{"id":123013,"date":"2025-03-26T16:22:56","date_gmt":"2025-03-26T14:22:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect"},"modified":"2025-03-26T16:22:56","modified_gmt":"2025-03-26T14:22:58","slug":"kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","title":{"rendered":"Kompania Cloudflare publikoi opkssh p\u00ebr autentifikimin n\u00eb SSH p\u00ebrmes OpenID Connect","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Cloudflare prezantoi mjetin opkssh (OpenPubkey SSH), i cili lejon integrimin e mjeteve p\u00ebr autentifikimin e centralizuar n\u00eb OpenSSH me mund\u00ebsin\u00eb e qasjes p\u00ebrmes ofruesve OpenID Connect. Me ndihm\u00ebn e opkssh, mund t\u00eb eliminohet puna manuale n\u00eb menaxhimin dhe konfigurimin e \u00e7el\u00ebsave SSH, si dhe t\u00eb organizohet lidhja me serverin nga ndonj\u00eb host, pa pasur nevoj\u00eb p\u00ebr krijimin e \u00e7el\u00ebsave privat\u00eb n\u00eb \u00e7do kompjuter klient dhe pa kopjimin manual t\u00eb \u00e7el\u00ebsave t\u00eb hapur n\u00eb server. P\u00ebr t'u lidhur, mjafton t\u00eb kryhet lidhja me llogarin\u00eb tek ofruesi OpenID n\u00eb server. <\/p>\n

Opkssh \u00ebsht\u00eb e p\u00ebrshtatshme me ofruesit OpenID t\u00eb Google, Microsoft\/Azure dhe Gitlab, gj\u00eb q\u00eb lejon konfigurimin e qasjes p\u00ebrmes llogarive ekzistuese n\u00eb sh\u00ebrbimet gmail.com, microsoft.com dhe gitlab.com. Kur p\u00ebrdoret opkssh, p\u00ebrve\u00e7 \u00e7el\u00ebsave SSH pa limit n\u00eb koh\u00eb, gjenerohen \u00e7el\u00ebsa t\u00eb p\u00ebrkohsh\u00ebm, t\u00eb cil\u00ebt jan\u00eb t\u00eb vlefsh\u00ebm p\u00ebr disa or\u00eb dhe formohen n\u00eb baz\u00eb t\u00eb konfirmimit nga ofruesi OpenID. Shkarkimi i k\u00ebtyre \u00e7el\u00ebsave pas skadimit t\u00eb afatit nuk paraqet k\u00ebrc\u00ebnim p\u00ebr sigurin\u00eb. Si parazgjedhje, koh\u00ebzgjatja e vlefshm\u00ebris\u00eb s\u00eb \u00e7el\u00ebsit \u00ebsht\u00eb 24 or\u00eb, pas s\u00eb cil\u00ebs \u00ebsht\u00eb e nevojshme t\u00eb identifikohesh p\u00ebrs\u00ebri p\u00ebrmes OpenID. <\/p>\n

Integrimi me OpenSSH bazohet n\u00eb mund\u00ebsin\u00eb e krijimit t\u00eb zgjerimeve t\u00eb protokollit SSH, q\u00eb lejojn\u00eb bashkimin e t\u00eb dh\u00ebnave t\u00eb rastit n\u00eb certifikatat SSH. Pas kalimit t\u00eb autentifikimit p\u00ebrmes OpenID, klienti krijon nj\u00eb \u00e7el\u00ebs t\u00eb hapur, i cili p\u00ebrmban nj\u00eb PK-token, q\u00eb konfirmon p\u00ebrkat\u00ebsin\u00eb e \u00e7el\u00ebsit me p\u00ebrdoruesin e deklaruar. Tokeni integrihet n\u00eb protokollin SSH p\u00ebrmes nj\u00eb fushe me t\u00eb dh\u00ebna shtes\u00eb t\u00eb certifikat\u00ebs SSH. Krijimi dhe verifikimi i PK-token\u00ebve n\u00eb an\u00ebn e serverit b\u00ebhet duke p\u00ebrdorur protokollin kriptografik OpenPubKey. <\/p>\n

OpenPubKey lejon gjenerimin e nj\u00eb \u00e7el\u00ebsi t\u00eb hapur dhe lidhjen e tij me nj\u00eb token, q\u00eb i \u00ebsht\u00eb dh\u00ebn\u00eb ofruesit OpenID. P\u00ebrmes n\u00ebnshkrimit digjital, ofruesi konfirmon se ky \u00e7el\u00ebs \u00ebsht\u00eb krijuar nga p\u00ebrdoruesi i autentikuar t\u00eb cilin e ka deklaruar. P\u00ebr shembull, ofruesi OpenID Google mund t\u00eb konfirmoj\u00eb se p\u00ebrdoruesi \u00ebsht\u00eb autentikuar si test@gmail.com. N\u00eb an\u00ebn e serverit, kryhet verifikimi n\u00ebse tokeni i bashkangjitur \u00ebsht\u00eb i n\u00ebnshkruar nga ofruesi OpenID dhe n\u00ebse n\u00ebnshkrimi digjital p\u00ebrputhet me \u00e7el\u00ebsin e hapur t\u00eb deklaruar, dmth. serveri mund t\u00eb konfirmoj\u00eb se n\u00eb t\u00eb v\u00ebrtet\u00eb p\u00ebrdoruesi test@gmail.com ka krijuar \u00e7el\u00ebsin e hapur p\u00ebr klientin SSH q\u00eb \u00ebsht\u00eb lidhur.

\"Kompania<\/center> <\/p>\n

Integrimi me OpenSSH \u00ebsht\u00eb organizuar p\u00ebrmes caktimit t\u00eb programit opkssh n\u00eb skedarin e konfigurimit 'sshd_config' p\u00ebrmes direktiv\u00ebs 'AuthorizedKeysCommand' (p.sh: 'AuthorizedKeysCommand \/usr\/local\/bin\/opkssh verify %u %k %t'). Konfigurimi i lidhjes s\u00eb llogarive me OpenID b\u00ebhet n\u00eb an\u00ebn e serverit SSH. N\u00eb an\u00ebn e klientit SSH nuk k\u00ebrkohen ndryshime t\u00eb konfigurimit, por para se t\u00eb hyhet, duhet t\u00eb ekzekutohet komanda 'opkssh login' dhe n\u00eb dritaren q\u00eb shfaqet n\u00eb shfletues, t\u00eb zgjidhet ofruesi OpenID dhe t\u00eb b\u00ebhet autentifikimi p\u00ebrmes tij. <\/p>\n

Utilita opkssh do t\u00eb gjeneroj\u00eb \u00e7el\u00ebsa SSH dhe do t\u00eb marr\u00eb nj\u00eb PK-token, q\u00eb konfirmon se p\u00ebrdoruesi ka kaluar autentifikimin dhe q\u00eb lejon verifikimin se \u00e7el\u00ebsat e krijuar i p\u00ebrkasin p\u00ebrdoruesit t\u00eb deklaruar. \u00c7el\u00ebsi i hapur SSH, i cili \u00ebsht\u00eb bashkangjitur me PK-token p\u00ebrmes fush\u00ebs me t\u00eb dh\u00ebna shtes\u00eb, do t\u00eb regjistrohet n\u00eb skedarin ~\/.ssh\/id_ecdsas dhe do t\u00eb filloj\u00eb t\u00eb transmitohet gjat\u00eb lidhjes me server<\/a> utilit\u00ebn ssh. <\/p>\n

Lidhja me serverin b\u00ebhet duke p\u00ebrdorur skem\u00ebn standarde p\u00ebr SSH 'ssh login@server', ku serveri<\/a> login duhet t\u00eb identifikohet paraprakisht me llogarin\u00eb n\u00eb OpenID q\u00eb p\u00ebrdor p\u00ebrdoruesi. K\u00ebshtu, puna p\u00ebrfshin q\u00eb klienti ssh d\u00ebrgon n\u00eb serverin ssh \u00e7el\u00ebsin publik, dhe serveri ekzekuton komand\u00ebn 'opkssh verify' p\u00ebr t\u00eb verifikuar \u00e7el\u00ebsin. <\/p>\n

