[ORACLE] INS-30132 PRVF-4008 PRVF-4098 | 노드간 SSH 비밀번호 없는 접속 설정

 

-- 설치 시 오류 메세지 
./runInstaller -silent -responseFile /media/rsp/db_engine.rsp -ignorePrereqFailure

Launching Oracle Database Setup Wizard...

[FATAL] [INS-30132] Initial setup required for the execution of installer validations failed on nodes: ug192
   CAUSE: Indicated nodes were not reachable, or the user equivalence is not available for those nodes, or the user failed to access the temporary location on the indicated nodes.
   ACTION: Ensure that all the indicated nodes are reachable, user equivalence exists for those nodes and current user has required permissions to access the temporary location on all the indicated nodes.
*ADDITIONAL INFORMATION:*
 - PRVF-4008 : User equivalence unavailable on all the specified nodes
 - Cause:  User equivalence did not exist between the local node and the remote nodes.
 - Action:  Ensure that user equivalence exists on all the nodes specified. The command 'cluvfy comp admprv -o user_equiv' can be used with the '-fixup' option to set up user equivalence. A password is required.
Summary of node specific errors
ug192
 - PRVF-4098 : User equivalence not found for node "node2"
 - Cause:  Cannot access node specified using user equivalence.
 - Action:  Ensure that user equivalence is setup between the local node and the node specified.
node1

 

GRID_HOME의 sshUserSetup.sh 사용

cd $GRID_HOME/deinstall
----------------------------------------------------------------
-rwxr-x---. 1 grid oinstall 33333 Jun 30 16:39 sshUserSetup.sh


./sshUserSetup.sh -user oracle -hosts "node1 node2" -noPromptPassphrase -advanced

-- 확인
-- node1에서 2접속
ssh node2 date
-- node2에서 1접속
ssh node1 date

 

 

수동 생성

1. /home/oracle .ssh 폴더 백업 및 새로 생성

< 양쪽노드 둘다 >
mv .ssh .ssh_org

mkdir ~/.ssh
chmod 700 ~/.ssh

/usr/bin/ssh-keygen -t dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/home/grid/.ssh/id_dsa):
엔터
Enter passphrase (empty for no passphrase):
엔터
Enter same passphrase again:
엔터
Your identification has been saved in cd .ssh.
Your public key has been saved in cd .ssh.pub.
The key fingerprint is:
~~~
The key's randomart image is:
+---[DSA 1024]----+
|   +++...        |
|.   = ..         |
|E.=..=.          |
|o+ B o+o o       |
|  o * o.S +      |
|   + +.=.= o     |
|  . +oo.o.o .    |
|   +o.o..  .     |
| .o+o...         |
+----[SHA256]-----+​

 

2. 수동 키 설정

cd .ssh
cat id_dsa.pub >> authorized_keys
scp authorized_keys grid@[ip / hostname]:/home/grid/.ssh

yes 입력
password 입력

-- 확인
ssh node2 date

3. 그래도 비밀번호 없는 접속이 되지 않는 경우

각 노드에서 
cat authorized_keys
확인 시 --> ssh-dss ~~~ grid@node1 , node2 가 모두 있는지 확인해야한다.
없으면 복사해서 수정 후 접속테스트 하면 됨

-> 예시
[+ASM1:/home/grid/.ssh]> cat authorized_keys
ssh-dss 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 grid@rac1
ssh-dss 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 grid@rac2