修改/etc/udev/permissions.d/50-udev.permissions，使oracle能操作裸设备

[root@rac1 ~]# vi /etc/udev/permissions.d/50-udev.permissions

# raw devices

ram*:root:disk:0660

19.启动两个节点后做 ssh 两边能互相信任连接

[oracle@rac1 ~]$ mkdir .ssh

[oracle@rac1 ~]$ chmod 700 .ssh

[oracle@rac1 ~]$ /usr/bin/ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key (/u01/app/oracle/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /u01/app/oracle/.ssh/id_rsa.

Your public key has been saved in /u01/app/oracle/.ssh/id_rsa.pub.

The key fingerprint is:

a3:92:9c:82:73:07:25:c1:9c:fe:59:e9:e9:25:d4:64oracle@rac1.cn

[oracle@rac1 ~]$ /usr/bin/ssh-keygen -t dsa

Generating public/private dsa key pair.

Enter file in which to save the key (/u01/app/oracle/.ssh/id_dsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /u01/app/oracle/.ssh/id_dsa.

Your public key has been saved in /u01/app/oracle/.ssh/id_dsa.pub.

The key fingerprint is:

b3:46:2a:20:4a:72:cd:f2:b0:cc:33:ed:fe:bb:06:e1oracle@rac1.cn

[oracle@rac2 ~]$ mkdir .ssh

[oracle@rac2 ~]$ chmod 700 .ssh

[oracle@rac2 ~]$ /usr/bin/ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key (/u01/app/oracle/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /u01/app/oracle/.ssh/id_rsa.

Your public key has been saved in /u01/app/oracle/.ssh/id_rsa.pub.

The key fingerprint is:

db:d0:cf:59:a5:1e:5a:e3:71:7a:71:a0:94:77:d1:51oracle@rac2.cn

[oracle@rac2 ~]$ /usr/bin/ssh-keygen -t dsa

Generating public/private dsa key pair.

Enter file in which to save the key (/u01/app/oracle/.ssh/id_dsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /u01/app/oracle/.ssh/id_dsa.

Your public key has been saved in /u01/app/oracle/.ssh/id_dsa.pub.

The key fingerprint is:

85:32:9e:5d:e3:27:c6:4f:5b:58:c4:2b:da:d1:62:01oracle@rac2.cn

[oracle@rac1 ~]$ cd .ssh

[oracle@rac1 .ssh]$ cat id_rsa.pub >> authorized_keys

[oracle@rac1 .ssh]$ cat id_dsa.pub >> authorized_keys

[oracle@rac1 .ssh]$ /usr/bin/ssh rac2 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

The authenticity of host 'rac2 (192.168.1.246)' can't be established.

RSA key fingerprint is a1:fd:a1:b7:0a:9f:c0:e5:4c:b1:5d:4e:ad:30:9f:52.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'rac2,192.168.1.246' (RSA) to the list of known hosts.

oracle@rac2'spassword:

[oracle@rac1 .ssh]$ /usr/bin/ssh rac2 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

oracle@rac2'spassword:

[oracle@rac1 .ssh]$ /usr/bin/scp authorized_keys rac2:~/.ssh/authorized_keys

oracle@rac2'spassword:

authorized_keys 100% 1672

1.6KB/s 00:00

在每个节点上测试连接，并输入口令，这样今后就不用口令了。

[oracle@rac1 .ssh]$ ssh rac1 date

[oracle@rac1 .ssh]$ ssh rac2 date

[oracle@rac1 .ssh]$ ssh rac1.cn date

[oracle@rac1 .ssh]$ ssh rac2.cn date

[oracle@rac1 .ssh]$ ssh rac1-priv date

[oracle@rac1 .ssh]$ ssh rac2-priv date

[oracle@rac1 .ssh]$ ssh rac1-priv.cn date

[oracle@rac1 .ssh]$ ssh rac2-priv.cn date

[oracle@rac2 .ssh]$ ssh rac1 date

[oracle@rac2 .ssh]$ ssh rac2 date

[oracle@rac2 .ssh]$ ssh rac1.cn date

[oracle@rac2 .ssh]$ ssh rac2.cn date

[oracle@rac2 .ssh]$ ssh rac1-priv date

[oracle@rac2 .ssh]$ ssh rac2-priv date

[oracle@rac2 .ssh]$ ssh rac1-priv.cn date

[oracle@rac2 .ssh]$ ssh rac2-priv.cn date