Mac os ssh server

Настройка openssh-server на Mac OS X 10.9

Возникла следующая задача развернуть openssh -сервер на Mac OS X 10.9.

SSH — сервер в mac os идет по умолчанию настраивается, точнее просто активируется тут:
1. Откройте «Системные настройки»;
2. Выберете «Общий доступ»;
3. Установите галачку напротив пункта «Удаленный вход»;

Тут все хорошо, вопрос решен, если желаем поправить конфигурацию ssh то необходимо обратиться в каталог:
/private/etc/sshd_condif — конфигурационный файл ssh- сервера.
/private/etc/ssh_condif — конфигурационный файл ssh- клиента.

Теперь мне стало интересно сделать данные действия используя консоль (терминал) и вот на чем я застрял:

1. Как можно выполнить start / stop / restart сервиса (демона) sshd в терминале?
Что только не перепробовал, но ничего толкового не вышло.

Что обнаружил:
запуск sshd происходит вот тут:
/usr/libexec/sshd-keygen-wrapper — это просто shell script, который сначала создает ключи для сервера,

после чего командой:
exec /usr/sbin/sshd запускает сам ssh-сервер.
sshd -бинарник.

2. Конфигурационные файлы, как уже выше было представлено, находятся в каталоге ../etc, а хочется, что бы находились в ../etc/ssh/;
Как поменять пути до конфигурационных файлов? Необходимо пересобирать бинаринк?

Одно из решений, которое меня не устраивает, можно отредактировать скрипт «/usr/libexec/sshd-keygen-wrapper», а точнее строку:
exec /usr/sbin/sshd -f /private/etc/ssh/sshd_condif.

3. А так же хотелось, что бы настройка по умолчанию (Установка галачки напротив пункта «Удаленный вход» в настройках доступа) так же корректно работала и был один экземпляр конфигурационных файлов и сервиса.

Источник

PuTTY SSH client for Mac OSX — download and tutorial

PuTTY for Mac is a port of the Windows version of PuTTY . However, there are many options for SSH clients for Mac, and this page discusses several of them.

Contents

Using the built-in SSH client in Mac OS X

Mac OS X includes a command-line SSH client as part of the operating system. To use it, goto Finder, and selext Go -> Utilities from the top menu. Then look for Terminal. Terminal can be used to get a local terminal window, and also supports SSH connections to remote servers.

Running SSH from the terminal command line

Once you have the terminal window open, you have two alternatives. The first approach is to type ssh hostname or ssh user@hostname into the terminal window. This is more familiar for Linux and Unix users who are used to using a command line.

Running SSH with a graphical user interface

The second option is to select New Remote Connection. from the Shell menu of Terminal. This opens a graphical dialog asking for the host to connect to and the user name. This also allows saving connections. This is recommended for users who are not accustomed to using a command line.

How to use PuTTY SSH keys with the built-in OpenSSH

If you have a PuTTY .ppk format private key and want to use it with the built-in OpenSSH on Mac on the command line or in scripts, you can use the following commands.

First, install PuTTY for Mac using brew install putty or port install putty (see below). This will also install the command-line version of puttygen , the PuTTY key generator tool.

Then, use the following command to convert the .ppk format private key to a standard PEM format private key:

Make sure permissions on the private key file are set properly. It should only be readable by the user that owns it.

You can now use the key for logins from scripts and command line with:

Ported PuTTY for Mac

There is a port of PuTTY for Mac. It can be installed in several ways.

Installation using HomeBrew

If you already have the brew command installed, the best way to install PuTTY is to use the following command:

Installation using MacPorts

PuTTY is readily available via MacPorts. To see how to install MacPorts and PuTTY, see here .

Once you have MacPorts installed, you just need to give this command:

and to add a shortcut on the Desktop,

Alternatives to PuTTY on the Mac

A lot of people use Cyberduck on Mac. It is a solid, well-known SSH client that is quite popular.

Together with our customers, our mission is to secure their digital business on on-premises, cloud, and hybrid ecosystems cost-efficiently, at scale, and without disruptions to their operations or business continuity.

