Author: Hesong Wang

1.问题描述：

安装Oracle19C RAC时，配置完参数，设置完变量，在本地已经可以无密码互信RAC1，RAC2，但是在安装grid时遇到

[INS-06006] Passwordless SSH connectivity not set up between the following node(s)。

踩了ssh8以上版本的坑。

2.解决方案：

首先是怀疑大小写问题，在全部改成小写，删除原来的 .ssh 文件重新
Setup之后任然不通过。

之后查询ip和网卡，发现有虚拟网卡的存在，把虚拟网卡删除之后，重新配置，发现仍然不通过。

之后检查了一遍配置的参数，最后查到是ssh8版本的问题，

ssh -V
OpenSSH_8.9p1, OpenSSL 1.0.2k-fips  26 Jan 2017

[root@e9db1 ~]# cp -p /usr/bin/scp /usr/bin/scp-original
[root@e9db1 ~]# echo "/usr/bin/scp-original -T \$*" > /usr/bin/scp
[root@e9db1 ~]# cat /usr/bin/scp
/usr/bin/scp-original -T $*

重新安装，然后就通过了。

3.参考内容：

How to Resolve INS-06006 Passwordless SSH connectivity not set up between the following node(s)
by Ed Chen
September 5, 2015
2 Comments
You might think the SSH connectivity has been setup correctly by Oracle Universal Installer, but INS-06006 eventually appeared when you tried to test it or enter the next step. In this post, I try to list some possibilities for you to think over, and probably you can find another way out of INS-06006.

Possible Causes of INS-06006
The error usually from the network problems, please check the following questions:

The host name resolutions wrongly registered on DNS?
Because OUI could take the wrong node as another to build a wrong connectivity. Hence, please check your DNS or /etc/hosts entries again and make sure entries of hostnames are all in one kind of letter case, either lowercase or uppercase.

I know the letter cases does not matter on name resolution, but there's a bug was reported by Oracle, which concerns about the letter case of hostname. For Linux platform, the lowercase would be better.

The network design is correct?
Did you put Public IP, VIP or SCAN IP in different subnets? Because Public IP, VIP and SCAN IP should be all in the same subnet, Private IP should go to a different subnet.

VIP or SCAN is bound into any NIC?
Don't bind VIP or SCAN into any NIC. Oracle clusterware will bind them into network interfaces automatically and dynamically at startup-time. You can only bind public and private IP into NICs.

OpenSSH 8.x Problem
Since Linux 8.1 adopts OpenSSH 8.x, related commands like scp functions a little different than ever. When installer of Grid infra 19.3 validats SSH connectivity, it always fails with INS-06006. Even though you establish the connectivity manually, it cannot pass the SSH validation.

To check the version of OpenSSH, you can do this:

[root@primary01 ~]# ssh -V
OpenSSH_8.0p1, OpenSSL 1.1.1c FIPS 28 May 2019
Workaround
The workaround is to disable strict filename checking by adding an option -T.

[root@primary01 ~]# cp -p /usr/bin/scp /usr/bin/scp-original
[root@primary01 ~]# echo "/usr/bin/scp-original -T \$" > /usr/bin/scp
[root@primary01 ~]# cat /usr/bin/scp
/usr/bin/scp-original -T $
Cancel the installation, then try it again.