未安装winrm或请求：无法导入已安装pywinrm的名称证书

Question

我正在尝试在windows系统上发布目录、用户和标准软件。为此，我创建了一个角色来处理这个问题。 现在，我有两个环境：一个开发环境有两个Windows Server 2016虚拟机，一个QA环境有两个Windows 2016 Server虚拟机

角色是相同的，只有虚拟机是其他角色。在

当我在开发环境方面执行我的角色时，一切都很好。可以执行windows系统的所有任务。在

以下是我在ansible的开发主机文件中的条目：

[dev_win_servers]
dev_win_1 ansible_host=10.40.85.15 ansible_port=443 ansible_connection=winrm ansible_winrm_transport=ntlm ansible_user=Administrator ansible_password='{{ pw_dev_win_1 }}' ansible_winrm_server_cert_validation=ignore 
dev_win_2 ansible_host=10.40.85.16 ansible_port=443 ansible_connection=winrm ansible_winrm_transport=ntlm ansible_user=Administrator ansible_password='{{ pw_dev_win_2 }}' ansible_winrm_server_cert_validation=ignore

当我在qa系统上执行相同的角色时，我会得到以下错误：

^{pr2}$

QA网络上的主机完全相同，只是IP地址和服务器名称不同：

[qa_win_servers]
qa_win_1 ansible_host=10.40.11.100 ansible_port=443 ansible_connection=winrm ansible_winrm_transport=ntlm ansible_user=Administrator ansible_password='{{ pw_qa_win_1 }}' ansible_winrm_server_cert_validation=ignore
qa_win_2 ansible_host=10.40.11.101 ansible_port=443 ansible_connection=winrm ansible_winrm_transport=ntlm ansible_user=Administrator ansible_password='{{ pw_qu_win_2 }}' ansible_winrm_server_cert_validation=ignore

在windows虚拟机的in dev and qa上，我用该命令在端口443上配置了一个通过https的winrm侦听器（例如一个主机）：

PS C:\Users\Administrator> winrm create winrm/config/Listener? Address=*+Transport=HTTPS '@{Hostname="eti-dcv-ha2-ap3"; CertificateThumbprint="C398C1C5857D5FDAAC791289439CB88FE9
0DE755"; Port="443"}'

该证书是本地生成的自签名证书，我以前用以下方式生成：

New-SelfSignedCertificate -DnsName "qa_win_2" -CertStoreLocation Cert:\LocalMachine\My

在dev和uat中的ansible服务器上，通过yum安装的所有python包都是相同的，版本相同。我在两个ansible服务器上检查了它的执行情况，将结果放入一个文本文件中并对其进行了比较：

yum list | grep ^python | awk '{ print $1 }' | sort

同样，pywinrm和requests也安装在这两个系统上

fgi-dcv-depl1 root# yum list | grep winrm
python2-winrm.noarch                  0.3.0-1.el7              @epel.xc         
fgi-dcv-depl1 root# yum list | grep requests
python-requests.noarch                2.6.0-1.el7_1            @base.xcmonthly  
python2-requests_ntlm.noarch          1.1.0-1.el7              @epel.xc         
python-requests-kerberos.noarch       0.7.0-2.el7              epel.xc          
python-requests-toolbelt.noarch       0.8.0-1.el7              epel.xc          
python-txrequests.noarch              0.9.2-3.el7              epel.xc          
python2-requests.noarch               2.6.0-0.el7              epel.xc          
python2-requests-file.noarch          1.4.3-3.el7              epel.xc          
python2-requests-gssapi.noarch        1.0.1-1.el7              epel.xc          
python2-requests-mock.noarch          1.5.2-1.el7              epel.xc          
python2-requests-oauthlib.noarch      0.8.0-5.el7              base.xcmonthly   
python34-requests.noarch              2.12.5-3.el7             epel.xc          
python36-requests.noarch              2.12.5-3.el7             epel.xc          
fgi-dcv-depl1 root#

在pip上：

fgi-dcv-depl1 root# pip2.7 list | grep winrm
pywinrm                          0.3.0    
fgi-dcv-depl1 root# pip2.7 list | grep requests
requests                         2.19.1   
requests-ntlm                    1.1.0    
fgi-dcv-depl1 root# 

