发现Exadata的dcli是个十分好用的工具。今天将该工具get出来,做个一个配置互信的实验。
编辑文件,将需要配置互信的节点全部写入
[root@db1 ~]# vi all_group
192.168.204.5
192.168.204.10
使用配置文件执行ssh配置
[root@db1 ~]# ./dcli -k -g all_group -l root
Error: Neither RSA nor DSA keys have been generated for current user.
Run 'ssh-keygen -t dsa' to generate an ssh key pair.
上面提示要执行ssh-keygen -t dsa,按要求执行
[root@db1 ~]# ssh-keygen -t dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/root/.ssh/id_dsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_dsa.
Your public key has been saved in /root/.ssh/id_dsa.pub.
The key fingerprint is:
24:4a:ed:dd:b5:81:ed:df:70:a1:d8:e2:ea:00:e5:1c root@db1
然后再次执行
[root@db1 ~]# ./dcli -k -g all_group -l root
root@192.168.204.10's password:
root@192.168.204.5's password:
192.168.204.5: ssh key added
192.168.204.10: ssh key added
测试ssh配置否成功
[root@db1 ~]# ./dcli -g all_group -l root hostname
192.168.204.5: db1
192.168.204.10: cell1
注:以上操作只是配置了一个节点的互信,如果需要配置多个节点间的互信需要在不同节点再次执行以上操作
dcli工具的脚本奉上:
dcli.txt
下载以后将deli.txt 重命名成 dcli 便可直接使用