Skip to content

Commit

Permalink
update
Browse files Browse the repository at this point in the history
  • Loading branch information
rainy committed Dec 18, 2015
1 parent 9665a4e commit c1bacb9
Showing 1 changed file with 47 additions and 0 deletions.
47 changes: 47 additions & 0 deletions Kerberize.md
Original file line number Diff line number Diff line change
@@ -1 +1,48 @@
# <center> Introductions & Overview </center>
If you want to know more about Kerberos. Check out this [**link**](https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Using_Kerberos.html)<br>
* <a href="#intro_1"/> Pre-requisite
* <a href="#intro_2"/> KDC Installation and Configuration
* <a href="#intro_3"/> Configure MySQL with a replica server
* <a href="#intro_4"/> Installing the MySQL JDBC Driver


## <center> <a name="intro_1"/> Pre-requisite
* You have a Hadoop Cluster managed by Cloudera Manager. If you dont have one, check this [**link**](https://github.com/rainy/cloudera-install-guide/blob/master/Cloudera%20Installation.md) to create a cluster managed by cloudera manager
* You have the DNS server configured, and each host in the cluster is accessible via DNS<p>


## <center> <a name="intro_2"/> KDC Installation and Configuration
**Step 1:** To install packages for a Kerberos server <br>
```bash
# yum install -y krb5-server krb5-libs krb5-auth-dialog krb5-workstation
```

**Step 2:** Modify the /etc/krb5.conf configuration <br>
```bash
# vim /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = SEBC.SIN
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true

[realms]
SEBC.SIN = {
kdc = ip-172-31-250-81.cn-north-1.compute.internal
admin_server = ip-172-31-250-81.cn-north-1.compute.internal
}

[domain_realm]
.cn-north-1.compute.internal = SEBC.SIN
cn-north-1.compute.internal = SEBC.SIN
```



0 comments on commit c1bacb9

Please sign in to comment.