原文章摘自:http://lizhenliang.blog.51cto.com/7876557/1607723/
Linux下实现免交互登陆一般有两种:
1. SSH无密码认证方式
客户端使用ssh-keygen生成密钥对,将公钥复制到服务端(authorized_keys),SSH提供公钥登陆,当SSH访问服务端时,服务端先在本机寻找客户端的公钥,然后把客户端发来的公钥进行比较,如果一致,则用公钥加密给客户端,客户端再用私钥进行解密,实现加密所有传输的数据。
1>.在客户机上创建密钥对
# ssh-keygen -t rsa #一路回车
2>.登陆ssh服务器,创建.ssh目录及设置权限
1
2
|
# mkdir /root/.ssh # chmod 700 /root/.ssh |
3>.将公钥上传到服务器并重命名为authorized.keys
1
|
# scp /root/.ssh/id_rsa.pub root@服务端IP:/root/.ssh/authorized_keys #id_rsa.pub可以追加多个客户端的公钥 |
4>.设置ssh服务器
1
2
3
4
5
6
|
# vi /etc/ssh/sshd_config RSAAuthentication yes #这三行取消注释,开启密钥对验证 PubkeyAuthentication yes AuthorizedKeysFile . ssh /authorized_keys PasswordAuthentication no #关闭密码验证 # service sshd restart |
5>.免交互登陆测试,并查看远程主机磁盘分区
1
|
# ssh root@服务端IP 'df -h' |
2. 利用expect工具自动实现交互任务
Expect是一个免费的编程工具语言,用来实现自动和交互式任务进行通信,而无需人的干预。
CentOS安装:yum install expect
Ubuntu安装:sudo apt-get install expect
1>.免交互登陆,查看远程主机磁盘分区
1
2
3
4
5
6
7
8
9
10
11
12
13
|
#!/usr/bin/expect set ip 192.168.1.156 set pass 123.com set timeout 30 spawn ssh root@$ip expect { "(yes/no)" {send "yes
" ; exp_continue} "password:" {send "$pass
" } } expect "root@*" {send "df -h
" } expect "root@*" {send "exit
" } expect eof # interact 还有就是免密码scp
[root@WEB1-live sh]# cat scp_licai_war.sh
#!/usr/bin/expect set ip 10.9.10.2 set pass Weddvasdfa set timeout 30 #spawn ssh root@$ip spawn scp /root/test/esb_fabric.1611231739.tar.gz root@10.9.10.2:/data/pro_fabu/front expect { "(yes/no)" {send "yes "; exp_continue} "password:" {send "$pass "} } #expect "root@*" {send "df -h "} #expect "root@*" {send "exit "} #expect eof spawn ssh root@$ip expect { "(yes/no)" {send "yes "; exp_continue} "password:" {send "$pass "} } expect "root@*" {send "df -h "} expect "root@*" {send "exit "} expect eof |
2>.在Shell脚本中嵌入Expect语法
方法1:使用EOF,将内容段让expect执行
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
#!/bin/bash user=root pass= '123' ip= '192.168.1.154' /usr/bin/expect << EOF set timeout 30 spawn ssh $user@$ip expect { "(yes/no)" {send "yes
" ; exp_continue} "password:" {send "$pass
" } } expect "root@*" {send "df -h
" } expect "root@*" {send "exit
" } expect eof EOF |
1
2
3
4
5
6
7
8
9
10
11
|
#!/bin/bash user=root pass= '123' ip= '192.168.1.154' expect -c " spawn ssh $user@$ip expect { "( yes /no )" {send " yes
"; exp_continue} "password:" {send "$pass
"; exp_continue} "root@*" {send " df -h
exit
"; exp_continue} }" |
方法2:将expect脚本独立出来
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
# vi login.exp #免交互登陆脚本 #!/usr/bin/expect set ipaddress [lindex $argv 0] set username [lindex $argv 1] set password [lindex $argv 2] if { $argc != 3 } { puts "Usage: expect login.exp ipaddress username password" exit 1 } set timeout 30 spawn ssh $username@$ipaddress expect { "(yes/no)" {send "yes
" ; exp_continue} "password:" {send "$password
" } } expect "$username@*" {send "df -h
" } expect "$username@*" {send "exit
" } expect eof |
1
2
3
4
5
6
7
8
9
10
11
|
# vi user_info #用户信息文件 192.168.1.156 user user 192.168.1.154 root 123.com # vi expect.sh #读取用户信息并赋值到变量 #!/bin/bash for ip in ` awk '{print $1}' user_info` do user=` awk - v I= "$ip" '{if(I==$1)print $2}' user_info` pass=` awk - v I= "$ip" '{if(I==$1)print $3}' user_info` expect login.exp $ip $user $pass done |
参数说明:
set:可以设置超时,也可以设置变量
timeout:expect超时等待时间,默认10S
spawn:执行一个命令
expect "":匹配输出的内容
exp_continue:继续执行下面匹配
:可以理解为回车
$argc:统计位置参数数量
[lindex $argv 0]:脚本后第一个参数,类似于shell中$1,以此类推
puts:打印字符串,类似于echo
awk -v I="$ip":赋值变量
expect{...}:输入多行记录
其他参数说明:
timeout -1:永不超时退出
log_file /var/log/expect.log:记录交互信息,一般crontab时使用
interact:交互后不退出远程终端,如果加要把expect "root@*" {send "exit "}注释掉,如果不加,就直接退出
将spawn ssh root@$ip换成spawn ssh -o StrictHostKeyChecking=no root@ip既不会再提示是否将服务器计算机密钥加入本地known_hosts