配置oracle用户ssh对等性,配置SSH的对等性传送ORACLE错位的归档日志文件

在所有节点配置SSH的对等性

在安装Oracle Real Application clusters之前,必须先配置所有节点的SSH对等性。

因为在安装过程种Oracle Universal Installer使用ssh和scp命令执行远程命令

执行及copy的工作,还可以用来传送错位的归档日志文件。[@more@]

下面是具体的步骤：

以下步骤在所有节点上执行

以oracle用户登陆

# su – oracle

==========================================================

在两个节点的oracle主目录分别创建.ssh目录，并赋予权限。

==========================================================

# mkdir /opt/oracle/.ssh

# chmod 755 /opt/oracle/.ssh

在svr2节点上配置:

[oracle@svr2 .ssh]$ /usr/bin/ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key (/opt/oracle/.ssh/id_rsa):回车

Enter passphrase (empty for no passphrase):回车

Enter same passphrase again:回车

Your identification has been saved in id_rsa.

Your public key has been saved in id_rsa.pub.

The key fingerprint is:

0f:bc:e2:f2:d2:ad:46:1b:c5:65:f7:9e:61:52:51:29

[oracle@svr2 .ssh]$ /usr/bin/ssh-keygen -t dsa

Generating public/private dsa key pair.

Enter file in which to save the key (/opt/oracle/.ssh/id_dsa): 回车

Enter passphrase (empty for no passphrase):回车

Enter same passphrase again:回车

Your identification has been saved in id_dsa.

Your public key has been saved in id_dsa.pub.

The key fingerprint is:

8b:1a:87:f9:de:9f:90:77:db:46:47:bb:4b:40:cf:b8

[oracle@svr2 .ssh]$>/opt/oracle/.ssh/authorized_keys

[oracle@svr2 .ssh]$ touch /opt/oracle/.ssh/authorized_keys

[oracle@svr2 .ssh]$ ls -lt

总用量 20

-rw-r--r-- 1 oracle dba 0 4月 24 08:36 authorized_keys

-rw------- 1 oracle dba 668 4月 24 08:34 id_dsa

-rw-r--r-- 1 oracle dba 601 4月 24 08:34 id_dsa.pub

-rw------- 1 oracle dba 887 4月 24 08:33 id_rsa

-rw-r--r-- 1 oracle dba 221 4月 24 08:33 id_rsa.pub

drwxr-xr-x 2 oracle dba 4096 4月 15 18:07 bak

[oracle@svr2 .ssh]$ uname -n

svr2

[oracle@svr2 .ssh]$ ssh svr2 cat /opt/oracle/.ssh/id_dsa.pub>>/opt/oracle/.ssh/authorized_keys

[oracle@svr2 .ssh]$ ssh svr2 cat /opt/oracle/.ssh/id_rsa.pub>>/opt/oracle/.ssh/authorized_keys

[oracle@svr2 .ssh]$ ssh svr1 cat /opt/oracle/.ssh/id_dsa.pub>>/opt/oracle/.ssh/authorized_keys

[oracle@svr2 .ssh]$ ssh svr1 cat /opt/oracle/.ssh/id_rsa.pub>>/opt/oracle/.ssh/authorized_keys

==========================================================

Accept the default location for the key file.

Enter and confirm a pass phrase that is different from the oracle user’s password. phrase

密码处直接回车即可

PS：如果提示是否连接选择yes，密码输入oracle用户的密码

==========================================================

[oracle@svr2 .ssh]$ chmod 644 /opt/oracle/.ssh/authorized_keys

==========================================================

防止X11转发造成的安装失败,创建~ /.ssh/config，并加入如下内容。

==========================================================

[oracle@svr2 .ssh]$ vi config

Host *

ForwardX11 no

==========================================================

测试svr2如下显示正常

==========================================================

[root@svr2 root]# su - oracle

[oracle@svr2 oracle]$ exec /usr/bin/ssh-agent $SHELL

[oracle@svr2 oracle]$ ssh svr1 date

Thu Apr 24 08:47:15 CST 2008

[oracle@svr2 oracle]$ ssh svr2 date

Thu Apr 24 08:47:29 CST 2008

对另一节点svr1如上述步骤配置

==========================================================

利用SSH进行文件传递

==========================================================

对错位的归档日志可以利用SCP来传递

crontab -l

0 10,16,22 * * * /sh/rcp.sh >>/sh/rcp_arch.log 2>&1|echo "`date`.../arch/ARC_0002* sent to svr2's archivelog ok..." >>/sh/rcp_arch.log

==========================================================

/sh/rcp.sh内容如下:

==========================================================

[oracle@svr1 sh]$ more rcp.sh

gdbase=/opt/oracle/arch

for bd in `if test -f /opt/oracle/arch/ARC_0001*;then ls /opt/oracle/arch/ARC_0001*;else echo;fi`;do

scp $bd svr2:/opt/oracle/arch/

if test $? -eq 0;then

rm $bd

fi

done