使用ansible批量修改操作系统管理员账号密码

一、ansible server端配置

1、对于Linux主机配置免密登录ssh-copy-id -i ~/.ssh/id_rsa.pub root@remote_ip
2、在/etc/ansible/hosts文件中添加相应主机IP
在这里插入图片描述
3、对于Windows主机需要在/etc/ansible/hosts文件中进行以下配置
在这里插入图片描述

192.168.83.132 ansible_ssh_user=administrator ansible_ssh_pass=2008.Com ansibe_port=5985 ansible_connection="winrm" ansible_winrm_server_cert_validation=ignore ansible_winrm_transport=ntlm

二、Windows客户端配置

1、确保.NET 4.0+和powershell 3.0+
Microsoft .NET Framework 4.5下载地址:https://download.microsoft.com/download/B/A/4/BA4A7E71-2906-4B2D-A0E1-80CF16844F5F/dotNetFx45_Full_setup.exe
更新PowerShell 2.0到3.0的脚本:https://github.com/ansible/ansible/blob/devel/examples/scripts/upgrade_to_ps3.ps1

2、查看并设置powershell执行策略为remotesigned:
在这里插入图片描述
3、查看powershell版本号,如果低于3.0请执行upgrade_to_ps3.ps1
在这里插入图片描述
4、执行ConfigureRemotingForAnsible.ps1(下载地址:https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1
在这里插入图片描述
5、防火墙开启5985、5986端口或者关闭防火墙

三、在ansible server执行修改管理密码的操作

1、修改Linux:
在这里插入图片描述
2、修改Windows:
在这里插入图片描述

四、脚本展示:

#pwd-linux.yml
---
- hosts: linux
  gather_facts: false
  tasks:
  - name: change password for root
user: name=root password={{ chpass | password_hash('sha512') }} update_password=always
#change-win-pwd.sh
#!/bin/bash
read -p "please input old password: " password1
read -p "please input new password: " password2
read -p "Retype new password: " password3

if [ $password2 = $password3 ]; then
    echo "net users administrator \"$password3\"" > pwd.bat
    ansible-playbook pwd-win.yml
    sed -i "s/$password1/$password3/g" /etc/ansible/hosts
    ansible-playbook file-win.yml
else
    echo "try again"
fi
#pwd-win.yml
---
- hosts: win
  tasks:
  - name: copy file
    win_copy: src=/root/pwd.bat dest=C:\\pwd.bat
  - name: change password
win_shell: C:\pwd.bat
#file-win.yml
---
- hosts: win
  tasks:
  - name: delete file
    win_shell: "del C:\\pwd.bat"
上一篇:Iterator对象功能学习


下一篇:EasyExcel模板填充list时按第一行格式合并单元格(含分页线设置)