Enable Secure Shell (SSH) Logins

The administrative account must be able to use Secure Shell (SSH) to log in (ssh) to all hosts without specifying a password. The shell script install_vertica does this automatically. This section describes how to do it manually if necessary.

1. If you do not already have SSH installed on all hosts, log in as root on each host and install it now. You can download a free version of the SSH connectivity tools from OpenSSH.
2. Log in to the Vertica administrator account (dbadmin in this example).
3. Make your home directory (~) writable only by yourself. Choose one of:

   # chmod 700 ~

   or

   # chmod 755 ~

   where:

   700 Includes	755 Includes
   400 read by owner 200 write by owner 100 execute by owner	400 read by owner 200 write by owner 100 execute by owner 040 read by group 010 execute by group 004 read by anybody (other) 001 execute by anybody

4. Change to your home directory:

   # cd ~

5. Generate a private key/ public key pair:

   # ssh-keygen -t rsa

   Generating public/private rsa key pair.

   Enter file in which to save the key (/home/dbadmin/.ssh/id_rsa):

   Created directory '/home/dbadmin/.ssh'.

   Enter passphrase (empty for no passphrase):

   Enter same passphrase again:

   Your identification has been saved in /home/dbadmin/.ssh/id_rsa.

   Your public key has been saved in /home/dbadmin/.ssh/id_rsa.pub.

6. Make your .ssh directory readable and writable only by yourself:

   # chmod 700 ~/.ssh

7. Change to the .ssh directory:

   # cd ~/.ssh

8. Copy the file id_rsa.pub onto the file authorized_keys2.

   # cp id_rsa.pub authorized_keys2

9. Make the files in your .ssh directory readable and writable only by yourself:

   # chmod 600 ~/.ssh/*

10. For each cluster host:

    # scp -r ~/.ssh <host>:.

11. Connect to each cluster host. The first time you ssh to a new remote machine, you may get a message similar to the following:

    $ ssh dev0

    Warning: Permanently added 'dev0,192.168.1.92' (RSA) to the list of known hosts.

    This message appears only the first time you ssh to a particular remote host.