配置主机间信任的一个简单办法

只列出在一个机器上的操作。从rac01-ud-us-eqx到rac02-ud-us-eqx和rac03-ud-us-eqx

bash-3.00$ ssh 10.12.32.182

The authenticity of host '10.12.32.182 (10.12.32.182)' can't be established.

RSA key fingerprint is 7e:8d:db:aa:7c:15:3e:b6:4e:5f:86:58:b5:e8:97:7a.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '10.12.32.182' (RSA) to the list of known hosts.

Password:

Password:

Password:

Permission denied (gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive).

bash-3.00$

bash-3.00$

bash-3.00$ /usr/bin/ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key (/export/home/oracle/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /export/home/oracle/.ssh/id_rsa.

Your public key has been saved in /export/home/oracle/.ssh/id_rsa.pub.

The key fingerprint is:

73:a0:e2:39:0b:6a:f5:b2:90:63:2d:a0:8b:20:96:af oracle@rac01-ud-us-eqx

bash-3.00$  /usr/bin/ssh-keygen -t dsa

Generating public/private dsa key pair.

Enter file in which to save the key (/export/home/oracle/.ssh/id_dsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /export/home/oracle/.ssh/id_dsa.

Your public key has been saved in /export/home/oracle/.ssh/id_dsa.pub.

The key fingerprint is:

5b:f6:0b:e5:2d:85:04:1c:85:84:52:de:ac:a1:27:f1 oracle@rac01-ud-us-eqx

bash-3.00$ ssh rac01-ud-us-eqx cat /export/home/oracle/.ssh/id_rsa.pub >>authorized_keys

The authenticity of host 'rac01-ud-us-eqx (10.12.32.181)' can't be established.

RSA key fingerprint is a5:b1:df:ea:ca:b5:78:69:43:cb:2b:cb:de:9f:f1:5d.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'rac01-ud-us-eqx,10.12.32.181' (RSA) to the list of known hosts.

Password:

bash-3.00$ ssh rac01-ud-us-eqx cat /export/home/oracle/.ssh/id_dsa.pub >>authorized_keys

Password:

bash-3.00$ ssh rac02-ud-us-eqx cat /export/home/oracle/.ssh/id_rsa.pub >>authorized_keys

The authenticity of host 'rac02-ud-us-eqx (10.12.32.182)' can't be established.

RSA key fingerprint is 7e:8d:db:aa:7c:15:3e:b6:4e:5f:86:58:b5:e8:97:7a.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'rac02-ud-us-eqx' (RSA) to the list of known hosts.

Password:

bash-3.00$ ssh rac02-ud-us-eqx cat /export/home/oracle/.ssh/id_dsa.pub >>authorized_keys

Password:

bash-3.00$ scp authorized_keys rac02-ud-us-eqx:/export/home/oracle/.ssh

Password:

authorized_keys      100% |*********************************************************************************|  2532       00:00   

bash-3.00$  ssh rac02-ud-us-eqx

Last login: Wed Apr 21 02:28:53 2010 from rac01-ud-us-eqx

Sun Microsystems Inc.   SunOS 5.10      Generic January 2005

$ exit

Connection to rac02-ud-us-eqx closed.

bash-3.00$ ssh rac03ud-us-eqx cat /export/home/oracle/.ssh/id_rsa.pub >>authorized_keys

ssh: rac03ud-us-eqx: node name or service name not known

bash-3.00$ ssh rac03-ud-us-eqx cat /export/home/oracle/.ssh/id_rsa.pub >>authorized_keys

The authenticity of host 'rac03-ud-us-eqx (10.12.32.183)' can't be established.

RSA key fingerprint is 01:d0:d1:4c:6b:4e:00:fe:d1:c0:33:5d:fd:56:2f:19.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'rac03-ud-us-eqx,10.12.32.183' (RSA) to the list of known hosts.

Password:

bash-3.00$ ssh rac03ud-us-eqx cat /export/home/oracle/.ssh/id_dsa.pub >>authorized_keys

ssh: rac03ud-us-eqx: node name or service name not known

bash-3.00$ ssh rac03-ud-us-eqx cat /export/home/oracle/.ssh/id_dsa.pub >>authorized_keys

Password:

bash-3.00$ scp authorized_keys rac03-ud-us-eqx:/export/home/oracle/.ssh

Password:

authorized_keys      100% |*********************************************************************************|  3376       00:00   

bash-3.00$  ssh rac03-ud-us-eqx

Last login: Wed Apr 21 02:31:14 2010 from rac01-ud-us-eqx

Sun Microsystems Inc.   SunOS 5.10      Generic January 2005

$ exit

Connection to rac03-ud-us-eqx closed

Sunboy_2050的专栏