防止远程密码拦截破译，ssh验证和普通用户登录

添加用户：

useradd yang

生成秘钥

[[email protected] /]$ ssh-****** -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key(/home/yang/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):123456

Enter same passphrase again: 123456

Your identification has been saved in/home/yang/.ssh/id_rsa.

Your public key has been saved in/home/yang/.ssh/id_rsa.pub.

The key fingerprint is:

1d:1d:97:0c:c0:40:8f:a4:1a:b9:93:71:03:7a:d4:[email protected]

The key's randomart p_w_picpath is:

+--[ RSA 2048]----+

|   o. .+o..oo.. |

|   oo.o o.. oo  |

|  .=.+ . o .    |

|  ..B . . .     |

|   =.  S .      |

|   E.           |

|                 |

|                 |

|                 |

+-----------------+

修改权限：

[[email protected] yang]# chmod 700 .ssh

[[email protected] yang]# cd .ssh

[[email protected] .ssh]# ll

总用量 8

-rw------- 1 yang yang 1743 7月  14 03:22 id_rsa

-rw-r--r-- 1 yang yang  408 7月  14 03:22 id_rsa.pub

[[email protected] .ssh]# mv id_rsa.pubauthorized_keys

[[email protected] .ssh]# chmod 600authorized_keys

将私钥拷贝出来

修改ssh配置文件

Vim /etc/ssh/sshd_config

42: PermitRootLogin no        #禁止root登陆

47:RSAAuthentication yes       #RSA验证

48:PubkeyAuthentication yes     #公钥验证

49: AuthorizedKeysFile      .ssh/authorized_keys   #加载秘钥

66: PasswordAuthentication no    #禁止密码登录

重启ssh

Service sshd restart

Xshell登录

导入刚拷贝的私钥

输入密码登录