tech:ssh
Différences
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
| tech:ssh [2025/05/24 12:24] – Jean-Baptiste | tech:ssh [2025/11/09 19:08] (Version actuelle) – Jean-Baptiste | ||
|---|---|---|---|
| Ligne 15: | Ligne 15: | ||
| '' | '' | ||
| - | <code ini ~/ | + | '' |
| + | <code ini> | ||
| Host * | Host * | ||
| Ligne 36: | Ligne 37: | ||
| Host srvlnxvm2 192.168.22.42 | Host srvlnxvm2 192.168.22.42 | ||
| - | Hostname srvlnxvm2 | + | |
| - | | + | ProxyCommand ssh -W %h:%p srvlnxrbd |
| Host * | Host * | ||
| Ligne 43: | Ligne 44: | ||
| Host gtw | Host gtw | ||
| - | Hostname 192.168.22.78 | + | |
| - | | + | PubkeyAuthentication=no |
| - | | + | Port 6322 |
| - | | + | #lftp sftp:// |
| Host 192.168.22.63 | Host 192.168.22.63 | ||
| Ligne 78: | Ligne 79: | ||
| Source http:// | Source http:// | ||
| - | <code - ~/ | + | '' |
| + | <code -> | ||
| Host * | Host * | ||
| | | ||
| Ligne 90: | Ligne 92: | ||
| ssh -o " | ssh -o " | ||
| </ | </ | ||
| + | |||
| == SSH Escape Sequences (aka Kill Dead SSH Sessions) | == SSH Escape Sequences (aka Kill Dead SSH Sessions) | ||
| - | <code - ~/ | + | '' |
| + | <code -> | ||
| Host * | Host * | ||
| EscapeChar ~ | EscapeChar ~ | ||
| Ligne 113: | Ligne 117: | ||
| </ | </ | ||
| - | == SSH Proxy | ||
| - | |||
| - | L’intérêt étant de ne pas déposer ailleurs sa clef SSH privée | ||
| - | |||
| - | <code bash> | ||
| - | ssh -t -A serveurBastionRebond ssh serveurPlop118 | ||
| - | </ | ||
| - | |||
| - | Ou plus simple : | ||
| - | |||
| - | <code - ~/ | ||
| - | Host serveurPlop118 | ||
| - | ProxyCommand ssh -W %h:%p bastion | ||
| - | | ||
| - | ### Si besion | ||
| - | Host bastion | ||
| - | Hostname 192.168.2.34 | ||
| - | </ | ||
| - | |||
| - | Pb | ||
| - | |||
| - | <code -> | ||
| - | $ ssh -t -A bastion ssh -o StrictHostKeychecking=no 192.168.1.22 | ||
| - | Permission denied (publickey). | ||
| - | Shared connection to 171.33.90.69 closed | ||
| - | </ | ||
| - | |||
| - | Solution | ||
| - | <code bash> | ||
| - | ssh -O stop bastion | ||
| - | </ | ||
| - | |||
| - | ou | ||
| - | <code bash> | ||
| - | ssh -o ControlMaster=no 192.168.1.22 | ||
| - | </ | ||
| - | |||
| - | |||
| - | === Exemple | ||
| - | |||
| - | <code - ~/ | ||
| - | Host rebond | ||
| - | Hostname 192.168.89.155 | ||
| - | User jean | ||
| - | |||
| - | Host old-rhel5 | ||
| - | Hostname 192.168.50.20 | ||
| - | User root | ||
| - | ProxyCommand ssh -W %h:%p rebond | ||
| - | KexAlgorithms +diffie-hellman-group1-sha1, | ||
| - | HostKeyAlgorithms +ssh-rsa | ||
| - | PubkeyAcceptedKeyTypes +ssh-rsa | ||
| - | SetEnv TERM=linux | ||
| - | | ||
| - | Host old-rhel3 | ||
| - | Hostname 192.168.50.30 | ||
| - | KexAlgorithms +diffie-hellman-group1-sha1, | ||
| - | HostKeyAlgorithms +ssh-rsa | ||
| - | PubkeyAcceptedKeyTypes +ssh-rsa | ||
| - | Ciphers +aes256-cbc | ||
| - | SetEnv TERM=linux | ||
| - | |||
| - | Host centreon | ||
| - | Hostname 192.168.50.21 | ||
| - | User root | ||
| - | ProxyCommand ssh -W %h:%p rebond | ||
| - | RemoteForward 3128 192.168.89.221: | ||
| - | LocalForward 8081 localhost: | ||
| - | # SendEnv LANG LC_* | ||
| - | </ | ||
tech/ssh.1748082246.txt.gz · Dernière modification : de Jean-Baptiste
