Ubuntu11.04安装配置openssh-server （转）
1、环境：
Ubuntu11.04
?
2、安装
Ubuntu提供了便利的apt工具，采用在线安装依赖包将会自动下载并安装。
?
?
?
3、安装过程
? ? 下载过程视网速而定，很小的317K，如果不拨号很速度。
?
4、启动、停止ssh服务
?
?
??
5、查看是否启动
? ? ?如果有sshd服务说明ssh server已经启动，也可以直接start（别restart，这是重启），如果已经启动会提示。
?
?
???
6、高级技巧
???? openssh-server安装后剩下的工作就是配置，配置信息位于sshd_config文件，一行一个配置，#开头的行表示注释。配置内容 key=value形式出现。
# Package generated configuration file# See the sshd_config(5) manpage for details# What ports, IPs and protocols we listen for#监听端口，可以修改为其他端口默认22Port 22# Use these options to restrict which interfaces/protocols sshd will bind to#ListenAddress ::#监听IP，去掉注释标示监听所有ip地址#ListenAddress 0.0.0.0#协议版本号Protocol 2# HostKeys for protocol version 2HostKey /etc/ssh/ssh_host_rsa_keyHostKey /etc/ssh/ssh_host_dsa_keyHostKey /etc/ssh/ssh_host_ecdsa_key#Privilege Separation is turned on for securityUsePrivilegeSeparation yes# Lifetime and size of ephemeral version 1 server keyKeyRegenerationInterval 3600ServerKeyBits 768# LoggingSyslogFacility AUTH#ssh登陆日志写入AUTH系统日志设备，建议级别：VERBOSELogLevel INFO# Authentication:#连接ubuntu120秒内登陆ssh，否则断开。LoginGraceTime 120#是否允许root登陆ssh，如果设置可能su root失败PermitRootLogin yes#设置SSH在接收登录请求之前是否检查用户家目录和rhosts文件的权限和所有权。防止目录和文件设置成任何人都有写权限StrictModes yesRSAAuthentication yesPubkeyAuthentication yes#AuthorizedKeysFile%h/.ssh/authorized_keys# Don't read the user's ~/.rhosts and ~/.shosts filesIgnoreRhosts yes# For this to work you will also need host keys in /etc/ssh_known_hostsRhostsRSAAuthentication no# similar for protocol version 2HostbasedAuthentication no# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication#IgnoreUserKnownHosts yes# To enable empty passwords, change to yes (NOT RECOMMENDED)PermitEmptyPasswords no# Change to yes to enable challenge-response passwords (beware issues with# some PAM modules and threads)ChallengeResponseAuthentication no# Change to no to disable tunnelled clear text passwords#PasswordAuthentication yes# Kerberos options#KerberosAuthentication no#KerberosGetAFSToken no#KerberosOrLocalPasswd yes#KerberosTicketCleanup yes# GSSAPI options#GSSAPIAuthentication no#GSSAPICleanupCredentials yesX11Forwarding yesX11DisplayOffset 10PrintMotd no#设置是否打印最用户最后一次登陆时间。例如：Last login: Tue May 17 13:58:15 2011 from localhostPrintLastLog yes#是否发送心跳包TCPKeepAlive yes#UseLogin no#MaxStartups 10:30:60#激活警示条，警示未经许可用户登陆#Banner /etc/issue.net# Allow client to pass locale environment variablesAcceptEnv LANG LC_*#配置外部子系统，参数为子系统名字、执行命令Subsystem sftp /usr/lib/openssh/sftp-server# Set this to 'yes' to enable PAM authentication, account processing,# and session processing. If this is enabled, PAM authentication will# be allowed through the ChallengeResponseAuthentication and# PasswordAuthentication. Depending on your PAM configuration,# PAM authentication via ChallengeResponseAuthentication may bypass# the setting of "PermitRootLogin without-password".# If you just want the PAM account and session checks to run without# PAM authentication, then enable this but set PasswordAuthentication# and ChallengeResponseAuthentication to 'no'.UsePAM yes??
?
