Kerberos Kdc Server

Hadoop (HDP) cluster kerberos authentication implementation, for security reasons, this article hides some system names and service names, and modified some of the parts that may cause information leakage.

Kafka configures SASL authentication and permission fulfillment documentation. First, the release notes This example uses: zookeeper-3.4.10, kafka_2.11-0.11.0.0. zookeeper version no requirements, kafka must use version 0.8 or later. Second, zookeeper configuration SASLzookeeper cluster or single node configuration the same. Specific steps are as follows: 1, zoo.cfg file configuration add the following configuration: authProvider.1 = org.apa ...

Corporate Smartphone Security (C) - Aim at domain controllers and look for Golden Ticket. Before leaving the internal network, we decided to get the hash of the domain controller, especially the Kerberos account (krbtgt) and wanted to create a Golden Ticket *. Golden Ticket refers to the forged TGT (Ticket Granting Ticket). Similarly, the Silver Ticket is a forged TGS (Ticket Granting Server).

Based on the following ID, can help us quickly identify by http://www.aliyun.com/zixun/aggregation/11208.html ">microsoft"? 　　The security events generated by the Windows Server 2003 operating system mean what happened. 　　Account logon event The security event generated by the Audit account logon event security template setting is shown below. 672: Successfully issued and ...

&http://www.aliyun.com/zixun/aggregation/37954.html ">nbsp; 　　The following IDs can help us quickly identify security events generated by the Microsoft Windows Server 2003 operating system, and what exactly that means is what happened. Account logon Events The following shows the "Audit account logon events" security template settings ...

Homosexual Travel Hadoop Security Practices 0x01 Background Current larger companies have adopted a pattern of sharing Hadoop clusters. Shared Hadoop refers to: data storage, public / private file directory mixed stored in hdfs, different users access to different data on demand; computing resources, the administrator by department or business divided into several queues, each queue allocation A certain amount of resources, each user / group can only use the resources in a queue. This model can reduce maintenance costs, to avoid data redundancy and reduce hardware costs. But this is similar ...