linux 批量ssh认证

<pre name="code" class="sql">redis01:/root# cd .ssh
-bash: cd: .ssh: No such file or directory
redis01:/root# pwd
/root


redis01:/root# cd .ssh
redis01:/root/.ssh# ls
known_hosts

redis01:/root/.ssh# ls
id_rsa  id_rsa.pub  known_hosts


自动化ssh 脚本:


#root用户初始化脚本，initroot.sh
if [  ! $# -eq 2  ] ;then
echo "请输入用户密码以空格分开"
exit
else
ssh-keygen -t rsa
#用户名
uname="$1"
#密码
passwd="$2"
fi


#执行检测并安装expect模块
ep=`rpm -qa | grep expect` 

if [ -z $ep   ] ; then
 echo "检测到你的系统，没有安装expect模块，准备执行安装"
 sleep 2
 yum install -y expect

else
 echo "已经安装expect模块，3秒后，开始执行ssh文件同步"
 sleep 3
fi



#公钥无ssh认证模块
cat hosts | while read host
do



echo "当前正在向$host上传输ssh文件"
expect <<EOF
spawn  scp -r .ssh/  $host:/$uname 
expect {
"*yes/no" {send "yes
" ;exp_continue}
"*password:" {send "$passwd
" ;exp_continue  }
}


EOF





echo "当前正在$host上进行公钥认证....."
sleep 2
expect <<EOF
spawn  ssh-copy-id  -i .ssh/id_rsa.pub $host 
expect {
"*yes/no" {send "yes
" ;exp_continue}
"*password:" {send "$passwd
" ;exp_continue  }
}


EOF

echo "认证成功...."

done




#切换root权限进行hosts文件分发



echo "同步本机的hosts文件到各个机器上"

sleep 1

#同步本机的hosts文件到其他各个机器上

cat hosts | while read host
do

scp -r /etc/hosts $host:/etc/


done


echo "同步hosts文件完毕"



A->B B-> 相互信任  A 脚本需要ssh-keygen -t rsa  B不需要