建立公匙认证.docVIP

How to set up RSA public key and private key authentication 前提准备: 在Windows系统下安装cygwin 环境. 打开cygwin,输入ssh-keygen -t? rsa当提问Enter file in which to save the key (/home/username/.ssh/id_rsa): 时，直接回车当提问Enter passphrase (empty for no passphrase)时，直接回车 内部网络图 复制公匙到运行着sshd服务的linux主机：scp? .ssh/id_rsa.pub? username@remotehost:~(remotehost可以是host名或IP地址)?ssh ?username@remotehostmkdir? .ssh如果~/.ssh/authorized_keys文件已经存在，无须删除，只需把新的公匙添加到该文件中即可，命令：cat? id_rsa.pub? .ssh/authorized_keys如 ~/.ssh/authorized_keys 文件不存在，执行:mv? id_rsa.pub?? .ssh/authorized_keys 复制公匙到运行着sshd服务的LRP主机 如果远程主机已经存在文件： /root/.ssh/authorized_keys, 如果不想删除该文件，只需要执行: scp? .ssh/id_rsa.pub?? root@remotebox:/root/.ssh/newkeyssh? root@remoteboxcd?? /root/.sshcat? newkey? ? authorized_keys ?(把newkey添加到authorized_keys文件中) (If you like, make the keys permanent by typing lrcfg and backup root ) 如果远程主机不存在/root/.ssh/authorized_keys文件:ssh? root@remoteboxcd?? /rootmkdir .sshscp? .ssh/id_rsa.pub? root@remotebox:/root/.ssh/authorized_keys 测试公匙认证:ssh? username@remotehost??(to a Linux machine) ssh? root@remotehost?? (to a LRP box)(remotehost can be a host name, or an ip address) 如果上述操作不成功，检查sshd的配置文件:vi?? /etc/ssh/sshd_config? (on the Linux box)RSAAuthentication?? yes PubkeyAuthentication? yes orae? /etc/ssh/sshd_config?? (on the LRP box)RSAAuthentication?? yesPubkeyAuthentication? yes