远程服务连接

一.配置两台主机
主机1.
主机名: server.example.com
ip: 172.25.254.100
建立用户timinglee，其密码为timinglee

[root@server100 ~]# hostnamectl hostname server.example.com
[root@server100 ~]# hostname
server.example.com

[root@server100 ~]# useradd timinglee
[root@server100 ~]# passwd timinglee
更改用户 timinglee 的密码 。
passwd：所有的身份验证令牌已经成功更新。


主机2
主机名：client.example.com
ip: 172.25.254.200

[root@server200 ~]# hostnamectl hostname client.example.com
[root@server200 ~]# hostname
client.example.com


2.安需求完成项目
172.25.254.200 在远程登录172.25.254.100的root用户时需要免密连接
并确保只有root用户和timinglee用户可以被登录

首先在俩台虚拟机上输入systemctl restart sshd命令，启用sshd服务才可以相互连接

然后在主机二中

[root@server200 ~]#  ssh-keygen -f /root/.ssh/id_rsa -P ""
Generating public/private rsa key pair.
Your identification has been saved in /root/.ssh/id_rsa
Your public key has been saved in /root/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:5UBDZ+KDEbIi3Ec+qmWAHlVVXx+3upH0SHqJg3POG4k root@client.example.com
The key's randomart image is:
+---[RSA 3072]----+
|   .oo++*.o  . ..|
|o o oo = =. . . +|
|o+...+. + .. o o |
|..o.o .  =. = *  |
| . +    So.= B . |
|  +       * + o  |
| .       E = .   |
|            o    |
|           .     |
+----[SHA256]-----+
 

[root@server200 ~]#  ssh-copy-id -i /root/.ssh/id_rsa.pub root@172.25.254.100
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@172.25.254.100's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@172.25.254.100'"
and check to make sure that only the key(s) you wanted were added.

随后在主机一中

[root@server ~]# vim /etc/ssh/sshd_config

[root@server ~]# systemctl restart sshd
然后重启sshd服务，任务完成

验证一下

[root@server200 ~]# ssh -l root 172.25.254.100
Activate the web console with: systemctl enable --now cockpit.socket

Register this system with Red Hat Insights: insights-client --register
Create an account or view all your systems at https://red.ht/insights-dashboard
Last login: Sun Apr 21 14:46:38 2024 from 172.25.254.200
实现root免密登录

[root@server100 ~]# ssh -l timinglee 172.25.254.100
timinglee@172.25.254.100's password: 
Register this system with Red Hat Insights: insights-client --register
Create an account or view all your systems at https://red.ht/insights-dashboard
Last failed login: Sun Apr 21 15:07:35 CST 2024 from 172.25.254.100 on ssh:notty
There was 1 failed login attempt since the last successful login.
Last login: Sun Apr 21 14:47:23 2024 from 172.25.254.100
实现timinglee登录

[root@server200 ~]# ssh -l joker 172.25.254.100
joker@172.25.254.100's password: 
Permission denied, please try again.
joker@172.25.254.100's password: 
Permission denied, please try again.
joker@172.25.254.100's password: 
joker@172.25.254.100: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
登录joker账户被拒绝