博客
关于我
多主机免密互信
阅读量:349 次
发布时间:2019-03-04

本文共 3260 字,大约阅读时间需要 10 分钟。

# 准备三台机器192.168.57.131192.168.57.132192.168.57.133
[root@localhost ~]# pwd    # 三台机器都检查一下,都没有生成过公钥/root[root@localhost ~]# ls -a.   anaconda-ks.cfg  .bash_logout   .bashrc  .mysql_history  .tcshrc..  .bash_history    .bash_profile  .cshrc   .pki            .viminfo
[root@localhost ~]# ssh-keygen    # 三台机器都需要创建各自的公钥[root@localhost ~]# ssh-copy-id 192.168.57.131   # 三台机器都需要给自己copy-id,生成authorized_keys文件/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"The authenticity of host '192.168.57.131 (192.168.57.131)' can't be established.ECDSA key fingerprint is SHA256:hZ85f0Jqzh98Wv8A+RWjMt/aFLffN5+8Fm0pif0MJa0.ECDSA key fingerprint is MD5:fd:9b:5f:c4:5f:31:36:78:26:60:96:f3:8e:f9:df:ab.Are you sure you want to continue connecting (yes/no)? yes/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keysroot@192.168.57.131's password:Number of key(s) added: 1Now try logging into the machine, with:   "ssh '192.168.57.131'"and check to make sure that only the key(s) you wanted were added.[root@localhost ~]# ls .ssh/authorized_keys  id_rsa  id_rsa.pub  known_hosts
[root@localhost ~]# ssh-copy-id 192.168.57.131   # 132、133两台机器,将自己的authorized_keys追加到130机器内[root@localhost ~]# cat .ssh/authorized_keys   # 这个时候,130机器内,有三个公钥了ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYOGBV1a9+127y6u3JVruAcQE7/eYfAbkLsmhHSmNWcBm1AZ4AHffoPd7rSg9BdferVSOS4ZBYokxTUU1rF3YXEcFZezSQ47kD/tnFT0YiCqJTRv53SsaJBLY5Ax50ViI+WXUEwpDxH3cWsjCcm9U+2uD/fK54MsGFxmxpensF2jFjWj3nugF4jk5XFD9syztu6niCXmuZUTaAv5QFhTbOUK2xmePhjw624hEaU84NOtCMyBdIxKzbjtlZsbGsk8F+IYlfY0WPuAK9sPN8JXgEWLQdfemopTjExAoQowWe7YrG03WcU8OmevgqutMosAeGwv0yKK2dd1NV7DxJlTRh root@localhost.localdomainssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGymP3n7Z+f9g9tvUO+7bdNTB+RmJ8GQ6fmtgETfbQQ4LQ6qi2RBqXVRTjKiv70eGs8tNRyodqCP/iPue8Z28cdm+jOUy5S7kuN+X3XeG6OaHBqP+ea3pxh/LYxq1SsQQ/2sbFj2RAlj3dPKeWLGspdchs2bWX/MYgGLftorZlbZ/NbiWmw2iOFZownuAjFo0Cy5Tw4QjgWkeIdz0obMA+vDQYfw4kE6MKiJZ9b1v1MFm+XxQ3PcxseJhUKDH0I+ea/eBkK3be60pb7AXEh1tFw95nuprLuE7/qQMc2huzQGedAZIFq8IrnVHOV+vYgeF77OdcP+C3bKLENotVG0Wd root@localhostssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbN7NfZ5wfmOrS+ADiFBEJbBIsZKOyA1EXHCaMwwQVBWN7OlP5vXfSRV6VJrDsClux76+QN8ui1pdMN6PTesflZ1bFHdhzCsd5P74IlwrtY0+9IbD5CjZNnYvzkK+/P/fBZ5fE44lpBgz4jXWHjChKamIjf4i2H0QZk7mAGg+HkOZE2BU1U89dNfOTyuRHFEoHCGqVRu3lfrIHBrSIL0Rz8ZEdSDU+inncuCsOyc4hLljRpw9BVdV9LZzGZivKRz+dNhratY/qLqn6PXY1D7H4RDVs71dQ7jxU+0VxbHmxwxTFfw+mQ8aDFfilQF9nFXTlWQHtM1Ai8Vhf+JwvHzL3 root@localhost[root@localhost ~]# scp .ssh/authorized_keys 192.168.57.132:/root/.ssh/[root@localhost ~]# scp .ssh/authorized_keys 192.168.57.133:/root/.ssh/
[root@localhost ~]# ssh 192.168.57.132     # 测试成功,只需要一个yes,无需密码The authenticity of host '192.168.57.132 (192.168.57.132)' can't be established.ECDSA key fingerprint is SHA256:hZ85f0Jqzh98Wv8A+RWjMt/aFLffN5+8Fm0pif0MJa0.ECDSA key fingerprint is MD5:fd:9b:5f:c4:5f:31:36:78:26:60:96:f3:8e:f9:df:ab.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added '192.168.57.132' (ECDSA) to the list of known hosts.Last login: Fri Jul 10 20:30:24 2020 from 192.168.57.131

转载地址:http://pgkh.baihongyu.com/

你可能感兴趣的文章
Nginx启动SSL功能,并进行功能优化,你看这个就足够了
查看>>
nginx启动脚本
查看>>
Nginx在Windows上和Linux上(Docker启动)分别配置基本身份认证示例
查看>>
Nginx在Windows下载安装启动与配置前后端请求代理
查看>>
Nginx在开发中常用的基础命令
查看>>
Nginx多域名,多证书,多服务配置,实用版
查看>>
nginx如何实现图片防盗链
查看>>
Nginx学习总结(11)——提高Nginx服务器的安全性,稳定性和性能的12种技巧
查看>>
Nginx学习总结(12)——Nginx各项配置总结
查看>>
Nginx学习总结(13)——Nginx 重要知识点回顾
查看>>
Nginx学习总结(14)——Nginx配置参数详细说明与整理
查看>>
Nginx学习总结(15)—— 提升 Web 应用性能的十个步骤
查看>>
Nginx学习总结(8)——Nginx服务器详解
查看>>
nginx学习笔记002---Nginx代理配置_案例1_实现了对前端代码的方向代理_并且配置了后端api接口的访问地址
查看>>
Nginx学习笔记(一) Nginx架构
查看>>
Nginx安装SSL模块 nginx: the “ssl” parameter requires ngx_http_ssl_module in /usr/local/nginx/conf/nginx
查看>>
nginx安装stream模块配置tcp/udp端口转发
查看>>
nginx安装Stream模块配置tcp/udp端口转发
查看>>
Nginx安装与常见命令
查看>>
nginx安装与配置
查看>>