{"id":19874,"date":"2021-05-26T10:19:53","date_gmt":"2021-05-26T08:19:53","guid":{"rendered":"https:\/\/www.websupport.sk\/podpora\/?post_type=ht_kb&#038;p=19874"},"modified":"2025-11-05T15:58:50","modified_gmt":"2025-11-05T14:58:50","slug":"pripojenie-na-server-pomocou-ssh-klucov","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/","title":{"rendered":"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov"},"content":{"rendered":"\n<p>Zabezpe\u010den\u00fd pr\u00edstup k pr\u00edkazov\u00e9mu riadku servera je mo\u017en\u00e9 nadviaza\u0165 cez SSH (Secure SHell). Protokol a n\u00e1stroj SSH nahradil svojich star\u0161\u00edch predchodcov ako <code>telnet<\/code>, <code>rlogin<\/code> alebo <code>rsh<\/code>, aby doplnil ch\u00fdbaj\u00facu bezpe\u010dnostn\u00fa vrstvu v podobe plne \u0161ifrovanej komunik\u00e1cie medzi dvoma neautentifikovan\u00fdmi strojmi v nezabezpe\u010denej sieti.<\/p>\n\n\n\n<p>V\u010faka SSH dok\u00e1\u017eeme z\u00edska\u0165 dnes u\u017e takmer k \u013eubovo\u013en\u00e9mu serveru kryptovan\u00fd vzdialen\u00fd pr\u00edstup a v pr\u00edkazovom riadku servera tak m\u00f4\u017eeme pracova\u0165 ako keby sme sedeli priamo pred n\u00edm. Sta\u010d\u00ed sa pripoji\u0165 s prihlasovac\u00edmi \u00fadajmi (meno pou\u017e\u00edvate\u013ea a heslo) na adrese servera (IP adresa). Na serveri be\u017e\u00ed serverov\u00e1 \u010das\u0165 SSH (zv\u00e4\u010d\u0161a d\u00e9mon <code>sshd<\/code>), ku ktorej sa zo vzdialen\u00e9ho po\u010d\u00edta\u010da prip\u00e1jame pomocou klientskej \u010dasti SSH (n\u00e1stroj <code>ssh<\/code>).<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"578\" height=\"191\" src=\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg\" alt=\"\" class=\"wp-image-19877\" srcset=\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg 578w, https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh-50x17.jpg 50w, https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh-60x20.jpg 60w, https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh-100x33.jpg 100w\" sizes=\"auto, (max-width: 578px) 100vw, 578px\" \/><\/figure><\/div>\n\n\n\n<p>Popul\u00e1rna implement\u00e1cia SSH je vyd\u00e1van\u00e1 pod n\u00e1zvom <a href=\"https:\/\/www.openssh.com\/\">OpenSSH<\/a> a n\u00e1jdeme ju predin\u0161talovan\u00fa na mnoh\u00fdch opera\u010dn\u00fdch syst\u00e9moch ako s\u00fa Windows, MacOS, Linux alebo *BSD. Ide o n\u00e1stroj \u0161\u00edren\u00fd bezplatne s otvoren\u00fdm zdrojov\u00fdm k\u00f3dom. O v\u00fdvoj sa staraj\u00fa program\u00e1tori <a href=\"https:\/\/www.openbsd.org\/\">OpenBSD Project<\/a>.<\/p>\n\n\n\n<p>WebSupport pon\u00faka <a href=\"https:\/\/www.websupport.sk\/podpora\/kb\/webova-konzola-shell\/\">Shell cez SSH<\/a> na v\u0161etk\u00fdch svojich webhostingoch. Pre <a href=\"https:\/\/www.websupport.sk\/podpora\/kb\/prihlasenie-na-virtualny-server-cez-ssh\/\">virtu\u00e1lny server (VPS)<\/a> od WebSupportu s\u00fa prihlasovacie \u00fadaje na SSH zaslan\u00e9 e-mailom pri objedn\u00e1vke servera. Linuxov\u00fd pr\u00edkazov\u00fd riadok WebSupport pre svoj <a href=\"https:\/\/www.websupport.sk\/webhosting-prehlad\">hosting<\/a> poskytuje aj ako webov\u00fa konzolu, v ktorej m\u00f4\u017eeme pracova\u0165 pomocou webov\u00e9ho prehliada\u010da ako je Google Chrome. Z\u00edskame tak pr\u00edstup k linuxov\u00e9mu pr\u00edkazov\u00e9mu riadku z prostredia, ktor\u00e9 funguje nez\u00e1visle na opera\u010dnom syst\u00e9me.