一般生產(chǎn)環(huán)境 Hadoop組件都是由hadoop用戶來啟動(dòng)旁蔼，首先需要配置hadoop用戶ssh免密登錄
1.創(chuàng)建Hadoop用戶
[root@hadoop000 ~]# useradd hadoop
[root@hadoop000 ~]# id hadoop
uid=1102(hadoop) gid=1102(hadoop) groups=1102(hadoop)
[root@hadoop000 ~]# passwd hadoop
Changing password for user hadoop.
New password:
BAD PASSWORD: it is too simplistic/systematic
BAD PASSWORD: is too simple
Retype new password:
passwd: all authentication tokens updated successfully.
#給hadoop sudo權(quán)限
[root@hadoop000 ~]# vi /etc/sudoers
hadoop ALL=(root) NOPASSWD:ALL
2.切換到hadoop用戶 配置免密登錄
[root@hadoop000 ~]# su - hadoop
#確保有ssh服務(wù)
[hadoop@hadoop000 ~]$ sudo service sshd status
openssh-daemon (pid 24823) is running...
[hadoop@hadoop000 ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/hadoop/.ssh/id_rsa):
Created directory '/home/hadoop/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/hadoop/.ssh/id_rsa.
Your public key has been saved in /home/hadoop/.ssh/id_rsa.pub.
The key fingerprint is:
bd:75:87:ca:44:2d:1f:de:b7:5e:a0:96:ac:b3:7e:01 hadoop@hadoop000
The key's randomart image is:
+--[ RSA 2048]----+
| |
| . |
| o o |
| .E. + + |
| S ..o * +|
| *.= oo|
| . B. ..|
| .o. . .|
| .++ . |
+-----------------+
[hadoop@hadoop000 ~]$ cd .ssh
[hadoop@hadoop000 .ssh]$ ll
total 8
-rw------- 1 hadoop hadoop 1675 May 17 14:59 id_rsa
-rw-r--r-- 1 hadoop hadoop 395 May 17 14:59 id_rsa.pub
[hadoop@hadoop000 .ssh]$ cat id_rsa.pub >> authorized_keys
[hadoop@hadoop000 .ssh]$ ll
total 12
-rw-rw-r-- 1 hadoop hadoop 395 May 17 14:59 authorized_keys
-rw------- 1 hadoop hadoop 1675 May 17 14:59 id_rsa
-rw-r--r-- 1 hadoop hadoop 395 May 17 14:59 id_rsa.pub
#authorized_keys權(quán)限必須為600
[hadoop@hadoop000 .ssh]$ chmod 600 authorized_keys
[hadoop@hadoop000 .ssh]$ ssh hadoop000 date
The authenticity of host 'hadoop000 (192.168.6.217)' can't be established.
RSA key fingerprint is 25:d9:d6:7e:fa:e0:a7:92:7c:06:76:5c:2b:19:bf:a3.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'hadoop000,192.168.6.217' (RSA) to the list of known hosts.
Thu May 17 15:00:28 CST 2018
[hadoop@hadoop000 .ssh]$ ssh hadoop000 date
Thu May 17 15:00:30 CST 2018
3.總結(jié)
hadoop用戶配置ssh免密登錄 authorized_keys權(quán)限必須改為600
