Linux系统生成免密码登录，保姆级教程

news/2024/11/30 18:40:50/

1、节点规划，我们这里为了简单，就直接采用root账号，生产中，需要创建专门的用户组和用户。

节点名称用户用户组密码ip
node1rootroot123456192.168.42.139
node2rootroot123456192.168.42.140
node3rootroot123456192.168.42.141

 


 

2、这里指的node1，node2，node3，是需要在host里面配置的，每台服务器都需要配置相应的

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6192.168.42.139 node1
192.168.42.140 node2
192.168.42.141 node3

3、在node1，node2，node3上执行ssh-keygen

ssh-keygen -t rsa

一般不需要修改什么，就可以直接下一步，下一步了

node1

[root@node1 ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
/root/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:NPfg+iVBKYZNpmtR9F7NQLKsYNt0jM/ejTXtalPNrRA root@node1
The key's randomart image is:
+---[RSA 2048]----+
|       .= ..o    |
|       B = + +   |
|      * O @ . o  |
|     . X % +E  . |
|      + S * ..o.+|
|     .   o o.+ o=|
|        . o +..o.|
|         . o  +. |
|          .  ... |
+----[SHA256]-----+

node2

[root@node2 ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:PW1BRDwHsE+BfEFLgEVt3iBebaJGqd8zWnEgT/1X8jc root@node2
The key's randomart image is:
+---[RSA 2048]----+
|         ==@X=   |
|        . B+%o* .|
|         +.@+O +.|
|        ..+++.oE=|
|        Soo.+o  +|
|          .o=    |
|           o o   |
|          .      |
|                 |
+----[SHA256]-----+

node3

[root@node3 ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:M6wq0NF3ucbaVzTwsaDVS9hpsQWvJFxWMirsGcoy5wA root@node3
The key's randomart image is:
+---[RSA 2048]----+
|           +B=o  |
|       . .=+B*   |
|  E.    +++*o+.  |
|  .....+++ o*.   |
| . .+.+oS. ...   |
|. .  * .+o  .    |
| .    o+   .     |
|  .  .. . .      |
|   ..    .       |
+----[SHA256]-----+

4、配置服务器的免密登录

在node1服务器上执行ssh-copy-id -i id_rsa.pub root@node1

[root@node1 .ssh]# ssh-copy-id -i id_rsa.pub root@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node1 (192.168.42.139)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node1's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node1'"
and check to make sure that only the key(s) you wanted were added.

在node1服务器上执行ssh-copy-id -i id_rsa.pub root@node2

[root@node1 .ssh]# ssh-copy-id -i id_rsa.pub root@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node2 (192.168.42.140)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node2's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node2'"
and check to make sure that only the key(s) you wanted were added.

在node1服务器上执行 ssh-copy-id -i id_rsa.pub root@node3

[root@node1 .ssh]# ssh-copy-id -i id_rsa.pub root@node3
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node3 (192.168.42.141)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node3's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node3'"
and check to make sure that only the key(s) you wanted were added.

这两步成功后，可以测试免密登录

在node1节点执行ssh node1，node2，ssh node3

[root@node1 .ssh]# ssh node1
Last login: Tue Nov  7 23:00:33 2023 from 192.168.42.1
[root@node1 ~]# exit
登出
Connection to node1 closed.

[root@node1 .ssh]# ssh node2
Last login: Tue Nov  7 23:21:37 2023 from node1
[root@node2 ~]# 

[root@node1 .ssh]# ssh node3
Last login: Tue Nov  7 23:22:22 2023 from node1
[root@node3 ~]#

这里就配置成了，node1可以免密登录node1，node2，node3

同理，在node2，node3，也可以配置免密登录node1，node2，node3.这里按照上面的步骤，在相应的node节点重新拷贝ssh-copy-id -i id_rsa.pub root@节点，就可以了。

在node2上的执行过程

[root@node2 .ssh]#  ssh-copy-id -i id_rsa.pub root@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node1's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node1'"
and check to make sure that only the key(s) you wanted were added.[root@node2 .ssh]# ssh node1
Last failed login: Tue Nov  7 23:27:55 CST 2023 from node2 on ssh:notty
There was 1 failed login attempt since the last successful login.
Last login: Tue Nov  7 23:27:47 2023 from node2
[root@node1 ~]# exit
登出
Connection to node1 closed.
[root@node2 .ssh]#  ssh-copy-id -i id_rsa.pub root@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node2 (192.168.42.140)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node2's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node2'"
and check to make sure that only the key(s) you wanted were added.[root@node2 .ssh]# exit
登出连接断开
连接主机...
连接主机成功
Last login: Tue Nov  7 23:27:57 2023 from 192.168.42.1
[root@node2 ~]# cd .ssh/
[root@node2 .ssh]# exit^C
[root@node2 .ssh]#  ssh-copy-id -i id_rsa.pub root@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed/usr/bin/ssh-copy-id: WARNING: All keys were skipped because they already exist on the remote system.(if you think this is a mistake, you may want to use -f option)[root@node2 .ssh]#  ssh-copy-id -i id_rsa.pub root@node3
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node3 (192.168.42.141)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node3's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node3'"
and check to make sure that only the key(s) you wanted were added.[root@node2 .ssh]# ssh node3
Last login: Tue Nov  7 23:24:12 2023 from node1
[root@node3 ~]# exit
登出
Connection to node3 closed.