Источник

Enable Remote Login to Start SSH Server in Mac OS X

Remote Login is a feature in Mac OS X’s Sharing preferences that allow remote users to connect to a Mac in a secure fashion by using the OpenSSH protocols. Essentially, Remote Login starts an SSH server on a Mac, which includes the ability to accept incoming SSH connections, and is the secure replacement for telnet. Additionally, this feature includes and enables the SFTP server, which is the secure replacement for FTP, and finally it also enables SCP, for secure remote copying of files. If this sounds complicated or confusing, it’s really not, and we’ll walk through exactly how to quickly enable and set up the SSH server on a Mac so that it can accept inbound secured ssh, sftp, and scp connections.

How to Enable SSH & SFTP Server in Mac OS X with Remote Login

By starting the “Remote Login” service, you enable SSH and SFTP servers in Mac OS X. These instructions are the same for enabling remote login and accompanying SSH servers in MacOS Mojave 10.14, MacOS High Sierra 10.13, macOS Sierra 10.12, OS X El Capitan 10.11, Yosemite 10.10, OS X Mavericks 10.9, 10.8 Mountain Lion, 10.7 Lion, and 10.6 Snow Leopard.

1. Open System Preferences from the  Apple menu, and click on the “Sharing” preference panel
2. Select the checkbox next to “Remote Login” to enable it, like the screenshot indicates

Clicking the checkbox will instantly start the various remote login servers, including sftp and ssh.

If you want to limit incoming SSH access to certain users, you can do so in the same preference panel by ticking “Only these users” and then manually adding them by clicking on the + icon. This brings up a list of Users & Groups on the Mac that you can select from. Think of this as an extra security step, although SSH by default is quite secure as is due to the nature of the protocol.

Now that the SSH server has been enabled, you can verify they have enabled if you’d like. The easiest way to do this is to visit Terminal app and type either ‘ssh localhost’ or ‘sftp localhost’, which, if all is running as intended, should return something like this:

$ sftp localhost
The authenticity of host ‘localhost (::1)’ can’t be established.
RSA key fingerprint is b3:42:27:4a:b6:22:86:4b:c6:21:32:47:4b:8b:18:0d.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘localhost’ (RSA) to the list of known hosts.
Password:

Connecting to localhost isn’t too useful though, and this is called Remote Login for a reason, because it allows for secured connections to remote Macs through either the SSH command line interface, SFTP through any modern FTP/SFTP client, or with a direct file transfer by using the scp command from the terminal of other Macs or unix machines. We’ll focus primarily on the SSH and SFTP side of things because that is generally what the most commonly needed.

Connecting to the Mac SSH Server Remotely

Now that you have SSH up and running, connecting to it remotely is easy. The great thing about this is you can now connect to the Mac from virtually any other operating system, all you need is an SSH client. SSH clients are bundled with Mac OS X and Linux so there are no downloads necessary there, you can just open the Terminal and use the ‘ssh’ commands, but iOS users can use Prompt and Windows users can get PuTTY (its free).

1) From the Mac functioning as an SSH Server:

First you’ll want to grab the IP of the Mac running the server, this let’s another user/client know where to connect to:

• Get the Macs IP address – Go to “System Preferences” and “Network” to retrieve the IP

2) Connecting to the Mac with SSH from another computer:

Now with servers IP address, the Mac can be connected to:

We’ll assume you’re using the Terminal in Mac OS X, so using the IP address that you just found, use the following command syntax:

This is what it would actually look like, using paul as the username and 192.168.0.25 as the server IP:

You will be asked to accept an RSA key to your known hosts list, so type “yes” and then you will be asked for the users password

You’re now remotely connected to the Mac via SSH

You’ll now be logged into the Mac through SSH, this can be done remotely or over a local network, and all traffic to and from the machines is securely encrypted.

Terminal savvy users might also find it useful to know that you can enable and disable SSH server from the Mac command line as discussed here.

Connect to the Mac through SFTP

Because Remote Login enables both SSH and SFTP, you can also now connect to the Mac securely through the sftp protocol. This can be done through the Terminal, or through third party SFTP apps like CyberDuck, Transmit, Filezilla, or even from Mac OS X itself to transfer files to and from the Mac from any other location. A direct SFTP service link would look something like this: sftp://192.168.0.100

From the Terminal and command line, you would use the following command syntax to connect to the SFTP server:

If you want to use SCP instead, the procedure is the same except you use ‘scp’ as the commands instead.