P\u00ebr t\u00eb lidhur llogarin\u00eb me OpenID, administratori i serverit ekzekuton komand\u00ebn 'opkssh add'. P.sh, p\u00ebr t\u00eb lejuar hyrjen n\u00eb server si p\u00ebrdorues i 'root' me autentifikim OpenID p\u00ebrmes llogaris\u00eb test@gmail.com n\u00eb Gmail, duhet t\u00eb ekzekutohet 'sudo opkssh add root test@gmail.com google', pas s\u00eb cil\u00ebs klienti mund t\u00eb lidhet me parametrat e k\u00ebsaj llogarie p\u00ebrmes komand\u00ebs 'ssh root@host_server'. <\/p>\n

Lidhja e llogaris\u00eb mund t\u00eb b\u00ebhet gjithashtu manualisht p\u00ebrmes skedarit t\u00eb konfigurimit \/etc\/opk\/auth_id (ose ~\/.opk\/auth_id), n\u00eb t\u00eb cilin p\u00ebr shembullin e m\u00ebsip\u00ebrm do t\u00eb shkruhet rreshti 'root test@gmail.com https:\/\/accounts.google.com'. S\u00eb \ucd94\uac00, p\u00ebrmes skedarit \/etc\/opk\/providers mund t\u00eb p\u00ebrcaktohet lista e ofruesve t\u00eb pranuar t\u00eb OpenID, parametrat e tyre dhe lista e identifikator\u00ebve t\u00eb klient\u00ebve t\u00eb lejuar.

\"Kompania<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 opkssh (OpenPubkey SSH), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 OpenSSH \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u0445\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 OpenID Connect. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 opkssh \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0440\u0443\u0447\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 SSH-\u043a\u043b\u044e\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441 \u043b\u044e\u0431\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0431\u0435\u0437 \u0440\u0443\u0447\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":123014,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123013","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompania Cloudflare publikoi opkssh p\u00ebr autentifikim n\u00eb SSH p\u00ebrmes OpenID Connect | ProHoster","description":"Kompania Cloudflare prezantoi mjetin opkssh (OpenPubkey SSH), i cili lejon integrimin n\u00eb OpenSSH t\u00eb mjeteve p\u00ebr autentifikim t\u00eb centralizuar me mund\u00ebsin\u00eb e hyrjes p\u00ebrmes ofruesve t\u00eb OpenID Connect. Me ndihm\u00ebn e opkssh, mund t\u00eb eliminojm\u00eb pun\u00ebt manuale t\u00eb menaxhimit dhe konfigurimit t\u00eb \u00e7el\u00ebsave SSH, si dhe t\u00eb organizojm\u00eb lidhjen me serverin nga \u00e7do host, pa pasur nevoj\u00eb t\u00eb krijojm\u00eb \u00e7el\u00ebsa privat\u00eb n\u00eb \u00e7do kompjuter klient dhe pa pun\u00eb manuale.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 opkssh \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SSH \u0447\u0435\u0440\u0435\u0437 OpenID Connect | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 opkssh (OpenPubkey SSH), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 OpenSSH \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u0445\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 OpenID Connect. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 opkssh \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0440\u0443\u0447\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 SSH-\u043a\u043b\u044e\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441 \u043b\u044e\u0431\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0431\u0435\u0437 \u0440\u0443\u0447\u043d\u043e\u0433\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-03-26T14:22:58+00:00","article:modified_time":"2025-03-26T14:22:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123013","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:38:16","updated":"2026-02-09 22:07:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=123013"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123013\/revisions"}],"predecessor-version":[{"id":160229,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123013\/revisions\/160229"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/123014"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=123013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=123013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=123013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}