配置SSH登录无密码验证

如用scp从linux机器A复制到linux 机器B
一般用scp复制需要密码,此时配置好ssh无密码验证,就方便多了。

1:机器A上执行:ssh-keygen -t rsa会在/root/.ssh下面生成两个文件,id_rsa,id_rsa.pub
[root@localhost .ssh]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
/root/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
63:d5:d8:97:c7:65:34:4e:e7:89:69:3d:e4:15:11:d6 root@localhost.localdomain
The key's randomart image is:
+--[ RSA 2048]----+
|X@|
|+X=E|
|o o+o*+|
|... ..|
|S|
|. .|
||
||
||
+-----------------+

2.我们需要的是公钥:id_rsa.pub文件。
[root@localhost .ssh]# ll
total 16
-rw-------. 1 root root816 Aug 12 09:10 authorized_keys
-rw-------. 1 root root 1675 Aug 12 09:12 id_rsa
-rw-r--r--. 1 root root408 Aug 12 09:12 id_rsa.pub
-rw-r--r--. 1 root root790 Aug 11 16:21 known_hosts

3:将公钥传给B机器。
[root@localhost .ssh]# ssh-copy-id -i /root/.ssh/id_rsa.pub root@192.168.88.24
root@192.168.88.24's password:
Permission denied, please try again.
root@192.168.88.24's password:
Now try logging into the machine, with "ssh 'root@192.168.88.24'", and check in:
.ssh/authorized_keys
to make sure we haven't added extra keys that you weren't expecting.

4:默认会在B机器的authorized_keys文件后面追加 A机器的公钥认证
[root@localhost .ssh]# pwd
/root/.ssh
[root@localhost .ssh]# ll
total 16
-rw-------. 1 root root 1224 Aug 12 09:17 authorized_keys
-rw-------. 1 root root 1675 Aug 12 09:12 id_rsa
-rw-r--r--. 1 root root408 Aug 12 09:12 id_rsa.pub
-rw-r--r--. 1 root root790 Aug 11 16:21 known_hosts

【配置SSH登录无密码验证】

    推荐阅读