Differences

This shows you the differences between two versions of the page.

--- сервис_ssh [2024/05/15 13:02]
val [Использование SSH Chroot]
+++ сервис_ssh [2026/09/17 14:53] (current)
val [Настройка ssh сервера]
@@ Line 2: / Line 2: @@
   * [[http://ru.wikipedia.org/wiki/SSH|SSH (wikipedia)]]
+  * [[https://habr.com/ru/articles/747080/|SSH с высоты птичьего полёта, или разгребаем кучи ключей]]
   * [[https://www.serfish.com/console/|Web-based access to any SSH server]]
   * [[http://linux.bolden.ru/ssh-tunnels/|Подробный анализ теории и практики использования SSH-туннелей]]
   * [[https://m.habr.com/post/435546/|Практические советы, примеры и туннели SSH]]
+  * [[https://habr.com/ru/articles/122445/|Памятка пользователям ssh]]
 ===== Установка =====
@@ Line 10: / Line 12: @@
 ==== Windows ====
+=== Windows Power Shell ===
+<code>
+$ export NO_COLOR=1
+</code>
 === PuTTY ===
   * [[http://www.putty.org/|PuTTY]]
@@ Line 33: / Line 39: @@
   * [[https://winscp.net/eng/docs/lang:ru|WinSCP]]
   * [[http://val.bmstu.ru/unix/SSH/WinSCP-5.19.2-Setup.exe]]
+=== Tabby ===
+  * [[https://tabby.sh/|A terminal for the modern age]]
 ==== Ubuntu/Debian ====
 <code>
@@ Line 40: / Line 50: @@
 ===== Настройка ssh сервера =====
 <code>
+gate# less /etc/ssh/sshd_config
+</code><code>
+...
+#PermitRootLogin prohibit-password
+...
+Include /etc/ssh/sshd_config.d/*.conf
+...
+</code><code>
 gate# cat /etc/ssh/sshd_config.d/my.conf
 </code><code>
@@ Line 50: / Line 68: @@
 #KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1
 #HostkeyAlgorithms +ssh-dss,ssh-rsa
+#PubkeyAcceptedKeyTypes +ssh-dss,ssh-rsa
 </code>
@@ Line 60: / Line 79: @@
 <code>
 gate# ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub
+</code>
+<code>
+ubuntu24# systemctl edit ssh.socket
+...
+[Socket]
+ListenStream=
+ListenStream=0.0.0.0:2222
+...
+ubuntu24# systemctl restart ssh.socket
 </code>
@@ Line 79: / Line 107: @@
 #        Port 2222
 ##        User root
+#Host gate
+#    HostName 192.168.X.1
+#    User root
+#    IdentityFile ~/.ssh/id_rsa
 #Host switch* 192.168.X.5*
@@ Line 86: / Line 119: @@
 #        StrictHostKeyChecking=no
 #        LogLevel ERROR
+#        HostKeyAlgorithms +ssh-rsa
-###    HostKeyAlgorithms +ssh-rsa
+#        PubkeyAcceptedKeyTypes +ssh-rsa
-###    PubkeyAcceptedKeyTypes +ssh-rsa
 </code>
@@ Line 117: / Line 149: @@
 server# scp switchN:running-config /srv/tftp/switchN-running-config
+deb12_ub24# scp -O switchN:running-config /srv/tftp/switchN-running-config
 server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config
@@ Line 139: / Line 172: @@
        ForceCommand internal-sftp
 </code><code>
-# chown root ~user1/
+# chown root:www-data ~user1/
+debian13# chmod 755 ~user1/
 # mkdir ~user1/public_html && chown user1:user1 ~user1/public_html/
@@ Line 161: / Line 196: @@
 ==== SSH вместо VPN (привязка к порту клиента) ====
+==== Local Port Forwarding Tunnel ====
 <code>
 windows desktop
@@ Line 176: / Line 214: @@
 ==== SSH вместо VPN (привязка к порту сервера) ====
+==== Remote Port Forwarding Tunnel ====
   * [[Управление сервисами в Linux]]
+  * [[Управление ядром и модулями в Linux#Переменные ядра]]
 <code>
@@ Line 186: / Line 226: @@
 ...
 </code><code>
-# cat /proc/sys/net/ipv4/ip_local_port_range
+lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=5 -o ServerAliveCountMax=1 -o ExitOnForwardFailure=yes student@server.corpX.un
-  или
-# sysctl net.ipv4.ip_local_port_range
-lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=60 student@server.corpX.un
 lan# ssh -N -R 61389:192.168.100+X.1NN:3389 student@server.corpX.un
@@ Line 206: / Line 242: @@
 </code><code>
 ...
-Match Address 192.168.X.1
+#AllowUsers root user*@10.5.*.*
+...
+Match Address 192.168.*.*,172.16.*.*
        PermitRootLogin yes
 </code>
@@ Line 270: / Line 308: @@
 === Настройка sshd на использование ключей ===
 <code>
-gate# less /etc/ssh/sshd_config
+# less /etc/ssh/sshd_config
 </code><code>
 ...
@@ Line 280: / Line 318: @@
 === Генерация ключей ===
 <code>
-user1@client1:~$ ssh-keygen
+# ssh-keygen
 </code><code>
 ...
-Enter passphrase (empty for no passphrase): password1
+Enter passphrase (empty for no passphrase): ENTER
 ...
 </code><code>
-user1@client1:~$ ls .ssh/
+# ls .ssh/
 </code>
@@ Line 294: / Line 332: @@
 <code>
-linux$ ssh-copy-id gate
+# ssh-copy-id userX@gate.isp.un
-linux$ ssh-copy-id server
-freebsd$ ssh-copy-id -i .ssh/id_rsa.pub gate
 </code>

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools