Linux多台服务器间SSH免密码登录配置
SSH实现各个服务器间的文件相互备份,如运行scp命令,可以实现免密码登录,从而可以使用SHELL脚本实现一些自动化的处理。
假如A机要免密码登录B机,具体方法如下:
1、在A机运行:"ssh-keygen -t rsa" 命令,创建公钥信息
#ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (<UseHome>/.ssh/id_rsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in <UseHome>/.ssh/id_rsa. Your public key has been saved in <UseHome>.ssh/id_rsa.pub. The key fingerprint is: ba:2c:77:eb:6d:aa:aa:d8:37:08:2f:b1:b9:e8:5a:2f <UseName>@<HostName>
输入后,会提示创建.ssh/id_rsa、id_rsa.pub的文件,其中第一个为密钥,第二个为公钥。过程中会要求输入密码,为了ssh访问过程无须密码,可以直接回车
2、公钥部署
拷贝id_rsa.pub中的内容到需要访问的主机,并建立~/.ssh/authorized_keys文件,将先前的id_rsa.pub拷贝到目标机B,如果.ssh目录不存在,则建立文件夹,并将权限设置为700,同时将authorized_keys文件权限设为644,.ssh文件下及下的authorized_keys文件都属于root。
#mkdir -m=700 .ssh #cp id_rsa.pub .ssh/authorized_keys #chown root .ssh/authorized_keys #chmod 644 .ssh/authorized_keys
3. ssh访问
使用ssh <IP/HOSTNAME>进行访问,第一次需要保存ssh认证信息,以后则可以自动登录,其他相关ssh相关程序诸如scp等也可以无需密码
# ssh <TargetHost> The authenticity of host '<TargetHost> (<TargetIP>)' can't be established. RSA key fingerprint is 34:b9:92:06:53:e6:91:4d:47:92:73:57:78:6a:5d:09. Are you sure you want to continue connecting (yes/no)?yes Warning: Permanently added '<TargetHost>,<TargetIP>' (RSA) to the list of known hosts.
4.多机部署
如果C机也需要无密码访问B机,则将C的公钥id_rsa.pub复制到B机中文件~/.ssh/authorized_keys的内容末端
#cat id_dsa.pub >> .ssh/authorized_keys
谢谢您的来访,欢迎关注交流!以下是我的个人联系方式
电子邮箱:spring.wind2006@163.com,QQ:402085437,微信号:tm402085437