ืืื ืืืข ืฉืืขื ืืืง ืืขืืืขื ืคืจืึทืกืืจืืืืึทื ืืืจื ืงืึทื ืขืงืืื ื ืฆื Windows ืืืฉืื ืขื. ื ืืื, ืืื ืืื ื ืื ืึท ืงืขืื ืขืจ ืืื ื ืื ืึท ืกืึทืคึผืึธืจืืขืจ ืคืื ืืืืงืจืึธืกืึธืคึฟื ืืื ืืืืขืจ ืคึผืจืึธืืืงืื. ืืขืืขืจ ืคึผืจืึธืืืงื ืืืืืกืฅ ืคึฟืึทืจ ืืืื ืืืืื ืฆืื, ืึธืืขืจ ืืึธืก ืืื ื ืืฉื ืืืึธืก ืืึธืก ืืื ืืืขืื.
ืขืก ืืื ืฉืืขื ืืืง ืืขืืืขื ืืืืืืืงืืืง ืคึฟืึทืจ ืืืจ ืฆื ืคืึทืจืืื ืื ืฆื Windows ืกืขืจืืืขืจืก, ืืืืึทื ืื ืงืึทื ืขืงืฉืึทื ื ืืขื ืขื ืงืึทื ืคืืืืขืจื ืืืจื ืืืื ืึธืจื (ืืขืื ืืืื ืจื ืืื ืืืืคึผืก) ืึธืืขืจ ืึทืจืืขื ื ืืฉื ืืืืขืจ ืกืืึทืืื (ืืขืื ืจืืคึผ ืฆื ืืืืจืืืึทื ืืืฉืื ืขื ืืขืืืืืขืจ - ืืืืึทื).
ืืขืจืืืขืจ, ืืืืื ืึทืงืกืึทืืขื ืึทืื ืงืืืขื ืึทืจืืืขืจ ืื ืคึผืจืืืขืงื , ืืื ืืึทืฉืืึธืกื ืฆื ืืืืื ืืืื ืกืขืืึทืคึผ ืืขืจืคืึทืจืื ื. ืืึธืืขืจ ืืขื ืืขืฆืืึทื ืืืขื ืจืึทืืขืืืขื ืขืืขืฆืขืจ ืึท ืคึผืืึทืฅ ืคืื ื ืขืจืืืขืก.
ืื ืกืืึทืืืจืื ื ืึธืคึผืฆืืขืก:
- ืืืจื ืฉืึธืงืึธืืึทืื
- ืืืจื ืึทื ืกืืืืข, ืคึฟืึทืจ ืืืึทืฉืคึผืื ืจืึธืืข
ืืืืึทืืขืจ, ืืื ืืืขื ืจืขืื ืืืขืื ืืขืจ ืขืจืฉืืขืจ ืคืื ื, ืืืืึทื ืึทืืฅ ืืื ืืขืจ ืึธืืขืจ ืืืืื ืืงืขืจ ืงืืึธืจ ืืื ืื ืื ืืื.
ืืื ืืืึธืื ืืื ืฆื ืืึธื ืึทื ืื ืคึผืจืืืขืงื ืืื ื ืึธื ืืื ืื ืืืชื ืืื ืข, ืึทืืื ืขืก ืืื ื ืืฉื ืจืขืงืึทืืขื ืืื ืฆื ื ืืฆื ืขืก ืืื ืคึผืจืึธืืืงืฆืืข.
ืึทืืื, ืืจืืคืงืืคืืข ืื ืืขืฆืืข ืืขืืืื ื, ืืื ืืขื ืืึธืืขื ื ืขืก ืืื . ืขืก ืืขื ืขื ืืืขืจืกืืขืก ืคึฟืึทืจ ืืืืืข 32 ืืื 64 ืืืกื ืกืืกืืขืืขื.
ืึธืคึผืคึผืึทืงื ืืื C: Program FilesOpenSSH
ื ืืึทื ืืึทืืึธืจื ืคืื ื ืคึฟืึทืจ ืจืืืืืง ืึธืคึผืขืจืึทืฆืืข: ืืืืื ืื ืกืืกืืขื ืืื ืื ืึทืืืื ืืกืืจืึทืืึธืจ ืืจืืคึผืข.
