{"id":123013,"date":"2025-03-26T16:22:56","date_gmt":"2025-03-26T14:22:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect"},"modified":"2025-03-26T16:22:56","modified_gmt":"2025-03-26T14:22:58","slug":"kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","title":{"rendered":"Kompania Cloudflare publikoi opkssh p\u00ebr autentifikimin n\u00eb SSH p\u00ebrmes OpenID Connect","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Cloudflare prezantoi mjetin opkssh (OpenPubkey SSH), i cili lejon integrimin n\u00eb OpenSSH t\u00eb mjeteve t\u00eb autentifikimit t\u00eb centralizuar me mund\u00ebsin\u00eb e hyrjes p\u00ebrmes ofruesve t\u00eb OpenID Connect. Me opkssh, mund t\u00eb shmangni pun\u00ebn manuale p\u00ebr menaxhimin dhe konfigurimin e \u00e7el\u00ebsave SSH, si dhe t\u00eb organizoni lidhjen me serverin nga \u00e7do host, pa nevoj\u00ebn p\u00ebr t\u00eb krijuar \u00e7el\u00ebsa privat\u00eb n\u00eb \u00e7do kompjuter klient dhe pa kopjimin manual t\u00eb \u00e7el\u00ebsave publik\u00eb n\u00eb server. P\u00ebr t'u lidhur, mjafton t\u00eb realizoni n\u00eb server lidhjen me llogarin\u00eb te ofruesi i OpenID. Kodi i mjetit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Go dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n

Opkssh \u00ebsht\u00eb kompatibil me ofruesit e OpenID si Google, Microsoft\/Azure dhe Gitlab, \u00e7ka lejon konfigurimin e hyrjes p\u00ebrmes llogarive ekzistuese n\u00eb sh\u00ebrbimet gmail.com, microsoft.com dhe gitlab.com. Kur p\u00ebrdoret opkssh n\u00eb vend t\u00eb \u00e7el\u00ebsave SSH t\u00eb pakufizuar, gjenerohen \u00e7el\u00ebsa t\u00eb p\u00ebrkohsh\u00ebm, q\u00eb jan\u00eb t\u00eb vlefsh\u00ebm vet\u00ebm p\u00ebr disa or\u00eb dhe formohen mbi baz\u00ebn e konfirmimit nga ofruesi i OpenID. Shp\u00ebrthimi i \u00e7el\u00ebsave t\u00eb till\u00eb pas skadimit t\u00eb vlefshm\u00ebris\u00eb nuk paraqet rrezik p\u00ebr sigurin\u00eb. N\u00eb parazgjedhje, koha e vlefshm\u00ebris\u00eb s\u00eb \u00e7el\u00ebsit \u00ebsht\u00eb 24 or\u00eb, pas s\u00eb cil\u00ebs \u00ebsht\u00eb e nevojshme t\u00eb ri-identifikoheni p\u00ebrmes OpenID. <\/p>\n

Integrimi me OpenSSH bazohet n\u00eb mund\u00ebsin\u00eb e krijimit t\u00eb zgjerimeve t\u00eb protokollit SSH, t\u00eb cilat lejojn\u00eb bashk\u00ebngjitjen e t\u00eb dh\u00ebnave t\u00eb rast\u00ebsishme n\u00eb certifikatat SSH. Pas vijueshm\u00ebris\u00eb t\u00eb autentifikimit p\u00ebrmes OpenID, klienti formon nj\u00eb \u00e7el\u00ebs publik, i cili p\u00ebrmban nj\u00eb PK-token, q\u00eb konfirmon p\u00ebrkat\u00ebsin\u00eb e \u00e7el\u00ebsit te p\u00ebrdoruesi i deklaruar. Tokeni integrohet n\u00eb protokollin SSH p\u00ebrmes nj\u00eb fushe me t\u00eb dh\u00ebna shtes\u00eb n\u00eb certifikat\u00ebn SSH. Krijimi i PK-token\u00ebve dhe verifikimi i tyre n\u00eb an\u00ebn e serverit realizohet duke p\u00ebrdorur protokollin kriptografik OpenPubKey. <\/p>\n

OpenPubKey le permite t\u00eb gjeneroj\u00eb nj\u00eb \u00e7el\u00ebs t\u00eb hapur dhe ta lidh\u00eb at\u00eb me tokenin e l\u00ebshuar nga ofruesi i OpenID. P\u00ebrdorimi i n\u00ebnshkrimit digjital, ofruesi konfirmon se ky \u00e7el\u00ebs \u00ebsht\u00eb krijuar nga p\u00ebrdoruesi i identifikuar. P\u00ebr shembull, ofruesi i OpenID Google mund t\u00eb konfirmoj\u00eb se p\u00ebrdoruesi \u00ebsht\u00eb autentikuar si test@gmail.com. N\u00eb an\u00ebnveri, kryhet verifikimi n\u00ebse tokeni e lidhur \u00ebsht\u00eb i n\u00ebnshkruar nga ofruesi i OpenID dhe n\u00ebse n\u00ebnshkrimi digjital korrespondon me \u00e7el\u00ebsin e hapur t\u00eb deklaruar, q\u00eb do t\u00eb thot\u00eb se serveri mund t\u00eb sigurohet se p\u00ebrdoruesi test@gmail.com ka krijuar \u00e7el\u00ebsin e hapur p\u00ebr klientin SSH t\u00eb lidhur.

