Configure SSH user equivalence-Oracle RAC

1. To show all existing groups
CAT/etc/group
2. Create the oinstall group if it doesn't exist
Groupadd oinstall
3. Create the DBA group if it doesn't exist
Groupadd DBA
4. Create the Oracle user if it doesn't exist
Useradd-u 1000-G oinstall-g dba-D/home/Oracle/-r Oracle
Modify the groups if you already created the Oracle user
Usermod-G oinstal-g dba Oracle

5. Set the password for the Oracle user
Passwd Oracle

Repeat Step 1 through 5 on each node in your cluster

6. Verify the attributes of the Oracle user
Id Oracle

7. Configure the RSA and DSA keys
Log back as Oracle on Rac1

8. Create the. Ssh directory if it doesn't exist
Ls-A $ home
Mkdir ~ /. SSH
Chmod 700 ~ /. SSH

9. Create the RSA-type public and private keys.
Ssh-keygen-T RSA
Accept the default location/home/Oracle/. Ssh/id_rsa.pub
And/home/Oracle/. Ssh/id_rsa
Enter a pass phrase when prompted

10. Create the DSA type public and private keys on Rac1 and rac2
Ssh-keygen-T DSA

11. Adding the keys to the authorized key file
Cd ~ /. SSH
Cat id_rsa.pub> authorized_keys
Cat id_dsa.pub> authorized_keys

12. Copy the authorized_keys file from Rac1 to rac2
SCP authorized) Keys rac2:/home/Oracle/. Ssh/

13. Using SSH, log in to rac2
SSH rac2
CD. SSH
Cat id_rsa.pub> authorized_keys
Cat id_dsa.pub> authorized_keys
Note: id_rsa.pub and id_dsa are created in step 1 through step 5

14. Copy the updated authorized_keys file back to Rac1
SCP authorized_keys Rac1:/home/Oracle/. Ssh/

At this point, if you use SSH to log in to or run a command on another node, you are prompted for the pass phrase that you specified when you create the RSA and DSA keys.

15. On the system where you want to run Oracle universal installer, log in as Oracle

16. Start the SSH agent and load the SSH keys into memory
Ssh-agent $ Shell
Ssh-add

17. Complete the SSH configuration by using the SSH command to retrieve the date on Rac1 and rac2 in the Cluster

$ SSH Rac1 date
$ SSH rac2 date

The first time you run, you will be prompted to accept the RSA key fingerprint, enter yes to continue
You shoshould not be prompted for a password or passphrase when you connect to Rac1 to rac2.

User equivalency must meet the following requirements:
1. A given user has the same user name, uid, and password
2. A given user belongs to the same groups with the same group ID

Make sure you get the same results on Rac1 and rac2

$ Id Oracle
Uid = 1000 (Oracle) gid = 1002 (oinstall) groups = 1002 (oinstall), 1003 (DBA)