Systemctl start krb5kdc 无法启动Kerberos服务解决办法

卸载安装CentOS上安装的Kerberos，重新安装

1.卸载Kerberos的相关命令

[qiangzi@krb ~]$ yum remove krb5-server
[qiangzi@krb ~]$ yum remove krb5-libs
[qiangzi@krb ~]$ yum remove krb5-workstation

[qiangzi@krb ~]$ yum remove  krb5-libs krb5-workstation

[qiangzi@krb ~]$ rm -rf /var/kerberos/
[qiangzi@krb ~]$ rm /etc/krb5.conf
[qiangzi@krb ~]$ rm -rf /usr/lib64/krb5

注意：以上命令尽量全部执行一遍，确保卸载干净，Client（根节点）也要进行卸载操作。

2.删除数据库

[qiangzi@krb ~]$ rm -rf /var/kerberos/krb5kdc/principal*

3.环境

1 台Centos7主机 部署 master KDC
2 台 Centos7主机 部署 Kerberos Client

4.在Master上安装kerberos

[qiangzi@krb ~]$ yum install krb5-server krb5-libs krb5-workstation -y

5.配置kdc.conf

[qiangzi@krb ~]$ vim /var/kerberos/krb5kdc/kdc.conf

[kdcdefaults]
 kdc_ports = 88
 kdc_tcp_ports = 88

[realms]
 HADOOP.COM = {
  acl_file = /var/kerberos/krb5kdc/kadm5.acl
  dict_file = /usr/share/dict/words
  admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
  max_renewable_life = 7d
  supported_enctypes = aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
 }

6.配置krb5.conf

[qiangzi@krb ~]$ vim /etc/krb5.conf

includedir /etc/krb5.conf.d/

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = HADOOP.COM
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 clockskew = 120
 udp_preference_limit = 1
[realms]
 HADOOP.COM = {
  kdc = node-1
  admin_server = node-1
 }

[domain_realm]
 .hadoop.com = HADOOP.COM
 hadoop.com = HADOOP.COM

7.初始化KDC数据库

[qiangzi@krb ~]$ kdb5_util create -s -r HADOOP.COM

8.修改数据库管理员的ACL权限

[qiangzi@krb ~]$ vim /var/kerberos/krb5kdc/kadm5.acl

#修改如下
*/admin@HADOOP.COM  *

9.启动Kerberos

[qiangzi@krb ~]$ systemctl start kadmin krb5kdc
[qiangzi@krb ~]$ systemctl enable kadmin krb5kdc

10.查看服务状态

[qiangzi@krb ~]$ systemctl status krb5kdc

11.在另外两台主机部署Client（也可采用其他方法部署）

#在另外两个主机执行以下命令
yum install krb5-workstation krb5-libs -y

#从master主机复制krb5.conf到这两台主机
scp /etc/krb5.conf node-2:/etc/krb5.conf
scp /etc/krb5.conf node-3:/etc/krb5.conf

12.接下来按照Kerberos安装文档继续安装即可！