对于那些使用词典进行DNS操作的人
我尝试使用 gandi 作为 dns 提供者的词典 dns api，但出现认证错误。
事实上，我正在尝试使用一个 ansible 剧本，在一个不可公开访问的流浪者盒子上生成 letsencrypt 证书，用于我的域名由 gandi 托管。
在文档页面的供应商列表中，我没有看到 gandi 名称。
这就是它失败的原因吗？我在潜在提供商列表中看到了 AWS Route53，这是否意味着词典支持 AWS ？
这是我在执行剧本时遇到的错误：
fatal: [172.16.2.15]: FAILED! => {"changed": true, "cmd": "/srv/dehydrated/dehydrated --cron --hook /srv/dehydrated/dehydrated.default.sh --challenge dns-01 --accept-terms", "delta": "0:00:05.839602", "end": "2018-12-28 15:34:52.558788", "msg": "non-zero return code", "rc": 1, "start": "2018-12-28 15:34:46.719186", "stderr": "#n# !! WARNING !! No main config file found, using default config!n#nTraceback (most recent call last):n File "/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py", line 286, in authenticaten payload = self._api.domain.info(self._api_key, self._domain)n File "/usr/lib/python3.6/xmlrpc/client.py", line 1112, in __call__n return self.__send(self.__name, args)n File "/usr/lib/python3.6/xmlrpc/client.py", line 1452, in __requestn verbose=self.__verbosen File "/usr/lib/python3.6/xmlrpc/client.py", line 1154, in requestn return self.single_request(host, handler, request_body, verbose)n File "/usr/lib/python3.6/xmlrpc/client.py", line 1170, in single_requestn return self.parse_response(resp)n File "/usr/lib/python3.6/xmlrpc/client.py", line 1342, in parse_responsen return u.close()n File "/usr/lib/python3.6/xmlrpc/client.py", line 656, in closen raise Fault(**self._stack[0])nxmlrpc.client.Fault: <Fault 510150: 'Error on object : OBJECT_ACCOUNT (CAUSE_NORIGHT) [Invalid API key]'>nnDuring handling of the above exception, another exception occurred:nnTraceback (most recent call last):n File "/usr/local/bin/lexicon", line 11, in <module>n sys.exit(main())n File "/usr/local/lib/python3.6/dist-packages/lexicon/cli.py", line 102, in mainn results = client.execute()n File "/usr/local/lib/python3.6/dist-packages/lexicon/client.py", line 64, in executen self.provider.authenticate()n File "/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py", line 81, in authenticaten domain_id = self.rpc_helper.authenticate()n File "/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py", line 290, in authenticaten raise Exception("Failed to authenticate: '{0}'".format(err))nException: Failed to authenticate: '<Fault 510150: 'Error on object : OBJECT_ACCOUNT (CAUSE_NORIGHT) [Invalid API key]'>'", "stderr_lines": ["#", "# !! WARNING !! No main config file found, using default config!", "#", "Traceback (most recent call last):", " File "/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py", line 286, in authenticate", " payload = self._api.domain.info(self._api_key, self._domain)", " File "/usr/lib/python3.6/xmlrpc/client.py", line 1112, in __call__", " return self.__send(self.__name, args)", " File "/usr/lib/python3.6/xmlrpc/client.py", line 1452, in __request", " verbose=self.__verbose", " File "/usr/lib/python3.6/xmlrpc/client.py", line 1154, in request", " return self.single_request(host, handler, request_body, verbose)", " File "/usr/lib/python3.6/xmlrpc/client.py", line 1170, in single_request", " return self.parse_response(resp)", " File "/usr/lib/python3.6/xmlrpc/client.py", line 1342, in parse_response", " return u.close()", " File "/usr/lib/python3.6/xmlrpc/client.py", line 656, in close", " raise Fault(**self._stack[0])", "xmlrpc.client.Fault: <Fault 510150: 'Error on object : OBJECT_ACCOUNT (CAUSE_NORIGHT) [Invalid API key]'>", "", "During handling of the above exception, another exception occurred:", "", "Traceback (most recent call last):", " File "/usr/local/bin/lexicon", line 11, in <module>", " sys.exit(main())", " File "/usr/local/lib/python3.6/dist-packages/lexicon/cli.py", line 102, in main", " results = client.execute()", " File "/usr/local/lib/python3.6/dist-packages/lexicon/client.py", line 64, in execute", " self.provider.authenticate()", " File "/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py", line 81, in authenticate", " domain_id = self.rpc_helper.authenticate()", " File "/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py", line 290, in authenticate", " raise Exception("Failed to authenticate: '{0}'".format(err))", "Exception: Failed to authenticate: '<Fault 510150: 'Error on object : OBJECT_ACCOUNT (CAUSE_NORIGHT) [Invalid API key]'>'"], "stdout": "+ Generating account key...n+ Registering account key with ACME server...n + Creating chain cache directory /srv/dehydrated/chainsnProcessing gitlab.lescdn.comn + Creating new directory /srv/dehydrated/certs/gitlab.lescdn.com ...n + Signing domains...n + Generating private key...n + Generating signing request...n + Requesting new certificate order from CA...n + Received 1 authorizations URLs from the CAn + Handling authorization for gitlab.lescdn.comn + 1 pending challenge(s)n + Deploying challenge tokens...ndeploy_challenge called: gitlab.lescdn.com, 1ifWXObduKNTkKbqkpXEtBpie_p1p1xL2ivugVS9Z3c, 2TgAYwV1RyI-gy6cXAtav36NI7LElHLjoKhcv0ugsag", "stdout_lines": ["+ Generating account key...", "+ Registering account key with ACME server...", " + Creating chain cache directory /srv/dehydrated/chains", "Processing gitlab.lescdn.com", " + Creating new directory /srv/dehydrated/certs/gitlab.lescdn.com ...", " + Signing domains...", " + Generating private key...", " + Generating signing request...", " + Requesting new certificate order from CA...", " + Received 1 authorizations URLs from the CA", " + Handling authorization for gitlab.lescdn.com", " + 1 pending challenge(s)", " + Deploying challenge tokens...", "deploy_challenge called: gitlab.lescdn.com, 1ifWXObduKNTkKbqkpXEtBpie_p1p1xL2ivugVS9Z3c, 2TgAYwV1RyI-gy6cXAtav36NI7LElHLjoKhcv0ugsag"]}
我可以看到文件/usr/local/lib/python3.6/dist-packages/lexicon/providers/gandi.py被执行并在第 286 行失败，所以对于我的 gandi 提供者来说，支持 gandi 提供者，但没有在词典页面中列出，所以我对 ansible 任务失败感到困惑。
我发现了这个问题。
它是专门针对 gandi 提供者词典模块的，该模块默认使用 rpc 协议。
由于我使用的是 gandi liveDNS API，所以我应该使用其余协议。
为了解决这个问题，我使用我的 ansible 剧本中设置的 LEXICON_GANDI_API_PROTOCOL 动态环境变量来休息，它可以工作。