Ambari安装freeIPA

环境：Ambari-2.4.2、HDP-2.5.3、CentOS 6.5

freeIPA包含了Kerberos、ldap等服务，经调研感觉可以用它来做认证和统一用户管理，用户都存在freeIPA的ldap中。

1.装一台DNS
http://www.funet8.com/2282.html
http://blog.csdn.net/senvenks/article/details/39829081
https://my.oschina.net/u/142602/blog/186481
http://blog.csdn.net/charlsecharlse/article/details/17955119

[root@hdp named]# cat /etc/named.rfc1912.zones 
。。。
zone "wondersoft.cn" IN {
        type master;
        file "wondersoft.cn.zone";
};

[root@hdp named]# cat wondersoft.cn.zone
@	IN SOA wondersoft.cn hdp.wondersoft.cn. (
				15	; serial
				2D	; refresh
				4H	; retry
				6W	; expiry
				1W )	; minimum

@	IN NS  hdp.wondersoft.cn.
hdp	IN A 192.168.1.68
ws1es	IN A 192.168.1.66
ws1m	IN A 192.168.1.65
ws1nn1	IN A 192.168.1.64
ws1dn1	IN A 192.168.1.61
ws1dn2	IN A 192.168.1.62
ws1dn3	IN A 192.168.1.63
ws2m	IN A 192.168.1.67
kdc	IN A 192.168.1.69

; ldap servers