{"id":34663,"date":"2019-10-31T21:59:41","date_gmt":"2019-10-31T18:59:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podklyuchenie-k-windows-po-ssh-kak-v-linux\/"},"modified":"2019-10-31T21:59:41","modified_gmt":"2019-10-31T18:59:41","slug":"podklyuchenie-k-windows-po-ssh-kak-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/podklyuchenie-k-windows-po-ssh-kak-v-linux","title":{"rendered":"Lidhja me Windows p\u00ebrmes SSH si n\u00eb Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

M\u00eb ka shqet\u00ebsuar gjithmon\u00eb lidhja me makinat Windows. Jo, nuk jam nj\u00eb kund\u00ebrshtar dhe as nj\u00eb mb\u00ebshtet\u00ebs i Microsoft dhe produkteve t\u00eb tyre. \u00c7do produkt ekziston p\u00ebr nj\u00eb q\u00ebllim t\u00eb vetin, por nuk \u00ebsht\u00eb fjala p\u00ebr k\u00ebt\u00eb.
\nP\u00ebr mua ka qen\u00eb gjithmon\u00eb nj\u00eb dhimbje e madhe t\u00eb lidhem me server\u00ebt me Windows, sepse k\u00ebto lidhje ose konfigurohen p\u00ebrmes nj\u00eb vendi t\u00eb mundsh\u00ebm (p\u00ebrsh\u00ebndetje WinRM me HTTPS) ose nuk funksionojn\u00eb shum\u00eb stabilisht (p\u00ebrsh\u00ebndetje RDP p\u00ebr makinat virtuale p\u00ebrtej oqeanit).<\/p>\n

Prandaj, duke u ndeshur rast\u00ebsisht me projektin Win32-OpenSSH<\/a><\/noindex>, vendosa t\u00eb ndaj p\u00ebrvoj\u00ebn time n\u00eb konfigurim. Ndoshta kjo mjet do t\u2019i kursej\u00eb nervat dikujt.<\/p>\n

\"Lidhja
\n<\/a><\/noindex>
\nMund\u00ebsit\u00eb p\u00ebr instalim:<\/p>\n

    \n
  1. Dore<\/a><\/noindex><\/li>\n
  2. P\u00ebrmes paket\u00ebn<\/a><\/noindex> Chocolatey<\/li>\n
  3. P\u00ebrmes Ansible, p\u00ebr shembull roli jborean93.win_openssh<\/a><\/noindex><\/li>\n<\/ol>\n

    \nM\u00eb pas do t\u00eb flas p\u00ebr pik\u00ebn e par\u00eb, sepse p\u00ebr t\u00eb tjerat dihet m\u00eb shum\u00eb ose m\u00eb pak.<\/p>\n

    Dua t\u00eb theksoj se ky projekt \u00ebsht\u00eb ende n\u00eb faz\u00ebn beta, prandaj nuk rekomandohet p\u00ebr p\u00ebrdorim n\u00eb prodhim.<\/p>\n

    Pra, shkarkohet versioni m\u00eb i fundit, n\u00eb k\u00ebt\u00eb moment \u00ebsht\u00eb 7.9.0.0p1-beta<\/a><\/noindex>. Ka versione si p\u00ebr sistemet 32 ashtu dhe p\u00ebr ato 64-bit.<\/p>\n

    Nxirret n\u00eb C:Program FilesOpenSSH<\/i>
    \nNj\u00eb moment i domosdosh\u00ebm p\u00ebr funksionimin e sakt\u00eb: t\u00eb drejtat p\u00ebr t\u00eb shkruajtur n\u00eb k\u00ebt\u00eb direktor duhet t\u00eb jen\u00eb vet\u00ebm p\u00ebr SYSTEM<\/i> dhe grupin e administrator\u00ebve.<\/p>\n

    Instaloni sh\u00ebrbimet me skriptin install-sshd.ps1<\/i> n\u00eb k\u00ebt\u00eb direktor<\/p>\n

    powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1<\/code><\/pre>\n
    \nLejo lidhjet hyr\u00ebse n\u00eb portin 22:<\/p>\n
    New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22<\/code><\/pre>\n
    \nSqarim: applet New-NetFirewallRule<\/i> p\u00ebrdoret n\u00eb Windows Server 2012 dhe m\u00eb t\u00eb reja. N\u00eb sistemet m\u00eb t\u00eb vjetra (ose desktop) mund t\u00eb p\u00ebrdoren urdhrat:<\/p>\n
    netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22\n<\/code><\/pre>\n
    \nNisni sh\u00ebrbimin:<\/p>\n
    net start sshd<\/code><\/pre>\n
    \nKur filloni, do t\u00eb krijohen automatikisht \u00e7el\u00ebsat e hostit (n\u00ebse mungojn\u00eb) n\u00eb %programdata%ssh<\/i><\/p>\n
    Mund t\u00eb aktivizojm\u00eb nisjen automatike t\u00eb sh\u00ebrbimit gjat\u00eb nisjes s\u00eb sistemit me urdhrin:<\/p>\n
    Set-Service sshd -StartupType Automatic<\/code><\/pre>\n
    \nPo ashtu, mund t\u00eb ndryshojm\u00eb shell-in e komandave t\u00eb paracaktuar (pas instalimit, e cila \u00ebsht\u00eb parazgjedhja \u2014 cmd<\/i>):<\/p>\n
    New-ItemProperty -Path \"HKLM:SOFTWAREOpenSSH\" -Name DefaultShell -Value \"C:WindowsSystem32WindowsPowerShellv1.0powershell.exe\" -PropertyType String -Force<\/code><\/pre>\n
    \nSqarim: Duhet t\u00eb specifikohet rruga absolute.<\/p>\n
    \u00c7far\u00eb ndodh m\u00eb tej?<\/p>\n
    Dhe m\u00eb pas konfigurojm\u00eb sshd_config<\/i>, i cili ndodhet n\u00eb C:ProgramDatassh<\/i>. P\u00ebr shembull:<\/p>\n
    PasswordAuthentication no\nPubkeyAuthentication yes<\/code><\/pre>\n
    \nDhe krijojm\u00eb nj\u00eb direktor n\u00eb dosjen e p\u00ebrdoruesit .ssh<\/i>, dhe n\u00eb t\u00eb skedarin authorized_keys<\/i>. Atje shkruajm\u00eb \u00e7el\u00ebsat publik.<\/p>\n
    Nj\u00eb sqarim i r\u00ebnd\u00ebsish\u00ebm: t\u00eb drejtat p\u00ebr t\u00eb shkruar n\u00eb k\u00ebt\u00eb skedar duhet t\u00eb ket\u00eb vet\u00ebm p\u00ebrdoruesi, n\u00eb direktorish q\u00eb ndodhet skedari.<\/p>\n
    Por n\u00ebse keni probleme me k\u00ebt\u00eb, gjithmon\u00eb mund t\u00eb \u00e7aktivizoni verifikimin e t\u00eb drejtave n\u00eb konfigurim:<\/p>\n
    StrictModes no<\/code><\/pre>\n
    \nDhe, n\u00eb C:Program FilesOpenSSH<\/i> ndodhen 2 skripte (FixHostFilePermissions.ps1<\/i>, FixUserFilePermissions.ps1<\/i>), t\u00eb cilat duhet t\u00eb rregullojn\u00eb t\u00eb drejtat, por nuk jan\u00eb t\u00eb detyrueshme, duke p\u00ebrfshir\u00eb dhe authorized_keys<\/i>, por p\u00ebr ndonj\u00eb arsye nuk rregullojn\u00eb.<\/p>\n
    Mos harroni t\u00eb rinisni sh\u00ebrbimin sshd<\/i> pas p\u00ebr t\u00eb aplikuar ndryshimet.<\/p>\n
    ru-mbp-666:infrastructure$ ssh Administrator@192.168.1.10 -i ~\\\/ssh\/id_rsa\nWindows PowerShell\nCopyright (C) 2016 Microsoft Corporation. T\u00eb gjith\u00eb t\u00eb drejtat e rezervuara.\n\nPS C:UsersAdministrator> Get-Host\n\n\nEmri              : ConsoleHost\nVersion           : 5.1.14393.2791\nInstanceId        : 653210bd-6f58-445e-80a0-66f66666f6f6\nUI                : System.Management.Automation.Internal.Host.InternalHostUserInterface\nKulturaAktuale     : en-US\nKulturaUIAktuale   : en-US\nT\u00ebDh\u00ebnatPrivate    : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy\nDebuggerEnabled    : True\nIsRunspacePushed   : False\nRunspace           : System.Management.Automation.Runspaces.LocalRunspace\n\nPS C:UsersAdministrator><\/code><\/pre>\n
    \nAvantazhet\/dobit\u00eb subjektive.<\/p>\n
    Avantazhet:<\/p>\n