zoukankan      html  css  js  c++  java
  • RHEL7.2 SSH无密码登录非root用户

    1 修改三台虚拟机的/ect/hosts文件

    [hadoop@hadoop01 ~]$ cat /etc/hosts
    127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    [hadoop@hadoop01 ~]$ su - root
    密码:
    上一次登录:六 11月  4 15:52:36 CST 2017pts/0 上
    ABRT has detected 1 problem(s). For more info run: abrt-cli list --since 1509781956
    [root@hadoop01 ~]# vi /etc/hosts
    [root@hadoop01 ~]# cat /etc/hosts
    127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    
    192.168.169.101	hadoop01
    192.168.169.102	hadoop02
    192.168.169.103	hadoop03
    

    2 修改三台虚拟机的/etc/ssh/sshd_config

    [root@hadoop01 ~]# vi /etc/ssh/sshd_config
    [root@hadoop01 ~]# cat /etc/ssh/sshd_config | grep uth | grep -v "#"
    RSAAuthentication yes
    PubkeyAuthentication yes
    AuthorizedKeysFile	.ssh/authorized_keys
    

     将前面的#号去掉

    3 修改三台虚拟机的/etc/selinux/config

    [root@hadoop01 ~]# vi /etc/selinux/config  
    [root@hadoop01 ~]# cat /etc/selinux/config | grep SELINUX= | grep -v "#"
    SELINUX=disabled
    

     4 重启虚机三台虚拟机

    [root@hadoop01 ~]# reboot
    

     5 配置SSH无密码登录

    三台虚拟机依次操作如下:

    192.168.168.101

    [hadoop@hadoop01 ~]$ ssh-keygen
    Generating public/private dsa key pair.
    Created directory '/hadoop/.ssh'.
    Your identification has been saved in /hadoop/.ssh/id_dsa.
    Your public key has been saved in /hadoop/.ssh/id_dsa.pub.
    The key fingerprint is:
    c1:4b:6d:30:2b:57:b9:f8:dc:33:b6:d9:05:f8:79:31 hadoop@hadoop01
    The key's randomart image is:
    +--[ DSA 1024]----+
    |        o ..     |
    |       . *.      |
    |      . *.o. .   |
    |       +.+. . .E |
    |        So . . oo|
    |          o = o o|
    |           . * o |
    |            o .  |
    |                 |
    +-----------------+
    [hadoop@hadoop01 ~]$ chmod 700 .ssh
    [hadoop@hadoop01 ~]$ cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
    [hadoop@hadoop01 ~]$ chmod 600 ~/.ssh/authorized_keys 
    [hadoop@hadoop01 ~]$ ssh hadoop01
    The authenticity of host 'hadoop01 (192.168.169.101)' can't be established.
    ECDSA key fingerprint is 7a:41:d1:c6:30:98:21:51:40:b7:ac:13:a4:0d:05:5c.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop01,192.168.169.101' (ECDSA) to the list of known hosts.
    Last login: Sun Nov  5 10:24:11 2017 from 192.168.169.1
    [hadoop@hadoop01 ~]$ exit
    登出
    Connection to hadoop01 closed.
    [hadoop@hadoop01 ~]$ ssh hadoop01
    Last login: Sun Nov  5 10:26:02 2017 from hadoop01
    

     192.168.168.102

    [hadoop@hadoop02 ~]$ ssh-keygen
    Generating public/private rsa key pair.
    Enter file in which to save the key (/hadoop/.ssh/id_rsa): 
    Created directory '/hadoop/.ssh'.
    Enter passphrase (empty for no passphrase): 
    Enter same passphrase again: 
    Your identification has been saved in /hadoop/.ssh/id_rsa.
    Your public key has been saved in /hadoop/.ssh/id_rsa.pub.
    The key fingerprint is:
    ee:ba:9f:68:d8:ab:27:ea:f7:42:ff:0c:47:80:fe:63 hadoop@hadoop02
    The key's randomart image is:
    +--[ RSA 2048]----+
    |                 |
    |     .           |
    |    . .          |
    |   .   .         |
    |    .   S        |
    |    .. o         |
    |   . +E o        |
    |    =.=B .       |
    | .oo.B***        |
    +-----------------+
    [hadoop@hadoop02 ~]$ chmod 700 .ssh
    [hadoop@hadoop02 ~]$ scp -rp ~/.ssh/id_rsa.pub hadoop@hadoop01:/hadoop/.ssh/id_rsa.pub.102
    The authenticity of host 'hadoop01 (192.168.169.101)' can't be established.
    ECDSA key fingerprint is 7a:41:d1:c6:30:98:21:51:40:b7:ac:13:a4:0d:05:5c.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop01,192.168.169.101' (ECDSA) to the list of known hosts.
    hadoop@hadoop01's password: 
    id_rsa.pub
    

