Views 1386 Votes 0 Comment 0
Atachment
Attachment '1'
?

Shortcut

PrevPrev Article

NextNext Article

Larger Font Smaller Font Up Down Go comment Print
?

Shortcut

PrevPrev Article

NextNext Article

Larger Font Smaller Font Up Down Go comment Print

ssh01.jpg


SSH (Secure SHELL) is an open source and most trusted network protocol that is used to login into remote servers for execution of commands and programs. It is also used to transfer files from one computer to another computer over the network using secure copy (SCP) Protocol.

In this article we will show you how to setup password-less login on RHEL/CentOS 7.x/6.x/5.x and Fedora using ssh keys to connect to remote Linux servers without entering password. Using Password-less login with SSH keys will increase the trust between two Linux servers for easy file synchronization or transfer.

My Setup Environment
SSH Client : 192.168.0.7 ( Fedora 21 )
SSH Remote Host : 192.168.1.240 ( CentOS 7 )

If you are dealing with number of Linux remote servers, then SSH Password-less login is one of the best way to automate tasks such as automatic backups with scripts, synchronization files using scp and remote command execution.

In this example we will setup SSH password-less automatic login from server 192.168.0.7 as user picomax to 192.168.1.240 with user hooni.

Step 1: Create Authentication SSH-Kegen Keys on – (192.168.0.7)

First login into server 192.168.0.7 with user picomax and generate a pair of public keys using following command.

[picomax@test.com ~]$ ssh-keygen -t rsa

Generating public/private rsa key pair.
Enter file in which to save the key (/home/picomax/.ssh/id_rsa): [Press enter key]
Created directory '/home/picomax/.ssh'.
Enter passphrase (empty for no passphrase): [Press enter key]
Enter same passphrase again: [Press enter key]
Your identification has been saved in /home/picomax/.ssh/id_rsa.
Your public key has been saved in /home/picomax/.ssh/id_rsa.pub.
The key fingerprint is:
5f:ad:40:00:8a:d1:9b:99:b3:b0:f8:08:99:c3:ed:d3 picomax@test.com
The key's randomart image is:
+--[ RSA 2048]----+
|        ..oooE.++|
|         o. o.o  |
|          ..   . |
|         o  . . o|
|        S .  . + |
|       . .    . o|
|      . o o    ..|
|       + +       |
|        +.       |
+-----------------+

Step 2: Create .ssh Directory on – 192.168.1.240

Use SSH from server 192.168.0.7 to connect server 192.168.1.240 using hooni as user and create .ssh directory under it, using following command.

[picomax@local ~]$ ssh hooni@192.168.1.240 mkdir -p .ssh

The authenticity of host '192.168.1.240 (192.168.1.240)' can't be established.
RSA key fingerprint is 45:0e:28:11:d6:81:62:16:04:3f:db:38:02:la:22:4e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.240' (ECDSA) to the list of known hosts.
hooni@192.168.1.240's password: [Enter Your Password Here]

Step 3: Upload Generated Public Keys to – 192.168.1.240

Use SSH from server 192.168.0.7 and upload new generated public key (id_rsa.pub) on server 192.168.1.240 under hooni‘s .ssh directory as a file name authorized_keys.

[picomax@local ~]$ cat .ssh/id_rsa.pub | ssh hooni@192.168.1.240 'cat >> .ssh/authorized_keys'

hooni@192.168.1.240's password: [Enter Your Password Here]

Step 4: Set Permissions on – 192.168.1.240

Due to different SSH versions on servers, we need to set permissions on .ssh directory and authorized_keys file.

[picomax@local ~]$ ssh hooni@192.168.1.240 "chmod 700 .ssh; chmod 640 .ssh/authorized_keys"

hooni@192.168.1.240's password: [Enter Your Password Here]

Step 5: Login from 192.168.0.7 to 192.168.1.240 Server without Password

From now onwards you can log into 192.168.1.240 as hooni user from server 192.168.0.7 as picomax user without password.

[picomax@local ~]$ ssh hooni@192.168.1.240



[출처] https://www.tecmint.com/ssh-passwordless-login-using-ssh-keygen-in-5-easy-steps/



List of Articles
No. Category Subject Author Date Views
1141 Develop [ios] 앱의 로컬 js 파일에서 해당 프로젝트의 이미지 불러오기 hooni 2015.02.10 623
1140 Develop [ios] NSData to NSString (NSString to NSData) hooni 2015.07.21 632
1139 Develop [sh] html 안에 있는 img 다운 받는 쉘 스크립트 file hooni 2020.05.26 633
1138 Develop [ppt] iOS 플라랩#04(2015.06.19) 발표 자료 file hooni 2015.06.04 636
1137 Develop [ios] VIN Scanner (VIN barcode) 스캐너 file hooni 2017.09.16 642
1136 Develop [ios] SBCampanion App 초안 file hooni 2015.09.16 651
1135 Develop [ios] NSNotificationCenter 초간단 사용 예~ ㅋㄷ hooni 2015.06.26 654
1134 Database [mysql] MySql DB/테이블 사이즈 확인을 위한 쿼리 hooni 2019.11.22 656
1133 Develop [ios] WWDC 2015 샘플 소스 코드 통합파일 hooni 2015.07.20 657
1132 Database [mysql] MySQL 데이터베이스 추가 및 사용자 추가 hooni 2019.11.22 661
1131 Develop [ios] 여러 버전의 Xcode 사용하기 hooni 2022.05.28 662
1130 Develop [ios] Touch ID 적용 샘플 코드 (예제) file hooni 2015.02.23 663
1129 Develop [swift] 실행시간 측정하기 hooni 2021.09.14 670
1128 Develop [js] Text 값을 클립보드에 복사하기 hooni 2020.10.10 673
1127 Develop Aspect Oriented Programming in Objective-C hooni 2015.05.18 674
1126 Develop 정리할 자료. file hooni 2015.07.02 677
Board Pagination Prev 1 2 3 4 5 ... 74 Next
/ 74