Configuring Password-less SSH

To configure password-less SSH, perform the following steps:

For the Ambari server to automatically install Ambari agents on all your cluster hosts, you must set up password-less SSH connections between the Ambari server host and all other hosts in the cluster. The Ambari server host uses SSH public key authentication to remotely access and install the Ambari agents.

You can choose to manually install an Ambari agent on each cluster host and register them with the target Ambari server. In this case, you do not need to generate and distribute SSH keys.

  1. Generate public and private SSH keys on the Ambari server host.
Bash
Copy
  1. Copy the SSH Public Key (id_rsa.pub) to the root account on your target hosts.
Bash
Copy
  1. Add the SSH Public Key to the authorized_keys file on your target hosts.
Bash
Copy
  1. Based on your SSH version, you may need to set permissions on the .ssh directory (to 700) and the authorized_keys file in that directory (to 600) on the target hosts.
Bash
Copy
  1. From the Ambari Server, make sure you can connect to each host in the cluster using SSH, without having to enter a password where <remote.target.host> has the value of each hostname in your cluster.
Bash
Copy
  1. If the following warning message displays during your first connection, enter Yes.
Bash
Copy
  1. Retain a copy of the SSH Private Key on the machine from which you will run the web-based Ambari Install Wizard.

It is possible to use a non-root SSH account, if that account can execute sudo without entering a password.

Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
  Last updated