配置ssh的双机信任
背景：
两台服务器ssh登录，不用输密码！！！
试验环境：
vmware workstation 11
服务器A：ip：192.168.0.19
服务器B：ip：192.168.0.12
SecureCRT （ssh远程连接软件）
软件介绍
加密数据所用的秘钥是成对的（公钥和私钥）
私钥留在自己的主机上，公钥送给对方的机器。
机器A的公钥放到机器B上面，A登录B可以实现免密。
那么数据到底是怎么传输的？
服务器-->客户端
服务器传送用客户端公钥加密的数据----------->用服务器端私钥解密
客户端的秘钥是随机运算产生的所以这次的和下次的不一样。
实验过程：
一、生成密钥
[root@baculaServer ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
43:2e:ab:3d:1e:7a:7b:39:78:78:8f:71:e9:6e:39:44 root@baculaServer
The key's randomart image is:
+--[ RSA 2048]----+
| |
| |
| . |
| o E |
| . S. |
| o ... |
| oo.oo. |
| +=.*=+ |
| oo+*.=+. |
+-----------------+
二、公钥发送到另一台服务器
[root@baculaServer ~]# ssh-copy-id -i /root/.ssh/id_rsa.pub root@192.168.0.12
The authenticity of host '192.168.0.12 (192.168.0.12)' can't be established.
RSA key fingerprint is fb:60:11:0b:20:da:e0:27:f0:b2:13:13:57:7c:00:77.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.0.12' (RSA) to the list of known hosts.
root@192.168.0.12's password:
Now try logging into the machine, with "ssh 'root@192.168.0.12'", and check in:
.ssh/authorized_keys
to make sure we haven't added extra keys that you weren't expecting.
另一台上面进行相同操作！！！
测试：
服务器：192.168.0.19
[root@baculaServer ~]# ssh root@192.168.0.12
Last login: Mon Mar 14 00:31:53 2016 from 192.168.0.31
[root@Slave-drbd ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0C:29:86:D2:12
inet addr:192.168.0.12 Bcast:192.168.0.255 Mask:255.255.255.0
服务器：192.168.0.12
[root@Slave-drbd ~]# ssh root@192.168.0.19
Last login: Mon Mar 14 00:16:22 2016 from 192.168.0.31
[root@baculaServer ~]#
总结：简单的很这样操作。