linuxʹÓÃÃÜÔ¿¶ÔʵÏÖsshÃâÃÜÂëµÇ¼

£¨1£©ÔÚ¿Í»§»úAÖÐÉú³É¹«/˽ÃÜÔ¿¶Ô¡£
1£©rootÓû§´´½¨ÃÜÔ¿¶Ô
[root@controller1 .ssh]# ssh-keygen -t rsa -P '123456'
-P±íʾÃÜÂ룬-P '' ¾Í±íʾ¿ÕÃÜÂ룬Ҳ¿ÉÒÔ²»ÓÃ-P²ÎÊý£¬ÕâÑù¾ÍÒª»Ø³µ²¢ÊäÈëÃÜÂë¡£
¸ÃÃüÁÔÚ/root/.sshĿ¼ÏÂÃæ²úÉúÒ»¶ÔÃÜÔ¿id_rsaºÍid_rsa.pub¡£

ssh-keygenÉú³ÉµÄrsaÃÜÔ¿¶Ô:
id_rsa ˽Կ=>Ï൱ÓÚÔ¿
id_rsa.pub ¹«Ô¿=>Ï൱ÓÚËø
Ï൱ÓÚ½«Ëø·Åµ½ÆäËü»úÆ÷ÉÏ£¬¼ÓÉÏÕâ°ÑËø¡£µÇ¼µÄʱºò£¬¾ÍÓÃ×ÔÒÑ˽Կȥ´ò¿ªËü

ÏÂÊöÃüÁî²úÉú²»Í¬ÀàÐ͵ÄÃÜÔ¿
ssh-keygen -t dsa
ssh-keygen -t rsa
ssh-keygen -t rsa1


2£©ÆäËüÓû§´´½¨
[root@controller1 ~]# adduser sds
[root@controller1 ~]# su - sds
[sds@controller1 ~]$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/sds/.ssh/id_rsa):
Created directory '/home/sds/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/sds/.ssh/id_rsa.
Your public key has been saved in /home/sds/.ssh/id_rsa.pub.

ÃÜÔ¿¶Ô´æ·ÅÔÚÓû§µÄ¼ÒĿ¼ÖУº/home/sds/.ssh/id_rsa.pub


£¨2£©½«¿Í»§»úÖеĹ«Ô¿¸´ÖƵ½Ä¿±ê»úBÖÐ
1£©ÓÃssh-copy-id¹¤¾ß·Ö·¢¹«Ô¿
[root@controller1 .ssh]# ssh-copy-id -i ~/.ssh/id_rsa.pub 172.16.100.73
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '172.16.100.73 (172.16.100.73)' can't be established.
...
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@172.16.100.73's password:
Number of key(s) added: 1

Now try logging into the machine, with: "ssh '172.16.100.73'"
and check to make sure that only the key(s) you wanted were added.

2£©ÓÃscp¸´ÖÆ·Ö·¢¹«Ô¿
°ÑA»úϵÄ/root/.ssh/id_rsa.pub¸´ÖƵ½B»úµÄ/root/.ssh/authorized_keysÎļþÀÏÈÒªÔÚB»úÉÏ´´½¨ºÃ /root/.ssh Õâ¸öĿ¼£¬¡£
[root@controller1 .ssh]# scp /root/.ssh/id_rsa.pub root@172.16.100.72:~/.ssh/authorized_keys
root@172.16.100.72 password:
ÓÉÓÚ»¹Ã»ÓÐÃâÃÜÂëµÇ¼µÄ£¬ËùÒÔÒªÊäÈëÒ»´ÎB»úµÄrootÃÜÂë¡£

3£©Ö±½Ó½«¹«Ô¿ÄÚÈݸ´ÖƵ½authorized_keysÎļþÖÐ
²é¿´¹«Ô¿ÄÚÈÝ£º
[root@controller1 .ssh]# cat id_rsa.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHhsDaUIxYhY9P/8Y6zs9oKnGpKKl3k9QeZOGD7p63a74+jPc0iqmsq+OzxgcTkYsj/ULt5hP2FKfK0+gZ4tCx7x0S+bUGAuFUTuOZQFvOadrPOQ9MSYVgwToHm8hRywUjRTVSuA1mhNQnoUGXeqazOfDF8cYczgsEbmCJmpLeBea1jWhXbeYTqNhVHZt2TihDPGCB8+sZGYTZq2Q+Sz8bYOn+aSaeatVYzLDlEug1DU9pGTyEcU5d6sfJARz91wjP8156Ro/n0dI9RQJNEZ1bH54Hs+iQeYdvRT61GIdYVRSJsD1Zva82rctNYOFI4s7mQwI1vtzd8eMo7DRXJnt3 root@controller1
[root@controller1 .ssh]#


Ö±½Ó¸´Öƹ«Ô¿ÄÚÈݵ½authorized_keysÎļþ
[root@network1 .ssh]# cat >authorized_keys <<eof
> ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHhsDaUIxYhY9P/8Y6zs9oKnGpKKl3k9QeZOGD7p63a74+jPc0iqmsq+OzxgcTkYsj/ULt5hP2FKfK0+gZ4tCx7x0S+bUGAuFUTuOZQFvOadrPOQ9MSYVgwToHm8hRywUjRTVSuA1mhNQnoUGXeqazOfDF8cYczgsEbmCJmpLeBea1jWhXbeYTqNhVHZt2TihDPGCB8+sZGYTZq2Q+Sz8bYOn+aSaeatVYzLDlEug1DU9pGTyEcU5d6sfJARz91wjP8156Ro/n0dI9RQJNEZ1bH54Hs+iQeYdvRT61GIdYVRSJsD1Zva82rctNYOFI4s7mQwI1vtzd8eMo7DRXJnt3 root@controller1
> eof

¼ÇµÃÐÞ¸Ä[root@network1 ~]# chmod 600 .ssh/authorized_keys ȨÏÞ

£¨3£©ÎªÁË°²È«ÐÔ½«authorized_keysµÄȨÏÞ¸ÄΪ600
[root@compute1 .ssh]# ll
total 8
-rw-r--r-- 1 root root 398 Jul 4 15:33 authorized_keys
-rw-r--r--. 1 root root 350 Jun 8 20:05 known_hosts
[root@compute1 .ssh]# chmod 600 authorized_keys
[root@compute1 .ssh]# ll
total 8
-rw------- 1 root root 398 Jul 4 15:33 authorized_keys
-rw-r--r--. 1 root root 350 Jun 8 20:05 known_hosts


£¨4£©¿Í»§A»úµÇ¼µ½Ä¿±êB»ú
1£©Ä¬ÈÏ˽ԿµÇ¼
[root@controller1 .ssh]# ssh 172.16.100.72
Last login: Wed Jul 4 15:28:14 2018 from controller1
[root@compute1 ~]#

2£©Ö¸¶¨Ë½Ô¿µÇ¼
[root@controller1 .ssh]# ssh -i ~/.ssh/id_rsa 172.16.100.73
Last login: Tue Jun 12 15:32:53 2018 from 172.16.100.111

Ö¸¶¨ÁË˽Կ·¾¶ºÍ˽ԿÃû