服务器之间做互信

•                               服务器之间做互信
  

expect是交互性很强的脚本语言，可以帮助运维人员实现批量管理成千上百台服务器操作，是一款很实用的批量部署工具！expect依赖于tcl，而linux系统里一般不自带安装tcl，所以需要手动安装。选择其中的任意一台服务器上操作，比如这里还是选择192.168.10.202这台机器。expect-5.43.0.tar和tcl8.4.11-src.tar 的下载地址：https://pan.baidu.com/s/1kVyeLt9 提取密码：af9p
将expect和tcl的软件包下载放到/usr/local/src目录下，解压tcl，进入tcl解压目录，然后进入unix目录进行编译安装
[root@server-202 ~]# cd /usr/local/src/
[root@server-202 src]# tar -zvxf tcl8.4.11-src.tar.gz
[root@server-202 src]# cd tcl8.4.11/unix
[root@server-202 unix]# ./configure
[root@server-202 unix]# make && make install

安装expect
[root@server-202 src]# tar -zvxf expect-5.43.0.tar.gz
[root@server-202 src]# cd expect-5.43.0
[root@server-202 expect-5.43.0]# ./configure --with-tclinclude=/usr/local/src/tcl8.4.11/generic --with-tclconfig=/usr/local/lib/
[root@server-202 expect-5.43.0]# make && make install

安装完成后进行测试
[root@server-202 ~]# expect
expect1.1>

[root@server-202 ~]# which expect
/usr/local/bin/expect

做个expect执行文件的软件
[root@server-202 ~]# ln -s /usr/local/bin/expect /usr/bin/expect
[root@server-202 ~]# ll /usr/bin/expect

批量实现信任关系的脚本如下：
[root@server-202 ~]# vim /opt/ssh_auth.sh
#!/bin/sh
DEST_USER=$1
PASSWORD=$2
HOSTS_FILE=$3
if [ $# -ne 3 ]; then
echo “Usage:”
echo “$0 remoteUser remotePassword hostsFile”
exit 1
fi

SSH_DIR=~/.ssh
SCRIPT_PREFIX=./tmp
echo ===========================

1. prepare directory .ssh

mkdir $SSH_DIR
chmod 700 $SSH_DIR

2. generat ssh key

TMP_SCRIPT=KaTeX parse error: Expected 'EOF', got '#' at position 25: …EFIX.sh echo "#̲!/usr/bin/expec…TMP_SCRIPT
echo “spawn ssh-keygen -b 1024 -t rsa”>>$TM{P}_{S}CRIPTecho"expect\ast key\ast ">>$TMP_SCRIPT
echo “send \r”>>$TMP_SCRIPT
if [ -f $SS{H}_D$