{"id":1590,"date":"2026-01-29T11:08:03","date_gmt":"2026-01-29T03:08:03","guid":{"rendered":"https:\/\/www.johntitorblog.com\/?p=1590"},"modified":"2026-01-29T11:09:10","modified_gmt":"2026-01-29T03:09:10","slug":"xshell4-%e8%bf%9e%e6%8e%a5-ubuntu-24-04-lts%ef%bc%9a%e5%9c%a8-22-%e7%ab%af%e5%8f%a3%e5%90%af%e7%94%a8-root%e5%af%86%e7%a0%81%e7%99%bb%e5%bd%95%ef%bc%88%e5%85%bc%e5%ae%b9%e8%80%81%e7%ae%97%e6%b3%95-ke","status":"publish","type":"post","link":"https:\/\/www.johntitorblog.com\/?p=1590","title":{"rendered":"Xshell4 \u8fde\u63a5 Ubuntu 24.04 LTS\uff1a\u5728 22 \u7aef\u53e3\u542f\u7528 root+\u5bc6\u7801\u767b\u5f55\uff08\u517c\u5bb9\u8001\u7b97\u6cd5\/KEX\uff09"},"content":{"rendered":"\n
\n

\u9002\u7528\u573a\u666f\uff1a\u4f60\u5fc5\u987b\u7ee7\u7eed\u4f7f\u7528 Xshell4<\/strong> \u8fd9\u7c7b\u8001 SSH \u5ba2\u6237\u7aef\uff0c\u4f46\u7cfb\u7edf\u662f Ubuntu 24.04 LTS Server<\/strong>\uff08OpenSSH \u65b0\u7248\u672c\uff09\uff0c\u9ed8\u8ba4\u7b97\u6cd5\u66f4\u73b0\u4ee3\uff0c\u5bfc\u81f4\u8001\u5ba2\u6237\u7aef\u63e1\u624b\u5931\u8d25\u6216\u65e0\u6cd5\u7528 root+\u5bc6\u7801\u767b\u5f55\u3002\u672c\u6587\u7ed9\u51fa\u4e00\u4e2a\u53ef\u7528\u7684\u201c\u8001\u6d3e\u65b9\u6848\u201d\u3002<\/p>\n<\/blockquote>\n\n\n\n\n\n\n\n

\n\n\n\n

\u6211\u7684\u9700\u6c42<\/h2>\n\n\n\n
    \n
  • \u5fc5\u987b\u7ee7\u7eed\u4f7f\u7528 Xshell4<\/strong><\/li>\n\n\n\n
  • \u8fde\u63a5 Ubuntu 24.04<\/strong> \u7684 22 \u7aef\u53e3<\/strong><\/li>\n\n\n\n
  • \u5e0c\u671b\u7528 root + \u5bc6\u7801<\/strong> \u767b\u5f55\uff08\u8001\u6d3e\u4e60\u60ef\uff09<\/li>\n\n\n\n
  • \u6700\u7ec8\u5b9e\u73b0\uff1aXshell4 \u80fd\u6b63\u5e38 SSH \u767b\u5f55 root<\/li>\n<\/ul>\n\n\n\n
    \n\n\n\n

    \u80cc\u666f\uff1a\u4e3a\u4ec0\u4e48 Xshell4 \u4f1a\u8fde\u4e0d\u4e0a\uff1f<\/h2>\n\n\n\n

    Ubuntu 24.04 \u7684 OpenSSH \u9ed8\u8ba4\u504f\u5b89\u5168\uff0c\u5f88\u591a\u65e7\u7b97\u6cd5\u4f1a\u88ab\u7981\u7528\u6216\u4f18\u5148\u7ea7\u964d\u4f4e\u3002
    \u800c Xshell4 \u5f80\u5f80\u53ea\u652f\u6301\/\u4f18\u5148\u4f7f\u7528\u4e00\u4e9b\u8001\u7b97\u6cd5\uff0c\u6bd4\u5982\uff1a<\/p>\n\n\n\n

      \n
    • \u65e7\u7684 KEX\uff1adiffie-hellman-group1-sha1<\/code> \/ group14-sha1<\/code><\/li>\n\n\n\n
    • \u65e7\u7684\u4e3b\u673a\u5bc6\u94a5\u7b97\u6cd5\uff1assh-rsa<\/code><\/li>\n\n\n\n
    • \u65e7\u7684 MAC\/Cipher\uff1ahmac-sha1<\/code>\u3001aes*-cbc<\/code>\u3001\u751a\u81f3 3des-cbc<\/code><\/li>\n<\/ul>\n\n\n\n

