**********************************************
This tutorial uses Windows as a client to log on to the centos6.7 system.
SSH client software for SecureCRT7.1
**********************************************
1. Using SECURECRT to generate SSH public key (RSA)
The first step: the generation of the key pair.
Create a new connection in the SECURECRT.
Protocol selected SSH2
Hostname Enter the host IP to connect to.
Port enter the port number of the sshd on the target host.
Username Enter the name of the user to log in.
Step two: Generate the SSH public key file
In the SECURECRT software,
Options Menu->global Options->ssh2
Select the "Create Identity File" button. The Key Generation wizard window appears. The "Next" window appears. Requires the public Key Type to be selected. You can choose the RSA/DSA encryption method.
Press "Next". A window appears. Requires a protection password for the private key. This can not lose, but also can not lose. If you don't lose it. When you log on to a Linux server with SECURECRT, you can log in without a password. It's a good idea to set a password here, and you'll be prompted to enter it later.
Press Next to enter a window that requires a key pair to encrypt the length. selectable between 512-2048.
Press "Next". Start generating key pairs. After the key pair is generated.
Press "Next". Select the location where the key pair is saved. After you save it, ask if you want to upload the public key and select "No".
The key pair is generated.
Step three: Set up an FTP server to copy files to a Linux host. See video.
Fourth step: Create an ordinary user, with test as an example here.
#useradd Test
#passwd Test
Fifth step: Copy the public key file to the test user's home directory.
#cp identity.pub/home/test/identity.pub
Sixth step: Create the. SSH directory and generate the public key file.
Server-side settings. First, create an. SSH directory in the home directory of the user you want to log in to. Do the following
$CD ~
~ $mkdir. SSH
~ $chmod 755. SSH
~ $ssh-keygen–i–f identity.pub >>./.ssh/authorized_keys
(converted to public key format recognized by OpenSSH, the converted file name is Authorized_keys, this is the SSH public key file)
~ $chmod 644./.ssh/authorized_keys
The server and client settings are complete. You can connect to the Linux server via SECURECRT.
There is a step set, since everyone has successfully used SSH RSA function, then must let OpenSSH only support RSA authentication, otherwise both support common password and support RSA is not interesting, did not improve the security, so we need to let OpenSSH only support RSA authentication,
Supplemental Configuration Instructions:
To implement OPENSSH only supports RSA authentication, we only need to modify
Vi/etc/ssh/sshd_config
Set up
Passwordauthentication No
This article is from the "Fun Linux Lesson" blog, so be sure to keep this source http://hwdelinux.blog.51cto.com/10691136/1695545
Refer to the four Linux SSH service for multi-user login Linux System--windows client Chapter