第一步:su 到普通用户下面
su - app(app用户)
[root@localhost ~]# su - wzx
第二步:生成密钥 ssh-keygen -t rsa
[wzx@localhost ~]$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/wzx/.ssh/id_rsa):
Created directory '/home/wzx/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/wzx/.ssh/id_rsa.
Your public key has been saved in /home/wzx/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:ktasuInOq1J3I8/dytNgOgbZ5Ae5NenptbUEfW/tMb4 wzx@localhost.localdomain
The key's randomart image is:
+---[RSA 2048]----+
| |
| |
| . . . |
| +++ . . . |
| =+=So . . ..|
| . =o*o* . o o+|
| . ..*.B = + ..oo|
|.. . o*.+ + . ..|
|oo=.o. .oo E.|
+----[SHA256]-----+
第三步:进入到公钥目录cd ~/.ssh
[wzx@localhost ~]$ cd ~/.ssh/
[wzx@localhost .ssh]$ ls
id_rsa id_rsa.pub
第四步:把公钥id_rsa.pub内容复制到另一台普通用户的authorized_keys里面
[wzx@localhost .ssh]$ vi authorized_keys
[wzx@localhost .ssh]$ cat authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqtZM7MVb2VNfMcu0oGOtItDWttRnQBImnxaAf9KeSl0JJq+blyWgslF/2zWZXJuBw68AZ944n/EtOegWTe/6ZEUo5B/4Yz2N5MOtRLlGwltj4F+YKnUzlC9vLPHbpxPoqmWnO/Cp3rRyYRtOSbGaRbV7PXAaGVIgU6ooeUIhr0Ft2b7VIZK/nDj1+JYCbmz6KB5NDXncQefsjCAX4+orSYTKf/UFbIOz/sAOhDWhxLBIXoGe2qJ6nJaSxtYd5cygI0BXPNl1ZhV2X3U6fuCXYV+uSnUOSuUiYlVoOd28AcQad8B0J/tKmtO8POp5obaRhkipxIPbxir4XJikNkKef wzx@localhost.localdomain
验证是否成功
[root@wangzhenxin-lin01 ~]# scp /root/shell/pid.sh app2@172.16.104.59:root
The authenticity of host '172.16.104.59 (172.16.104.59)' can't be established.
ECDSA key fingerprint is SHA256:4O+GhWnNEr0BKLWvjV9tmxBpmxa0Tj453r4qZ0PO9R0.
ECDSA key fingerprint is MD5:2b:a8:4f:c6:13:d5:ae:35:97:ac:2c:da:a7:d9:04:35.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '172.16.104.59' (ECDSA) to the list of known hosts.
app2@172.16.104.59's password:
pid.sh 100% 858 1.1MB/s 00:00
[root@wangzhenxin-lin01 ~]# su - wzx
su: user wzx does not exist
[root@wangzhenxin-lin01 ~]# ll
总用量 48
-rw-r----- 1 root root 858 8月 3 17:18 pid.sh