linux kerberos安装

🧙 Questions

给服务器安装kerberos

☄️ Ideas

主节点安装

sudo yum install -y krb5-server krb5-libs krb5-workstation

从节点安装

sudo yum install -y krb5-devel krb5-workstation

修改krb5.conf

设置realm为HADOOP.COM

sudo vim /etc/krb5.conf

# Configuration snippets may be placed in this directory as well
includedir /etc/krb5.conf.d/

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt
 default_realm = HADOOP.COM
 default_ccache_name = KEYRING:persistent:%{uid}

[realms]
HADOOP.COM = {
  kdc = isxcode
  admin_server = isxcode
 }

[domain_realm]
.hadoop.com = HADOOP.COM
hadoop.com = HADOOP.COM

创建文件夹

sudo mkdir -p /var/kerberos/krb5kdc/

编辑kdc.conf

sudo vim /var/kerberos/krb5kdc/kdc.conf

[kdcdefaults]
 kdc_ports = 88
 kdc_tcp_ports = 88
 
 [realms]
 HADOOP.COM = {
  acl_file = /var/kerberos/krb5kdc/kadm5.acl
  dict_file = /usr/share/dict/words
  admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
  supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
 }

编辑kadm5.acl

*/admin@HADOOP.COM    *

初始化kerberos

需要设置数据库管理密码

sudo kdb5_util create -r HADOOP.COM -s

🔗 Links

• centos docs