{"id":39,"date":"2014-12-21T08:22:00","date_gmt":"2014-12-20T23:22:00","guid":{"rendered":"http:\/\/yokensaka.com\/centos\/?p=39"},"modified":"2017-05-20T01:46:56","modified_gmt":"2017-05-19T16:46:56","slug":"ssh%e3%82%b5%e3%83%bc%e3%83%90%ef%bc%88openssh%ef%bc%89","status":"publish","type":"post","link":"http:\/\/yokensaka.com\/centos\/?p=39","title":{"rendered":"SSH\u30b5\u30fc\u30d0\uff08OpenSSH\uff09"},"content":{"rendered":"

SSH\u306f\u3001\u30c7\u30fc\u30bf\u306e\u6697\u53f7\u5316\u3084\u516c\u958b\u9375\u3092\u5229\u7528\u3057\u305f\u8a8d\u8a3c\u6280\u8853\u306b\u3088\u308a\u5b89\u5168\u306a\u30ea\u30e2\u30fc\u30c8\u7ba1\u7406\u3084\u30d5\u30a1\u30a4\u30eb\u8ee2\u9001\u3092\u53ef\u80fd\u306b\u3059\u308b\u30c4\u30fc\u30eb\u3002\u30d1\u30b9\u30ef\u30fc\u30c9\u3084\u30c7\u30fc\u30bf\u306e\u6f0f\u6d29\u3068\u3044\u3063\u305f\u5371\u967a\u6027\u304c\u9ad8\u3044Telenet\u3084FTP\u306b\u4ee3\u308f\u3063\u3066\u3001\u30ea\u30e2\u30fc\u30c8\u7ba1\u7406\u306b\u826f\u304f\u4f7f\u308f\u308c\u308b\u3088\u3046\u306b\u306a\u3063\u305f\u3002\u63a5\u7d9a\u65b9\u5f0f\u306b\u306fSSH1\u3068SSH2\u304c\u3042\u308aSSH2\u306e\u65b9\u304c\u3001SSH1\u3088\u308a\u5f37\u56fa\u306a\u6697\u53f7\u5316\u306b\u306a\u3063\u3066\u3044\u308b\u306e\u3067\u3001\u3053\u3053\u3067\u306fSSH2\u3092\u4f7f\u7528\u3057\u9375\u65b9\u5f0f\u306b\u3088\u308b\u30ed\u30b0\u30a4\u30f3\u306e\u8a2d\u5b9a\u3092\u884c\u3046\u3002
\n\u25a0 OpenSSH\u306e\u8a2d\u5b9a<\/b><\/p>\n

\r\nOpenSSH\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\r\n[root@server1 ~]# vi \/etc\/ssh\/sshd_config\r\n\u30b9\u30fc\u30d1\u30fc\u30e6\u30fc\u30b6\u3067\u306e\u30ed\u30b0\u30a4\u30f3\u3092\u7981\u6b62\r\n#PermitRootLogin yes\r\n\u2193\r\nPermitRootLogin no\u3000\u3000\u2190\u3000#\u3092\u524a\u9664\u3057\u3066 no \u306b\u5909\u66f4\r\n\u901a\u5e38\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3067\u306f\u306a\u304f\u9375\u65b9\u5f0f\u306b\u5909\u66f4\r\n#PasswordAuthentication yes\r\n\u2193\r\nPasswordAuthentication no\u3000\u3000\u2190\u3000#\u3092\u524a\u9664\u3057\u3066 no \u306b\u5909\u66f4\r\n\u7a7a\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u7981\u6b62\r\n#PermitEmptyPasswords no\r\n\u2193\r\nPermitEmptyPasswords no\u3000\u3000\u2190\u3000#\u3092\u524a\u9664\r\n<\/pre>\n
\u25a0 SSH\u30a2\u30af\u30bb\u30b9\u5236\u9650<\/b><\/p>\n
\r\n\u30b5\u30fc\u30d0\u30fc\u81ea\u8eab\u3001\u5185\u90e8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u7279\u5b9a\u306e\u5916\u90e8IP\uff08xxx.xxx.xxx.xxx\uff09\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\r\n[root@server1 ~]# echo \"sshd : 127.0.0.1 192.168.1. xxx.xxx.xxx.xxx\" >> \/etc\/hosts.allow\r\n\u4e0a\u8a18\u4ee5\u5916\u306e\u5168\u3066\u306e\u30a2\u30af\u30bb\u30b9\u3092\u7981\u6b62\r\n[root@server1 ~]# echo \"sshd : ALL\" >> \/etc\/hosts.deny\r\n<\/pre>\n
\u4f1a\u793e\u7b49\u304b\u3089\u30a2\u30af\u30bb\u30b9\u3059\u308b\u5834\u5408\u3001\u81ea\u5206\u306e\u4f1a\u793e\u306e\u63a5\u7d9a\u74b0\u5883\uff08IP\u30a2\u30c9\u30ec\u30b9\uff09\u3092\u8abf\u3079\u3001\/etc\/hosts.allow\u3078\u767b\u9332\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\u305d\u3093\u306a\u6642\u306f\u8a3a\u65ad\u304f\u3093<\/a>\u3067\u78ba\u8a8d\u3067\u304d\u308b\u3002
\n\u25a0 OpenSSH\u306e\u518d\u8d77\u52d5<\/b><\/p>\n
\r\n[root@server1 ~]# systemctl restart sshd\u3000\u2190\u3000sshd\u518d\u8d77\u52d5\r\n[root@server1 ~]# systemctl enable sshd\u3000\u2190\u3000sshd\u81ea\u52d5\u8d77\u52d5\u8a2d\u5b9a\r\n[root@server1 ~]# systemctl status sshd\u3000\u2190\u3000sshd\u72b6\u614b\u8868\u793a\r\nsshd.service - OpenSSH server daemon\r\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/sshd.service; enabled)\r\n   Active: active (running) since \u65e5 2014-12-21 08:11:12 JST; 1min 5s ago\r\n Main PID: 14825 (sshd)\r\n   CGroup: \/system.slice\/sshd.service\r\n           \u2514\u250014825 \/usr\/sbin\/sshd -D\r\n\r\n12\u6708 21 08:11:12 server1.yokensaka.com systemd[1]: Started OpenSSH server daemon.\r\n12\u6708 21 08:11:12 server1.yokensaka.com sshd[14825]: Server listening on 0.0.0.0 port 22.\r\n12\u6708 21 08:11:12 server1.yokensaka.com sshd[14825]: Server listening on :: port 22.<\/pre>\n
\u25a0 SSH2\u306b\u3088\u308b\u9375\u306e\u4f5c\u6210<\/b><\/p>\n
\r\n\u9375\u3092\u4f5c\u6210\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u3067\u4f5c\u696d\u3092\u9032\u3081\u308b\u3002\r\n[root@server1 ~]# su - higo\r\n\u9375\u306e\u4f5c\u6210\u3092\u884c\u3046\uff08\u4f55\u3082\u5165\u529b\u3057\u306a\u3044\u3067\u7a7a\u30a8\u30f3\u30bf\u30fc\u3092\u62bc\u3059\uff09\r\n[higo@server1 ~]$ ssh-keygen -t rsa\r\nGenerating public\/private rsa key pair.\r\nEnter file in which to save the key (\/home\/higo\/.ssh\/id_rsa):\r\nCreated directory '\/home\/higo\/.ssh'.\r\nEnter passphrase (empty for no passphrase):\r\nEnter same passphrase again:\r\nYour identification has been saved in \/home\/higo\/.ssh\/id_rsa.\r\nYour public key has been saved in \/home\/higo\/.ssh\/id_rsa.pub.\r\nThe key fingerprint is:\r\n50:49:5b:d2:b8:09:0f:6b:68:bc:5b:83:2e:4c:ce:25 higo@server1.yokensaka.com\r\nThe key's randomart image is:\r\n+--[ RSA 2048]----+\r\n|       .++.      |\r\n|      o.o+.      |\r\n|   . ..=.o       |\r\n|    + o.+        |\r\n|   . +  S        |\r\n|  E + o          |\r\n| = + o .         |\r\n|  = o            |\r\n|   .             |\r\n+-----------------+\r\n\u9375\u306e\u4f5c\u6210\u5148\u3092\u8868\u793a\u3059\u308b\r\n[higo@server1 ~]$ ls -la \/home\/higo\/.ssh\/\r\n\u5408\u8a08 16\r\ndrwx------   2 higo higo 4096  9\u6708 19 10:49 2011 .\r\ndrwx------. 24 higo higo 4096  9\u6708 19 10:49 2011 ..