ssh免密码登录配置方法,(图示加命令)
来源:互联网 发布:2016nba总决赛数据 编辑:程序博客网 时间:2024/05/06 13:55
转:http://blog.csdn.net/universe_hao/article/details/52296811
首先,说明一下我们要做的是,serverA 服务器的 usera 用户免密码登录 serverB 服务器的 userb用户。
我们先使用usera 登录 serverA 服务器
- [root@serverA ~]# su - usera
- [usera@serverA ~]$ pwd
- /home/usera
然后在serverA上生成密钥对
- [usera@serverA ~]$ ssh-keygen -t rsa
- Generating public/private rsa key pair.
- Enter file in which to save the key (/home/usera/.ssh/id_rsa):
- Created directory '/home/usera/.ssh'.
- Enter passphrase (empty for no passphrase):
- Enter same passphrase again:
- Your identification has been saved in /home/usera/.ssh/id_rsa.
- Your public key has been saved in /home/usera/.ssh/id_rsa.pub.
- The key fingerprint is:
- 39:f2:fc:70:ef:e9:bd:05:40:6e:64:b0:99:56:6e:01 usera@serverA
- The key's randomart image is:
- +--[ RSA 2048]----+
- | Eo* |
- | @ . |
- | = * |
- | o o . |
- | . S . |
- | + . . |
- | + . .|
- | + . o . |
- | .o= o. |
- +-----------------+
此时会在/home/usera/.ssh目录下生成密钥对
- [usera@serverA ~]$ ls -la .ssh
- 总用量 16
- drwx------ 2 usera usera 4096 8月 24 09:22 .
- drwxrwx--- 12 usera usera 4096 8月 24 09:22 ..
- -rw------- 1 usera usera 1675 8月 24 09:22 id_rsa
- -rw-r--r-- 1 usera usera 399 8月 24 09:22 id_rsa.pub
然后将公钥上传到serverB 服务器的,并以userb用户登录
- [usera@portalweb1 ~]$ ssh-copy-id userb@10.124.84.20
- The authenticity of host '10.124.84.20 (10.124.84.20)' can't be established.
- RSA key fingerprint is f0:1c:05:40:d3:71:31:61:b6:ad:7c:c2:f0:85:3c:cf.
- Are you sure you want to continue connecting (yes/no)? yes
- Warning: Permanently added '10.124.84.20' (RSA) to the list of known hosts.
- userb@10.124.84.29's password:
- Now try logging into the machine, with "ssh 'userb@10.124.84.20'", and check in:
- .ssh/authorized_keys
- to make sure we haven't added extra keys that you weren't expecting.
这个时候usera的公钥文件内容会追加写入到userb的 .ssh/authorized_keys 文件中
- [usera@serverA ~]$ cat .ssh/id_rsa.pub
- ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2dpxfvifkpswsbusPCUWReD/mfTWpDEErHLWAxnixGiXLvHuS9QNavepZoCvpbZWHade88KLPkr5XEv6M5RscHXxmxJ1IE5vBLrrS0NDJf8AjCLQpTDguyerpLybONRFFTqGXAc/ximMbyHeCtI0vnuJlvET0pprj7bqmMXr/2lNlhIfxkZCxgZZQHgqyBQqk/RQweuYAiuMvuiM8Ssk/rdG8hL/n0eXjh9JV8H17od4htNfKv5+zRfbKi5vfsetfFN49Q4xa7SB9o7z6sCvrHjCMW3gbzZGYUPsj0WKQDTW2uN0nH4UgQo7JfyILRVZtwIm7P6YgsI7vma/vRP0aw== usera@serverA
查看serverB服务器userb用户下的 ~/.ssh/authorized_keys文件,内容是一样的,此处我就不粘贴图片了。
- [userb@serverB ~]$ cat .ssh/authorized_keys
- ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2dpxfvifkpswsbusPCUWReD/mfTWpDEErHLWAxnixGiXLvHuS9QNavepZoCvpbZWHade88KLPkr5XEv6M5RscHXxmxJ1IE5vBLrrS0NDJf8AjCLQpTDguyerpLybONRFFTqGXAc/ximMbyHeCtI0vnuJlvET0pprj7bqmMXr/2lNlhIfxkZCxgZZQHgqyBQqk/RQweuYAiuMvuiM8Ssk/rdG8hL/n0eXjh9JV8H17od4htNfKv5+zRfbKi5vfsetfFN49Q4xa7SB9o7z6sCvrHjCMW3gbzZGYUPsj0WKQDTW2uN0nH4UgQo7JfyILRVZtwIm7P6YgsI7vma/vRP0aw== usera@serverA
另外我们要注意,.ssh目录的权限为700,其下文件authorized_keys和私钥的权限为600。否则会因为权限问题导致无法免密码登录。我们可以看到登陆后会有known_hosts文件生成。
- [useb@serverB ~]$ ls -la .ssh
- total 24
- drwx------. 2 useb useb 4096 Jul 27 16:13 .
- drwx------. 35 useb useb 4096 Aug 24 09:18 ..
- -rw------- 1 useb useb 796 Aug 24 09:24 authorized_keys
- -rw------- 1 useb useb 1675 Jul 27 16:09 id_rsa
- -rw-r--r-- 1 useb useb 397 Jul 27 16:09 id_rsa.pub
- -rw-r--r-- 1 useb useb 1183 Aug 11 13:57 known_hosts
- [usera@serverA ~]$ ssh userb@10.124.84.20
另外,将公钥拷贝到服务器的~/.ssh/authorized_keys文件中方法有如下几种:
1、将公钥通过scp拷贝到服务器上,然后追加到~/.ssh/authorized_keys文件中,这种方式比较麻烦。scp -P 22 ~/.ssh/id_rsa.pub user@host:~/。
2、通过ssh-copyid程序,就是我演示的方法,ssh-copyid user@host即可,但是这种方式不支持更改端口号(我没找到)。该程序常见发行版linux自带无需安装,其实该程序为一个脚本。
3、可以通过cat ~/.ssh/id_rsa.pub | ssh -p 22 user@host ‘cat >> ~/.ssh/authorized_keys’,这个也是比较常用的方法,因为可以更改端口号。
0 0
- ssh免密码登录配置方法,(图示加命令)
- ssh免密码登录配置方法,(图示加命令)
- ssh免密码登录配置方法,(图示加命令)
- 配置ssh免密码登录
- ssh免密码登录配置
- 免密码登录ssh配置
- 配置SSH免密码登录
- 配置ssh免密码登录
- ssh 免密码登录配置
- 配置ssh免密码登录
- SSH免密码登录配置
- SSH配置免密码登录
- 配置ssh免密码登录
- ssh免密码登录配置
- 配置ssh免密码登录
- SSH免密码登录配置
- 配置ssh免密码登录
- 配置ssh免密码登录
- 《从零开始学Swift》学习笔记(Day54)——抛出错误
- 十张数据图回顾雾霾,北京污染从南向北加深趋势明显
- javaFX - FileChooser
- tensorflow学习笔记(二十五):ConfigProto&GPU
- iOS命令行自动打包(archive)
- ssh免密码登录配置方法,(图示加命令)
- HTC vive基于unity的凝视交互功能(带HTC 插件)
- [译]Android Activity 和 Fragment 状态保存与恢复的最佳实践
- spark streaming 2 ParallelCollectionRDD
- Dos命令查看端口占用及关闭进程
- Gradle for Android-建立持续集成
- 配置NGINX同时运行 https 和 http
- 【Unity工具】Sprite Illuminator下载教程&TexturePacke资料总结
- Fragment与Activity之间的相互通信