centos 运维 linux Systemctl start krb5kdc 无法启动Kerberos服务解决办法

卸载安装CentOS上安装的Kerberos，重新安装

1.卸载Kerberos的相关命令

[qiangzi@krb ~]$ yum remove krb5-server

[qiangzi@krb ~]$ yum remove krb5-libs

[qiangzi@krb ~]$ yum remove krb5-workstation

[qiangzi@krb ~]$ yum remove krb5-libs krb5-workstation

[qiangzi@krb ~]$ rm -rf /var/kerberos/

[qiangzi@krb ~]$ rm /etc/krb5.conf

[qiangzi@krb ~]$ rm -rf /usr/lib64/krb5

注意：以上命令尽量全部执行一遍，确保卸载干净，Client（根节点）也要进行卸载操作。

2.删除数据库

[qiangzi@krb ~]$ rm -rf /var/kerberos/krb5kdc/principal*

3.环境

1 台Centos7主机 部署 master KDC 2 台 Centos7主机 部署 Kerberos Client

4.在Master上安装kerberos

[qiangzi@krb ~]$ yum install krb5-server krb5-libs krb5-workstation -y

5.配置kdc.conf

[qiangzi@krb ~]$ vim /var/kerberos/krb5kdc/kdc.conf

[kdcdefaults]

kdc_ports = 88

kdc_tcp_ports = 88

[realms]

HADOOP.COM = {

acl_file = /var/kerberos/krb5kdc/kadm5.acl

dict_file = /usr/share/dict/words

admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab

max_renewable_life = 7d

supported_enctypes = aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal

}

6.配置krb5.conf

[qiangzi@krb ~]$ vim /etc/krb5.conf

includedir /etc/krb5.conf.d/

[logging]

default = FILE:/var/log/krb5libs.log

kdc = FILE:/var/log/krb5kdc.log

admin_server = FILE:/var/log/kadmind.log

[libdefaults]

default_realm = HADOOP.COM

dns_lookup_realm = false

dns_lookup_kdc = false

ticket_lifetime = 24h

renew_lifetime = 7d

forwardable = true

clockskew = 120

udp_preference_limit = 1

[realms]

HADOOP.COM = {

kdc = node-1

admin_server = node-1

}

[domain_realm]

.hadoop.com = HADOOP.COM

hadoop.com = HADOOP.COM

7.初始化KDC数据库

[qiangzi@krb ~]$ kdb5_util create -s -r HADOOP.COM

8.修改数据库管理员的ACL权限

[qiangzi@krb ~]$ vim /var/kerberos/krb5kdc/kadm5.acl

#修改如下

*/admin@HADOOP.COM *

9.启动Kerberos

[qiangzi@krb ~]$ systemctl start kadmin krb5kdc

[qiangzi@krb ~]$ systemctl enable kadmin krb5kdc

10.查看服务状态

[qiangzi@krb ~]$ systemctl status krb5kdc

11.在另外两台主机部署Client（也可采用其他方法部署）

#在另外两个主机执行以下命令

yum install krb5-workstation krb5-libs -y

#从master主机复制krb5.conf到这两台主机

scp /etc/krb5.conf node-2:/etc/krb5.conf

scp /etc/krb5.conf node-3:/etc/krb5.conf

12.接下来按照Kerberos安装文档继续安装即可！

原文链接：