ansible 批量按用户名创建kerberos主体，并分发到远程主机

最新推荐文章于 2025-05-14 19:44:37 发布

蘑菇丁

最新推荐文章于 2025-05-14 19:44:37 发布

阅读量634

点赞数 2

分类专栏： ansible 文章标签：服务器 ansible 大数据

本文链接：https://blog.youkuaiyun.com/haoxiaoyan/article/details/145322707

版权

可以批量生产票据并分发目标主机

- name: Configure Kerberos for Hadoop Users
  hosts: hadoop_servers
  become: no
  gather_facts: no
  vars:
    kerberos_server: hadoop01.xuexi.com
    keytab_dir: /home/hadoop/hxy
    keytab_local_dir: ./keytabs
    principals:
      - hxy
      - stars

  tasks:

    - name: Ensure key directory exists
      ansible.builtin.file:
        path: "{
  
  { keytab_dir }}"
        state: directory
        mode: '0755'

    - name: Create Kerberos principals and generate keytab files
      block:
        - name: Create a Kerberos principal
          ansible.builtin.command: >
            kadmin.local -q "addprinc -randkey {
  
  { item }}/{
  
  { inventory_hostname }}@XUEXI.COM"
          register: addprinc_results
          delegate_to: "{
  
  { kerberos_server }}"
          ignore_errors: yes
          loop: "{
  
  { principals }}"

        - name: Set facts for successfully c