# Kerberos Installation

This is a shell script to deploy [MIT Kerberos](https://web.mit.edu/kerberos/) to a node, tune it for secure Hadoop use, and add an administrative principal for Cloudera Manager.  The goal of the script is to be idempotent and to serve as a template for translation into other Configuration Management frameworks/languages.

* Tested on RHEL/CentOS 6 and 7, Debian 7, and Ubuntu 14.04.

## Installation

```
GITREPO=~/git/teamclairvoyant/bash
KDC=localhost
REALM=HADOOP.COM
PRINC=cloudera-scm

scp -p -o StrictHostKeyChecking=no ${GITREPO}/services/install_kdc.sh ${KDC}:
ssh -t $KDC "sudo bash -x install_kdc.sh --realm $REALM --cm_principal $PRINC"
```

Grab the passwords that are output from the above command.

```
KDC : passsword1
cloudera-scm@HADOOP.COM : passsword2
```


# Kerberos Server Installation

This is a shell script to deploy [MIT Kerberos](https://web.mit.edu/kerberos/) to a node, tune it for secure Hadoop use, and add an administrative principal for Cloudera Manager.  The goal of the script is to be idempotent and to serve as a template for translation into other Configuration Management frameworks/languages.

* Tested on RHEL/CentOS 6 and 7, Debian 7, and Ubuntu 14.04.

## Installation

```
GITREPO=~/git/teamclairvoyant/bash
KDC=localhost
REALM=HADOOP.COM
PRINC=cloudera-scm

scp -p -o StrictHostKeyChecking=no ${GITREPO}/services/install_kdc.sh ${KDC}:
ssh -t $KDC "sudo bash -x install_kdc.sh --realm $REALM --cm_principal $PRINC"
```

Grab the passwords that are output from the above command.

```
KDC : passsword1
cloudera-scm@HADOOP.COM : passsword2
```

# Kerberos Client Installation

This can be run on all Kerboeros client machines.  It does not need to be run on the Kerberos servers.
No actual configuration of `/etc/krb5.conf` is done as we will have Cloudera Manager maintain the client configuration.

```
GITREPO=~/hadoop-deployment-bash

scp -p -o StrictHostKeyChecking=no ${GITREPO}/install_krb5.sh ${HOST}:
ssh -t $HOST 'sudo bash -x install_krb5.sh'
```


Add Kerberos Client Installation instructions.
Add Kerberos Client Installation instructions.