\"Kompania<\/center> <\/p>\n

Integrimi me OpenSSH \u00ebsht\u00eb organizuar duke specifikuar programin opkssh n\u00eb skedarin e konfigurimit «sshd_config» p\u00ebrmes drejtoris\u00eb «AuthorizedKeysCommand» (p.sh.: «AuthorizedKeysCommand \/usr\/local\/bin\/opkssh verify %u %k %t»). Konfigurimi i lidhjes s\u00eb llogarive me OpenID b\u00ebhet nga ana e serverit SSH. Nga ana e klientit SSH nuk k\u00ebrkohen ndryshime t\u00eb konfigurimeve, por p\u00ebrpara hyrjes \u00ebsht\u00eb e nevojshme t\u00eb startoni komand\u00ebn «opkssh login» dhe n\u00eb dritaren e shfletuesit q\u00eb shfaqet t\u00eb zgjidhet ofruesi OpenID dhe t\u00eb kryhet autentifikimi p\u00ebrmes tij. <\/p>\n

Ulliteta opkssh do t\u00eb gjeneroj\u00eb \u00e7el\u00ebsa SSH dhe do t\u00eb marr\u00eb tokenin PK q\u00eb konfirmon se p\u00ebrdoruesi \u00ebsht\u00eb autentikuar dhe lejon t\u00eb verifikohet se \u00e7el\u00ebsat e krijuar i p\u00ebrkasin p\u00ebrdoruesit t\u00eb deklaruar. \u00c7el\u00ebsi i hapur SSH, i cili \u00ebsht\u00eb i lidhur me tokenin PK p\u00ebrmes fush\u00ebs me t\u00eb dh\u00ebna shtes\u00eb, do t\u00eb shkruhet n\u00eb skedarin ~\/.ssh\/id_ecdsas dhe do t\u00eb filloj\u00eb t\u00eb d\u00ebrgohet kur lidhet me serverit<\/a> ullit\u00ebn ssh. <\/p>\n

Kykja n\u00eb server b\u00ebhet duke p\u00ebrdorur skem\u00ebn standarde p\u00ebr SSH «ssh login@server», nd\u00ebrsa n\u00eb server<\/a> login-i duhet paraprakisht t\u00eb identifikohet me llogarin\u00eb n\u00eb OpenID q\u00eb p\u00ebrdor p\u00ebrdoruesi. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, puna p\u00ebrfundon me at\u00eb q\u00eb klienti ssh d\u00ebrgon n\u00eb serverin ssh \u00e7el\u00ebsin publik, dhe serveri ekzekuton komand\u00ebn «opkssh verify» p\u00ebr t\u00eb verifikuar \u00e7el\u00ebsin. <\/p>\n

P\u00ebr t\u00eb lidhur llogarin\u00eb me OpenID, administratori i serverit ekzekuton komand\u00ebn «opkssh add». P\u00ebr shembull, p\u00ebr t\u00eb lejuar qasjen n\u00eb server me p\u00ebrdoruesin «root» me autentifikim OpenID p\u00ebr llogarin\u00eb test@gmail.com n\u00eb Gmail, duhet t\u00eb ekzekutohet «sudo opkssh add root test@gmail.com google», pas s\u00eb cil\u00ebs klienti do t\u00eb mund t\u00eb lidhet me parametrat e k\u00ebsaj llogarie me komand\u00ebn «ssh root@host_server». <\/p>\n

Lidhjen e llogaris\u00eb mund ta b\u00ebni gjithashtu manualisht n\u00eb skedarin e konfigurimit \/etc\/opk\/auth_id (ose ~\/ .opk\/auth_id), n\u00eb t\u00eb cilin p\u00ebr shembullin e lartp\u00ebrmendur do t\u00eb ruhet rreshti «root test@gmail.com https:\/\/accounts.google.com». P\u00ebrve\u00e7 k\u00ebsaj, p\u00ebrmes skedarit \/etc\/opk\/providers mund t\u00eb p\u00ebrcaktoni list\u00ebn e ofruesve t\u00eb lejuar OpenID, parametrat e tyre dhe list\u00ebn e identifikator\u00ebve t\u00eb klient\u00ebve t\u00eb lejuar.

\"Kompania<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 opkssh (OpenPubkey SSH), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 OpenSSH \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u0445\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 OpenID Connect. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 opkssh \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0440\u0443\u0447\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 SSH-\u043a\u043b\u044e\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441 \u043b\u044e\u0431\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0431\u0435\u0437 \u0440\u0443\u0447\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":123014,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123013","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompania Cloudflare publikoi opkssh p\u00ebr autentifikimin n\u00eb SSH p\u00ebrmes OpenID Connect | ProHoster","description":"Kompania Cloudflare prezantoi mjetin opkssh (OpenPubkey SSH), i cili lejon integrimin n\u00eb OpenSSH t\u00eb mjeteve t\u00eb autentifikimit t\u00eb centralizuar me mund\u00ebsin\u00eb e hyrjes p\u00ebrmes ofruesve t\u00eb OpenID Connect.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 opkssh \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SSH \u0447\u0435\u0440\u0435\u0437 OpenID Connect | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 opkssh (OpenPubkey SSH), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 OpenSSH \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u0445\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 OpenID Connect.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/kompaniya-cloudflare-opublikovala-opkssh-dlya-autentifikaczii-v-ssh-cherez-openid-connect","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-03-26T14:22:58+00:00","article:modified_time":"2025-03-26T14:22:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123013","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:38:16","updated":"2026-02-09 22:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=123013"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123013\/revisions"}],"predecessor-version":[{"id":160229,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123013\/revisions\/160229"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/123014"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=123013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=123013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=123013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}