Kudzidza SSH: Sarudzo uye Configuration Paramita
Muchikamu chechitatu ichi "Kudzidza SSH" tichatanga kuongorora uye ruzivo rwe SSH yekuraira sarudzo uye paramita yechirongwa cheOpenSSH, inowanikwa kushandisa nekumhanyisa rairo mune terminal.
Izvo zvichabatsira zvakanyanya, sezvo, OpenSSH Ndiyo yakanyanya kuiswa uye kushandiswa kweiyo kure uye yakachengeteka yekubatanidza maprotocol, nezve mazhinji e Mahara uye akavhurika mashandiro, se GNU / Linux.
Kudzidza SSH: Kuisa uye Kugadzirisa Mafaira
Asi ndisati ndatanga izvi kupa chinyorwa nezve configuration sarudzo uye parameters of the OpenSSH application, kuenderera mberi "Kudzidza SSH", tinokurudzira kuti pakupera kwekuverenga izvi, tsvaga zvinotevera zvakapfuura zvakabatana zvakatumirwa:
Kudzidza SSH: Kuenda kune kushandiswa kwepamusoro kweprotocol
Kudzidza nezve SSH sarudzo uye paramita
Iyo yakanyanya kukosha uye yakakosha nezve SSH yekuraira ndiko kuziva kuti inobvumira kuti iitwe pachishandiswa zvimwe sarudzo kana parameters, zviri maererano nadzo ikozvino mushandisi bhuku, zvinotevera:
ssh [-46AaCfGgKkMnqsTtVvXxYy] [-B bind_interface] [-b bind_address] [-c cipher_spec] [-D [bind_address:] port] [-E log_file] [-e escape_char] [-F configkfile] [11] -i identity_file] [-J kwekuenda] [-L kero] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o sarudzo] [-p port] [-Q query_option] [-R kero] [ -S ctl_path] [-W host: port] [-w local_tun[:remote_tun]] kwainoenda [kuraira [nharo ...]]
Saka, chinotevera tichaongorora zvimwe zvakakosha kuziva, kudzidzira uye kugona, kana zvichidikanwa kana kubatsira chero nguva. Uye izvi ndizvo zvinotevera:
Basics
- -4 ne-6: Inomanikidza SSH protocol kushandisa IPv4 kana IPv6 kero chete.
- -A uye -a: Gonesa kana kudzima kubatana kwekutumira kubva kune yechokwadi mumiriri, senge ssh-agent.
- -C: Kumbira kudzvanywa kwese data (kusanganisira stdin, stdout, stderr, uye data rekubatanidza).
- -f: Inobvumira SSH zvikumbiro zvekuenda kumashure nguva isati yaitwa yekuraira. Ndiko kuti, inoisa mutengi kumashure kusati kwaitwa murairo. ORinobatsira pakupinda mapassword ekumashure.
- -G: Inokutendera iwe kuti uwane, semhinduro kubva kune yekuenda mugadziri, kudhindwa kwako yemuno SSH kumisikidzwa.
- -g: Inobvumira mauto ari kure kuti abatanidze kune zviteshi zvemuno zvinotumirwa. Kana yakashandiswa pane yakawandisa yekubatanidza, iyi sarudzo inofanirwa kutsanangurwa mune master process.
- -K uye -k: Inogonesa kana kudzima kutendeseka kweGSSAPI uye kutumira kweGSSAPI kuseva.
- -M: Inokutendera kuti uise iyo SSH mutengi mu "tenzi" modhi yekugovera iyo TCP/IP yekubatanidza nemamwe anoteedzana.
- -N: Inokutendera iwe kuvharira kuitiswa kwemirairo iri kure. Inobatsira pakungogadzirisa port forwarding.
- -n: Redirects yakajairika kubva /dev/null. inobatsira kune apo SSH suye inomhanya kumashure.
- -q: Activate silent mode. Kukonzera kuwanda kweyambiro uye meseji yekuongorora kudzvanyirirwa.
