第5步：建立主机间的信任关系（sgdb1、sgdb2）

[align=left]5.1 Oracle用户下建立信任[/align]
[align=left]5.11创建.ssh目录[/align]

[root@sgdb1 /]# su - oracle [align=left][oracle@sgdb1 ~]$ mkdir .ssh 创建一个.ssh的隐藏目录[/align] [align=left][oracle@sgdb1 ~]$ ls -al[/align] [align=left]total 44[/align] [align=left]-rw-r--r-- 1 oracle oinstall 33 Jul 12 17:05 .bash_logout[/align] [align=left]-rw-r--r-- 1 oracle oinstall 438 Jul 12 18:03 .bash_profile[/align] [align=left]drwxr-xr-x 4 oracle oinstall 4096 Jul 1217:05 .mozilla[/align] [align=left]drwx------ 2 oracle oinstall 4096 Jul 1218:05 .ssh[/align] [align=left]-rw------- 1 oracle oinstall 657 Jul 12 18:03 .viminfo[/align]

[align=left]5.12 sgdb1生成密钥rsa类型[/align]
[align=left]id_rsa为私钥，自动保存到.ssh下[/align]
[align=left]id_rsa.pub为公钥，自动保存到.ssh下[/align]

[oracle@sgdb1 ~]$ ssh-keygen -t rsa [align=left]Generating public/private rsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_rsa): enter[/align] [align=left]Enter passphrase (empty for nopassphrase): enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_rsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_rsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]64:a6:4a:77:db:33:a4:aa:6e:ca:8f:5f:2f:77:0f:40oracle@sgdb1[/align]

[align=left]5.12 sgdb1生成密钥dsa类型[/align]
[align=left]id_dsa为私钥，自动保存到.ssh下[/align]
[align=left]id_dsa.pub为公钥，自动保存到.ssh下[/align]

[oracle@sgdb1 ~]$ ssh-keygen -t dsa [align=left]Generating public/private dsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_dsa): enter [/align] [align=left]Enter passphrase (empty for no passphrase):enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_dsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_dsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]7c:41:b5:0f:81:06:ad:30:07:4f:8b:1a:9b:94:68:14oracle@sgdb1[/align]

[align=left]5.13 sgdb2生成密钥rsa类型[/align]
[align=left]id_rsa为私钥，自动保存到.ssh下[/align]
[align=left]id_rsa.pub为公钥，自动保存到.ssh下[/align]

[oracle@sgdb2 asm]# su - oracle [align=left][oracle@sgdb2 ~]$ mkdir .ssh[/align] [align=left][oracle@sgdb2 ~]$ ssh-keygen -t rsa [/align] [align=left]Generating public/private rsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_rsa): enter [/align] [align=left]Enter passphrase (empty for nopassphrase): enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_rsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_rsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]64:a6:4a:77:db:33:a4:aa:6e:ca:8f:5f:2f:77:0f:40oracle@sgdb1[/align]

[align=left]5.14 sgdb2生成密钥dsa类型[/align]
[align=left]id_dsa为私钥，自动保存到.ssh下[/align]
[align=left]id_dsa.pub为公钥，自动保存到.ssh下[/align]

[oracle@sgdb2 ~]$ ssh-keygen -tdsa [align=left]Generatingpublic/private dsa key pair.[/align] [align=left]Enter file inwhich to save the key (/home/oracle/.ssh/id_dsa): enter [/align] [align=left]Enter passphrase(empty for no passphrase): enter[/align] [align=left]Enter samepassphrase again: enter[/align] [align=left]Youridentification has been saved in /home/oracle/.ssh/id_dsa.[/align] [align=left]Your public keyhas been saved in /home/oracle/.ssh/id_dsa.pub. [/align] [align=left]The keyfingerprint is:[/align] [align=left]7c:41:b5:0f:81:06:ad:30:07:4f:8b:1a:9b:94:68:14oracle@sgdb1[/align]

