限制机器的 SSH 访问
我正在尝试设置一个服务器，供为我提供的服务付费的人登录，但我想确保只有我想要的人才能访问它。显然，我不能简单地为每个人提供不同的用户帐户，因为他们可以简单地与其他人共享凭据。是否可以通过 MAC 地址或 RSA 密钥或类似的东西来限制 SSH 访问？通过 IP 也不起作用，因为多个人可以坐在一个路由器后面。
I'm trying to set up a server that will be logged into by people paying for a service I offer, but I want to make sure that only those people who I want can access it. I obviously can't simply give each one a different user account because they could simply share credentials with other people. Is it possible to restrict SSH access by MAC address or RSA Key or something like that? By IP doesn't work either because multiple people can sit behind a single router.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
是的，您可以使用 RSA 密钥，使用 RSA 的 PAM 模块。 http://www.rsa.com/node.aspx?id=1177
Yes, you could use a RSA key, using RSA's PAM modules. http://www.rsa.com/node.aspx?id=1177
不，没有真正有效的方法来以编程方式告诉谁坐在键盘上（这实际上就是您所追求的）。如果没有有关该服务的更多详细信息，我很难提供准确的建议，但一个不错的选择可能是设计该服务，使其在共享帐户上不太有用。
No, there's no real effective way to tell programmatically who's sitting at the keyboard (which is effectively what you're after). Without more details on what the service is, it's hard for me to offer exact suggestions, but one good bet might be to design the service such that it's less useful on a shared account.