\r\n-rw-------   1 higo higo 1675  9\u6708 19 10:49 2011 id_rsa  \u2190 \u79d8\u5bc6\u9375\u9375\r\n-rw-r--r--   1 higo higo  408  9\u6708 19 10:49 2011 id_rsa.pub  \u2190 \u516c\u958b\u9375\r\n\u516c\u958b\u9375\u3092authorized_keys\u306b\u8ffd\u52a0\r\n[higo@server1 ~]$ cat \/home\/higo\/.ssh\/id_rsa.pub >> \/home\/higo\/.ssh\/authorized_keys\r\n\u516c\u958b\u9375\u3092\u81ea\u5206\u306e\u307f\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u5909\u66f4\r\n[higo@server1 ~]$ chmod 600 \/home\/higo\/.ssh\/authorized_keys\r\n\u516c\u958b\u9375\u3092\u524a\u9664\r\n[higo@server1 ~]$ rm -f \/home\/higo\/.ssh\/id_rsa.pub\r\n\u9375\u306e\u4f5c\u6210\u5148\u3092\u8868\u793a\r\n[higo@server1 ~]$ ls -la \/home\/higo\/.ssh\/\r\n\u5408\u8a08 16\r\ndrwx------   2 higo higo 4096  9\u6708 19 10:51 2011 .\r\ndrwx------. 24 higo higo 4096  9\u6708 19 10:49 2011 ..\r\n-rw-------   1 higo higo  408  9\u6708 19 10:51 2011 authorized_keys  \u2190 \u516c\u958b\u9375\r\n-rw-------   1 higo higo 1675  9\u6708 19 10:49 2011 id_rsa           \u2190 \u79d8\u5bc6\u9375\r\n<\/pre>\n
\u25a0 \u79d8\u5bc6\u9375\u306e\u629c\u304d\u53d6\u308a\u3000
\n\uff08xWindow\u306b\u3057\u3066USB\u7d4c\u7531\u3067\u629c\u304d\u53d6\u308a\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30de\u30b7\u30f3\u306b\u30b3\u30d4\u30fc\u3059\u308b\u307b\u3046\u304c\u7c21\u5358\uff09
\nFTP\u3067\u30b3\u30d4\u30fc\u3059\u308b\u65b9\u6cd5<\/p>\n
\r\n\u30b9\u30fc\u30d1\u30fc\u30e6\u30fc\u30b6\uff08root\uff09\u306b\u306a\u308b\u3002\r\n[higo@server1 ~]$ su -\r\nroot\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3002\r\nPassword:\r\nFTP\u30b5\u30fc\u30d0\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\r\n[root@server1 ~]# yum install vsftpd\r\nLoaded plugins: fastestmirror, refresh-packagekit\r\nExisting lock \/var\/run\/yum.pid: another copy is running as pid 2557.\r\nAnother app is currently holding the yum lock; waiting for it to exit...\r\nThe other application is: PackageKit\r\nMemory :  47 M RSS ( 95 MB VSZ)\r\nStarted: Mon Sep 19 08:36:00 2011 - 00:14 ago\r\nState  : Sleeping, pid: 2557\r\nLoading mirror speeds from cached hostfile\r\n* base: ftp.jaist.ac.jp\r\n* centosplus: ftp.jaist.ac.jp\r\n* epel: ftp.jaist.ac.jp\r\n* extras: ftp.jaist.ac.jp\r\n* updates: mirror.khlug.org\r\nSetting up Install Process\r\nResolving Dependencies\r\n--> Running transaction check\r\n---> Package vsftpd.i686 0:2.2.2-6.el6_0.1 set to be updated\r\n--> Finished Dependency Resolution\r\nDependencies Resolved\r\n==========================================================================================\r\nPackage              Arch           Version                  Repository             Size\r\n==========================================================================================\r\nInstalling:\r\nvsftpd               i686           2.2.2-6.el6_0.1          updates               155 k\r\nTransaction Summary\r\n==========================================================================================\r\nInstall       1 Package(s)\r\nUpgrade       0 Package(s)\r\nTotal download size: 155 k\r\nInstalled size: 343 k\r\nIs this ok [y\/N]: y\r\nDownloading Packages:\r\nvsftpd-2.2.2-6.el6_0.1.i686.rpm                                    | 155 kB     00:00\r\nRunning rpm_check_debug\r\nRunning Transaction Test\r\nTransaction Test Succeeded\r\nRunning Transaction\r\nInstalling     : vsftpd-2.2.2-6.el6_0.1.i686                                        1\/1\r\nInstalled:\r\nvsftpd.i686 0:2.2.2-6.el6_0.1\r\nComplete!