用于为不同用户在不同结点配置SSH认证的Shell脚本.doc

为结点pexample-client的用户user-A在结点example-server以用户user-B的身份进行SSH认证依赖 服务器配置（/etc/ssh/sshd_config）中已经允许PubKey登录（PubkeyAuthentication yes）步骤1. 在结点example-client为用户user-A生成SSH Key2. 将user-Aexample-client的Pub Key分发至结点example-server1. 复制Pub Key内容至用户user-B的.ssh/authorized_keys2. 配置.ssh/authorized_keys文件的属性3. 验证自动化脚本See ssh_auth.shNote 在部署过程中 本地（SSH Client）安装了sshpass，以便自动提供密码例子: Add SSH authornation for ianian-laptop as jianggroup-serverianian-laptop: ./ssh_auth.shUsage:./ssh_auth.sh dst-host dst-user dst-passwordianian-laptop: ./ssh_auth.sh group-server jiang *Generating ssh-key.Making group-server:/home/jiang/.ssh if not exists.Copying pub-key to group-server:/home/jiang/.ssh/id_rsa.pub-ian-laptop.Creating group-server:/home/jiang/.ssh if not exists.Deleting old key in group-server:/home/jiang/.ssh/authorized_keys if exists.Adding pub-key to group-server:/home/jiang/.ssh/authorized_keys.Testing.= jiang logged in group-server successfully =ssh_auth.sh#!/bin/bashthis_host=hostnamedst_host=$1dst_user=$2dst_pass=$3function usage() echo Usage: echo $1 dst-host dst-user dst-password exit 1 $# -lt 3 & usage $0dst_home=sshpass -p $dst_pass ssh -l $dst_user $dst_host pwddst_authkey_dir=$dst_home/.sshdst_tmp_file=$dst_authkey_dir/id_rsa.pub-$this_hostdst_authkey_file=$dst_authkey_dir/authorized_keysecho Generating ssh-key. -f /.ssh/id_rsa | ssh-keygen -q -N -t rsa -f /.ssh/id_rsaecho Making $dst_host:$dst_authkey_dir if not exists.sshpass -p $dst_pass ssh -l $dst_user $dst_host -d $dst_authkey_dir | mkdir -p $dst_authkey_direcho Copying pub-key to $dst_host:$dst_tmp_file.sshpass -p $dst_pass scp /.ssh/id_rsa.pub $dst_user$dst_host:$dst_tmp_fileecho Creating $dst_host:$dst_authkey_dir if not exists.sshpass -p $dst_pass ssh -l $dst_user $dst_host -f $dst_authkey_file | $dst_authkey_filesshpass -p $dst_pass ssh -l $dst_user $dst_host chmod 600 $dst_authkey_fileecho Deleting old key in $dst_host:$dst_authkey_file if exists.sshpass -p $dst_pass ssh -l $dst_user $dst_host -f $dst_authkey_file & sed -i /$this_host/d $dst_authkey_fileecho Adding pub-key to $dst_host:$dst_authkey_file.sshpass -p $dst_pass ssh -l $dst_user $dst_host cat $dst_tmp_file $dst_authkey_filesshpass -p $dst_pass ssh -l $dst_user $dst_hos