标签:
ssh配置文件
vi /etc/ssh/sshd_config
putty下载
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
公钥加密,私钥解密
打开puTTYgen 点击genenrate 生成公钥
设置一下密码
点击save private key 保存私钥到电脑
把公钥保存到
mkdir /root/.ssh
cd .ssh/
vim authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAj/bc0eyjQea1/zse4XW3b18qPbmIiCsydTJDOxvrL1+aobTWVbNeGPCdpm+zuS1uQwcZOTg+VuPVkuX1slqkwK/RFDAzVMtlg6UMoZmB6kLLLi4MhhgBfH1xS+NUtx6s7NIDLkvohW37t/aigXf7i9HDSLZBgSEPgTAfpapvahbjr2DiVISdKN4RD3S+b4JYkiX/cP5U8B0Pcq3+OzUU6qF0zERzxjSTwE1rZeoRheayGsgXiHuFLBS1UF3uJS0mDMPxY7/DtGVQDjwFClnVkAAIrR6CCWfR1C/83N/yke5AtVU3pFm9JNhnWdCD+j+pgYm1FegjVFxSEVP2cgsHzQ== rsa-key-20150623
chmod 600 /root/.ssh/
chmod 700 /root/.ssh/authorized_keys
iptables -F 清除这些规则
service iptables save
getenforce 查看selinux的状态
vi /etc/selinux/config 进去改他的配置文件 永久设置他的状态
setenforce 0 临时生效
最后打开putty 加载私钥进来SSH->auth
ssh配置文件
vi /etc/ssh/sshd_config 加下面这行禁止密钥登陆
PermitRootLogin without-password
不要远程root用户登录
[root@localhost ~]# vi /etc/ssh/sshd_config
#LoginGraceTime 2m
PermitRootLogin no 修改这里
#StrictModes yes
[root@localhost ~]# service sshd restart = /etc/init.d/sshd restart
标签:
原文地址:http://www.cnblogs.com/chenshoubiao/p/4606363.html