[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = AUTOBKR.COM
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true

[realms]
 AUTOBKR.COM = {
  kdc = kvm-guest-04.rhts.eng.bos.redhat.com
  admin_server = kvm-guest-04.rhts.eng.bos.redhat.com
 }

[domain_realm]
 kvm-guest-04.rhts.eng.bos.redhat.com = AUTOBKR.COM

    service kadmin stop                                                                                                                                                                                                        
    service krb5kdc stop                                                                                                                                                                                                       
                                                                                                                                                                                                                               
    echo "Removing old krb files"                                                                                                                                                                                              
    rm -fv /etc/krb5.keytab                                                                                                                                                                                                    
    rm -fv /var/kerberos/krb5kdc/principal                                                                                                                                                                                     
    rm -fv /var/kerberos/krb5kdc/principal.kadm5                                                                                                                                                                               
    rm -fv /var/kerberos/krb5kdc/principal.kadm5.lock                                                                                                                                                                          
    rm -fv /var/kerberos/krb5kdc/principal.ok                                                                                                                                                                                  
    rm -fv /var/kerberos/krb5kdc/kadm5.acl                                                                                                                                                                                     
    rm -fv /tmp/krb5cc_*                                                                                                                                                                                                       
    rm -fv /var/tmp/krb5kdc_rcache                                                                                                                                                                                             
    rm -fv /var/tmp/rc_kadmin_0                                                                                                                                                                                                
                                                                                                                                                                                                                               
    kdc_acl_conf="/var/kerberos/krb5kdc/kadm5.acl"                                                                                                                                                                             
    echo "Making $kdc_acl_conf"                                                                                                                                                                                                
    echo "*/admin@EXAMPLE.COM     *" >> $kdc_acl_conf                                                                                                                                                                          
                                                                                                                                                                                                                               
    kdb5_util create -s -P redhat                                                                                                                                                                                              
    kadmin.local -q "addprinc -pw redhat root/admin"                                                                                                                                                                           
                                                                                                                                                                                                                               
    kadmin.local -p root/admin -q "addprinc -randkey nfs/$HOSTNAME"                                                                                                                                                            
    kadmin.local -p root/admin -q "ktadd -e des-cbc-crc:normal -k /etc/krb5.keytab nfs/$HOSTNAME"                                                                                                                              
                                                                                                                                                                                                                               
    kadmin.local -p root/admin -q "addprinc -randkey host/$HOSTNAME"                                                                                                                                                           
    kadmin.local -p root/admin -q "ktadd -e des-cbc-crc:normal -k /etc/krb5.keytab host/$HOSTNAME"                                                                                                                             
                                                                                                                                                                                                                               
    kadmin.local -p root/admin -q "listprincs"                                                                                                                                                                                 
    klist -e -k -t /etc/krb5.keytab                                                                                                                                                                                            
                                                                                                                                                                                                                               
    service krb5kdc start                                                                                                                                                                                                      
    service kadmin start

setenv KRB5CCNAME /tmp/krb5cc_jdoe_ncsa

Back to top
krb_notes.txt · Last modified: 2011/09/25 18:00 by Jan Stancek
Sitemap Search: