在 AIX 上用 LDAP 主-副本拓扑配置 Kerberos 主-从 KDC
2009-07-12 08:35:08 来源:WEB开发网用 LDAP 主服务器配置主 KDC
用 LDAP 主和副本服务器配置从 KDC
配置和使用 IBM NAS 客户机测试设置,在主 KDC 或 LDAP 主服务器停止运行时测试故障转移机制
用 LDAP 主服务器配置主 KDC
正如前面提到的,将用两个 LDAP 主服务器配置主 KDC,不使用 LDAP 副本服务器。
可以使用 IBM NAS 命令 /usr/krb5/sbin/config.krb5 或 AIX 命令 mkkrb5srv 配置主 KDC。下面使用 mkkrb5srv 命令用 LDAP 主服务器配置主 KDC。在主 KDC 机器上,运行 mkkrb5ksrv,如下所示: bash-2.05b# mkkrb5srv -r TEST -d in.ibm.com -a admin/admin -l lmaster1.in.ibm.com -u
cn=admin -p adminpwd
Fileset Level State Description
----------------------------------------------------------------------------
Path: /usr/lib/objrepos
krb5.server.rte 1.4.0.7 COMMITTED Network Authentication Service
Server
Path: /etc/objrepos
krb5.server.rte 1.4.0.7 COMMITTED Network Authentication Service
Server
The -s option is not supported.
The administration server will be the local host.
Initializing configuration...
Creating /etc/krb5/krb5_cfg_type...
Creating /etc/krb5/krb5.conf...
Creating /var/krb5/krb5kdc/kdc.conf...
Creating database files...
Initializing database 'LDAP' for realm 'TEST'
master key name 'K/M@TEST'
Attempting to bind to one or more LDAP servers. This may take a while...
You are prompted for the database Master Password.
It is important that you DO NOT FORGET this password.
Enter database Master Password:
Re-enter database Master Password to verify:
Attempting to bind to one or more LDAP servers. This may take a while...
WARNING: no policy specified for admin/admin@TEST;
defaulting to no policy. Note that policy may be overridden by
ACL restrictions.
Enter password for principal "admin/admin@TEST":
Re-enter password for principal "admin/admin@TEST":
Principal "admin/admin@TEST" created.
Creating keytable...
Attempting to bind to one or more LDAP servers. This may take a while...
Creating /var/krb5/krb5kdc/kadm5.acl...
Starting krb5kdc...
Attempting to bind to one or more LDAP servers. This may take a while...
krb5kdc was started successfully.
Starting kadmind...
Attempting to bind to one or more LDAP servers. This may take a while...
kadmind was started successfully.
The command completed successfully.
Restarting kadmind and krb5kdc
Attempting to bind to one or more LDAP servers. This may take a while...
Attempting to bind to one or more LDAP servers. This may take a while...
bash-2.05b#
赞助商链接