由于两个系统都在防火墙后面，这将拒绝访问internet，因此我无法通过pip安装任何东西：

fgi-dcv-depl1 root# pip2.7 install --upgrade requests
Retrying (Retry(total=4, connect=None, read=None, redirect=None)) after connection broken by 'NewConnectionError('<pip._vendor.requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f2a4c9bd6d0>: Failed to establish a new connection: [Errno 101] Network is unreachable',)': /simple/requests/
Retrying (Retry(total=3, connect=None, read=None, redirect=None)) after connection broken by 'NewConnectionError('<pip._vendor.requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f2a4c9bd810>: Failed to establish a new connection: [Errno 101] Network is unreachable',)': /simple/requests/
^COperation cancelled by user
fgi-dcv-depl1 root#

编辑：我发现了更多的想法来尝试在python控制台上使用winrm连接。在我的开发系统上：

fgi-dcv-appdeploysrv root# python
Python 2.7.5 (default, Jun 20 2019, 20:27:34) 
[GCC 4.8.5 20150623 (Red Hat 4.8.5-36)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import winrm
>>> s=winrm.Session('https://10.40.85.15:443',auth=('administrator','mypw'),transport='ntlm',server_cert_validation='ignore')
>>> r=s.run_cmd('ipconfig')
>>> print r.std_out

Windows IP Configuration


Ethernet adapter Ethernet0:

   Connection-specific DNS Suffix  . : 
   IPv4 Address. . . . . . . . . . . : 10.40.85.15
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.40.85.1

>>> quit()

在qa系统上，winrm的导入不起作用：

fgi-dcv-depl1 root# python
Python 2.7.5 (default, Jun 20 2019, 20:27:34) 
[GCC 4.8.5 20150623 (Red Hat 4.8.5-36)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import winrm
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python2.7/site-packages/winrm/__init__.py", line 6, in <module>
    from winrm.protocol import Protocol
  File "/usr/lib/python2.7/site-packages/winrm/protocol.py", line 11, in <module>
    from winrm.transport import Transport
  File "/usr/lib/python2.7/site-packages/winrm/transport.py", line 15, in <module>
    import requests
  File "/usr/lib/python2.7/site-packages/requests/__init__.py", line 58, in <module>
    from . import utils
  File "/usr/lib/python2.7/site-packages/requests/utils.py", line 32, in <module>
    from .exceptions import InvalidURL
  File "/usr/lib/python2.7/site-packages/requests/exceptions.py", line 10, in <module>
    from .packages.urllib3.exceptions import HTTPError as BaseHTTPError
  File "/usr/lib/python2.7/site-packages/requests/packages/__init__.py", line 95, in load_module
    raise ImportError("No module named '%s'" % (name,))
ImportError: No module named 'requests.packages.urllib3'
>>> quit()
fgi-dcv-depl1 root#

我知道错误就在这里吗？在

有谁能帮忙吗？在

谢谢并致以诚挚的问候， 大卫

Answer 1

好吧，python-urllib3似乎有点奇怪。百胜告诉我，它没有安装

fgi-dcv-depl1 root# yum install python-urllib3
Loaded plugins: aliases, changelog, fastestmirror, tmprepo, verify, versionlock
Loading mirror speeds from cached hostfile
Resolving Dependencies
 > Running transaction check
 -> Package python-urllib3.noarch 0:1.10.2-5.el7 will be installed
 > Finished Dependency Resolution

Dependencies Resolved

=======================================================================================================================================================================================================================================================================================================================================
 Package                                                                           Arch                                                                      Version                                                                           Repository                                                                         Size
=======================================================================================================================================================================================================================================================================================================================================
Installing:
 python-urllib3                                                                    noarch                                                                    1.10.2-5.el7                                                                      base.xcmonthly                                                                    102 k

Transaction Summary
=======================================================================================================================================================================================================================================================================================================================================
Install  1 Package

Total download size: 102 k
Installed size: 378 k
Is this ok [y/d/N]:

所以我想安装软件包：

^{pr2}$

好吧，为什么会出错？我在p/usr/lib/python2.7/site-packages中看到了一个目录urllib3。我把它移到/tmp，之后我就可以安装python-urllib3包了，一切都很好！在