Install Kerberos under redhat6.4

1. Install the RPM package
Rpm-IVH krb5-libs-1.10.3-10.el6.x86_64.rpm
Rpm-IVH krb5-server-1.10.3-10.el6.x86_64.rpm
Rpm-IVH krb5-workstation-1.10.3-10.el6.x86_64.rpm

2. Configuration File
/Var/Kerberos/krb5kdc/KDC. conf
The content is as follows:
[Kdcdefaults]
Kdc_ports = 750,88

[realms]
psy.com = {
database_name =/var/Kerberos/krb5kdc/principal
admin_keytab =/var/Kerberos/krb5kdc/kadm5.keytab
acl_file =/var/Kerberos/krb5kdc/kadm5.acl
key_stash_file =/var/Kerberos/krb5kdc/logs
kdc_ports = 750,88
max_life = 10 H 0 M 0 S
max_renewable_life = 7d 0 h 0 M 0 S
}< br>/etc/krb5.conf
[logging]
default = file: /var/log/krb5libs. log
KDC = file:/var/log/krb5kdc. log
admin_server = file:/var/log/kadmind. log

[Libdefaults]
Default_realm = psy.com
Dns_lookup_realm = false
Dns_lookup_kdc = false
Ticket_lifetime = 24 h
Renew_lifetime = 7d
Forwardable = true

[Realms]
Psy.com = {
KDC = worknode
Admin_server = worknode
}

3. Generate a database
Kdb5_util create-r psy.com-S

4. Create a Management User
Run kadmin. Local
Addprinc admin/[email protected]
Ktadd-k/var/Kerberos/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw

5. edit/etc/services
# Kerberos (Project Athena/MIT) Services
# Kerberos 88/udp KDC # Kerberos 5 KDC
# Kerberos 88/tcp KDC # Kerberos 5 KDC
# Klogin 543/tcp # Kerberos rlogin-kfall
# Kshell 544/tcp krcmd # Kerberos remote shell-kfall
Krb5_prop 754/tcp # Kerberos V5 slave Propagation
Kerberos-ADM 749/tcp # Kerberos V5 admin/chpwd
Kerberos-ADM 749/udp # Kerberos V5 admin/chpwd
# Eklogin 2105/tcp # Kerberos encrypted rlogin-kfall
Kpasswd 761/tcp kpwd # Kerberos "passwd"-kfall
# Ktelnet 545/tcp # receivized Telnet V4/V5
# Kftp-data 546/tcp # receivized FTP data V5
# Kftp 547/tcp # receivized FTP V5

6. Restart the krb5kdc and kadmin services.
/Etc/init. d/krb5kdc restart
/Etc/init. d/kadmin restart

7. Test client connection on the local machine
Kinit admin/admin

8. remote client test connection
You need to configure the same KDC. conf and krb5.conf
Then test kinit admin/admin

Problem:
[Root @ hadoop packages] # kdb5_util create-r psy.com-S
Loading random data

Usually there is a configuration problem. Not all exampe. com is replaced with psy.com. It may also take a little longer to create.

Reference link:

Http://web.ornl.gov /~ Jar/howtokerb.html # kerbnet

Install Kerberos under redhat6.4