在node3上执行过程 

[root@node3 .ssh]# ssh-copy-id -i id_rsa.pub root@node3
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node3 (192.168.42.141)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node3's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node3'"
and check to make sure that only the key(s) you wanted were added.[root@node3 .ssh]# ssh-copy-id -i id_rsa.pub root@node1
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node1 (192.168.42.139)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node1's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node1'"
and check to make sure that only the key(s) you wanted were added.[root@node3 .ssh]# ssh-copy-id -i id_rsa.pub root@node2
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "id_rsa.pub"
The authenticity of host 'node2 (192.168.42.140)' can't be established.
ECDSA key fingerprint is SHA256:bBP/Xzrrb0p6Akzfvdrg0PVL7jI1b493H40ZC19LSIM.
ECDSA key fingerprint is MD5:19:02:77:cd:b2:64:84:d3:5f:94:04:3e:41:33:de:e2.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@node2's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'root@node2'"
and check to make sure that only the key(s) you wanted were added.[root@node3 .ssh]# ssh node1
Last login: Tue Nov  7 23:28:18 2023 from node2
[root@node1 ~]# exit
登出
Connection to node1 closed.
[root@node3 .ssh]# ssh node2
Last login: Tue Nov  7 23:28:30 2023 from 192.168.42.1
[root@node2 ~]# exit
登出
Connection to node2 closed.
[root@node3 .ssh]# ssh node3
Last login: Tue Nov  7 23:28:52 2023 from node2
[root@node3 ~]# exit
登出
Connection to node3 closed.

测试免密登录，没有问题就可以了。

注意事项：这里如果遇到ssh-copy-id不存在的情况，需要安装或者升级yum -y install openssh-clients。


http://www.ppmy.cn/news/1205498.html

相关文章

安卓 车轮视图 WheelView kotlin

安卓 车轮视图 WheelView kotlin

安卓 车轮视图 WheelView kotlin 前言一、代码解析1.初始化2.初始化数据3.onMeasure4.onDraw5.onTouchEvent6.其他 6.ItemObject二、完整代码总结 前言 有个需求涉及到类似这个视图，于是在网上找了个轮子，自己改吧改吧用，拿来主义当然后&…
阅读更多...
遇到java.security.AccessControlException:access denied怎么办？

遇到java.security.AccessControlException:access denied怎么办？

今天工作中遇到了如下报错，记录一下解决方案。 目录 问题 分析 结论 问题 这个问题出现在openjdk8启动网页端Java应用。 Java Exception:java.security.AccessControlException:access denied("java.net.SocketPermission""22.188.130.11:9000…
阅读更多...
React进阶之路（一）-- JSX基础、组件基础

React进阶之路（一）-- JSX基础、组件基础

文章目录 React介绍React开发环境搭建项目目录说明以及相关调整 JSX基础JSX介绍JSX中使用js表达式JSX列表渲染JSX条件渲染JSX样式处理JSX注意事项 组件基础组件的概念函数组件类组件事件绑定如何绑定事件获取事件对象传递额外参数 组件状态状态不可变表单处理受控表单组件非受控…
阅读更多...
震裕转债上市价格预测

震裕转债上市价格预测

震裕转债-123228 基本信息 转债名称：震裕转债，评级：AA-，发行规模：11.95亿元。 正股名称：震裕科技，今日收盘价：58.85元，转股价格：61.57元。 当前转股价值 转债…
阅读更多...
vue下使用Echarts5绘制基础图表

vue下使用Echarts5绘制基础图表

项目使用Vue3加Echarts5绘制的基本图表&#xff0c;图表自适应浏览器窗口大小 先上图&#xff0c;大屏小屏都可完美展示&#xff0c;纯属练手 一 先上图 1.任意缩放窗口的大小 2.平板 3.电脑 4.饼图 5.折线图 二 后上代码 <script lang"ts"> import {d…
阅读更多...
【Springboot】Springboot引入JWT实现登录校验以及常见的错误解决方案

【Springboot】Springboot引入JWT实现登录校验以及常见的错误解决方案

文章目录 前言一、JWT简单介绍二、token校验设计思路三、使用步骤Springboot部署JWT引入依赖&#xff1a;创建登录实体类后端&#xff1a;LoginController.java路由守卫函数 四、问题 前言 项目版本&#xff1a; 后端&#xff1a; Springboot 2.7、 Mybatis-plus、Maven 3.8.1…
阅读更多...
【使用python写一段代码将pdf文件转换为word文件】

【使用python写一段代码将pdf文件转换为word文件】

突然有一个需求 就是将一份老板发的PDF文件&#xff0c;转换为Word文档&#xff0c;发现要么收费&#xff0c;要么就是有水印&#xff0c;更有甚者需要将转换收费&#xff08;美其名曰就是需要开会员&#xff09;&#xff0c;那能惯着他吗 开整&#xff01; 1.使用python写一段…
阅读更多...
python使用pytest接口自动化测试的使用

python使用pytest接口自动化测试的使用

这篇文章主要介绍了python使用pytest接口自动化测试的使用&#xff0c;文中通过示例代码介绍的非常详细&#xff0c;对大家的学习或者工作具有一定的参考学习价值&#xff0c;需要的朋友们下面随着小编来一起学习学习吧 简单的设计思路 利用pytest对一个接口进行各种场景测试…
阅读更多...
最新文章

Copyright @ 2022~2023