I-SSH ProxyCommand ne-Host-Based Authentication: Iyiphi i-Host Esayinayo?

Ithagethi ingabona ukuxhumana kwe-TCP okuvela ku-bastion kuyilapho i-SSH client eyenza i-authentication isasebenza ku-workstation.

Host behind-bastion
    ProxyCommand ssh -W %h:%p bastion

Lapha umsizi ungena ku-bastion futhi ucela i-SSH server yayo ukuxhumana okudluliselwe kuthagethi. I-SSH client yangaphandle ye-workstation ishintsha i-SSH protocol yethagethi ngaleyo stream. I-bastion inikeza ukuthutha; ayizange iqale i-SSH client ebheke kuthagethi.

Lowo mehluko ubalulekile ku-host-based authentication. Umsizi we-ssh-keysign we-OpenSSH ufinyelela okhiye be-host basendaweni ukuze akhiqize isiginesha edingekayo. Ukuba ikheli lomthombo wenethiwekhi elingelase-bastion akwenzi i-workstation isayine ngokhiye be-host be-bastion.

Qhathanisa nalokhu:

ssh -t bastion ssh target

Lokhu kuqala olunye uhlelo lwe-SSH ku-bastion. Ukulungiselelwa kwayo kwasendaweni nokhiye be-host abatholakalayo kungokwalowo mshini, ngakho ingahlanganyela ekuhlelweni kokuthembana okusekelwe ku-host okusekuqaliwe phakathi kwe-bastion nethagethi. Isadinga ukugunyazwa okuhambisanayo nokuhlolwa kwegama kwethagethi.

Indlela yesibili ishintsha nendlela i-session esebenza ngayo: isebenzisa umyalo okude futhi isebenzisa i-terminal. Akusona isikhala esisobala sokudluliswa kwayo yonke ifayela le-SSH noma ukuthutha okuzenzakalelayo. Khetha ukuhlelwa ngokusho kokuthi imuphi umshini okufanele uqinisekise kuthagethi, esikhundleni sokwenza buthaka ukuhlolwa kokuthembana kweseva ukuze ikheli lomthombo libonakale lanele.