SSH互信

机器A(172.172.178.40) 和 B(172.172.178.90)。 A机器可以通过SSH免密码登录到B机器

1.在A(172.172.178.40)机下生成公钥/私钥对。

[root@localhost ~]$ ssh-keygen -t rsa -P ”

-P表示密码，-P ” 就表示空密码，也可以不用-P参数，这样就要三车回车，用-P就一次回车。
它在/root下生成.ssh目录，.ssh下有id_rsa和id_rsa.pub。

2.把A机下的id_rsa.pub复制到B机下，在B机的.ssh/authorized_keys文件里，我用scp复制。

[root@localhost ~]$ scp .ssh/id_rsa.pub root@172.172.178.90:/root/id_rsa.pub

root@172.172.178.40’s password:

id_rsa.pub 100% 223 0.2KB/s
00:00

由于还没有免密码登录的，所以要输入密码。

3.B机把从A机复制的id_rsa.pub添加到.ssh/authorzied_keys文件里。

[root@B ~]$ cat id_rsa.pub >> .ssh/authorized_keys

[root@B ~]$ chmod 600 .ssh/authorized_keys

authorized_keys的权限要是600。

4.A机登录B机。

[root@localhost ~]$ ssh 172.172.178.90

当然，也可以使用脚本的方式，自动完成SSH互信

#!/usr/bin/expect
set timeout 10
set username [lindex $argv 0]
set password [lindex $argv 1]
set hostname [lindex $argv 2]
spawn ssh-copy-id -i /root/.ssh/id_rsa.pub $username@$hostname
expect {
            #first connect, no public key in ~/.ssh/known_hosts
            "Are you sure you want to continue connecting (yes/no)?" {
            send "yes\r"
            expect "password:"
                send "$password\r"
            }
            #already has public key in ~/.ssh/known_hosts
            "password:" {
                send "$password\r"
            }
            "Now try logging into the machine" {
                #it has authorized, do nothing!
            }
        }
expect eof

使用方法为：

./auto_ssh.sh root “vi1_8O5_re4H” 172.172.178.XX