This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
сервис_ssh [2022/10/02 09:20] val [Аутентификация с использованием ключей ssh] |
сервис_ssh [2024/05/07 16:04] val [SSH вместо VPN (привязка к порту сервера)] |
||
---|---|---|---|
Line 13: | Line 13: | ||
* [[http://www.putty.org/|PuTTY]] | * [[http://www.putty.org/|PuTTY]] | ||
* [[https://the.earth.li/~sgtatham/putty/latest/w64/]] | * [[https://the.earth.li/~sgtatham/putty/latest/w64/]] | ||
+ | * [[http://val.bmstu.ru/unix/SSH/putty-64bit-0.76-installer.msi]] | ||
<code> | <code> | ||
Line 18: | Line 19: | ||
HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\SshHostKeys | HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\SshHostKeys | ||
+ | </code> | ||
+ | |||
+ | === MobaXterm === | ||
+ | |||
+ | * [[https://mobaxterm.mobatek.net/|MobaXterm]] | ||
+ | * [[https://bbs.archlinux.org/viewtopic.php?id=174595|Weird characters while pasting in terminal]] | ||
+ | <code> | ||
+ | printf "\e[?2004l" | ||
</code> | </code> | ||
Line 31: | Line 40: | ||
===== Настройка ssh сервера ===== | ===== Настройка ssh сервера ===== | ||
<code> | <code> | ||
- | gate# cat /etc/ssh/sshd_config | + | gate# cat /etc/ssh/sshd_config.d/my.conf |
</code><code> | </code><code> | ||
- | ... | ||
Port 2222 | Port 2222 | ||
- | ... | + | |
DenyUsers "user*" | DenyUsers "user*" | ||
- | ... | + | |
PermitRootLogin yes | PermitRootLogin yes | ||
- | ... | + | |
+ | #KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 | ||
+ | #HostkeyAlgorithms +ssh-dss,ssh-rsa | ||
</code> | </code> | ||
Line 61: | Line 71: | ||
$ mkdir .ssh/ | $ mkdir .ssh/ | ||
- | $ cat .ssh/config | + | $ cat ~/.ssh/config |
</code><code> | </code><code> | ||
Host * | Host * | ||
ServerAliveInterval 10 | ServerAliveInterval 10 | ||
- | #Host server2* | + | #Host gitlab* |
# Port 2222 | # Port 2222 | ||
- | # User backup | + | ## User root |
- | #Host switch* 192.168.X.3 192.168.X.4 192.168.X.5* | + | #Host switch* 192.168.X.5* |
# KexAlgorithms +diffie-hellman-group1-sha1 | # KexAlgorithms +diffie-hellman-group1-sha1 | ||
# Ciphers +aes128-cbc | # Ciphers +aes128-cbc | ||
Line 95: | Line 105: | ||
student@hostX$ cd /; sudo tar -cf - etc/ | ssh -l user1 gate "cat > etc.tar" | student@hostX$ cd /; sudo tar -cf - etc/ | ssh -l user1 gate "cat > etc.tar" | ||
- | server# ssh switch "show cdp neighbors" | + | server# ssh switch1 "show cdp neighbors" |
</code> | </code> | ||
==== SSH вместо RCP (SCP) ==== | ==== SSH вместо RCP (SCP) ==== | ||
+ | ==== SCP ==== | ||
<code> | <code> | ||
$ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unix/virus.zip . | $ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unix/virus.zip . | ||
Line 105: | Line 116: | ||
server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config | server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config | ||
+ | |||
+ | server# scp -3 192.168.X.101:/etc/docker/daemon.json gate:/etc/docker/daemon.json | ||
</code> | </code> | ||
Line 169: | Line 182: | ||
... | ... | ||
</code><code> | </code><code> | ||
- | lan# ssh -N -R 2222:localhost:22 user1@server.corpX.un | + | # cat /proc/sys/net/ipv4/ip_local_port_range |
+ | или | ||
+ | # sysctl net.ipv4.ip_local_port_range | ||
+ | |||
+ | lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=60 student@server.corpX.un | ||
+ | |||
+ | lan# ssh -N -R 61389:192.168.100+X.1NN:3389 student@server.corpX.un | ||
- | lan# ssh -N -R 3101:192.168.100+X.101:3389 user1@server.corpX.un | + | mobaxterm> ssh -N -R 61389:localhost:3389 student@server.corpX.un |
</code> | </code> | ||
Line 211: | Line 230: | ||
<code> | <code> | ||
- | node1:~# cat .ssh/config | + | node1:~# cat ~/.ssh/config |
</code><code> | </code><code> | ||
Host * | Host * | ||
Line 232: | Line 251: | ||
==== Парольная аутентификация ==== | ==== Парольная аутентификация ==== | ||
<code> | <code> | ||
- | # apt install sshpass | + | server# apt install sshpass |
- | [gate.isp.un:~] # sshpass -p '123' ssh 172.16.1.13 | + | server# sshpass -p 'strongpassword' ssh vagrant@node1 |
server# sshpass -p cisco ssh switchN | server# sshpass -p cisco ssh switchN | ||
Line 415: | Line 434: | ||
=== Настройка unix клиента ssh на использование GSSAPI === | === Настройка unix клиента ssh на использование GSSAPI === | ||
<code> | <code> | ||
- | client1# cat /etc/ssh/ssh_config | + | client1# less /etc/ssh/ssh_config |
</code><code> | </code><code> | ||
... | ... |