GreenPlum安装遇见免密错误

Posted 2021-12-03 Mr.zhou_Zxy

问题报错

在安装greenplum的时候做权限互通出现问题

[gpadmin@hadoop_zxy ~]$ gpssh-exkeys -f all_host_file
[ERROR]: Failed to ssh to zxy. No ECDSA host key is known for zxy and you have requested strict checking.
Host key verification failed.

问题解决

在进入gpadmin用户下进行免密操作

1. ssh-keygen

生成密钥

[gpadmin@hadoop_zxy ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/gpdata/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/gpdata/.ssh/id_rsa.
Your public key has been saved in /home/gpdata/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:WIZ6lg5LsX0NN6wFxQN/k7l8Zqujpu2hTyltV25xYT4 gpadmin@hadoop_zxy
The key's randomart image is:
+---[RSA 2048]----+
|        o+.      |
|       . +o  o   |
|    . . + *.=  o |
|     = = * + oo .|
|    = * S . o *E.|
|   . * . . . * +.|
|    . . . * . +  |
|         *.o.o   |
|        o==...   |
+----[SHA256]-----+

密钥拷贝

[gpadmin@hadoop_zxy ~]$ ssh-copy-id ****.**.**.****
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/gpdata/.ssh/id_rsa.pub"
The authenticity of host '****.**.**.**** (****.**.**.****)' can't be established.
ECDSA key fingerprint is SHA256:C/+BHxQ00jfgmaqAKHrxx2HBl27GHjCcerelvB9tH3s.
ECDSA key fingerprint is MD5:5e:08:d4:36:ad:29:cd:96:f9:ea:cb:69:61:7c:80:32.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
gpadmin@****.**.**.****'s password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '****.**.**.****'"
and check to make sure that only the key(s) you wanted were added.

再次执行权限互通

[gpadmin@hadoop_zxy ~]$ gpssh-exkeys -f all_host_file
[STEP 1 of 5] create local ID and authorize on local host
  ... /home/gpdata/.ssh/id_rsa file exists ... key generation skipped

[STEP 2 of 5] keyscan all hosts and update known_hosts file

[STEP 3 of 5] retrieving credentials from remote hosts
  ... send to ****.**.**.****

[STEP 4 of 5] determine common authentication file content

[STEP 5 of 5] copy authentication files to all remote hosts
  ... finished key exchange with ****.**.**.****

[INFO] completed successfully