配置SSH登录无密码验证

如用scp  从linux机器A  复制到  linux 机器B

一般用scp复制需要密码，此时配置好ssh无密码验证，就方便多了。

 

1：机器A上执行：ssh-keygen -t rsa   会在/root/.ssh下面生成两个文件，id_rsa  ,id_rsa.pub

[root@localhost .ssh]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
/root/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
63:d5:d8:97:c7:65:34:4e:e7:89:69:3d:e4:15:11:d6 root@localhost.localdomain
The key's randomart image is:
+--[ RSA 2048]----+
|               X@|
|           +  X=E|
|          o o+o*+|
|         .  .. ..|
|        S        |
|       . .       |
|                 |
|                 |
|                 |
+-----------------+

 

2.我们需要的是公钥：id_rsa.pub  文件。

[root@localhost .ssh]# ll
total 16
-rw-------. 1 root root  816 Aug 12 09:10 authorized_keys
-rw-------. 1 root root 1675 Aug 12 09:12 id_rsa
-rw-r--r--. 1 root root  408 Aug 12 09:12 id_rsa.pub
-rw-r--r--. 1 root root  790 Aug 11 16:21 known_hosts

 

3：将公钥传给B机器。

[root@localhost .ssh]# ssh-copy-id -i /root/.ssh/id_rsa.pub root@192.168.88.24
root@192.168.88.24's password: 
Permission denied, please try again.
root@192.168.88.24's password: 
Now try logging into the machine, with "ssh 'root@192.168.88.24'", and check in:

  .ssh/authorized_keys

to make sure we haven't added extra keys that you weren't expecting.

 

4：默认会在B机器的authorized_keys文件后面追加 A机器的公钥认证

[root@localhost .ssh]# pwd
/root/.ssh
[root@localhost .ssh]# ll
total 16
-rw-------. 1 root root 1224 Aug 12 09:17 authorized_keys
-rw-------. 1 root root 1675 Aug 12 09:12 id_rsa
-rw-r--r--. 1 root root  408 Aug 12 09:12 id_rsa.pub
-rw-r--r--. 1 root root  790 Aug 11 16:21 known_hosts