1. SSH Key 생성
ssh-keygen -t rsa
> 경로는 /.ssh/id_rsa && 덮어쓰기
> 암호에서 그냥 enter
ssh-keygen -t dsa
> 경로는 /.ssh/id_dsa && 덮어쓰기
> 암호에서 그냥 enter
2. HMC로 생성된 Key 복사
# vi reg_key.sh
mykey=`cat $HOME/.ssh/id_rsa.pub`
ssh hmc.domain.com -l hmcuser mkauthkeys -a \"$mykey\"
# ./reg_key.sh
# /usr/bin/ssh hscroot@hmc.domain.com "ls"
*. 참조
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/TD101248
passAIX ssh client to pSeries HMC | |
Document Author: | Steven Knudson | Document ID: | TD101248 | ||
Doc. Organization: | Advanced Technical Skills | Document Revised: | 12/20/2003 | ||
Product(s) covered: | # 7040-671; # 7040-681; # 7040-681 Model p690; # 7315-co1 | ||||
Abstract: How to configure AIX ssh client to access pSeries HMC, with keyed encryption, without passwords |
SSH Scenario (ver 1.2)
The ultimate objective - A script to run on AIX, that sends commands via ssh into the HMC to collect information about the HMC, the systems managed by the HMC, and the LPARs in those systems. Want this script to run without prompting for the password of the HMC user. Key elements of the solution: Go to LINUX Toolbox for AIX Applications - Cryptograpic Content rpm -i openssl-0.9.6k-1.aix4.3.ppc.rpm 2. Openssh fileset retrieve and install on AIX client Go to OpenSSH on AIX Images Project: Summary Login to AIX client machine as the designated aixuser aixuser on AIX will login as hmcuser on HMC, then transfer his public keys from the AIX system to the HMC Note: The script that follows is our example. aixuser answers prompt for passphrase required by keyfile, then script sends ssh commands to hmc machine specified. From http://www.redbooks.ibm.com From http://www-106.ibm.com/developerworks (search for "authentication") |
Classification: | Hardware; Software; Solutions | Category: | Operational Management |
Solution(s): | Enterprise Application Solutions (EAS/ERP) | ||
Platform(s): | IBM System p Family | ||
O/S: | AIX | Keywords: | openssh, ssh, encryption, LPAR, hmc, chhwres, lssyscfg |
'IBM Power' 카테고리의 다른 글
diff 와 sdiff (문자열비교) (0) | 2012.06.28 |
---|---|
AIX & HMC에 등록된 ssh-key 삭제하기 (0) | 2012.06.25 |
rset 관련 스크립트 (0) | 2012.06.21 |
HMC SSH 접속을 위한 방화벽 설정 (0) | 2012.06.15 |
ftp 파일 자동전송 쉘스크립트... (0) | 2012.05.24 |