服務(wù)器端配置
OS: Debian-6.0.5
#apt-get install ssh 安裝ssh服務(wù)
編輯/etc/ssh/sshd_config配置文件
Port 3322 #修改端口為3322（自定義）
PermitRootLogin no #禁止root用戶遠(yuǎn)程登錄
PubkeyAuthertication yes #允許用key登錄
PasswordAuthertication no #禁止遠(yuǎn)程ssh客戶端用密碼登錄
iptables設(shè)置 開(kāi)啟3322端口允許訪問(wèn)
iptables -I INPUT -p tcp --dport 3220 -j ACCEPT
方法一：管理員在服務(wù)器端為普通用戶生成key
(若無(wú)用戶，先新建用戶。debian用adduser)
如為用戶名為fengzhige生成ssh key，
adduser fengzhige #添加用戶
su - fengzhige #用fengzhige用戶登錄
用ssh-keygen生成key
ssh-keygen -t rsa #生成RSA類型的key
root@debian-2:~# su - fengzhige
fengzhige@debian-2:~$ pwd
/home/fengzhige
fengzhige@debian-2:~$ ssh-keygen -t rsa
Generating public/private rsa key pair. Enter file in which to save the key (/home/fengzhige/.ssh/id_rsa): fengzhige-key
Enter passphrase (empty for no passphrase):
Enter same passphrase again: Your identification has been saved in fengzhige-key.
Your public key has been saved in fengzhige-key.pub. The key fingerprint is: f1:f5:5c:59:aa:4d:7d:b2:9a:56:c8:bc:50:8b:87:80
fengzhige@debian-2 The key's randomart image is:
+--[ RSA 2048]----+
| .|
| . oo|
| E o o +.+|
| + B O +.|
| S = B * |
| o = |
| = |
| . |
| |
+-----------------+
fengzhige@debian-2:~$
對(duì)公鑰設(shè)置一下
debian 下的ssh-keygen生成的key會(huì)在當(dāng)前目錄下：
（fengzhige-key 私 fengzhige-key.pub 公）
cd /home/fengzhige
cd .ssh #可新建.ssh目錄，公鑰放在這里
cat id_key.pub >> authorized_keys #改為指定的文件名authorized_keys
把私鑰保存到有SecureCRT的客戶端上。
連接：
本文出自 “楓之歌” 博客
