ssh_conf\u6587\u4ef6\u914d\u7f6e\u8be6\u89e3
\n\u6765\u6e90: ChinaUnix\u535a\u5ba2 \u3000\u65e5\u671f\uff1a 2007.04.13 11:42\u3000(\u5171\u6709\u6761\u8bc4\u8bba) \u6211\u8981\u8bc4\u8bba<\/p>\n
\u914d\u7f6e\u201c\/etc\/ssh\/ssh_config\u201d\u6587\u4ef6 \u914d\u7f6e\u201c\/etc\/ssh\/sshd_config\u201d\u6587\u4ef6 This is ssh server systemwide configuration file. ssh_conf\u6587\u4ef6\u914d\u7f6e\u8be6\u89e3 \u6765\u6e90: ChinaUnix\u535a\u5ba2 \u3000\u65e5\u671f\uff1a 2007.04.13 11:42\u3000(\u5171\u6709\u6761\u8bc4\u8bba) \u6211\u8981\u8bc4\u8bba \u914d\u7f6e\u201c\/etc\/ssh\/ssh_config\u201d\u6587\u4ef6 \u201c\/etc\/ssh\/ssh_config\u201d \u6587\u4ef6\u662fOpenSSH\u7cfb\u7edf\u8303\u56f4\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5141\u8bb8\u4f60\u901a\u8fc7\u8bbe\u7f6e\u4e0d\u540c\u7684\u9009\u9879\u6765\u6539\u53d8\u5ba2\u6237\u7aef\u7a0b\u5e8f\u7684\u8fd0\u884c\u65b9\u5f0f\u3002\u8fd9\u4e2a\u6587\u4ef6\u7684\u6bcf\u4e00\u884c\u5305\u542b\u201c\u5173\u952e\u8bcd\uff0d\u503c\u201d\u7684\u5339\u914d\uff0c\u5176\u4e2d\u201c\u5173\u952e\u8bcd\u201d\u662f\u5ffd\u7565\u5927\u5c0f\u5199\u7684\u3002\u4e0b\u9762\u5217\u51fa\u6765\u7684\u662f\u6700\u91cd\u8981\u7684\u5173\u952e\u8bcd\uff0c\u7528man\u547d\u4ee4\u67e5\u770b\u5e2e\u52a9\u9875\uff08ssh (1)\uff09\u53ef\u4ee5\u5f97\u5230\u8be6\u7ec6\u7684\u5217\u8868\u3002 \u7f16\u8f91\u201cssh_config\u201d\u6587\u4ef6\uff08vi \/etc\/ssh\/ssh_config\uff09\uff0c\u6dfb\u52a0\u6216\u6539\u53d8\u4e0b\u9762\u7684\u53c2\u6570\uff1a Site-wide defaults for various options Host ForwardAgent no ForwardX11 no RhostsAuthentication no RhostsRSAAuthentication no RSAAuthentication yes PasswordAuthentication yes FallBackToRsh no UseRsh no BatchMode no CheckHostIP yes StrictHostKeyChecking no IdentityFile ~\/.ssh\/identity Port 22 Cipher blowfish EscapeChar ~ \u4e0b\u9762\u9010\u884c\u8bf4\u660e\u4e0a\u9762\u7684\u9009\u9879\u8bbe\u7f6e\uff1a Host \u9009\u9879\u201cHost\u201d\u53ea\u5bf9\u80fd\u591f\u5339\u914d\u540e\u9762\u5b57\u4e32\u7684\u8ba1\u7b97\u673a\u6709\u6548\u3002\u201c*\u201d\u8868\u793a\u6240\u6709\u7684\u8ba1\u7b97\u673a\u3002 ForwardAgent no \u201cForwardAgent\u201d\u8bbe\u7f6e\u8fde\u63a5\u662f\u5426\u7ecf\u8fc7\u9a8c\u8bc1\u4ee3\u7406\uff08\u5982\u679c\u5b58\u5728\uff09\u8f6c\u53d1\u7ed9\u8fdc\u7a0b\u8ba1\u7b97\u673a\u3002 ForwardX11 no \u201cForwardX11\u201d\u8bbe\u7f6eX11\u8fde\u63a5\u662f\u5426\u88ab\u81ea\u52a8\u91cd\u5b9a\u5411\u5230\u5b89\u5168\u7684\u901a\u9053\u548c\u663e\u793a\u96c6\uff08DISPLAY set\uff09\u3002 RhostsAuthentication no \u201cRhostsAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528\u57fa\u4e8erhosts\u7684\u5b89\u5168\u9a8c\u8bc1\u3002 RhostsRSAAuthentication no \u201cRhostsRSAAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528\u7528RSA\u7b97\u6cd5\u7684\u57fa\u4e8erhosts\u7684\u5b89\u5168\u9a8c\u8bc1\u3002 RSAAuthentication yes \u201cRSAAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528RSA\u7b97\u6cd5\u8fdb\u884c\u5b89\u5168\u9a8c\u8bc1\u3002 PasswordAuthentication yes \u201cPasswordAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528\u53e3\u4ee4\u9a8c\u8bc1\u3002 FallBackToRsh no \u201cFallBackToRsh\u201d\u8bbe\u7f6e\u5982\u679c\u7528ssh\u8fde\u63a5\u51fa\u73b0\u9519\u8bef\u662f\u5426\u81ea\u52a8\u4f7f\u7528rsh\u3002 UseRsh no \u201cUseRsh\u201d\u8bbe\u7f6e\u662f\u5426\u5728\u8fd9\u53f0\u8ba1\u7b97\u673a\u4e0a\u4f7f\u7528\u201crlogin\/rsh\u201d\u3002 BatchMode no \u201cBatchMode\u201d\u5982\u679c\u8bbe\u4e3a\u201cyes\u201d\uff0cpassphrase\/password\uff08\u4ea4\u4e92\u5f0f\u8f93\u5165\u53e3\u4ee4\uff09\u7684\u63d0\u793a\u5c06\u88ab\u7981\u6b62\u3002\u5f53\u4e0d\u80fd\u4ea4\u4e92\u5f0f\u8f93\u5165\u53e3\u4ee4\u7684\u65f6\u5019\uff0c\u8fd9\u4e2a\u9009\u9879\u5bf9\u811a\u672c\u6587\u4ef6\u548c\u6279\u5904\u7406\u4efb\u52a1\u5341\u5206\u6709\u7528\u3002 CheckHostIP yes \u201cCheckHostIP\u201d\u8bbe\u7f6essh\u662f\u5426\u67e5\u770b\u8fde\u63a5\u5230\u670d\u52a1\u5668\u7684\u4e3b\u673a\u7684IP\u5730\u5740\u4ee5\u9632\u6b62DNS\u6b3a\u9a97\u3002\u5efa\u8bae\u8bbe\u7f6e\u4e3a\u201cyes\u201d\u3002 StrictHostKeyChecking no \u201cStrictHostKeyChecking\u201d\u5982\u679c\u8bbe\u7f6e\u6210\u201cyes\u201d\uff0cssh\u5c31\u4e0d\u4f1a\u81ea\u52a8\u628a\u8ba1\u7b97\u673a\u7684\u5bc6\u5319\u52a0\u5165\u201c$HOME\/.ssh\/known_hosts\u201d\u6587\u4ef6\uff0c\u5e76\u4e14\u4e00\u65e6\u8ba1\u7b97\u673a\u7684\u5bc6\u5319\u53d1\u751f\u4e86\u53d8\u5316\uff0c\u5c31\u62d2\u7edd\u8fde\u63a5\u3002 IdentityFile ~\/.ssh\/identity \u201cIdentityFile\u201d\u8bbe\u7f6e\u4ece\u54ea\u4e2a\u6587\u4ef6\u8bfb\u53d6\u7528\u6237\u7684RSA\u5b89\u5168\u9a8c\u8bc1\u6807\u8bc6\u3002 Port 22 \u201cPort\u201d\u8bbe\u7f6e\u8fde\u63a5\u5230\u8fdc\u7a0b\u4e3b\u673a\u7684\u7aef\u53e3\u3002 