linux下Oracle11gRAC搭建(五)(三)

2014-11-24 09:09:07 · 作者: · 浏览: 1
public/private dsa key pair.

Enter file in which to save the key(/home/oracle/.ssh/id_dsa): enter

Enter passphrase (empty for no passphrase): enter

Enter same passphrase again: enter

Your identification has been saved in/home/oracle/.ssh/id_dsa.

Your public key has been saved in/home/oracle/.ssh/id_dsa.pub.

The key fingerprint is:

7c:41:b5:0f:81:06:ad:30:07:4f:8b:1a:9b:94:68:14oracle@node1

2)配置信任关系(node1、node2)

为node1配置信任

[grid@node1 ~]$ ls .ssh

id_dsa id_rsa id_dsa.pub id_rsa.pub known_hosts

rsa和dsa为私钥 .pub的为公钥

[grid@node1 ~]$ cat.ssh/id_rsa.pub >>.ssh/authorized_keys

[grid@node1 ~]$ cat.ssh/id_dsa.pub >>.ssh/authorized_keys

[grid@node1 ~]$ ssh node2 cat .ssh/id_rsa.pub>>.ssh/authorized_keys

grid@node2's password:

[grid@node1 ~]$ ssh node2 cat .ssh/id_dsa.pub >>.ssh/authorized_keys

grid@node2's password: grid的密码

为node2配置信任

可以把node1中的authorized_keys(密钥文件)复制到node2中

[grid@node1 ~]$ scp.ssh/authorized_keys node2:~/.ssh

grid@node2's password: grid的密码

authorized_keys 100% 1992 2.0KB/s 00:00

3)验证信任关系(node1、node2)

node1上验证信任

[grid@node1 ~]$ ssh node2date

[grid@node1 ~]$ ssh node2-privdate

[grid@node1 ~]$ ssh node1date

[grid@node1 ~]$ ssh node1-privdate

详细操作如下:

[grid@node1 ~]$ ssh node2date

Thu May 214:46:30 CST 2013

[grid@node1 ~]$ sshnode2-priv date //不要输入密码为信任成功

The authenticity of host 'node2-priv (10.10.10.2)'can't be established.

RSA key fingerprint is 16:28:88:50:27:30:92:cb:49:be:55:61:f6:c2:a1:3f.

Are you sure you want to continue connecting (yes/no) yes

Warning: Permanently added 'node2-priv,10.10.10.2'(RSA) to the list of known hosts.

Thu May 214:47:03 CST 2013

[grid@node1 ~]$ sshnode2-priv date

Thu May 214:47:05 CST 2013

[grid@node1 ~]$ ssh node1date

Thu May 214:48:19 CST 2013

[grid@node1 ~]$ sshnode1-priv date

The authenticity of host 'node1-priv (10.10.10.1)'can't be established.

RSA key fingerprint is39:04:88:3b:54:34:3c:34:d2:df:74:37:fe:5f:92:2d.

Are you sure you want to continue connecting (yes/no) yes

Warning: Permanently added 'node1-priv,10.10.10.1'(RSA) to the list of known hosts.

Thu May 214:48:35 CST 2013

[grid@node1 ~]$ sshnode1-priv date

Thu May 214:48:36 CST 2013

node2上验证信任

[grid@node2 ~]$ ssh node1date

[grid@node2~]$ ssh node1-priv date

[grid@node2 ~]$ ssh node2date

[grid@node2~]$ ssh node2-priv date

声明:
原创作品,出自 “深蓝的blog” 博客,允许转载,转载时请务必注明出处(http://blog.csdn.net/huangyanlong)。

关于涉及版权事宜,作者有权追究法律责任。


************************** 未完待续 敬请关注 **************************************