\r\nFTP\u30b5\u30fc\u30d0\u3092\u8d77\u52d5\u3055\u305b\u308b\r\n[root@server1 ~]# \/etc\/rc.d\/init.d\/vsftpd start\r\nvsftpd \u7528\u306e vsftpd \u3092\u8d77\u52d5\u4e2d:                               [  OK  ]\r\n<\/pre>\n
\u3053\u3053\u304b\u3089\u306f\u3001Windows\u306e\u30b3\u30de\u30f3\u30c9\u30d7\u30ed\u30f3\u30d7\u30c8\u3067\u4f5c\u696d\u3059\u308b\u3002(\u7ba1\u7406\u8005\u3068\u3057\u3066\u5b9f\u884c)<\/p>\n
\r\nMicrosoft Windows [Version 6.1.7601]\r\nCopyright (c) 2009 Microsoft Corporation.  All rights reserved.\r\nC:\\Users\\higo>cd \\\u3000\u2190\u3000\u30ed\u30fc\u30ab\u30eb\u306e\u30ab\u30ec\u30f3\u30c8\u3092C:\\\u306b\u3057\u3066\u304a\u304f\r\nC:\\>ftp 192.168.1.4\u3000\u2190\u3000FTP\u3067\u30b5\u30fc\u30d0\u306b\u63a5\u7d9a\r\n192.168.1.4 \u306b\u63a5\u7d9a\u3057\u307e\u3057\u305f\u3002\r\n220 (vsFTPd 2.2.2)\r\n\u30e6\u30fc\u30b6\u30fc (192.168.1.4:(none)): higo\u3000\u2190\u3000\u30e6\u30fc\u30b6\u540d\u3092\u5165\u529b\r\n331 Please specify the password.\r\n\u30d1\u30b9\u30ef\u30fc\u30c9:\u3000\u2190\u3000\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\r\n230 Login successful.\r\nftp> bin\u3000\u2190\u3000\u8ee2\u9001\u30e2\u30fc\u30c9\u3092\u30d0\u30a4\u30ca\u30ea\u30e2\u30fc\u30c9\u306b\u3059\u308b\r\n200 Switching to Binary mode.\r\nftp> get \/home\/higo\/.ssh\/id_rsa\u3000\u2190\u3000\u79d8\u5bc6\u9375\u3092\u53d6\u5f97\r\n200 PORT command successful. Consider using PASV.\r\n150 Opening BINARY mode data connection for \/home\/higo\/.ssh\/id_rsa (951 bytes).\r\n226 File send OK.\r\nftp: 1,675 bytes received in 0.00Seconds 1675000.00Kbytes\/sec.\r\nftp> bye\r\n221 Goodbye.\r\nC:\\>\r\nC:\\>dir\u3000\u2190\u3000\u30ed\u30fc\u30ab\u30eb\u306e\u78ba\u8a8d\r\n\u30c9\u30e9\u30a4\u30d6 C \u306e\u30dc\u30ea\u30e5\u30fc\u30e0 \u30e9\u30d9\u30eb\u304c\u3042\u308a\u307e\u305b\u3093\u3002\r\n\u30dc\u30ea\u30e5\u30fc\u30e0 \u30b7\u30ea\u30a2\u30eb\u756a\u53f7\u306f 2514-DE80 \u3067\u3059\r\nC:\\ \u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\r\n2011\/07\/31  13:00    <DIR>          ATI\r\n2011\/07\/31  18:22    <DIR>          ColorVision\r\n2011\/08\/03  00:17    <DIR>          CrystalDiskMark0003FFBA\r\n2011\/08\/07  23:55    <DIR>          CrystalDiskMark002D3A0D\r\n2011\/08\/12  21:28    <DIR>          CrystalDiskMark004337AE\r\n2011\/07\/31  08:50    <DIR>          FIRSTITPRO\r\n2011\/09\/19  10:49             1,675 id_rsa\u3000\u2190\u3000 \u30b3\u30d4\u30fc\u3055\u308c\u3066\u3044\u308b\r\n2011\/07\/30  21:25    <DIR>          Intel\r\n2011\/07\/31  19:57             1,692 lucid.log\r\n2009\/07\/14  12:20    <DIR>          PerfLogs\r\n2011\/09\/17  07:39    <DIR>          Program Files\r\n2011\/09\/17  07:37    <DIR>          Program Files (x86)\r\n2011\/07\/31  01:48    <DIR>          temp\r\n2011\/07\/30  20:43    <DIR>         Users\r\n2011\/09\/17  03:21    <DIR>          Windows\r\n2011\/07\/31  21:18         8,388,608 Z68PRO_1.60\r\n3 \u500b\u306e\u30d5\u30a1\u30a4\u30eb           8,391,975 \u30d0\u30a4\u30c8\r\n13 \u500b\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea  52,273,422,336 \u30d0\u30a4\u30c8\u306e\u7a7a\u304d\u9818\u57df\r\nC:\\>exit\u3000\u2190\u3000\u30b3\u30de\u30f3\u30c9\u30d7\u30ed\u30f3\u30d7\u30c8\u3092\u7d42\u4e86\r\n<\/pre>\n
\u25a0\u3000\u5916\u90e8\u304b\u3089\u306e\u63a5\u7d9a<\/b>
\n\u5916\u90e8\u304b\u3089\u306e\u63a5\u7d9a\u306b\u306f\u3001\u30eb\u30fc\u30bf\u30fc\u306e\u8a2d\u5b9a\u304c\u5fc5\u8981\u3002
\n\u30eb\u30fc\u30bf\u306e\u8a2d\u5b9a\u306722\u756a\u306e\u30dd\u30fc\u30c8\u3092\u958b\u3051\u308b\u3002
\n\u25a0\u3000\u30dd\u30fc\u30c8\u30c1\u30a7\u30c3\u30af\u3010\u30dd\u30fc\u30c8\u958b\u653e\u78ba\u8a8d\u3011<\/b>
\n\u300c\u7ba1\u7406\u3057\u3066\u3044\u308b\u30b5\u30fc\u30d0\u30fc\u304c\u5916\u90e8\u304b\u3089\u63a5\u7d9a\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u304b\uff1f\u300d\u300c\u30dd\u30fc\u30c8\u306f\u958b\u653e\u3055\u308c\u3066\u3044\u308b\u304b\uff1f\u300d\u300cport\u306f\u9589\u3058\u3066\u3044\u308b\u304b\uff1f\u300d\u300c\u30eb\u30fc\u30bf\u306e\u30dd\u30fc\u30c8\u306f\u958b\u653e\u3055\u308c\u3066\u3044\u308b\u304b\u300d\u7b49\u306e
\n\u30dd\u30fc\u30c8\u30c1\u30a7\u30c3\u30af\u30fb\u30dd\u30fc\u30c8\u306e\u758e\u901a\u78ba\u8a8d\u30c6\u30b9\u30c8\u306f\u3053\u3061\u3089\u3067<\/a>
\n\u25a0\u3000\u79d8\u5bc6\u9375\u306e\u629c\u304d\u53d6\u308a\u304c\u51fa\u6765\u305f\u3089\u3001\u6b21\u306f\u30ea\u30e2\u30fc\u30c8\u63a5\u7d9a(PuTTY)<\/a>\u306e\u8a2d\u5b9a<\/b><\/p>\n
\u25b2 \u30da\u30fc\u30b8\u30c8\u30c3\u30d7\u3078<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"
SSH\u306f\u3001\u30c7\u30fc\u30bf\u306e\u6697\u53f7\u5316\u3084\u516c\u958b\u9375\u3092\u5229\u7528\u3057\u305f\u8a8d\u8a3c\u6280\u8853\u306b\u3088\u308a\u5b89\u5168\u306a\u30ea\u30e2\u30fc\u30c8\u7ba1\u7406\u3084\u30d5\u30a1 … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-39","post","type-post","status-publish","format-standard","hentry","category-sshopenssh"],"_links":{"self":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts\/39","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=39"}],"version-history":[{"count":5,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts\/39\/revisions"}],"predecessor-version":[{"id":554,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=\/wp\/v2\/posts\/39\/revisions\/554"}],"wp:attachment":[{"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=39"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=39"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/yokensaka.com\/centos\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=39"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}