Ukufunda i-SSH: Iinketho zeFayile ze-SSH kunye neeParamitha

Ukufunda i-SSH: Iinketho zeFayile ze-SSH kunye neeParamitha

Kwintlawulo yethu yamva nje Ukufunda i-SSH Sijongana nayo yonke into Iinketho zomyalelo we-SSH kunye neeparamitha yenkqubo ye-OpenSSH, ezifumanekayo xa uqhuba i ssh umyalelo kwi-terminal. Omnye wabo waba "-o ukhetho", esiyichazayo iyakuvumela sebenzisa iinketho ezikhankanyiweyo kwi Ifayile yoqwalaselo ye-OpenSSH, oko kukuthi, ifayile "SSHConfig" (ssh_config).

Ngenxa yesi sizathu, namhlanje siza kucacisa ngokufutshane ezinye zezi iinketho ezikhankanyiweyo kwi Ifayile yoqwalaselo ye-OpenSSH, ukusinika umbono omncinci kunye noluncedo wento esinokuyenza xa siphumeza umyalelo wohlobo "ssh -o ukhetho...", okanye vele uqwalasele eyethu iseva ye-SSH yendawo (umxhasi).

Ukufunda i-SSH: Iindlela zokuKhetha kunye neeParameters zoLungiso

Kwaye njengesiqhelo, ngaphambi kokuntywila kwisihloko sanamhlanje malunga nokhetho kunye neeparamitha ezikhoyo kwifayile VulaSSH "SSH Config" (ssh_config), siya kubashiya abo banomdla amakhonkco alandelayo kwabanye Izithuba zangaphambili ezinxulumene noko:

Inqaku elidibeneyo:

Ukufunda i-SSH: Ukhetho kunye neeParamitha zoLungiso-Icandelo I

Inqaku elidibeneyo:

Ukufunda i-SSH: Ukufakela kunye neeFayile zoLungiso

I-SSH Config File Options kunye neeParameters (ssh_config)

Yintoni i-SSH Config (ssh_config) ifayile ye-OpenSSH?

I-OpenSSH ineefayile ezi-2 zoqwalaselo. omnye wafowuna ssh_config kuqwalaselo lwe iphakheji yomthengi kunye nomnye umnxeba sshd_config kwi Iphakheji yomncedisi, zombini zibekwe kule ndlela ilandelayo okanye ulawulo: /etc/ssh.

Ngoko ke, xa usebenza kwi ifayile yoqwalaselo "Uqwalaselo lwe-SSH" (ssh_config) Sicinga ukuba siza kusebenza kwikhompyuter eya kusebenza njengesixhobo sokusebenzela sohlobo lomxhasi, oko kukuthi, iya kuqhuba. Unxibelelwano lweSSH kwiqela elinye okanye ngaphezulu Iiseva ezine-SSH.

Uluhlu lweenketho ezikhoyo kunye neeparamitha

Ngezantsi kukho ezinye iinketho okanye iparameters ezikhoyo ngaphakathi kwe ifayile yoqwalaselo "Uqwalaselo lwe-SSH" (ssh_config), ezininzi zazo ezinokusetyenziswa ngaphakathi komyalelo njenge "ssh -o ukhetho...".

umamkeli/umdlalo

Olu khetho okanye iparameter ibonisa ngaphakathi kwefayile yoqwalaselo lomxhasi weSSH (ssh_config) ukuba ezi zibhengezo zilandelayo zithintelwe (ukuya kukhetho olulandelayo okanye iparameter Umamkeli okanye Tshatisa zibonisiwe), ukuze zibe zezo ngqwayingqwayi kuphela ezithelekiseka enye yeepateni ezinikwe emva kwegama elingundoqo.

Oko kukuthi, oku ukhetho lusebenza njengomahluli wecandelo ngaphakathi kwefayile, njengokhetho lomdlalo. Ngoko ke, zombini inokuphinda iphindwe kaninzi kwifayile. ulungiselelo. Kwaye amaxabiso ayo, anokuba luluhlu lweepateni, ezibonisa ukuba zeziphi iinketho ezilandelayo faka kuqhagamshelo olwenziwe kwiinginginya ekuthethwa ngazo.

Ixabiso * ithatha ukuba "zonke yamabandla”, ngelixa kuTshatisa ixabiso elithi “zonke” lenza okufanayo. Kwaye, ukuba kukho iipateni ezingaphezulu kwesinye, kufuneka zohlulwe ngesithuba esimhlophe. Igalelo lepatheni linokulahlwa ngokulifakela isimaphambili ngophawu lwesikhuzo ('!'), ukuze iimatshisi ezilahliweyo zibe luncedo ekunikezeni imikhethe yemidlalo ye-wildcard.

IdilesiFamily

Ikuvumela ukuba uchaze ukuba loluphi uhlobo (usapho) lweedilesi oza kuzisebenzisa xa uqhagamshela. Iingxoxo ezisebenzayo zezi: nayiphi na (ehlala ikho), inet (sebenzisa kuphela IPv4), okanye inet6 (sebenzisa kuphela IPv6).

I-BatchMode

Ikuvumela ukuba ukhubaze ukwaziswa kwegama lokugqitha kunye nokusingatha izitshixo zokuqinisekisa ekusebenzisaneni komsebenzisi, ukuba useta "ewe" ingxoxo okanye ixabiso. Olu khetho luluncedo kwimibhalo eshicilelweyo kunye neminye imisebenzi yebhetshi apho kungekho msebenzisi ukhoyo ukusebenzisana ne-SSH. Ingxoxo kufuneka ibe ngu-"ewe" okanye "hayi", apho u-"hayi" ilixabiso elimiselweyo.