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pr\u00edprava prostredia servera<\/h2>\n\n\n\n<p>Ak pou\u017e\u00edvame VPS, v prvom rade je potrebn\u00e9 zabezpe\u010di\u0165 aktu\u00e1lnos\u0165 v\u0161etk\u00fdch bal\u00edkov. Nain\u0161talujeme teda v\u0161etok updatovan\u00fd softv\u00e9r pomocou dvoch pr\u00edkazov v jednej d\u00e1vke:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo apt update &amp;&amp; sudo apt upgrade<\/pre>\n\n\n\n<p>Ak syst\u00e9m n\u00e1jde aktualizovate\u013en\u00e9 bal\u00ed\u010dky, takto sa op\u00fdta, \u010di ich chceme za\u010da\u0165 in\u0161talova\u0165:<\/p>\n\n\n\n<p><em>Do you want to continue? [Y\/n]<\/em><\/p>\n\n\n\n<p>Stla\u010d\u00edme kl\u00e1ves <code>y<\/code> ak chceme za\u010da\u0165 aktualiza\u010dn\u00fd proces alebo kl\u00e1ves <code>n<\/code>, ak aktualizova\u0165 nechceme. N\u00e1sledne stla\u010d\u00edme kl\u00e1ves <code>Enter<\/code>.<\/p>\n\n\n\n<p>V pr\u00edpade pou\u017eitia jedn\u00e9ho z webhostingov sta\u010d\u00ed iba <a href=\"https:\/\/www.websupport.sk\/podpora\/kb\/webova-konzola-shell\/\">aktivova\u0165 Shell<\/a> a prihlasovacie \u00fadaje s adresou aj s konkr\u00e9tnym pr\u00edkazom na pripojenie cez SSH bud\u00fa automaticky vygenerovan\u00e9.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Vytvorenie s\u00fakromn\u00e9ho a verejn\u00e9ho SSH k\u013e\u00fa\u010dA<\/h2>\n\n\n\n<p>Prv\u00fdkr\u00e1t sa cez SSH mus\u00edme pripoji\u0165 pomocou prihlasovac\u00edch \u00fadajov (<code>meno<\/code> pou\u017e\u00edvate\u013ea a heslo) na <code>server<\/code> (IP adresa) takto:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh meno@server<\/pre>\n\n\n\n<p>Bezpe\u010dnej\u0161ia forma autentifik\u00e1cie ako prihlasovacie \u00fadaje je v\u0161ak pou\u017eitie SSH k\u013e\u00fa\u010dov. Vytvor\u00edme teda s\u00fakromn\u00fd a verejn\u00fd SSH k\u013e\u00fa\u010d takto:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh-keygen<\/pre>\n\n\n\n<p>Ke\u010f\u017ee najpou\u017e\u00edvanej\u0161ie opera\u010dn\u00e9 syst\u00e9my ako Windows, MacOS alebo Linux maj\u00fa predin\u0161talovan\u00e9 OpenSSH, postup vytv\u00e1rania k\u013e\u00fa\u010dov bude v pr\u00edkazovom riadku rovnak\u00fd. Najsk\u00f4r sa vyp\u00ed\u0161e inform\u00e1cia o tom, \u017ee sa chyst\u00e1me vytvori\u0165 p\u00e1r k\u013e\u00fa\u010dov &#8211; jeden s\u00fakromn\u00fd (private), druh\u00fd verejn\u00fd (public). Pri zad\u00e1van\u00ed n\u00e1zvu s\u00faboru a hesla sta\u010d\u00ed iba stla\u010di\u0165 kl\u00e1ves <code>Enter<\/code>, aby sme ponechali prednastaven\u00fd n\u00e1zov s\u00faboru a k\u013e\u00fa\u010de bez hesla.<\/p>\n\n\n\n<p class=\"wp-block-ht-blocks-messages wp-block-hb-message wp-block-hb-message--withicon is-style-danger\">Svoj priv\u00e1tn\u00fd k\u013e\u00fa\u010d, resp. s\u00fabor id_rsa nikdy nezverej\u0148ujeme.<\/p>\n\n\n\n<p>S\u00fakromn\u00fd k\u013e\u00fa\u010d sa ulo\u017eil do oby\u010dajn\u00e9ho textov\u00e9ho s\u00faboru s n\u00e1zvom <code>id_rsa<\/code>, pri\u010dom cesta k tomuto s\u00faboru bola vyp\u00edsan\u00e1 v z\u00e1tvorke. V rovnakej ceste n\u00e1jdeme aj oby\u010dajn\u00fd textov\u00fd s\u00fabor <code>id_rsa.pub<\/code>, ktor\u00fd obsahuje verejn\u00fd k\u013e\u00fa\u010d. S\u00fabor so s\u00fakromn\u00fdm k\u013e\u00fa\u010dom nikdy nikde nezverej\u0148ujeme. S\u00fabor s verejn\u00fdm k\u013e\u00fa\u010dom po\u0161leme na server, aby n\u00e1s server pri bud\u00facom pokuse o prihl\u00e1senie mohol identifikova\u0165 u\u017e na z\u00e1klade verejn\u00e9ho k\u013e\u00fa\u010da bez hesla.