Differences

This shows you the differences between two versions of the page.

--- сервис_ssh [2021/03/04 13:37]
val [Аутентификация с использованием протокола GSSAPI]
+++ сервис_ssh [2024/02/22 07:51]
val [SSH вместо RCP (SCP)]
@@ Line 10: / Line 10: @@
 ==== Windows ====
+=== PuTTY ===
   * [[http://www.putty.org/|PuTTY]]
-  * [[http://val.bmstu.ru/unix/SSH/putty-settings.zip]]
+  * [[https://the.earth.li/~sgtatham/putty/latest/w64/]]
+  * [[http://val.bmstu.ru/unix/SSH/putty-64bit-0.76-installer.msi]]
 <code>
@@ Line 18: / Line 20: @@
 HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\SshHostKeys
 </code>
+=== MobaXterm ===
+  * [[https://mobaxterm.mobatek.net/|MobaXterm]]
+  * [[https://bbs.archlinux.org/viewtopic.php?id=174595|Weird characters while pasting in terminal]]
+<code>
+printf "\e[?2004l"
+</code>
+=== WinSCP ===
   * [[https://winscp.net/eng/docs/lang:ru|WinSCP]]
-  * [[http://val.bmstu.ru/unix/SSH/winscp433setup.exe]]
+  * [[http://val.bmstu.ru/unix/SSH/WinSCP-5.19.2-Setup.exe]]
 ==== Ubuntu/Debian ====
 <code>
@@ Line 36: / Line 48: @@
 ...
 PermitRootLogin yes
+...
+#KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1
+#HostkeyAlgorithms +ssh-dss,ssh-rsa
 ...
 </code>
@@ Line 50: / Line 65: @@
 ===== Настройка ssh клиента =====
+  * [[Утилита corkscrew]]
 <code>
+$ sftp -P 2222 -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no user3@localhost
 $ mkdir .ssh/
@@ Line 58: / Line 78: @@
   ServerAliveInterval 10
-#Host server2*
+#Host gitlab*
 #        Port 2222
-#        User backup
+##        User root
-#Host 172.16.1.* 192.168.*.* *.corpX.un
+#Host switch* 192.168.X.5*
-#        UserKnownHostsFile=/dev/null
-#        StrictHostKeyChecking=no
-#Host switch* 192.168.X.3 192.168.X.4 192.168.X.5
 #        KexAlgorithms +diffie-hellman-group1-sha1
 #        Ciphers +aes128-cbc
+#        UserKnownHostsFile=/dev/null
+#        StrictHostKeyChecking=no
+#        LogLevel ERROR
 </code>
@@ Line 88: / Line 107: @@
 student@hostX$ cd /; sudo tar -cf - etc/ | ssh -l user1 gate "cat > etc.tar"
-server# ssh switch "show cdp neighbors"
+server# ssh switch1 "show cdp neighbors"
 </code>
 ==== SSH вместо RCP (SCP) ====
+==== SCP ====
 <code>
-$ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unijava/jre-8u211-windows-x64.exe .
+$ scp -P 2222 val@radio.specialist.ru:/usr/local/www/apache22/data/unix/virus.zip .
 server# scp switchN:running-config /srv/tftp/switchN-running-config
 server# sshpass -p cisco scp switchN:running-config /srv/tftp/switchN-running-config
+server# scp -3 192.168.X.101:/etc/docker/daemon.json gate:/etc/docker/daemon.json
 </code>
@@ Line 162: / Line 184: @@
 ...
 </code><code>
-lan# ssh -N -R 2222:localhost:22 user1@server.corpX.un
+# cat /proc/sys/net/ipv4/ip_local_port_range
+lan# ssh -N -R 61022:localhost:22 -o ServerAliveInterval=60 user1@server.corpX.un
 lan# ssh -N -R 3101:192.168.100+X.101:3389 user1@server.corpX.un
@@ Line 178: / Line 202: @@
 </code>
+==== Управление доступом на основе членства в группе ====
+Пример использования отдельного файла конфигурации
+<code>
+gate# cat /etc/ssh/sshd_config.d/my.conf
+</code><code>
+#AllowGroups sudo
+#DenyGroups group1 group2
+</code>
 ==== Запрет Forwarding портов ====
@@ Line 214: / Line 249: @@
 ==== Парольная аутентификация ====
 <code>
-[gate.isp.un:~] # apt install sshpass
+server# apt install sshpass
-[gate.isp.un:~] # sshpass -p '123' ssh 172.16.1.13
+server# sshpass -p 'strongpassword' ssh vagrant@node1
 server# sshpass -p cisco ssh switchN
@@ Line 227: / Line 262: @@
 === Настройка sshd на использование ключей ===
 <code>
-gate# cat /etc/ssh/sshd_config
+gate# less /etc/ssh/sshd_config
 </code><code>
 ...
-PubkeyAuthentication yes
+#PubkeyAuthentication yes
 #AuthorizedKeysFile     %h/.ssh/authorized_keys
 ...
@@ Line 297: / Line 332: @@
 === Регистрация принципалов сервиса в KDC и перемещение ключа сервиса на сервер ===
+  * [[https://www.altlinux.org/%D0%A1%D0%BE%D0%B7%D0%B4%D0%B0%D0%BD%D0%B8%D0%B5_SPN_%D0%B8_Keytab_%D1%84%D0%B0%D0%B9%D0%BB%D0%B0|Создание SPN и Keytab файла при использовании DC Windows, DC FreeIPA, ...]]
 == Debian/Ubuntu (MIT) ==
@@ Line 346: / Line 383: @@
 C:\>pscp gatehost.keytab gate:
+</code>
+== Samba4 ==
+<code>
+server# samba-tool user create gatehost
+server# samba-tool user setexpiry gatehost --noexpiry
+server# samba-tool spn add host/gate.corpX.un gatehost
+server# samba-tool spn list gatehost
+server# samba-tool domain exportkeytab gatehost.keytab --principal=host/gate.corpX.un
 </code>
@@ Line 382: / Line 432: @@
 === Настройка unix клиента ssh на использование GSSAPI ===
 <code>
-client1# cat /etc/ssh/ssh_config
+client1# less /etc/ssh/ssh_config
 </code><code>
 ...
@@ Line 411: / Line 461: @@
 user1@client1$ ssh -vv gate.corpX.un
+gate# service ssh stop
+gate# mkdir /run/sshd
 gate# /usr/sbin/sshd -d
 </code>

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools