- 论坛徽章:
- 0
|
1. 设置sshd用户和/var/empty目录
# mkdir /var/empty
# chown root:sys /var/empty
# chmod 755 /var/empty
# groupadd sshd
# useradd -g sshd -c 'sshd privsep' -d /var/empty -s /bin/false sshd
/var/empty目录应该为空
2. 需要以下软件(包括可选)
openssh-3.4p1-sol8-intel-local.gz
openssl-0.9.6d-sol8-intel-local.gz
tcp_wrappers-7.6-sol8-intel-local.gz (optional, but recommended)
(unless you are using IPV6 - see the tcp_wrappers listing for details on this issue)
zlib-1.1.4-sol8-intel-local.gz
perl-5.6.1-sol8-intel-local.gz (optional)
prngd-0.9.25-sol8-intel-local.gz (optional)
egd-0.8-sol8-intel-local.gz (optional)
3. 安装(假设已经安装配置完成tcp_wrapper7.6)
# gunzip openssl-0.9.6d-sol8-intel-local.gz
# gunzip zlib-1.1.4-sol8-intel-local.gz
# pkgadd -d openssl-0.9.6d-sol8-intel-local
# pkgadd -d zlib-1.1.4-sol8-intel-local
4. # vi /etc/profile addition following line:
LD_LIBRARY_PATH=:/usr/local/lib:/usr/local/ssl/lib:/usr/openwin/lib
PATH=$PATH:/usr/local/bin:/usr/local/sbin
export PATH LD_LIBRARY_PATH
#. /etc/profile
上面这步很重要,不能少
5.下载 openssh-3.9p1.tar.gz(或者该软件包的最新版本)
#gzip -d openssh-3.9p1.tar.gz
#tar xvf openssh-3.9p1.tar
#cd openssh-3.9p1
#./configure --prefix=/usr/local/ssh --with-ssl-dir=/usr/local/ssl --with-ipv4-default
# make
# make install
如果提示无make命令,则下载 gcc-3.3.2-sol8-sparc-local.gz 后,安装该包。
该包是调试程序的工具。
6. 设置tcp_wrappers
# vi /etc/hosts.deny
加入 sshd:all
# vi /etc/hosts.allow
加入
sshd:允许访问的IP清单:banners /opt/tcp_wrappers_7.6/allow-messages
7. 安装ssh和sshd(如果是源吗安装这些可以省略,因为编译安装完成会有提示):
确保/usr/local/bin和/opt/ssh在你的环境变量中
# ssh-keygen -t rsa1 -f /opt/ssh/etc/ssh_host_key -N ""
# ssh-keygen -t dsa -f /opt/ssh/etc/ssh_host_dsa_key -N ""
# ssh-keygen -t rsa -f /opt/ssh/etc/ssh_host_rsa_key -N ""
8. 编写启动脚本:
#vi /etc/rc2.d/S98sshd
-----------------------------------------------------------------------------------
#!/bin/sh
pid=`/usr/bin/ps -e | /usr/bin/grep sshd | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
case $1 in
'start')
/usr/local/sbin/sshd
;;
'stop')
if [ "${pid}" != "" ]
then
/usr/bin/kill ${pid}
fi
;;
*)
echo "usage: /etc/init.d/sshd {start|stop}"
;;
esac
--------------------------------------------------------------------------
#chown root:sys /etc/rc2.d/S98sshd
#chmod 755 /etc/rc2.d/S98sshd
#/etc/rc2.d/S98sshd start
9. 启动、检查、关闭
# /etc/rc2.d/S98sshd start
# ps -ef | grep sshd
# /etc/rc2.d/S98sshd stop
用ssh命令和sftp命令 |
|