{"id":34663,"date":"2019-10-31T21:59:41","date_gmt":"2019-10-31T18:59:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podklyuchenie-k-windows-po-ssh-kak-v-linux\/"},"modified":"2019-10-31T21:59:41","modified_gmt":"2019-10-31T18:59:41","slug":"podklyuchenie-k-windows-po-ssh-kak-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/podklyuchenie-k-windows-po-ssh-kak-v-linux","title":{"rendered":"P\u0159ipojen\u00ed k Windows p\u0159es SSH jako v Linuxu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u017edy m\u011b tr\u00e1pilo p\u0159ipojen\u00ed k Windows stroj\u016fm. Ne\u0159\u00edk\u00e1m, \u017ee jsem odp\u016frce nebo p\u0159\u00edznivec Microsoftu a jejich produkt\u016f. Ka\u017ed\u00fd produkt m\u00e1 sv\u016fj \u00fa\u010del, ale to nen\u00ed t\u00e9ma t\u00e9to diskuse.
\nPro m\u011b v\u017edy bylo mu\u010div\u00e9 p\u0159ipojovat se k server\u016fm se syst\u00e9mem Windows, proto\u017ee tato p\u0159ipojen\u00ed jsou bu\u010f nastavena ne\u0161\u0165astn\u011b (ahoj WinRM s HTTPS), nebo nefunguj\u00ed p\u0159\u00edli\u0161 stabiln\u011b (zdrav\u00edm RDP k virtu\u00e1ln\u00edm stroj\u016fm za oce\u00e1nem).<\/p>\n

Proto jsem n\u00e1hodou narazil na projekt Win32-OpenSSH<\/a><\/noindex>, rozhodl jsem se pod\u011blit o zku\u0161enosti s nastaven\u00edm. Mo\u017en\u00e1 to n\u011bkomu u\u0161et\u0159\u00ed spoustu nerv\u016f.<\/p>\n

\"P\u0159ipojen\u00ed
\n<\/a><\/noindex>
\nMo\u017enosti instalace:<\/p>\n

    \n
  1. Manu\u00e1ln\u011b<\/a><\/noindex><\/li>\n
  2. P\u0159es bal\u00ed\u010dek<\/a><\/noindex> Chocolatey<\/li>\n
  3. P\u0159es Ansible, nap\u0159\u00edklad roli jborean93.win_openssh<\/a><\/noindex><\/li>\n<\/ol>\n

    \nD\u00e1le budu hovo\u0159it o prvn\u00edm bod\u011b, proto\u017ee s ostatn\u00edmi je to jasn\u00e9.<\/p>\n

    R\u00e1d bych poznamenal, \u017ee tento projekt je zat\u00edm ve st\u00e1diu beta, tak\u017ee se nedoporu\u010duje pou\u017e\u00edvat ho v produkci.<\/p>\n

    Tak\u017ee stahujeme posledn\u00ed release, moment\u00e1ln\u011b je to 7.9.0.0p1-beta<\/a><\/noindex>. Existuj\u00ed verze jak pro 32bitov\u00e9, tak i pro 64bitov\u00e9 syst\u00e9my.<\/p>\n

    Rozbal\u00edme do C:Program FilesOpenSSH<\/i>
    \nZ\u00e1sadn\u00ed bod pro spr\u00e1vnou funk\u010dnost: pr\u00e1va na z\u00e1pis v t\u00e9to slo\u017ece by m\u011bla m\u00edt pouze SYSTEM<\/i> a administrativn\u00ed skupina.<\/p>\n

    Nainstalujeme slu\u017eby skriptem install-sshd.ps1<\/i> nach\u00e1zej\u00edc\u00edm se v t\u00e9to slo\u017ece<\/p>\n

    powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1<\/code><\/pre>\n
    \nPovolujeme p\u0159\u00edchoz\u00ed p\u0159ipojen\u00ed na port 22:<\/p>\n
    New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22<\/code><\/pre>\n
    \nUp\u0159esn\u011bn\u00ed: applet New-NetFirewallRule<\/i> se pou\u017e\u00edv\u00e1 na Windows Serveru 2012 a nov\u011bj\u0161\u00edch. V nejstar\u0161\u00edch syst\u00e9mech (nebo desktopov\u00fdch) lze pou\u017e\u00edt p\u0159\u00edkaz:<\/p>\n
    netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22\n<\/code><\/pre>\n
    \nSpou\u0161t\u00edme slu\u017ebu:<\/p>\n
    net start sshd<\/code><\/pre>\n
    \nP\u0159i spu\u0161t\u011bn\u00ed budou automaticky vygenerov\u00e1ny hostovac\u00ed kl\u00ed\u010de (pokud neexistuj\u00ed) v %programdata%ssh<\/i><\/p>\n
    Automatick\u00e9 spu\u0161t\u011bn\u00ed slu\u017eby p\u0159i startu syst\u00e9mu m\u016f\u017eeme povolit p\u0159\u00edkazem:<\/p>\n
    Set-Service sshd -StartupType Automatic<\/code><\/pre>\n
    \nTak\u00e9 m\u016f\u017eeme zm\u011bnit v\u00fdchoz\u00ed p\u0159\u00edkazov\u00fd shell (po instalaci, v\u00fdchoz\u00ed \u2014 cmd<\/i>):<\/p>\n
    New-ItemProperty -Path \"HKLM:SOFTWAREOpenSSH\" -Name DefaultShell -Value \"C:WindowsSystem32WindowsPowerShellv1.0powershell.exe\" -PropertyType String -Force<\/code><\/pre>\n
    \nUp\u0159esn\u011bn\u00ed: Je nutn\u00e9 uv\u00e9st absolutn\u00ed cestu.<\/p>\n
    Co d\u00e1l?<\/p>\n
    A d\u00e1le nastavujeme sshd_config<\/i>, kter\u00fd se nach\u00e1z\u00ed v C:ProgramDatassh<\/i>. Nap\u0159\u00edklad:<\/p>\n
    PasswordAuthentication no\nPubkeyAuthentication yes<\/code><\/pre>\n
    \nA vytvo\u0159\u00edme v u\u017eivatelsk\u00e9 slo\u017ece adres\u00e1\u0159 .ssh<\/i>, a v n\u011bm soubor authorized_keys<\/i>. Zde zap\u00ed\u0161eme ve\u0159ejn\u00e9 kl\u00ed\u010de.<\/p>\n
    D\u016fle\u017eit\u00e9 up\u0159esn\u011bn\u00ed: pr\u00e1va pro z\u00e1pis do tohoto souboru by m\u011bl m\u00edt pouze u\u017eivatel, jeho\u017e adres\u00e1\u0159 obsahuje tento soubor.<\/p>\n
    Pokud s t\u00edm m\u00e1te probl\u00e9my, v\u017edy je mo\u017en\u00e9 v konfiguraci vypnout kontrolu pr\u00e1v:<\/p>\n
    StrictModes no<\/code><\/pre>\n
    \nMimochodem, C:Program FilesOpenSSH<\/i> existuj\u00ed 2 skripty (FixHostFilePermissions.ps1<\/i>, FixUserFilePermissions.ps1<\/i>), kter\u00e9 by m\u011bly, ale nemus\u00ed opravit pr\u00e1va, v\u010detn\u011b i s authorized_keys<\/i>, ale z n\u011bjak\u00e9ho d\u016fvodu neopravuj\u00ed.<\/p>\n
    Nezapom\u00ednejte restartovat slu\u017ebu sshd.<\/i> po zm\u011bn\u00e1ch pro jejich aplikaci.<\/p>\n
    ru-mbp-666:infrastructure$ ssh Administrator@192.168.1.10 -i ~\/.ssh\/id_rsa\nWindows PowerShell\nCopyright (C) 2016 Microsoft Corporation. V\u0161echna pr\u00e1va vyhrazena.\n\nPS C:\\Users\\Administrator> Get-Host\n\n\nN\u00e1zev             : ConsoleHost\nVerze             : 5.1.14393.2791\nId instance       : 653210bd-6f58-445e-80a0-66f66666f6f6\nUI                : System.Management.Automation.Internal.Host.InternalHostUserInterface\nAktu\u00e1ln\u00ed kultura  : en-US\nAktu\u00e1ln\u00ed UI kultura: en-US\nSoukrom\u00e1 data     : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy\nDebugger povolen  : True\nIsRunspacePushed  : False\nRunspace          : System.Management.Automation.Runspaces.LocalRunspace\n\nPS C:\\Users\\Administrator><\/code><\/pre>\n
    \nSubjektivn\u00ed klady\/\u00e1tmy.<\/p>\n
    Plusy:<\/p>\n