     192.168.169.103

    hadoop@hadoop03 ~]$ ssh-keygen
    Generating public/private rsa key pair.
    Enter file in which to save the key (/hadoop/.ssh/id_rsa): 
    Created directory '/hadoop/.ssh'.
    Enter passphrase (empty for no passphrase): 
    Enter same passphrase again: 
    Your identification has been saved in /hadoop/.ssh/id_rsa.
    Your public key has been saved in /hadoop/.ssh/id_rsa.pub.
    The key fingerprint is:
    dc:c2:8d:14:b0:bf:64:a7:2f:41:44:34:1b:66:2b:b2 hadoop@hadoop03
    The key's randomart image is:
    +--[ RSA 2048]----+
    |      .+O        |
    |       +.*       |
    |    . o.+        |
    |     o *.+       |
    |    E  .S +      |
    |       o.=       |
    |        o.       |
    |        ..       |
    |         ..      |
    +-----------------+
    [hadoop@hadoop03 ~]$ chmod 700 .ssh
    [hadoop@hadoop03 ~]$ scp -rp ~/.ssh/id_rsa.pub hadoop@hadoop01:/hadoop/.ssh/id_rsa.pub.103
    The authenticity of host 'hadoop01 (192.168.169.101)' can't be established.
    ECDSA key fingerprint is 7a:41:d1:c6:30:98:21:51:40:b7:ac:13:a4:0d:05:5c.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop01,192.168.169.101' (ECDSA) to the list of known hosts.
    hadoop@hadoop01's password: 
    id_rsa.pub 
    

     192.168.169.101

    [hadoop@hadoop01 ~]$ cat ~/.ssh/id_rsa.pub.102 >> ~/.ssh/authorized_keys
    [hadoop@hadoop01 ~]$ cat ~/.ssh/id_rsa.pub.103 >> ~/.ssh/authorized_keys
    [hadoop@hadoop01 ~]$ scp -rp ~/.ssh/authorized_keys hadoop@hadoop02:/hadoop/.ssh/
    The authenticity of host 'hadoop02 (192.168.169.102)' can't be established.
    ECDSA key fingerprint is f7:ef:fb:e5:7e:0f:59:40:63:23:99:9a:ca:e2:03:e8.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop02,192.168.169.102' (ECDSA) to the list of known hosts.
    hadoop@hadoop02's password: 
    authorized_keys                                                                                                                         100%  397     0.4KB/s   00:00    
    [hadoop@hadoop01 ~]$ scp -rp ~/.ssh/authorized_keys hadoop@hadoop03:/hadoop/.ssh/
    The authenticity of host 'hadoop03 (192.168.169.103)' can't be established.
    ECDSA key fingerprint is 25:a7:16:1f:49:91:0f:ba:f8:ba:68:bb:1e:e0:1c:44.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop03,192.168.169.103' (ECDSA) to the list of known hosts.
    hadoop@hadoop03's password: 
    authorized_keys                                                                                                                         100%  397     0.4KB/s   00:00    
    

     6 验证

    192.168.169.101

    [hadoop@hadoop01 ~]$ ssh hadoop02
    Last login: Sun Nov  5 13:42:56 2017 from 192.168.169.1
    [hadoop@hadoop02 ~]$ exit
    登出
    Connection to hadoop02 closed.
    [hadoop@hadoop01 ~]$ ssh hadoop03
    Last login: Sun Nov  5 13:42:58 2017 from 192.168.169.1
    [hadoop@hadoop03 ~]$
    

     192.168.169.102

    [hadoop@hadoop02 ~]$ ssh hadoop01
    Last login: Sun Nov  5 13:44:08 2017 from 192.168.169.1
    [hadoop@hadoop01 ~]$ exit
    登出
    Connection to hadoop01 closed.
    [hadoop@hadoop02 ~]$ ssh hadoop03
    The authenticity of host 'hadoop03 (192.168.169.103)' can't be established.
    ECDSA key fingerprint is 25:a7:16:1f:49:91:0f:ba:f8:ba:68:bb:1e:e0:1c:44.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop03,192.168.169.103' (ECDSA) to the list of known hosts.
    Last login: Sun Nov  5 13:51:57 2017 from hadoop01
    [hadoop@hadoop03 ~]$ 
    

     192.168.169.103

    [hadoop@hadoop03 ~]$ ssh hadoop01
    Last login: Sun Nov  5 13:52:30 2017 from hadoop02
    [hadoop@hadoop01 ~]$ exit
    登出
    Connection to hadoop01 closed.
    [hadoop@hadoop03 ~]$ ssh hadoop02
    The authenticity of host 'hadoop02 (192.168.169.102)' can't be established.
    ECDSA key fingerprint is f7:ef:fb:e5:7e:0f:59:40:63:23:99:9a:ca:e2:03:e8.
    Are you sure you want to continue connecting (yes/no)? yes
    Warning: Permanently added 'hadoop02,192.168.169.102' (ECDSA) to the list of known hosts.
    Last login: Sun Nov  5 13:51:50 2017 from hadoop01
    [hadoop@hadoop02 ~]$ 
    
  • 相关阅读:
    Python DB API 连接数据库
    PHP base64多图片上传
    Linux vim编写程序时出现高亮字符,如何取消?
    CDN,内容分发网络。
    MySQL随机取数据
    tp5 快速接入扫码支付
    tp5定时器
    清空测试数据
    Centos Crontab查看状态和开启
    select2 使用
  • 原文地址:https://www.cnblogs.com/ccskun/p/7787325.html
Copyright © 2011-2022 走看看