authent man process rda stat server data- 步骤 获取
本文參照
http://docs.aws.amazon.com/zh_cn/AWSEC2/latest/UserGuide/managing-users.html
http://docs.aws.amazon.com/zh_cn/AWSEC2/latest/UserGuide/ec2-key-pairs.html#retrieving-the-public-key
1.通过密钥对(keypair)获取公有密钥(public key)
在本地terminla运行
$ssh-keygen -y
在提示输入密钥所在的文件时.请指定您的 .pem 文件的路径,比如
/path_to_key_pair/my-key-pair.pem
该命令将返回公有密钥:
如
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClKsfkNkuSevGj3eYhCe53pcjqP3maAhDFcvBS7O6V
hz2ItxCih+PnDSUaw+WNQn/mZphTk/a/gU8jEzoOWbkM4yxyb/wB96xbiFveSFJuOp/d6RJhJOI0iBXr
lsLnBItntckiJ7FbtxJMXLvvwJryDUilBMTjYtwB+QhYXUMOzce5Pjz5/i8SeJtjnV3iAoG/cQk+0FzZ
qaeJAAHco+CY/5WrUBkrHmFJr6HcXkvJdWPkYQS3xqC0+FmUZofz221CBt5IMucxXPkX4rWi+z7wB3Rb
BQoQzd8v7yeb7OzlPnWOyN0qFU0XA246RA8QFYiCNYwI3f05p6KLxEXAMPLE
2.然后用初始账户ssh 远程server.若ec2的instance系统为ubuntu,
本地terminal运行:
$ssh -i yourprivatekey.pem ubuntu@your-aws-host-ip
新建user
$adduser newuser
切换为newuser然后配置公有密钥
$sudo su - newuser
$mkdir .ssh
$chmod 700 .ssh
$touch .ssh/authorized_keys
$chmod 600 .ssh/authorized_keys
打开编辑器编辑.ssh/authorized_keys
将步骤1获取的公有密钥加入到该文件里
保存退出.
3.測试能否用新建账户登录aws
在步骤2的最后exit(应该是两次),直至退出aws回到local.
运行:
$ssh -i yourprivatekey.pem newuser@your-aws-host-ip
假设成功.则以上配置生效.
4.(Optional)禁用password登录
# vi /etc/ssh/sshd_config
PasswordAuthentication no
# service ssh restart
..ssh stop/waiting
..ssh start/running, process 7262
Aamazon web Service EC2 Ubuntu 新建用户而且用 ssh 连接 host
来源: http://www.bubuko.com/infodetail-2468350.html