=140537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}