Cipher blowfish \u201cCipher\u201d\u8bbe\u7f6e\u52a0\u5bc6\u7528\u7684\u5bc6\u7801\u3002 EscapeChar ~ \u201cEscapeChar\u201d\u8bbe\u7f6eescape\u5b57\u7b26\u3002 \u914d\u7f6e\u201c\/etc\/ssh\/sshd_config\u201d\u6587\u4ef6 \u201c\/etc\/ssh\/sshd_config\u201d\u662fOpenSSH\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5141\u8bb8\u8bbe\u7f6e\u9009\u9879\u6539\u53d8\u8fd9\u4e2adaemon\u7684\u8fd0\u884c\u3002\u8fd9\u4e2a\u6587\u4ef6\u7684\u6bcf\u4e00\u884c\u5305\u542b\u201c\u5173\u952e\u8bcd\uff0d\u503c\u201d\u7684\u5339\u914d\uff0c\u5176\u4e2d\u201c\u5173\u952e\u8bcd\u201d\u662f\u5ffd\u7565\u5927\u5c0f\u5199\u7684\u3002\u4e0b\u9762\u5217\u51fa\u6765\u7684\u662f\u6700\u91cd\u8981\u7684\u5173\u952e\u8bcd\uff0c\u7528man\u547d\u4ee4\u67e5\u770b\u5e2e\u52a9\u9875\uff08sshd (8)\uff09\u53ef\u4ee5\u5f97\u5230\u8be6\u7ec6\u7684\u5217\u8868\u3002 \u7f16\u8f91\u201csshd_config\u201d\u6587\u4ef6\uff08vi \/etc\/ssh\/sshd_config\uff09\uff0c\u52a0\u5165\u6216\u6539\u53d8\u4e0b\u9762\u7684\u53c2\u6570\uff1a This is ssh server systemwide configuration file. Port 22 ListenAddress 192.168.1.1 HostKey \/etc\/ssh\/ssh_host_key ServerKeyBits 1024 LoginGr…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","footnotes":""},"categories":[87],"tags":[],"class_list":["post-1510","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/1510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1510"}],"version-history":[{"count":1,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/1510\/revisions"}],"predecessor-version":[{"id":1511,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/1510\/revisions\/1511"}],"wp:attachment":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n\u201c\/etc\/ssh\/ssh_config\u201d \u6587\u4ef6\u662fOpenSSH\u7cfb\u7edf\u8303\u56f4\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5141\u8bb8\u4f60\u901a\u8fc7\u8bbe\u7f6e\u4e0d\u540c\u7684\u9009\u9879\u6765\u6539\u53d8\u5ba2\u6237\u7aef\u7a0b\u5e8f\u7684\u8fd0\u884c\u65b9\u5f0f\u3002\u8fd9\u4e2a\u6587\u4ef6\u7684\u6bcf\u4e00\u884c\u5305\u542b\u201c\u5173\u952e\u8bcd\uff0d\u503c\u201d\u7684\u5339\u914d\uff0c\u5176\u4e2d\u201c\u5173\u952e\u8bcd\u201d\u662f\u5ffd\u7565\u5927\u5c0f\u5199\u7684\u3002\u4e0b\u9762\u5217\u51fa\u6765\u7684\u662f\u6700\u91cd\u8981\u7684\u5173\u952e\u8bcd\uff0c\u7528man\u547d\u4ee4\u67e5\u770b\u5e2e\u52a9\u9875\uff08ssh (1)\uff09\u53ef\u4ee5\u5f97\u5230\u8be6\u7ec6\u7684\u5217\u8868\u3002
