Veritas Access 安装指南

第 1 阶段：在 Veritas Access 群集的每个节点上创建 access_user

1. 创建 access_user 并设置密码。

   例如：

   [root@access1_01 ~]# useradd access_user
   [root@access1_01 ~]# passwd access_user
   Changing password for user access_user.
   New password:
   Retype new password:
   passwd: all authentication tokens updated successfully.

2. 将 access_user 添加到 sudoers 文件中。

   例如：

   [root@access1_01 ~]# echo "access_user ALL=(ALL) NOPASSWD: ALL" 
   >> /etc/sudoers

   在群集的所有节点上完成第 1 阶段。

第 2 阶段：在每个节点上，在 root 用户与 access_user 之间设置无密码通信

1. 为 root 用户生成 rsa 密钥（如果不存在）。

   例如：

   [root@access1_01 ~]# ssh-keygen
   Generating public/private rsa key pair.
   Enter file in which to save the key (/root/.ssh/id_rsa):
   Created directory '/root/.ssh'.
   Enter passphrase (empty for no passphrase):
   Enter same passphrase again:
   Your identification has been saved in /root/.ssh/id_rsa.
   Your public key has been saved in /root/.ssh/id_rsa.pub.
   The key fingerprint is:
   SHA256:hRIBljcpsmGMCtfUUjyVGOfe957OXyiXcRyiYBprmZk root@access1_01
   The key's randomart image is:
   +---[RSA 2048]----+
   | o o+*=*o.       |
   |o *.= O+..       |
   |oo + +.+oo.  . . |
   |. .    oXo. . ...|
   |       ES ... . o|
   |      .    . . = |
   |            . = .|
   |             = ..|
   |             .=..|
   +----[SHA256]-----+

2. 对于群集中的每个节点，将 root 用户的 rsakey.pub 复制到 access_user。

   例如：

   [root@access1_01 ~]# ssh-copy-id access_user@access1_01
   /usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed:
   "/root/.ssh/id_rsa.pub"
   /usr/bin/ssh-copy-id: INFO: attempting to log in with the new 
   key(s),to filter out any that are already installed
   /usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- 
   if you are prompted now it is to install the new keys
   access_user@access1_01's password:
   
   Number of key(s) added: 1

第 3 阶段：选择通信类型 SUDO_SSH

• 创建 /opt/VRTSnas/conf/communication.conf 文件。

  [root@access1_01 ~]# cat /opt/VRTSnas/conf/communication.conf
  {
      "WorkingVersion": "1",
      "Version": "1",
      "CommunicationType": "SUDO_SSH"
  }