Linux ssh/scp連接時避免輸入yes（公鑰驗證）並防止出現POSSIBLE BREAK-IN ATTEM

方法一：連接時加入StrictHostKeyChecking=no

ssh -o StrictHostKeyChecking=no root@192.168.1.100

方法二：修改/etc/ssh/ssh_config配置文件，添加：

StrictHostKeyChecking no

 

此外，為防止出現這類警告：POSSIBLE BREAK-IN ATTEMPT!

Address 192.168.0.101 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!

可以將/etc/ssh/ssh_config配置文件中的

GSSAPIAuthentication yes

改為：

GSSAPIAuthentication no

可以使用sed流編輯器來完成修改：

sed -i 's/#   StrictHostKeyChecking ask/StrictHostKeyChecking no/' /etc/ssh/ssh_config
sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/' /etc/ssh/ssh_config
service sshd restart