liunx入门小案例1

129 阅读2分钟

持续创作,加速成长!这是我参与「掘金日新计划 · 10 月更文挑战」的第17天,点击查看活动详情

change修改用户密码过期

1.编辑配置文件

可以编辑/etc/login.defs来设定几个参数,以后设置口令默认就按照参数设定为准; ASS_MAX_DAYs 99999 PASS_MIN_DAYS 0 PASS_MIN_LEN 5 PASs_WARN_AGE 7 注:只修改配置文件修改之后创建的用户

2.修改之前用户密码过期

用chage命令

#chage -M 99999 weblogic|修改用户最大有效天数chage -lroot|查看用户密码策略详情

参数说明
-d指定密码最后修改日期
-E密码到期的日期,过了这天,此账号将不可用.0表示马上过期,-1表示永不过期。
-h显示帮助信息并退出
-I密码过期后,锁定账号的天数
-l列出用户以及密码的有效期
-m密码可以更改的最小天数.为零代表任何时候都可以更改密码
-M密码保持有效的最大天数
-W密码过期前,提前收到笞告信息的天数

liunx普通用户配置免密

第一步:su 到普通用户下面

su - app(app用户)
[root@localhost ~]# su - wzx

第二步:生成密钥 ssh-keygen -t rsa

[wzx@localhost ~]$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/wzx/.ssh/id_rsa):
Created directory '/home/wzx/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/wzx/.ssh/id_rsa.
Your public key has been saved in /home/wzx/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:ktasuInOq1J3I8/dytNgOgbZ5Ae5NenptbUEfW/tMb4 wzx@localhost.localdomain
The key's randomart image is:
+---[RSA 2048]----+
|                 |
|                 |
|       . . .     |
|      +++ . . .  |
|     =+=So . . ..|
|  . =o*o* . o  o+|
| . ..*.B = + ..oo|
|.. . o*.+ + .  ..|
|oo=.o. .oo     E.|
+----[SHA256]-----+

第三步:进入到公钥目录cd ~/.ssh

[wzx@localhost ~]$ cd ~/.ssh/
[wzx@localhost .ssh]$ ls
id_rsa  id_rsa.pub

第四步:把公钥id_rsa.pub内容复制到另一台普通用户的authorized_keys里面

[wzx@localhost .ssh]$ vi authorized_keys
[wzx@localhost .ssh]$ cat authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqtZM7MVb2VNfMcu0oGOtItDWttRnQBImnxaAf9KeSl0JJq+blyWgslF/2zWZXJuBw68AZ944n/EtOegWTe/6ZEUo5B/4Yz2N5MOtRLlGwltj4F+YKnUzlC9vLPHbpxPoqmWnO/Cp3rRyYRtOSbGaRbV7PXAaGVIgU6ooeUIhr0Ft2b7VIZK/nDj1+JYCbmz6KB5NDXncQefsjCAX4+orSYTKf/UFbIOz/sAOhDWhxLBIXoGe2qJ6nJaSxtYd5cygI0BXPNl1ZhV2X3U6fuCXYV+uSnUOSuUiYlVoOd28AcQad8B0J/tKmtO8POp5obaRhkipxIPbxir4XJikNkKef wzx@localhost.localdomain

验证是否成功

[root@wangzhenxin-lin01 ~]# scp /root/shell/pid.sh app2@172.16.104.59:root
The authenticity of host '172.16.104.59 (172.16.104.59)' can't be established.
ECDSA key fingerprint is SHA256:4O+GhWnNEr0BKLWvjV9tmxBpmxa0Tj453r4qZ0PO9R0.
ECDSA key fingerprint is MD5:2b:a8:4f:c6:13:d5:ae:35:97:ac:2c:da:a7:d9:04:35.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '172.16.104.59' (ECDSA) to the list of known hosts.
app2@172.16.104.59's password:
pid.sh                                                                                        100%  858     1.1MB/s   00:00
[root@wangzhenxin-lin01 ~]# su - wzx
su: user wzx does not exist
[root@wangzhenxin-lin01 ~]# ll
总用量 48
-rw-r-----  1 root root  858 83 17:18 pid.sh