启用Kerberos
配置向导
之前已经搭建好KDC服务,这里勾选Existing MIT KDC,并勾选下面的三项后,可点击下一步
配置Kerberos
按照之前创建的KDC,按照页面填写,KDC如果有多个可用逗号分隔
安装Kerberos Client
默认点下一步
配置认证
默认下一步,记住秘钥文件放置的目录是/etc/security/keytabs
确认配置
默认点下一步
关闭服务
默认点下一步
应用Kerberos到整个集群
默认点下一步
报错:
stderr: We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. sudo: no tty present and no askpass program specified stdout: Server action failed解决:
Configure Ambari Identity 着这步骤需要ambari用户具有sudo权限
echo "ambari ALL=(root) NOPASSWD:ALL" >> /etc/sudoers