CentOS7搭建SSH服务器实现远程免密登陆

红太狼 2023-06-15 06:54 30阅读 0赞

## **ssh免密登录** ##

### **（1）查看是否安装ssh服务器** ###

\[root@localhost ~\]\# rpm -qa|grep ssh-server

openssh-server-7.4p1-16.el7.x86\_64//已经安装了，如果没有安装执行第（2）步安装。

### **（2）安装telnet-server** ###

\[root@localhost etc\]\# yum install openssh-server

### **（3）配置SSH服务器** ###

**（3-1）通过口令验证方式登录**

**1）**用vim编辑器或vi编辑器打开sshd\_config

vim /etc/ssh/sshd\_config

**2）**修改配置文件

Port 22  
PermitRootLogin no //禁止root账户远程登录  
PasswordAuthentication yes//启用口令认证方式  
PermitEmptyPasswords no//禁止使用空密码  
LoginGraceTime 2m//重复验证时间为2分钟  
MaxAuthTries 6//最大重试次数  
修改好后保存退出（:wq）

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70][]

**3）**重启sshd服务

service sshd restart

或systemctl restart sshd.service

**（3-2）通过秘钥对验证方式登录**

**1）**生成默认格式的密匙key。

此过程会在/root/.ssh/文件件夹下生成id\_rsa(私钥）和id\_rsa.pub(公钥）。

\[root@mylocalhost ~\]$ ssh-keygen -t rsa

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 1][]

**2）**查看/root/.ssh/目录

![20191120211509755.png][]

**3）**查询服务端（其他客户端）IP地址

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 2][]

**4）**将客户端公钥发送给服务端（其他客户端）

ssh-copy-id  [msfadmin@192.168.1.164][msfadmin_192.168.1.164]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 3][]

**5）**经过ssh-copy-id后接收公钥的服务端会把公钥追加到服务端对应用户的$HOME/.ssh/authorized\_keys文件中

![20191120211756803.png][]

**6）**ssh免密登录

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 4][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20191120211214349.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20191120211419362.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY=,size_16,color_FFFFFF,t_70
[20191120211509755.png]: https://img-blog.csdnimg.cn/20191120211509755.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20191120211607849.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY=,size_16,color_FFFFFF,t_70
[msfadmin_192.168.1.164]: mailto:msfadmin@192.168.1.164
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/2019112021171275.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY=,size_16,color_FFFFFF,t_70
[20191120211756803.png]: https://img-blog.csdnimg.cn/20191120211756803.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/2019112021182470.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2R5d182NjY2NjY=,size_16,color_FFFFFF,t_70