centos7(x86-64)下升级openssh7.5p1及重启后不能登陆问题

一、下载openssh7.5p1

http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz 

tar -zxvf  openssh-7.5p1.tar.gz 

二、执行脚本

#!/bin/bash

set -e

# prepare
yum -y install gcc openssl-devel zlib-devel pam-devel

#内网环境也可以通过yumdownloader openssl-devel --resolve  --destdir=/usr/down  命令执行下载带依赖的rpm包,然后使用rpm命令进行安装
#rpm -ivh gcc-4.8.5-11.el7.x86_64.rpm
#rpm -ivh openssl-devel-1.0.1e-60.el7_3.1.x86_64.rpm
#rpm -ivh pam-devel-1.1.8-18.el7.x86_64.rpm
#rpm -ivh zlib-devel-1.2.7-17.el7.x86_64.rpm

# backup
if [ ! -d "/etc/ssh-install-saved" ]; then
cp -rf /etc/ssh /etc/ssh-install-saved
else
echo "backup already exists"
fi

# pre config
chmod 600 /etc/ssh/*_key
chmod 644 /etc/ssh/*.pub
rm -rf /etc/ssh/ssh_config
rm -rf /etc/ssh/sshd_config
rm -rf /etc/ssh/moduli

# remove old version
yum remove openssh -y

# compile
cd `dirname $0` && tar zxvf openssh-7.5p1.tar.gz && cd openssh-7.5p1 && ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-md5-passwords --with-privsep-path=/var/lib/sshd && make -j4 && make install

# post config
cd ..
pwd
cp -rf openssh-7.5p1/moduli /etc/ssh/moduli
cp -rf openssh-7.5p1/ssh_config /etc/ssh/ssh_config
cp -rf openssh-7.5p1/sshd_config /etc/ssh/sshd_config
chmod 600 /etc/ssh/*_key
chmod 644 /etc/ssh/*.pub

pwd

cp -rf openssh-7.5p1/contrib/redhat/sshd.init /etc/init.d/sshd
chmod +x /etc/init.d/sshd
chkconfig --add sshd
chkconfig --list |grep sshd
sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/g' /etc/ssh/sshd_config
sed -i -e '/echo -n $"Starting $prog:"/a\\tOPTIONS="-f /etc/ssh/sshd_config"' /etc/init.d/sshd

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config  #升级ssh发现重启以后ssh又不能登陆,关闭SELINUX以后发现一切正常

# start
ssh -V
systemctl daemon-reload
cd /etc/init.d/ && ./sshd restart
service sshd restart

希望有帮助,我也是一个菜鸟,有问题请指正!谢谢
posted on 2017-07-11 03:20  依然等待  阅读(528)  评论(0)    收藏  举报