cdh大数据实施方案

信息中心系统工程CDH实施方案修订历史版本版本日期编制人审核人批准人修订说明V0.12023-5-30形成初稿44/73名目\l“_TOC_250052“Cdh部署实施 6\l“_TOC_250051“安装环境预备 6\l“_TOC_250050“Cloudera安装包下载 6\l“_TOC_250049“Cdh安装前系统配置 7\l“_TOC_250048“上传centos7.6镜像及cdh所需安装包 7\l“_TOC_250047“Centos离线源配置 8\l“_TOC_250046“配置cloudera离线源 9\l“_TOC_250045“配置静态IP地址〔全部节点〕 9\l“_TOC_250044“及selinux〔全部节点〕 10\l“_TOC_250043“CM配置无密码登录到其他节点 11\l“_TOC_250042“编辑hosts文件〔全部节点〕 11\l“_TOC_250041“配置NTP效劳〔全部节点〕 12\l“_TOC_250040“禁用swap〔全部节点〕 14\l“_TOC_250039“安装JDK〔全部节点〕 14\l“_TOC_250038“配置MySQL-JDBC驱动包〔全部节点〕 14\l“_TOC_250037“禁用透亮页〔全部节点〕 14\l“_TOC_250036“配置MySQL集群 15\l“_TOC_250035“安装MySQL5.7 15\l“_TOC_250034“初始化数据库 15\l“_TOC_250033“配置MySQL集群HA 16\l“_TOC_250032“安装配置cloudera根底效劳 24\l“_TOC_250031“安装规划效劳器 24\l“_TOC_250030“安装clouderamanager 24\l“_TOC_250029“配置cdh 24\l“_TOC_250028“建立cdh所需数据库 24\l“_TOC_250027“同步数据库 25\l“_TOC_250026“启动效劳 25\l“_TOC_250025“安装cdh 26\l“_TOC_250024“登录cdh安装界面 26\l“_TOC_250023“在欢送界面点击-连续 26\l“_TOC_250022“同意用户许可-连续 27\l“_TOC_250021“上传license 27\l“_TOC_250020“集群安装欢送界面-连续 28\l“_TOC_250019“输入集群名称-连续 28\l“_TOC_250018“输入主机名点击-搜寻，看到全部主机后点击连续 28\l“_TOC_250017“输入配置好的离线源地址-连续 29\l“_TOC_250016“选择安装JDK-连续 29\l“_TOC_250015“输入ssh后台登录密码-连续 29\l“_TOC_250014“等待agent和parcels自动安装完成 30\l“_TOC_250013“完成后连续 30\l“_TOC_250012“选择安装组件-连续 30\l“_TOC_250011“选择所需安装包-连续 31\l“_TOC_250010“测试数据库连接成功后-连续 31\l“_TOC_250009“依据实际状况选择安装名目-连续 31\l“_TOC_250008“等待安装完成-连续 32\l“_TOC_250007“点击完成，完安装 32\l“_TOC_250006“安装成功界面预览 32\l“_TOC_250005“Cloudera个组件HA配置 33\l“_TOC_250004“搭建Zookeeper集群 33\l“_TOC_250003“通过CM界面点击添加效劳 33\l“_TOC_250002“选择Zookeeper-连续 33\l“_TOC_250001“选择安装主机 33\l“_TOC_250000“配置Zookeeper数据名目 34等待安装完成-连续 35点击完成以完成安装 35HDFS高可用配置 35通过主界面进入HDFS 35点击操作-启用HDFS高可用 36自定义HDFS集群名称 36选择主机 36指定journalNode数据的存储名目 37启用HDFS高可用模式 37启动成功-完成 37查看HDFS的WebUI 38访问NameNode的WebUI 38查看HDFS实例是否启动成功 38更hive的metastore 38启动hive 39YARN高可用配置 40CM治理页面点击YARN 40选择启用高可用 40选择主机 41等待安装完成 41WebUI查看结果 42查看YARN主备状态 42Hive高可用配置 43CM页面点击Hive进入配置 43进入配置页面 43进入“实例”,添加hive metastore角色实例 43选择主机 44默认端口-完成 44重启hive效劳 44hiveserver2启用负载均衡 44配置kerberos安全效劳 47Kerberos集群安装配置 47KDC主效劳器安装软件包 47编辑主效劳器配置文件 47KDC备效劳器安装配置 48初始化KDC主效劳器数据库 48将主节点数据拷贝到备节点 49配置kerberos客户端 50配置KDC主从同步 50在主备KDC启动效劳 50数据库同步到备KDC数据库中 51启动备KDC效劳 51KDC集群效劳测试 52使用kadmin.local添加治理员用户 52在kerberos客户端的进展登陆操作 52查看主KDC的允许状态 53查看备KDC的运行状态 53，观看Kerberos客户端是否可用 53创立Clouderamanager治理员账号 54Cloudera集成配置kerberos 55在CM界面点击治理-安全进入配置 55启用kerberos 