centos7系统下,实现1台服务器免密登录多台服务器功能

SSH案例:实现kafka01服务器能够免密登录kafka02和kafka03服务器的需求(不然后面一键启动的脚本将无法使用)⭐

  • 1:检查每台服务器是否都安装了SSH:
shell 复制代码
[root@kafka01 ~]# rpm -qa |grep ssh
openssh-clients-7.4p1-21.el7.x86_64
libssh2-1.8.0-4.el7.x86_64
openssh-7.4p1-21.el7.x86_64
openssh-server-7.4p1-21.el7.x86_64
  • 2:在kafka01服务器上执行:(一直按回车即可!)
shell 复制代码
[root@kafka01 ~]# cd /root
shell 复制代码
[root@kafka01 ~]# ssh-keygen
  • 3:查看kafka01的.ssh目录:
    • id_rsa (私钥)
    • id_rsa.pub (公钥)
shell 复制代码
[root@kafka01 ~]# cd /root/.ssh && ls 
id_rsa  id_rsa.pub
  • 4:在kafka01服务器上执行如下命令,将公钥传给kafka02服务器,实现kafka01能够免密登录kafka02:
    • 然后中途需要我们输入kafka02的密码,再按回车即可!
shell 复制代码
[root@kafka01 .ssh]# ssh-copy-id -i ~/.ssh/id_rsa.pub kafka02
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host 'kafka02 (192.168.184.202)' can't be established.
ECDSA key fingerprint is SHA256:VgM185hBJVyOYeb0tUEXlfALadKx63UcN0OeWAWf1CI.
ECDSA key fingerprint is MD5:6e:8a:c1:a5:c7:9a:a0:a9:47:bc:ad:76:1b:93:c7:5f.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@kafka02's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'kafka02'"
and check to make sure that only the key(s) you wanted were added.
  • 5:测试kafka01服务器是否可以免密登录kafka02服务器:(测试成功了如下)
shell 复制代码
[root@kafka01 ~]# ssh kafka02
Last failed login: Wed Aug 31 12:43:58 CST 2022 from kafka01 on ssh:notty
There were 5 failed login attempts since the last successful login.
Last login: Wed Aug 31 10:56:46 2022 from 192.168.184.1
  • 6:在kafka01服务器上,把公钥发给kafka03服务器(实现kafka01能够免密登录kafka02和kafka03服务器):
    • 然后中途需要我们输入kafka03的密码,再按回车即可!
shell 复制代码
[root@kafka01 ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub kafka03
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@kafka03's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'kafka03'"
and check to make sure that only the key(s) you wanted were added.
  • 7:测试kafka01服务器是否可以免密登录kafka03服务器:(测试成功了如下)
shell 复制代码
[root@kafka01 ~]# ssh kafka03
Last login: Wed Aug 31 13:14:03 2022 from kafka01
相关推荐
福建佰胜张工21 小时前
SMC 薄型气爪 MHF2-16D1 深度解析:平行开闭、低剖面结构在自动化装配中的选型与落地
java·服务器·安全·自动化
xuefeiniao1 天前
PHP2Shell漏洞修复
运维·服务器·php
水饺编程1 天前
第2章:Linux 基础,切换到超级用户
linux·c语言·汇编
便利店10241 天前
系统活动一抓留存!深入 Linux C/C++ 调试工具之 sysdig
linux·运维·服务器·sysdig
g3voip1 天前
工业防水电话到底怎么选?隧道、管廊与码头的需求差异
服务器·网络·信息与通信·ip
qetfw1 天前
Bash 变量:export、位置参数与默认值展开验证
linux·开发语言·chrome·bash
其实防守也摸鱼1 天前
Cylab在线靶场——CTF中的通用技能
linux·数据库·学习·算法·靶场·ctf·学习网络安全
.Bryce.1 天前
从强化学习到Agentic RL:让Agent在“干活“中自己变聪明
服务器·网络·agent·rag·agentic rl
ZYH_06011 天前
rhcsa课程复习题
服务器·bash
用户565190394491 天前
高危 编号99999漏洞情报(26年8-10月) 多个严重漏洞:PHP执行远程控制代码 / Linux虚拟机-宿主越界(CVE-2026-99999...
服务器