防止远程密码拦截破译，ssh验证和普通用户登录

添加用户：

useradd yang

生成秘钥

[yang@localhost /]$ ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key(/home/yang/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):123456

Enter same passphrase again: 123456

Your identification has been saved in/home/yang/.ssh/id_rsa.

Your public key has been saved in/home/yang/.ssh/id_rsa.pub.

The key fingerprint is:

1d:1d:97:0c:c0:40:8f:a4:1a:b9:93:71:03:7a:d4:[email protected]

The key's randomart image is:

+--[ RSA 2048]----+

|   o. .+o..oo.. |

|   oo.o o.. oo  |

|  .=.+ . o .    |

|  ..B . . .     |

|   =.  S .      |

|   E.           |

|                 |

+-----------------+

修改权限：

[root@localhost yang]# chmod 700 .ssh

[root@localhost yang]# cd .ssh

[root@localhost .ssh]# ll

总用量 8

-rw------- 1 yang yang 1743 7月  14 03:22 id_rsa

-rw-r--r-- 1 yang yang  408 7月  14 03:22 id_rsa.pub

[root@localhost .ssh]# mv id_rsa.pubauthorized_keys

[root@localhost .ssh]# chmod 600authorized_keys

将私钥拷贝出来

<a href="http://s3.51cto.com/wyfs02/M00/6F/A5/wKiom1WjpInym1bkAAPQdNTA1Gs435.jpg" target="_blank"></a>

修改ssh配置文件

Vim /etc/ssh/sshd_config

42: PermitRootLogin no        #禁止root登陆

47:RSAAuthentication yes       #RSA验证

48:PubkeyAuthentication yes     #公钥验证

49: AuthorizedKeysFile      .ssh/authorized_keys   #加载秘钥

66: PasswordAuthentication no    #禁止密码登录

重启ssh

Service sshd restart

Xshell登录

<a href="http://s3.51cto.com/wyfs02/M00/6F/A5/wKiom1WjpIny-LqBAAFssAQdT_Q736.jpg" target="_blank"></a>

导入刚拷贝的私钥

<a href="http://s3.51cto.com/wyfs02/M01/6F/A2/wKioL1WjpmCQKlKSAAF9ixQjj5k797.jpg" target="_blank"></a>

输入密码登录

<a href="http://s3.51cto.com/wyfs02/M01/6F/A2/wKioL1WjpmGQibdwAADzKHpV29g547.jpg" target="_blank"></a>

     本文转自2013yang 51CTO博客，原文链接：http://blog.51cto.com/yangeinstein/1673886，如需转载请自行联系原作者