Skip to content

Latest commit

 

History

History
107 lines (89 loc) · 3.18 KB

ssh.md

File metadata and controls

107 lines (89 loc) · 3.18 KB
Raw

SSH

Salin Kunci Publik

Salin kunci publik ke remote server

ssh-copy-id USERNAME@REMOTE_HOST

Cara lain:

Buat file ~/.ssh/authorized_keys di remote server, kemudian copy-paste Public Key (local computer).

Gunakan editor nano daripada vi.

Disabling Password Authentication

Ubah file /etc/ssh/sshd_config di remote server

sudo nano /etc/ssh/sshd_config

Ganti dari:

#PasswordAuthentication yes

menjadi:

PasswordAuthentication no

Kemudian

sudo service ssh restart

atau

sudo systemctl restart ssh

Disable SSH logins for root

After you create a normal user, you can disable SSH logins for the root account. To do this, follow these steps:

  1. Log in to the server as root using SSH.
  2. Open the /etc/ssh/sshd_config file in your preferred text editor (nano, vi, etc.).
  3. Locate the following line: 
    PermitRootLogin yes
  4. Modify the line as follows: 
    PermitRootLogin no
  5. Add the following line. Replace username with the name of the user you created in the previous procedure: 
    AllowUsers username

    This step is crucial. If you do not add the user to the list of allowed SSH users, you will be unable to log in to your server!
  6. Save the changes to the /etc/ssh/sshd_config file, and then exit the text editor.
  7. Restart the SSH service using the appropriate command for your Linux distribution:
    • For CentOS and Fedora, type: 
      service sshd restart
    • For Debian and Ubuntu, type: 
      service ssh restart
  8. While still logged in as root, try to log in as the new user using SSH in a new terminal window. You should be able to log in. If the login fails, check your settings. Do not exit your open root session until you are able to log in as the normal user in another window.

Change SSH Port

If you want to change the default SSH port in Ubuntu, perform the following steps with root privileges:

  1. Open the /etc/ssh/sshd_config file and locate the line: 
    #Port 22
  2. Then, uncomment (Remove the leading # character) it and change the value with an appropriate port number (for example, 22000): 
    Port 22000
  3. Restart the SSH server: 
    systemctl restart sshd
  4. After that, run the netstat command and make sure that the ssh daemon now listen on the new ssh port: 
    netstat -tulpn | grep ssh
  5. When connecting to the server using the ssh command, you need to specify the port to connect using the -p flag: 
    ssh -p 22000 192.168.1.100
  6. Note that if the Firewall is enabled, you need to add a rule to allow new SSH

Bahan Bacaan