本篇內(nèi)容主要講解“l(fā)inux遠(yuǎn)程登錄ssh免密碼配置的方法是什么”，感興趣的朋友不妨來(lái)看看。本文介紹的方法操作簡(jiǎn)單快捷，實(shí)用性強(qiáng)。下面就讓小編來(lái)帶大家學(xué)習(xí)“l(fā)inux遠(yuǎn)程登錄ssh免密碼配置的方法是什么”吧!

創(chuàng)新互聯(lián)公司主營(yíng)柯城網(wǎng)站建設(shè)的網(wǎng)絡(luò)公司,主營(yíng)網(wǎng)站建設(shè)方案,重慶App定制開(kāi)發(fā),柯城h5重慶小程序開(kāi)發(fā)搭建,柯城網(wǎng)站營(yíng)銷推廣歡迎柯城等地區(qū)企業(yè)咨詢

一、情景

把主機(jī)之間都能遠(yuǎn)程ssh免密碼登陸。

二、原理
很簡(jiǎn)單，使用ssh-keygen 在主機(jī)a上生成private和public密鑰，將生成的public密鑰拷貝到遠(yuǎn)程機(jī)器主機(jī)b上后,就可以使用ssh命令無(wú)需密碼登錄到另外一臺(tái)機(jī)器主機(jī)b上。

三、步驟

主機(jī)a：

1、 生成公鑰和私鑰文件id_rsa和id_rsa.pub （敲3下回車即可）
[root@bogon ~]# ssh-keygen -t rsa
generating public/private rsa key pair.
enter file in which to save the key (/root/.ssh/id_rsa):
enter passphrase (empty for no passphrase):
enter same passphrase again:
your identification has been saved in /root/.ssh/id_rsa.
your public key has been saved in /root/.ssh/id_rsa.pub.
the key fingerprint is:
67:da:0d:79:e0:d6:2b:cd:7d:22:af:51:7e:9c:75:fe root@bogon
the key's randomart image is:
+--[ rsa 2048]----+
| |
| |
| . |
| . + |
| s b o . o|
| * * = o+|
| . o b +.=|
| . + +.|
| ... e|
+-----------------+

2、ssh-cop-id命令會(huì)將指定的公鑰文件復(fù)制到遠(yuǎn)程計(jì)算機(jī)

[root@bogon ~]# ssh-copy-id -i ~/.ssh/id_rsa.pub root@10.1.250.166
the authenticity of host '10.1.250.166 (10.1.250.166)' can't be established.
rsa key fingerprint is c8:9d:6d:92:55:77:3d:3e:af:f5:cb:18:80:5a:47:93.
are you sure you want to continue connecting (yes/no)? yes
warning: permanently added '10.1.250.166' (rsa) to the list of known hosts.
reverse mapping checking getaddrinfo for bogon [10.1.250.166] failed - possible break-in attempt!
root@10.1.250.166's password: <主機(jī)b的登陸密碼>
now try logging into the machine, with "ssh 'root@10.1.250.166'", and check in:

.ssh/authorized_keys

to make sure we haven't added extra keys that you weren't expecting.

3、然后ssh登陸主機(jī)b驗(yàn)證是否需要密碼

[root@localhost ~]# ssh 10.1.250.166
reverse mapping checking getaddrinfo for bogon [10.1.250.166] failed - possible break-in attempt!
last login: wed oct 21 10:05:39 2015 from 10.1.250.141
[root@bogon ~]#

4、登陸成功后，我們需要在主機(jī)b也做下以上3步，這樣就可以相互免密碼ssh登陸。（如果有多臺(tái)主機(jī)，每臺(tái)主機(jī)都做下相同操作，以方便以后管理）。

5、權(quán)限問(wèn)題
建議用其他用戶做ssh登陸的話，調(diào)整目錄文件權(quán)限
設(shè)置authorized_keys權(quán)限

chmod 644 authorized_keys

設(shè)置.ssh目錄權(quán)限

chmod 700 -r .ssh

6、要保證.ssh和authorized_keys都只有用戶自己有寫(xiě)權(quán)限。否則驗(yàn)證無(wú)效。

到此，相信大家對(duì)“l(fā)inux遠(yuǎn)程登錄ssh免密碼配置的方法是什么”有了更深的了解，不妨來(lái)實(shí)際操作一番吧！這里是創(chuàng)新互聯(lián)網(wǎng)站，更多相關(guān)內(nèi)容可以進(jìn)入相關(guān)頻道進(jìn)行查詢，關(guān)注我們，繼續(xù)學(xué)習(xí)！