The kerberos configuration type updates to BDD's Kerberos configuration.
./bdd-admin.sh publish-config kerberos [operation] <option>
kerberos requires one of the following operations.
Operation | Description |
---|---|
on | Enables Kerberos. The -k, -t, and -p options must also be specified. |
config | Updates BDD's Kerberos configuration. At
least one option must be specified.
This is the command's default behavior, so this operation is optional. You can only use this if Kerberos is already enabled. |
kerberos supports the following options.
Option | Description |
---|---|
-k, --krb5 <file> | Updates the location of
krb5.conf in all BDD configuration files.
<file> must be the new
absolute path to the file.
krb5.conf must be moved to its new location on all BDD nodes before running this option. |
-t, --keytab <file> | Publishes the specified keytab file
to all BDD nodes.
<path> must be the
absolute path to the new keytab file.
The script renames this file bdd.keytab and copies it to $BDD_HOME/common/kerberos. |
-p, --principal <principal> | Publishes the specified principal to all BDD nodes. This option can't be used to change the primary component of the principal. |
For more information on updating your Kerberos configuration, see Updating BDD's Kerberos configuration.