Shulou(Shulou.com)06/02 Report--

How to use the Kerberos command, for this question, this article describes in detail the corresponding analysis and answers, hoping to help more partners who want to solve this problem to find a more simple and easy way.

1. Log in to kinit admin/admin@EXAMPLE.COM

two。 Query login status klist

3. Exit kdestroy

4. Log in to the administrative KDC server

Log in to the backend kadmin.local

View user list listprincs

Change the account password change_password admin/admin@EXAMPLE.COM

Delete user delete_principal test1

Create user add_principal test/admin@EXAMPLE.COM

5. Use Keytab to verify that you can log in (no error output)

Kinit-kt / etc/security/keytabs/admin.keytab admin/admin@EXAMPLE.COM

6. View the list of accounts in the keytab file

Klist-ket / etc/security/keytabs/hdfs.headless.keytab

7. Import the user into the keytab file (export to the keytab file if you login using kinit-kt / etc/security/keytabs/admin.keytab admin/admin@EXAMPLE.COM after changing the password or adding the user)

[root@ambari-01 presto] # kadmin.local Authenticating as principal root/admin@thxh.COM with password.kadmin.local: xst-k / etc/security/keytabs/hive.service.keytab hive/ambari-01@thxh.COMEntry for principal hive/ambari-01@thxh.COM with kvno 5, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5 Encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5, encryption type des3-cbc-sha1 added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5, encryption type arcfour-hmac added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5 Encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5, encryption type des-hmac-sha1 added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.Entry for principal hive/ambari-01@thxh.COM with kvno 5 Encryption type des-cbc-md5 added to keytab WRFILE:/etc/security/keytabs/hive.service.keytab.kadmin.local: exit

Xst-k / etc/security/keytabs/hive.service.keytab-norandkey hive/ambari-01@thxh.COM (no password change)

This makes ktadd-k / etc/security/keytabs/user.keytab-norandkey user (do not change the password)

Change the account password change_password admin/admin@EXAMPLE.COM and try to import the password to the file again

This is the answer to the question on how to use the Kerberos command. I hope the above content can be of some help to you. If you still have a lot of doubts to solve, you can follow the industry information channel for more related knowledge.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.