\n\u7f16\u8f91\u201cssh_config\u201d\u6587\u4ef6\uff08vi \/etc\/ssh\/ssh_config\uff09\uff0c\u6dfb\u52a0\u6216\u6539\u53d8\u4e0b\u9762\u7684\u53c2\u6570\uff1a
\nSite-wide defaults for various options
\nHost
\nForwardAgent no
\nForwardX11 no
\nRhostsAuthentication no
\nRhostsRSAAuthentication no
\nRSAAuthentication yes
\nPasswordAuthentication yes
\nFallBackToRsh no
\nUseRsh no
\nBatchMode no
\nCheckHostIP yes
\nStrictHostKeyChecking no
\nIdentityFile ~\/.ssh\/identity
\nPort 22
\nCipher blowfish
\nEscapeChar ~
\n\u4e0b\u9762\u9010\u884c\u8bf4\u660e\u4e0a\u9762\u7684\u9009\u9879\u8bbe\u7f6e\uff1a
\nHost <\/em>
\n\u9009\u9879\u201cHost\u201d\u53ea\u5bf9\u80fd\u591f\u5339\u914d\u540e\u9762\u5b57\u4e32\u7684\u8ba1\u7b97\u673a\u6709\u6548\u3002\u201c*\u201d\u8868\u793a\u6240\u6709\u7684\u8ba1\u7b97\u673a\u3002
\nForwardAgent no
\n\u201cForwardAgent\u201d\u8bbe\u7f6e\u8fde\u63a5\u662f\u5426\u7ecf\u8fc7\u9a8c\u8bc1\u4ee3\u7406\uff08\u5982\u679c\u5b58\u5728\uff09\u8f6c\u53d1\u7ed9\u8fdc\u7a0b\u8ba1\u7b97\u673a\u3002
\nForwardX11 no
\n\u201cForwardX11\u201d\u8bbe\u7f6eX11\u8fde\u63a5\u662f\u5426\u88ab\u81ea\u52a8\u91cd\u5b9a\u5411\u5230\u5b89\u5168\u7684\u901a\u9053\u548c\u663e\u793a\u96c6\uff08DISPLAY set\uff09\u3002
\nRhostsAuthentication no
\n\u201cRhostsAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528\u57fa\u4e8erhosts\u7684\u5b89\u5168\u9a8c\u8bc1\u3002
\nRhostsRSAAuthentication no
\n\u201cRhostsRSAAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528\u7528RSA\u7b97\u6cd5\u7684\u57fa\u4e8erhosts\u7684\u5b89\u5168\u9a8c\u8bc1\u3002
\nRSAAuthentication yes
\n\u201cRSAAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528RSA\u7b97\u6cd5\u8fdb\u884c\u5b89\u5168\u9a8c\u8bc1\u3002
\nPasswordAuthentication yes
\n\u201cPasswordAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u4f7f\u7528\u53e3\u4ee4\u9a8c\u8bc1\u3002
\nFallBackToRsh no
\n\u201cFallBackToRsh\u201d\u8bbe\u7f6e\u5982\u679c\u7528ssh\u8fde\u63a5\u51fa\u73b0\u9519\u8bef\u662f\u5426\u81ea\u52a8\u4f7f\u7528rsh\u3002
\nUseRsh no
\n\u201cUseRsh\u201d\u8bbe\u7f6e\u662f\u5426\u5728\u8fd9\u53f0\u8ba1\u7b97\u673a\u4e0a\u4f7f\u7528\u201crlogin\/rsh\u201d\u3002
\nBatchMode no