[align=left]5.16 为sgdb1配置信任[/align]
[align=left]rsa和dsa为私钥，.pub的为公钥 [/align]
[align=left]ssh下文件authorized_keys是专门存储公钥信息的[/align]
[align=left]把rsa、dsa类型的公钥文件都放入到authorized_keys文件里[/align]
[align=left]“ssh sgdb2”命令代表登陆到节点2下操作[/align]
[align=left]把两种类型的公钥信息都放到节点2的authorized_keys文件里[/align]

[oracle@sgdb1 ~]$ ls .ssh [align=left]id_dsa id_rsa id_dsa.pub id_rsa.pub [/align] [align=left][oracle@sgdb1 ~]$ cat.ssh/id_rsa.pub >>.ssh/authorized_keys[/align] [align=left][oracle@sgdb1 ~]$ cat.ssh/id_dsa.pub >>.ssh/authorized_keys[/align] [align=left][oracle@sgdb1 ~]$ ssh sgdb2 cat .ssh/id_rsa.pub>>.ssh/authorized_keys[/align] [align=left]oracle@sgdb2's password:[/align] [align=left][oracle@sgdb1 ~]$ ssh sgdb2 cat .ssh/id_dsa.pub>>.ssh/authorized_keys[/align] [align=left]oracle@sgdb2's password: oracle的密码[/align]

[align=left]5.17 为sgdb2配置信任[/align]
[align=left]可以把sgdb1中的authorized_keys（密钥文件）复制到sgdb2中[/align]

[oracle@sgdb1 ~]$ scp.ssh/authorized_keys sgdb2:~/.ssh [align=left]oracle@sgdb2's password: oracle的密码[/align]

[align=left]5.18 sgdb1上验证信任[/align]

[oracle@sgdb1 ~]$ ssh sgdb2 date [align=left][oracle@sgdb1 ~]$ ssh sgdb 2-privdate //私有ip地址验证[/align] [align=left][oracle@sgdb1 ~]$ ssh sgdb 1date[/align] [align=left][oracle@sgdb1 ~]$ ssh sgdb 1-privdate [/align]

[align=left]5.19 sgdb2上验证信任[/align]

[oracle@sgdb2 ~]$ ssh sgdb1 date [align=left][oracle@sgdb2~]$ ssh sgdb 1-priv date [/align] [align=left][oracle@sgdb2 ~]$ ssh sgdb2 date[/align] [align=left][oracle@sgdb2~]$ ssh sgdb2-priv date [/align]

[align=left]5.2 Grid 用户下建立信任[/align]
[align=left]步骤同oracle 一样，可参考oracle用户下设置[/align]
[align=left]5.21创建.ssh目录[/align]
[align=left]在grid用户下操作：[/align]

[root@sgdb1 /]# su– grid [align=left][grid@sgdb1 ~]$mkdir .ssh 创建一个.ssh的隐藏目录[/align] [align=left][grid@sgdb1 ~]$ ls-al[/align]

[align=left]5.22 sgdb1生成密钥rsa类型[/align]
[align=left]id_rsa为私钥，自动保存到.ssh下[/align]
[align=left]id_rsa.pub为公钥，自动保存到.ssh下[/align]

[grid@sgdb1 ~]$ ssh-keygen-t rsa [align=left]Generating public/private rsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_rsa): enter [/align] [align=left]Enter passphrase (empty for no passphrase): enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_rsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_rsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]64:a6:4a:77:db:33:a4:aa:6e:ca:8f:5f:2f:77:0f:40oracle@sgdb1[/align]

[align=left]5.23 sgdb1生成密钥dsa类型[/align]
[align=left]id_dsa为私钥，自动保存到.ssh下[/align]
[align=left]id_dsa.pub为公钥，自动保存到.ssh下[/align]

[grid@sgdb1 ~]$ ssh-keygen-t dsa [align=left]Generating public/private dsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_dsa): enter [/align] [align=left]Enter passphrase (empty for no passphrase): enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_dsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_dsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]7c:41:b5:0f:81:06:ad:30:07:4f:8b:1a:9b:94:68:14oracle@sgdb1[/align]