      \u56e0\u6b64\u4f1a\u51fa\u73b0\u7c7b\u4f3c\u9519\u8bef\uff1a<\/p>\n\n\n\n

        \n
      • \u201c\u627e\u4e0d\u5230\u5339\u914d\u7684 key exchange \u7b97\u6cd5\u201d<\/li>\n\n\n\n
      • \u6216\u63e1\u624b\/\u8ba4\u8bc1\u9636\u6bb5\u5931\u8d25<\/li>\n<\/ul>\n\n\n\n
        \n\n\n\n

        \u98ce\u9669\u63d0\u793a\uff08\u5fc5\u987b\u8bfb\uff09<\/h2>\n\n\n\n

        \u4e3a\u4e86\u517c\u5bb9 Xshell4\uff0c\u9700\u8981\u542f\u7528 SHA1 \/ CBC \/ ssh-rsa<\/strong> \u7b49\u65e7\u7b97\u6cd5\uff0c\u8fd9\u4e9b\u7b97\u6cd5\u5b89\u5168\u6027\u8f83\u5f31\u3002
        \u5f3a\u70c8\u5efa\u8bae\uff1a<\/p>\n\n\n\n

          \n
        • \u53ea\u5728\u5185\u7f51\u4f7f\u7528<\/strong>\uff08\u865a\u62df\u673a\/\u5c40\u57df\u7f51\u73af\u5883\uff09<\/li>\n\n\n\n
        • \u4e0d\u8981\u628a 22 \u7aef\u53e3\u76f4\u63a5\u66b4\u9732\u5230\u516c\u7f51<\/li>\n\n\n\n
        • \u5982\u679c\u5fc5\u987b\u516c\u7f51\u4f7f\u7528\uff0c\u81f3\u5c11\u9650\u5236\u6765\u6e90 IP\u3001\u9632\u706b\u5899\u3001Fail2ban\u3001\u6216\u8005\u6539\u4e3a\u5bc6\u94a5\u767b\u5f55<\/li>\n<\/ul>\n\n\n\n

          \u672c\u6587\u4ec5\u4e3a\u201c\u517c\u5bb9\u8001\u5de5\u5177\u201d\u7684\u5b9e\u7528\u65b9\u6848\u3002<\/p>\n\n\n\n

          \n\n\n\n

          1\uff09\u5b89\u88c5\u5e76\u786e\u8ba4 SSH \u670d\u52a1<\/h2>\n\n\n\n

          Ubuntu server \u6709\u65f6\u662f minimized \u73af\u5883\uff0c\u5148\u786e\u8ba4 sshd \u5df2\u5b89\u88c5\u5e76\u76d1\u542c 22\uff1a<\/p>\n\n\n\n

