Kerberos常用命令總結

進入kadmin	kadmin.local/kadmin
創建數據庫	kdb5_util create -r JENKIN.COM -s
啓動kdc服務	service krb5kdc start
啓動kadmin服務	service kadmin start
修改當前密碼	kpasswd
測試keytab可用性	kinit -k -t /var/kerberos/krb5kdc/keytab/root.keytab root/[email protected]
查看keytab	klist -e -k -t /etc/krb5.keytab
清除緩存	kdestroy
通過keytab文件認證登錄	kinit -kt /var/run/cloudera-scm-agent/process/***-HIVESERVER2/hive.keytab hive/node2
kadmin模式下：
生成隨機key的principal	addprinc -randkey root/[email protected]
生成指定key的principal	Addprinc -pw **** admin/[email protected]
查看principal	listprincs
修改admin/admin的密碼	cpw -pw xxxx admin/admin
添加/刪除principle	addprinc/delprinc admin/admin
直接生成到keytab	ktadd -k /etc/krb5.keytab host/[email protected]
設置密碼策略(policy)	addpol -maxlife "90 days" -minlife "75 days" -minlength 8 -minclasses 3 -maxfailure 10 -history 10 user
添加帶有密碼策略的用戶	addprinc -policy user hello/[email protected]
修改用戶的密碼策略	modprinc -policy user1 hello/[email protected]
刪除密碼策略	delpol [-force] user
修改密碼策略	modpol -maxlife "90 days" -minlife "75 days" -minlength 8 -minclasses 3 -maxfailure 10 user