[align=left]5.24 sgdb2生成密钥rsa类型[/align]
[align=left]id_rsa为私钥，自动保存到.ssh下[/align]
[align=left]id_rsa.pub为公钥，自动保存到.ssh下[/align]

[root@sgdb2 ~]# su – grid [align=left][grid@sgdb2 ~]$ mkdir .ssh[/align] [align=left][grid@sgdb2 ~]$ ssh-keygen-t rsa [/align] [align=left]Generating public/private rsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_rsa): enter [/align] [align=left]Enter passphrase (empty for no passphrase): enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_rsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_rsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]64:a6:4a:77:db:33:a4:aa:6e:ca:8f:5f:2f:77:0f:40oracle@sgdb1[/align]

[align=left]5.25 sgdb2生成密钥dsa类型[/align]
[align=left]id_dsa为私钥，自动保存到.ssh下[/align]
[align=left]id_dsa.pub为公钥，自动保存到.ssh下[/align]

[grid@sgdb2 ~]$ ssh-keygen -t dsa [align=left]Generating public/private dsa key pair.[/align] [align=left]Enter file in which to save the key(/home/oracle/.ssh/id_dsa): enter [/align] [align=left]Enter passphrase (empty for no passphrase): enter[/align] [align=left]Enter same passphrase again: enter[/align] [align=left]Your identification has been saved in/home/oracle/.ssh/id_dsa.[/align] [align=left]Your public key has been saved in/home/oracle/.ssh/id_dsa.pub. [/align] [align=left]The key fingerprint is:[/align] [align=left]7c:41:b5:0f:81:06:ad:30:07:4f:8b:1a:9b:94:68:14oracle@sgdb1[/align]

[align=left]5.26为sgdb1配置信任[/align]

[grid@sgdb1 ~]$ ls .ssh [align=left]id_dsa id_rsa id_dsa.pub id_rsa.pub known_hosts[/align] [align=left][grid@sgdb1 ~]$ cat.ssh/id_rsa.pub >>.ssh/authorized_keys[/align] [align=left][grid@sgdb1 ~]$ cat.ssh/id_dsa.pub >>.ssh/authorized_keys[/align] [align=left][grid@sgdb1 ~]$ ssh sgdb2 cat .ssh/id_rsa.pub>>.ssh/authorized_keys[/align] [align=left]grid@sgdb2's password:[/align] [align=left][grid@sgdb1 ~]$ ssh sgdb2 cat .ssh/id_dsa.pub >>.ssh/authorized_keys[/align] [align=left]grid@sgdb2's password: grid的密码[/align]

[align=left]5.27为sgdb2配置信任[/align]
[align=left]可以把sgdb1中的authorized_keys（密钥文件）复制到sgdb2中[/align]

[grid@sgdb1 ~]$ scp.ssh/authorized_keys sgdb2:~/.ssh [align=left]grid@sgdb2's password: grid的密码[/align] [align=left]authorized_keys 100% 1992 2.0KB/s 00:00 [/align]

[align=left]5.28 sgdb1上验证信任[/align]

[grid@sgdb1 ~]$ ssh sgdb2 date [align=left][grid@sgdb1 ~]$ ssh sgdb2-priv date [/align] [align=left][grid@sgdb1 ~]$ ssh sgdb1 date[/align] [align=left][grid@sgdb1 ~]$ ssh sgdb 1-priv date [/align]

[align=left]5.29 sgdb2上验证信任[/align]

[grid@sgdb2 ~]$ ssh sgdb1 date [align=left][grid@sgdb2~]$ ssh sgdb1-priv date [/align] [align=left][grid@sgdb2 ~]$ ssh sgdb2 date[/align] [align=left][grid@sgdb2~]$ ssh sgdb2-priv date [/align]

[align=left] [/align]