2017-05-10 78 views
-1

确实Ansible默认配置与其他供应商一起工作吗?例如华为?默认安全模板返回错误

如果我跑了一些测试命令,如:

须藤ansible -m壳-a '显示版本' 服务器

10.46.1.1 | UNREACHABLE! => { 
    "changed": false, 
    "msg": "Failed to connect to the host via ssh: \r\n**********************************************************************\r\n* Jus esate prisijunge prie privacios irangos. Visi veiksmai,vykdomi *\r\n* su sia iranga, yra fiksuojami. Tam, kad prieiti prie sios irangos *\r\n* ir (ar) atlikti irangos konfiguracija ar kitus veiksmus, jus turite*\r\n* tureti atitinkama leidima.           *\r\n* Uz neteiseta prisijungima bei neteisetus veiksmus su iranga taikoma*\r\n* istatymuose numatyta atsakomybe,iskaitant ir baudziamaja atsakomybe*\r\n* Prasome atsijungti.Jeigu jus esate autorizuotas vartotojas, *\r\n* prisijungdamas, jus atsakote uz teisingai atlikta konfiguracija ir *\r\n* kitus savo vardu atliktus veiksmus.        *\r\n**********************************************************************\r\n* You are connected to private equipment. All the actions performed *\r\n* with the equipment are recorded. In order to access this equipment *\r\n* and (or) perform its configuration or other actions, you must have*\r\n* an appropriate permission. Illegal connection and illegal actions *\r\n* with the equipment.            *\r\n* Will be subject to liability, including criminal liability, as  *\r\n* provided for in the laws of the Republic of Lithuania. Please  *\r\n* disconnect immediately. If you are an authorized user, by   *\r\n* connecting to the equipment, you assume liability for performing *\r\n* correct configuration and other actions under your behalf.   *\r\n**********************************************************************\r\nUser Authentication\r\npacket_write_wait: Connection to 10.46.1.1 port 22: Broken pipe\r\n", 
    "unreachable": true 
} 

osboxes @ osboxes:〜$ sudo ansible -m ping servers

10.46.1.1 | UNREACHABLE! => { 
    "changed": false, 
    "msg": "Failed to connect to the host via ssh: \r\n**********************************************************************\r\n* Jus esate prisijunge prie privacios irangos. Visi veiksmai,vykdomi *\r\n* su sia iranga, yra fiksuojami. Tam, kad prieiti prie sios irangos *\r\n* ir (ar) atlikti irangos konfiguracija ar kitus veiksmus, jus turite*\r\n* tureti atitinkama leidima.           *\r\n* Uz neteiseta prisijungima bei neteisetus veiksmus su iranga taikoma*\r\n* istatymuose numatyta atsakomybe,iskaitant ir baudziamaja atsakomybe*\r\n* Prasome atsijungti.Jeigu jus esate autorizuotas vartotojas, *\r\n* prisijungdamas, jus atsakote uz teisingai atlikta konfiguracija ir *\r\n* kitus savo vardu atliktus veiksmus.        *\r\n**********************************************************************\r\n* You are connected to private equipment. All the actions performed *\r\n* with the equipment are recorded. In order to access this equipment *\r\n* and (or) perform its configuration or other actions, you must have*\r\n* an appropriate permission. Illegal connection and illegal actions *\r\n* with the equipment.            *\r\n* Will be subject to liability, including criminal liability, as  *\r\n* provided for in the laws of the Republic of Lithuania. Please  *\r\n* disconnect immediately. If you are an authorized user, by   *\r\n* connecting to the equipment, you assume liability for performing *\r\n* correct configuration and other actions under your behalf.   *\r\n**********************************************************************\r\nUser Authentication\r\nchannel_by_id: 2: bad id: channel free\r\nDisconnecting: Received data for nonexistent channel 2.\r\n", 
    "unreachable": true 
} 

它只是连接并立即断开连接而不输入任何命令,如“显示版本”。难道是因为我不是在思科设备上运行它,而是在其他供应商上运行它?也许需要一些特殊模块?

谢谢

回答

0

您是否确认可以通过ssh正常连接到这些机器?您是否在您尝试连接的计算机上创建了一个完整的帐户? 这听起来像是试图在主机上运行ansible的用户帐户,可能在主机上没有ssh密钥。你试过

ssh-copy-id [email protected] 

,并确认您可以登录到该主机

ssh [email protected] 

用钥匙?

+0

的用户是比“ansible”等。所以ssh user @ host工作。我编辑了etc/ansible/hosts文件这一行:[servers] 10.46.1.1 ansible_ssh_user = user ansible_ssh_pass = pasword ansible_ssh_common_arg =“ - o HostKeyAlgorithms = ssh-rsa -o KexAlgorithms = diffie-hellman-group1-sha1 -o Ciphers = aes256-cbc,3des-cbc -o MACs = hmac-md5,hmac-sha2-512“也编辑了/ etc/ansible/group_vars/servers文件这个输入:ansible_ssh_user:user。那么,什么可能是不够的?谢谢 – Edvinas

0

您可以使用与'shell'不同的其他模块来访问华为设备。如果你看看here,你会看到一些云引擎模块。 Shell模块用于服务器,不用于交换机。

所以,我会写这样的事:ansible -m ce_command -a“显示版本”服务器