Linux pе -- SSH Server install - 鸟哥的 Linux 私房菜

H Openssh N Telnet su觋

̪sG2002/01/18

DzSo{A̪ Linux M󤤡AN telnet \ۡyw]ҰʡzAאּݭnѨϥΪ̶}ҪAH]NOA Red Hat b 7.x HApGzݭn telnet AȡAANnۦҰʥLA]LwgQưbyw]ҰʡzAȶؤ~FIOHoOѩ telnet bǰeƩΪ̬Obiu@ɭԡAOHyXzAӶǰeOAoˤ@ӡAߤHhH listen \ťAƫʥ]ɡAAҶǰeƱN|Q^ӾDѨFIҥHA򥻤WAOD`w@ضǿƤ觋I]Ab̪X Linux AҦp Red Hat 7.x AL̪ telnet AȴNwgAOyw]Ұʡz\FI

pGڭ̭nqݳsuDܡAӫHJMϥ telnet oةX觋椣qܡAڭ̭nϥΦؤ觋OHA{bn觋ӴѳINOϥ openssh oӮMաIo SSH AȡA̭nOiHϥΡyDXz觋ӶǰeAJƫʥ]A]NOAAƦbWAYϳQťӾDѨFAѩ SSH O@إ[KL᪺ʥ]AGӧYϳQѨFAӸƭngLѱK]OTѨYƱAҥHOANiHwu@աI~A SSH Pɤ]ѰtX PAM wҲաAP TCP Wrappers ʥ]]]NO /etc/hosts.allow P /etc/hosts.deny ^A]OAwʤ]N@oI~A̫KQ@IOAAiHϥ root g ssh nJADI

nFIUڭ̴Nӻ@AnpNA telnet 令H ssh ӳsOHѩ Red Hat 7.x HAw] ssh Oy}ҡzAAҥHAXGݭn]wNiHϥ ssh oApGO Red Hat 6.x HetΩOH]²檺AAunw˩UӮM]pzw Red Hat 6.x OHwˬD^NiHoI

DtΪ SSH ظmG

Red Hat 7.x tΡG

ѩ Red Hat 7.x tΥNwg}ҤF sshd FAҥHAiHH ssh ӳsWADoILApGS`} SSH ܡA˭npҰʩOH]O²檺AAiHoˡG

H y/usr/sbin/setupz {iJ setup ܭF
ySystem ServiceszoӶءF
MVUʨy [*] sshd zAN [*] Ŀ]UťYi^F
MH tab 䲾ʨy OK zU enterF

o˴N]w}ҰʤFIMHU觋ӱҰ ssh AȡG

/etc/rc.d/init.d/sshd start

ӱҰ sshd oӪAȡAnDS`Ұ ssh OHAunJUOG

netstat -a | more

pG@`ܡAAN|ݨUo@G

tcp 0 0 *:ssh *:* LISTEN

N ssh wg\ҰʤFILApGU@A Linux tΨèSw ssh oӪAȩOHINw˥LaIAssh oAȪDn{٬ openSSH oIMApGzQnw openssh Ӵ ssh AȡA Red Hat WHɧs Errata zNणhݬݡIAiHUsWh Red Hat UݩztΪ̷s openssh oӮMI

pU Errata

MUz Red Hat AiJAhM openssh rMAӴNOաIMUsAݩztΪAҦpڳO i386 RPM ɮסAM^ӥH root G

rpm -ivh openssh*

pGzuOnɯ openssh ܡANϥΡG

rpm -Uvh openssh*

󦳬ƪ̡AH up2date ӤɯšA]L|C@ǳI^

up2date -i openssh

ɯŦ\ANiHHW觋ӱҰ ssh oӪAȤFI

VBird g

bW@s openSSH M󪺮ɭԡAO]WoFª openssh i঳Ǧw譱DAҥH VBird NhsFAOSQs SSH M|ʡIuO~F@jIӡAF@ɮפA~o{Aӹw] PAM ҲժݩʷdFIAiH /etc/pam.d oӥؿUhݤ@UA|o{ sshd ݩʳMO 600APLɮݩʳPAӰFG

chmod 644 sshd

N OK oIpGA]so{oӰDAiHѦҬݬoI

Red Hat 6.x He Linux Ұ ssh AȡG

nFAnp󪺦b Red Hat 6.x HeW ssh oӪAȩOH]O²檺ApeһA ssh O openssh M󪺤@ءA

openssh

ϥΨ

openssl

oӸƫOKMA]٦LMݭnwˡALAѩڳo̹w]OzwgΡywˡzӦw˱z Linux tΡAҥHLMӳwgw˧F~I^ VBird Oܫĳϥ RPM Ӧw openssh A]b Red Hat 6.x HeWw openssh RPM bOӳ·ФFIҥHA

