RHCE第二次作业--- ssh免密登录和http基于不同ip访问不同站点

1.ssh免密登录：准备两台Linux虚拟机，第一台可以免密登录到第二台机器
ssh禁止root用户远程登录

首先，开启两台虚拟机，192.168.18.128为第一台机器，192.168.18.129作为第二台机器。先，开启两台虚拟机，192.168.18.128为第一台机器，192.168.18.129作为第二台机器。

生成一个2048B大小rsa类型的认证密钥。

[root@localhost ~]# ssh-keygen -t rsa -b 2048
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:g9MREYf3vZZNkCogVsFuuFmXtHzmtAxt14Jq/PHR0ww root@localhost.localdomain
The key's randomart image is:
+---[RSA 2048]----+
|       o*=.    . |
|      o +oo   o  |
|     . +.= = + o |
|      .o+.B X E o|
|      o=So @ o X.|
|      o. .+ = =.=|
|         . . + ..|
|            . .  |
|                 |
+----[SHA256]-----+

切换路径为/root/.ssh/id_rsa，查看文件是否存在。

[root@localhost ~]# cd /root/.ssh/
[root@localhost .ssh]# ls -l
total 12
-rw-------. 1 root root 1831 Oct  7 19:33 id_rsa
-rw-r--r--. 1 root root  408 Oct  7 19:33 id_rsa.pub
-rw-r--r--. 1 root root  176 Sep 24 14:16 known_hosts

将一号虚拟机产生的公钥复制到二号虚拟机的/root/.ssh/目录下。

[root@localhost .ssh]# scp /root/.ssh/id_rsa.pub root@192.168.18.129:/root/.ssh/authorized_keys
root@192.168.18.129's password: 
id_rsa.pub                                          100%  408   252.4KB/s   00:00 

进入虚拟机二号 /root/.ssh/目录下查看是否有文件authorized_keys生成

[root@server ~]# cd /root/.ssh/
[root@server .ssh]# ls -l
total 16
-rw-r--r-- 1 root root  408 Oct  7 19:38 authorized_keys
-rw------- 1 root root 2602 Sep 24 14:16 id_rsa
-rw-r--r-- 1 root root  565 Sep 24 14:17 id_rsa.pub
-rw-r--r-- 1 root root  176 Sep 24 14:17 known_hosts

打开authorized_keys文件查看密钥

[root@server .ssh]# cat authorized_keys 
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaZSGceJl+BmOe+pmzJpQFt3f7FQdtfo8qd/bOEUOhiApg7t2Q81602W5OIqYBD6hT1vBlYsp7nm13IGo6PghSr6pgrf14qzZM2V3e5nNHCZrOuNXmXLrfnXDC9rx1CpgiMwlEoJs4qeQ0cRcBGuW3thnSfFR1KzgOqUiNGKIwktbuRgkyBTcxHCw1Nf3HDBcix4vM+0yOL1zFoGtbVtMxFKYv189OwlMabuHNTdGjM9E9v+9NdpX+/+zOz2v2KVDWFSW4D0lK125gUQDyNWBCrJutkWzqsBNZ39Co0yZTrQi8y7OcsPk7KTeTuvDDy/eHiuBzrfgBV7KOPZI81CGT root@localhost.localdomain
密钥已经复制完成

进行登陆测试

[root@localhost .ssh]# ssh root@192.168.18.129
Activate the web console with: systemctl enable --now cockpit.socket

This system is not registered to Red Hat Insights. See https://cloud.redhat.com/
To register this system, run: insights-client --register

Last login: Fri Oct  7 19:27:01 2022 from 192.168.18.1
[root@server ~]# 

第一台虚拟机禁止root远程进行登录第二台虚拟机,需要对rhsic1虚拟机的/etc/ssh/sshd_conf配置文件进行修改。
将配置文件中的 PermitRootLogin yes修改成 PermitRootLogin no

[root@hh ~]# vim /etc/ssh/sshd_config

重启服务

[root@server .ssh]# service sshd restart
Redirecting to /bin/systemctl restart sshd.service

再次远程登陆

[root@localhost ~]# ssh root@192.168.18.129
root@192.168.18.129's password: 
Permission denied, please try again.
root@192.168.18.129's password: 
不仅需要输入密码，而且输入正确密码也无法进行登录

2.http：配置基于不同IP的访问不同的站点，要求默认首页文件为 first.html

首先我们要开启虚拟机并且开启httpd程序

[root@server .ssh]# systemctl restart httpd

 将目录切换到/etc/httpd/conf.d/下，新建文件aaa.conf

[root@server .ssh]# cd /etc/httpd/conf.d
[root@server conf.d]# vim aaa.conf

注意题目要求中还提到，基于不同的IP，所以我们还需要增加虚拟机中的IP

[root@server conf.d]# nmcli c modify ens160 +ipv4.addresses 192.168.18.100/24
[root@server conf.d]# nmcli c modify ens160 +ipv4.addresses 192.168.18.200/24

重启服务

[root@server conf.d]# nmcli c up ens160

查看IP

[root@server conf.d]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:0c:29:22:4c:c5 brd ff:ff:ff:ff:ff:ff
    inet 192.168.18.129/24 brd 192.168.18.255 scope global noprefixroute ens160
       valid_lft forever preferred_lft forever
    inet 192.168.18.4/24 brd 192.168.18.255 scope global secondary noprefixroute ens160
       valid_lft forever preferred_lft forever
    inet 192.168.18.100/24 brd 192.168.18.255 scope global secondary noprefixroute ens160
       valid_lft forever preferred_lft forever
    inet 192.168.18.200/24 brd 192.168.18.255 scope global secondary noprefixroute ens160
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe22:4cc5/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:66:b6:10 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
    link/ether 52:54:00:66:b6:10 brd ff:ff:ff:ff:ff:ff

我们进入aaa.conf文件进行编辑，并在文件中进行配置

[root@server conf.d]# vim aaa.conf

<Directory "/www/ip">
    AllowOverride None
    Require all granted
</Directory>


<VirtualHost 192.168.18.100:80>
    DocumentRoot "/www/ip/100"
    ServerName 192.168.18.100
</VirtualHost>


<VirtualHost 192.168.18.200:80>
   DocumentRoot "/www/ip/200"
   ServerName 192.168.18.200
</VirtualHost>

创建两个网页文件根目录，并且定义网页内容

[root@server conf.d]# mkdir -p /www/ip/{100,200}
[root@server conf.d]# echo the ip is 100 > /www/ip/100/index.html
[root@server conf.d]# echo the ip is 200 > /www/ip/200/index.html

重启httpd协议

[root@server conf.d]# systemctl restart httpd

要求默认文件为frist.html,需要对主配置文件进行修改

[root@server conf.d]# vim /etc/httpd/conf/httpd.conf


<IfModule dir_module>
    DirectoryIndex index.html home.html
</IfModule>
改为
<IfModule dir_module>
    DirectoryIndex index.html home.html first.html
</IfModule>

重启服务

[root@server conf.d]# systemctl restart httpd

进入目录 /var/www/html下，创建frist.html文件并对其配置

[root@server html]# echo This is server page > first.html

最后，查看是否完成