如何用脚本批量验证本地管理员凭据对60台VM的登录有效性

Got it, let's break down how you can approach this batch credential validation for your 60 VMs. Depending on whether your VMs are running Windows or Linux, here are practical, actionable methods you can adapt:

PowerShell is your go-to tool here, since it natively supports remote management via WinRM. Here's a structured approach:

• Prerequisite: Ensure WinRM is enabled on all target VMs. You can run Enable-PSRemoting -Force on each VM (either manually once or via a group policy if they're domain-joined).
• Sample Script Structure:

  # Prompt for credentials (never hardcode them!)
  $credential = Get-Credential -Message "Enter local admin credentials"
  
  # Load VM list from a text file (one hostname/IP per line)
  $vmList = Get-Content "C:\path\to\vm_list.txt"
  
  foreach ($vm in $vmList) {
      try {
          # First check if WinRM is reachable
          if (Test-WSMan -ComputerName $vm -ErrorAction Stop) {
              # Validate credentials by fetching a basic system object
              $null = Get-CimInstance -ClassName Win32_OperatingSystem -ComputerName $vm -Credential $credential -ErrorAction Stop
              Write-Host "✅ Credentials validated successfully for $vm" -ForegroundColor Green
          }
      }
      catch {
          Write-Host "❌ Failed to validate for $vm : $($_.Exception.Message)" -ForegroundColor Red
          # Optional: Log failures to a file
          Add-Content -Path "credential_failures.log" -Value "$(Get-Date) | $vm | $($_.Exception.Message)"
      }
  }
  

• Speed Up Checks: For PowerShell 7+, use ForEach-Object -Parallel to run checks concurrently instead of sequentially—this will cut down the total time significantly for 60 VMs.

For Linux, SSH is the standard remote management protocol. You'll need sshpass to automate password input (note: key-based auth is more secure, but this works for password validation):

• Prerequisite: Install sshpass on your machine (e.g., sudo apt install sshpass for Debian/Ubuntu, sudo dnf install sshpass for RHEL/CentOS).
• Sample Bash Script:

  #!/bin/bash
  
  # Prompt for credentials (avoid hardcoding!)
  read -p "Enter local admin username: " USERNAME
  read -s -p "Enter local admin password: " PASSWORD
  echo
  
  # Path to VM list file (one hostname/IP per line)
  VM_LIST="/path/to/vm_list.txt"
  
  # Loop through each VM and validate credentials
  while read vm; do
      # Use sshpass to pass password to SSH, run a simple command to confirm access
      sshpass -p "$PASSWORD" ssh -o StrictHostKeyChecking=no "$USERNAME@$vm" "echo 'Access granted'" > /dev/null 2>&1
      if [ $? -eq 0 ]; then
          echo "✅ Credentials work for $vm"
      else
          echo "❌ Failed to authenticate to $vm"
          # Optional: Log failures
          echo "$(date) | $vm | Authentication failed" >> credential_failures.log
      fi
  done < "$VM_LIST"
  

• Parallel Execution: Use xargs -P 10 (adjust the number based on your system's capacity) to run multiple SSH checks at once, which will speed up the process.

• Secure Credential Handling: Never hardcode passwords in scripts. Use built-in secure prompts or vaults (like Windows Credential Manager or Linux keyrings) to store and retrieve credentials safely.
• Test with a Small Batch: Before running the script on all 60 VMs, test it on 2-3 VMs to work out any kinks (like WinRM/SSH connectivity issues).
• Log Results: Always log successes and failures to a file—this makes it easy to review which VMs need attention later.

内容的提问来源于stack exchange，提问作者jeevanreddymandali