Ssh-keygen generates a public and private key pair.Ssh-copy-id The local public key is copied to the remote machine's Authorized_keys file, Ssh-copy-id can also let you have to the remote machine/home/username/.ssh and ~/.ssh/authorized_ The right to the keys.Operation Recor
Environment:192.168.2.10192.168.2.11Implementation: 2.10 SSH without password login to 2.11In 2.10 ssh to 2.11 machines, a password is required, which makes it inconvenient for some scripts to work because of the need for a password, which requires manual intervention. The previous method is to copy Authorized_keys inside (remember, before), recently found a command ssh
Always want to transfer their server SSH authentication mode from user name password mode to RSA and DSA authentication protocol, through the release of OpenSSH 4.2, today wrote a configuration process and collected some reference articles on RSA and DSA.Idea Finishing:Has not understood the authentication process in the public key mode, here summarizes the method of making and placing the public key and the secret key. The following assumptions are g
SSH to the 163 host requires a password, which is inconvenient for some scripts because the password is required, that is, manual intervention is required. The method used previously was to copy the authorized_keys file (I can't remember it, I used it before). Recently, I found a command ssh-copy-ID is very convenient. I tried it and it really worked well. It was recorded below:
On 192.168.42.142
1) Run
Key Login Step (password-free login)SSH Login provides two kinds of authentication methods: password (password) authentication method and key authentication method. where password (password) authentication method is one of our most commonly used, for security reasons, the introduction of key authentication methods to log on to Linux/unix. using key login is divided into 3 steps:1. Generate Key (public key and private key);2, place the public key into
SSH Remote connection command:Usage format:ssh ipaddr does not specify the user to log on to the remote host as the user of the current host login systemssh [email protected] telnet to a host as a user via SSH protocolusage:ssh [email protected] Telnet to the 192.168.1.100 host via the SSH protocol as rootssh-l USERNAME ipaddr equivalent to
:
$ Password: (enter Password)
At this point, if the secret is correct, you can log in.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In the trust environment, if each remote login, you have to enter a password, feel too wasted time, especially the password is very complex, maintenance of the server more than the case.
So there is a normal need: you do not have to enter a password to achieve remote logins.
The implementation steps are as follows:
1, local generat
Use of SSH-copy-ID
Ssh-copy-ID is a preset command in the SSH client suite. Simply put, it is just a script, when you have produced an RSA or DSA on your computerAuthentication. You can send the authentication token to the local host using the ssh-copy-id command.
How to Establish RSA or DSA authentication?
$
Environment:192.168.2.10192.168.2.11Implementation: 2.10 SSH without password login to 2.11In 2.10 ssh to 2.11 machines, a password is required, which makes it inconvenient for some scripts to work because of the need for a password, which requires manual intervention. The previous method is to copy Authorized_keys inside (remember, before), recently found a command ssh
SSH to the 192.168.88.61 machine requires a password, which is inconvenient for some scripts because of the need for a password, which requires manual intervention. Recently found a command Ssh-copy-id is very convenient, tested, and sure enough to use, recorded:On the 192.168.88.61 machine.1) Run: ssh-keygen-t RSA2) T
Using ssh-keygen to set ssh password-less ssh logon is a protocol designed for security of remote logon sessions and other network services. By default, ssh connections require password authentication. You can add system authentication (Public Key-Private Key) modifications.
How to Use ssh-keygen to generate keyssh-keygen-generate, manage, and convert authentication keys are generally used: [B] ssh-keygen-I-f public key name gt; authorized_keys [/B] Syntax details [code] ssh-
In case the URL is lost, copy the backup. Copy Source Ssh-keygen parameter descriptionSsh-keygen-Generate, manage, and convert authentication keysSsh-keygen[- Q] [- bbits]- Ttype[- NNew_passphrase] [- CComment] [- FOutput_keyfile]ssh-key
its own identity flag "private key" to achieve the purpose of verification, and private key can not be inferred from the public key backwards. This avoids the potential for password leaks caused by network eavesdropping. The client needs to be careful to save its own private key to avoid being stolen by others, and once that happens, the server will need to replace the trusted public key list.2, to achieve the effect:The network topology diagram is as follows: A total of 4 servers, the host nam
UseThe keys used to generate the SSH encryption algorithm and the management and transformationUsage Ssh-keygen [-Q] [-B bits]-t type [-n new_passphrase] [-c comment] [-f Output_keyfile] ssh-keygen-p [-P Old_pass Phrase] [-n new_passphrase] [-F keyfile]
or her private key and then sent back. The remote host decrypts with a pre-stored public key and, if successful, proves that the user is trustworthy, allowing the login shell to be logged in and no longer requiring a password. This way, we can guarantee the security of the entire login process and will not be attacked by the man-in-the-middle. See the rest of the content: http://www.cnblogs.com/likui360/p/6012075.htmlThe following is an analysis of Ssh
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.