How to build Host Trust relationship in Oracle Study under AIX Environment 02/24 Update SLTechnology News&Howtos

How to build Host Trust relationship in Oracle Study under AIX Environment

2025-02-24 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Database >

Shulou(Shulou.com)05/31 Report--

This article mainly introduces how to build the host trust relationship in Oracle Study in the AIX environment, the article is very detailed, has a certain reference value, interested friends must read it!

Rsh is the first choice for building a host trust relationship in an AIX environment, but ssh support is required when building Oracle 11g RAC. The following documents describe how to build a ssh trust relationship under AIX6.1.

The ssh package is not installed by default aix, so install the ssh package first:

1. Download and decompress the software package

[root@aix209 ssh] # ls

OpenSSH_5.8.0.6102.tar.Z openssl-0.9.8.1802.tar.Z ssh.txt

Install via smit installs after decompression:

[root@aix209 ssh] # uncompress OpenSSH_5.8.0.6102.tar.Z

[root@aix209 ssh] # uncompress openssl-0.9.8.1802.tar.Z

[root@aix209 ssh] # ls

OpenSSH_5.8.0.6102.tar openssl-0.9.8.1802.tar ssh.txt

[root@aix209 ssh] # tar xvf OpenSSH_5.8.0.6102.tar

X openssh.base, 6310912 bytes, 12326 tape blocksx openssh.license, 338944 bytes, 662 tape blocksx openssh.man.en_US, 153600 bytes, 300 tape blocksx openssh.msg.CA_ES, 20480 bytes, 40 tape blocksx openssh.msg.CS_CZ, 20480 bytes, 40 tape blocksx openssh.msg.DE_DE, 20480 bytes, 40 tape blocksx openssh.msg.EN_US, 17408 bytes, 34 tape blocksx openssh.msg.ES_ES, 19456 bytes, 38 tape blocksx openssh.msg.FR_FR, 20480 bytes, 40 tape blocksx openssh.msg.HU_HU, 21504 bytes 42 tape blocksx openssh.msg.IT_IT, 19456 bytes, 38 tape blocksx openssh.msg.JA_JP, 24576 bytes, 48 tape blocksx openssh.msg.Ja_JP, 26624 bytes, 52 tape blocksx openssh.msg.KO_KR, 21504 bytes, 42 tape blocksx openssh.msg.PL_PL, 20480 bytes, 40 tape blocksx openssh.msg.PT_BR, 19456 bytes, 38 tape blocksx openssh.msg.RU_RU, 25600 bytes, 50 tape blocksx openssh.msg.SK_SK, 20480 bytes, 40 tape blocksx openssh.msg.ZH_CN, 25600 bytes 50 tape blocksx openssh.msg.ZH_TW, 24576 bytes, 48 tape blocksx openssh.msg.Zh_CN, 21504 bytes, 42 tape blocksx openssh.msg.Zh_TW, 21504 bytes, 42 tape blocksx openssh.msg.ca_ES, 19456 bytes, 38 tape blocksx openssh.msg.cs_CZ, 19456 bytes, 38 tape blocksx openssh.msg.de_DE, 20480 bytes, 40 tape blocksx openssh.msg.en_US, 17408 bytes, 34 tape blocksx openssh.msg.es_ES, 19456 bytes, 38 tape blocksx openssh.msg.fr_FR, 20480 bytes 40 tape blocksx openssh.msg.hu_HU, 27648 bytes, 54 tape blocksx openssh.msg.it_IT, 19456 bytes, 38 tape blocksx openssh.msg.ja_JP, 26624 bytes, 52 tape blocksx openssh.msg.ko_KR, 19456 bytes, 38 tape blocksx openssh.msg.pl_PL, 27648 bytes, 54 tape blocksx openssh.msg.pt_BR, 18432 bytes, 36 tape blocksx openssh.msg.ru_RU, 27648 bytes, 54 tape blocksx openssh.msg.sk_SK, 19456 bytes, 38 tape blocksx openssh.msg.zh_CN, 21504 bytes 42 tape blocksx openssh.msg.zh_TW, 21504 bytes, 42 tape blocks

[root@aix209 ssh] # ls

OpenSSH_5.8.0.6102.tar openssh.msg.IT_IT openssh.msg.Zh_TW openssh.msg.pl_PLopenssh.base openssh.msg.JA_JP openssh.msg.ca_ES openssh.msg.pt_BRopenssh.license openssh.msg.Ja_JP openssh.msg.cs_CZ openssh.msg.ru_RUopenssh.man.en_US openssh.msg.KO_ KR openssh.msg.de_DE openssh.msg.sk_SKopenssh.msg.CA_ES openssh.msg.PL_PL openssh.msg.en_US openssh.msg.zh_CNopenssh.msg.CS_CZ openssh.msg.PT_BR openssh.msg.es_ES openssh.msg.zh_TWopenssh.msg.DE_DE openssh.msg.RU_RU openssh.msg.fr_FR Openssl-0.9.8.1802.taropenssh.msg.EN_US openssh.msg.SK_SK openssh.msg.hu_HU ssh.txtopenssh.msg.ES_ES openssh.msg.ZH_CN openssh.msg.it_ITopenssh.msg.FR_FR openssh.msg.ZH_TW openssh.msg.ja_JPopenssh.msg.HU_HU openssh.msg.Zh_CN openssh.msg.ko_KR

