网络服务基础 -ssh

悠悠 2022-01-05 06:59 346阅读 0赞

# 1.什么是shh #

ssh是Secure Shell 的缩写，是一个建立在应用层上的远程管理协议。ssh是目前较为可靠的传输协议，专为远程登录会话和其他网络服务提供安全性。利用ssh协议可以有效地防止在传输过程中信息的泄露问题。  
ssh可用于大多数的UNIX和类UNIX操作系统中，能够实现字符界面的远程登录管理，它默认使用22端口，采用密文的形式在网络中传输数据，相对于通过明文传输的Telnet协议，具有更高的安全性。

## 2.ssh的登陆验证模式 ##

ssh提供了基于 **账户密码（口令）** 和 **密钥对** 两种登录验证模式，这两者都是通过密文传输数据的。

**账户密码验证：**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70]  
**公钥用来加密，私钥用来解密**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 1]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 2]

# 3.ssh配置 #

**3.1环境准备：**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 3]  
**3.2用户密码验证**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 4]  
**3.3密钥对验证登录**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 5]

[root@oracle ~]# ssh-keygen -t rsa -b 2048 
    Generating public/private rsa key pair.
    Enter file in which to save the key (/root/.ssh/id_rsa): 
    Enter passphrase (empty for no passphrase): 
    Enter same passphrase again: 
    Your identification has been saved in /root/.ssh/id_rsa.
    Your public key has been saved in /root/.ssh/id_rsa.pub.
    The key fingerprint is:
    34:2f:e9:9c:3e:78:69:e4:90:22:04:89:2b:eb:d0:d4 root@oracle
    The key's randomart image is:
    +--[ RSA 2048]----+
    |..               |
    |+                |
    | o .    o        |
    |o o E  . +       |
    |.=     .S .      |
    |o o . oo.o       |
    |o  . . =+.       |
    | .    ..*        |
    |       o..       |
    +-----------------+
    [root@oracle ~]# cd /root/.ssh/
    [root@oracle .ssh]# ll
    total 12
    -rw-------. 1 root root 1675 Jun 22 20:07 id_rsa
    -rw-r--r--. 1 root root  393 Jun 22 20:07 id_rsa.pub
    -rw-r--r--. 1 root root 1595 Jun 22 19:52 known_hosts
    [root@oracle .ssh]# ssh-copy-id root@192.168.197.135
    root@192.168.197.135's password: 
    Now try logging into the machine, with "ssh 'root@192.168.197.135'", and check in:
    
      .ssh/authorized_keys
    
    to make sure we haven't added extra keys that you weren't expecting.
    
    [root@oracle .ssh]# cat id_rsa.pub 
    ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA738BEBXsvCaMwSqjD/wy1AHqeEX4HGgJL9YTHbFFOdvie1EmBy/8YuvJUyhCTfIBaVulT+/yAOszft75+n5DSF4wRW4JnvZu/+xVwi5v3ZRYqOadlOklacXbjV/+TyzPieKU3f0Nr97hjoWgnJIrGH34H1xSaCbPDItwU1n04yJr1Os5c5Nd028iGYoxkFG8B3LQkiqoWBdwfATrfFwyDxFoiQlXPy3DmGc10LTi2h735oVlOcgSD+b8AwQhi76CREgn9PSWyYuy/LmbiWzf7JcQle/JqmOwVTyeHzf47C3nV8LIm/oxOCvQQlOY8ESLSEox0FgV+gJGLL739hnF8w== root@oracle
    [root@oracle .ssh]# ssh 192.168.197.135
    Last login: Sat Jun 22 20:06:40 2019 from oracle
    欢迎来到我的世界！！！！！！！！！！！
    [root@135 ~]# exit

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 6]  
**练手的实验操作：（看看就好）**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 7]  
![在这里插入图片描述][20190623113301135.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 8]

# 4.ssh服务相关命令 #

## **scp：安全的远程文件复制命令** ##

scp 是secure copy 的简写，用于在linux下进行远程拷贝文件的命令，类似于命令有cp , scp传输是加密的，所有可能会稍微影响点速度，另外，scp还非常不占资源，不会提高多少系统负荷。  
**格式：  
scp 本地文件 用户名@服务器ip:目录**  
scp /root/123.txt [root@192.168.197.134][root_192.168.197.134]:/tmp/  
\-P 端口 \#若端口不是默认的22，则需要会用此格式进行指定端口

