Ukudlulisa i-ejenti ye-SSH noma ukukopisha ukhiye: yini empeleni evuzayo

Ukungena ngokhiye womphakathi kuthumela isiginesha, hhayi ukhiye oyimfihlo. Ukudlulisa i-ejenti kusaqhubeka kunikeza enye i-host amandla okusayina, futhi lokho kuwukuchayeka okuhlukile.

Izehlakalo ezimbili ezihlukene zibizwa ngokuthi ukhiye we-SSH ovuzile, futhi zidinga izimpendulo ezihlukene. Ukuqinisekisa ngokhiye womphakathi kuthumela ukhiye womphakathi nesiginesha esenziwe ngokhiye oyimfihlo, ngakho ukhiye oyimfihlo awusoze waba insimu esicelweni. Ukudlulisa i-ejenti kwembula enye into, ngoba i-host ekude engafinyelela i-ejenti yakho edlulisiwe ingayicela ukuthi isayine ngaphandle kokuba nokhiye nhlobo. Uma lezi zimbili zithathwa njengesigameko esisodwa, umphumela uba wukushintshwa kokhiye okungenanjongo noma ukunikezelwa okuqhubeka kusebenza.

Ukungena ngokhiye womphakathi kudlulisa isiginesha, hhayi ukhiye

Ukushintshana kokuqinisekisa kuthwala ukhiye womphakathi womsebenzisi nesiginesha phezu kwedatha yesikhathi. Iseva ihlola leso siginesha ngokhiye esivele iwuthembile, yingakho uhlangothi oluyimfihlo lungahlala kuklayenti ngisho ngaphesheya kwenethiwekhi engathembekile. Umqhubi we-VPN obuka umhubhe ubona isikhathi se-SSH esibethelwe noma kunjalo.

Lokho kuchaza iphrothokholi, hhayi ukwethembeka kwendawo ngayinye yokugcina endleleni. Gcina ukuqinisekiswa kobunikazi be-host kugcwele, ngoba iklayenti elamukela noma yimuphi ukhiye we-host liyeke elinye ilawulo elihlukile kunalelo okuxoxwa ngalo. Isikhathi esithunjiwe nokhiye othunjiwe kuyimiphumela ehlukene, futhi kukodwa kuphela kwayo okuwukulahlekelwa yizifakazelo. Gcina kokubili emigqeni ehlukene yombiko.

ssh-keygen -lf ~/.ssh/id_ed25519.pub
ssh -o StrictHostKeyChecking=yes [email protected]

Umyalo wokuqala uphrinta umnyatselo womphakathi ukuze uwuqhathanise nalokho okushiwo yiseva. Owesibili wenza ukuhlolwa kokhiye we-host kucace esikhundleni sokuthembela kokuzenzakalelayo okungekho muntu owakufundayo. Sebenzisa kokubili ngaphambi kokushintsha noma yini mayelana okhiye, ukuze umugqa wesisekelo ubhalwe phansi.

Ukudlulisa i-ejenti kudlulisela amandla okusayina

Uma ukudlulisa kuvuliwe, kuvela isokhethi kwi-host ekude futhi i-ejenti yasendaweni iphendula izicelo ezingena ngayo. Noma ubani ongasebenzisa leso sokhethi phakathi nesikhathi angaziqinisekisa njengawe kuma-host alamukela ubunikazi obulayishiwe. Akukho khiye oyimfihlo owela inethiwekhi ukuze lokho kusebenze.

Okuchayekayo yikhono, hhayi ifayela. Yingakho ukudlulisa kungokomsebenzi oqanjwe ngegama ne-host eqanjwe ngegama, hhayi konke ukuxhumana okwenziwa ikhompyutha ephathekayo. I-host yokugxuma edlulisa ukuxhumana ngaphandle kwe-ejenti edlulisiwe ivamise ukususa ngokuphelele isidingo.

ssh-add -l
ssh -o ForwardAgent=no [email protected]
ssh -J [email protected] [email protected]

Eyokuqala ibala ukuthi i-ejenti inobunikazi buni manje, okuwukuhle ukukwazi ngaphambi kokunikeza isokhethi yayo komunye umshini. Eyesibili ixhumanisa ngaphandle kokunikezelwa. Eyesithathu ikhombisa iphethini ye-host yokugxuma evamise ukuthatha indawo yokudlulisa ngokuphelele.

Khetha impendulo ngokobufakazi onabo

Ubunikazi bokusayina obukholelwa ukuthi buchayiwe budinga inqubo yokushintsha nokuhoxiswa, kanye nokususa ukwamukelwa kwayo ezinsizeni ezaziyethemba. Ukususa ikhophi kukhompyutha yakho ephathekayo kushiya zonke ezinye izikhathi zingathintwanga. Qala ngezinsizakalo, bese uhlanza amaklayenti.

Inkinga yesikhashana yokunikezelwa incane. Misa ukudlulisa obekungadingeki, futhi ubuyekeze nomnikazi wesigameko ukuthi yiziphi izikhathi nobunikazi obekukuhlanganisa. Ukushintshwa kokhiye kungalandela, kodwa ubufakazi buyakunquma lokho, hhayi ukukhathazeka.

Ukungabikho kokuthunyelwa ngaphandle okuboniweyo kufakazela kuphela ukuthi indlela obekuyisaba ayivelanga. Akusho lutho mayelana nokuthi yini enye i-host engakwelinye uhlangothi lwaleso sokhethi eyayingayenza.

Gcina izilawulo zihlukene embikweni

Vikela into eyimfihlo, khawulela ukuthi ubani ongacela kuyo isiginesha, gcina ubunikazi bohlangothi olunye buqinisekisiwe. Lezo yizilawulo ezintathu eziqinisa ezinye, futhi akukho nolunye oluthatha indawo yolunye uma uchaza ukuthi kwenzekeni.

Ikhompyutha ephathekayo ehlulekile noma uhlelo olunamalungelo kuyo yisimo sesithathu esinomthelela obanzi kakhulu. Ukushintsha umzila we-VPN akukuxazululi futhi akubuyiseli ukuthembela kukhiye okungenzeka ukuthi wafundwa kudiski.

Bhala ukuthi iyiphi ingxenye eyathenjwa, ukuthi ukudlulisa bekukhona yini, nokuthi yini ebibonwa ngempela. Lowo mbhalo yiwona owenza isinqumo esilandelayo sivikeleke esikhundleni sokuqagela ngokuthi kusho ukuthini ukuvuza.

Izihloko ezihlobene