RAC 搭建

rac01:

192.168.1.131/24

10.10.10.31/24

rac02:

192.168.1.132/24

10.10.10.32/24

vip:

192.168.1.133

192.168.1.134

 

127.0.0.1                localhost

192.168.1.131            rac01        rac01

192.168.1.133            rac01-vip    rac01-vip

10.10.10.31              rac01-priv   rac01-priv

192.168.1.132            rac02        rac02

192.168.1.134            rac02-vip    rac02-vip

10.10.10.32              rac02-priv   rac02-priv

 

每次引導叢集節點時，原始裝置都必須與塊裝置繫結。

 

/dev/raw/raw1 /dev/sdc1

/dev/raw/raw2 /dev/sdd1

/dev/raw/raw3 /dev/sde1

 

/sbin/service rawdevices restart

 

chown oracle:dba /dev/raw/raw[1-3]

chmod 660 /dev/raw/raw[1-3]

ls -lat /dev/raw/raw*

 

su - oracle

ln -sf /dev/raw/raw1 /u01/oradata/devdb/asmdisk1

ln -sf /dev/raw/raw2 /u01/oradata/devdb/asmdisk2

ln -sf /dev/raw/raw3 /u01/oradata/devdb/asmdisk3

 

啟動載入引導：

/etc/udev/permissions.d/50-udev.permissions

# raw devices

ram*:root:disk:0660

#raw/*:root:disk:0660

raw/*:oracle:dba:0660

 

 

ssh oracle@rac02 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

ssh oracle@rac02 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

 

 

在每個主機上，以 oracle 使用者身份登入：

mkdir ~/.ssh

chmod 755 ~/.ssh

/usr/bin/ssh-keygen -t rsa

-----------------------------------

/usr/bin/ssh-keygen -t dsa

 

例如：

$ mkdir ~/.ssh

$ chmod 755 ~/.ssh

$ /usr/bin/ssh-keygen -t rsa

 

 

只需在第一個主機上，以 oracle 使用者身份登入（複製本地帳戶的金鑰，以便連線本地主機的 ssh 能夠起作用）：

cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

 

ssh oracle@ds2 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

 

（如果您要剪下和貼上這些命令，則分別執行它們。 SSH 每次會提示輸入 oracle 的口令，如果同時貼上這些命令，則第一個命令在提示輸入口令之前重新整理輸入緩衝區，從而導致其他命令將會丟失。）

ssh oracle@ds2 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

 

chmod 644 ~/.ssh/authorized_keys

 

例如：

$ cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

$ cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

$ ssh oracle@ds2 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

The authenticity of host 'ds2 (192.168.200.52)' can't be established.

RSA key fingerprint is d1:23:a7:df:c5:fc:4e:10:d2:83:60:49:25:e8:eb:11.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'ds2,192.168.200.52' (RSA) to the list of known hosts.

oracle@ds2's password:

$ ssh oracle@ds2 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

oracle@ds2's password:

$ chmod 644 ~/.ssh/authorized_keys

 

現在對第二個主機做同樣的處理。 請注意，這次 SSH 會提示您輸入在建立金鑰時所使用的口令短語而非 oracle 的口令。 這是因為第一個主機 (ds1) 現在知道了第二個主機的公共金鑰，而 SSH 現在使用的是一種不同的認證協議。

cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

 

ssh oracle@ds1 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

 

ssh oracle@ds1 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

 

chmod 644 ~/.ssh/authorized_keys

 

例如：

$ cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

$ cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

$ ssh oracle@ds1 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

The authenticity of host 'ds1 (192.168.200.51)' can't be established.

RSA key fingerprint is bd:0e:39:2a:23:2d:ca:f9:ea:71:f5:3d:d3:dd:3b:65.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added 'ds1,192.168.200.51' (RSA) to the list of known hosts.

Enter passphrase for key '/home/oracle/.ssh/id_rsa':

$ ssh oracle@ds1 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

Enter passphrase for key '/home/oracle/.ssh/id_rsa':

$ chmod 644 ~/.ssh/authorized_keys

 

建立使用者等效性

 

最後，在生成金鑰、複製檔案並重復地輸入口令和口令短語（安全性有意思吧？）所有這些工作完成之後，您就可以建立使用者等效性了。 在建立使用者等效性時，不會再提示您輸入口令。

 

以 oracle 使用者身份在將要安裝 Oracle 10g 軟體的節點 (ds1) 上：

exec /usr/bin/ssh-agent $SHELL

/usr/bin/ssh-add

 

例如：

$ exec /usr/bin/ssh-agent $SHELL

$ /usr/bin/ssh-add

Enter passphrase for /home/oracle/.ssh/id_rsa:

Identity added: /home/oracle/.ssh/id_rsa (/home/oracle/.ssh/id_rsa)

Identity added: /home/oracle/.ssh/id_dsa (/home/oracle/.ssh/id_dsa)

 

$ ssh ds2 date

Sun Jun 27 19:07:19 CDT 2004

 

測試每個方向上所有伺服器的連通性是非常重要的。 這樣會確保當 OUI 在 CRS 和資料庫軟體安裝期間試圖複製檔案時不會出現類似以下的訊息。 該訊息只有在遠端節點上第一次執行操作時才會出現，因此通過測試連通性，您不僅確保了遠端操作的正常執行，還完成了初始的安全金鑰交換。

The authenticity of host 'ds2 (192.168.200.52)' can't be established.

RSA key fingerprint is 8f:a3:19:76:ca:4f:71:85:42:c2:7a:da:eb:53:76:85.

Are you sure you want to continue connecting (yes/no)? yes

 

ssh rac02 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

ssh rac02 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

scp ~/.ssh/authorized_keys rac02:~/.ssh/authorized_keys

clock=pit nosmp noapic nolapic

 

 

 

ssh rac02 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys

ssh rac02 cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

scp ~/.ssh/authorized_keys rac02:~/.ssh/authorized_keys

 

Checking O2CB heartbeat: Not active

[root@rac01 ~]# mount -t ocfs2 -o datavolume,nointr /dev/sdb1 /ocfs