55全部勾选 55配置KDC信息 56KRB5配置 56配置KDCAccountManager凭据 56导入KDCAccountManager凭据 57Configurekerberos默认连续 57等待安装完成 57Cloudera权限治理配置Sentry 58添加sentry效劳 58CM治理页面添加效劳 58选择sentry效劳-连续 58选择主机-连续 59选择数据库 59将sentry添加到集群 59完成安装 60Sentry设置 60Hive设置 60在配置界面去掉途中的勾选 61Hive效劳勾选sentry 61设置hdfs的把握列表和sentry同步 62Sentry高可用配置 62CM界面进入sentry配置界面 62启用sentry高可用 63选择高可用主机 63完成安装 63查看sentry是否安装成功 64Impala负载均衡配置 65系统配置 65安装haproxy 65编辑haproxy配置文件 65启动haproxy效劳 65CM配置 66CM界面点击impala进入配置界面 66配置LoadBalancer 66重启impala效劳 67重启过时效劳 67马上重启 67等等效劳完成重启 68查看负载均衡配置是否成功 68测试impala-shell连接 68登录效劳器 68登录负载均衡地址测试 69添加主机到集群 70在CM治理界面点击添加主机 70选择集群-连续 70搜寻主机 70配置存储库 71选择JDK 71输入系统root密码 72安装agent 72安装parcels 72检查主机完成后-连续 73选择安装主机模板 73执行安装命令 73完成安装 74Cdh部署实施由于内网虚拟机不能连接互联网，宿主操作系统承受centos7.6，本次安装承受离线安装方式进展部署。安装环境预备Cloudera安装包下载安装包下载地址：s://archive.cloudera/cm6/6.3.1/redhat7/yum/RPMS/x86_64/下载如下安装包：CDH6.3.2安装包地址为：s://archive.cloudera/cdh6/6.3.2/parcels/，下载如下包：Cdh安装前系统配置cdh所需安装包Xshellcentos7.6cdh所需安装包到效劳器上传centos7.6镜像cdh安装包Centos离线源配置centos7.6效劳其他节点通过协议进展安装离线源数据包。[root@cdh01~]#yuminstalld–y[root@cdh01~]#systemctlenabled&&systemctlstartd[root@cdh01~]#mkdir/var/www/html/centos[root@cdh01~]#mount–oloopCentos7.iso/var/www/html/centos[root@cdh01~]#mv/etc/yum.repo/*.repo/home[root@cdh01~]#vicentos.repo[centos]“:///centos/“baseurl=:///centos/gpgcheck=1“:///centos/RPM-GPG-KEY-CentOS-7“gpgkey=:///centos/RPM-GPG-“:///centos/RPM-GPG-KEY-CentOS-7“KEY-“:///centos/RPM-GPG-KEY-CentOS-7“CentOS-7centos.repo文件拷贝到其他节点的/etc/yum.repo/下[root@cdh01~]#shscp.sh离线源[root@cdh01~]#mkdir/var/www/html/cloudera[root@cdh01~]#mvcloudera/RPM/var/www/html/cloudera[root@cdh01~]#mvcloudera/xml/var/www/html/cloudera[root@cdh01~]#mv/var/www/html/cloudera/xml/var/www/html/cloudera/repodata[root@cdh01~]#vim/etc/yum.repos.d/cloudera.repocloudera.repo拷贝到其他节点配置静态IP地址〔全部节点〕[root@cdh01network-scripts]#catifcfg-bond0#例如[root@cdh01network-scripts]#catifcfg-enp175s0f0[root@cdh01network-scripts]#catifcfg-enp176s0f0selinux〔全部节点〕[root@cdh01~]#systemctlstopfirewalld关闭防火墙[root@cdh01~]#systemctldisablefirewalld制止防火墙开机自启[root@cdh01~]#vim/etc/selinux/config—>SELINUX=disabled(修改后重启系统)CM配置无密码登录到其他节点[root@cdh01~]#ssh-keygen-trsa #一路回车拷贝秘钥文件到其他节点[root@cdh01~]#shscp.shhosts文件〔全部节点〕[root@cdh01~]#cathosts.sh[root@cdh01~]#shhosts.sh[root@cdh01~]#shscp.sh效劳〔全部节点〕效劳器端配置Cdh01cdh01效劳器做时钟2.