本文共 8346 字，大约阅读时间需要 27 分钟。
系统环境：AIX 6100-09(SP3)
默认AIX系统不安装ssh，需要另外自定义安装，ssh有两个软件包组成（openssl 和 openssh），这两个软件包解压后，通过smit就可以安装。
一、安装ssh
[root@aix209 ssh]#ls OpenSSH_5.8.0.6102.tar.Z openssl-0.9.8.1802.tar.Z
ssh.txt [root@aix209 ssh]#uncompress OpenSSH_5.8.0.6102.tar.
1）解压
[root@aix209 ssh]#uncompress openssl-0.9.8.1802.tar.Z
[root@aix209 ssh]#lsOpenSSH_5.8.0.6102.taropenssl-0.9.8.1802.tar
ssh.txt
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 | [root @aix209 ssh]#tar xvf OpenSSH_5. 8.0 . 6102 .tar x openssh.base, 6310912 bytes, 12326 tape blocks x openssh.license, 338944 bytes, 662 tape blocks x openssh.man.en_US, 153600 bytes, 300 tape blocks x openssh.msg.CA_ES, 20480 bytes, 40 tape blocks x openssh.msg.CS_CZ, 20480 bytes, 40 tape blocks x openssh.msg.DE_DE, 20480 bytes, 40 tape blocks x openssh.msg.EN_US, 17408 bytes, 34 tape blocks x openssh.msg.ES_ES, 19456 bytes, 38 tape blocks x openssh.msg.FR_FR, 20480 bytes, 40 tape blocks x openssh.msg.HU_HU, 21504 bytes, 42 tape blocks x openssh.msg.IT_IT, 19456 bytes, 38 tape blocks x openssh.msg.JA_JP, 24576 bytes, 48 tape blocks x openssh.msg.Ja_JP, 26624 bytes, 52 tape blocks x openssh.msg.KO_KR, 21504 bytes, 42 tape blocks x openssh.msg.PL_PL, 20480 bytes, 40 tape blocks x openssh.msg.PT_BR, 19456 bytes, 38 tape blocks x openssh.msg.RU_RU, 25600 bytes, 50 tape blocks x openssh.msg.SK_SK, 20480 bytes, 40 tape blocks x openssh.msg.ZH_CN, 25600 bytes, 50 tape blocks x openssh.msg.ZH_TW, 24576 bytes, 48 tape blocks x openssh.msg.Zh_CN, 21504 bytes, 42 tape blocks x openssh.msg.Zh_TW, 21504 bytes, 42 tape blocks x openssh.msg.ca_ES, 19456 bytes, 38 tape blocks x openssh.msg.cs_CZ, 19456 bytes, 38 tape blocks x openssh.msg.de_DE, 20480 bytes, 40 tape blocks x openssh.msg.en_US, 17408 bytes, 34 tape blocks x openssh.msg.es_ES, 19456 bytes, 38 tape blocks x openssh.msg.fr_FR, 20480 bytes, 40 tape blocks x openssh.msg.hu_HU, 27648 bytes, 54 tape blocks x openssh.msg.it_IT, 19456 bytes, 38 tape blocks x openssh.msg.ja_JP, 26624 bytes, 52 tape blocks x openssh.msg.ko_KR, 19456 bytes, 38 tape blocks x openssh.msg.pl_PL, 27648 bytes, 54 tape blocks x openssh.msg.pt_BR, 18432 bytes, 36 tape blocks x openssh.msg.ru_RU, 27648 bytes, 54 tape blocks x openssh.msg.sk_SK, 19456 bytes, 38 tape blocks x openssh.msg.zh_CN, 21504 bytes, 42 tape blocks x openssh.msg.zh_TW, 21504 bytes, 42 tape blocks [root @aix209 ssh]#tar xvf OpenSSH_5. 8.0 . 6102 .tar x openssh.base, 6310912 bytes, 12326 tape blocks x openssh.license, 338944 bytes, 662 tape blocks x openssh.man.en_US, 153600 bytes, 300 tape blocks x openssh.msg.CA_ES, 20480 bytes, 40 tape blocks x openssh.msg.CS_CZ, 20480 bytes, 40 tape blocks x openssh.msg.DE_DE, 20480 bytes, 40 tape blocks x openssh.msg.EN_US, 17408 bytes, 34 tape blocks x openssh.msg.ES_ES, 19456 bytes, 38 tape blocks x openssh.msg.FR_FR, 20480 bytes, 40 tape blocks x openssh.msg.HU_HU, 21504 bytes, 42 tape blocks x openssh.msg.IT_IT, 19456 bytes, 38 tape blocks x openssh.msg.JA_JP, 24576 bytes, 48 tape blocks x openssh.msg.Ja_JP, 26624 bytes, 52 tape blocks x openssh.msg.KO_KR, 21504 bytes, 42 tape blocks x openssh.msg.PL_PL, 20480 bytes, 40 tape blocks x openssh.msg.PT_BR, 19456 bytes, 38 tape blocks x openssh.msg.RU_RU, 25600 bytes, 50 tape blocks x openssh.msg.SK_SK, 20480 bytes, 40 tape blocks x openssh.msg.ZH_CN, 25600 bytes, 50 tape blocks x openssh.msg.ZH_TW, 24576 bytes, 48 tape blocks x openssh.msg.Zh_CN, 21504 bytes, 42 tape blocks x openssh.msg.Zh_TW, 21504 bytes, 42 tape blocks x openssh.msg.ca_ES, 19456 bytes, 38 tape blocks x openssh.msg.cs_CZ, 19456 bytes, 38 tape blocks x openssh.msg.de_DE, 20480 bytes, 40 tape blocks x openssh.msg.en_US, 17408 bytes, 34 tape blocks x openssh.msg.es_ES, 19456 bytes, 38 tape blocks x openssh.msg.fr_FR, 20480 bytes, 40 tape blocks x openssh.msg.hu_HU, 27648 bytes, 54 tape blocks x openssh.msg.it_IT, 19456 bytes, 38 tape blocks x openssh.msg.ja_JP, 26624 bytes, 52 tape blocks x openssh.msg.ko_KR, 19456 bytes, 38 tape blocks x openssh.msg.pl_PL, 27648 bytes, 54 tape blocks x openssh.msg.pt_BR, 18432 bytes, 36 tape blocks x openssh.msg.ru_RU, 27648 bytes, 54 tape blocks x openssh.msg.sk_SK, 19456 bytes, 38 tape blocks x openssh.msg.zh_CN, 21504 bytes, 42 tape blocks x openssh.msg.zh_TW, 21504 bytes, 42 tape blocks |
