kerberos

 

https://www.freesion.com/article/25221275844/

 

https://www.jianshu.com/p/032cc462bbca

 

https://www.cnblogs.com/bainianminguo/p/12548175.html

 

https://blog.csdn.net/a118170653/article/details/43448155

kafka

https://blog.csdn.net/huanqingdong/article/details/84979110

 

https://www.cnblogs.com/yjt1993/p/13674183.html

 

https://www.orchome.com/1944

 

https://blog.csdn.net/lxyygiuh/article/details/111871144

 

https://blog.csdn.net/u012806692/article/details/86504701

 

https://www.orchome.com/500

 

klist -t -e -k /var/kerberos/krb5kdc/kafka.keytab

 

[root@hadoop140 krb5kdc]# klist -t -e -k kafka.keytab
Keytab name: FILE:kafka.keytab
KVNO Timestamp Principal
---- ------------------- ------------------------------------------------------
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (aes256-cts-hmac-sha1-96)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (aes128-cts-hmac-sha1-96)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (des3-cbc-sha1)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (arcfour-hmac)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (camellia256-cts-cmac)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (camellia128-cts-cmac)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (des-hmac-sha1)
1 2022-01-17T14:08:11 kafka/hadoop@EXAMPLE.COM (des-cbc-md5)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (aes256-cts-hmac-sha1-96)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (aes128-cts-hmac-sha1-96)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (des3-cbc-sha1)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (arcfour-hmac)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (camellia256-cts-cmac)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (camellia128-cts-cmac)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (des-hmac-sha1)
1 2022-01-17T14:14:46 kafka/hadoop140@EXAMPLE.COM (des-cbc-md5)

集群安装：

https://blog.csdn.net/csq2002/article/details/84800760

addAcl /mynode sasl:zookeeper/computer9@HADOOP.COM:cdrwa 设置节点权限

 

https://www.cnblogs.com/bugzeroman/p/12858256.html

 

https://www.jianshu.com/p/ca78a43ec107

 

zookeeper:

https://blog.csdn.net/m0_37911384/article/details/90406058

 

https://www.jianshu.com/p/23c08900f44e

 

export JVMFLAGS="-Djava.security.auth.login.config=/opt/zookeeper/conf/jaas.conf -Dzookeeper.allowSaslFailedClients=false"


https://blog.51cto.com/1992zhong/1958018
解决方法： 使用zkCli.sh -server host:port 访问。 同时zookeeper配置文件中sever部分的principal必须为zookeeper/<hostname>@<your realm>

GitHub - shafiquejamal/kafka-zookeeper-kerberos:

 

https://article.itxueyuan.com/ylgo9Q

sessionRequireClientSASLAuth=true #客户端必须 SASL 认证

https://article.itxueyuan.com/ylgo9Q

Server {
   com.sun.security.auth.module.Krb5LoginModule required
   useKeyTab=true
   keyTab="/home/hadoop/app/apache-zookeeper-3.6.3-bin/conf/zk-server.keytab"
   storeKey=true
   useTicketCache=false
   principal="zk-server/pxc1@ABC.COM";   #这里不同的主机上，需修改为本机的主机名
};