User Tools
сервис_ssh
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_ssh [2024/12/28 11:52] val [Настройка ssh сервера] |
сервис_ssh [2026/07/24 08:15] (current) val [Использование SSH Chroot] |
||
|---|---|---|---|
| Line 6: | Line 6: | ||
| * [[http://linux.bolden.ru/ssh-tunnels/|Подробный анализ теории и практики использования SSH-туннелей]] | * [[http://linux.bolden.ru/ssh-tunnels/|Подробный анализ теории и практики использования SSH-туннелей]] | ||
| * [[https://m.habr.com/post/435546/|Практические советы, примеры и туннели SSH]] | * [[https://m.habr.com/post/435546/|Практические советы, примеры и туннели SSH]] | ||
| + | * [[https://habr.com/ru/articles/122445/|Памятка пользователям ssh]] | ||
| ===== Установка ===== | ===== Установка ===== | ||
| Line 34: | Line 35: | ||
| * [[https://winscp.net/eng/docs/lang:ru|WinSCP]] | * [[https://winscp.net/eng/docs/lang:ru|WinSCP]] | ||
| * [[http://val.bmstu.ru/unix/SSH/WinSCP-5.19.2-Setup.exe]] | * [[http://val.bmstu.ru/unix/SSH/WinSCP-5.19.2-Setup.exe]] | ||
| + | |||
| + | === Tabby === | ||
| + | |||
| + | * [[https://tabby.sh/|A terminal for the modern age]] | ||
| ==== Ubuntu/Debian ==== | ==== Ubuntu/Debian ==== | ||
| <code> | <code> | ||
| Line 51: | Line 56: | ||
| #KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 | #KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 | ||
| #HostkeyAlgorithms +ssh-dss,ssh-rsa | #HostkeyAlgorithms +ssh-dss,ssh-rsa | ||
| + | #PubkeyAcceptedKeyTypes +ssh-dss,ssh-rsa | ||
| </code> | </code> | ||
| Line 67: | Line 73: | ||
| [Socket] | [Socket] | ||
| ListenStream= | ListenStream= | ||
| - | ListenStream=2222 | + | ListenStream=0.0.0.0:2222 |
| ... | ... | ||
| ubuntu24# systemctl restart ssh.socket | ubuntu24# systemctl restart ssh.socket | ||
| Line 149: | Line 155: | ||
| ForceCommand internal-sftp | ForceCommand internal-sftp | ||
| </code><code> | </code><code> | ||
| - | # chown root ~user1/ | + | # chown root:www-data ~user1/ |
| + | |||
| + | debian13# chmod 755 ~user1/ | ||
| # mkdir ~user1/public_html && chown user1:user1 ~user1/public_html/ | # mkdir ~user1/public_html && chown user1:user1 ~user1/public_html/ | ||
| Line 171: | Line 179: | ||
| ==== SSH вместо VPN (привязка к порту клиента) ==== | ==== SSH вместо VPN (привязка к порту клиента) ==== | ||
| + | |||
| + | ==== Local Port Forwarding Tunnel ==== | ||
| + | |||
| <code> | <code> | ||
| windows desktop | windows desktop | ||
| Line 186: | Line 197: | ||
| ==== SSH вместо VPN (привязка к порту сервера) ==== | ==== SSH вместо VPN (привязка к порту сервера) ==== | ||
| + | ==== Remote Port Forwarding Tunnel ==== | ||
| * [[Управление сервисами в Linux]] | * [[Управление сервисами в Linux]] | ||
| + | * [[Управление ядром и модулями в Linux#Переменные ядра]] | ||
| <code> | <code> | ||
| Line 196: | Line 209: | ||
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | # cat /proc/sys/net/ipv4/ip_local_port_range | + | lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=5 -o ServerAliveCountMax=1 -o ExitOnForwardFailure=yes student@server.corpX.un |
| - | или | + | |
| - | # sysctl net.ipv4.ip_local_port_range | + | |
| - | + | ||
| - | lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=60 student@server.corpX.un | + | |
| lan# ssh -N -R 61389:192.168.100+X.1NN:3389 student@server.corpX.un | lan# ssh -N -R 61389:192.168.100+X.1NN:3389 student@server.corpX.un | ||
| Line 282: | Line 291: | ||
| === Настройка sshd на использование ключей === | === Настройка sshd на использование ключей === | ||
| <code> | <code> | ||
| - | gate# less /etc/ssh/sshd_config | + | # less /etc/ssh/sshd_config |
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 292: | Line 301: | ||
| === Генерация ключей === | === Генерация ключей === | ||
| <code> | <code> | ||
| - | user1@client1:~$ ssh-keygen | + | # ssh-keygen |
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | Enter passphrase (empty for no passphrase): password1 | + | Enter passphrase (empty for no passphrase): ENTER |
| ... | ... | ||
| </code><code> | </code><code> | ||
| - | user1@client1:~$ ls .ssh/ | + | # ls .ssh/ |
| </code> | </code> | ||
| Line 306: | Line 315: | ||
| <code> | <code> | ||
| - | linux$ ssh-copy-id gate | + | # ssh-copy-id userX@gate.isp.un |
| - | + | ||
| - | linux$ ssh-copy-id server | + | |
| - | + | ||
| - | freebsd$ ssh-copy-id -i .ssh/id_rsa.pub gate | + | |
| </code> | </code> | ||
сервис_ssh.1735375932.txt.gz · Last modified: 2024/12/28 11:52 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