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pridanie verejn\u00e9ho SSH k\u013e\u00fa\u010dA na server<\/h2>\n\n\n\n<p>Linux a MacOS obsahuj\u00fa n\u00e1stroj <code>ssh-copy-id<\/code>, v\u010faka ktor\u00e9mu ve\u013emi jednoducho zap\u00ed\u0161eme verejn\u00fd k\u013e\u00fa\u010d zo s\u00faboru <code>id_rsa.pub<\/code> na server do s\u00faboru povolen\u00fdch k\u013e\u00fa\u010dov (<code>~\/.ssh\/authorized_keys<\/code>) takto:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh-copy-id meno@server<\/pre>\n\n\n\n<p>Windows v \u010dase p\u00edsania tohto n\u00e1vodu n\u00e1stroj <code>ssh-copy-id<\/code> neobsahuje, a tak si mus\u00edme poradi\u0165 inak:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">type %USERPROFILE%\\.ssh\\id_rsa.pub | ssh meno@server \"cat &gt;&gt; ~\/.ssh\/authorized_keys\"<\/pre>\n\n\n\n<p>Pri\u010dom <code>meno<\/code> zamen\u00edme za prihlasovacie meno pou\u017e\u00edvate\u013ea, <code>server<\/code> za IP adresu servera a po\u010das prihlasovania zad\u00e1me heslo. Pri druhom pokuse o prihl\u00e1senie sa u\u017e server nebude p\u00fdta\u0165 na meno ani heslo a sta\u010d\u00ed zada\u0165 iba IP adresu servera (namiesto <code>server<\/code>):<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh server<\/pre>\n\n\n\n<p>Ak sa meno, ktor\u00fdm sme pr\u00e1ve prihl\u00e1sen\u00ed, nezhoduje s menom na serveri, mus\u00edme pri prihlasovan\u00ed na server zada\u0165 aj pou\u017e\u00edvate\u013esk\u00e9 <code>meno<\/code> takto:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh meno@server<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Zabezpe\u010denie SSH servera<\/h2>\n\n\n\n<p>V pr\u00edpade pou\u017eitia VPS odpor\u00fa\u010dame vykona\u0165 konkr\u00e9tne nastavenia SSH servera, v\u010faka ktor\u00fdm sa budete cez SSH prip\u00e1ja\u0165 bezpe\u010dnej\u0161ie a zlep\u0161\u00ed sa aj celkov\u00e1 bezpe\u010dnos\u0165 VPS.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Zmena portu<\/h3>\n\n\n\n<p>\u0160tandardne SSH server (d\u00e9mon) po\u010d\u00fava na porte 22. Je v\u0161eobecne zn\u00e1me, \u017ee tento port obsadzuje slu\u017eba SSH, a tak b\u00fdva \u010dasto ter\u010dom automatizovan\u00fdch \u00fatokov. Ak ale port zmen\u00edme na in\u00e9 \u010d\u00edslo, povedzme na 4444, \u00fato\u010dn\u00edkom to trochu s\u0165a\u017e\u00edme a n\u00e1\u0161 server viac ochr\u00e1nime pred automatizovan\u00fdmi \u00fatokmi.<\/p>\n\n\n\n<p class=\"wp-block-ht-blocks-messages wp-block-hb-message wp-block-hb-message--withicon is-style-info\">Pre lep\u0161ie zabezpe\u010denie pr\u00edstupu na server pomocou SSH odpor\u00fa\u010dame obmedzi\u0165 ho len z povolen\u00fdch statick\u00fdch IP adries pomocou firewallu. Pripadne blokova\u0165 pokusy o prihl\u00e1senie pomocou n\u00e1stroja ako fail2ban.<\/p>\n\n\n\n<p>Otvor\u00edme konfigura\u010dn\u00fd s\u00fabor SSH servera a prep\u00ed\u0161eme port 22 na port 4444:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo nano \/etc\/ssh\/sshd_config<\/pre>\n\n\n\n<p>V otvorenom konfigura\u010dnom s\u00fabore n\u00e1jdeme riadok s obsahom <code>#Port 22<\/code>, ktor\u00fd prep\u00ed\u0161eme na <code>Port 4444<\/code>. S\u00fabor ulo\u017e\u00edme pomocou kl\u00e1vesovej skratky <code>Ctrl + X<\/code> a n\u00e1sledne stla\u010den\u00edm kl\u00e1vesu <code>y<\/code> a potvrden\u00edm kl\u00e1vesom <code>Enter<\/code>. Nakoniec e\u0161te SSH