HELLO

我们在使用CentOS系统时候，安装RAC时，需要配置各个节点的互信关系，使rsh、rlogin、rcp等命令不需要输入密码可以操作其他节点。除了按照管法rac安装文档中的方法配置ssh之外，还可以通过修改.rhosts等文件实现互信。在unix（如aix）中，可以简单修改/etc/hosts.equiv实现，但是Linux中比较麻烦，需要一些其他的步骤，下面我们来演示在CentOS系统中配置方法：

CentOS系统时需要在各个节点上完成如下操作

1、检查在CentOS系统中rsh-server包是否已经安装

[root@rac1 ~]# rpm -qa|grep -i ^rsh-server
rsh-server-0.17-40.el5

如果没有安装使用rpm -ivh 命令安装

2、确保/etc/xinetd.d/rlogin中存在disable = no这一行

1.[root@rac1 ~]# cat /etc/xinetd.d/rlogin 2.# default: on 3.# description: rlogind is the server for the rlogin(1) program. The server 4.# provides a remote login facility with authentication based on 5.# privileged port numbers from trusted hosts. 6.service login 7.{disable = no 8.socket_type = stream 9.wait = no er = root 11.log_on_success += USERID 12.log_on_failure += USERID 13.server = /usr/sbin/in.rlogind} 3、确保/etc/xinetd.d/rsh中存在disable = no这一行

1.[root@rac1 ~]# cat /etc/xinetd.d/rsh 2.# default: on 3.# description: The rshd server is the server for the rcmd(3) routine and, 4.# consequently, for the rsh(1) program. The server provides 5.# remote execution facilities with authentication based on 6.# privileged port numbers from trusted hosts. 7.service shell 8.{ 9.disable = no 10.socket_type = stream 11.wait = no er = root 13.log_on_success += USERID 14.log_on_failure += USERID 15.server = /usr/sbin/in.rshd 16.} 17. 4、在CentOS系统重启xinetd服务

[root@rac1 ~]# service xinetd restart
Stopping xinetd: [ OK ]
Starting xinetd: [ OK ]

5、在CentOS系统编辑/etc/securetty，确保存在rexec、rsh、rlogin三行

1.[root@rac1 ~]# cat /etc/securetty 2.console 3.vc/1 4.vc/2 5.vc/3 6.vc/4 7.vc/5 8.vc/6 9.vc/7 10.vc/8 11.vc/9 12.vc/10 13.vc/11 14.tty1 15.tty2 16.tty3 17.tty4 18.tty5 19.tty6 20.tty7 21.tty8 22.tty9 23.tty10 24.tty11 25.rexec 26.rsh 27.rlogin 28. 6、在CentOS系统编辑/etc/hosts.equiv文件，如下所示

1.[root@rac1 ~]# cat /etc/hosts.equiv 2.+rac1 oracle 3.+rac2 oracle 4.+rac1-priv oracle 5.+rac2-priv oracle 6.+rac1 root 7.+rac2 root 8.+rac1-priv root 9.+rac2-priv root 10. 7、在CentOS系统编辑/etc/hosts文件，如下所示

1.[root@rac1 ~]# cat /etc/hosts 2.# Do not remove the following line, or various programs 3.# that require network functionality will fail. 4.127.0.0.1 localhost.localdomain localhost 5.::1 localhost6.localdomain6 localhost6 6. 7.#public 8.192.168.2.101 rac1.localdomain rac1 9.192.16
8.2.102 rac2.localdomain rac2 10. 11.#private 12.192.168.0.101 rac1-priv.localdomain rac1-priv 13.192.168.0.102 rac2-priv.localdomain rac2-pr