使用ansible批量对IdM的客户端进行安装

在因遇到问题，服务端需要重新安装，服务端重新安装完成后客户端的注册使其自动化，第一次都是手动的，166个节点，累死了，这回轻输了，几个命令搞定

相关脚本位置

这里有安装的、卸载的、还有其它的，可以自己研究下，对了这个需要安装ansible-freeipa的包

[root@mu01 playbooks]# pwd
/usr/share/doc/ansible-freeipa/playbooks
[root@mu01 playbooks]# ls
automember                        dnsrecord        idview                          privilege                           sudocmd
automount                         dnszone          install-client.yml              pwpolicy                            sudocmdgroup
backup-server-to-controller.yml   group            install-cluster.yml             remove-all-backups-from-server.yml  sudorule
backup-server.yml                 hbacrule         install-replica.yml             remove-backup-from-server.yml       topology
cert                              hbacsvc          install-server.yml              restore-server-from-controller.yml  trust
config                            hbacsvcgroup     install-smartcard-clients.yml   restore-server.yml                  uninstall-client.yml
copy-all-backups-from-server.yml  host             install-smartcard-replicas.yml  role                                uninstall-cluster.yml
copy-backup-from-controller.yml   hostgroup        install-smartcard-servers.yml   selfservice                         uninstall-replica.yml
copy-backup-from-server.yml       idoverridegroup  install-smartcard-server.yml    server                              uninstall-server.yml
delegation                        idoverrideuser   location                        service                             user
dnsconfig                         idp              netgroup                        servicedelegationrule               vault
dnsforwardzone                    idrange          permission                      servicedelegat

批量卸载

ansible-playbook -v -i /etc/ansible/ipa  uninstall-client.yml

批量安装

ansible-playbook -v -i /etc/ansible/ipa  install-client.yml

ipa文件

[ipaclients]
node1.gqliu.com
node2.gqliu.com
...
node166.gqliu.com
[ipaclients:vars]
ipaadmin_principal=admin
ipaadmin_password=PASSW0RD