SSH验证问题

whd

我的两台redhat  4   做RAC
以oracle用户登录，分别在两台机器上作(red1 red2)


mkdir ~/.ssh
chmod 700 ~/.ssh
ssh-keygen -t rsa
ssh-keygen -t dsa


然后在RAC1上执行
red1-> cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
red1-> cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys
red1-> ssh rac2 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys
red1-> scp ~/.ssh/authorized_keys rac2:~/.ssh/authorized_keys

然后验证
[oracle@Red1 .ssh]$ ls -l
total 24
-rw-r--r--  1 oracle oinstall 1644 Aug 13 11:32 authorized_keys
-rw-------  1 oracle oinstall  668 Aug 13 11:24 id_dsa
-rw-r--r--  1 oracle oinstall  601 Aug 13 11:24 id_dsa.pub
-rw-------  1 oracle oinstall  887 Aug 13 11:24 id_rsa
-rw-r--r--  1 oracle oinstall  221 Aug 13 11:24 id_rsa.pub
-rw-r--r--  1 oracle oinstall  454 Aug 13 11:36 known_hosts

[oracle@Red1 .ssh]$ ssh red1 date
oracle@red1's password:
Wed Aug 13 11:55:51 CST 2008
[oracle@Red1 .ssh]$ ssh red1 date
oracle@red1's password:
Wed Aug 13 11:55:56 CST 2008

[[oracle@Red1 .ssh]$ ssh red2 date
oracle@red2's password:
Wed Aug 13 11:59:40 CST 2008
[[oracle@Red1 .ssh]$ ssh red2 date
oracle@red2's password:
Wed Aug 13 11:59:40 CST 2008

为啥还是要提示我输入密码呢，我的第二台机器是vmware copy过来，oracle 用户设置都一样的，ping red red-priv等都成功
为何就是不能实现免密码呢，各位帮我看看呢

liaosnet

是把red1 上的id_rsa.pub的输入>>　到red2上的~/.ssh/authorized_keys中
red2的到red1上.....不是本机..

whd

我的是把red1的输入到本机，再把red2的也输入到本机， 然后copy覆盖到red2的机器上，保持同步的
我的步骤应该没问题，是照文档作的，估计那里设置不到或有权限什么的问题，大家帮助看看呢

liaosnet

ssh oracle@red2
ssh oracle@red1

whd

[oracle@Red2 ~]$ ssh oracle@red2
oracle@red2's password:
Last login: Wed Aug 13 13:50:20 2008 from red2
-bash: Export: command not found
[oracle@Red2 ~]$ ssh oracle@red2
oracle@red2's password:
Last login: Wed Aug 13 13:50:34 2008 from red2
-bash: Export: command not found
[oracle@Red2 ~]$ ssh oracle@red1
The authenticity of host 'red1 (109.119.7.21)' can't be established.
RSA key fingerprint is d9:ef:38:17:b0:67:59:e6:41:37:c1:fe:e5:38:ae:4e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'red1,109.119.7.21' (RSA) to the list of known hosts.
oracle@red1's password:
Last login: Wed Aug 13 13:41:38 2008 from 109.119.17.173
-bash: Export: command not found
[oracle@Red1 ~]$ ssh oracle@red1
oracle@red1's password:
Last login: Wed Aug 13 13:51:25 2008 from red2
-bash: Export: command not found
[oracle@Red1 ~]$


不行啊，也试过的

guodonggaga

RSA实现无密码认证：以Root身份登陆机器Ａ，执行ssh-keygen –t rsa，一路回车，在Root/.ssh/下会生成２个文件id_rsa和id_rsa.pub，在机器Ｂ的Root目录下建立目录.ssh，在.ssh目录下创建文件authorized_keys，把机器Ａ上id_rsa.pub文件里的内容复制到authorized_keys里并保存，通过机器Ａ登陆机器Ｂ(ssh –p机器B端口号 [email=root@机器Ｂ]root@机器Ｂ[/email])，登陆成功后机器Ａ就会记录下机器Ｂ的信息，以后从机器Ａ上登陆机器Ｂ就不用输入密码，实现了直接登陆。

whd

步骤我都很清楚了，就是还是不能实现不输密码登录，每次连接都要密码，郁闷死了/

whd

难道AS4 up3的SSH有问题么

liaosnet

我这里没有问题~~~~~ 你还是暂时不做dsa那个吧~~

gyp334a

你的sshd_config配了吗？
如果配了贴出来看看。。