Implementing a certificate Login with putty under Windows

Source: Internet
Author: User

Because of the server security problem, to prevent others from brute force, but also to let the administrator exempt from recording multiple complex passwords, so the use of certificate login server is becoming more and more important.

  1. Download Puttygen.exe first. Run click Generyte to generate a pair of secret keys

    650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6C/C0/wKioL1VRok3jILh9AAKGCfl_COk041.jpg "title=" Y) O51] Jff5q0}s) cb53y8qg.png "alt=" Wkiol1vrok3jilh9aakgcfl_cok041.jpg "/>

    Copy the public key to a file named Authorized_keys

  2. Save the private key, named *.PPK end

  3. Create a regular user, useradd Erick

  4. Su Erick | Mkdir-m. SSH

  5. Put the file you just saved in the. SSH directory and configure the permissions chmod 600 *

  6. Try to log in using the Putty secret key

    650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6C/C6/wKiom1VRojeyVEvhAAH4aZrst30859.jpg "title=" U] QLE@YTHH3) Je_jhi ' H (ir.png "alt=" Wkiom1vrojeyvevhaah4azrst30859.jpg "/>

  7. Select Certificate

    650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/6C/C0/wKioL1VRpBGwd0_OAAI8Yfqihqk305.jpg "title=" Mz7npm2]~al6[g7b83%8y9n.png "alt=" Wkiol1vrpbgwd0_oaai8yfqihqk305.jpg "/>

  8. Select OK, click Open

    650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/6C/C0/wKioL1VRpGKjBmGCAAD4xA86n_o200.jpg "title=" IOO6H2NZA4OMMLN)) tr9exb.png "alt=" Wkiol1vrpgkjbmgcaad4xa86n_o200.jpg "/>

    You can see the logged-on user as Erick and log on with a certificate

9 for security, you can also set the Prohibit password login, only allow the secret key login

Vim/etc/ssh/ssh_config

To change the 50th line of gssapiauthentication Yes to No, restart the sshd service.

This article is from "Perfect world!" "Blog, be sure to keep this provenance http://shyln.blog.51cto.com/6890594/1650639

Implementing a certificate Login with putty under Windows

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.