Ubuntu设置SSH免密登录(不同于CentOS)

来源：互联网发布：数据库join例子编辑：程序博客网时间：2024/06/05 15:09

目录(?)[-]

Ubuntu设置SSH免密登录不同于CentOS
1. 遇到的坑
2. 解决办法
  1. 1 先删除之前的ssh
  2. 2 生成免密
  3. 3 免密登录本机
3. 集群免密登录
  1. 1 第2个节点生成免密
  2. 2 第3个节点生成免密
  3. 3 分发公钥
  4. 4 集群免密登录

Ubuntu设置SSH免密登录(不同于CentOS)

1.遇到的坑

之前一直在CentOS系统进行Hadoop开发，SSH免密登录配置过N次，今天在Ubuntu平台下设置免密登录遇到了坑：

kylin@uk0:~$ ssh-keygen -t dsa -P '' -f ~/.ssh/id_dsaGenerating public/private dsa key pair.Created directory '/home/kylin/.ssh'.Your identification has been saved in /home/kylin/.ssh/id_dsa.Your public key has been saved in /home/kylin/.ssh/id_dsa.pub.The key fingerprint is:SHA256:Kp2T562S8CP1Ui7LJMDlFAMBqujJ8HyrhvsAfWHu8X8 kylin@uk0The key's randomart image is:+---[DSA 1024]----+|..ooo            ||.    o           ||.   =            ||oo * .           ||= + =   S        ||=o.+.+.+.        ||.=o =+O=.        ||.....*B=o.E      ||.+o...o*+o.      |+----[SHA256]-----+kylin@uk0:~$ cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keyskylin@uk0:~$ chmod 0600 ~/.ssh/authorized_keys1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

免密登录本机时，竟然需要输入密码！？

kylin@uk0:~$ ssh uk0The authenticity of host 'uk0 (192.168.1.160)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'uk0,192.168.1.160' (ECDSA) to the list of known hosts.kylin@uk0's password: Welcome to Ubuntu 16.10 (GNU/Linux 4.8.0-22-generic x86_64) * Documentation:  https://help.ubuntu.com * Management:     https://landscape.canonical.com * Support:        https://ubuntu.com/advantage279 个可升级软件包。107 个安全更新。Last login: Fri Mar  3 15:20:29 2017 from 192.168.1.81kylin@uk0:~$1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

2.解决办法

2.1 先删除之前的.ssh

kylin@uk0:~$ rm -rf .ssh1
2

2.2 生成免密

与CentOS不同，需要使用ssh-keygen -t rsa命令生成，一直按Enter，按到最后。

kylin@uk0:~$ ssh-keygen -t rsaGenerating public/private rsa key pair.Enter file in which to save the key (/home/kylin/.ssh/id_rsa): Created directory '/home/kylin/.ssh'.Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/kylin/.ssh/id_rsa.Your public key has been saved in /home/kylin/.ssh/id_rsa.pub.The key fingerprint is:SHA256:Onr5G6x8pcsmksQNuMECb2oOu7lKoOzGPh0+x6y0Pj4 kylin@uk0The key's randomart image is:+---[RSA 2048]----+|                 ||.                ||.o .             ||. * .            ||.+ + o  S        ||*...o .o  .      ||*+oo+.o.oo       ||+*.E+*+++.       ||O=+=Boo==o       |+----[SHA256]-----+kylin@uk0:~$ cat .ssh/id_rsa.pub >> .ssh/authorized_keys1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

2.3 免密登录本机

kylin@uk0:~$ ssh uk0The authenticity of host 'uk0 (192.168.1.160)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'uk0,192.168.1.160' (ECDSA) to the list of known hosts.Welcome to Ubuntu 16.10 (GNU/Linux 4.8.0-22-generic x86_64)Last login: Fri Mar  3 16:11:16 2017 from 192.168.1.160kylin@uk0:~$ 1
2
3
4
5
6
7
8