[root@aix209 ssh] # tar xvf OpenSSH_5.8.0.6102.tar

2. Install via smit installs:

[root@aix209 ssh] # smit installs

3. After the installation is successful, the system automatically starts ssh service:

[root@aix209 ssh] # lumped cards c-a | grep ssh

Sshd ssh 6029368 active

4. Configure the trust relationship (by establishing public and private keys)

[grid@aix209 grid] $ssh-keygen-t rsa

Generating public/private rsa key pair.Enter file in which to save the key (/ home/grid/.ssh/id_rsa): Created directory'/ home/grid/.ssh'.Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in / home/grid/.ssh/id_rsa.Your public key has been saved in / home/grid/.ssh/id_rsa.pub.The key fingerprint is:46:8c:ac:aa:82:62:b1:5e:e2:ba: Ed:d5:02:5e:f5:62 grid@aix209The key's randomart p_w_picpath is:+-- [RSA 2048]-+ |. O | | + o | | o | |. O E S | | o + o | |.. = .o. | | = = o.. | | Xfolo | +-+ |

[grid@aix209 grid] $ssh-keygen-t dsa

Generating public/private dsa key pair.Enter file in which to save the key (/ home/grid/.ssh/id_dsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in / home/grid/.ssh/id_dsa.Your public key has been saved in / home/grid/.ssh/id_dsa.pub.The key fingerprint is:4a:6d:60:35:ee:1c:fe:7d:62:54:f6:31:5c:7b:4a:54 grid @ aix209The key's randomart p_w_picpath is:+-- [DSA 1024]-+ | o.. E | | o. .. O | | o + =. | |. *. + o+ | |. S. . . | |. O. O | |. . +. | |. O | +-+

[grid@aix209 ~] $cd .ssh

[grid@aix209 .ssh] $ls

Id_dsa id_dsa.pub id_rsa id_rsa.pub

[grid@aix209 .ssh] $cd..

Establish a key pair in the same way on another node (aix210):

[grid@aix210 grid] $ssh-keygen-t rsa

[grid@aix210 grid] $ssh-keygen-t dsa

[grid@aix209 ~] $cat .ssh / id_rsa.pub > > .ssh/authorized_keys

[grid@aix209 ~] $cat .ssh / id_dsa.pub > > .ssh/authorized_keys

[grid@aix209 ~] $ssh aix210 cat .ssh / id_rsa.pub > > .ssh/authorized_keys

The authenticity of host 'aix210 (192.168.8.210)' can't be established.

RSA key fingerprint is 65:25:9b:46:05:a4:84:73:76:d2:ba:d2:c8:a2:91:0e.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix210192.168.8.210' (RSA) to the list of known hosts.

Grid@aix210's password:

[grid@aix209 ~] $ssh aix210 cat .ssh / id_dsa.pub > > .ssh/authorized_keys

Grid@aix210's password:

Upload the public key authorized_keys to the other host:

[grid@aix209 ~] $scp .ssh / authorized_keys aix210:~/.ssh

Grid@aix210's password:

Authorized_keys 100% 1988 1.9KB/s 00:00

Verify:

[grid@aix209 ~] $ssh aix210 date

Mon Jan 5 22:24:19 CST 1970

[grid@aix209 ~] $ssh aix210-priv date

The authenticity of host 'aix210-priv (10.10.10.210)' can't be established.

RSA key fingerprint is 65:25:9b:46:05:a4:84:73:76:d2:ba:d2:c8:a2:91:0e.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix210-priv,10.10.10.210' (RSA) to the list of known hosts.

Mon Jan 5 22:24:27 CST 1970

[grid@aix209 ~] $ssh aix209-priv date

The authenticity of host 'aix209-priv (10.10.10.209)' can't be established.

RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix209-priv,10.10.10.209' (RSA) to the list of known hosts.

Mon Mar 28 18:39:55 CDT 2016

[grid@aix209 ~] $ssh aix209 date

The authenticity of host 'aix209 (192.168.8.209)' can't be established.

RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix209192.168.8.209' (RSA) to the list of known hosts.

Mon Mar 28 18:40:02 CDT 2016

[grid@aix210 ~] $ssh aix209 date

The authenticity of host 'aix209 (192.168.8.209)' can't be established.

RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix209192.168.8.209' (RSA) to the list of known hosts.

Mon Mar 28 18:40:30 CDT 2016

[grid@aix210 ~] $ssh aix209-priv date

The authenticity of host 'aix209-priv (10.10.10.209)' can't be established.

RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix209-priv,10.10.10.209' (RSA) to the list of known hosts.

Mon Mar 28 18:40:36 CDT 2016

[grid@aix210 ~] $ssh aix210-priv date

The authenticity of host 'aix210-priv (10.10.10.210)' can't be established.

RSA key fingerprint is 65:25:9b:46:05:a4:84:73:76:d2:ba:d2:c8:a2:91:0e.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix210-priv,10.10.10.210' (RSA) to the list of known hosts.

Mon Jan 5 22:25:26 CST 1970

[grid@aix210 ~] $ssh aix210 date

The authenticity of host 'aix210 (192.168.8.210)' can't be established.

RSA key fingerprint is 65:25:9b:46:05:a4:84:73:76:d2:ba:d2:c8:a2:91:0e.

Are you sure you want to continue connecting (yes/no)? Yes

Warning: Permanently added 'aix210192.168.8.210' (RSA) to the list of known hosts.

Mon Jan 5 22:25:31 CST 1970

. . . The verification passed and the trust relationship was established successfully!

-when building Oracle RAC, Oracle users are required to establish a trust relationship.

These are all the contents of the article "how to build a host trust relationship in Oracle Study in the AIX environment". Thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.