server re\u0161tartujeme, aby sa ulo\u017een\u00e9 zmeny prejavili:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo systemctl restart ssh.service<\/pre>\n\n\n\n<p>Odteraz pre pripojenie k SSH serveru mus\u00edme \u0161pecifikova\u0165 okrem mena a servera e\u0161te aj port (<code>-p 4444<\/code>):<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh meno@server -p 4444<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Obmedzenie pou\u017e\u00edvate\u013eov<\/h3>\n\n\n\n<p>\u010eal\u0161\u00edm krokom k bezpe\u010dnej\u0161iemu SSH servera je v\u00fdber pou\u017e\u00edvate\u013eov, ktor\u00ed sa m\u00f4\u017eu cez SSH pripoji\u0165. To m\u00f4\u017eeme urobi\u0165 priamo vymenovan\u00edm pou\u017e\u00edvate\u013eov (<code>AllowUsers<\/code>) alebo skupiny pou\u017e\u00edvate\u013eov (<code>AllowGroups<\/code>).<\/p>\n\n\n\n<p class=\"wp-block-ht-blocks-messages wp-block-hb-message wp-block-hb-message--withicon is-style-info\">Viac o pou\u017e\u00edvate\u013eoch a skupin\u00e1ch v Linuxe sa do\u010d\u00edtate v n\u00e1vode <a href=\"https:\/\/www.websupport.sk\/podpora\/kb\/subory-a-pouzivatelia-cli\/#spravujeme-pouzivatelov\">Spr\u00e1va s\u00faborov a pou\u017e\u00edvate\u013eov v linuxovom pr\u00edkazovom riadku<\/a>.<\/p>\n\n\n\n<p>Otvor\u00edme konfigura\u010dn\u00fd s\u00fabor SSH servera (prv\u00fd riadok) a vyh\u013ead\u00e1me direkt\u00edvu <code>AllowUsers<\/code> a\/alebo <code>AllowGroups<\/code>. Ak direkt\u00edvy neexistuj\u00fa, zap\u00ed\u0161eme ich na koniec konfigura\u010dn\u00e9ho s\u00faboru (druh\u00fd a tret\u00ed riadok). S\u00fabor ulo\u017e\u00edme pomocou kl\u00e1vesovej skratky <code>Ctrl + X<\/code> a n\u00e1sledne stla\u010den\u00edm kl\u00e1vesu <code>y<\/code> a potvrden\u00edm kl\u00e1vesom <code>Enter<\/code>. Nakoniec e\u0161te SSH server re\u0161tartujeme (\u0161tvrt\u00fd riadok), aby sa ulo\u017een\u00e9 zmeny prejavili.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo nano \/etc\/ssh\/sshd_config<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">AllowUsers meno1 meno2 meno3<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">AllowGroups skupina1 skupina2 skupina3<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo systemctl restart ssh.service<\/pre>\n\n\n\n<p>Men\u00e1 pou\u017e\u00edvate\u013eov (<code>meno1 meno2 meno3<\/code>) a n\u00e1zvy skup\u00edn (<code>skupina1 skupina2 skupina3<\/code>) nahrad\u00edme pod\u013ea potreby. Ak zad\u00e1vame viacero mien a skup\u00edn, odde\u013eujeme ich od sebe medzerou.<\/p>\n\n\n\n<p>Iba pou\u017e\u00edvatelia, ktor\u00ed s\u00fa zap\u00edsan\u00ed v konfigura\u010dnom s\u00fabore servera SSH pod direkt\u00edvou <code>AllowUsers<\/code> a\/alebo <code>AllowGroups<\/code> sa m\u00f4\u017eu prihl\u00e1si\u0165 cez SSH. Ostatn\u00fdm bude pr\u00edstup zamietnut\u00fd.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Zak\u00e1zanie pou\u017e\u00edvate\u013ea root<\/h3>\n\n\n\n<p>Dobrou praxou m\u00f4\u017ee by\u0165 zak\u00e1za\u0165 prihl\u00e1senie cez SSH pod pou\u017e\u00edvate\u013esk\u00fdm \u00fa\u010dtom s najvy\u0161\u0161\u00edmi opr\u00e1vneniami (root), hne\u010f po vytvoren\u00ed pou\u017e\u00edvate\u013ea s opr\u00e1vnen\u00edm pou\u017e\u00edva\u0165 n\u00e1stroj <code>sudo<\/code>.<\/p>\n\n\n\n<p class=\"wp-block-ht-blocks-messages wp-block-hb-message wp-block-hb-message--withicon is-style-danger\">Pou\u017e\u00edvate\u013ea root zak\u00e1\u017ete len, ak m\u00e1te funk\u010dn\u00e9ho u\u017e\u00edvate\u013ea na ktor\u00e9ho viete najvy\u0161\u0161ie pr\u00e1va pov\u00fd\u0161i\u0165.