首页 > 解决方案 > 无法连接到 AD 服务器?

问题描述

我正在尝试从我的 Ansible 主服务器执行 AD 和 Exchange 命令,但收到以下错误。我可以在本地 Windows 服务器上成功执行这些命令。

对于广告:

FAILED! => {"changed": true, "cmd": "powershell.exe \"import-module activedirectory;get-aduser -Identity 'testuser01'\" > aa.txt", "delta": "0:00:01.796829", "end": "2019-05-08 12:41:19.824130", "msg": "non-zero return code", "rc": 1, "start": "2019-05-08 12:41:18.027300", "stderr": "get-aduser : Unable to contact the server. This may be because this server \r\ndoes not exist, it is currently down, or it does not have the Active Directory \r\nWeb Services running.

对于交换:

FAILED! => {"changed": true, "cmd": "Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn;enable-mailbox 'testuser01' > c:/temp/aa.txt", "delta": "0:00:12.734039", "end": "2019-05-08 01:13:51.726514", "msg": "non-zero return code", "rc": 1, "start": "2019-05-08 01:13:38.992475", "stderr": "Active Directory operation failed on . The supplied credential for \r\n'DEVAD\\admin' is invalid.

代码部分

对于广告:

- name: Mailbox Creation
  win_shell: "import-module activedirectory;get-aduser -identity 'testuser01'"

对于交换:

- name: Mailbox Creation
  win_shell: "Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn;enable-mailbox 'testuser01' > c:/temp/aa.txt"

标签: windowspowershellactive-directoryansibleexchange-server

解决方案


也许有人帮助。

使用kerberos时有同样的问题

ansible_winrm_transport: kerberos

需要打开委托凭证,仅使用 kerberos 进行测试。

ansible_winrm_kerberos_delegation: yes

推荐阅读