安装Kerberos环境
sudo yum install -y krb5-devel krb5-server krb5-workstation安装Python运行环境
pip3 install -r requirements.txt备份Kerberos配置文件
sudo cp /etc/krb5.conf /etc/krb5.conf.bk
sudo cp /var/kerberos/krb5kdc/kdc.conf /var/kerberos/krb5kdc/kdc.conf.bk
sudo cp /var/kerberos/krb5kdc/kadm5.acl /var/kerberos/krb5kdc/kadm5.acl.bk样例配置文件位于Sample文件夹内
创建Kerberos数据库
sudo kdb5_util create -s -r EXAMPLE.COM配置防火墙
sudo firewall-cmd --permanent --add-service kerberos
sudo firewall-cmd --reload配置principle
sudo kadmin.localaddprinc HTTP/kerberos.example.com@EXAMPLE.COM导出管理员keytab
xst -norandkey -k /var/kerberos/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw导出HTTP认证 http.keytab
xst -norandkey -k http.keytab HTTP/kerberos.example.com@EXAMPLE.COM测试流程如下：
申请票据
kinit -kt http.keytab HTTP/kerberos.example.com@EXAMPLE.COM单元测试
KRB5_KTNAME=/home/admin/PycharmProjects/auth-kerberos/http.keytab pytest