clustermode automatic login


Create a file to be used as the authorized keys file on the cluster.
In the example below, ssh-keygen is used on a Linux box:

monitor@bjacobs-lnx:/$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
monitor@bjacobs-lnx:/$ ls -lsa ~/.ssh
total 16
4 drwx------ 2 monitor monitor 4096 2008-08-26 11:47 .
4 drwxr-xr-x 3 monitor monitor 4096 2008-08-26 11:47 ..
4 -rw------- 1 monitor monitor 1679 2008-08-26 11:47 id_rsa
4 -rw-r--r-- 1 monitor monitor 401 2008-08-26 11:47
If an ssh key-pair already exists, there is no need to generate one using ssh-keygen.
Create the user on the cluster with a public key authentication method.
cluster::> security login create -username monitor -application ssh -authmethod publickey -profile admin

Copy the public key contents of the to the filer and put it between quotes in the security login publickey create command. (be careful to not add carriage returns or other data that modifies the keystring, leave it one line)
cluster::> security login publickey create -username monitor -index 1 -publickey "ssh-rsa
z0YP73Jg0T3jV8NYraXO951Rr5/9ZT8KPUqLEgPZxiSNkLnPC5dnmfTyswlofPGud+qmciYYr+cUZIvcFaYRG+Z6DM/HInX7w== monitor@bjacobs-lnx"

(((Alternately, you can use the load-from-uri function to bring the public key from another source.
cluster::> security login publickey load-from-uri -username monitor -uriĀ http://bjacobs-lnx/

Verify creation.
cluster::> security login publickey show -username monitor
UserName: monitor Index: 1
Public Key:
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5s4vVbwEO1sOsq7r64V5KYBRXBDb2I5mtGmt0+3p1jjPJrXx4/
z0YP73Jg0T3jV8NYraXO951Rr5/9ZT8KPUqLEgPZxiSNkLnPC5dnmfTyswlofPGud+qmciYYr+cUZIvcFaYRG+Z6DM/HInX7w== monitor@bjacobs-lnx
Bubblebabble fingerprint:
Test access from the host.
monitor@bjacobs-lnx:~$ ssh monitor@
The authenticity of host ' (' can't be established.
DSA key fingerprint is d9:15:cf:4b:d1:7b:a9:67:4d:b0:a9:20:e4:fa:f4:69.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '' (DSA) to the list of known hosts.

This entry was posted in netapp. Bookmark the permalink.

Comments are closed.