ansible非root用户批量修改root密码

前言：

由于线上服务器密码长久没有更新，现领导要求批量更换密码。线上的之前部署过salt,但由于各种因素没有正常使用。

使用自动化工具批量修改的计划搁浅了，后来领导给了个python多线程修改密码脚本。但实际测试效果并不理想，会出现卡住情况

#!/usr/bin/python
import paramiko#ssh连接模块
import time,sys,re,os
import socket
import threading,Queue#线程模块

root_cmd = r'''
这里输入你要执行的命令
'''
user_cmd = r''' echo ''  '''
issu = 1 
root_pwd='你要修改的root密码'
login_user = '普通用户名'
key_file = '/home/.ssh/id_rsa'#普通用户key
sshport = 22#端口
time_out = 60 #超时时间
Numer_Thread = 300#最大线程数(根据主机数量修改)


q = Queue.Queue()#线程队列
socket.setdefaulttimeout(time_out)
lock = threading.RLock()#线程锁(同时只允许一个线程执行动作)
onlydir = dir()

def sshgo(host,rootuser,rootpwd):
    rtn = []
    key = paramiko.RSAKey.from_private_key_file(key_file)
    ssh = paramiko.SSHClient()
    ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    ssh.load_system_host_keys()

    rtn.append('________________________________%s'%host)
    try:
        ssh.connect(host,sshport,login_user,pkey=key)
    except Exception,e:
        rtn.append('%s__ERROR_________________________%s'%(e,host))
        return rtn
    if 'user_cmd' in onlydir:
        stdin, stdout, stderr = ssh.exec_command('LANG=en_US.UTF-8;LANGUAGE=en_US.UTF-8; %s'%user_cmd)
        rtn.append(stdout.read() + stdout.read())
        #rtn.append(stdout.read() + stderr.read())
    if not issu:
            #return rtn
            return "",(rtn)
    shell = ssh.invoke_shell()
    while not shell.recv(4096).endswith(']$ '):
        time.sleep(0.1)

    buff  =''
    shell.send('LANG=en_US.UTF-8;LANGUAGE=en_US.UTF-8;su - %s'%rootuser)
    shell.send('
')
    while not buff.endswith('Password: '):
        time.sleep(0.1)
        resp = shell.recv(4096)
        buff += resp
        if buff.endswith('exist') or buff.endswith(']$ '):
            rtn.append('ERROR_SSH.RECV_____1________________%s'% resp)
            return rtn
    buff  =''
    shell.send(root_pwd)
    shell.send('
')
    while not buff.endswith(']# '):
        time.sleep(0.1)
        resp = shell.recv(4096)
        buff += resp
        if buff.endswith('password') or buff.endswith(']$ '):
            rtn.append('ERROR_SSH.RECV_____2________________%s'% resp)
            return rtn
    shell.send('LANG=en_US.UTF-8;LANGUAGE=en_US.UTF-8; %s '%root_cmd)
    shell.send('
')
    buff = ''
    while not buff.endswith(']# '):
        time.sleep(0.1)
        resp = shell.recv(4096)
        buff += resp
        if buff.endswith(']$ '):
            rtn.append('ERROR_SSH.RECV_____3________________%s'% resp)
            break
        elif buff.endswith('? '):
            rtn.append('ERROR_SSH.RECV_____4________________??')
            break
    #print buff
    #rtn= (''.join(rtn)).strip()+"  "+host
    rtn.append('
'.join(buff.split('
')[1:-1]))
    ssh.close()
     return "",(rtn)    
    #return rtn

def do_echo(host,rootuser,rootpwd):
    result = sshgo(host,rootuser,rootpwd)
    lock.acquire()
    for pp in result:
        print pp
    print
    sys.stdout.flush()
    lock.release()

def working():
    while 1:
        args = q.get()
        do_echo(args[0],args[1],args[2])
        q.task_done()

for i in range (Numer_Thread):
    t = threading.Thread(target=working)
    t.setDaemon(1)
    t.start()
print "Begin......" 
fn = open("/var/tmp/169" ,"r")
#fn = open("/tmp/1.log" ,"r")
for i in fn:
    if not re.match('#',i) and re.search('.',i):
        c = i.split()
        q_args = [c[0],'','']
        #q_args = [c[0],c[1],c[2]]
        q.put(q_args)
fn.close()
q.join()