adding some config files for kerberos.
This commit is contained in:
parent
8f882ffcd9
commit
e6f94f7eed
|
@ -0,0 +1,19 @@
|
||||||
|
install server
|
||||||
|
yum install krb5-server
|
||||||
|
and if the libs are not installed
|
||||||
|
yum install krb5-libs
|
||||||
|
|
||||||
|
set a hostname
|
||||||
|
hostname noplace.org
|
||||||
|
|
||||||
|
copy krb5.conf to /etc/
|
||||||
|
copy kdc.conf to /var/kerberos/krb5kdc
|
||||||
|
|
||||||
|
init the database and admin principals.
|
||||||
|
kdb5_util create -s
|
||||||
|
add an admin principal
|
||||||
|
kadmin.local
|
||||||
|
while running kadmin.local enter
|
||||||
|
addprinc master/admin
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,14 @@
|
||||||
|
[realms]
|
||||||
|
NOPLACE.ORG = {
|
||||||
|
database_name = /var/kerberos/krb5kdc/princiapal
|
||||||
|
admin_keytab = /var/kerberos/krb5kdc/kadm5.acl
|
||||||
|
acl_file = /var/kerberos/krb5kdc/kadm5.acl
|
||||||
|
dict_file = /var/kerberos/krb5kdc/kadm5.dict
|
||||||
|
key_stash_file = /var/kerberos/krb5kdc/.k5.NOPLACE.ORG
|
||||||
|
kadmind_port = 749
|
||||||
|
max_life = 10h 0m 0s
|
||||||
|
max_renewable_life = 7d 0h 0m 0s
|
||||||
|
master_key_type = dec3-hmac-sha1
|
||||||
|
supported_enctypes = dec3-hmac-sha1:nromal des-cbc-crc:normal
|
||||||
|
}
|
||||||
|
|
|
@ -0,0 +1,18 @@
|
||||||
|
[libdefaults]
|
||||||
|
default_realm = NOPLACE.ORG
|
||||||
|
|
||||||
|
[realms]
|
||||||
|
NOPLACE.ORG = {
|
||||||
|
kdc = freebsd.NOPLACE.ORG:88
|
||||||
|
admin_server = NOPLACE.ORG:749
|
||||||
|
default_domain = NOPLACE.ORG
|
||||||
|
}
|
||||||
|
|
||||||
|
[domain_realm]
|
||||||
|
NOPLACE.ORG = NOPLACE.ORG
|
||||||
|
.NOPLACE.ORG = NOPLACE.ORG
|
||||||
|
|
||||||
|
[logging]
|
||||||
|
kdc = FILE:/var/log/krb5kdc.log
|
||||||
|
admin_server = FILE:/var/log/kadmin.log
|
||||||
|
default = FILE:/var/log/krb5lib.log
|
Loading…
Reference in New Issue