ืื ืกืืึธืืื ื ืืึทืืื ืื ืืก ื ืืฆื ืึท ืฉืจืืคื install-sshd.ps1 ืืืื ืืื ืืขื ืืืขืืืืืึทืืขืจ
powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1ืืึธืื ืื ืงืึทืืื ื ืงืึทื ืขืงืฉืึทื ื ืืืืฃ ืคึผืึธืจื 22:
New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22ืงืืขืจืึทืคืึทืงืืืฉืึทื: ืึทืคึผืืึทื New-NetFirewallRule ืืขืืืืื ื ืืืืฃ Windows Server 2012 ืืื ืฉืคึผืขืืขืจ. ืืื ืื ืึธืืืืึทืกื ืกืืกืืขืืขื (ืึธืืขืจ ืืขืกืงืืึทืคึผ) ืืืจ ืงืขื ืขื ื ืืฆื ืื ืืึทืคึฟืขื:
netsh advfirewall firewall add rule name=sshd dir=in action=allow protocol=TCP localport=22
ืืืืืจ ืื ืืืืื ืื ืกืขืจืืืืก:
net start sshdืืื ืกืืึทืจืืึทืคึผ, ืืึทืืขืืึธืก ืฉืืืกืืขื ืืืขื ืืืื ืืืืืึธืืึทืืืฉ ืืืฉืขื ืขืจืืืืึทื (ืืืื ืคืขืื ืืืง) ืืื %programdata %ssh
ืืืจ ืงืขื ืขื ืืขืื ืึทืืืึธืกืืึทืจื ืคืื ืื ืืื ืกื ืืืขื ืื ืกืืกืืขื ืกืืึทืจืฅ ืืื ืื ืืึทืคึฟืขื:
Set-Service sshd -StartupType Automaticืืืจ ืงืขื ืขื ืืืื ืืืืฉื ืื ืคืขืืืงืืึทื ืืึทืคึฟืขืื ืฉืึธื (ื ืึธื ืื ืกืืึทืืืจืื ื, ืื ืคืขืืืงืืึทื ืืื ืงืื):
New-ItemProperty -Path "HKLM:SOFTWAREOpenSSH" -Name DefaultShell -Value "C:WindowsSystem32WindowsPowerShellv1.0powershell.exe" -PropertyType String -Forceืงืืขืจืึทืคืึทืงืืืฉืึทื: ืืืจ ืืืื ืกืคึผืขืฆืืคืืฆืืจื ืึทื ืึทืืกืึธืืื ืืจื.
ืืืึธืก ืก ืืืืึทืืขืจ?
ืืื ืืขืืึธืื ืืืจ ืฉืืขืื ืขืก sshd_config, ืืืขืื ืข ืื ืจ ืฐืขื ื ืืจืฒื C: ืคึผืจืึธืืจืึทื ืืึทืื. ืฆืื ืืืืฉืคึผืื:
PasswordAuthentication no
PubkeyAuthentication yesืืื ืฉืึทืคึฟื ืึท ืืืขืืืืืึทืืขืจ ืืื ืืขืจ ืืึทื ืืฆืขืจ ืืขืงืข .ืกืฉ, ืืื ืืื ืขืก ืื ืืขืงืข authorized_keys. ืืืจ ืฉืจืืึทืื ืึทืจืึธืคึผ ืื ืฆืืืืจ ืฉืืืกืืขื ืืึธืจื.
ืืืืืืืง ืงืืขืจืึทืคืึทืงืืืฉืึทื: ืืืืื ืืขืจ ืืึทื ืืฆืขืจ ืืื ืืืขืืขื ืก ืืืขืืืืืึทืืขืจ ืื ืืขืงืข ืืื ืืืื ืืึธื ืืึธืื ืื ืจืขืื ืฆื ืฉืจืืึทืื ืฆื ืืขื ืืขืงืข.
