一、 SSH无密码远程登录原理
二、 SSH实现无密码远程登录
实现主机A 无密码远程登录主机B
主机A IP地址：10.8.9.154
主机B IP地址：10.8.9.155
1、 主机A操作如下：
[[email protected] .ssh]# pwd #一般SSH生成公钥和私密会在.ssh目录下，如果没有此目录可以手动创建
/root/.ssh
[[email protected] .ssh]# ls #一般.ssh目录会存在一个文件known_hosts，此文件主要记录本地SSH远程登录过哪些主机
known_hosts
[[email protected] .ssh]# ssh-keygen -t rsa -P ‘‘ #执行ssh-keygen生成公钥和私钥，-P表示密码，’’ 表示空密码，也可以不使用 –P 参数，这样就要按三次回车，用 -P就输入一次回车
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): #按一次回车键即可
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
9c:f5:83:54:fd:da:6b:1a:9b:e3:d8:cf:ca:c9:b3:b4 [email protected]
The key‘s randomart image is:
+--[ RSA 2048]----+
| .. |
| . . |
| o . |
| . + o .|
| S . o o |
| .. .|
| o .|
| *oBo |
| ..EOo |
+-----------------+
[[email protected] .ssh]# ls # id_rsa（私钥） id_rsa.pub （公钥）
id_rsa id_rsa.pub known_hosts
[[email protected] .ssh]# scp /root/.ssh/id_rsa.pub [email protected]:/root/.ssh/authorized_keys #把主机A /root/.ssh/id_rsa.pub 公钥复制到主机B /root/.ssh/authorized_keys文件里(要确认主机B已经创建好/root/.ssh目录)，由于还没有免密码登录，所以要输入一次B主机的root密码
[email protected]‘s password: #输入主机B的密码
id_rsa.pub 100% 400 0.4KB/s 00:00
注意：主机B 目录/root/.ssh/authorized_keys文件需要具有读写权限，否则会提示远程失败
[[email protected] .ssh]# ls -l authorized_keys
-rw-r--r-- 1 root root 400 Jun 5 11:47 authorized_keys
现在主机A可以实现SSH无密码远程登录主机B （如果第一次登录需要输入 yes）
[[email protected] .ssh]# ssh [email protected] ‘chmod 600 /root/.ssh/authorized_keys ; ls -l /root/.ssh/authorized_keys‘ #执行SSH远程主机B修改authorized_keys文件权限
-rw-------. 1 root root 400 1月 6 02:02 /root/.ssh/authorized_keys
特殊问题：
问题：如果执行scp或ssh命令远程连接特殊慢才显示出输入密码提示还提示错误信息
[[email protected] .ssh]# scp /root/.ssh/id_rsa.pub [email protected]:/root/.ssh/authorized_keys #执行scp命令远程复制会出现连接缓慢并且还有警告
The authenticity of host ‘10.8.9.155 (10.8.9.155)‘ can‘t be established.
RSA key fingerprint is b6:a2:4d:65:af:cf:19:97:99:ff:1e:99:5f:ec:1b:7a.
Are you sure you want to continue connecting (yes/no)? yes #第一次登录，所以需要输入 yes
Warning: Permanently added ‘10.8.9.155‘ (RSA) to the list of known hosts.
解决办法：修改SSH配置文件/etc/ssh/ssh_config，手动添加GSSAPIAuthentication no
[[email protected] .ssh]#vim /etc/ssh/ssh_config
GSSAPIAuthentication no
[[email protected] .ssh]# scp /root/.ssh/id_rsa.pub [email protected]:/root/.ssh/authorized_keys
[email protected]‘s password: