linux下免交互式自动生成公私钥

321312

背景：服务器CentOS6.5；三台服务器：192.168.245.107；192.168.245.108；192.168.245.109；
      用192.168.245.108为例，运行以下脚本内容。
目的：实现不用交互式生成公私钥；并在108上可以无密码登陆107和109；（注：对应不用用户更改路径）
脚本内容：
#!/bin/bash
oldpath=`$PWd`
echo $oldpath

yum install -y expect*
EXPECTMAKE(){
cat > expectssh.sh <<EOF
#!/usr/bin/expect -f
spawn ssh-keygen -t rsa
expect "*\(\/home\/scapp\/\.ssh\/id_rsa\):"
send "\r"
expect "*empty for no passphrase*"
send "\r"
expect "*same passphrase again:"
send "\r"
expect eof
EOF
expect -f expectssh.sh
}

########################################

if [ -d /home/scapp/.ssh ]
then
  echo ".ssh haved maked"
  cd /home/scapp/.ssh
  if [ -f id_rsa ] || [ -f id_rsa.pub ]
    then
        rm -f id_rsa*
        EXPECTMAKE
        rm -f expectssh.sh
  else
        EXPECTMAKE
        rm -f expectssh.sh
  fi
  cd $oldpath
else
  mkdir /home/scapp/.ssh
  chmod 755 /home/scapp/.ssh
  cd /home/scapp/.ssh
  if [ -f id_rsa ] || [ -f id_rsa.pub ]
    then
        rm -f id_rsa*
        EXPECTMAKE
        rm -f expectssh.sh
  else
        EXPECTMAKE
        rm -f expectssh.sh
  fi
  cd $oldpath
fi

#进一步实现无密码相互登陆
cd /home/scapp/.ssh
echo "" > /home/scapp/.ssh/known_hosts
cat > 107.sh <<EOF
#!/usr/bin/expect -f
foreach i { 107 109 } {
spawn ssh-copy-id -i id_rsa.pub scapp@192.168.245.\$i
expect "*connecting (yes\/no)\?"
send "yes\r"
expect "*password:"
send "你的密码\r"
expect eof
}
EOF
expect -f 107.sh

rm -f 107.sh
cd $oldpath


&&&&&改进&&&&&进一步实现无密码相互登陆


cd /home/scapp/.ssh
echo "" > /home/scapp/.ssh/known_hosts
cat > 107.sh <<EOF
#!/usr/bin/expect -f
set ipaddr [lindex \$argv 0]
spawn ssh-copy-id -i id_rsa.pub \$ipaddr
expect "*connecting (yes\/no)\?"
send "yes\r"
expect "*password:"
send "你的密码\r"
expect eof
EOF
for ipadd in `seq 1 100`
do
expect -f 107.sh  scapp@192.168.245.$ipadd
done
rm -f 107.sh