[root@cdh01cloudera]#vim/etc/ntp.confrestrict2nomodifynotrapnoquery 允许时钟效劳器修改本地时间serverfudgestartum10 时钟效劳器故障时以本地时间为准[root@cdh01cloudera]#ntpdate2 同步时钟[root@cdh01cloudera]#systemctlenablentpd[root@cdh01cloudera]#systemctlstartntpd[root@cdh01cloudera]#systemctlstatusntpd开启定时同步时间[root@cdh01cloudera]#crontab–e*/5****/sbin/ntpdate–u2 5分钟同步一次时间客户端配置〔全部客户节点〕[root@cdh03~]#vim/etc/ntp.conf 例如restrictnomodifynotrapnoquery 允许时钟效劳器修改本地时间[root@cdh03~]#systemctlenablentpd[root@cdh03~]#ntpdate同步时间[root@cdh03~]#systemctlstartntpd[root@cdh03~]#crontab–e*/8****/sbin/ntpdate–u 每8分钟同步一次时间[root@cdh03~]#hwclock–w 同步本地时间到BIOS禁用swap〔全部节点〕[root@cdh01~]#echo“vm.swappiness=1“>>/etc/sysctl.conf[root@cdh01~]#echo1>/proc/sys/vm/swappiness[root@cdh01~]#vim/etc/fstab修改配置文件后重启系统生效安装JDK〔全部节点〕--nogpgcheck–yJava环境变量，添加如下内容到/etc/profile[root@cdh01~]#source/etc/profile[root@cdh01~]#java–versionMySQL-JDBC驱动包〔全部节点〕[root@cdh01~]#mkdir-p/usr/share/java例如[root@cdh01~]#mv/opt/mysql-j/mysql-connector-java-5.1.34.jar/usr/share/java/[root@cdh01~]#mysql-connector-java-5.1.34.jarmysql-connector-java.jar禁用透亮页〔全部节点〕[root@cdh01~]#echonever>/sys/kernel/mm/transparent_huge/defrag[root@cdh01~]#echonever>/sys/kernel/mm/transparent_huge/enabledMySQL集群主机主机IPVIPcdh02.irc00cdh26.irc6cdh02cdh26MySQLRPM包[root@manager~]#tar–xfmysql-5.7.26-1.el7.x86_64.rpm-bundle.tar解压缩安装包[root@manager~]#rpm–qa|grepmariadb 查询mariadb，假设安装将其卸载[root@manager~]#yumremovemariadb*-y 卸载mariadb包[root@manager~]#rpm–ivhmysql-community-common-5.7.26-1.el7.x86_64.rpm[root@manager~]#rpm-ivhmysql-community-libs-5.7.26-1.el7.x86_64.rpm[root@manager~]#rpm-ivhmysql-community-client-5.7.26-1.el7.x86_64.rpm[root@manager~]#rpm-ivhmysql-community-server-5.7.26-1.el7.x86_64.rpm[root@manager~]#rpm-ivhmysql-community-libs-compat-5.7.26-1.el7.x86_64.rpm初始化数据库[root@cdh02~]#mysqld--initialize--user=mysql#mysqlmysql用户[root@cdh02~]#cat/var/log/mysqld.log#最终一行将会有随机生成的密码[root@cdh02~]#systemctlenablemysqld#开机自启动数据库[root@cdh02~]#systemctlstartmysqld#启动数据库[root@cdh02~]#mysql–uroot–pMySQLmysql>setPASSWORD=PASSWORD(”BIIpass01”)修改初始密码在另一台主机dh26上配置一样的操作HA效劳器cdh02.ircCdh26.irc

IP6

VIP00

