OpenSSH
Fampidirana
Na dia efa mipetraka @ ireo Linux/*BSD/MacOsX/Unix maro samihafa aza ny OpenSSH dia matetika tsy manaraka ny dingana farany izany. Tsara ho an'ny mpitantana milina ny mahazo ny fametrahana sy ny fampiasana tsara an'ny OpenSSH. Miezaka hanazavana izay isika amin'ireo andiana lahatsoratra mikasika an'ny OpenSSH.
Rado Ramarotafika <rado@linuxmg.org>
 OpenSSH: Mpizara/Mpangataka (Tapany I) Inona moa OpenSSHSSH, Secure SHell, dia "protocol" fa tsy kirakira. T@ taona 1995, Tatu Ylönen, avy any Finlande, dia namoaka ny SSH-1. Misy "version" 1.3 sy 1.5 ny SSH-1. Noho ny fisian’ny olana teo @ fampiasana ny SSH-1 dia nivoaka ny SSH-2 taona vitsy taty aoriana. Maro ireo kirakira nanao ny "implementation" ny SSH. Amin’ny ireo kirakira "Open Source" dia "OpenSSH" no azo lazaina fa matotra indrindra. OpenSSH dia afaka mampiasa ny SSH-1 sy SSH-2. Atao inona OpenSSH
Compilation sy Fametrahana OpenSSH
Raha tsy mbola misy ireo kirakira ireo ao @ milina ampiasainao dia apetrao aloha izany alohan’ny hanohizana ny voalaza eto ambany. Azo atao koa ny mametraka avy hatrany ny OpenSSH avy @ fonosan’ny "distribution" ampiasaina.
Aza adino koa ny maka ny sonia pgp ’ny tahiry (openssh-3.8p1.tar.gz.sig).
[root@rado src]# gpg openssh-3.8p1.tar.gz.sig gpg: Signature faite mar 24 fév 2004 07:23:50 CET avec une clé DSA ID 86FF9C48 gpg: Impossible de vérifier la signature: clé publique non trouvée
Arak’io voasoratra io dia mbola tsy azo ny "clé publique" ny sonia "ID 82FF9CF48)
[root@rado src]# gpg --keyserver pgpkeys.mit.edu --recv-keys 86FF9C48 gpg: clé 86FF9C48: clé publique "Damien Miller (Personal Key) <djm@mindrot.org>" importée gpg: Quantité totale traitée: 1 gpg: importée: 1
[root@rado src]# gpg --verify openssh-3.8p1.tar.gz.sig openssh-3.8p1.tar.gz gpg: Signature faite mar 24 fév 2004 07:23:50 CET avec une clé DSA ID 86FF9C48 gpg: Bonne signature de "Damien Miller (Personal Key) <djm@mindrot.org>" gpg: vérifier la base de confiance gpg: no ultimately trusted keys found gpg: ATTENTION: Cette clé n'est pas certifiée avec une signature de confiance ! gpg: Rien ne dit que la signature appartient à son propriétaire. Empreinte de clé principale: 3981 992A 1523 ABA0 79DB FC66 CE8E CB03 86FF 9C48
[root@linux openssh-3.8p1]# ./configure --prefix=/usr --sysconfdir=/etc/ssh --infodir=/usr/share/info/ --mandir=/usr/share/man --with-mantype=man --enable-utmp --enable-wtmp --with-pam --with-tcp-wrappers --with-ssl-dir=/usr/local/ssl ...