<\/p>\n\n\n\n<p>Otvor\u00edme konfigura\u010dn\u00fd s\u00fabor SSH servera (prv\u00fd riadok), vyh\u013ead\u00e1me direkt\u00edvu <code>PermitRootLogin<\/code> a zmen\u00edme ju tak, ako ukazujeme v druhom riadku. S\u00fabor ulo\u017e\u00edme pomocou kl\u00e1vesovej skratky <code>Ctrl + X<\/code> a n\u00e1sledne stla\u010den\u00edm kl\u00e1vesu <code>y<\/code> a potvrden\u00edm kl\u00e1vesom <code>Enter<\/code>. Nakoniec e\u0161te SSH server re\u0161tartujeme (tret\u00ed riadok), aby sa ulo\u017een\u00e9 zmeny prejavili.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo nano \/etc\/ssh\/sshd_config<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">PermitRootLogin no<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo systemctl restart ssh.service<\/pre>\n\n\n\n<p>Odteraz sa u\u017e pou\u017e\u00edvate\u013e root cez SSH neprihl\u00e1si.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Povolenie root pr\u00edstupu len pre ur\u010dit\u00e9 pr\u00edkazy<\/h3>\n\n\n\n<p>Niekedy je dobr\u00e9 zak\u00e1za\u0165 prihl\u00e1senie cez SSH pre pou\u017e\u00edvate\u013ea root a z\u00e1rove\u0148 povoli\u0165 spustenie niektor\u00fdch pr\u00edkazov pod t\u00fdmto \u00fa\u010dtom. Tak\u00fdto pr\u00edstup sa m\u00f4\u017ee hodi\u0165 pri nastaven\u00ed z\u00e1lohovania (napr. cez n\u00e1stroj <code>rsync<\/code>).<\/p>\n\n\n\n<p>Najsk\u00f4r mus\u00edme prida\u0165 verejn\u00fd SSH k\u013e\u00fa\u010d do s\u00faboru s povolen\u00fdmi k\u013e\u00fa\u010dmi pou\u017e\u00edvate\u013ea root (<code>\/root\/.ssh\/authorized_keys<\/code>). Prv\u00fd riadok plat\u00ed pre Linux a MacOS, druh\u00fd riadok pre Windows, pri\u010dom <code>server<\/code> zamen\u00edme za IP adresu servera a po\u010das prihlasovania zad\u00e1me heslo pre \u00fa\u010det root:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh-copy-id root@server<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">type %USERPROFILE%\\.ssh\\id_rsa.pub | ssh root@server \"cat &gt;&gt; \/root\/.ssh\/authorized_keys\"<\/pre>\n\n\n\n<p>Prihl\u00e1sime sa na server cez SSH (prv\u00fd riadok) a otvor\u00edme s\u00fabor s povolen\u00fdmi k\u013e\u00fa\u010dmi pou\u017e\u00edvate\u013ea root (druh\u00fd riadok) v tom riadku, kde je zap\u00edsan\u00fd n\u00e1\u0161 verejn\u00fd k\u013e\u00fa\u010d. Na za\u010diatok riadka prid\u00e1me obsah ni\u017e\u0161ie (tret\u00ed riadok), ktor\u00fd bude mo\u017en\u00e9 spusti\u0165 cez SSH pod \u00fa\u010dtom root. S\u00fabor ulo\u017e\u00edme pomocou kl\u00e1vesovej skratky <code>Ctrl + X<\/code> a n\u00e1sledne stla\u010den\u00edm kl\u00e1vesu <code>y<\/code> a potvrden\u00edm kl\u00e1vesom <code>Enter<\/code>.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ssh server<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo nano \/root\/.ssh\/authorized_keys<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">command=\"\/cesta\/k\/prikazu argument1 argument2\" ssh-rsa ...<\/pre>\n\n\n\n<p>Otvor\u00edme konfigura\u010dn\u00fd s\u00fabor SSH servera (prv\u00fd riadok), vyh\u013ead\u00e1me direkt\u00edvu <code>PermitRootLogin<\/code> a zmen\u00edme ju tak, ako ukazujeme ni\u017e\u0161ie (druh\u00fd riadok). S\u00fabor ulo\u017e\u00edme pomocou kl\u00e1vesovej skratky <code>Ctrl + X<\/code> a n\u00e1sledne stla\u010den\u00edm kl\u00e1vesu <code>y<\/code> a potvrden\u00edm kl\u00e1vesom <code>Enter<\/code>. Nakoniec e\u0161te SSH server re\u0161tartujeme (tret\u00ed riadok), aby sa ulo\u017een\u00e9 zmeny prejavili.