3 集群免密登录

3.1 第2个节点生成免密

kylin@uk1:~$ rm -rf .sshkylin@uk1:~$ ssh-keygen -t rsaGenerating public/private rsa key pair.Enter file in which to save the key (/home/kylin/.ssh/id_rsa): Created directory '/home/kylin/.ssh'.Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/kylin/.ssh/id_rsa.Your public key has been saved in /home/kylin/.ssh/id_rsa.pub.The key fingerprint is:SHA256:pGAXPlmDGitJNPmUGXcS2ZZrQw581nTH7Y7zzUTU1Fs kylin@uk1The key's randomart image is:+---[RSA 2048]----+| .o..===++. ...o+||  o.=o=*B... .. E|| . +o+=B..     oo||  o.+o +=      .o||   .  ..S.     + ||              o o||               =.||                +||                 |+----[SHA256]-----+kylin@uk1:~$ cat .ssh/id_rsa.pub >> .ssh/authorized_keyskylin@uk1:~$ ssh uk1The authenticity of host 'uk1 (192.168.1.161)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'uk1,192.168.1.161' (ECDSA) to the list of known hosts.Welcome to Ubuntu 16.10 (GNU/Linux 4.8.0-22-generic x86_64)Last login: Fri Mar  3 16:23:19 2017 from 192.168.1.161kylin@uk1:~$1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

3.2 第3个节点生成免密

kylin@uk2:~$ rm -rf .sshkylin@uk2:~$ ssh-keygen -t rsaGenerating public/private rsa key pair.Enter file in which to save the key (/home/kylin/.ssh/id_rsa): Created directory '/home/kylin/.ssh'.Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/kylin/.ssh/id_rsa.Your public key has been saved in /home/kylin/.ssh/id_rsa.pub.The key fingerprint is:SHA256:/chD0D2CNj5iryn7Jue5lLxXzq3RAjwtG7Jrasz0KYk kylin@uk2The key's randomart image is:+---[RSA 2048]----+|                 ||         o .     ||        = o o    ||       + = . .   ||      + S +      ||    .o * X.+     ||   = o=.o+*.o    ||  E O.**. o+.    ||   .o%Xo  ..     |+----[SHA256]-----+kylin@uk2:~$ cat .ssh/id_rsa.pub >> .ssh/authorized_keyskylin@uk2:~$ ssh uk2The authenticity of host 'uk2 (192.168.1.162)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'uk2,192.168.1.162' (ECDSA) to the list of known hosts.Welcome to Ubuntu 16.10 (GNU/Linux 4.8.0-22-generic x86_64) * Documentation:  https://help.ubuntu.com * Management:     https://landscape.canonical.com * Support:        https://ubuntu.com/advantageLast login: Fri Mar  3 16:03:44 2017 from 192.168.1.160kylin@uk2:~$ 1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

3.3 分发公钥

kylin@uk1:~$ cat ~/.ssh/authorized_keysssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCisjV42WGpF64EffoSVB1fxXGqwE/9uYuDgwHzfXK47c54vLLtGfpKqzzXfDoTLWtR1P/W5stGGqLxarP27Nz7ujd4rQKt3t8JXSnlQIIhkojo4JGcF3JDAm9V5nGaqpMse65tbdK24+tkmVolwfZJTOZi9O1bctzBaZOapzu498/2Tlzy1jSToQmDlT0zsAhbs1ipF1aBRLzjnU0i9gXhF2dW2pQvvJk1TBMx8A1xIPAviQ43NhUoNsUhZYeRIQ9XPe293/48tId3a3M4OvQ26tHLEiG8sDRl3w5Nc2NXybs4RVydAmiCS4kh/SgALgtpq/HF3SpWlbYXl4S5j1cb kylin@uk11
2

kylin@uk2:~$ cat ~/.ssh/authorized_keysssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFdBdhmycLgyu4D/i3cneY4ERwnj/a2Q8JFHLizAg66qul7mykOIziI9IKRfE8nS4/vsOLTtUiTMsNqvpuWWGoibRXmxnrf19IwfyQ/YIuwllQ3Bm439Gyn+s2frK8i5Sw5wyCw+FiL4BS8WpPr4qWHXHajBI2VP4SNZuLdPlvCoZXYawWVOvlk8skt5WuXKpEjNEku+4w1Dyq3pT76iDBGxGk/JYzZRvyvUvQdBcYNgWjZNcva8HWYXpckmuoHh8VmeRDRhj1KGADsypw0L1jM7HG2hnGulqb3Xil2KJdMiPzp9uGJskSfZbLI6v7QLkQqOIpSAtIFZd+IxHwxIaF kylin@uk21
2

