more /etc/krb5.conf
[logging]
default =FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = EXAMPLE.COM dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [realms] EXAMPLE.COM = { kdc = 10.211.55.5 admin_server = 10.211.55.5 } [domain_realm] kafka = EXAMPLE.COM zookeeper = EXAMPLE.COM weiwei = EXAMPLE.COM 10.211.55.5 = EXAMPLE.COM 127.0.0.1 = EXAMPLE.COM
kadmin.local
Authenticating as principal kafka/[email protected] with password.
kadmin.local: listprincs
K/[email protected]
[email protected]
host/[email protected] host/[email protected] kadmin/[email protected] kadmin/[email protected] kadmin/[email protected] kafka/[email protected] kafka/[email protected] kafka/[email protected] kafka/[email protected] krbtgt/[email protected] root/[email protected] zookeeper/[email protected] zookeeper/[email protected]
klist -t -e -k /var/kerberos/krb5kdc/kafka.keytab
Keytab name: FILE:/var/kerberos/krb5kdc/kafka.keytab
KVNO Timestamp Principal
---- ----------------- --------------------------------------------------------
3 07/24/16 00:58:30 kafka/[email protected] (aes256-cts-hmac-sha1-96) 3 07/24/16 00:58:30 kafka/[email protected] (aes128-cts-hmac-sha1-96) 3 07/24/16 00:58:30 kafka/[email protected] (des3-cbc-sha1) 3 07/24/16 00:58:30 kafka/[email protected] (arcfour-hmac) 3 07/24/16 00:58:30 kafka/[email protected] (des-hmac-sha1) 3 07/24/16 00:58:30 kafka/[email protected] (des-cbc-md5) 2 07/24/16 12:23:18 zookeeper/[email protected] (aes256-cts-hmac-sha1-96) 2 07/24/16 12:23:18 zookeeper/[email protected] (aes128-cts-hmac-sha1-96) 2 07/24/16 12:23:18 zookeeper/[email protected] (des3-cbc-sha1) 2 07/24/16 12:23:18 zookeeper/[email protected] (arcfour-hmac) 2 07/24/16 12:23:18 zookeeper/[email protected] (des-hmac-sha1) 2 07/24/16 12:23:18 zookeeper/[email protected] (des-cbc-md5) 2 07/25/16 11:31:37 kafka/[email protected] (aes256-cts-hmac-sha1-96) 2 07/25/16 11:31:37 kafka/[email protected] (aes128-cts-hmac-sha1-96) 2 07/25/16 11:31:37 kafka/[email protected] (des3-cbc-sha1) 2 07/25/16 11:31:37 kafka/[email protected] (arcfour-hmac) 2 07/25/16 11:31:37 kafka/[email protected] (des-hmac-sha1) 2 07/25/16 11:31:37 kafka/[email protected] (des-cbc-md5) 3 07/25/16 13:13:31 kafka/[email protected] (aes256-cts-hmac-sha1-96) 3 07/25/16 13:13:31 kafka/[email protected] (aes128-cts-hmac-sha1-96) 3 07/25/16 13:13:31 kafka/[email protected] (des3-cbc-sha1) 3 07/25/16 13:13:31 kafka/[email protected] (arcfour-hmac) 3 07/25/16 13:13:31 kafka/[email protected] (des-hmac-sha1) 3 07/25/16 13:13:31 kafka/[email protected] (des-cbc-md5) 2 07/25/16 15:07:58 zookeeper/[email protected] (aes256-cts-hmac-sha1-96) 2 07/25/16 15:07:58 zookeeper/[email protected] (aes128-cts-hmac-sha1-96) 2 07/25/16 15:07:58 zookeeper/[email protected] (des3-cbc-sha1) 2 07/25/16
