ssh no passphrase 생성.

ITWeb/서버관리 2011. 9. 7. 14:19

1. 관문이 되는 gateway 서버에서 key 생성

ssh-keygen -t rsa

암호 입력 없이 엔터 세번

 

Generating public/private rsa key pair.
Enter file in which to save the key (/home/계정명/.ssh/id_rsa):
Created directory '/home/계정명/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/계정명/.ssh/id_rsa.
Your public key has been saved in /home/계정명/.ssh/id_rsa.pub.
The key fingerprint is:
3e:4f:05:79:3a:9f:96:7c:3b:ad:e9:58:37:bc:37:e4

 

cat id_ras.pub

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvtSlFMETwPauw5qHjyC4FD9J0AoeHSc9waZGMr70OSJruOXC5rxqfgvj0Ux1J+1ZQADgXz5wvP8Z9UL4hoa0Mq+eTVxOdC40AV3YtiXZA+7y/SQKy5EHdRsFTU+7QQVYm5S/nPnV0QU+g8WzCegZB5hwrQCFE7PzDGYeRPS0lK6fuYo74Q5U9n+AjPloaK7qgnKkEuShr1yIxvdfQkemrGSgmC1z7pYrNHjbpCYRngxnS60iNkRmicDJb5XmgTTNfClOuwaf2xyQYbh5+Qo1PLo9eQ/xDtKoxij4p0Mp1yCU/wYWP+HRwbKyvjaWjS3fN/dSRodNRbDQu+ZnNfl4nQ== j계정명@HOSTNAME

 

2. gateway 서버에서 접속하고자 하는 서버들에 authorized_keys 생성

mkdir .ssh

cd .ssh

vi authorized_keys

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvtSlFMETwPauw5qHjyC4FD9J0AoeHSc9waZGMr70OSJruOXC5rxqfgvj0Ux1J+1ZQADgXz5wvP8Z9UL4hoa0Mq+eTVxOdC40AV3YtiXZA+7y/SQKy5EHdRsFTU+7QQVYm5S/nPnV0QU+g8WzCegZB5hwrQCFE7PzDGYeRPS0lK6fuYo74Q5U9n+AjPloaK7qgnKkEuShr1yIxvdfQkemrGSgmC1z7pYrNHjbpCYRngxnS60iNkRmicDJb5XmgTTNfClOuwaf2xyQYbh5+Qo1PLo9eQ/xDtKoxij4p0Mp1yCU/wYWP+HRwbKyvjaWjS3fN/dSRodNRbDQu+ZnNfl4nQ== j계정명@HOSTNAME

 

chmod 600 authorized_keys

※ chmod 600 을 안하면 암호를 물어 보기 때문에 permission 에 주의 할것!!

 

3. gateway 서버에서 원격서버로 접속 테스트 되면 끝.

 

public key 가 원격지 서버에 authorized_keys 로 복사 되어 있으면 됨.

 

※ 쌍방향으로 로그인이 되게 하려면 private key 도 함께 복사해 놓으면 끝.

 

cat authorized_keys | ssh HOSTNAME 'cat >> .ssh/authorized_keys; cd /home/계정/.ssh; chmod 600 authorized_keys'

: