以下操作以datasafe_read账号需要无密码ssh到10.8.9.148服务器为例
1、登录10.8.7.100服务器,查看公钥文件
[admin@SH02SVR4581 ~]$ sudo su - oozie
-bash-4.1$ cd .ssh/
-bash-4.1$ ls -l
total 16
-rw-r--r-- 1 oozie oozie 395 Oct 31 2014 authorized_keys
-rw------- 1 oozie oozie 1675 Oct 31 2014 id_rsa
-rw-r--r-- 1 oozie oozie 395 Oct 31 2014 id_rsa.pub
-rw-r--r-- 1 oozie oozie 3201 Feb 12 14:54 known_hosts
-bash-4.1$ more id_rsa.pub
ssh-rsa *******************************
-bash-4.1$ ssh -p1022 datasafe_read@10.8.9.148
datasafe_read@10.8.9.148's password:
Permission denied, please try again.
datasafe_read@10.8.9.148's password:
未配置公钥时进行ssh提示需要输入密码;
配置公钥:
登录10.8.9.148:
[op1@VMS05523 ~]$ sudo su datasafe_read
[datasafe_read@VMS05523 op1]$ cd
检测.ssh文件夹是否存在,若存在直接添加进入authorized.key文件,否则执行:
[datasafe_read@VMS05523 ~]$ ssh-keygen -t rsa
[datasafe_read@VMS05523 ~]$ cd .ssh/
[datasafe_read@VMS05523 .ssh]$ ls
id_rsa id_rsa.pub
[datasafe_read@VMS05523 .ssh]$ cd
[datasafe_read@VMS05523 ~]$ chmod 700 .ssh/
#700 or 600
[datasafe_read@VMS05523 ~]$ cd .ssh/
[datasafe_read@VMS05523 .ssh]$ ls -l
total 8
-rw------- 1 datasafe_read datasafe_read 1675 Jun 29 11:39 id_rsa
-rw-r--r-- 1 datasafe_read datasafe_read 404 Jun 29 11:39 id_rsa.pub
[datasafe_read@VMS05523 .ssh]$ vi authorized_keys
将ssh-rsa ******************************* 加入到该文件
[datasafe_read@VMS05523 .ssh]$ ls -l
total 12
-rw-rw-r-- 1 datasafe_read datasafe_read 395 Jun 29 11:42 authorized_keys
-rw------- 1 datasafe_read datasafe_read 1675 Jun 29 11:39 id_rsa
-rw-r--r-- 1 datasafe_read datasafe_read 404 Jun 29 11:39 id_rsa.pub
[datasafe_read@VMS05523 .ssh]$ chmod 644 authorized_keys
切换到10.8.7.100下oozie账号下,执行ssh无密码认证测试:
-bash-4.1$ cd
-bash-4.1$ ls -la | grep ssh
drwx------ 2 oozie oozie 4096 Jun 29 11:39 .ssh
-bash-4.1$ ssh -p1022 datasafe_read@10.8.9.148