最小化安装的CentOS6配置SSH免密码登录

来源：互联网发布：济南seo大标网络编辑：程序博客网时间：2024/06/05 10:50

最小化安装的CentOS6的root目录下是没有.ssh目录的，如下所示。

[root@zookeeper1 ~]# ls -la总用量 56dr-xr-x---.  3 root root 4096 4月  24 02:27 .dr-xr-xr-x. 22 root root 4096 4月  24 02:28 ..-rw-------.  1 root root 1111 4月  24 00:47 anaconda-ks.cfg-rw-------.  1 root root  134 4月  24 02:27 .bash_history-rw-r--r--.  1 root root   18 5月  20 2009 .bash_logout-rw-r--r--.  1 root root  176 5月  20 2009 .bash_profile-rw-r--r--.  1 root root  176 9月  23 2004 .bashrc-rw-r--r--.  1 root root  100 9月  23 2004 .cshrc-rw-r--r--.  1 root root 8017 4月  24 00:47 install.log-rw-r--r--.  1 root root 3384 4月  24 00:46 install.log.syslogdrwxr-xr-x.  2 root root 4096 4月  24 01:09 .oracle_jre_usage-rw-r--r--.  1 root root  129 12月  4 2004 .tcshrc-rw-------.  1 root root 1909 4月  24 02:27 .viminfo[root@zookeeper1 ~]#

我们直接在root目录下生成秘钥，如下所示，输入ssh-keygen -t rsa命令后，每次暂停就敲一次回车，敲三次回车即可生成秘钥，如下所示。

[root@zookeeper1 ~]# ssh-keygen -t rsaGenerating public/private rsa key pair.Enter file in which to save the key (/root/.ssh/id_rsa): Created directory '/root/.ssh'.Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /root/.ssh/id_rsa.Your public key has been saved in /root/.ssh/id_rsa.pub.The key fingerprint is:09:4e:f5:dc:77:44:0f:18:40:42:f1:60:03:7a:2b:80 root@zookeeper1The key's randomart image is:+--[ RSA 2048]----+|      .oOoo..o..o|| .   . o B ..  o.||E . . +   + . . o||   . + o .   . . ||    . o S        ||     .           ||                 ||                 ||                 |+-----------------+[root@zookeeper1 ~]#

我们再看root目录下，发现这时多了一个.ssh文件夹，如下所示。

[root@zookeeper1 ~]# ll -la总用量 60dr-xr-x---.  4 root root 4096 4月  24 02:41 .dr-xr-xr-x. 22 root root 4096 4月  24 02:28 ..-rw-------.  1 root root 1111 4月  24 00:47 anaconda-ks.cfg-rw-------.  1 root root  134 4月  24 02:27 .bash_history-rw-r--r--.  1 root root   18 5月  20 2009 .bash_logout-rw-r--r--.  1 root root  176 5月  20 2009 .bash_profile-rw-r--r--.  1 root root  176 9月  23 2004 .bashrc-rw-r--r--.  1 root root  100 9月  23 2004 .cshrc-rw-r--r--.  1 root root 8017 4月  24 00:47 install.log-rw-r--r--.  1 root root 3384 4月  24 00:46 install.log.syslogdrwxr-xr-x.  2 root root 4096 4月  24 01:09 .oracle_jre_usagedrwx------.  2 root root 4096 4月  24 02:41 .ssh-rw-r--r--.  1 root root  129 12月  4 2004 .tcshrc-rw-------.  1 root root 1909 4月  24 02:27 .viminfo[root@zookeeper1 ~]#

我们到这个.ssh目录下看看都生成了什么文件，如下所示。可以看到有id_rsa和id_rsa.pub两个文件，分别是秘钥和公钥。

[root@zookeeper1 ~]# cd .ssh/[root@zookeeper1 .ssh]# ll总用量 8-rw-------. 1 root root 1675 4月  24 02:41 id_rsa-rw-r--r--. 1 root root  397 4月  24 02:41 id_rsa.pub[root@zookeeper1 .ssh]#

