{"id":34663,"date":"2019-10-31T21:59:41","date_gmt":"2019-10-31T18:59:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podklyuchenie-k-windows-po-ssh-kak-v-linux\/"},"modified":"2019-10-31T21:59:41","modified_gmt":"2019-10-31T18:59:41","slug":"podklyuchenie-k-windows-po-ssh-kak-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/podklyuchenie-k-windows-po-ssh-kak-v-linux","title":{"rendered":"Savieno\u0161ana ar Windows caur SSH k\u0101 Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Man vienm\u0113r ir \u0161\u0137itis, ka savienojums ar Windows datoriem ir apgr\u016btino\u0161s. N\u0113, es neesmu pret Microsoft un vi\u0146u produktiem. Katrs produkts past\u0101v savam m\u0113r\u0137im, bet runa nav par to.
\nMan vienm\u0113r bija moko\u0161i gr\u016bti piesl\u0113gties Windows serveriem, jo \u0161ie savienojumi vai nu tiek iestat\u012bti caur ne\u0113rt\u0101m metod\u0113m (sveiks, WinRM ar HTTPS), vai ar\u012b nav stabils (sveiks, RDP uz virtu\u0101lajiem serveriem oke\u0101na otr\u0101 pus\u0113).<\/p>\n

T\u0101p\u0113c, nejau\u0161i uzd\u016broties projektam Win32-OpenSSH<\/a><\/noindex>, es nol\u0113mu dal\u012bties pieredz\u0113 par konfigur\u0101ciju. Varb\u016bt k\u0101ds \u0161o r\u012bku izmantos, lai ietaup\u012btu daudz nervu.<\/p>\n

\"Savieno\u0161ana
\n<\/a><\/noindex>
\nInstal\u0101cijas varianti:<\/p>\n

    \n
  1. Rokasgr\u0101mata<\/a><\/noindex><\/li>\n
  2. Caur pakotne<\/a><\/noindex> Chocolatey<\/li>\n
  3. Caur Ansible, piem\u0113ram, lomu jborean93.win_openssh<\/a><\/noindex><\/li>\n<\/ol>\n

    \nT\u0101l\u0101k es run\u0101\u0161u par pirmo punktu, jo ar p\u0101r\u0113jiem un t\u0101pat viss ir sam\u0113r\u0101 skaidrs.<\/p>\n

    Atz\u012b\u0161os, ka \u0161is projekts pagaid\u0101m ir beta stadij\u0101, t\u0101p\u0113c to neiesaka izmantot ra\u017eo\u0161an\u0101.<\/p>\n

    T\u0101tad, lejupiel\u0101d\u0113jam jaun\u0101ko izlaidumu, \u0161obr\u012bd tas ir 7.9.0.0p1-beta<\/a><\/noindex>. Ir versijas gan 32, gan 64 bitu sist\u0113m\u0101m.<\/p>\n

    Izpakojam to C:Program FilesOpenSSH<\/i>
    \nOblig\u0101ts moments pareizai darb\u012bbai: ierakst\u012b\u0161anas ties\u012bb\u0101m \u0161aj\u0101 direktorij\u0101 j\u0101b\u016bt tikai SYSTEM<\/i> un administr\u0101cijas grupai.<\/p>\n

    Instal\u0113jam pakalpojumus ar skriptu install-sshd.ps1<\/i> atrodas \u0161aj\u0101 direktorij\u0101<\/p>\n

    powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1<\/code><\/pre>\n
    \nAt\u013caujam ien\u0101ko\u0161us savienojumus uz 22. portu:<\/p>\n
    New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22<\/code><\/pre>\n
    \nPreciz\u0113jums: aplets New-NetFirewallRule<\/i> tiek izmantots Windows Server 2012 un jaun\u0101k\u0101s versij\u0101s. Vec\u0101k\u0101s sist\u0113m\u0101s (vai desktop) varat izmantot komandu:<\/p>\n
    netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22\n<\/code><\/pre>\n
    \nPalai\u017eam servisu:<\/p>\n
    net start sshd<\/code><\/pre>\n
    \nStart\u0113jot, tiks autom\u0101tiski \u0123ener\u0113ti hosta atsl\u0113gas (ja t\u0101s nav) sada\u013c\u0101 %programdata%ssh<\/i><\/p>\n
    Autom\u0101tisko pakalpojuma startu pie sist\u0113mas palai\u0161anas varam aktiviz\u0113t ar komandu:<\/p>\n
    Set-Service sshd -StartupType Automatic<\/code><\/pre>\n
    \nT\u0101pat var main\u012bt noklus\u0113juma komandu apvalku (p\u0113c instal\u0113\u0161anas, noklus\u0113juma ir cmd<\/i>):<\/p>\n
    New-ItemProperty -Path \"HKLM:SOFTWAREOpenSSH\" -Name DefaultShell -Value \"C:WindowsSystem32WindowsPowerShellv1.0powershell.exe\" -PropertyType String -Force<\/code><\/pre>\n
    \nPreciz\u0113jums: j\u0101nor\u0101da absol\u016bta ce\u013ca.<\/p>\n
    Kas t\u0101l\u0101k?<\/p>\n
    T\u0101l\u0101k konfigur\u0113jam sshd_config<\/i>, kas atrodas C:ProgramDatassh<\/i>. Piem\u0113ram:<\/p>\n
    PasswordAuthentication no\nPubkeyAuthentication yes<\/code><\/pre>\n
    \nUn izveidojam lietot\u0101ja map\u0113 direktoriju .ssh<\/i>, bet taj\u0101 failu authorized_keys<\/i>. Taj\u0101 ierakst\u0101m publisk\u0101s atsl\u0113gas.<\/p>\n
    Svar\u012bgs paskaidrojums: rakst\u012b\u0161anas ties\u012bbas \u0161aj\u0101 fail\u0101 var ieg\u016bt tikai lietot\u0101js, kura direktorij\u0101 atrodas fails.<\/p>\n
    Tom\u0113r, ja jums ir probl\u0113mas ar to, vienm\u0113r varat izsl\u0113gt ties\u012bbu p\u0101rbaudi konfigur\u0101cij\u0101:<\/p>\n
    StrictModes n\u0113<\/code><\/pre>\n
    \nStarpcitu, C:Program FilesOpenSSH<\/i> atrodas 2 skripti (FixHostFilePermissions.ps1<\/i>, FixUserFilePermissions.ps1<\/i>), kuriem vajadz\u0113tu, bet nav oblig\u0101ti, labot ties\u012bbas, tostarp ar\u012b ar authorized_keys<\/i>, bet k\u0101p\u0113c kaut k\u0101d\u0101 zi\u0146\u0101 nemaz neatlabo.<\/p>\n
    Nepiecie\u0161ams neaizmirst p\u0101rl\u0101d\u0113t pakalpojumu sshd.<\/i> p\u0113c tam, lai realiz\u0113tu izmai\u0146as.<\/p>\n
    ru-mbp-666:infrastructure$ ssh Administrator@192.168.1.10 -i ~\/ .ssh\/id_rsa\nWindows PowerShell\nAutorties\u012bbas (C) 2016 Microsoft Corporation. Visas ties\u012bbas rezerv\u0113tas.\n\nPS C:UsersAdministrator> Get-Host\n\n\nNosaukums          : ConsoleHost\nVersija           : 5.1.14393.2791\nInstanceId        : 653210bd-6f58-445e-80a0-66f66666f6f6\nUI                : System.Management.Automation.Internal.Host.InternalHostUserInterface\nCurrentCulture    : en-US\nCurrentUICulture  : en-US\nPrivateData       : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy\nDebuggerEnabled    : Patiesi\nIsRunspacePushed  : Ne\nRunspace          : System.Management.Automation.Runspaces.LocalRunspace\n\nPS C:UsersAdministrator><\/code><\/pre>\n
    \nSubjekt\u012bvie plusi\/m\u012bnusi.<\/p>\n
    Priek\u0161roc\u012bbas:<\/p>\n