<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
	<title type="html"><![CDATA[Linux Forum &mdash; Настройка OpenSSH]]></title>
	<link rel="self" href="https://linuxforum.ru/extern.php?action=feed&amp;tid=31318&amp;type=atom" />
	<updated>2013-10-25T10:24:38Z</updated>
	<generator>PunBB</generator>
	<id>https://linuxforum.ru/viewtopic.php?id=31318</id>
		<entry>
			<title type="html"><![CDATA[Re: Настройка OpenSSH]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=371821#p371821" />
			<content type="html"><![CDATA[<p>Спасибо!</p>]]></content>
			<author>
				<name><![CDATA[Spawn047]]></name>
				<uri>https://linuxforum.ru/profile.php?id=16572</uri>
			</author>
			<updated>2013-10-25T10:24:38Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=371821#p371821</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Настройка OpenSSH]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=371819#p371819" />
			<content type="html"><![CDATA[<p>потому что конфиг сервера не ssh_config, а sshd_config<br /></p><div class="quotebox"><cite>Spawn047 пишет:</cite><blockquote><p># This is the ssh client system-wide configuration file.  See</p></blockquote></div>]]></content>
			<author>
				<name><![CDATA[i2ks]]></name>
				<uri>https://linuxforum.ru/profile.php?id=16</uri>
			</author>
			<updated>2013-10-25T10:18:46Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=371819#p371819</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Настройка OpenSSH]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=371818#p371818" />
			<content type="html"><![CDATA[<p>Не применяются настройки для ssh (CentOS 6.4).<br />Стандартный конфиг:<br /></p><div class="fancy_spoiler_switcher"><div class="fancy_spoiler_switcher_header"><strong>+</strong>&nbsp;/etc/ssh/ssh_config</div><div class="fancy_spoiler"><p> <br />&nbsp; &nbsp; &nbsp; &nbsp;$OpenBSD: ssh_config,v 1.25 2009/02/17 01:28:32 djm Exp $</p><p># This is the ssh client system-wide configuration file.&nbsp; See<br /># ssh_config(5) for more information.&nbsp; This file provides defaults for<br /># users, and the values can be changed in per-user configuration files<br /># or on the command line.</p><p># Configuration data is parsed as follows:<br />#&nbsp; 1. command line options<br />#&nbsp; 2. user-specific file<br />#&nbsp; 3. system-wide file<br /># Any configuration value is only changed the first time it is set.<br /># Thus, host-specific definitions should be at the beginning of the<br /># configuration file, and defaults at the end.</p><p># Site-wide defaults for some commonly used options.&nbsp; For a comprehensive<br /># list of available options, their meanings and defaults, please see the<br /># ssh_config(5) man page.</p><p># Host *</p><p>#&nbsp; &nbsp;ForwardAgent no<br />#&nbsp; &nbsp;ForwardX11 no<br />#&nbsp; &nbsp;RhostsRSAAuthentication no<br />#&nbsp; &nbsp;RSAAuthentication yes<br />#&nbsp; &nbsp;PasswordAuthentication yes<br />#&nbsp; &nbsp;HostbasedAuthentication no<br />#&nbsp; &nbsp;GSSAPIAuthentication no<br />#&nbsp; &nbsp;GSSAPIDelegateCredentials no<br />#&nbsp; &nbsp;GSSAPIKeyExchange no<br />#&nbsp; &nbsp;GSSAPITrustDNS no<br />#&nbsp; &nbsp;BatchMode no<br />#&nbsp; &nbsp;CheckHostIP yes<br />#&nbsp; &nbsp;AddressFamily any<br />#&nbsp; &nbsp;ConnectTimeout 0<br />#&nbsp; &nbsp;StrictHostKeyChecking ask<br />#&nbsp; &nbsp;IdentityFile ~/.ssh/identity<br />#&nbsp; &nbsp;IdentityFile ~/.ssh/id_rsa<br />#&nbsp; &nbsp;IdentityFile ~/.ssh/id_dsa<br />#&nbsp; &nbsp;Port 22<br />#&nbsp; &nbsp;Protocol 2,1<br />#&nbsp; &nbsp;Cipher 3des<br />#&nbsp; &nbsp;Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc<br />#&nbsp; &nbsp;MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160<br />#&nbsp; &nbsp;EscapeChar ~<br />#&nbsp; &nbsp;Tunnel no<br />#&nbsp; &nbsp;TunnelDevice any:any<br />#&nbsp; &nbsp;PermitLocalCommand no<br />#&nbsp; &nbsp;VisualHostKey no<br />Host *<br />&nbsp; &nbsp; &nbsp; &nbsp; GSSAPIAuthentication yes<br /># If this option is set to yes then remote X11 clients will have full access<br /># to the original X11 display. As virtually no X11 client supports the untrusted<br /># mode correctly we set this to yes.<br />&nbsp; &nbsp; &nbsp; &nbsp; ForwardX11Trusted yes<br /># Send locale-related environment variables<br />&nbsp; &nbsp; &nbsp; &nbsp; SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES<br />&nbsp; &nbsp; &nbsp; &nbsp; SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT<br />&nbsp; &nbsp; &nbsp; &nbsp; SendEnv LC_IDENTIFICATION LC_ALL LANGUAGE<br />&nbsp; &nbsp; &nbsp; &nbsp; SendEnv XMODIFIERS</p></div></div><p>Почему в нём нет строк, про которые говорится <a href="http://wiki.centos.org/HowTos/Network/SecuringSSH">здесь</a> (к примеру PermitRootLogin no)? Добавлял вручную, после /etc/init.d/sshd restart - данных насроек как и не было, как-будто не делал изменений в конфиге.<br />Что не так?</p>]]></content>
			<author>
				<name><![CDATA[Spawn047]]></name>
				<uri>https://linuxforum.ru/profile.php?id=16572</uri>
			</author>
			<updated>2013-10-25T10:13:25Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=371818#p371818</id>
		</entry>
</feed>