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo nano \/etc\/ssh\/sshd_config<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">PermitRootLogin forced-commands-only<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo systemctl restart ssh.service<\/pre>\n\n\n\n<p>Odteraz sa pou\u017e\u00edvate\u013e root cez SSH na server prihl\u00e1si iba vtedy, ak bude chcie\u0165 hne\u010f po prihl\u00e1sen\u00ed spusti\u0165 vy\u0161\u0161ie povolen\u00fd pr\u00edkaz.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Zhrnutie<\/h2>\n\n\n\n<p>Vytvorili sme SSH k\u013e\u00fa\u010de (s\u00fakromn\u00fd a verejn\u00fd) a n\u00e1sledne sme verejn\u00fd SSH k\u013e\u00fa\u010d skop\u00edrovali na server, aby sme sa mohli prihlasova\u0165 bezpe\u010dnej\u0161ou met\u00f3dou (nie prihlasovac\u00edm menom a heslom). Tie\u017e sme uk\u00e1zali, ako efekt\u00edvne zabezpe\u010di\u0165 SSH server proti (automatizovan\u00fdm) \u00fatokom.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Zabezpe\u010den\u00fd pr\u00edstup k pr\u00edkazov\u00e9mu riadku servera je mo\u017en\u00e9 nadviaza\u0165 cez SSH (Secure SHell). Protokol a n\u00e1stroj SSH nahradil svojich star\u0161\u00edch predchodcov ako telnet, rlogin alebo rsh, aby doplnil ch\u00fdbaj\u00facu bezpe\u010dnostn\u00fa vrstvu v podobe plne \u0161ifrovanej komunik\u00e1cie medzi dvoma neautentifikovan\u00fdmi strojmi v nezabezpe\u010denej sieti. V\u010faka SSH dok\u00e1\u017eeme z\u00edska\u0165 dnes u\u017e takmer&#8230;<\/p>\n","protected":false},"author":28,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[52,33],"ht-kb-tag":[234,336,381,92,91,189],"class_list":["post-19874","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-vps","ht_kb_category-servery","ht_kb_tag-bezpecnost","ht_kb_tag-cli","ht_kb_tag-server","ht_kb_tag-shell","ht_kb_tag-ssh","ht_kb_tag-vps"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov - Websupport centrum podpory<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov - Websupport centrum podpory\" \/>\n<meta property=\"og:description\" content=\"Zabezpe\u010den\u00fd pr\u00edstup k pr\u00edkazov\u00e9mu riadku servera je mo\u017en\u00e9 nadviaza\u0165 cez SSH (Secure SHell). Protokol a n\u00e1stroj SSH nahradil svojich star\u0161\u00edch predchodcov ako telnet, rlogin alebo rsh, aby doplnil ch\u00fdbaj\u00facu bezpe\u010dnostn\u00fa vrstvu v podobe plne \u0161ifrovanej komunik\u00e1cie medzi dvoma neautentifikovan\u00fdmi strojmi v nezabezpe\u010denej sieti. V\u010faka SSH dok\u00e1\u017eeme z\u00edska\u0165 dnes u\u017e takmer...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport centrum podpory\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-05T14:58:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"578\" \/>\n\t<meta property=\"og:image:height\" content=\"191\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 min\u00fat\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/\",\"name\":\"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov - Websupport centrum podpory\",\"isPartOf\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg\",\"datePublished\":\"2021-05-26T08:19:53+00:00\",\"dateModified\":\"2025-11-05T14:58:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#primaryimage\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg\",\"contentUrl\":\"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg\",\"width\":578,\"height\":191},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.websupport.sk\/podpora\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.websupport.sk\/podpora\/#website\",\"url\":\"https:\/\/www.websupport.sk\/podpora\/\",\"name\":\"Websupport