Kerberos快速创建认证keytab文件

#!/bin/bash

# 定义要执行命令的节点列表
nodes=("192.168.1.xxx" "192.168.1.xxx" "192.168.1.xxx")

# 定义组名和用户名列表
group_name="xx"
user_names=("user1" "user2" "user3")

# 执行groupadd命令
for node in "${nodes[@]}"; do
  ssh "$node" "groupadd $group_name"
done

# 执行useradd命令，并在每个用户上执行其他命令
for user_name in "${user_names[@]}"; do
  for node in "${nodes[@]}"; do
    ssh "$node" "useradd $user_name -g $group_name"
    if [ "$node" == "${nodes[0]}" ]; then
      ssh "$node" "kadmin.local -q \"addprinc -randkey $user_name/datasophon01\""
      ssh "$node" "kadmin.local -q \"xst -k /etc/security/keytab/$user_name.service.keytab $user_name/datasophon01\""
    fi
    scp "/etc/security/keytab/$user_name.service.keytab" "$node:/etc/security/keytab/"
  done
done