@harish Create the test user principal Let's try this out as root create user at OS level # useradd test Set password # passwd test evoke the kdc admin CLI, run these commands from /etc/security/keytabs # kadmin.local ..
kadmin.local: addprinc test@RXPERF.HDP.XX.COM
Quit kadmin
Kadmin.local: q Extract/Generate the keytab The extracting the keytab is done in the ktutil shell cmd a continuation from the previous step the keytab name and principal is an explicit input it’s usually good if it matches the user for easy identification. This will extract the keytab in the current directory i.e /etc/security/keytabs/ you can later move it to the user’s home directory or the /tmp directory #sudo ktutil
ktutil : addent –password –p test@RXPERF.HDP.XX.COM -k 1 -e RC4-HMAC
Password for test@RXPERF.HDP.XX.COM :
ktutil : wkt test.keytab
ktutil : q Now to validate the above steps run as the user test $ klist -kt /etc/security/keytabs/test.keytab The output should look like Keytab name: FILE:/etc/security/keytabs/test.keytab
KVNO Timestamp Principal
---- ----------------- --------------------------------------------------------
1 01/07/19 22:25:31 test@RXPERF.HDP.XX.COM (des3-cbc-sha1)
1 01/07/19 22:25:31 test@RXPERF.HDP.XX.COM (aes128-cts-hmac-sha1-96)
1 01/07/19 22:25:31 test@RXPERF.HDP.XX.COM (arcfour-hmac)
1 01/07/19 22:25:31 test@RXPERF.HDP.XX.COM (des-cbc-md5)
1 01/07/19 22:25:31 test@RXPERF.HDP.XX.COM (aes256-cts-hmac-sha1-96) Now grab a ticket using as test user format kinit -kt $keytab $principal $ kinit -kt /etc/security/keytabs/test.keytab test@RXPERF.HDP.XX.COM Check for ticket Klist Let me know if that works
... View more