在.ssh目录下新建一个authorized_keys文件，如下所示

[root@zookeeper1 .ssh]# touch authorized_keys[root@zookeeper1 .ssh]# ll总用量 8-rw-r--r--. 1 root root    0 4月  24 02:50 authorized_keys-rw-------. 1 root root 1675 4月  24 02:41 id_rsa-rw-r--r--. 1 root root  397 4月  24 02:41 id_rsa.pub[root@zookeeper1 .ssh]#

由于设备自己ssh登录自己也需要输入密码，为了让自己ssh登录自己不用输密码，我们把公钥拷给自己一份，拷贝完之后，我们查看一下authorized_keys文件中的内容，所看到的便是zookeeper1这台设备的公钥，如下所示。

[root@zookeeper1 .ssh]# cp id_rsa.pub authorized_keys cp：是否覆盖"authorized_keys"？ y[root@zookeeper1 .ssh]# more authorized_keys ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvnYJjHUMsOebTzJ8p5M/S7gwFWwRk7iDYL92CxSS7SGO/PwB9jlPvNXqXN8cRwyyTA0slpPhJqful0ng2fSDeltkgWe9pWgQUUNt/2VT20CNHtQq1wtm4vvkHLJn3pcUdhwVKsa3ITV7pAIx6LKyxhxkOtXGGNVFZYF0CXAaC+9B5Sz2YbKyJQycaa4JekvFRw6qvvrAxIhBxvtaaNZRpv3iz+0VU3w82ADbaJ8xbI8F3Ooad1LR7c0od68D4RnvGTDv9O4rZ1vwltlP0PDvYCB5UACt0DZbAsnCAykC3cgcc9RBzz9VsRFk3JBKkUf2EvKvaT8OYL6NnEyTw6ibyQ== root@zookeeper1[root@zookeeper1 .ssh]#

接下来我们尝试以ssh的方式登录下自己，发现确实不用输入密码即可登录了。如下所示。

[root@zookeeper1 .ssh]# ssh zookeeper1The authenticity of host 'zookeeper1 (192.168.156.23)' can't be established.RSA key fingerprint is d2:f2:34:34:31:07:df:18:d5:3e:e7:ea:93:08:bb:38.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'zookeeper1,192.168.156.23' (RSA) to the list of known hosts.Last login: Mon Apr 24 02:32:09 2017 from 192.168.156.100[root@zookeeper1 ~]#

我们以同样的方式再配置一台设备192.168.156.24，然后我们想从当前设备以ssh免密码登录的方式登录192.168.156.24，那么我们便把192.168.156.23上的公钥拷给192.168.156.24一份，如下所示。

[root@zookeeper1 ~]# ssh-copy-id 192.168.156.24The authenticity of host '192.168.156.24 (192.168.156.24)' can't be established.RSA key fingerprint is d2:f2:34:34:31:07:df:18:d5:3e:e7:ea:93:08:bb:38.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added '192.168.156.24' (RSA) to the list of known hosts.root@192.168.156.24's password: Now try logging into the machine, with "ssh '192.168.156.24'", and check in:  .ssh/authorized_keysto make sure we haven't added extra keys that you weren't expecting.[root@zookeeper1 ~]#

下面我们便尝试以ssh登录的方式从192.168.156.23登录到192.168.156.24上，如下所示，发现确实不用输入密码即可登录。这就实现了SSH免密码登录的功能了。

[root@zookeeper1 ~]# ssh zookeeper2The authenticity of host 'zookeeper2 (192.168.156.24)' can't be established.RSA key fingerprint is d2:f2:34:34:31:07:df:18:d5:3e:e7:ea:93:08:bb:38.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added 'zookeeper2' (RSA) to the list of known hosts.Last login: Mon Apr 24 02:33:13 2017 from 192.168.156.100[root@zookeeper2 ~]#

注：之所以可以直接ssh zookeeper2是因为在两台设备的/etc/hosts文件当中配置IP与主机名的映射关系，如下所示。

[root@zookeeper1 ~]# more /etc/hosts127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4::1         localhost localhost.localdomain localhost6 localhost6.localdomain6192.168.156.23 zookeeper1192.168.156.24 zookeeper2[root@zookeeper1 ~]#

0 0