Kafa haɗin SSH ba tare da kalmar sirri ba a cikin matakai 3 kawai

Sannu,

Anan zaku ga yadda ake haɗuwa da PC daga nesa ta hanyar SSH Shigar da kalmar wucewa kawai a karon farko, to koda mun sake kunna kwamfutocin duka, ba za a sake tambayarmu kalmar sirri ba.

Amma, bari mu fara ganin takaitaccen bayani game da menene SSH:

SSH yarjejeniya ce, hanya ce ta sadarwa tsakanin kwamfutoci biyu. Yana ba mu damar sarrafa ƙungiyar ta nesa. Lokacin da muka sami damar shiga wata kwamfutar ta hanyar SSH, za a zartar da umarnin da muka shigar a waccan tashar akan ɗayan kwamfutar, ta wannan hanyar muke sarrafawa / sarrafa shi.

Duk abin da ake watsa ta SSH, an ɓoye shi kuma tare da kyakkyawan tsaro.

Yanzu, zamu ga yadda zamuyi amfani da matakai guda uku Kwamfuta # 1 don samun dama Kwamfuta # 2 ba tare da shigar da kalmar sirri ba:

Muna da halin da ake ciki:

Kwamfuta # 1 - » Kuna so ku haɗa zuwa Kwamfuta # 2, ba tare da shigar da kalmar wucewa ba duk lokacin da kuka yi kokarin haɗi zuwa wannan PC ɗin.

Kwamfuta # 2 - » Kun shigar da sabar SSH. Wannan shine daya Kwamfuta # 1 zai hade, kuma zai yi hakan ba tare da shigar da kalmar sirri ba. A wannan PC ɗin akwai wani mai amfani mai suna tushen.

Bari mu fara…

1. En Kwamfuta # 1 mun rubuta masu zuwa:

• ssh -keygen -b 4096 -t rsa

Wannan zai haifar da maɓallin jama'a. Don kar a sami rudani da "mabuɗan jama'a da masu zaman kansu", zan bayyana shi a sauƙaƙe.

A ce kana da makullin gidanka guda biyu a aljihunka, ɗaya ka bai wa budurwarka tunda kuna zaune tare, ɗayan kuma an bar ku shi kaɗai, ba ku ba kowa ba. Da kyau, wannan mabuɗin da kuka ba wa budurwar ku zai ba ta izinin shiga gidanku ba tare da ta gaya muku ba, ba tare da neman izininka ba, ko? wannan mabuɗin jama'a ne, "maɓalli" wanda ke bawa PC ɗaya damar samun dama ga wani ba tare da neman izininka ba (ma'ana, ba tare da shigar da sunan mai amfani + kalmar wucewa ba)

Lokacin da suka sanya wannan umarnin, wannan zai bayyana:

2. Kawai latsa [Shiga], na biyu daga baya mun sake latsawa [Shiga], kuma na biyu daga baya mun sake latsawa sau ɗaya [Shiga]. Ina nufin, za mu danna [Shiga] jimlar sau uku (3), muna latsa shi kawai ... ba mu rubuta komai 🙂

Idan muka yi haka, wani abu mai kama da mai zuwa zai bayyana:

Shirya, dama muna da maɓallin jama'a ... yanzu muna buƙatar bawa wanda muke so (misali, a ba budurwarmu haha)

Abin da muke so shi ne Kwamfuta # 1 haɗa zuwa Kwamfuta # 2, riga a ciki Kwamfuta # 1 mun yi duk na sama, a cikin Kwamfuta # 2 Ba mu yi komai ba. Yayi kyau, Kwamfuta # 2 yana da adireshin IP misali 10.10.0.5.

3. Mun saka a ciki Kwamfuta # 1 na gaba:

• ssh-copy-id tushen @ 10.10.0.5

Abin da wannan ke yi kawai ba ku mabuɗin jama'a na Kwamfuta # 1 a Kwamfuta # 2, ma'ana, yana bayarwa ga Kwamfuta # 2 mabuɗin jama'a na Kwamfuta # 1yayin da Kwamfuta # 1 yana rike da madannin nasa, ka sani; wancan mabuɗin da ba a ba kowa ba. Yana da mahimmanci kada ayi kuskure tare da mai amfani, ma'ana, idan mai amfani “tushen"Babu shi a cikin PC # 2, zai ba mu kuskure, yana da muhimmanci a bayyana a cikin wane mai amfani da za mu yi amfani da shi don wannan, ban da gaskiyar cewa wannan mai amfani da muke tsara hanya da shi ba tare da kalmar sirri ba, zai zama daidai da wanda za mu iya samun damar zuwa a nan gaba. Da zarar an gama wannan, ya kamata ya zama kamar wannan:

A matakin da ya gabata, dole ne su sanya kalmar shiga ta mai amfani a ciki Kwamfuta # 2.

Kuma voila ... komai an daidaita shi 😀

Hakanan ya bayyana a gare mu a cikin tashar, bari mu gwada idan komai yayi aiki da gaske 100% Yayi. Don gwadawa, mun sanya:

• ssh tushen@10.10.0.5

Idan suna son samun damar wata kwamfutar suma ba tare da koyaushe suna shigar da kalmar sirri ba (Kwamfuta # 3 misali), kawai muna ba shi mabuɗinmu na jama'a kuma shi ke nan, ma'ana, da zarar mun yi matakin #1 y #2 ba za mu sake yi ba. Idan muna son shiga Kwamfuta # 3 misali, wanda yake da IP 10.10.99.156 mun sanya kawai:

• ssh tushen@10.10.99.156

Ya zuwa yanzu koyawa.

Yi bayanin cewa matakin tsaro lokacin da muke magana game da SSH yana da girma sosai, kwatancen da na bayyana wasu matakai (ba mabudin budurwarmu) bazai zama haha ​​mafi dacewa ba, tunda budurwarmu zata iya ba mabuɗin wani. Lokacin da muke magana game da SSH, ƙa'idodin tsaro suna da saukin bayani, lokacin da muke ƙoƙarin samun damar kwamfutar mu (Kwamfuta # 1) duba idan a cikin PC # 2 akwai mabuɗin jama'a na kwamfutarmu (a wannan yanayin akwai, saboda mun saita shi ta wannan hanyar), to, idan akwai ɗaya, yana da sauƙi, bincika idan wannan mabuɗin jama'a daidai yake da maɓallin keɓaɓɓenmu (wanda ba mu ba wa kowa ba). Idan mabuɗan suna kama ɗaya yana ba mu damar isa ga, in ba haka ba kuma a matsayin matakan tsaro, ba ya ba mu damar nesa da sauran kwamfutar ba.

Don haka yanzu kun sani ... bawa budurwarmu maɓallin gida ba abu mafi aminci bane, amma raba maɓallan da samun dama ga wata kwamfuta ta nesa ta hanyar SSH ba lafiya ^ _ ^

Shakka ko tambayoyi, korafi ko shawarwari bari na sani.

Gaisuwa ga kowa.