LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-29-2015, 07:59 AM   #1
ztdep
Member
 
Registered: Jul 2005
Posts: 219

Rep: Reputation: 31
how to setup password less ssh for all the user in the cluster


Dear friends:
I can setup a password less ssh for a single user. but if we have many users in the clusters with 100 nodes to perform computations.
Could you please give me some suggestions about how to realize the password-less ssh for all these users in all nodes.
Regards
 
Old 03-29-2015, 08:19 AM   #2
T3RM1NVT0R
Senior Member
 
Registered: Dec 2010
Location: Internet
Distribution: Linux Mint, SLES, CentOS, Red Hat
Posts: 2,385

Rep: Reputation: 477Reputation: 477Reputation: 477Reputation: 477Reputation: 477
I know manual way will be too hectic but if you do not have a centralized server which has got sudo / root access to all VMs to push / run ssh-copy-id then it will be very difficult.

The key to implement such setup is to have a centralized server which can push keys to all the boxes. Then you can write a script to push the keys.

Another way I can think of is distributing authorized_keys file is via puppet but I am not sure how feasible it will be for you if already not in place in your infra.

If you do not have a centralized server with access to all nodes then it will be a hectic and painful job.
 
Old 03-29-2015, 08:20 AM   #3
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
It usually depends on the users home filesystem.

The list of known nodes, and authorized keys (the user would have to generate one) are stored in the users home directory (.ssh/. If the users home directory is accessible via all the nodes (usually would be), then the list of nodes would allow a user to access all of them without a password. The authorized keys would automatically be available via the home directory mount.

The configuration of each node would have to allow for RSA authentication and PubkeyAuthentication (both are usually the default).

The only pain is getting the "known hosts" to include all the keys for each node.
This could be done once by the admin, then added to the skeleton structure used when adding users to the front end nodes. This would immediately give the user access to all nodes.

Access to the users home directory is usually done by NFS, but using gluserfs is an alternative (and for clusters, it might be faster as it allows for multiple servers to distribute the I/O load).

Last edited by jpollard; 03-29-2015 at 08:25 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Password less ssh for NIS user sagar666 Linux - Server 1 01-13-2015 10:06 AM
Quickest Way to Setup Password-less SSH in a Cluster Stevie-B-242 Linux - Enterprise 10 06-07-2012 02:05 PM
ssh without password -- non-root user Sanford Stein Linux - Newbie 18 03-31-2010 12:10 PM
release all user to ssh without password elainelaw Linux - Newbie 6 01-07-2010 12:08 PM
ssh without user password question tonyfreeman Linux - Security 2 10-26-2004 11:02 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:18 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration