From a8b9effd455da8b84cd6c3d53d0785628cbe2eb4 Mon Sep 17 00:00:00 2001
From: zeekling <lingzhaohui@zeekling.cn>
Date: Sat, 16 Jul 2022 16:28:26 +0800
Subject: [PATCH] add kerberos config

---
 .gitignore           |   4 ++--
 client/cli.keytab    | Bin 0 -> 310 bytes
 client/env           |   4 ++++
 client/krb5.conf     |  20 ++++++++++++++++++++
 sample/Makefile      |  12 ++++++------
 server/env           |   3 +++
 server/hadoop.keytab | Bin 0 -> 430 bytes
 server/krb5.conf     |  20 ++++++++++++++++++++
 8 files changed, 55 insertions(+), 8 deletions(-)
 create mode 100644 client/cli.keytab
 create mode 100755 client/env
 create mode 100755 client/krb5.conf
 create mode 100755 server/env
 create mode 100644 server/hadoop.keytab
 create mode 100755 server/krb5.conf

diff --git a/.gitignore b/.gitignore
index cb91be4..241aed2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -176,5 +176,5 @@ cython_debug/
 a.out
 *.out
 *.o
-server
-client
+sample/sample_server
+sample/sample_client
diff --git a/client/cli.keytab b/client/cli.keytab
new file mode 100644
index 0000000000000000000000000000000000000000..0dd6731d928e94552ad03cc3a34fd9460580cb0e
GIT binary patch
literal 310
zcmZQ&VqjpfV_;<92yqP#(R23qWnfOu$pi{ACS5W;$H*YWpfEu`w>Ijw^V#E7O5R(W
zepLw-%vPE4LLp6M&N5b|pwA*e#d>&55M&V0F8A+B_rKJ0!PY6K=VKNJP=^^F9Rdsz
zS06vSc2<7tcXoLx*HT97AD)XA@$p?PW+7mgID<fRs|#<RSuyX&Z8_~lKbJ=Ub*SO7
ei-UpVknq{06bBX~0xFpqIQB$ObUt3DoC^SGK2vxA

literal 0
HcmV?d00001

diff --git a/client/env b/client/env
new file mode 100755
index 0000000..16a7856
--- /dev/null
+++ b/client/env
@@ -0,0 +1,4 @@
+PWD=$(pwd)
+KRB5_CONFIG=${PWD}/client/krb5.conf
+KRB5CCNAME=FILE:/tmp/krb5cc_cli_%{uid}
+KRB5_CCNAME=FILE:/tmp/krb5cc_cli_%{uid}
diff --git a/client/krb5.conf b/client/krb5.conf
new file mode 100755
index 0000000..b1d6ee2
--- /dev/null
+++ b/client/krb5.conf
@@ -0,0 +1,20 @@
+[logging]
+default = FILE:/var/log/krb5libs.log
+kdc = FILE:/var/log/krb5kdc.log
+admin_server = FILE:/var/log/kadmind.log
+
+[libdefaults]
+default_realm = TEST.COM
+default_ccache_name = FILE:/tmp/krb5cc_cli_%{uid}
+dns_lookup_realm = false
+dns_lookup_kdc = false
+ticket_lifetime = 24h
+renew_lifetime = 7d
+forwardable = true
+
+[realms]
+TEST.COM = {
+  kdc = krb5-kdc-server:88
+  admin_server = krb5-kdc-server
+}
+
diff --git a/sample/Makefile b/sample/Makefile
index 4a32714..389544f 100644
--- a/sample/Makefile
+++ b/sample/Makefile
@@ -1,7 +1,7 @@
 
 CC=gcc
 
-PROGRAM=client server
+PROGRAM=sample_client sample_server
 
 LIBSSL_LIBS=-lsasl2
 
@@ -14,17 +14,17 @@ all: $(PROGRAM)
 	@echo "build seccess!"
 	@echo ""
 
-client:sample-client.c
+sample_client:sample-client.c
 	$(CC) -g -c sample-client.c $(FINAL_FLAG)
-	$(CC) -g -o client sample-client.o $(FINAL_FLAG)
+	$(CC) -g -o sample_client sample-client.o $(FINAL_FLAG)
 	rm *.o
 
-server:sample-server.c
+sample_server:sample-server.c
 	$(CC) -g -c sample-server.c $(FINAL_FLAG)
-	$(CC) -g -o server sample-server.o $(FINAL_FLAG)
+	$(CC) -g -o sample_server sample-server.o $(FINAL_FLAG)
 	rm *.o
 
 clean:
-	rm server client
+	rm sample_server sample_client
 
 
diff --git a/server/env b/server/env
new file mode 100755
index 0000000..5e1daa2
--- /dev/null
+++ b/server/env
@@ -0,0 +1,3 @@
+PWD=$(pwd)
+export KRB5_CONFIG=${PWD}/server/krb5.conf
+export KRB5CCNAME=/tmp/krb5cc_hadoop_1000
diff --git a/server/hadoop.keytab b/server/hadoop.keytab
new file mode 100644
index 0000000000000000000000000000000000000000..6c3ced5016a860dc481c9a6e6ca9c62e63c3576c
GIT binary patch
literal 430
zcmZQ&VqjnhVqjw62yqP#(R23qWne2#Eh<YbV&Kn6Ov%qL&?`wTF40TQ&jl)EOuA%x
zmXSe-LE((a$`xh5j$KP-7VAh^z3RZ3<%($!<$j;*jZTy={Cw*UP_Yw<rV26$ggweK
znd~Q&dolfMU4`8IPe4<=NHOIcBZB~gM1*9<lKaiu1k!g^&b9qwF)zda_`E~KGo(m$
z6VNnq27%~S7v4UzV&0G2a@vc2E{_13Vnw2xI2bsjPVCvw!k)5?4BgBO95)&7%=L=h
G{|W$<bcSyL

literal 0
HcmV?d00001

diff --git a/server/krb5.conf b/server/krb5.conf
new file mode 100755
index 0000000..aba5aa5
--- /dev/null
+++ b/server/krb5.conf
@@ -0,0 +1,20 @@
+[logging]
+default = FILE:/var/log/krb5libs.log
+kdc = FILE:/var/log/krb5kdc.log
+admin_server = FILE:/var/log/kadmind.log
+
+[libdefaults]
+default_realm = TEST.COM
+default_ccache_name = FILE:/tmp/krb5cc_hadoop_%{uid}
+dns_lookup_realm = false
+dns_lookup_kdc = false
+ticket_lifetime = 24h
+renew_lifetime = 7d
+forwardable = true
+
+[realms]
+TEST.COM = {
+  kdc = krb5-kdc-server:88
+  admin_server = krb5-kdc-server
+}
+
-- 
2.45.2