          sudo apt update\nsudo apt install -y openssh-server\nsudo systemctl enable --now ssh\n\nss -lntp | grep ':22'\n<\/pre>\n\n\n\n
          \u770b\u5230 LISTEN ... :22<\/code> \u5373\u6b63\u5e38\u3002<\/p>\n\n\n\n
          \n\n\n\n
          2\uff09\u751f\u6210\u4e3b\u673a\u5bc6\u94a5\uff08\u786e\u4fdd\u5305\u542b RSA\uff09<\/h2>\n\n\n\n
          Xshell4 \u517c\u5bb9\u6027\u901a\u5e38\u9700\u8981 RSA \u4e3b\u673a\u5bc6\u94a5\uff1a<\/p>\n\n\n\n
          sudo ssh-keygen -A\nls -l \/etc\/ssh\/ssh_host_*key\n<\/pre>\n\n\n\n
          \u5e94\u8be5\u80fd\u770b\u5230\u7c7b\u4f3c\uff1a<\/p>\n\n\n\n
            \n
          • \/etc\/ssh\/ssh_host_rsa_key<\/code><\/li>\n\n\n\n
          • \/etc\/ssh\/ssh_host_ed25519_key<\/code><\/li>\n\n\n\n
          • \/etc\/ssh\/ssh_host_ecdsa_key<\/code><\/li>\n<\/ul>\n\n\n\n
            \n\n\n\n
            3\uff09\u4e3a Xshell4 \u5f00\u542f\u201c\u8001\u7b97\u6cd5\u517c\u5bb9\u201d\uff08\u63a8\u8350\u7528 drop-in \u6587\u4ef6\uff09<\/h2>\n\n\n\n
            Ubuntu 24.04 \u652f\u6301 \/etc\/ssh\/sshd_config.d\/*.conf<\/code> \u65b9\u5f0f\u8ffd\u52a0\u914d\u7f6e\uff0c\u6bd4\u76f4\u63a5\u6539\u4e3b\u914d\u7f6e\u66f4\u5e72\u51c0\u3002<\/p>\n\n\n\n
            \u521b\u5efa\u517c\u5bb9\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n
            sudo tee \/etc\/ssh\/sshd_config.d\/99-xshell4.conf >\/dev\/null <<'EOF'\n# Xshell4 legacy compatibility (weaker algorithms; LAN-only recommended)\n\nKexAlgorithms +diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\nHostKeyAlgorithms +ssh-rsa\nPubkeyAcceptedAlgorithms +ssh-rsa\n\nCiphers +aes128-cbc,aes256-cbc,3des-cbc\nMACs +hmac-sha1,hmac-md5\n\nPasswordAuthentication yes\nEOF\n<\/pre>\n\n\n\n
            \u8bf4\u660e\uff1a<\/p>\n\n\n\n
              \n
            • \u8fd9\u662f\u201c\u4f18\u5148\u80fd\u8fde\u4e0a\u201d\u7684\u7ec4\u5408\uff0c\u504f\u517c\u5bb9\uff0c\u4e0d\u504f\u5b89\u5168\u3002<\/li>\n<\/ul>\n\n\n\n
              \n\n\n\n
              4\uff09\u542f\u7528 root + \u5bc6\u7801\u767b\u5f55\uff08\u8001\u6d3e\u6a21\u5f0f\uff09<\/h2>\n\n\n\n
              4.1 \u8bbe\u7f6e root \u5bc6\u7801<\/h3>\n\n\n\n
              Ubuntu \u9ed8\u8ba4 root \u53ef\u80fd\u9501\u5b9a\uff0c\u5fc5\u987b\u663e\u5f0f\u8bbe\u7f6e\u5bc6\u7801\uff1a<\/p>\n\n\n\n
              sudo passwd root\n<\/pre>\n\n\n\n
              4.2 \u5141\u8bb8 root \u901a\u8fc7\u5bc6\u7801\u767b\u5f55<\/h3>\n\n\n\n
              \u7f16\u8f91\u521a\u624d\u7684 drop-in \u6587\u4ef6\uff1a<\/p>\n\n\n\n
              sudo vi \/etc\/ssh\/sshd_config.d\/99-xshell4.conf\n<\/pre>\n\n\n\n
              \u5728\u672b\u5c3e\u8ffd\u52a0\uff1a<\/p>\n\n\n\n
              PermitRootLogin yes\n<\/pre>\n\n\n\n
              \n
              \u6ce8\u610f\uff1a\u5982\u679c\u4f60\u7528 vi<\/code> \u76f4\u63a5\u7f16\u8f91\u7cfb\u7edf\u6587\u4ef6\uff0c\u52a1\u5fc5\u4f7f\u7528 sudo vi ...<\/code>\uff0c\u5426\u5219\u4f1a\u53ea\u8bfb\u65e0\u6cd5\u4fdd\u5b58\u3002<\/p>\n<\/blockquote>\n\n\n\n
              \n\n\n\n
              5\uff09\u68c0\u67e5\u914d\u7f6e\u5e76\u91cd\u542f SSH<\/h2>\n\n\n\n
              sudo sshd -t\nsudo systemctl restart ssh\n<\/pre>\n\n\n\n
              \u9a8c\u8bc1\u6700\u7ec8\u751f\u6548\u914d\u7f6e\uff08\u53ef\u9009\u4f46\u5f88\u5b9e\u7528\uff09\uff1a<\/p>\n\n\n\n