合并公钥

kylin@uk0:~$ vi ~/.ssh/authorized_keysssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnAW4j0oGFL36qoruUOkUaf5xIy7h4BrrGxvVnRpZAIGnCGwBt3OKLUrsWVQONQl6dr8f/TFbcAdAulPkn2/NmtjQLz6cMC3KiXlwk8x5Wz5c+cZ/TmkMEFRpxh48/0rfFHdZvLHcXx/WZzU0tIEjspZHxTq+oaZ3jgro7VweKGva0WVFuEJczUccMQOj+cRnLrt1Jy5ipaQHWtk2MYhfgfk168Bub6mEyLqbrUHB4zx+u+ukOg0skjBO2Kybn8OJABkdiA9V+d4UTFeK0XoywzcUsSGT0Tro6lUJ5i8haiWcPJutR7kXosL2aoU2480LUtQLqo7yJ1mT+FUE2uuMR kylin@uk0ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCisjV42WGpF64EffoSVB1fxXGqwE/9uYuDgwHzfXK47c54vLLtGfpKqzzXfDoTLWtR1P/W5stGGqLxarP27Nz7ujd4rQKt3t8JXSnlQIIhkojo4JGcF3JDAm9V5nGaqpMse65tbdK24+tkmVolwfZJTOZi9O1bctzBaZOapzu498/2Tlzy1jSToQmDlT0zsAhbs1ipF1aBRLzjnU0i9gXhF2dW2pQvvJk1TBMx8A1xIPAviQ43NhUoNsUhZYeRIQ9XPe293/48tId3a3M4OvQ26tHLEiG8sDRl3w5Nc2NXybs4RVydAmiCS4kh/SgALgtpq/HF3SpWlbYXl4S5j1cb kylin@uk1ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFdBdhmycLgyu4D/i3cneY4ERwnj/a2Q8JFHLizAg66qul7mykOIziI9IKRfE8nS4/vsOLTtUiTMsNqvpuWWGoibRXmxnrf19IwfyQ/YIuwllQ3Bm439Gyn+s2frK8i5Sw5wyCw+FiL4BS8WpPr4qWHXHajBI2VP4SNZuLdPlvCoZXYawWVOvlk8skt5WuXKpEjNEku+4w1Dyq3pT76iDBGxGk/JYzZRvyvUvQdBcYNgWjZNcva8HWYXpckmuoHh8VmeRDRhj1KGADsypw0L1jM7HG2hnGulqb3Xil2KJdMiPzp9uGJskSfZbLI6v7QLkQqOIpSAtIFZd+IxHwxIaF kylin@uk21
2
3
4

分发公钥

kylin@uk0:~$ scp .ssh/authorized_keys kylin@192.168.1.161:/home/kylin/.sshThe authenticity of host '192.168.1.161 (192.168.1.161)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added '192.168.1.161' (ECDSA) to the list of known hosts.kylin@192.168.1.161's password: authorized_keys                                                                                                                           100% 1173   692.4KB/s   00:00    kylin@uk0:~$ scp .ssh/authorized_keys kylin@192.168.1.162:/home/kylin/.sshThe authenticity of host '192.168.1.162 (192.168.1.162)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added '192.168.1.162' (ECDSA) to the list of known hosts.kylin@192.168.1.162's password: authorized_keys                                                                                                                           100% 1173     1.1MB/s   00:00    kylin@uk0:~$1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

3.4 集群免密登录

kylin@uk0:~$ ssh uk1The authenticity of host 'uk1 (192.168.1.161)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'uk1' (ECDSA) to the list of known hosts.Welcome to Ubuntu 16.10 (GNU/Linux 4.8.0-22-generic x86_64) * Documentation:  https://help.ubuntu.com * Management:     https://landscape.canonical.com * Support:        https://ubuntu.com/advantage279 个可升级软件包。107 个安全更新。Last login: Fri Mar  3 16:24:21 2017 from 192.168.1.161kylin@uk1:~$ kylin@uk1:~$ ssh uk2The authenticity of host 'uk2 (192.168.1.162)' can't be established.ECDSA key fingerprint is SHA256:dOKnH/ES8JcWzGkdRwRzYGzDkBE8y7cJpRx/DNHhGVc.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'uk2,192.168.1.162' (ECDSA) to the list of known hosts.Welcome to Ubuntu 16.10 (GNU/Linux 4.8.0-22-generic x86_64) * Documentation:  https://help.ubuntu.com * Management:     https://landscape.canonical.com * Support:        https://ubuntu.com/advantage279 个可升级软件包。107 个安全更新。Last login: Fri Mar  3 16:25:05 2017 from 192.168.1.162

阅读全文

0 0