## **sftp：安全的文件传输协议** ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 9]

[root@135 ~]# sftp 192.168.197.135
    Connecting to 192.168.197.135...
    Warning: Permanently added '192.168.197.135' (RSA) to the list of known hosts.
    root@192.168.197.135's password: 
    sftp> help
    Available commands:
    bye                                Quit sftp
    cd path                            Change remote directory to 'path'
    chgrp grp path                     Change group of file 'path' to 'grp'
    chmod mode path                    Change permissions of file 'path' to 'mode'
    chown own path                     Change owner of file 'path' to 'own'
    df [-hi] [path]                    Display statistics for current directory or
                                       filesystem containing 'path'
    exit                               Quit sftp
    get [-P] remote-path [local-path]  Download file
    help                               Display this help text
    lcd path                           Change local directory to 'path'
    lls [ls-options [path]]            Display local directory listing
    lmkdir path                        Create local directory
    ln oldpath newpath                 Symlink remote file
    lpwd                               Print local working directory
    ls [-1aflnrSt] [path]              Display remote directory listing
    lumask umask                       Set local umask to 'umask'
    mkdir path                         Create remote directory
    progress                           Toggle display of progress meter
    put [-P] local-path [remote-path]  Upload file
    pwd                                Display remote working directory
    quit                               Quit sftp
    rename oldpath newpath             Rename remote file
    rm path                            Delete remote file
    rmdir path                         Remove remote directory
    symlink oldpath newpath            Symlink remote file
    version                            Show SFTP version
    !command                           Execute 'command' in local shell
    !                                  Escape to local shell
    ?                                  Synonym for help
    sftp> pwd
    Remote working directory: /root
    sftp> lpwd
    Local working directory: /root
    sftp> cd /tmp
    sftp> 
    sftp> ll
    Invalid command.
    sftp> ls
    VMwareDnD              _cafenv-appconfig_     keyring-8WPtS1         keyring-AwAw7m         keyring-Klyawu         keyring-WbfIS9         keyring-x9Nmw7         orbit-gdm              
    pulse-JxzB3vqAFNcZ     pulse-YJYTDp3pXQMv     pulse-uKrPrZvV2mdo     pulse-x41FDRNtfJZW     shadow                 virtual-root.3t6G4Q    virtual-root.rBqha9    vmware-root            
    sftp> ls -l
    drwxrwxrwt    2 root     root         4096 May 31 07:11 VMwareDnD
    -rw-r--r--    1 root     root         1860 Jun 22 19:37 _cafenv-appconfig_
    drwx------    2 xh       xh           4096 Apr  5 21:22 keyring-8WPtS1
    drwx------    2 root     root         4096 May  8 18:53 keyring-AwAw7m
    drwx------    2 oracle   dba          4096 May  4 18:51 keyring-Klyawu
    drwx------    2 root     root         4096 May  4 18:44 keyring-WbfIS9
    drwx------    2 xh       xh           4096 Apr 11 00:09 keyring-x9Nmw7
    drwx------    2 gdm      gdm          4096 Jun 22 19:38 orbit-gdm
    drwx------    2 root     root         4096 Jun 13 07:45 pulse-JxzB3vqAFNcZ
    drwx------    2 xh       xh           4096 Apr 28 18:06 pulse-YJYTDp3pXQMv
    drwx------    2 oracle   dba          4096 May 28 07:11 pulse-uKrPrZvV2mdo
    drwx------    2 gdm      gdm          4096 Jun 22 19:38 pulse-x41FDRNtfJZW
    ----------    1 root     root          819 Apr 11 00:53 shadow
    drwx------    2 root     root         4096 Jun 13 07:45 virtual-root.3t6G4Q
    drwx------    2 root     root         4096 Jun 13 07:41 virtual-root.rBqha9
    drwx------    2 root     root         4096 Jun 22 20:57 vmware-root
    sftp> lcd /tmmp
    Couldn't change local directory to "/tmmp": No such file or directory
    sftp> lcd /tmp
    sftp> lcd /tmp
    sftp> ls
    VMwareDnD              _cafenv-appconfig_     keyring-8WPtS1         keyring-AwAw7m         keyring-Klyawu         keyring-WbfIS9         keyring-x9Nmw7         orbit-gdm              
    pulse-JxzB3vqAFNcZ     pulse-YJYTDp3pXQMv     pulse-uKrPrZvV2mdo     pulse-x41FDRNtfJZW     shadow                 virtual-root.3t6G4Q    virtual-root.rBqha9    vmware-root            
    sftp> lls
    _cafenv-appconfig_  keyring-AwAw7m  keyring-WbfIS9  orbit-gdm           pulse-uKrPrZvV2mdo  pulse-YJYTDp3pXQMv  virtual-root.3t6G4Q  VMwareDnD
    keyring-8WPtS1      keyring-Klyawu  keyring-x9Nmw7  pulse-JxzB3vqAFNcZ  pulse-x41FDRNtfJZW  shadow              virtual-root.rBqha9  vmware-root
    sftp>

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70]: /images/20211229/b7787402618443d186ef38c474a2d90a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 1]: /images/20211229/bf6fdf8260c9491e9438c362615e97f4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 2]: /images/20211229/981cf289789a45f99a6d5bd0c7815a8a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 3]: /images/20211229/ea835a809f4b46a1b867d03a67f268fb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 4]: /images/20211229/d146ccc8df0e4f6097e3e6ec356a04dc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 5]: /images/20211229/848fb1344c4240ffb01ba59b3cc3a4a0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 6]: /images/20211229/7abb227016d64b068dc5b4e421314f59.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 7]: /images/20211229/eb00fcf752c8455ab4c3d132879e301c.png
[20190623113301135.png]: /images/20211229/de4a33a40a2f4fcd8429c3e51e2c27a2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 8]: /images/20211229/3cb65c11edbb47f09e40e70b33645787.png
[root_192.168.197.134]: mailto:root@192.168.197.134
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjE5MzQ4OQ_size_16_color_FFFFFF_t_70 9]: /images/20211229/99c0ed2ad1c84c76ad434a663687399f.png