拨开荷叶行,寻梦已然成。仙女莲花里,翩翩白鹭情。
IMG-LOGO
主页 文章列表 如何在apache中建立SSH连接

如何在apache中建立SSH连接

白鹭 - 2022-02-10 2101 0 0

我试图构建一个网络应用程序来使用 ansible 管理我的服务器

现在我使用 Centos 7、PHP 7.4、Laravel 8 和 apache 来构建这个应用程序,我已经安装了https://packagist.org/packages/asm/php-ansible composer 包,以便在我的项目中使用 ansible。

这是我的代码:

$ansible = new Asm\Ansible\Ansible(
        '/var/www/xxx/storage/ansible',
        '',
        ''
    );

$ansible->playbook()->play($myplaybookPath)->inventoryFile($myInventoryPath)->execute(function ($type, $buffer) {
        if (Process::ERR === $type) {
            echo 'ERR > '.$buffer ."<br/>";
        } else {
            echo 'OUT > '.$buffer."<br/>";
        }
    });

这是输出:

OUT > PLAY [install nano] ************************************************************
OUT > TASK [Gathering Facts] *********************************************************
OUT > fatal: [xx.xx.14.139]: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).", "unreachable": true}
OUT > PLAY RECAP *********************************************************************
OUT > xx.xx.14.139 : ok=0 changed=0 unreachable=1 failed=0 skipped=0 rescued=0 ignored=0
OUT >

库存档案中的用户名和密码是正确的,我对其进行了多次测验,还尝试使用非常简单的密码使用新服务器。

我在谷歌上搜索了这个错误host via ssh: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).",我发现它是关于运行 ssh 的用户的authorized_keys

我为我的 apache 用户更改了 .ssh 档案夹的权限和模式 /var/user/share/httpd/.ssh

购买此错误仍然存??在,我不知道如何解决此问题。

感谢帮助

更新

这与我的 Web 服务器配置无关,有关 apache 和 PHP 的一切都可以。

我使用 ansible-playbook 直接从终端运行我的剧本:

ansible-playbook /var/www/xxx/storage/ansible/playbooks/install_nano -i /var/www/xxx/storage/ansible/inventories/testInventory -vvv

我遇到了同样的错误,我猜是关于 InventoryFile 中的 Auth 信息

ansible-playbook 2.9.25
  config file = /etc/ansible/ansible.cfg
  configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python2.7/site-packages/ansible
  executable location = /usr/bin/ansible-playbook
  python version = 2.7.5 (default, Nov 16 2020, 22:23:17) [GCC 4.8.5 20150623 (Red Hat 4.8.5-44)]
Using /etc/ansible/ansible.cfg as config file
host_list declined parsing /var/www/xxx/storage/ansible/inventories/testInventory as it did not pass its verify_file() method
auto declined parsing /var/www/xxx/storage/ansible/inventories/testInventory as it did not pass its verify_file() method
Parsed /var/www/xxx/storage/ansible/inventories/testInventory inventory source with ini plugin
Skipping callback 'actionable', as we already have a stdout callback.
Skipping callback 'counter_enabled', as we already have a stdout callback.
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'full_skip', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'null', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
Skipping callback 'selective', as we already have a stdout callback.
Skipping callback 'skippy', as we already have a stdout callback.
Skipping callback 'stderr', as we already have a stdout callback.
Skipping callback 'unixy', as we already have a stdout callback.
Skipping callback 'yaml', as we already have a stdout callback.

PLAYBOOK: install nano ******************************************************************************************************************************************************************************
1 plays in /var/www/xxx/storage/ansible/playbooks/install nano

PLAY [install nano] *********************************************************************************************************************************************************************************

TASK [Gathering Facts] ******************************************************************************************************************************************************************************
task path: /var/www/xxx/storage/ansible/playbooks/install nano:2
<xx.xx.14.139> ESTABLISH SSH CONNECTION FOR USER: root
<xx.xx.14.139> SSH: EXEC sshpass -d8 ssh -C -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/a7f10d151a xx.xx.14.139 '/bin/sh -c '"'"'echo ~root && sleep 0'"'"''
<xx.xx.14.139> (255, '', 'Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n')
fatal: [xx.xx.14.139]: UNREACHABLE! => {
    "changed": false,
    "msg": "Failed to connect to the host via ssh: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).",
    "unreachable": true
}

PLAY RECAP ******************************************************************************************************************************************************************************************
xx.xx.14.139               : ok=0    changed=0    unreachable=1    failed=0    skipped=0    rescued=0    ignored=0

这是库存档案内容

[linux]

xx.xx.14.139

[linux:vars]

ansible_user=root
ansible_password=testPassword

另外,我尝试 ansible_ssh_user / password 但它不起作用!

uj5u.com热心网友回复:

这是解决方案

我在 ssh 连接中启用了详细模式,我注意到输出的 SSH 请求不支持密码身份验证。

有 2 个 SSH 组态档 /etc/ssh/sshd.conf 用于传入请求和 /etc/ssh/ssh.cong 用于输出,因此我从输出请求组态档中修复了该问题并启用密码身份验证。

之后,我为我的 apache ssh 档案(如密钥和已知主机档案)设定了权限。

之后,我在 laravel 中创建了一个命令,这样我就可以使用 root 用户和 Crond 运行我的 ansible playbook。

标签:

0 评论

发表评论

您的电子邮件地址不会被公开。 必填的字段已做标记 *