hosts文件，存储要部署的节点IP地址，其中以＃开头表示注释掉
192.168.101.52 192.168.101.53 192.168.101.54 192.168.101.55 192.168.101.56
start.sh文件 在hosts文件中存储的所有节点上，生成默认的公钥和私钥，其中单个节点生成的脚本在keygen文件中
#!/bin/bash
# ssh-keygen every node
hosts="hosts"
if [ -f hosts ]
then
echo "Start ssh free"
else
echo "Please add hosts file"
exit 1
fi
if [ $# != 2 ]
then
echo "USAGE:$0 user password!"
exit 1
else
username=$1
pawdname=$2
#login every node and ssh-keygen
for x in `cat hosts | sed "/^#.*/d"`
do
#echo ${x}
if [ -f keygen ]
then
expect keygen ${username} ${x} ${pawdname}
else
echo "ssh-keygen not exists"
echo "Please check it"
exit 1
fi
done
fi
keygen文件 在单个节点上生成公钥和私钥
#!/usr/bin/expect -f
set timeout 2
set name [lindex $argv 0]
set node [lindex $argv 1]
set pawd [lindex $argv 2]
spawn ssh ${name}@${node}
expect {
"*yes/no*" {send "yes\n";exp_continue}
"*password:" {send "$pawd\r"}
}
expect "*${name}@${node}*"
send "ssh-keygen -t rsa -P ‘‘\r"
expect "*ssh/id_rsa):"
send "\r"
expect {
"Overwrite (y/n)?" {send "y\n";exp_continue}
"*${name}@${node}*" {send "exit\r"}
}
expect eof
exit
备注：请注意，不同版本的提示输出不一样，可能需要读者手动更改keygen 文件中，expect后面的语句
上述几个文件，就可以完成在指定的节点上，生成密钥对了，下面来看下后续处理生成密钥的过程，代码如下：
author.sh 将start.sh脚本中生成的公钥写入到authorized_keys中，并将其上传到各个节点上，最后更改该文件的权限
#!/bin/bash
TMP="tmps"
rm -rf ${TMP}
mkdir ${TMP}
TMP=`cd ${TMP};pwd`
HOST="hosts"
USER=""
PAWD="111111"
if [ $# == 1 ]
then
USER=$1
elif [ $# == 2 ]
then
USER=$1
PAWD=$2
else
echo "USAGE:$0 username"
echo "USAGE:$0 username password"
exit 1
fi
echo ${USER}" "${PAWD}
#download id_rsa.pub from every node to the tmp dir
count=1
for x in `cat ${HOST}| sed "/^#.*/d"`
do
expect download ${USER} ${x} ${PAWD} "${TMP}/${count}"
count=`expr $count + 1`
done
#let all id_rsa.pub into authorized_keys
count=1
for x in `ls ${TMP}/*`
do
if [ count == 1 ]
then
cat ${x} > /home/${USER}/.ssh/authorized_keys
else
cat ${x} >> /home/${USER}/.ssh/authorized_keys
fi
count=`expr $count + 1`
done
#upload the authorized_keys to every node
for x in `cat ${HOST}| sed "/^#.*/d"`
do
expect upload ${USER} ${x} ${PAWD}
done
#chmod 600 to authorized_keys
for x in `cat ${HOST}| sed "/^#.*/d"`
do
expect priority ${USER} ${x} ${PAWD}
done
download 和upload脚本比较简单，就当作给读者的练习题吧，如果需要完整的代码，欢迎从这里下载：https://github.com/nashiyue/fssh.git
原文：http://www.cnblogs.com/nashiyue/p/5003276.html