\n\u201cBatchMode\u201d\u5982\u679c\u8bbe\u4e3a\u201cyes\u201d\uff0cpassphrase\/password\uff08\u4ea4\u4e92\u5f0f\u8f93\u5165\u53e3\u4ee4\uff09\u7684\u63d0\u793a\u5c06\u88ab\u7981\u6b62\u3002\u5f53\u4e0d\u80fd\u4ea4\u4e92\u5f0f\u8f93\u5165\u53e3\u4ee4\u7684\u65f6\u5019\uff0c\u8fd9\u4e2a\u9009\u9879\u5bf9\u811a\u672c\u6587\u4ef6\u548c\u6279\u5904\u7406\u4efb\u52a1\u5341\u5206\u6709\u7528\u3002
\nCheckHostIP yes
\n\u201cCheckHostIP\u201d\u8bbe\u7f6essh\u662f\u5426\u67e5\u770b\u8fde\u63a5\u5230\u670d\u52a1\u5668\u7684\u4e3b\u673a\u7684IP\u5730\u5740\u4ee5\u9632\u6b62DNS\u6b3a\u9a97\u3002\u5efa\u8bae\u8bbe\u7f6e\u4e3a\u201cyes\u201d\u3002
\nStrictHostKeyChecking no
\n\u201cStrictHostKeyChecking\u201d\u5982\u679c\u8bbe\u7f6e\u6210\u201cyes\u201d\uff0cssh\u5c31\u4e0d\u4f1a\u81ea\u52a8\u628a\u8ba1\u7b97\u673a\u7684\u5bc6\u5319\u52a0\u5165\u201c$HOME\/.ssh\/known_hosts\u201d\u6587\u4ef6\uff0c\u5e76\u4e14\u4e00\u65e6\u8ba1\u7b97\u673a\u7684\u5bc6\u5319\u53d1\u751f\u4e86\u53d8\u5316\uff0c\u5c31\u62d2\u7edd\u8fde\u63a5\u3002
\nIdentityFile ~\/.ssh\/identity
\n\u201cIdentityFile\u201d\u8bbe\u7f6e\u4ece\u54ea\u4e2a\u6587\u4ef6\u8bfb\u53d6\u7528\u6237\u7684RSA\u5b89\u5168\u9a8c\u8bc1\u6807\u8bc6\u3002
\nPort 22
\n\u201cPort\u201d\u8bbe\u7f6e\u8fde\u63a5\u5230\u8fdc\u7a0b\u4e3b\u673a\u7684\u7aef\u53e3\u3002
\nCipher blowfish
\n\u201cCipher\u201d\u8bbe\u7f6e\u52a0\u5bc6\u7528\u7684\u5bc6\u7801\u3002
\nEscapeChar ~
\n\u201cEscapeChar\u201d\u8bbe\u7f6eescape\u5b57\u7b26\u3002<\/p>\n
\n\u201c\/etc\/ssh\/sshd_config\u201d\u662fOpenSSH\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5141\u8bb8\u8bbe\u7f6e\u9009\u9879\u6539\u53d8\u8fd9\u4e2adaemon\u7684\u8fd0\u884c\u3002\u8fd9\u4e2a\u6587\u4ef6\u7684\u6bcf\u4e00\u884c\u5305\u542b\u201c\u5173\u952e\u8bcd\uff0d\u503c\u201d\u7684\u5339\u914d\uff0c\u5176\u4e2d\u201c\u5173\u952e\u8bcd\u201d\u662f\u5ffd\u7565\u5927\u5c0f\u5199\u7684\u3002\u4e0b\u9762\u5217\u51fa\u6765\u7684\u662f\u6700\u91cd\u8981\u7684\u5173\u952e\u8bcd\uff0c\u7528man\u547d\u4ee4\u67e5\u770b\u5e2e\u52a9\u9875\uff08sshd (8)\uff09\u53ef\u4ee5\u5f97\u5230\u8be6\u7ec6\u7684\u5217\u8868\u3002
\n\u7f16\u8f91\u201csshd_config\u201d\u6587\u4ef6\uff08vi \/etc\/ssh\/sshd_config\uff09\uff0c\u52a0\u5165\u6216\u6539\u53d8\u4e0b\u9762\u7684\u53c2\u6570\uff1a<\/p>\n
\nPort 22
\nListenAddress 192.168.1.1
\nHostKey \/etc\/ssh\/ssh_host_key
\nServerKeyBits 1024
\nLoginGraceTime 600
\nKeyRegenerationInterval 3600
