1、查看幫助 [admin@node1 ansible]$ ansible-doc -s user name： state：absent（刪除）present（存在） home: shell: system: uid: * 創建用戶 錯誤1： ~~~ [admin@node1 ansible]$ ansible webserver -m user -a "name=hacluster state=present uid=1510 shell=/sbin/nologin" -u admin 192.168.20.131 | FAILED! => { "changed": false, "cmd": "/sbin/useradd -u 1510 -s /sbin/nologin -m hacluster", "msg": "[Errno 13] Permission denied", "rc": 13 } 192.168.20.132 | FAILED! => { "changed": false, "cmd": "/sbin/useradd -u 1510 -s /sbin/nologin -m hacluster", "msg": "[Errno 13] Permission denied", "rc": 13 } ~~~ 第一種解決辦法： 在/etc/ansible/hosts配置文件中寫 ~~~ /etc/ansible/hosts [testserver] 192.168.20.130 ansible_port=1050 ansible_become_user=root ansible_become_pass="Lsf&8816" * 在執行命令 [admin@node1 ansible]$ ansible webserver -m user -a "name=hacluster uid=1051 shell=/sbin/nologin state=present" --become 192.168.20.132 | SUCCESS => { "changed": true, "comment": "", "createhome": true, "group": 1051, "home": "/home/hacluster", "name": "hacluster", "shell": "/sbin/nologin", "state": "present", "system": false, "uid": 1051 } 192.168.20.131 | SUCCESS => { "changed": true, "comment": "", "createhome": true, "group": 1051, "home": "/home/hacluster", "name": "hacluster", "shell": "/sbin/nologin", "state": "present", "stderr": "Creating mailbox file: File exists\n", "stderr_lines": [ "Creating mailbox file: File exists" ], "system": false, "uid": 1051 } ~~~ 第二種方法：在ad-hoc命令后面加上-b或--become和--ask-sudo-pass ~~~ [admin@node1 ansible]$ ansible webserver -m user -a "name=hacluster01 uid=1052 shell=/sbin/nologin state=present" --ask-sudo-pass -b [DEPRECATION WARNING]: The sudo command line option has been deprecated in favor of the "become" command line arguments. This feature will be removed in version 2.6. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. SUDO password: 輸入admin的密碼 192.168.20.131 | SUCCESS => { "changed": true, "comment": "", "createhome": true, "group": 1052, "home": "/home/hacluster01", "name": "hacluster01", "shell": "/sbin/nologin", "state": "present", "system": false, "uid": 1052 } 192.168.20.132 | SUCCESS => { "changed": true, "comment": "", "createhome": true, "group": 1052, "home": "/home/hacluster01", "name": "hacluster01", "shell": "/sbin/nologin", "state": "present", "system": false, "uid": 1052 } ~~~ * 刪除用戶 ~~~ [admin@node1 ansible]$ clear [admin@node1 ansible]$ ansible webserver -m user -a "name=hacluster01 state=absent" --ask-sudo-pass -b [DEPRECATION WARNING]: The sudo command line option has been deprecated in favor of the "become" command line arguments. This feature will be removed in version 2.6. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. SUDO password: 192.168.20.131 | SUCCESS => { "changed": true, "force": false, "name": "hacluster01", "remove": false, "state": "absent" } 192.168.20.132 | SUCCESS => { "changed": true, "force": false, "name": "hacluster01", "remove": false, "state": "absent" } ~~~