Oracle Database Oracle Clusterware Installation Guide for HP-UX

Configuring SSH or RCP on All Cluster Nodes
following example is with SCP, on a node called node2, with the Oracle
Clusterware owner crs, where the crs user path is /home/crs:
[crs@node1 .ssh]$ scp authorized_keys node2:/home/crs/.ssh/
You are prompted to accept an RSA key. Enter Yes, and you see that the node you
are copying to is added to the known_hosts file.
When prompted, provide the password for the crs user, which should be the
same on all nodes in the cluster. The authorized_keys file is copied to the
remote node.
Your output should be similar to the following, where xxx represents parts of a
valid IP address:
[crs@node1 .ssh]$ scp authorized_keys node2:/home/crs/.ssh/
The authenticity of host 'node2 (xxx.xxx.173.152) can't be established.
RSA key fingerprint is 7e:60:60:ae:40:40:d1:a6:f7:4e:zz:me:a7:48:ae:f6:7e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'node1,xxx.xxx.173.152' (RSA) to the list
of known hosts
crs@node2's password:
authorized_keys 100% 828 7.5MB/s 00:00
3. Using SSH, log in to the node where you copied the authorized_keys file,
using the pass phrase you created. Then change to the .ssh directory, and using
the cat command, add the RSA keys for the second node to the authorized_
keys file:
[crs@node1 .ssh]$ ssh node2
The authenticity of host node2 (xxx.xxx.100.102) can’t be established. RSA key
fingerprint is z3:z3:33:z3:z3:33:zz:76:z3:z3:z3.
Are you sure you want to continue connecting? (yes/no)? yes
Enter passphrase for key '/home/oracle/.ssh/id_rsa':
[crs@node2 crs]$ cd .ssh
[crs@node2 ssh]$ cat id_rsa.pub >> authorized_keys
Repeat steps 2 and 3 from each node to each other member node in the cluster.
When you have added keys from each cluster node member to the authorized_
keys file on the last node you want to have as a cluster node member, then use
scp to copy the authorized_keys file with the keys from all nodes back to each
cluster node member, overwriting the existing version on the other nodes.
If you want to confirm that you have all nodes in the authorized_keys file,
enter the command more authorized_keys, and check to see that there is an
RSA key for each member node. The file lists the type of key (ssh-rsa), followed by
the key, and then followed by the user and server. For example:
ssh-rsa AAAABBBB . . . = crs@node1
Note: The crs user's /.ssh/authorized_keys file on every node
must contain the contents from all of the /.ssh/id_rsa.pub files
that you generated on all cluster nodes.
2.10.4 Enabling SSH User Equivalency on Cluster Member Nodes
To enable Oracle Universal Installer to use the ssh and scp commands without being
prompted for a pass phrase, follow these steps:
Oracle Clusterware Preinstallation Tasks 2-23