PhumaOnForwardFailure

Le parameter ikuvumela ukuba ukhankanye ukuba i-SSH kufuneka iluphelise uxhulumaniso, ukuba ayinakuqwalasela zonke eziceliweyo eziguquguqukayo, itonela, indawo yobulali, kunye nogqithiso olukude lwezibuko.

PhambiliIarhente

Le parameter ikuvumela ukuba ukhankanye ukuba udibaniso lwe-arhente yesiqinisekiso (ukuba lukhona) luza kuthunyelwa kumatshini okude. Ingxoxo inokuba ngu "ewe", kuba u-"hayi" iyinto engagqibekanga, kwaye ugqithiso lwe-arhente kufuneka lwenziwe ngononophelo. Ukusukela, abasebenzisi abanakho ukugqitha iimvume zefayile kwinginginya ekude banokufikelela kumenzeli wendawo ngodibaniso olugqithisiweyo.

PhambiliX11

Apha kukhankanyiwe ukuba udibaniso lwe-X11 luya kuhanjiswa ngokuzenzekelayo ngetshaneli ekhuselekileyo kunye ne-DISPLAY iseti. Ingxoxo ingaba ngu "ewe", kuba "hayi" lixabiso elingagqibekanga.

PhambiliX11Uthenjiwe

Apha ucwangcisa ewe ukuba yeyiphi iX11 ekude abathengi abazakuba nofikelelo olupheleleyo kumboniso weX11 woqobo. Oko kukuthi, Ukuba olu khetho lumiselwe ku "ewe", Abathengi be-X11 abakude baya kuba nofikelelo olugcweleyo kwiscreen sokuqala se-X11. Ngelixa, ewendimiselwe ukuba hayi (okungagqibekanga), abaxumi be-X11 bekude baya kuthathwa njengabangathenjwa kwaye baya kuthintelwa ekubiweni okanye ekuphazamisaneni nedatha yabathengi abathenjiweyo be-X11.

HashKnownHosts

Isetyenziselwa ukuxelela i-SSH ukuba i-hash inginginya amagama kunye needilesi xa zongezwe kwi ~/.ssh/known_hosts. Ukuze la magama afihliweyo asetyenziswe ngokuqhelekileyo nge-ssh kunye ne-sshd, kodwa ngaphandle kokubonisa ulwazi oluchongayo, kwimeko apho imixholo yefayile idizwe.

GSSAPIUqinisekiso

Isetyenziselwa ukucacisa ngaphakathi kwe-SSH, nokuba uqinisekiso lomsebenzisi olusekwe kwi-GSSAPI luvumelekile. I-GSSAPI iqhele ukusetyenziselwa uqinisekiso lwe-Kerberos, umzekelo nge-Active Directory.

SendEnv

Isetyenziselwa ukucacisa ukuba zeziphi iinguqu zemeko-bume yendawo ekufuneka zithunyelwe kumncedisi. Ukwenza lo msebenzi ngokufanelekileyo, umncedisi makawuxhase, kwaye uqwalaselwe ukwamkela ezi ziguquguqukayo zemekobume. Izinto eziguquguqukayo zikhankanyiwe ngamagama, ezinokuqulatha oonobumba be-wildcard. Kwakhona, uninzi lwezinto eziguquguqukayo zokusingqongileyo zinokwahlulwa ngesithuba esimhlophe okanye zisasazwe ngaphezulu kweqela imiyalelo yolu hlobo (SendEnv).

Olunye ulwazi

Kwaye kwesi sigaba sesine, ukuba ukwandisa olu lwazi kwaye ufunde nganye nganye kwiinketho kunye neeparamitha ezikhoyo ngaphakathi kwe ifayile yoqwalaselo "Uqwalaselo lwe-SSH" (ssh_config)Sicebisa ukuba ujonge ezi linki zilandelayo: Ifayile yoqwalaselo ye-SSH yomthengi we-OpenSSH y Iimanyuwali ezisemthethweni ze-OpenSSH, ngesiNgesi. Kwaye njengakwizavenge ezithathu ezidlulileyo, jonga oku kulandelayo umxholo osemthethweni kwaye uthembekile kwi-intanethi malunga I-SSH kunye ne-OpenSSH:

1. I-Debian Wiki
2. Incwadi yoMphathi weDebian: UkuNgena okukude / i-SSH
3. Incwadi yoKhuseleko lweDebian: Isahluko 5. Ukhuseleko lweenkonzo ezisebenza kwisistim yakho

Inqaku elidibeneyo:

Vula iShell eKhuselekileyo (OpenSSH): Intwana yayo yonke into malunga nobuchwepheshe be-SSH

Inqaku elidibeneyo:

I-OpenSSH 8.5 ifika noHlaziyo lweeHostKeys, ukulungiswa kunye nokunye

Isishwankathelo

Ngamafutshane, esi savenge esitsha sivuliwe "Ukufunda iSSH" ngokuqinisekileyo umxholo ocacisayo uya kuba ngumphelelisi omkhulu kupapasho lwangaphambili enxulumene ne-OpenSSH. Ngaloo ndlela, ukwenza uqhagamshelo olungcono noluntsonkothileyo olukude. kwaye ubaleke izicwangciso ezikhuselekileyo nezithembekileyo, usebenzisa iprotocol yoqhagamshelo olukude nolukhuselekileyo.

Ukuba uyayithanda le post, qiniseka ukuba uphawule ngayo kwaye wabelane ngayo nabanye. Kwaye khumbula, ndwendwela wethu «iphepha lasekhaya» ukuphonononga ezinye iindaba, kunye nokujoyina ijelo lethu elisemthethweni le- ITelegram ye DesdeLinux, Bucala ngasekunene iqela ngolwazi oluthe vetshe ngesihloko sanamhlanje.