              sudo sshd -T | egrep 'permitrootlogin|passwordauthentication|kexalgorithms|hostkeyalgorithms|pubkeyacceptedalgorithms|ciphers|macs'\n<\/pre>\n\n\n\n
              \n\n\n\n
              6\uff09Xshell4 \u8fde\u63a5\u53c2\u6570<\/h2>\n\n\n\n
                \n
              • Host\uff1aUbuntu \u4e3b\u673a IP\uff08\u4f8b\u5982 192.168.50.123<\/code>\uff09<\/li>\n\n\n\n
              • Port\uff1a22<\/code><\/li>\n\n\n\n
              • User\uff1aroot<\/code><\/li>\n\n\n\n
              • Password\uff1a\u4f60\u521a\u8bbe\u7f6e\u7684 root \u5bc6\u7801<\/li>\n<\/ul>\n\n\n\n
                \u81f3\u6b64\uff0cXshell4 \u5e94\u8be5\u53ef\u4ee5\u76f4\u63a5 root+\u5bc6\u7801\u767b\u5f55 Ubuntu 24.04\u3002<\/p>\n\n\n\n
                \n\n\n\n
                \u5e38\u89c1\u95ee\u9898\u6392\u67e5<\/h2>\n\n\n\n
                1\uff09\u8fd8\u662f\u63d0\u793a \u201ckey exchange\u201d \u4e0d\u5339\u914d<\/h3>\n\n\n\n
                \u786e\u8ba4\u914d\u7f6e\u6587\u4ef6\u8def\u5f84\u6b63\u786e\uff1a
                \/etc\/ssh\/sshd_config.d\/99-xshell4.conf<\/code><\/p>\n\n\n\n
                \u5e76\u786e\u8ba4\u8bed\u6cd5\u65e0\u8bef\uff1a<\/p>\n\n\n\n
                sudo sshd -t\n<\/pre>\n\n\n\n
                2\uff09\u80fd\u63e1\u624b\u4f46 root \u767b\u5f55\u5931\u8d25<\/h3>\n\n\n\n
                \u786e\u8ba4\uff1a<\/p>\n\n\n\n
                  \n
                • \u662f\u5426\u6267\u884c\u8fc7 sudo passwd root<\/code><\/li>\n\n\n\n
                • \u914d\u7f6e\u662f\u5426\u5305\u542b PermitRootLogin yes<\/code><\/li>\n\n\n\n
                • \u91cd\u542f\u8fc7 SSH\uff1asudo systemctl restart ssh<\/code><\/li>\n<\/ul>\n\n\n\n
                  3\uff09\u7f16\u8f91\u6587\u4ef6\u63d0\u793a\u53ea\u8bfb<\/h3>\n\n\n\n
                  \u4f60\u53ef\u80fd\u5fd8\u8bb0 sudo \u6253\u5f00\uff1a<\/p>\n\n\n\n
                  sudo vi \/etc\/ssh\/sshd_config.d\/99-xshell4.conf\n<\/pre>\n\n\n\n
                  \n\n\n\n
                  \u6700\u540e\u5efa\u8bae\uff08\u66f4\u7a33\u4e00\u70b9\uff09<\/h2>\n\n\n\n
                  \u5982\u679c\u4f60\u80fd\u63a5\u53d7\u7a0d\u5fae\u201c\u73b0\u4ee3\u201d\u4e00\u70b9\uff0c\u5efa\u8bae\u628a root+\u5bc6\u7801\u6539\u6210\uff1a<\/p>\n\n\n\n
                    \n
                  • root \u53ea\u5141\u8bb8\u5bc6\u94a5\u767b\u5f55\uff1aPermitRootLogin prohibit-password<\/code><\/li>\n\n\n\n
                  • \u6216\u8005\u4ecd\u7528\u666e\u901a\u7528\u6237\u767b\u5f55 + sudo<\/li>\n<\/ul>\n\n\n\n
                    \u4f46\u5982\u679c\u4f60\u50cf\u6211\u4e00\u6837\u575a\u6301\u8001\u6d3e\uff0c\u90a3\u81f3\u5c11\u786e\u4fdd SSH \u53ea\u5728\u5185\u7f51\u53ef\u8fbe\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
                    \u9002\u7528\u573a\u666f\uff1a\u4f60\u5fc5\u987b\u7ee7\u7eed\u4f7f\u7528 Xshell4 \u8fd9\u7c7b\u8001 SSH \u5ba2\u6237\u7aef\uff0c\u4f46\u7cfb\u7edf\u662f Ubuntu 24.04 LTS  […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1590","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1590"}],"version-history":[{"count":2,"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1590\/revisions"}],"predecessor-version":[{"id":1592,"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1590\/revisions\/1592"}],"wp:attachment":[{"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.johntitorblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}