可能的错误。在aws ec2上设置我的ansilbe后,无法访问windows节点
问题描述:
。我能够与我的Linux EC2交谈,但与我的Windows EC2有问题。可能的错误。在aws ec2上设置我的ansilbe后,无法访问windows节点
在安装有Ansible远程Windows服务器
PS C:\Users\name.domain> Winrm quickconfig
WinRM service is already running on this machine.
WinRM is already set up for remote management on this computer.
在我的Linux主机:
# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [email protected]
Valid starting Expires Service principal
09/19/2016 10:02:18 09/19/2016 20:02:18 krbtgt/[email protected]
renew until 09/26/2016 10:02:12
/etc/ansible/hosts
[local]
127.0.0.1
[windows]
ip address
[windows:vars]
ansible_user= [email protected]
ansible_password= password
ansible_port= 5985
ansible_connection= winrm
这是错误
# ansible windows -m win_ping
ip_address | UNREACHABLE! => {
"changed": false,
"msg": "kerberos: requested auth method is kerberos, but requests_kerberos is not installed, ssl: HTTPSConnectionPool(host='ip_address', port=5986): Max retries exceeded with url: /wsman (Caused by ConnectTimeoutError(<requests.packages.urllib3.connection.VerifiedHTTPSConnectio n object at 0x3585d90>, 'Connection to ip_address timed out. (connect timeout=30)'))",
"unreachable": true
}
答
看来,这Ansible尝试使用Kerberos连接到Windows EC2。我认为这是因为您的ansible_user
包含此@ Domain.com。第一个问题:你真的想使用Kerberos/Active Directory吗?我会建议在第一步使用本地管理员帐户,这很容易。请参阅完整示例:https://github.com/jonashackt/ansible-windows-springboot(使用Vagrant,但我认为您可以轻松适应AWS)。
或者 - 如果您需要Active Directory支持 - 是否正确配置了所有内容,例如docs are stating?该错误似乎与第一步描述的那里有关,您必须通过以下方式安装requests_kerberos:
pip install kerberos requests_kerberos