ืึธืืขืจ ืืืื ืืืจ ืืึธืื ืคึผืจืึธืืืขืืก ืืื ืืขื, ืืืจ ืงืขื ืขื ืฉืืขื ืืืง ืงืขืจ ืึทืืืขืง ืจืขืื ืงืึธื ืืจืึธืืืจืื ื ืืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื:
StrictModes noืืื, ืืื C: Program FilesOpenSSH ืขืก ืืขื ืขื 2 ืกืงืจืืคึผืก (FixHostFilePermissions.ps1, FixUserFilePermissions.ps1), ืืืึธืก ืืึธื ืึธืืขืจ ืืขื ืขื ื ืืฉื ืึทืืืืืืืฉื ืฆื ืคืึทืจืจืืืื ืจืขืื, ืึทืจืืึทื ืืขืจืขืื ื ืืื authorized_keys, ืึธืืขืจ ืคึฟืึทืจ ืขืืืขืืข ืกืืื ืืื ืืึธื ื ืื ืจืขืืืกืืจืืจื.
ืื ืืืืกื ื ืืฉื ืคืึทืจืืขืกื ืฆื ืจืืกืืึทืจื ืื ืืื ืกื ืกืฉื ื ืึธื ืฆื ืฆืืืืืื ืื ืขื ืืขืจืื ืืขื.
ru-mbp-666:infrastructure$ ssh [email protected] -i ~/.ssh/id_rsa
Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.
PS C:UsersAdministrator> Get-Host
Name : ConsoleHost
Version : 5.1.14393.2791
InstanceId : 653210bd-6f58-445e-80a0-66f66666f6f6
UI : System.Management.Automation.Internal.Host.InternalHostUserInterface
CurrentCulture : en-US
CurrentUICulture : en-US
PrivateData : Microsoft.PowerShell.ConsoleHost+ConsoleColorProxy
DebuggerEnabled : True
IsRunspacePushed : False
Runspace : System.Management.Automation.Runspaces.LocalRunspace
PS C:UsersAdministrator>ืกืึทืืืืฉืขืงืืืื ืคึผืจืึธืก / ืงืึธื ืก.
ืคึผืจืึธืก:
- ื ืึธืจืืึทื ืฆืืืึทื ื ืฆื ืงืึทื ืขืงืืื ื ืฆื ืกืขืจืืืขืจืก.
ืืืขื ืขืก ืืขื ืขื ืืืืื ืืง Windows ืืืฉืื ืขื, ืขืก ืืื ืืืืขืจ ืืืืึทืงืืืขื ืืืขื:
ืึทืืื, ืืึธ ืืืจ ืืืื ืืืจื ssh, ืืื ืืึธ ืืืจ ื ืืฆื rdp,
ืืื ืืื ืึทืืืขืืืื, ืืขืจ ืืขืกืืขืจ-ืคืืจืื ื ืืื ืืึทืกืืฉืึทื ื ืืื ืงืืื ืึท ืฉ"ืฉ ืืื ืขื, ืืื ืจื"ืค ืืืจื ืืื. - ืื ืคืื ืกืขืืึทืคึผ
ืืื ืืจืึทืืื ืืึธืก ืืื ืงืืึธืจ ืืื ืืขืจ ืืึธื. - ืืืืงืืึทื ืคืื ืงืฉืจ ืืื ืึทืจืืขื ืืื ืึท ืืืืึทื ืืึทืฉืื
ืขืก ืืื ืงืืื ืืจืึทืคืืงืึทื ืฉืึธื, ืฉืคึผืึธืจื ืืืืืข ืกืขืจืืืขืจ ืจืขืกืืจืกื ืืื ืื ืกืืืข ืคืื โโืืจืึทื ืกืืืืืขื ืืึทืื.
ืงืึธื ืก:
- ืืื ื ืืฉื ืืึธืจ ืคืึทืจืืืึทืื RDP.
ื ืื ืึทืืฅ ืงืขื ืขื ืืืื ืืขืืื ืคึฟืื ืื ืงืึทื ืกืึธืื, ืืืื. ืืื ืืืื ืขื ืกืืืืึทืืืึธื ืก ืืื ืึท GUI ืืื ืคืืจืืื ืื.
ืืึทืืขืจืืึทืืก ืืขื ืืฆื ืืื ืืขื ืึทืจืืืงื:
ืืึทื ืืึธื ืืืจืื ื ืึธืคึผืฆืืขืก ืืขื ืขื ืฉืืืืืึทืกืื ืงืึทืคึผืื ืคึฟืื .
ืืงืืจ: www.habr.com