OpenSSH has been configured with the following options: User binaries: /usr/bin System binaries: /usr/sbin Configuration files: /etc/ssh Askpass program: /usr/libexec/ssh-askpass Manual pages: /usr/share/man/manX PID file: /var/run Privilege separation chroot path: /var/empty sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin Manpage format: man PAM support: yes KerberosV support: no Smartcard support: no S/KEY support: no TCP Wrappers support: yes MD5 password support: yes IP address in $DISPLAY hack: no Translate v4 in v6 hack: yes BSD Auth support: no Random number source: OpenSSL internal ONLY Host: i686-pc-linux-gnu Compiler: gcc Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized Preprocessor flags: -I/usr/local/ssl/include Linker flags: -L/usr/local/ssl/lib Libraries: -lwrap -lpam -ldl -lresolv -lcrypto -lutil -lz -lnsl -lcrypt PAM is enabled. You may need to install a PAM control file for sshd, otherwise password authentication may fail. Example PAM control files can be found in the contrib/ subdirectory
Noho izany dia mila mpampiasa tsy manana "privilege" eo @ "système". Handeha hametraka io mampiasa io isika:
[root@linux openssh-3.8p1]# groupadd -g 76 sshd [root@linux openssh-3.8p1]# adduser -u 76 -g sshd -d /var/empty -s /bin/true sshd [root@linux openssh-3.8p1]# chown root:root /var/empty
[root@linux openssh-3.8p1]# make install ... mkdir /etc/ssh Generating public/private rsa1 key pair. Your identification has been saved in /etc/ssh/ssh_host_key. Your public key has been saved in /etc/ssh/ssh_host_key.pub. The key fingerprint is: ed:dc:b6:ca:1b:1a:8e:f4:04:1c:6b:1a:6b:99:22:f6 root@rado.linuxmg.org Generating public/private dsa key pair. Your identification has been saved in /etc/ssh/ssh_host_dsa_key. Your public key has been saved in /etc/ssh/ssh_host_dsa_key.pub. The key fingerprint is: 6e:2f:41:41:70:c9:f2:6d:37:ee:50:60:bb:31:68:90 root@rado.linuxmg.org Generating public/private rsa key pair. Your identification has been saved in /etc/ssh/ssh_host_rsa_key. Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub. The key fingerprint is: 05:b0:b8:e3:d2:37:b0:6b:f8:fc:f3:26:14:20:5f:b3 root@rado.linuxmg.org /usr/sbin/sshd -t -f /etc/ssh/sshd_config
Fanamarinana
[r4d0@rado r4d0]$ ssh -V OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7d 17 Mar 2004
[rado@rado ~]$ sudo /usr/sbin/sshd [rado@rado ~]$ netstat -at |grep ssh tcp 0 0 *:ssh *:* LISTEN [rado@linux ~]$ telnet localhost 22 Trying 127.0.0.1... Connected to localhost (127.0.0.1). Escape character is '^]'. SSH-1.99-OpenSSH_3.8p1 ^] telnet> quit Connection closed.
Ao @ "répertoire" "contrib/" ’ny "source OpenSSH" dia mizy "script" azo ampiasaina apetraka ao @ init.d. Alaivo izay script tandrify ny "distribution" ampiasainao. Configuration serveur :sshdRaha nanaraka ny toro-marika tetsy ambony ianao dia ao @ /etc/ssh/sshd_config ny fichier "configuration ny serveur sshd". Handeha ary hijery ny safidy ("options") tsara apetraka momba ny sshd. Tsy ho ary voatanisa eto avokoa ireo safidy ireo saingy izay hazavaina eto ambany dia ireo safidy izay tsara ampisaina indrindra @ lafiny "sécurité". Araka ny voalaza teo @ fampidirana sy ny resaka "privilege separation" etsy ambony dia tsy hampiasa ny "protocol SSH-1" isika. Tsy io ihany ny antony fa mbola misy hafa koa izay mety ho hitantsika eto @ manaraka.
Raha misy tsy metyRaha misy tsy mety eo @ "sshd" dia afaka mandefa azy miaraka @ safidy "-d" ianao mandram-pahita ny tsy mety. Azo ampiana ny safidy "-e" koa izany.
[root@linux ~]sshd -d -e
Mbola hitohyHo hitantsika @ manaraka ny momba ny:
|
Hanoloana ny telnet sy ny rsh izay tsy misy "cryptage" 
