Build oracle11g RAC 64 cluster environment based on CentOS and VMWARESTATION10:2. Build Environment-2.9. Configure user equivalence (optional)

2.9. Configure user equivalence (optional)

Oracle 11g R2 SSH can also be configured during the installation process.

2.9.1. Grid user Equivalence

1. The following are performed with a grid user: Create the. SSH directory in the grid home directory of the two nodes, and give permissions

Linuxrac1 [[Email protected] ~] $mkdir ~/.ssh [[Email protected] ~] $chmod 755 ~/.SSH [[Email protected] ~] $SSH-keygen-t RSA Generating public/private RSA key pair. Enter file in which to save the key (/HOME/GRID/.SSH/ID_RSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved In/home/grid/.ssh/id_rsa. Your public key has been saved in/home/grid/.ssh/id_rsa.pub. The key fingerprint is: 7a:7b:62:31:da:07:88:0d:22:46:46:28:d1:cc:87:e1 [email protected] [[Email protected] ~] $ssh-keygen-t DSA Generating Public/private DSA key pair. Enter file in which to save the key (/HOME/GRID/.SSH/ID_DSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved IN/HOME/GRID/.SSH/ID_DSA. Your public key has been saved in/home/grid/.ssh/id_dsa.pub. The key fingerprint is: 19:3b:fc:23:85:8d:f4:58:7d:f6:fd:80:99:ce:f8:52 [email protected] Linuxrac2 [Email protected] ~]$ mkdir ~/.ssh [Email protected] ~]$ chmod 755 ~/.ssh [[email protected] ~]$ ssh-keygen-t RSA Generating public/private RSA key pair. Enter file in which to save the key (/HOME/GRID/.SSH/ID_RSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved In/home/grid/.ssh/id_rsa. Your public key has been saved in/home/grid/.ssh/id_rsa.pub. The key fingerprint is: 69:8C:94:2B:2B:A4:8D:33:82:8F:B0:49:03:A1:1A:B9 [email protected] [Email protected] ~]$ ssh-keygen-t DSA Generating Public/private DSA key pair. Enter file in which to save the key (/HOME/GRID/.SSH/ID_DSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved IN/HOME/GRID/.SSH/ID_DSA. Your public key has been saved in/home/grid/.ssh/id_dsa.pub. The key fingerprint is: 1f:4d:e7:3f:c7:4d:d8:f0:55:f0:eb:c1:ea:74:93:24 [email protected] The above with the default configuration , You can return Linuxrac1 Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys Or SSH [email protected] Cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys [Email protected] ~]$ CD. SSH [email protected]. ssh]$ LL Total 48 -rw-r--r--1 grid oinstall Sep 00:48 Authorized_keys -RW-------1 grid oinstall 668 Sep 00:43 ID_DSA -rw-r--r--1 grid oinstall 604 SEP 00:43 id_dsa.pub -RW-------1 grid oinstall 1675 Sep 00:42 Id_rsa -rw-r--r--1 grid oinstall 396 SEP 00:42 id_rsa.pub -rw-r--r--1 grid oinstall 404 Sep 00:48 known_hosts Linuxrac2 Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys Or SSH [email protected] Cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

2. Establishment of equivalence RAC1,RAC2 two-node execution

[email protected] ~]$ exec ssh-agent $SHELL [Email protected] ~]$ Ssh-add Identity added:/home/grid/.ssh/id_rsa (/HOME/GRID/.SSH/ID_RSA) Identity added:/home/grid/.ssh/id_dsa (/HOME/GRID/.SSH/ID_DSA) [[email protected] ~]$ ssh linuxrac1 date [[email protected] ~]$ ssh linuxrac1-priv date [[email protected] ~]$ ssh linuxrac2 date [[email protected] ~]$ ssh linuxrac2-priv date SSH LINUXRAC1 date; SSH LINUXRAC2 Date

[[email protected "~]$ exec Ssh-agent $SHELL [[email protected] ~]$ Ssh-add identity added:/home/grid/.ssh/id_rsa (/home/grid/.ssh /ID_RSA) identity added:/home/grid/.ssh/id_dsa (/home/ GRID/.SSH/ID_DSA) [[email protected] ~]$ SSH linuxrac1 date [[email protected] ~]$ ssh linuxrac1-priv Date [[email protected] ~]$ ssh linuxrac2 date [[email protected] ~]$ ssh linuxrac2-priv Date