centrum podpory\",\"description\":\"Radi v\u00e1m pom\u00f4\u017eeme s va\u0161im probl\u00e9mom\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.websupport.sk\/podpora\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov - Websupport centrum podpory","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/","og_locale":"sk_SK","og_type":"article","og_title":"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov - Websupport centrum podpory","og_description":"Zabezpe\u010den\u00fd pr\u00edstup k pr\u00edkazov\u00e9mu riadku servera je mo\u017en\u00e9 nadviaza\u0165 cez SSH (Secure SHell). Protokol a n\u00e1stroj SSH nahradil svojich star\u0161\u00edch predchodcov ako telnet, rlogin alebo rsh, aby doplnil ch\u00fdbaj\u00facu bezpe\u010dnostn\u00fa vrstvu v podobe plne \u0161ifrovanej komunik\u00e1cie medzi dvoma neautentifikovan\u00fdmi strojmi v nezabezpe\u010denej sieti. V\u010faka SSH dok\u00e1\u017eeme z\u00edska\u0165 dnes u\u017e takmer...","og_url":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/","og_site_name":"Websupport centrum podpory","article_modified_time":"2025-11-05T14:58:50+00:00","og_image":[{"width":578,"height":191,"url":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Predpokladan\u00fd \u010das \u010d\u00edtania":"7 min\u00fat"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/","url":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/","name":"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov - Websupport centrum podpory","isPartOf":{"@id":"https:\/\/www.websupport.sk\/podpora\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg","datePublished":"2021-05-26T08:19:53+00:00","dateModified":"2025-11-05T14:58:50+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#primaryimage","url":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg","contentUrl":"https:\/\/www.websupport.sk\/podpora\/app\/uploads\/sites\/2\/2021\/05\/openssh.jpg","width":578,"height":191},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.sk\/podpora\/kb\/pripojenie-na-server-pomocou-ssh-klucov\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.sk\/podpora\/"},{"@type":"ListItem","position":2,"name":"Pripojenie na server pomocou SSH k\u013e\u00fa\u010dov"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.sk\/podpora\/#website","url":"https:\/\/www.websupport.sk\/podpora\/","name":"Websupport centrum podpory","description":"Radi v\u00e1m pom\u00f4\u017eeme s va\u0161im probl\u00e9mom","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.sk\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/19874","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/users\/28"}],"version-history":[{"count":4,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/19874\/revisions"}],"predecessor-version":[{"id":34232,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb\/19874\/revisions\/34232"}],"wp:attachment":[{"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/media?parent=19874"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=19874"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.sk\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=19874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}