ڭ̴Nϥ tarball 觋Ӧw˧a

U openssl P opensshG

̤UOHL̪WhݬݬTaIثe(2002/01/18)Aopenssh ̷s 3.0.2 (2001/12/3 X)A openssl ̷shO 0.9.6c (2001/12/21) oӪG

openSSH

openSSL

Ϊ̱z]iHbo̤U OpenSSH P OpenSSL oɮסC

wˡG

ѩ openssh |ϥΨ openssl ơAҥHMݭnw openssl Abw openssh oG

[root @tsai root]# cd /usr/local/src
[root @tsai src]# tar -zxvf /root/openssh-3.0.2p1.tar.gz
[root @tsai src]# tar -zxvf /root/openssl-0.9.6c.tar.gz
[root @tsai src]# cd openssl-0.9.6c
[root @tsai openssl-0.9.6c]# ./config --prefix=./usr/local/openssl
NƦw˦b /usr/local/openssl oӥؿAo˦w˪nBOA
bӮMeIӥؿNnFI
......
[root @tsai openssl-0.9.6c]# make
}lsĶoI

[root @tsai openssl-0.9.6c]# make test
դ@UO_`AӤ|D~OI

[root @tsai openssl-0.9.6c]# make install
w˨ /usr/local/openssl oIw˦n openssl AL祃w
WN۰ʱҰʤFIM}lw openssh aI

[root @tsai openssl-0.9.6c]# cd ../openssh-3.0.2p1
[root @tsai openssh-3.0.2p1]# ./configure --prefix=/usr/local/openssh --with-pam --with-tcp-wrappers
`NIWOP@I --with-pam b[J PAM Ҳժw@A
--with-tcp-wrappers hO[J TCP Wrappers w@oI
......

[root @tsai openssh-3.0.2p1]# cd contrib/redhat
[root @tsai redhat]# cp sshd.pam /etc/pam.d/sshd
oӨBJbN PAM oӦwҲի PAM w]|hA
]NO /etc/pam.d oӥؿաIt~ASO`NA sshd
oɮתݩʥ 644 AөҦHO root ~A
_h ssh |ʡII

[root @tsai redhat]# cd ../..
[root @tsai openssh-3.0.2p1]# make <==sĶ
[root @tsai openssh-3.0.2p1]# make install

Wo˴Nw˧աI

ҰʡG

AӴNOݭnҰ SSH oӮMFAAӥiH /usr/local/openssh hAiJ

/usr/local/openssh/sbin

sshd

oɮסA]NOG

/usr/local/openssh/sbin/sshd

NҰʪ{oIpG۫HܡAN

netstat -a | more

ݬݦS ssh oӪAȧaI

JMҰʤF ssh telnet ۵MNݭn~sboISA] ssh iHN telnet \઺IҥHOAСG

vi /etc/inetd.conf

쩳Uo@G

telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd

be[W@ӵѲŸy#zNiHաIMhXAG

/etc/rc.d/init.d/inet restart

sҰ inet oӪAȡAMH

netstat -a | more

ݤ@UAKKKKI

telnet

AȴNFIڭ̴NiHϥ

ssh

ӨNoI

Τݪ SSH sun

Linux sysem:

nFA{bڭ̪DDiHϥ ssh ӶisuAȡAO˦bΤݡ] Client ^sunOHI²ApGAOH Linux tΨӳsuܡAAӥiHb /usr/bin ̭@ ssh nA]pGOϥ tarball ܡA ssh N|b

/usr/local/openssh/bin

̭oI^AiHo˨Ӱsu{G

ssh -l username host.name.domain

]ڭnH vbird oӱbnJ@ӦW testing.adsldns.org DANHG

ssh -l vbird testing.adsldns.org

ӰnJsu{ǡIMpGOĤ@nJܡAA|o{즳@ӰTAiDAnn@ӻ{ҽXA yes NiHsuoIϥ ssh ̤jt@ӦnBA

root ]iHnJ

Windows system:

U@AOϥ Windows Client OH]SDAAiH PuTTy WU putty o{G

http://www.chiark.greenend.org.uk/~sgtatham/putty/

Ϊ̬Ob o UCo{ݭnwˡAHƹLAN|۰ʪFI

wʪ]w

nFIM openssh OwSAOäO@wwIҥHAAMiH]w@²檺w@Ө@ǰDo͡IAFANON@ǧAQnLnJ IP ױLNOFAMu}@ǥiHnJ IP NOFI

ѩ ssh oӪAȬO}Ҧb port 22 AҥHAiHϥ ipchains iptables Ӷ}@ǧA\ IP H port 22 iJI

TCP Wrappers:

pG|]w ipchains iptables A]SYIڭ̦bw˪ɭԤO --with-tcp-wrappers ܡHAoӮɭԴNWγFIAiH

/etc/hosts.allow

h]wA\ IP suAḒAҦpA\ 192.168.1.1-192.168.1.255 suADAAiHG

sshd : 192.168.1.0/24: Allow

ӱNL IP ױb

/etc/hosts.deny

sshd : ALL : Deny

p@ӫh ssh u|} 192.168.1.1-255 qoIHnA}񪺸ܡANANL IP [ /etc/hosts.allow hNnoI

2002/01/01HӲέpH