kerberos 5

kadmin.local:  listprincs
K/M@JACK
kadmin/admin@JACK
kadmin/changepw@JACK
kadmin/hadoopmaster.jack@JACK
krbtgt/JACK@JACK
kadmin.local:  addprinc admin/admin@JACK
WARNING: no policy specified for admin/admin@JACK; defaulting to no policy
Enter password for principal "admin/admin@JACK":
Re-enter password for principal "admin/admin@JACK":
Principal "admin/admin@JACK" created.
kadmin.local:  delprinc admin                     
Are you sure you want to delete the principal "admin@JACK"? (yes/no): no
Principal "admin@JACK" not deleted
kadmin.local:  exit 
[root@hadoopmaster src]# su admin
su: user admin does not exist
[root@hadoopmaster src]# su admin
su: user admin does not exist
[root@hadoopmaster src]# kadmin.local
Authenticating as principal root/admin@JACK with password.
kadmin.local:  addprinc hadoop@JACK                        
WARNING: no policy specified for hadoop@JACK; defaulting to no policy
Enter password for principal "hadoop@JACK":
Re-enter password for principal "hadoop@JACK":
Principal "hadoop@JACK" created.
kadmin.local:  exit     
[root@hadoopmaster src]# kadmind
[root@hadoopmaster src]# krb5kdc
[root@hadoopmaster src]# su - hadoop
[hadoop@hadoopmaster ~]$ kinit hadoop@JACK
Password for hadoop@JACK:
[hadoop@hadoopmaster ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_501
Default principal: hadoop@JACK

Valid starting     Expires            Service principal
12/14/15 05:40:45  12/15/15 05:40:45  krbtgt/JACK@JACK
[hadoop@hadoopmaster ~]$


集群：
[root@hadoopslave2 src]# su - hadoop
[hadoop@hadoopslave2 ~]$ knint hadoop@Jack
-bash: knint: command not found
[hadoop@hadoopslave2 ~]$ kinit hadoop@JACK
Password for hadoop@JACK:
[hadoop@hadoopslave2 ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_501
Default principal: hadoop@JACK

Valid starting     Expires            Service principal
12/14/15 05:49:31  12/15/15 05:49:31  krbtgt/JACK@JACK
[hadoop@hadoopslave2 ~]$


[root@hadoopslave1 etc]# su - hadoop
[hadoop@hadoopslave1 ~]$ kinit hadoop@JACK
Password for hadoop@JACK:
[hadoop@hadoopslave1 ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_501
Default principal: hadoop@JACK

Valid starting     Expires            Service principal
12/14/15 05:51:22  12/15/15 05:51:22  krbtgt/JACK@JACK
[hadoop@hadoopslave1 ~]$


http://lihao312.iteye.com/blog/2075659

http://docs.spring.io/spring-data/rest/docs/current/reference/html/#_the_hal_browser

多谢：
http://blog.csdn.net/caizhongda/article/details/7947722