Kerberos

1. 2015.08.03
   1. Introduction
      1. Kerberos is a computer network authentication protocol which works on the basis of 'tickets' to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner
   2. Install a new MIT KDC
      1. yum -y install krb5-server krb5-libs krb5-workstation
      2. vi/etc/krb5.conf
      3. Change the [realms] section of this file by replacing the default “kerberos.example.com” setting for the kdc and admin_server properties with the Fully Qualified Domain Name of the KDC server host
      4. kdb5_util create -s
      5. kadmin.local -q "addprinc admin/admin"
         
      6. /etc/rc.d/init.d/krb5kdc start 
      7. /etc/rc.d/init.d/kadmin start
      8. chkconfig krb5kdc on 
      9. chkconfig kadmin on