ssh 免密登录配置:
背景:每次登陆要输入密码,比较烦。
解决方案:下面以mac为例提供一个方法一劳永逸不用记密码,不用输密码:
1. 在mac上ssh-keygen ss–t rsa –P '' -->直接回车生成的密钥对:id_rsa和id_rsa.pub,。
localhost:.ssh ouyang$ pwd/Users/ouyang/.ssh
localhost:.ssh ouyang$ ls
id_rsa known_hosts id_rsa.pub root@192.168.32.432.
2. 把本机的公钥id_rsa.pub拷贝到远程服务器的.ssh/目录下
localhost:.ssh ouyang$ scp id_rsa.pub root@192.168.21.31:/root/.ssh/.
[root@vm31 .ssh]# ls -alt
-rw-r--r--. 1 root root 398 7月 17 11:20 id_rsa.pub
drwx------. 2 root root 4096 7月 17 11:20 .
dr-xr-x---. 16 root root 4096 7月 16 18:08 ..
-rw-r--r--. 1 root root 176 7月 11 15:36 known_hosts
3.登陆服务器并把拷贝过来的id_rsa.pub 加入到当前机器的authorized_keys,并赋予权限
cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
[root@vm31 .ssh]# cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys
[root@vm31 .ssh]# chmod 600 ~/.ssh/authorized_keys
4.测试是否配置成功
localhost:~ ouyang$ ssh root@192.168.21.31Last login: Tue Jul 17 11:20:49 2018 from 172.16.144.113
特别提醒:
增加别名登陆会更加方便哟:
1: 在本机的.ssh文件下创建config文件
配置别名登陆,权限均修改成 600
vi config
# Host为登录时的别名,ssh 66
Host 11
HostName 192.168.1.11
Port 22
User root
IdentityFile ~/.ssh/id_rsa
IdentitiesOnly yes
Host 12
HostName 192.168.1.12
Port 22
User root
IdentityFile ~/.ssh/id_rsa
IdentitiesOnly yes
chmod config