\nPermitRootLogin no
\nIgnoreRhosts yes
\nIgnoreUserKnownHosts yes
\nStrictModes yes
\nX11Forwarding no
\nPrintMotd yes
\nSyslogFacility AUTH
\nLogLevel INFO
\nRhostsAuthentication no
\nRhostsRSAAuthentication no
\nRSAAuthentication yes
\nPasswordAuthentication yes
\nPermitEmptyPasswords no
\nAllowUsers admin
\n\u4e0b\u9762\u9010\u884c\u8bf4\u660e\u4e0a\u9762\u7684\u9009\u9879\u8bbe\u7f6e\uff1a
\nPort 22
\n\u201cPort\u201d\u8bbe\u7f6esshd\u76d1\u542c\u7684\u7aef\u53e3\u53f7\u3002
\nListenAddress 192.168.1.1
\n\u201cListenAddress\u201d\u8bbe\u7f6esshd\u670d\u52a1\u5668\u7ed1\u5b9a\u7684IP\u5730\u5740\u3002
\nHostKey \/etc\/ssh\/ssh_host_key
\n\u201cHostKey\u201d\u8bbe\u7f6e\u5305\u542b\u8ba1\u7b97\u673a\u79c1\u4eba\u5bc6\u5319\u7684\u6587\u4ef6\u3002
\nServerKeyBits 1024
\n\u201cServerKeyBits\u201d\u5b9a\u4e49\u670d\u52a1\u5668\u5bc6\u5319\u7684\u4f4d\u6570\u3002
\nLoginGraceTime 600
\n\u201cLoginGraceTime\u201d\u8bbe\u7f6e\u5982\u679c\u7528\u6237\u4e0d\u80fd\u6210\u529f\u767b\u5f55\uff0c\u5728\u5207\u65ad\u8fde\u63a5\u4e4b\u524d\u670d\u52a1\u5668\u9700\u8981\u7b49\u5f85\u7684\u65f6\u95f4\uff08\u4ee5\u79d2\u4e3a\u5355\u4f4d\uff09\u3002
\nKeyRegenerationInterval 3600
\n\u201cKeyRegenerationInterval\u201d\u8bbe\u7f6e\u5728\u591a\u5c11\u79d2\u4e4b\u540e\u81ea\u52a8\u91cd\u65b0\u751f\u6210\u670d\u52a1\u5668\u7684\u5bc6\u5319\uff08\u5982\u679c\u4f7f\u7528\u5bc6\u5319\uff09\u3002\u91cd\u65b0\u751f\u6210\u5bc6\u5319\u662f\u4e3a\u4e86\u9632\u6b62\u7528\u76d7\u7528\u7684\u5bc6\u5319\u89e3\u5bc6\u88ab\u622a\u83b7\u7684\u4fe1\u606f\u3002
\nPermitRootLogin no
\n\u201cPermitRootLogin\u201d\u8bbe\u7f6eroot\u80fd\u4e0d\u80fd\u7528ssh\u767b\u5f55\u3002\u8fd9\u4e2a\u9009\u9879\u4e00\u5b9a\u4e0d\u8981\u8bbe\u6210\u201cyes\u201d\u3002
\nIgnoreRhosts yes
\n\u201cIgnoreRhosts\u201d\u8bbe\u7f6e\u9a8c\u8bc1\u7684\u65f6\u5019\u662f\u5426\u4f7f\u7528\u201crhosts\u201d\u548c\u201cshosts\u201d\u6587\u4ef6\u3002
\nIgnoreUserKnownHosts yes
\n\u201cIgnoreUserKnownHosts\u201d\u8bbe\u7f6essh daemon\u662f\u5426\u5728\u8fdb\u884cRhostsRSAAuthentication\u5b89\u5168\u9a8c\u8bc1\u7684\u65f6\u5019\u5ffd\u7565\u7528\u6237\u7684\u201c$HOME\/.ssh\/known_hosts\u201d
\nStrictModes yes
