【知行合一】-Poople's Blog

1.在本地主机生成SSH公钥和私钥(这里是用Mac OS X的”终端”工具,其他*Nix以及SSH Client步骤类似)

lin-pooplematoMacBook:~ linpoople$ ssh-keygen

lin-pooplematoMacBook:~ linpoople$ cd .ssh

lin-pooplematoMacBook:.ssh linpoople$ ls

id_rsa id_rsa.pub known_hosts #id_rsa为私钥,留在客户端;id_rsa为公钥,传至服务器端

2.利用U盘或者FTP等方式,把公钥传至服务器,存放位置为服务器用户的.ssh目录(如果没有该目录,请创建)

3.在服务器上执行一下操作,导入公钥

[lqp@sqdata1 ~]$ cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

4.核实修改.ssh目录(755)和目录下文件的权限(644)(这个貌似还是比较严格的,试过放宽权限,结果认证不了)

[lqp@sqdata1 ~]$ ls -al .ssh/

drwxr-xr-x 2 lqp lqp 4096 04-12 12:45 .

drwx—— 3 lqp lqp 4096 04-12 12:46 ..

-rw-r–r– 1 lqp lqp 419 04-12 12:45 authorized_keys

-rw-rw-r– 1 lqp lqp 419 04-12 12:45 id_rsa.pub

-rw-r–r– 1 lqp lqp 395 04-12 11:35 known_hosts