CDH构建大数据平台-Kerberos高可用部署【完结篇】
作者：尹正杰
版权声明：原创作品，谢绝转载！否则将追究法律责任。
一.安装Kerberos相关的软件包并同步配置文件
1>.实验环境说明
[root@node101.yinzhengjie.org.cn ~]# cat /etc/redhat-release CentOS Linux release 7.6.1810 (Core) [root@node101.yinzhengjie.org.cn ~]# [root@node101.yinzhengjie.org.cn ~]# free -h total used free shared buff/cache available Mem: 3.9G 265M 3.3G 9.5M 368M 3.4G Swap: 2.0G 0B 2.0G [root@node101.yinzhengjie.org.cn ~]# [root@node101.yinzhengjie.org.cn ~]# uname -r 3.10.0-957.el7.x86_64 [root@node101.yinzhengjie.org.cn ~]# [root@node101.yinzhengjie.org.cn ~]# uname -m x86_64 [root@node101.yinzhengjie.org.cn ~]# [root@node101.yinzhengjie.org.cn ~]# cat /etc/hosts #主KDC服务器 172.30.1.101 node101.yinzhengjie.org.cn node101 #备KDC服务器 172.30.1.102 node102.yinzhengjie.org.cn node102 #其他主机，即Kerberos客户端 172.30.1.103 node103.yinzhengjie.org.cn node103 172.30.1.110 node110.yinzhengjie.org.cn node110 [root@node101.yinzhengjie.org.cn ~]# [root@node101.yinzhengjie.org.cn ~]#
2>.在主KDC服务器上安装所需的Kerberos软件包并修改相应的配置文件
[root@node101.yinzhengjie.org.cn ~]# yum -y install krb5-server krb5-auth-dialog krb5-workstation krb5-devel krb5-libs Loaded plugins: fastestmirror Determining fastest mirrors * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com base | 3.6 kB 00:00:00 extras | 3.4 kB 00:00:00 mysql-connectors-community | 2.5 kB 00:00:00 mysql-tools-community | 2.5 kB 00:00:00 mysql56-community | 2.5 kB 00:00:00 updates | 3.4 kB 00:00:00 zabbix | 2.9 kB 00:00:00 zabbix-non-supported | 951 B 00:00:00 (1/4): extras/7/x86_64/primary_db | 201 kB 00:00:00 (2/4): mysql-connectors-community/x86_64/primary_db | 41 kB 00:00:00 (3/4): mysql-tools-community/x86_64/primary_db | 58 kB 00:00:00 (4/4): updates/7/x86_64/primary_db | 4.2 MB 00:00:02 No package krb5-auth-dialog available. Resolving Dependencies --> Running transaction check ---> Package krb5-devel.x86_64 0:1.15.1-37.el7_6 will be installed --> Processing Dependency: libkadm5(x86-64) = 1.15.1-37.el7_6 for package: krb5-devel-1.15.1-37.el7_6.x86_64 --> Processing Dependency: libverto-devel for package: krb5-devel-1.15.1-37.el7_6.x86_64 --> Processing Dependency: libselinux-devel for package: krb5-devel-1.15.1-37.el7_6.x86_64 --> Processing Dependency: libcom_err-devel for package: krb5-devel-1.15.1-37.el7_6.x86_64 --> Processing Dependency: keyutils-libs-devel for package: krb5-devel-1.15.1-37.el7_6.x86_64 ---> Package krb5-libs.x86_64 0:1.15.1-34.el7 will be updated ---> Package krb5-libs.x86_64 0:1.15.1-37.el7_6 will be an update ---> Package krb5-server.x86_64 0:1.15.1-37.el7_6 will be installed updates/7/x86_64/filelists_db | 3.4 MB 00:00:01 --> Processing Dependency: libverto-module-base for package: krb5-server-1.15.1-37.el7_6.x86_64 --> Processing Dependency: /usr/share/dict/words for package: krb5-server-1.15.1-37.el7_6.x86_64 extras/7/x86_64/filelists_db | 243 kB 00:00:00 mysql-connectors-community/x86_64/filelists_db | 54 kB 00:00:00 