2.9.2. Oracle User Equivalence

The following are performed by Oracle users

Linuxrac1 [Oracle @linuxrac1 ~] $mkdir ~/.ssh [Oracle @linuxrac1 ~] $chmod 755 ~/.SSH [Oracle @linuxrac1 ~] $SSH-keygen-t RSA Generating public/private RSA key pair. Enter file in which to save the key (/HOME/ORACLE/.SSH/ID_RSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved In/home/oracle/.ssh/id_rsa. Your public key has been saved in/home/oracle/.ssh/id_rsa.pub. The key fingerprint is: E9:2B:1A:2B:AC:5F:91:BE:0F:84:17:D7:BD:B7:15:D2 [email protected] [Oracle @linuxrac1 ~] $SSH-keygen-t DSA Generating Public/private DSA key pair. Enter file in which to save the key (/HOME/ORACLE/.SSH/ID_DSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved IN/HOME/ORACLE/.SSH/ID_DSA. Your public key has been saved in/home/oracle/.ssh/id_dsa.pub. The key fingerprint is: f5:0f:f5:0c:55:37:6a:08:ef:06:07:37:65:25:4a:15 [email protected] Linuxrac2 [Oracle @linuxrac2 ~]$ mkdir ~/.ssh [Oracle @linuxrac2 ~]$ chmod 755 ~/.ssh [Oracle @linuxrac2 ~]$ ssh-keygen-t RSA Generating public/private RSA key pair. Enter file in which to save the key (/HOME/ORACLE/.SSH/ID_RSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved In/home/oracle/.ssh/id_rsa. Your public key has been saved in/home/oracle/.ssh/id_rsa.pub. The key fingerprint is: 56:47:A0:94:67:44:D9:31:12:57:44:08:9D:84:25:A1 [email protected] [Oracle @linuxrac2 ~]$ ssh-keygen-t DSA Generating Public/private DSA key pair. Enter file in which to save the key (/HOME/ORACLE/.SSH/ID_DSA): Enter passphrase (empty for no passphrase): Enter same Passphrase again: Your identification has been saved IN/HOME/ORACLE/.SSH/ID_DSA. Your public key has been saved in/home/oracle/.ssh/id_dsa.pub. The key fingerprint is: ae:f0:06:77:62:33:86:dc:f4:0d:d9:c6:38:5e:cb:61 [email protected] The above with the default configuration, a return to Linuxrac1 Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys Or SSH [email protected] Cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys [[Email protected] ~]$ CD. SSH [email protected]. ssh]$ LL Total 48 -rw-r--r--1 Oracle oinstall SEP 02:20 Authorized_keys -RW-------1 Oracle oinstall 668 SEP 02:09 ID_DSA -rw-r--r--1 Oracle Oinstall 606 SEP 02:09 id_dsa.pub -RW-------1 Oracle oinstall 1675 SEP 02:09 Id_rsa -rw-r--r--1 Oracle oinstall 398 SEP 02:09 id_rsa.pub -rw-r--r--1 Oracle oinstall 404 Sep 02:20 known_hosts Linuxrac2 Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/*.pub >> ~/.ssh/authorized_keys Or SSH [email protected] Cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys SSH [email protected] Cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

Establishment of equivalence RAC1,RAC2 two-node execution

[email protected] ~]$ exec ssh-agent $SHELL [Email protected] ~]$ Ssh-add Identity added:/home/oracle/.ssh/id_rsa (/HOME/ORACLE/.SSH/ID_RSA) Identity added:/home/oracle/.ssh/id_dsa (/HOME/ORACLE/.SSH/ID_DSA) [[email protected] ~]$ SSH linuxrac1 date [[email protected] ~]$ SSH linuxrac1-priv date [[email protected] ~]$ SSH LINUXRAC2 date [[email protected] ~]$ SSH linuxrac2-priv date [email protected] ~]$ exec ssh-agent $SHELL [Email protected] ~]$ Ssh-add Identity added:/home/oracle/.ssh/id_rsa (/HOME/ORACLE/.SSH/ID_RSA) Identity added:/home/oracle/.ssh/id_dsa (/HOME/ORACLE/.SSH/ID_DSA)

• The authenticity of host '   

Workaround: Execute on the connection target machine ssh-o stricthostkeychecking=no xxxx ( machine name )

Build oracle11g RAC 64 cluster environment based on CentOS and VMWARESTATION10:2. Build the environment-2.9. Configure user equivalence (optional)