- -s: Inokubvumira kukumbira kukumbirwa kwe subsystem (remote command set) pane remote system.
- -T uye -t: Inodzima uye inogonesa mepu yepseudo-terminal pamushini uri kure.
- -V: Inokutendera kuti uone nhamba yeshanduro yeiyo yakaiswa OpenSSH package.
- -v: Inokutendera iwe kumisa iyo verbose mode, pzvichiita kuti idhinde mameseji ekugadzirisa nezve kufambira mberi kwayo.
- -X uye -x: Gonesa uye dzima X11 server kutumira, kuti uwane iyo iri kure host yemunharaunda X11 skrini.
- -Y: Inogonesa yakavimbika X11 kutumira, iyo ivo havasi pasi pe X11 chengetedzo yekuwedzera kudzora.
- -y: Tumira ruzivo rwekunyoresa uchishandisa iyo system module syslog.
Yepamberi
- -B bind_interface: Inobvumira sunga IP kero kune SSH yekubatanidza, usati waedza kubatana nekwauri kuenda. Zvipi ichashandiswa seyekutangira kero yeSSH yekubatanidza. Inobatsira pamasisitimu ane inodarika imwe kero yetiweki yekuenda.
- -b sunga_kero: Inokutendera kuti utaure mune yemuno host, iyo network interface inova iyo sosi kero yekubatanidza. Inobatsira pamakomputa (masystem) ane anopfuura imwe sosi yetiweki kero.
- -c cipher_spec: Inokutendera iwe kuti usarudze iyo cipher yakatarwa iyo ichashandiswa encrypt chikamu. Iri (cipher_spec) irunyoro rwakapatsanurwa nemakoma rwema ciphers akanyorwa muhurongwa hwekuda.
- -D sunga_kero: port: Inobvumira uyeTsanangudzo munharaunda yekufambisa chiteshi padanho rekushandisa. Kugovera socket yekuteerera chiteshi padivi renzvimbo, yakasungwa kune yakatarwa network kero.
- -E log_file: Zvinobvumirawedzera debug logs kune yekukanganisa faira, pachinzvimbo chezvikanganiso zvechinyakare zvinobatwa neiyo inoshanda sisitimu.
- -e escape_char: Inokutendera iwe kuseta iyo yekutiza hunhu hwematerminal sessions. Default is a tilde '
~'. Kukosha kwe "hapana" kunodzima chero kupukunyuka uye kunoita kuti chikamu chive pachena. - -F gadzirisa: Inokutendera kuti utaure faira yekumisikidza kune wega wega mushandisi. Kana imwe yakapihwa, iyo general configuration file ( / etc / ssh / ssh_config ).
- -Ini pkcs11: Inokutendera kuti utaure PKCS#11 yakagovaniswa raibhurari iyo SSH inofanira kushandisa kutaurirana nePKCS#11 tokeni. Ndiko kuti kusarudza faira ne kiyi yega yega yekusimbisa kiyi yeruzhinji.
- -J kuenda: Inobvumira uyeRondedzera iyo ProxyJump yekumisikidza rairo, kune cbatanidza kune inotarirwa host nekutanga kugadzira SSH yekubatanidza ane jump host inotsanangurwa na muenzi wekuenda.
- -L kero: Inobvumira uyeTaura kuti zvinongedzo kune yakapihwa TCP port kana Unix socket pane yemuno host (mutengi) inozoendeswa kune yakapihwa host uye port, kana Unix socket, iri kure.
- -l login_name: Inokutendera kuti utaure mushandisi kuti apinde mumushini uri kure. Izvi zvinogona zvakare kutsanangurwa pamunhu wega wega mufaira rekugadzirisa.
- -m mac_spec+
- -Kana ctl_cmd: Dzora maitiro ekuwedzera tenzi pamusoro pekubatanidza kunoshanda, nekubvumira nharo (ctl_cmd) kuti iparadzwe uye ipfuure kune master process.
- -o sarudzo: Inobvumira shandisa sarudzo dzakatsanangurwa mufaira rekugadzirisa. Izvi zvinobatsira pakutsanangura sarudzo iyo isina yakaparadzana yekuraira mutsara wekukurumidza.
- -p chiteshi: Inokutendera kuti utaure chiteshi chekubatanidza kune chiri kure. Izvi zvinogona kutsanangurwa pamunhu wega wega mufaira rekugadzirisa. Nekudaro, iyo yakasarudzika kukosha ndeye 22, inova ndiyo yakajairwa kukosha kweSSH yekubatanidza.
- -Q query_option: Inobvumira kuita cBvunza nezve algorithms anotsigirwa, anosanganisira: cipher, cipher-auth, rubatsiro, mac, kiyi, kiyi-cert, kiyi-plain, kiyi-sig, protocol-version, uye sig.
- -R kero: Inobvumira uyeTaura kuti zvinongedzo kune yakapihwa TCP port kana Unix socket pane iri kure host (server) inofanirwa kuendeswa kune yenzvimbo. Kugovera socket yekuteerera kune port/socket kudivi rekure.
- -S ctl_path: Inokutendera kuti utaure nzvimbo yesoketi yekudzora yekugovana yekubatanidza, kana tambo "hapana" kudzima kubatana kwekubatanidza.
- -W muenzi: port: Zvikumbiro izvo zvakajairwa zvekupinza uye zvinobuda kubva kune mutengi zvitumirwe kune muridzi kuburikidza nechiteshi chakatsanangurwa kuburikidza nemugero wakachengeteka.
- -w local_tun[:remote_tun]: Kumbira kuendesa tunnel mudziyo neyakatsanangurwa Tun zvishandiso pakati pemutengi (yenzvimbo_tun) uye sevha (remote_tun).
Mamwe mashoko
Uye muchikamu chechitatu ichi che wedzera ruzivo urwu Tinokurudzira kuongorora zvinotevera SSH Walkthrough, muchirungu, pamusoro pekudzidzira mimwe mienzaniso pane syntax yeimwe SSH yekuraira mirairo mukati Tsanangura Shell. Uye sezvakangoita, muchikamu chekutanga uye chechipiri, kuenderera mberi nekuongorora zvinotevera zviri pamutemo uye akavimbika online nezve SSH uye OpenSSH:
- Debian Wiki
- Debian Administrator's Manual: Remote Login / SSH
- Debian Security Handbook: Chitsauko 5. Kuchengetedza masevhisi ari kushanda pane yako system
Resumen
Muchidimbu, chikamu chitsva ichi "Kudzidza SSH" Izvo zvichave zvinobatsira kune avo vashandisi veLinux vanotoshanda neichi chishandiso. Kupfuura zvese, kujekesa kumwe kusava nechokwadi nezve yepamusoro, inobudirira uye inobudirira kubata chemudziyo wakadaro. Nokuda kweizvi, ita zviri nani uye zvakanyanya kuoma zviri kure kubatana, uye unomhanya zvimwe zvakachengeteka uye zvakavimbika zvigadziriso pamidziyo yavo uye mapuratifomu, vachishandisa akati kure uye akachengeteka yekubatanidza protocol.
Tinovimba kuti chinyorwa ichi chinobatsira zvikuru kune vese «Comunidad de Software Libre, Código Abierto y GNU/Linux». Uye ita chokwadi chekutaura pazviri pazasi, uye ugozvigovane nevamwe pane ako aunofarira mawebhusaiti, chiteshi, mapoka, kana nharaunda pasocial network kana mameseji masisitimu. Zvakare, rangarira kushanyira peji redu repamba pa «DesdeLinux» kuongorora dzimwe nhau. Uye batanidza yedu yepamutemo chiteshi Teregiramu ye DesdeLinux kuti urambe uchiziva, kana boka kuti uwane rumwe ruzivo nezvenyaya yanhasi kana zvimwe.