A few things to remember here: your local IP address (on a LAN) is different than your external IP address (to the outside world). The easiest way to get a machines external IP is by going to a site like ‘whatismyip.org’ but keep in mind that if the Mac is behind a router with a firewall, you would have to open the ports on the router to be able to access it. That process is different depending on the router and firewall in use, so it wouldn’t make much sense to cover it here.

Finally, breaking away from Mac OS X and going to the mobile world with iOS, you can actually SSH into iPhones and iPads too by setting up servers on iOS devices too, but it’s a bit more complicated and requires a jailbreak to be able to enable the servers and gain access to the iOS command line.

The inclusion of SSH, and thereby SFTP, through Remote Login also explains why Apple ditched the FTP server in Lion onward onward (this remains the same in Mojave, High Sierra, Sierra, El Capitan, Yosemite, Mavericks, and Mountain Lion, though you can still install ftp if you really need to through Homebrew or by compiling it yourself), as they opted for the infinitely more secure and encrypted SSH and SFTP options, and bundled it within Sharing’s “Remote Login” option as part of the entire SSH package.

Thanks to Izdexic for the post idea via comments

If you have any helpful tips or information pertaining to SSH on a Mac, share with us in the comments below!

Источник

How to Enable SSH on a Mac from the Command Line

All modern Macs running macOS or Mac OS X come with SSH pre-installed by default, but the SSH (Secure Shell) daemon is also disabled by default. Advanced Mac users may appreciate knowing the ability to enable SSH and disable SSH are both available entirely from the command line of Mac OS, allowing for a simple way to allow or disallow remote connections into a computer. There’s no kext loading, downloads, or compiling necessary, to turn on SSH from the Terminal on any Mac you simply have to execute a system setup command, as we’ll show in this tutorial.

A quick side note; this guide applies to all versions of macOS and Mac OS X, but is really aimed at more advanced users who spend a lot of time in the Terminal. If you want to toggle SSH off and on and avoid the command line, you can do so by enabling Remote Login in the Sharing preference panel on a Mac, or stop the server by leaving it unchecked. If you do not regularly use ssh, there is no reason to enable the ssh server on a Mac.

How to Check if SSH Remote Login is Enabled in Mac OS via Terminal

Want to check the current status of SSH on a Mac? Using the systemsetup command string we can quickly determine if SSH and Remote Login is currently enabled on any Mac:

sudo systemsetup -getremotelogin

If remote login and SSH is currently enabled, the command and report will say “Remote Login: On” whereas if SSH is disabled and in the default macOS state, it will say “Remote Login: Off”.

Enable SSH on Mac from the Command Line with systemsetup

To quickly turn on SSH server and allow incoming ssh connections to the current Mac, use the -setremotelogin flag with systemsetup like so:

sudo systemsetup -setremotelogin on

sudo is necessary because the systemsetup command requires administrator privileges, just like when you enable Remote Login from the Sharing preferences on a Mac to enable the secure shell servers.

There is no confirmation or message that Remote Login and SSH has been enabled, but you can use the aforementioned -getmorelogin flag to check and verify that SSH server is indeed now running. And yes, using -setremotelogin applies to enabling both ssh and sftp servers on the Mac.

Once ssh has been enabled, any user account or person who has a login on the current Mac can access it remotely using the ssh command aimed at the Macs IP address like so:

Once connected, the user will have remote access to the computer via the command line, and if they have an admin account or admin password, they would have full remote administration access as well.

Turn Off SSH on Mac OS with systemsetup

If you want to disable SSH servers from the command line and thereby prevent remote connections, simply switch ‘on’ to ‘off’ with the -setremotelogin flag of systemsetup like so:

sudo systemsetup -setremotelogin off

Again, sudo is necessary to toggle SSH off and disable the ssh and sftp servers.

When you successfully execute the command, you will be asked: “Do you really want to turn remote login off? If you do, you will lose this connection and can only turn it back on locally at the server (yes/no)?” so type “yes” to confirm, which will disable SSH and also disconnect any active SSH connections to the Mac in question. If you want to avoid having to type yes/no, perhaps for inclusion in a setup script or otherwise, you can use the -f flag to circumvent the question like so:

sudo systemsetup -f -setremotelogin off

Similarly, you can also use -f to skip any prompts in regards to enabling SSH as well.

systemsetup -f -setremotelogin on

Do note that whether you turn SSH off or enable SSH from the command line, the Remote Login system preference panel setting in Mac OS X GUI will be adjusted to reflect the change accordingly as well.

Источник