2）通过smit安装 [root@aix209 ssh]#smit installp
3）查看ssh服务 [root@aix209 ssh]#lssrc -a |grep ssh
sshd ssh 6029368 active二、配置通过ssh建立主机间的信任关系（Cluster）One node：
1）建立密钥 [grid@aix209 grid]$ssh-keygen -t rsa
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 | Generating public / private rsa key pair. Enter file in which to save the key (/home/grid/.ssh/id_rsa): Created directory '/home/grid/.ssh' . Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/grid/.ssh/id_rsa. Your public key has been saved in /home/grid/.ssh/id_rsa.pub. The key fingerprint is: 46 :8c:ac:aa: 82 : 62 :b1:5e:e2:ba:ed:d5: 02 :5e:f5: 62 grid@aix209 The key's randomart image is: +--[ RSA 2048 ]----+ | | | . o | | + o | | o o | | . o E S | | o + o o | |..=.o . | |==o. . | |X=o | +-----------------+ |
[grid@aix209 grid]$ssh-keygen -t dsa
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 | Generating public / private dsa key pair. Enter file in which to save the key (/home/grid/.ssh/id_dsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/grid/.ssh/id_dsa. Your public key has been saved in /home/grid/.ssh/id_dsa.pub. The key fingerprint is: 4a:6d: 60 : 35 :ee:1c:fe:7d: 62 : 54 :f6: 31 :5c:7b:4a: 54 grid@aix209 The key's randomart image is: +--[ DSA 1024 ]----+ | o ..E| | o . .. o| | o o +=.| | . * . + o+| | . S . . .| | . o . o | | . . + . | | . o | | | +-----------------+ |
2）配置密钥对
[grid@aix209 ~]$cd .ssh [grid@aix209 .ssh]$ls id_dsa id_dsa.pub id_rsa id_rsa.pub [grid@aix209 .ssh]$cd .. [grid@aix209 ~]$cat .ssh/id_rsa.pub >>.ssh/authorized_keys [grid@aix209 ~]$cat .ssh/id_dsa.pub >>.ssh/authorized_keys [grid@aix209 ~]$ssh aix210 cat .ssh/id_rsa.pub >>.ssh/authorized_keys The authenticity of host 'aix210 (192.168.8.210)' can't be established. RSA key fingerprint is 65:25:9b:46:05:a4:84:73:76:d2:ba:d2:c8:a2:91:0e. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'aix210,192.168.8.210' (RSA) to the list of known hosts. grid@aix210's password: [grid@aix209 ~]$ssh aix210 cat .ssh/id_dsa.pub >>.ssh/authorized_keys grid@aix210's password: [grid@aix209 ~]$scp .ssh/authorized_keys aix210:~/.ssh grid@aix210's password: authorized_keys 100% 1988 1.9KB/s 00:00 [grid@aix209 ~]$ssh aix210 date Mon Jan 5 22:24:19 CST 19703）测试信任关系 [grid@aix209 ~]$ssh aix210-priv date
The authenticity of host 'aix210-priv (10.10.10.210)' can't be established. RSA key fingerprint is 65:25:9b:46:05:a4:84:73:76:d2:ba:d2:c8:a2:91:0e. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'aix210-priv,10.10.10.210' (RSA) to the list of known hosts. Mon Jan 5 22:24:27 CST 1970[grid@aix209 ~]$ssh aix209-priv date The authenticity of host 'aix209-priv (10.10.10.209)' can't be established. RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'aix209-priv,10.10.10.209' (RSA) to the list of known hosts. Mon Mar 28 18:39:55 CDT 2016[grid@aix209 ~]$ssh aix209 date The authenticity of host 'aix209 (192.168.8.209)' can't be setablished.RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91.
Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'aix209,192.168.8.209' (RSA) to the list of known hosts. Mon Mar 28 18:40:02 CDT 2016[grid@aix210 ~]$ssh aix209-priv date The authenticity of host 'aix209-priv (10.10.10.209)' can't be established. RSA key fingerprint is 8f:54:98:0e:1b:c1:81:10:36:88:62:e2:20:61:16:91. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'aix209-priv,10.10.10.209' (RSA) to the list of known hosts. Mon Mar 28 18:40:36 CDT 2016----- 至此，ssh在AIX系统上安装配置成功 ！