安装效劳MySQL-master/slaveMySQL-master/slaveCdh02配置[root@cdh02~]#vim/etc/f#编辑配置文件，添加红框内容开启bin-log日志功能[root@cdh02~]#systemctlrestartmysqld#MySQL效劳使其生效[root@cdh02~]#mysql-uroot–p#登录数据库mysql>grantallon*.*toadmin@”%”identifiedby”BIIpass01”;#创立授权用户mysql>showmasterstatus;#查看bin-log日志内容Cdh26配置[root@cdh26~]#vim/etc/f#编辑配置文件，添加红框内容开启bin-log日志功能[root@cdh26~]#systemctlrestartmysqld#MySQL效劳使其生效[root@cdh26~]#mysql-uroot–p#登录数据库mysql>grantallon*.*toadmin@”%”identifiedby”BIIpass01”;#创立授权用户mysql>showmasterstatus;#查看bin-log日志内容配置主主同步[root@cdh26~]#mysql-uroot–p#MySQLcdh26配置同步CHANGEMASTERTOMASTER_HOST=””,MASTER_USER=”admin”,MASTER_PASSWORD=”BIIpass01”,MASTER_LOG_FILE=”mysql-bin.000001”,MASTER_LOG_POS=435;mysql>startslave;mysql>showslavestatus\G;查看状态，红框都为yes表示成功[root@cdh02~]#mysql-uroot–pcdh02cdh26同步CHANGEMASTERTOMASTER_HOST=”6”,MASTER_USER=”admin”,MASTER_PASSWORD=”BIIpass01”,MASTER_LOG_FILE=”mysql-bin.000002”,MASTER_LOG_POS=145;mysql>startslave;mysql>showslavestatus\G;查看状态，红框都为yes表示成功验证数据库是否同步1cdh02cdh库mysql>createdatabasecdh;2cdh26查看是否同步成功，有则表示成功3cdh26cdh库mysql>dropdatabasecdh;4cdh02cdh库是否存在，存在表示同步失败，不存在表示成功keepalived配置cdh02配置1、安装keepalived所需软件包[root@cdh02~]#yuminstallkeepalivedipvsadm–y2、修改配置文件[root@cdh02keepalived]#vimkeepalived.conf3、开机启动效劳[root@cdh02keepalived]#systemctlenablekeepalived4、启动效劳[root@cdh02keepalived]#systemctlstartkeepalived5、检查启动结果，看到红框内容表示成功Cdh26配置1、安装keepalived所需软件包[root@cdh26~]#yuminstallkeepalivedipvsadm–y2、修改配置文件3、开机启动效劳[root@cdh26keepalived]#systemctlenablekeepalived4、启动效劳[root@cdh26keepalived]#systemctlstartkeepalived5VIP，当主节点故障时备节点接收主节点，自动启动VIP集群检测脚本1、mysql_check.sh脚本内容2run.sh当效劳停顿后，通过效劳检查脚本启动停顿效劳3、效劳自动检查配置[root@cdh02keepalived]#crontab–e*/1****sh/etc/keepalived/run.shcdh02cdh26一样cloudera根底效劳安装规划效劳器效劳器效劳器IP安装效劳cdh01.ircclouderamanagercdh02.ircCDH-1+MySQLcdh03.ircCDH-2cdh04.irc工具节点cdh05.ircDataNodecdh06.ircDataNodecdh07.ircDataNodecdh08.ircDataNodecdh25.irc5clouderamanagercdh26.irc6CDH-3+MySQL[root@cdh02]#yuminstallcloudera-manager-*.rpm–y[root@cdh25]#yuminstallcloudera-manager-*.rpm–y[root@cdh02]#mv/root/cloudera/parcels/*/opt/cloudera/parcel-repo#parcel包移动到指定位置[root@cdh25]#mv/root/cloudera/parcels/*/opt/cloudera/parcel-repocdh所需数据库MySQL[(none)]>createdatabasecmserverDEFAULTCHARSETutf8COLLATEutf8_general_ci;MySQL[(none)]>grantalloncmserver.*tocm@”%”identifiedby”123”;MySQL[(none)]>createdatabasemetastoredefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonmetastore.*tohiveuser@”%”identifiedby”123”;MySQL[(none)]>createdatabaseamondefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonamon.*toamon@”%”identifiedby”123”;MySQL[(none)]>createdatabasermandefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonrman.*torman@”%”identifiedby”123”;MySQL[(none)]>createdatabaseooizedefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonooize.*toooize@”%”identifiedby”123”;MySQL[(none)]>createdatabasehuedefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonhue.*tohue@”%”identifiedby”123”;MySQL[(none)]>createdatabasemanagerdefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonmanager.*tomanager@”%”identifiedby”123”;MySQL[(none)]>createdatabaseNvaAudidefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonNvaAudi.*toNvaAudi@”%”identifiedby”123”;MySQL[(none)]>createdatabaseNvaMetdefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonNvaMet.*toNvaMet@”%”identifiedby”123”;MySQL[(none)]>createdatabaseamdefaultcharsetutf8collateutf8_general_ci;MySQL[(none)]>grantallprivilegesonam.*toam@”%”identifiedby”123”;同步数据库[root@cdh01~]#/opt/cloudera/cm/schema/scm_prepare_database.shmysql-h00cmservercm123启动效劳[root@cdh01~]#systemctlenablecloudera-scm-server[root@cdh01~]#systemctlstatuscloudera-scm-server44/73cdhcdh安装界面在任意扫瞄器输入登录界面地址：://:7180进入界面用户名：admin密码：admin在欢送界面点击-连续44/73同意用户许可-连续license1、选择专业版2license-连续集群安装欢送界面-连续输入集群名称-连续输入主机名点击-搜寻，看到全部主机后点击连续44/73输入配置好的离线源地址-连续JDK-连续ssh后台登录密码-连续44/73parcels自动安装完成完成后连续选择安装组件-连续选择所需安装包-连续测试数据库连接成功后-连续依据实际状况选择安装名目-连续等待安装完成-连续点击完成，完安装安装成功界面预览ClouderaHA配置Zookeeper集群CM界面点击添加效劳Zookeeper-连续选择安装主机Zookeeper集群为奇数仲裁，所以至少需要三台效劳器数据名目等待安装完成-连续点击完成以完成安装HDFS高可用配置HDFS点击操作-HDFS高可用集群名称选择主机数据的存储名目留意：journalNode安装名目不能与namenode安装名目一样高可用模式启动成功-完成实例是否启动成功hivemetastore首先停顿hivehue效劳，然后到hive更hiveYARN高可用配置YARN选择启用高可用选择主机等待安装完成查看结果主备状态Hive高可用配置Hive进入配置进入配置页面DBTokenStore，然后选择org.apache.hadoop.hive.thrift.DBTokenStore，如图进入“实例”,添加hive metastore角色实例选择主机默认端口-完成hive效劳hiveserver2启用负载均衡1、在一台主节点上安装haproxy[root@cdh04~]#yuminstallhaproxy2、进入hive效劳添加多个hiveserver2实例3、配置haproxy[root@cdh04~]#vim/etc/haproxy/haproxy.cfg5、进入配置，搜寻load,haproxysource进展均衡的端口(hive-hue),不hue会查询hive会消灭特别6、重启hive效劳7、查看hiveserver2实例状态正常kerberos安全效劳Kerberos集群安装配置KDC主效劳器安装软件包[root@cdh01~]#yum-yinstallkrb5-serverkrb5-auth-dialogkrb5-workstationkrb5-develkrb5-libsopenldap-clients编辑主效劳器配置文件[root@cdh01~]#vim/etc/krb5.conf#Configurationsnippetsmaybeplacedinthisdirectoryaswellincludedir/etc/krb5.conf.d/[logging]default=FILE:/var/log/krb5libs.logkdc=FILE:/var/log/krb5kdc.logadmin_server=FILE:/var/log/kadmind.log[libdefaults]default_realm=IRCdns_lookup_realm=falseticket_lifetime=10drenew_lifetime=10dforwardable=truerdns=falsepkinit_anchors=/etc/pki/tls/certs/ca-bundle.crt[realms]IRC={kdc=cdh01.irc:88kdc=cdh25.irc:88admin_server=cdh01.irc:749default_domain=IRC}[domain_realm].irc=IRCirc=IRC[kdc]profile=/var/kerberos/krb5kdc/kdc.conf[root@cdh01~]#vim/var/kerberos/krb5kdc/kdc.conf[root@cdh01~]#vim/var/kerberos/krb5kdc/kadm5.aclKDC备效劳器安装配置[root@cdh25~]#yuminstall-ykrb5-serveropenldap-clientskrb5-workstationkrb5-libs[root@cdh25~]#vim/var/kerberos/krb5kdc/kpropd.aclKDC主效劳器数据库[root@cdh01~]#kdb5_utilcreate-rIRC–s[root@cdh01~]#kadmin.local-q“ank-randkey“mailto:host/cdh01.irc@IRC“host/cdh01.irc@IRC“[root@cdh01~]#kadmin.local-q“ank-randkey“mailto:host/cdh25.irc@IRC“host/cdh25.irc@IRC“[root@cdh01~]#kadmin.local-q“xst“mailto:host/cdh01.irc@IRC“host/cdh01.irc@IRC“[root@cdh01~]#kadmin.local-q“xst“mailto:host/cdh25.irc@IRC“host/cdh25.irc@IRC“[root@cdh01~]#klist-ket/etc/krb5.keytab将主节点数据拷贝到备节点[root@cdh01~]#scp/etc/krb5.conf5:/etc/[root@cdh01~]#scp/var/kerberos/krb5kdc/kdc.conf5:/var/kerberos/krb5kdc/[root@cdh01~]#scp/var/kerberos/krb5kdc/kadm5.acl5:/var/kerberos/krb5kdc/[root@cdh01~]#scp/var/kerberos/krb5kdc/.k5.IRC5:/var/kerberos/krb5kdc/[root@cdh01~]#scp/etc/krb5.keytab5:/etc/krb5.keytabkerberos客户端[root@cdh03~]#yuminstall-ykrb5-workstationkrb5-devel #全部客户端节点都要安装[root@cdh01~]#for i in {3..29};do scp /etc/krb5.conf10.254.16.$i:/etc/krb5.conf;done拷贝krb5.conf到客户端KDC主从同步KDC启动效劳KDC主效劳器[root@cdh01~]#systemctlstartkrb5kdc[root@cdh01~]#systemctlenablekrb5kdc[root@cdh01~]#systemctlstatuskrb5kdc[root@cdh01~]#systemctlstartkadmin[root@cdh01~]#systemctlenablekadmin[root@cdh01~]#systemctlstatuskadminKDC备效劳器[root@cdh25~]#systemctlstartkprop[root@cdh25~]#systemctlenablekprop[root@cdh25~]#systemctlstatuskpropKDC数据库中[root@cdh01~]#kdb5_utildump/var/kerberos/krb5kdc/slave_datatrans[root@cdh01~]#kprop-f/var/kerberos/krb5kdc/slave_datatranscdh25.irc设置自动同步脚本[root@cdh01~]#mkdir/var/kerberos/{shell,log}[root@cdh01~]#vim/var/kerberos/shell/dump_principal.sh[root@cdh01~]#chmod+x/var/kerberos/shell/dump_principal.sh[root@cdh01~]#crontab–e*/50 * * * * /bin/date >>/var/kerberos/log/dump.log 2>&1;/var/kerberos/shell/dump_principal.sh>>/var/kerberos/log/dump.log2>&1KDC效劳[root@cdh25~]#systemctlstartkrb5kdc[root@cdh25~]#systemctlenablekrb5kdc[root@cdh25~]#systemctlstatuskrb5kdcKDC集群效劳测试使用kadmin.local添加治理员用户[root@cdh01~]#kadmin.local-q“addprincadmin“治理员账号：admin密码：admin[root@cdh01~]#kadmin.local-q“listprincs“kerberos客户端的进展登陆操作[root@cdh08~]#kinitadmin[root@cdh