mysql-tools-community/x86_64/filelists_db | 158 kB 00:00:00 mysql56-community/x86_64/filelists_db | 732 kB 00:00:36 zabbix/x86_64/filelists_db | 46 kB 00:00:00 zabbix-non-supported/x86_64/filelists | 660 B 00:00:00 ---> Package krb5-workstation.x86_64 0:1.15.1-37.el7_6 will be installed --> Running transaction check ---> Package keyutils-libs-devel.x86_64 0:1.5.8-3.el7 will be installed ---> Package libcom_err-devel.x86_64 0:1.42.9-13.el7 will be installed ---> Package libkadm5.x86_64 0:1.15.1-37.el7_6 will be installed ---> Package libselinux-devel.x86_64 0:2.5-14.1.el7 will be installed --> Processing Dependency: libsepol-devel(x86-64) >= 2.5-10 for package: libselinux-devel-2.5-14.1.el7.x86_64 --> Processing Dependency: pkgconfig(libsepol) for package: libselinux-devel-2.5-14.1.el7.x86_64 --> Processing Dependency: pkgconfig(libpcre) for package: libselinux-devel-2.5-14.1.el7.x86_64 ---> Package libverto-devel.x86_64 0:0.2.5-4.el7 will be installed ---> Package libverto-libevent.x86_64 0:0.2.5-4.el7 will be installed ---> Package words.noarch 0:3.0-22.el7 will be installed --> Running transaction check ---> Package libsepol-devel.x86_64 0:2.5-10.el7 will be installed ---> Package pcre-devel.x86_64 0:8.32-17.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved =================================================================================================================================================================================================================== Package Arch Version Repository Size =================================================================================================================================================================================================================== Installing: krb5-devel x86_64 1.15.1-37.el7_6 updates 271 k krb5-server x86_64 1.15.1-37.el7_6 updates 1.0 M krb5-workstation x86_64 1.15.1-37.el7_6 updates 816 k Updating: krb5-libs x86_64 1.15.1-37.el7_6 updates 803 k Installing for dependencies: keyutils-libs-devel x86_64 1.5.8-3.el7 base 37 k libcom_err-devel x86_64 1.42.9-13.el7 base 31 k libkadm5 x86_64 1.15.1-37.el7_6 updates 178 k libselinux-devel x86_64 2.5-14.1.el7 base 187 k libsepol-devel x86_64 2.5-10.el7 base 77 k libverto-devel x86_64 0.2.5-4.el7 base 12 k libverto-libevent x86_64 0.2.5-4.el7 base 8.9 k pcre-devel x86_64 8.32-17.el7 base 480 k words noarch 3.0-22.el7 base 1.4 M Transaction Summary =================================================================================================================================================================================================================== Install 3 Packages (+9 Dependent packages) Upgrade 1 Package Total download size: 5.2 M Downloading packages: Delta RPMs disabled because /usr/bin/applydeltarpm not installed. (1/13): keyutils-libs-devel-1.5.8-3.el7.x86_64.rpm | 37 kB 00:00:00 (2/13): krb5-devel-1.15.1-37.el7_6.x86_64.rpm | 271 kB 00:00:00 (3/13): krb5-libs-1.15.1-37.el7_6.x86_64.rpm | 803 kB 00:00:00 (4/13): libcom_err-devel-1.42.9-13.el7.x86_64.rpm | 31 kB 00:00:00 (5/13): krb5-server-1.15.1-37.el7_6.x86_64.rpm | 1.0 MB 00:00:01 (6/13): krb5-workstation-1.15.1-37.el7_6.x86_64.rpm | 816 kB 00:00:00 (7/13): libkadm5-1.15.1-37.el7_6.x86_64.rpm | 178 kB 00:00:00 (8/13): libsepol-devel-2.5-10.el7.x86_64.rpm | 77 kB 00:00:00 (9/13): libselinux-devel-2.5-14.1.el7.x86_64.rpm | 187 kB 00:00:00 (10/13): libverto-devel-0.2.5-4.el7.x86_64.rpm | 12 kB 00:00:00 (11/13): libverto-libevent-0.2.5-4.el7.x86_64.rpm | 8.9 kB 00:00:00 (12/13): pcre-devel-8.32-17.el7.x86_64.rpm | 480 kB 00:00:00 (13/13): words-3.0-22.el7.noarch.rpm | 1.4 MB 00:00:00 ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 2.3 MB/s | 5.2 MB 00:00:02 Running transaction check Running transaction test Transaction test succeeded Running transaction Updating : krb5-libs-1.15.1-37.el7_6.x86_64 1/14 Installing : libkadm5-1.15.1-37.el7_6.x86_64 2/14 Installing : words-3.0-22.el7.noarch 3/14 Installing : libcom_err-devel-1.42.9-13.el7.x86_64 4/14 Installing : libsepol-devel-2.5-10.el7.x86_64 5/14 Installing : pcre-devel-8.32-17.el7.x86_64 6/14 Installing : libselinux-devel-2.5-14.1.el7.x86_64 7/14 Installing : libverto-libevent-0.2.5-4.el7.x86_64 8/14 Installing : libverto-devel-0.2.5-4.el7.x86_64 9/14 Installing : keyutils-libs-devel-1.5.8-3.el7.x86_64 10/14 Installing : krb5-devel-1.15.1-37.el7_6.x86_64 11/14 Installing : krb5-server-1.15.1-37.el7_6.x86_64 12/14 Installing : krb5-workstation-1.15.1-37.el7_6.x86_64 13/14 Cleanup : krb5-libs-1.15.1-34.el7.x86_64 14/14 Verifying : keyutils-libs-devel-1.5.8-3.el7.x86_64 1/14 Verifying : libverto-devel-0.2.5-4.el7.x86_64 2/14 Verifying : krb5-workstation-1.15.1-37.el7_6.x86_64 3/14 Verifying : krb5-libs-1.15.1-37.el7_6.x86_64 4/14 Verifying : libkadm5-1.15.1-37.el7_6.x86_64 5/14 Verifying : libverto-libevent-0.2.5-4.el7.x86_64 6/14 Verifying : pcre-devel-8.32-17.el7.x86_64 7/14 Verifying : libselinux-devel-2.5-14.1.el7.x86_64 8/14 Verifying : krb5-server-1.15.1-37.el7_6.x86_64 9/14 Verifying : libsepol-devel-2.5-10.el7.x86_64 10/14 Verifying : libcom_err-devel-1.42.9-13.el7.x86_64 11/14 Verifying : krb5-devel-1.15.1-37.el7_6.x86_64 12/14 Verifying : words-3.0-22.el7.noarch 13/14 Verifying : krb5-libs-1.15.1-34.el7.x86_64 14/14 Installed: krb5-devel.x86_64 0:1.15.1-37.el7_6 krb5-server.x86_64 0:1.15.1-37.el7_6 krb5-workstation.x86_64 0:1.15.1-37.el7_6 Dependency Installed: keyutils-libs-devel.x86_64 0:1.5.8-3.el7 libcom_err-devel.x86_64 0:1.42.9-13.el7 libkadm5.x86_64 0:1.15.1-37.el7_6 libselinux-devel.x86_64 0:2.5-14.1.el7 libsepol-devel.x86_64 0:2.5-10.el7 libverto-devel.x86_64 0:0.2.5-4.el7 libverto-libevent.x86_64 0:0.2.5-4.el7 pcre-devel.x86_64 0:8.32-17.el7 words.noarch 0:3.0-22.el7 Updated: krb5-libs.x86_64 0:1.15.1-37.el7_6 Complete! [root@node101.yinzhengjie.org.cn ~]#