本帖最后由 lef 于 2013-9-22 09:00 编辑
本文系统Centos6.0
master:master.lansgg.com 192.168.182.143
client1 :client1.lansgg.com 192.168.182.142
client2: client2.lansgg.com 192.168.182.149
很简单的:
案例1:在client1、client2上创建一个用户zhangsan
首先查看下master上的注册信息是否正确:
注册证书OK;
master端:
[iyunv@master ~]# vim /etc/puppet/manifests/site.ppimport "node1.pp"编写site.pp文件中包含的pp
[iyunv@master ~]# vim /etc/puppet/manifests/node1.ppuser {"zhangsan": ensure => present, uid => 1001, gid => 1001,# home => "/home/zhangsan", #此为可以创建非默认的家目录 comment => "test's user", #此为描述信息 managehome => true, #自动创建家目录 password => '$1$uvqOM1$4dTiuTlz/iWzj1sJEKaU9.', #密码 groups => test, 同时将zhangsan加入test组 shell => "/bin/bash"; }group {"zhangsan": gid => 1001, ensure => "present", }PS:上面的password属性的字符串:
[iyunv@master manifests]# grub-md5-cryptPassword:Retype password:$1$uvqOM1$4dTiuTlz/iWzj1sJEKaU9. 接下来在client2进行测试:
可以看到测试ok;你也可以通过ssh测试的密码正确性;
案例2、我们将zhangsan用户删除;
master端:
[iyunv@master ~]# vim /etc/puppet/manifests/site.ppimport "node.pp"
[iyunv@master ~]# vim /etc/puppet/manifests/node.ppuser {"zhangsan": ensure => absent, } 我们在client端进行测试:
案例3、我们在不同的机器上创建不同的用户,client1上创建test1,client2上创建test2;
[Shell] 纯文本查看 复制代码
[iyunv@master ~]# vim /etc/puppet/manifests/site.pp
import "node1.pp"
[iyunv@master ~]# vim /etc/puppet/manifests/node1.pp
node 'client1.lansgg.com' {
user {"test1":
ensure => present,
uid => 999,
gid => 999,
managehome => true,
password => '$1$uvqOM1$4dTiuTlz/iWzj1sJEKaU9.',
shell => "/bin/bash";
}
group {"test1":
gid => 999,
ensure => "present",
}
}
node 'client2.lansgg.com' {
user {"test2":
ensure => present,
uid => 999,
gid => 999,
managehome => true,
password => '$1$.jwPM1$xwWcMBrxirMxRjrxbRIRM.',
shell => "/bin/bash";
}
group {"test2":
gid => 999,
ensure => "present",
}
}
[backcolor=white !important]分别在client1、client2执行: [backcolor=white !important]puppetd --test --server master.lansgg.com --verbose [backcolor=white !important]输出内容不贴图了; [backcolor=white !important]下面直接验证在机器的用户test1和test2; [backcolor=white !important]
[backcolor=white !important]可以看到用户是OK的;
|