\n\u201cStrictModes\u201d\u8bbe\u7f6essh\u5728\u63a5\u6536\u767b\u5f55\u8bf7\u6c42\u4e4b\u524d\u662f\u5426\u68c0\u67e5\u7528\u6237\u5bb6\u76ee\u5f55\u548crhosts\u6587\u4ef6\u7684\u6743\u9650\u548c\u6240\u6709\u6743\u3002\u8fd9\u901a\u5e38\u662f\u5fc5\u8981\u7684\uff0c\u56e0\u4e3a\u65b0\u624b\u7ecf\u5e38\u4f1a\u628a\u81ea\u5df1\u7684\u76ee\u5f55\u548c\u6587\u4ef6\u8bbe\u6210\u4efb\u4f55\u4eba\u90fd\u6709\u5199\u6743\u9650\u3002
\nX11Forwarding no
\n\u201cX11Forwarding\u201d\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8X11\u8f6c\u53d1\u3002
\nPrintMotd yes
\n\u201cPrintMotd\u201d\u8bbe\u7f6esshd\u662f\u5426\u5728\u7528\u6237\u767b\u5f55\u7684\u65f6\u5019\u663e\u793a\u201c\/etc\/motd\u201d\u4e2d\u7684\u4fe1\u606f\u3002
\nSyslogFacility AUTH
\n\u201cSyslogFacility\u201d\u8bbe\u7f6e\u5728\u8bb0\u5f55\u6765\u81easshd\u7684\u6d88\u606f\u7684\u65f6\u5019\uff0c\u662f\u5426\u7ed9\u51fa\u201cfacility code\u201d\u3002
\nLogLevel INFO
\n\u201cLogLevel\u201d\u8bbe\u7f6e\u8bb0\u5f55sshd\u65e5\u5fd7\u6d88\u606f\u7684\u5c42\u6b21\u3002INFO\u662f\u4e00\u4e2a\u597d\u7684\u9009\u62e9\u3002\u67e5\u770bsshd\u7684man\u5e2e\u52a9\u9875\uff0c\u5df2\u83b7\u53d6\u66f4\u591a\u7684\u4fe1\u606f\u3002
\nRhostsAuthentication no
\n\u201cRhostsAuthentication\u201d\u8bbe\u7f6e\u53ea\u7528rhosts\u6216\u201c\/etc\/hosts.equiv\u201d\u8fdb\u884c\u5b89\u5168\u9a8c\u8bc1\u662f\u5426\u5df2\u7ecf\u8db3\u591f\u4e86\u3002
\nRhostsRSAAuthentication no
\n\u201cRhostsRSA\u201d\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u7528rhosts\u6216\u201c\/etc\/hosts.equiv\u201d\u52a0\u4e0aRSA\u8fdb\u884c\u5b89\u5168\u9a8c\u8bc1\u3002
\nRSAAuthentication yes
\n\u201cRSAAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u53ea\u6709RSA\u5b89\u5168\u9a8c\u8bc1\u3002
\nPasswordAuthentication yes
\n\u201cPasswordAuthentication\u201d\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u53e3\u4ee4\u9a8c\u8bc1\u3002
\nPermitEmptyPasswords no
\n\u201cPermitEmptyPasswords\u201d\u8bbe\u7f6e\u662f\u5426\u5141\u8bb8\u7528\u53e3\u4ee4\u4e3a\u7a7a\u7684\u5e10\u53f7\u767b\u5f55\u3002
\nAllowUsers admin
\n\u201cAllowUsers\u201d\u7684\u540e\u9762\u53ef\u4ee5\u8ddf\u7740\u4efb\u610f\u7684\u6570\u91cf\u7684\u7528\u6237\u540d\u7684\u5339\u914d\u4e32\uff08patterns\uff09\u6216user@host\u8fd9\u6837\u7684\u5339\u914d\u4e32\uff0c\u8fd9\u4e9b\u5b57\u7b26\u4e32\u7528\u7a7a\u683c\u9694\u5f00\u3002\u4e3b\u673a\u540d\u53ef\u4ee5\u662fDNS\u540d\u6216IP\u5730\u5740\u3002 <\/p>\n","protected":false},"excerpt":{"rendered":"