Ambari学习笔记-启用Kerberos

启用Kerberos

配置向导

之前已经搭建好KDC服务，这里勾选Existing MIT KDC，并勾选下面的三项后，可点击下一步

 配置Kerberos

按照之前创建的KDC，按照页面填写，KDC如果有多个可用逗号分隔

 

安装Kerberos Client

默认点下一步

配置认证

默认下一步，记住秘钥文件放置的目录是/etc/security/keytabs

确认配置

默认点下一步

关闭服务

默认点下一步

应用Kerberos到整个集群

默认点下一步

报错：

stderr: 

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

sudo: no tty present and no askpass program specified

 stdout:
Server action failed

解决：

Configure Ambari Identity 着这步骤需要ambari用户具有sudo权限
echo "ambari   ALL=(root) NOPASSWD:ALL" >> /etc/sudoers

重启服务

 安装完成