작성일 : 06-08-01 16:21
solaris & linux ssh root 계정 접속 차단 |
|
글쓴이 :
관리자
조회 : 14,234
|
- solaris
패키지로 설치 했을때 설정 파일 위치.
- /usr/loca/etc
(file>root)/usr/local/etc# ls
ssh_config
ssh_host_dsa_key
ssh_host_dsa_key.pub
ssh_host_key
ssh_host_key.pub
ssh_host_rsa_key
ssh_host_rsa_key.pub
sshd_config
- vi sshd_config 파일 수정
SSH를 사용하게 되면 디폴트로 root 접속이 허용된다.
SSH 환경설정 파일 sshd_config을 보게되면 중간에 PermitRootLogin 이라는
옵션이 있는데 이 부분이 yes로 되어있다.
주석처리 부분을 없애주고 no로 설정하면 root로 접속이 안된다.
# Authentication:
#LoginGraceTime 2m
PermitRootLogin yes ------- > no 수정
#StrictModes yes
#MaxAuthTries 6
- ssh 스크립트 재실행.
(file>root)/usr/local/etc# /etc/init.d/sshd stop
(file>root)/usr/local/etc# /etc/init.d/sshd start
(file>root)/usr/local/etc#
- 접속확인
[root@test ssh]# ssh -l root 192.168.0.10
root@192.168.0.10's password:
Permission denied, please try again.
root@192.168.0.10's password:
Permission denied, please try again.
root@192.168.0.10's password:
Permission denied (publickey,password,keyboard-interactive).
[root@test ssh]#
- linux
리눅스 기본 설치 위치.
/etc/ssh
moduli ssh_host_dsa_key ssh_host_key ssh_host_rsa_key sshd_config
ssh_config ssh_host_dsa_key.pub ssh_host_key.pub ssh_host_rsa_key.pub
- vi sshd_config 파일 수정
#LoginGraceTime 600
PermitRootLogin yes ------ > no 주석 삭제.
#StrictModes yes
- ssh 스크립트 재실행.
[root@test ssh]# /etc/init.d/sshd stop
sshd (을)를 종료함:[ 확인 ]
[root@test ssh]# /etc/init.d/sshd start
sshd를 시작함:[ 확인 ]
[root@test ssh]#
- 접속확인
(file>root)/usr/local/etc# ssh -l root 192.168.0.212
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
cf:5e:93:01:34:09:0b:bd:cf:cf:0d:2d:63:67:b9:f9.
Please contact your system administrator.
Add correct host key in /.ssh/known_hosts to get rid of this message.
Offending key in /.ssh/known_hosts:8
RSA host key for 192.168.0.212 has changed and you have requested strict checking.
Host key verification failed.
(file>root)/usr/local/etc#
|
|
