ssh互信配置.doc

开始配置等价性, 需要先把/etc/selinux/config的SELINUX改为disabled,好像要重启下 先确认ssh是否在跑 $ pgrep sshd 分别配置ＯＲＡＣＬＥ和ＧＲＩＤ用户的ＳＳＨ通信。如下为ｇｒｉｄ用户的ｓｓｈ配置，ｏｒａｃｌｅ参照一下配置执行 [grid@rac1 ~]$ mkdir .ssh mkdir: cannot create directory `.ssh: File exists [grid@rac1 ~]$ chmod 700 .ssh [grid@rac1 ~]$ cd .ssh [grid@rac1 .ssh]$ ls [grid@rac1 .ssh]$ ls -l total 0 [grid@rac1 .ssh]$ ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/grid/.ssh/id_rsa): Enter passphrase (empty for no passphrase): ------可以直接敲回车 Enter same passphrase again: Your identification has been saved in /home/grid/.ssh/id_rsa. Your public key has been saved in /home/grid/.ssh/id_rsa.pub. The key fingerprint is: 7f:bc:87:91:16:34:cb:8a:28:c2:e9:f4:97:c2:5e:47 grid@ [grid@rac1 .ssh]$ ssh-keygen -t dsa Generating public/private dsa key pair. Enter file in which to save the key (/home/grid/.ssh/id_dsa): Enter passphrase (empty for no passphrase): ------可以直接敲回车 Enter same passphrase again: Your identification has been saved in /home/grid/.ssh/id_dsa. Your public key has been saved in /home/grid/.ssh/id_dsa.pub. The key fingerprint is: 39:b9:57:ba:35:85:e4:cb:a8:1a:f0:da:05:b4:ec:0b grid@ grid@rac1 .ssh]$ ls -l total 16 -rw------- 1 grid oinstall 668 Apr 17 10:50 id_dsa -rw-r--r-- 1 grid oinstall 615 Apr 17 10:50 id_dsa.pub -rw------- 1 grid oinstall 1675 Apr 17 10:50 id_rsa -rw-r--r-- 1 grid oinstall 407 Apr 17 10:50 id_rsa.pub [grid@rac1 .ssh]$ cat *.pub authorized_keys　　　------两节点分别执行 　　 密匙文件配置 [grid@rac2 .ssh]$ mv authorized_keys keys_rac1　　　　　------第一步（修改rac2上密匙文件名） -rw-r--r-- 1 grid oinstall 1022 Apr 17 11:12 authorized_keys -rw------- 1 grid oinstall 668 Apr 17 11:10 id_dsa -rw-r--r-- 1 grid oinstall 615 Apr 17 11:10 id_dsa.pub -rw------- 1 grid oinstall 1675 Apr 17 11:10 id_rsa -rw-r--r-- 1 grid oinstall 407 Apr 17 11:10 id_rsa.pub -rw-r--r-- 1 grid oinstall 1022 Apr 17 11:09 keys_rac1 [grid@rac1 .ssh]$ scp authorized_keys rac2:/home/grid/.ssh/.　　　　------第二步（在rac1把存储公钥信息的验证文件