Linux 添加ssh key认证

Paste_Image.png

1、生成key

ssh-keygen -t
ls
id_rsa  id_rsa.pub

2、使当前主机也可以用刚才生成的key登陆

cat id_rsa.pub > /root/.ssh/authorized_keys
# ls /root/.ssh/
authorized_keys  known_hosts

3、下载key

# sz id_rsa

4、修改ssh配置文件

# vim /etc/ssh/sshd_config
PubkeyAuthentication yes
AuthorizedKeysFile /root/.ssh/authorized_keys
PasswordAuthentication no /*禁止密码验证登录

5、重启ssh服务(非必要)

# service sshd restart
停止 sshd：                                                [确定]
正在启动 sshd：                                            [确定]

6、复制公钥到其他机器（104.5为目标机器）

# ssh-copy-id -i ./id_rsa [email protected]
[email protected]'s password: 
Now try logging into the machine, with "ssh '[email protected]'", and check in:

  .ssh/authorized_keys

to make sure we haven't added extra keys that you weren't expecting.

7、登录验证

# ssh -i id_dsa [email protected]
Last login: Mon Dec 28 11:07:31 2015 from 192.168.104.1
[root@host-192-168-104-5 ~]# 

8、批量拷贝到其他机器可以使用

ansible all -i ../iplist -m shell -a "mkdir /home/admin/.ssh" -u admin
ansible all -i ../iplist -m copy -a "src=./online_id_rsa.pub dest=/home/admin/.ssh/authorized_keys" -u admin
ansible all -i ../iplist  -m shell -a "chmod 700 /home/admin/.ssh" -u admin
ansible all -i ../iplist  -m shell -a "chmod 600 /home/admin/.ssh/authorized_keys" -u admin