Install Kerberos under redhat6.4

Source: Internet
Author: User
Tags kinit

1. Install the RPM package
Rpm-IVH krb5-libs-1.10.3-10.el6.x86_64.rpm
Rpm-IVH krb5-server-1.10.3-10.el6.x86_64.rpm
Rpm-IVH krb5-workstation-1.10.3-10.el6.x86_64.rpm

2. Configuration File
/Var/Kerberos/krb5kdc/KDC. conf
The content is as follows:
[Kdcdefaults]
Kdc_ports = 750,88

[realms]
psy.com = {
database_name =/var/Kerberos/krb5kdc/principal
admin_keytab =/var/Kerberos/krb5kdc/kadm5.keytab
acl_file =/var/Kerberos/krb5kdc/kadm5.acl
key_stash_file =/var/Kerberos/krb5kdc/logs
kdc_ports = 750,88
max_life = 10 H 0 M 0 S
max_renewable_life = 7d 0 h 0 M 0 S
}< br>/etc/krb5.conf
[logging]
default = file: /var/log/krb5libs. log
KDC = file:/var/log/krb5kdc. log
admin_server = file:/var/log/kadmind. log

[Libdefaults]
Default_realm = psy.com
Dns_lookup_realm = false
Dns_lookup_kdc = false
Ticket_lifetime = 24 h
Renew_lifetime = 7d
Forwardable = true

[Realms]
Psy.com = {
KDC = worknode
Admin_server = worknode
}

3. Generate a database
Kdb5_util create-r psy.com-S

4. Create a Management User
Run kadmin. Local
Addprinc admin/[email protected]
Ktadd-k/var/Kerberos/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw

5. edit/etc/services
# Kerberos (Project Athena/MIT) Services
# Kerberos 88/udp KDC # Kerberos 5 KDC
# Kerberos 88/tcp KDC # Kerberos 5 KDC
# Klogin 543/tcp # Kerberos rlogin-kfall
# Kshell 544/tcp krcmd # Kerberos remote shell-kfall
Krb5_prop 754/tcp # Kerberos V5 slave Propagation
Kerberos-ADM 749/tcp # Kerberos V5 admin/chpwd
Kerberos-ADM 749/udp # Kerberos V5 admin/chpwd
# Eklogin 2105/tcp # Kerberos encrypted rlogin-kfall
Kpasswd 761/tcp kpwd # Kerberos "passwd"-kfall
# Ktelnet 545/tcp # receivized Telnet V4/V5
# Kftp-data 546/tcp # receivized FTP data V5
# Kftp 547/tcp # receivized FTP V5

6. Restart the krb5kdc and kadmin services.
/Etc/init. d/krb5kdc restart
/Etc/init. d/kadmin restart

7. Test client connection on the local machine
Kinit admin/admin

8. remote client test connection
You need to configure the same KDC. conf and krb5.conf
Then test kinit admin/admin

Problem:
[Root @ hadoop packages] # kdb5_util create-r psy.com-S
Loading random data

Usually there is a configuration problem. Not all exampe. com is replaced with psy.com. It may also take a little longer to create.

Reference link:

Http://web.ornl.gov /~ Jar/howtokerb.html # kerbnet

Install Kerberos under redhat6.4

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.